{"id":13704,"date":"2021-07-18T09:00:40","date_gmt":"2021-07-18T09:00:40","guid":{"rendered":"https:\/\/blog.sh.com.tr\/?p=13704"},"modified":"2021-07-16T12:55:50","modified_gmt":"2021-07-16T12:55:50","slug":"cisco-standart-acl-yapilandirmasi","status":"publish","type":"post","link":"https:\/\/sh.com.tr\/blog\/cisco-standart-acl-yapilandirmasi\/","title":{"rendered":"Cisco  Standart ACL Yap\u0131land\u0131rmas\u0131"},"content":{"rendered":"<p>Merhaba arkada\u015flar, bu yaz\u0131m\u0131zda standart access-list yap\u0131land\u0131rmas\u0131 yapaca\u011f\u0131z. Bunun i\u00e7in packet tracer&#8217;da bir topoloji olu\u015fturarak \u00f6rneklerle devam edece\u011fiz.<\/p>\n<p>\u00d6ncelikle (ACL) Access Lists nedir?<\/p>\n<p>Access-list k\u0131saca bir interface \u00fczerinden giden veya gelen trafi\u011fi kontrol etmek i\u00e7in kullan\u0131l\u0131r. Bu access-list ad\u0131ndan da belli oldu\u011fu gibi bir liste halinde kural yazarak deny veya permit diyerek &#8220;reddet&#8221; yada &#8220;izin ver&#8221;, trafi\u011fi kontrol etmenizi sa\u011flar. \u015eimdi bir \u00f6rnek topoloji olu\u015fturup devam edelim.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-13705 size-full\" src=\"https:\/\/sh.com.tr\/blog\/wp-content\/uploads\/cisco-.jpg\" alt=\"\" width=\"1024\" height=\"466\" srcset=\"https:\/\/sh.com.tr\/blog\/wp-content\/uploads\/cisco-.jpg 1024w, https:\/\/sh.com.tr\/blog\/wp-content\/uploads\/cisco-300x137-1.jpg 300w, https:\/\/sh.com.tr\/blog\/wp-content\/uploads\/cisco-768x350-1.jpg 768w, https:\/\/sh.com.tr\/blog\/wp-content\/uploads\/cisco-696x317-1.jpg 696w, https:\/\/sh.com.tr\/blog\/wp-content\/uploads\/cisco-923x420-1.jpg 923w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>Yukar\u0131daki g\u00f6rselde g\u00f6r\u00fcld\u00fc\u011f\u00fc \u00fczere, iki adet farkl\u0131 ip adreslerine sahip network ve bir adet server bulunmaktad\u0131r. Biz test ama\u00e7l\u0131 192.168.2.0 a\u011f\u0131n\u0131n sunucuya ula\u015fmas\u0131n\u0131 isterken, 192.168.1.0 a\u011f\u0131n\u0131n ula\u015fmas\u0131n\u0131 istemeyece\u011fiz. Bunlar\u0131 yapmadan \u00f6nce tabiki de router&#8217;lara static route&#8217;lar\u0131 yazmam\u0131z gerekiyor.<\/p>\n<p>\u00d6ncelikle access-list&#8217;ler genelde hedefe yak\u0131n yaz\u0131lmaktad\u0131r. Bizim hedefimiz server oldu\u011fundan hedefe yak\u0131n olarak, router1&#8217;e access-list olu\u015fturaca\u011f\u0131z.<\/p>\n<p>Router1&gt;en<\/p>\n<p>Router1#conf<\/p>\n<p>Router1(config)#access-list 10 permit 192.168.2.0 0.0.0.255<\/p>\n<p>Router1(config)#access-list 10 deny 192.168.1.0 0.0.0.255<\/p>\n<p>Evet, \u015fuanda yukar\u0131da g\u00f6r\u00fcld\u00fc\u011f\u00fc \u00fczere access-list&#8217;leri olu\u015fturduk. (0.0.0.255) yazmam\u0131z\u0131n sebebi belirtmi\u015f oldu\u011fumuz network&#8217;teki , b\u00fct\u00fcn ip adreslerini ifade ediyor. Access-list&#8217;leri olu\u015fturduktan sonra i\u015f bitmi\u015f olmuyor maalesef. \u015eimdi ise olu\u015fturdu\u011fumuz access-list&#8217;i porta tan\u0131mlayaca\u011f\u0131z.<\/p>\n<p>Router1(config)# interface serial 0\/3\/0<\/p>\n<p>Router1(config)# ip access-group 10 in<\/p>\n<p>\u015eimdi yazm\u0131\u015f oldu\u011fumuz access-list&#8217;i portun in y\u00f6n\u00fcne uygulam\u0131\u015f olduk.<\/p>\n<p>&#8220;<strong><em>Access-list&#8217;i yaz\u0131p porta uygulamad\u0131\u011f\u0131n\u0131z s\u00fcrece \u00e7al\u0131\u015fmalayacakt\u0131r.<\/em><\/strong>&#8221;<\/p>\n<p>&nbsp;<\/p>\n<p><strong>Samed G\u00fcl<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Merhaba arkada\u015flar, bu yaz\u0131m\u0131zda standart access-list yap\u0131land\u0131rmas\u0131 yapaca\u011f\u0131z. Bunun i\u00e7in packet tracer&#8217;da bir topoloji olu\u015fturarak \u00f6rneklerle devam edece\u011fiz. \u00d6ncelikle (ACL) Access Lists nedir? Access-list k\u0131saca bir interface \u00fczerinden giden veya gelen trafi\u011fi kontrol etmek i\u00e7in kullan\u0131l\u0131r. Bu access-list ad\u0131ndan da belli oldu\u011fu gibi bir liste halinde kural yazarak deny veya permit diyerek &#8220;reddet&#8221; yada &#8220;izin [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":13706,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[30,238],"tags":[246,247,245,244],"class_list":["post-13704","post","type-post","status-publish","format-standard","has-post-thumbnail","category-bilgi-bankasi","category-network","tag-access-lists-nedir","tag-acl","tag-cisco-standart-acl","tag-cisco-standart-acl-yapilandirmasi"],"_links":{"self":[{"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/posts\/13704","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/comments?post=13704"}],"version-history":[{"count":0,"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/posts\/13704\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/media\/13706"}],"wp:attachment":[{"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/media?parent=13704"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/categories?post=13704"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/tags?post=13704"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}