实验题目及要求:
![](https://i-blog.csdnimg.cn/blog_migrate/20682efb414deceaafa81a7050cb77f8.png)
实验步骤:
1.配置接口IP
2.配置静态路由
测试:
3.Telnet远程登录(预设登录的账号和密码,虚拟登录接口调用,打开aaa)
R1和R2上打开:
测试:
4.ACL配置
acl 3000 配置以下6条:
1.拒绝ping(icmp)源IP192.168.1.2到目标IP192.168.1.1
2.拒绝ping(icmp)源IP192.168.1.2到目标IP192.168.2.1
3.拒绝telnet(tcp)源IP192.168.1.2到目标IP192.168.2.2
4.拒绝ping(icmp)源IP192.168.1.3到目标IP192.168.2.2
5.拒绝telnet(tcp)源IP192.168.1.3到目标IP192.168.1.1
6.拒绝telnet(tcp)源IP192.168.1.3到目标IP192.168.2.1
以下图只显示4条:自行配置2和6条
具体6条display如下:
acl number 3000
rule 5 deny icmp source 192.168.1.2 0 destination 192.168.1.1 0
rule 10 deny tcp source 192.168.1.2 0 destination 192.168.2.2 0 destination-por
t eq telnet
rule 15 deny icmp source 192.168.1.3 0 destination 192.168.2.2 0
rule 20 deny tcp source 192.168.1.3 0 destination 192.168.1.1 0 destination-por
t eq telnet
rule 25 deny icmp source 192.168.1.2 0 destination 192.168.2.1 0
rule 30 deny tcp source 192.168.1.3 0 destination 192.168.2.1 0 destination-por
t eq telnet
测试: