Router(config)# access-list 101 deny ip 10.0.0.0 0.255.255.255 any
Router(config)# access-list 101 deny ip 127.0.0.0 0.255.255.255 any
Router(config)# access-list 101 deny ip 192.168.0.0 0.0.255.255 any
Router(config)# access-list 101 deny ip 172.16.0.0 0.15.255.255 any
Router(config)# access-list 101 deny ip 224.0.0.0 7.255.255.255 any
阻絕掉各種icmp的訊息回應,不允許對方來Ping我們的電腦:
Router(config)# access-list 101 deny icmp any any echo
Router(config)# access-list 101 deny tcp any any eq echo
Router(config)# access-list 101 deny udp any any eq echo
阻檔所指定的Port口通訊(serial 0 的 inbound):
access-list
Router(config)# access-list 101 deny tcp any any eq 11
Router(config)# access-list 101 deny tcp any any eq chargen
Router(config)# access-list 101 deny udp any any eq 19
Router(config)# access-list 101 deny tcp any any eq finger
Router(config)# access-list 101 deny tcp any any eq 98
Router(config)# access-list 101 deny tcp any any eq 12345
Router(config)# access-list 101 deny udp any any eq 12345
Router(config)# access-list 101 deny tcp any any eq 54321
Router(config)# access-list 101 deny udp any any eq 54321