ACL实验练习

最新推荐文章于 2024-10-02 08:00:00 发布

无妄之灾|

最新推荐文章于 2024-10-02 08:00:00 发布

阅读量64

点赞数

分类专栏： ACL 文章标签：网络运维

本文链接：https://blog.csdn.net/2201_75408313/article/details/130739331

版权

ACL 专栏收录该内容

1 篇文章 0 订阅

订阅专栏

文章描述了一个网络环境中R1、R2路由器及PC1、PC2的配置情况。R2启用了telnet服务，但PC1能ping通但不能telnet到R2，而PC2可以telnet但不能pingR2。配置包括路由器接口IP地址、用户权限、VTY接口认证以及ACL规则，用于控制不同设备间的访问。静态路由也被设置以确保网络连通性。

摘要由CSDN通过智能技术生成

1.拓扑图

2.需求分析

R2开启telnet服务
PC1可以ping通R2，但是不能telnetR2
PC2可以telnet R2，但是不能ping通R2

3.所有配置内容

[r1]interface g 0/0/1
[r1-GigabitEthernet0/0/1]ip address 192.168.1.1 24
May 18 2023 09:19:14-08:00 r1 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP 
on the interface GigabitEthernet0/0/1 has entered the UP state. 

[r1-GigabitEthernet0/0/1]interface g 0/0/0
[r1-GigabitEthernet0/0/0]ip address 192.168.2.1 24
May 18 2023 09:19:49-08:00 r1 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP 
on the interface GigabitEthernet0/0/0 has entered the UP state. 
[r1-GigabitEthernet0/0/0]q

[r1]aaa
[r1-aaa]local-user yzyss password cipher 123456
Info: Add a new user.
[r1-aaa]local-user yzyss service-type telnet
[r1-aaa]local-user yzyss privilege level 15
[r1-aaa]q
[r1]user-interface vty 0 4
[r1-ui-vty0-4]authentication-mode aaa
[r1-ui-vty0-4]q

[r1]acl 3000
[r1-acl-adv-3000]rule deny icmp source 192.168.1.2 0 destination 192.168.1.1 0 
[r1-acl-adv-3000]rule deny icmp source 192.168.1.2 0 destination 192.168.2.1 0 
[r1-acl-adv-3000]rule deny tcp source 192.168.1.2 0 destination 192.168.2.2 0 de
stination-port eq 23
[r1-acl-adv-3000]rule deny tcp source 192.168.1.3 0 destination 192.168.2.1 0 de
stination-port eq 23
[r1-acl-adv-3000]rule deny icmp source 192.168.1.3 0 destination 192.168.2.2 0
[r1-acl-adv-3000]q

[r1]interface g 0/0/0
[r1-GigabitEthernet0/0/0]traffic-filter inbound acl 3000
[r1-GigabitEthernet0/0/0]q

[r2]int g0/0/1
[r2-GigabitEthernet0/0/1]ip ad 192.168.2.2 24
May 18 2023 09:20:53-08:00 r2 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP 
on the interface GigabitEthernet0/0/0 has entered the UP state. 
[r2-GigabitEthernet0/0/0]q

[r2]ip route-static 192.168.1.0 24 192.168.2.1

[r2]aaa
[r2-aaa]local-user yzyss password cipher 123456
Info: Add a new user.
[r2-aaa]local-user yzyss service-type telnet
[r2-aaa]local-user yzyss privilege level 15
[r2-aaa]q
[r2]user-interface vty 0 4
[r2-ui-vty0-4]authentication-mode aaa
[r2-ui-vty0-4]q

[pc1]int g 0/0/0
[pc1-GigabitEthernet0/0/0]ip ad 192.168.1.2 24
May 18 2023 09:21:55-08:00 pc1 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP
 on the interface GigabitEthernet0/0/0 has entered the UP state. 
[pc1-GigabitEthernet0/0/0]q

[pc1]ip route-static 0.0.0.0 0 192.168.1.1

[pc2]interface g 0/0/0
[pc2-GigabitEthernet0/0/0]ip address 192.168.1.3 24
May 18 2023 09:43:12-08:00 pc2 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP
 on the interface GigabitEthernet0/0/0 has entered the UP state. 
[pc2-GigabitEthernet0/0/0]q

[pc2]ip route-static 0.0.0.0 0 192.168.1.1

4.测试结果