文章详细描述了网络设备的IP地址规划，包括路由器和PC的IP配置。接着设置了静态路由，确保网络间通信。然后创建了用户账号并设定权限，最后配置了访问控制列表(ACL)，限制了特定源IP到目的地IP的ICMP和TCP流量。
1，规划ip
[r1-GigabitEthernet0/0/1]ip address 192.168.1.1 24
[r1-GigabitEthernet0/0/0]ip address 192.168.2.1 24
[r2-GigabitEthernet0/0/0]ip address 192.168.2.2 24
[pc1-GigabitEthernet0/0/0]ip address 192.168.1.2 24
[pc2-GigabitEthernet0/0/0]ip address 192.168.1.3 24
2，静态路由
[pc1]ip route-static 0.0.0.0 0 192.168.1.1
[pc2]ip route-static 0.0.0.0 0 192.168.1.1
[r2]ip route-static 192.168.1.0 24 192.168.2.1
3，创建账号
[r1-aaa]local-user huawei privilege level 15 password cipher 123456
[r1]user-interface vty 0 4
[r1-ui-vty0-4]authentication-mode aaa
[r2-aaa]local-user huawei privilege level 15 password cipher 654321
[r2]user-interface vty 0 4
[r2-ui-vty0-4]authentication-mode aaa
3，配置acl
[r1-acl-adv-3000]rule deny icmp source 192.168.1.2 0 destination 192.168.2.1 0
[r1-acl-adv-3000]rule deny icmp source 192.168.1.2 0 destination 192.168.1.1 0
[r1-acl-adv-3000]rule deny tcp source 192.168.1.3 0 destination 192.168.2.1 0
[r1-acl-adv-3000]rule deny icmp source 192.168.1.3 0 destination 192.168.2.2 0
4，进入接口调用acl
[r1-GigabitEthernet0/0/1]traffic-filter inbound acl 3000
扫一扫
1309
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
