HCIA的acl实验

苏雨鱼

已于 2023-07-26 09:48:25 修改

阅读量61

点赞数

文章标签：网络

于 2023-07-25 17:13:35 首次发布

本文链接：https://blog.csdn.net/m0_52326740/article/details/131921496

版权

文章详细描述了PC1和PC2的IP配置，以及路由器R1和R2的接口设置。R1的配置包括接口IP、VLAN、ACL规则，用于限制ICMP流量和保护端口23。R2的配置涉及静态路由和telnet服务的安全访问。所有设备的用户访问都进行了控制并设定了密码。

摘要由CSDN通过智能技术生成

1.题目要求及其样图

2.关于pc1的配置

[pc1]int g 0/0/0
[pc1-GigabitEthernet0/0/0]ip add 192.168.1.2 24

3.关于pc2的配置

[pc2]int g0/0/0
[pc2-GigabitEthernet0/0/0]ip add 192.168.1.3 24

4.关于R1的配置

[r1]int g0/0/0
[r1-GigabitEthernet0/0/0]ip add 192.168.1.1 24
[r1-GigabitEthernet0/0/0]int g0/0/1
[r1-GigabitEthernet0/0/1]ip add 192.168.2.1 24
[r1-GigabitEthernet0/0/1]q

[r1]aaa
[r1-aaa]local-user r1 privilege level 15 password cipher 123456
[r1-aaa]local-user r1 service-type telnet
[r1-aaa]q

[r1]user-interface vty 0 4
[r1-ui-vty0-4]auto
[r1-ui-vty0-4]auth
[r1-ui-vty0-4]authentication-mode aaa

[r1]acl 3001
[r1-acl-adv-3001]rule deny icmp source 192.168.1.2 0.0.0.0 destination 192.1
68.1.1 0.0.0.0

[r1-acl-adv-3001]rule deny icmp source 192.168.1.2 0.0.0.0 destination 192.1
68.2.1 0.0.0.0

[r1-acl-adv-3001]rule deny icmp source 192.168.1.2 0.0.0.0 destination 192.1
68.2.2 0.0.0.0 destination-port eq 23

[r1-acl-adv-3001]rule deny icmp source 192.168.1.3 0.0.0.0 destination 192.1
68.2.2 0.0.0.0

[r1-acl-adv-3001]rule deny icmp source 192.168.1.3 0.0.0.0 destination 192.1
68.1.1 0.0.0.0 destination-port eq 23

[r1-acl-adv-3001]rule deny icmp source 192.168.1.3 0.0.0.0 destination 192.1
68.2.1 0.0.0.0 destination-port eq 23

[r1]int g 0/0/0
[r1-GigabitEthernet0/0/0]traffic-filter inbound acl 3001

5.关于R2的配置

[r2]int g 0/0/0
[r2-GigabitEthernet0/0/0]ip add 192.168.2.2 24
[r2-GigabitEthernet0/0/0]q
[r2]aaa
[r2-aaa]local-user r2 privilege level 15 password cipher 123456
[r2-aaa]local-user r2 service-type telnet
[r2-aaa]q
[r2]ip route-static 192.168.1.0 24 192.168.2.1
[r2]user-interface vty 0 4
[r2-ui-vty0-4]authentication-mode aaa