ACL实验

题目及其要求

一、基础配置

静态路由：
pc1、pc2:
ip route-static 192.168.2.0 255.255.255.0 192.168.1.1
AR2：
ip route-static 192.168.1.0 255.255.255.0 192.168.2.1
登录账户创建:
AR1:
[R1]aaa//存储帐户密码
[R1-aaa]local-user ybc privilege level 15 password cipher 123456
[R1-aaa]local-user ybc service-type telnet

二、pc1不能ping通AR1,不能登录 AR2：
R1：
rule 5 deny icmp source 192.168.1.2 0 destination 192.168.1.1 0
R2:
rule 10 deny tcp source 192.168.1.2 0 destination 192.168.2.2 0 destination-por
t eq telnet

三、pc2不能登录AR1,不能ping通AR2
R1:
rule 10 deny tcp source 192.168.1.3 0 destination 192.168.1.1 0 destination-por
t eq telnet
R2: rule 5 deny icmp source 192.168.1.3 0 destination 192.168.2.2 0

四、注意事项
ACL规则编写完成后，必须在接口调用后方可生效,T如：
[R2]interface g0/0/0
[R2-GigabitEthernet0/0/1]traffic-filter ? 调用时一定注意方向
inbound Apply ACL to the inbound direction of the interface //进站
outbound Apply ACL to the outbound direction of the interface //出栈
[R2-GigabitE thernet0/0/1]traffic-filter outbound acl 3003