h3c包过滤防火墙

acl过滤hc文件

一，配置指令
RT1

sys
int g0/0
ip add 10.0.0.1 24
int g0/1
ip add 20.0.0.1 24
rip
ver 2
undo sum
network 10.0.0.0
network 20.0.0.0
qu
ip rou 30.0.0.0 24 20.0.0.2
acl advanced 3000
rule permit ip source 10.0.0.15 0 destination 30.0.0.17 0
rule deny ip source any destination any
int g0/1
pack 3000 outbound

RT2

sys
int g0/0
ip add 20.0.0.2 24
int g0/1
ip add 30.0.0.1 24
rip
ver 2
undo sum
network 20.0.0.0
network 30.0.0.0
qu
ip rou 10.0.0.0 24 20.0.0.1

二，两台交换机无需配置(使用PC5进行ping)

ping 30.0.0.17 能通

ping 30.0.0.18 不通即可完成