控制员工只能访问部分网站,这样配置对吗?
第一条语名是想可以内部网上邻居使用。
其他的是一些允许访问的网址
最后默认是有一个 deny any any
是不是这样就行了?
access-list 101 permit ip 192.168.0.0 0.0.255.255 any
access-list 101 permit tcp any host 220.181.37.4 eq www
access-list 101 permit tcp any host 218.30.66.101 eq www
access-list 101 permit tcp any host 121.14.0.26 eq www
access-list 101 permit tcp any host 220.181.28.53 eq www
access-list 101 permit tcp any host 61.177.95.155 eq www
access-list 101 permit tcp any host 125.90.207.68 eq www
access-list 101 permit tcp any host 209.131.36.158 eq www
access-list 101 permit tcp any host 202.165.102.205 eq www
access-list 101 permit tcp any host 207.68.173.76 eq www
access-list 101 permit tcp any host 211.206.123.219 eq www
access-list 101 permit tcp any host 207.46.30.24 eq www
access-list 101 permit tcp any host 61.154.11.188 eq www
access-list 101 permit tcp any host 61.154.10.208 eq www
access-list 101 permit tcp any host 61.154.14.69 eq www
access-list 101 permit tcp any host 61.154.14.172 eq www
access-list 101 permit tcp any host 211.97.117.239 eq www
access-list 101 permit tcp any host 61.131.4.159 eq www
access-list 101 permit tcp any host 218.66.17.52 eq www
!
control-plane
!