HCIA第四次作业

题目：

 

 1：给每个路由器配ip，把下面两个当成pc端，需要给下面配网关（类似于缺省）

[r2]ip route-static 192.168.1.0 24 192.168.2.1

[pc1]ip route-static 0.0.0.0 0.0.0.0 192.168.1.1

[pc2]ip route-static 0.0.0.0 0.0.0.0 192.168.1.1

2：给两个路由器上预设登录的账号及密码

[r1]aaa
[r1-aaa]local-user labi privilege level 15 password cipher 111111
Info: Add a new user.
[r1-aaa]local-user labi service-type telnet 
[r2]aaa
[r2-aaa]local-user xiaoxin privilege level 15 password cipher 222222
Info: Add a new user.
[r2-aaa]local-user xiaoxin service-type telnet 
3：pc1 telnet r1 不能ping r1

[r1]acl 3000 
[r1-acl-adv-3000]rule deny icmp source 192.168.1.2 0.0.0.0 destination 192.168.1
.1 0.0.0.0 
[r1-GigabitEthernet0/0/0]traffic-filter inbound acl 3000

4：pc1 ping r2 不登录r2

[r1]acl 3001

[r1-acl-adv-3001]rule deny tcp source 192.168.1.2 0.0.0.0 destination 192.168.2.
2 0.0.0.0 destination-port  eq 23
[r1-GigabitEthernet0/0/0]traffic-filter inbound acl 3001

5： pc2 不能 telnet r1 能ping r1

[r1]acl 3002

[r1-acl-adv-3002]rule deny tcp source 192.168.1.3 0.0.0.0 destination 192.168.1.
1 0.0.0.0 destination-port eq 23
[r1-GigabitEthernet0/0/0]traffic-filter inbound acl 3002

 6：pc2不 ping r2 登录r2

[r1]acl 3003

[r1-acl-adv-3003]rule deny icmp source 192.168.1.3 0.0.0.0 destination 192.168.2
.2 0.0.0.0 

[r1-GigabitEthernet0/0/0]traffic-filter inbound acl 3003