Current location - Plastic Surgery and Aesthetics Network - Plastic surgery and beauty - What is the difference between group and class in the router interface configuration command?
What is the difference between group and class in the router interface configuration command?
The access-list under the access-group calling interface can be used to allow or deny the following traffic:

1. Traffic through the router

2. Traffic to the router

For example, you only allow hosts in the internal network segment of192.168.10/24 to access the external IP address of1.1.

Access list 10 1 each192.168.10.0.255 Host1./kloc-0.

Interface g0/0 (Intranet Interface)

Ip access-group 10 1 output

Using access-class to call access-list under line vty can be used to allow or deny the following traffic:

1. Traffic to the router (such as telnet and SSH)

For example, you only allow hosts with IP address 10.0. 1 to use SSH to manage your router.

The access list 102 allows tcp hosts 10.0.0. 1 any eq 22.

Line vty 0 4

Access level 102 inch

=================================================

Use IP access under the interface-access level under the groupvty line.

There is no "ip" before the access-class command.

Aren't you satisfied with the details?