acl实验结果

一，实验拓扑图

[R2]int g0/0/0
[R2-GigabitEthernet0/0/0]ip add 192.168.2.2 24

先添加地址

[PC2]ip route-static 0.0.0.0 0 192.168.1.254

设立网关，接着联通全网，由于R1联通，只需在R2上做联通

R2]ip route-static 192.168.1.0 24 192.168.2.1

由于进行telnet，进行远程登录服务

【R1】aaa

[R1-aaa]local-user wangdaye privilege level 15 password cipher wdy12345
Info: Add a new user.
[R1-aaa]local-user wangdaye service-type telnet
[R1-aaa]
[R1-aaa]user-interface vty 0 4
[R1-ui-vty0-4]authentication-mode aaa
[R1-ui-vty0-4]quit

在pc1上进行远程登录，成功

再进入高级acl技术

<R1>sys
Enter system view, return user view with Ctrl+Z.
[R1]acl 3000
[R1-acl-adv-3000]rule deny icmp source 192.168.1.10 0.0.0.0 destination 192.168.
1.254 0.0.0.0
[R1-acl-adv-3000]rule deny icmp source 192.168.1.10 0.0.0.0 destination 192.168.
2.1 0.0.0.0

[R1-acl-adv-3000]rule deny tcp source 192.168.1.10 0.0.0.0 destination 192.168.2
.2 0.0.0.0
[R1-acl-adv-3000]rule deny tcp source 192.168.1.10 0.0.0.0 destination 192.168.2
.2 0.0.0.0 destination-port eq 23
[R1-acl-adv-3000]rule deny tcp source 192.168.1.11 0.0.0.0 destination 192.168.1
.254 0.0.0.0 destination-port eq 23
[R1-acl-adv-3000]rule deny tcp source 192.168.1.11 0.0.0.0 destination 192.168.2
.1 0.0.0.0 destination-port eq 23
[R1-acl-adv-3000]rule deny icmp source 192.168.1.11 0.0.0.0 destination 192.168.
2.2 0.0.0.0

[R1]int g0/0/0
[R1-GigabitEthernet0/0/0]traffic-filter inbound acl 3000

实验成功