acl实验

在这里插入图片描述

pc1

<Huawei>sy
[Huawei]sys PC1
[PC1]int g0/0/0
[PC1-GigabitEthernet0/0/0]ip address 192.168.1.1 24
[PC1-GigabitEthernet0/0/0]q
[PC1]ip route-static 0.0.0.0 0 192.168.1.254
[PC1]ospf ?
  INTEGER<1-65535>  Process ID
  mib-binding       Mib-Binding a Process
  router-id         <Group> router-id command group
  valid-ttl-hops    Valid GTSM TTL hops
  vpn-instance      VPN routing/forwarding Instance
  <cr>              Please press ENTER to execute command 
[PC1]ospf router-id 3.3.3.3
[PC1-ospf-1]area 0
[PC1-ospf-1-area-0.0.0.0]network 192.168.1.0 0.0.0.255
[PC1-ospf-1-area-0.0.0.0]q
[PC1-ospf-1]q
[PC1]ping 12.0.0.2
  PING 12.0.0.2: 56  data bytes, press CTRL_C to break
    Reply from 12.0.0.2: bytes=56 Sequence=1 ttl=254 time=80 ms
    Reply from 12.0.0.2: bytes=56 Sequence=2 ttl=254 time=40 ms
    Reply from 12.0.0.2: bytes=56 Sequence=3 ttl=254 time=50 ms
    Reply from 12.0.0.2: bytes=56 Sequence=4 ttl=254 time=40 ms
    Reply from 12.0.0.2: bytes=56 Sequence=5 ttl=254 time=40 ms

  --- 12.0.0.2 ping statistics ---
    5 packet(s) transmitted
    5 packet(s) received
    0.00% packet loss
    round-trip min/avg/max = 40/50/80 ms

[PC1]ping 12.0.0.1
  PING 12.0.0.1: 56  data bytes, press CTRL_C to break
    Reply from 12.0.0.1: bytes=56 Sequence=1 ttl=255 time=60 ms
    Reply from 12.0.0.1: bytes=56 Sequence=2 ttl=255 time=50 ms
    Reply from 12.0.0.1: bytes=56 Sequence=3 ttl=255 time=20 ms
    Reply from 12.0.0.1: bytes=56 Sequence=4 ttl=255 time=60 ms
    Reply from 12.0.0.1: bytes=56 Sequence=5 ttl=255 time=40 ms

  --- 12.0.0.1 ping statistics ---
    5 packet(s) transmitted
    5 packet(s) received
    0.00% packet loss
    round-trip min/avg/max = 20/46/60 ms
[PC1]ping 12.0.0.2
  PING 12.0.0.2: 56  data bytes, press CTRL_C to break
    Reply from 12.0.0.2: bytes=56 Sequence=1 ttl=254 time=70 ms
    Reply from 12.0.0.2: bytes=56 Sequence=2 ttl=254 time=40 ms
    Reply from 12.0.0.2: bytes=56 Sequence=3 ttl=254 time=60 ms
    Reply from 12.0.0.2: bytes=56 Sequence=4 ttl=254 time=30 ms
    Reply from 12.0.0.2: bytes=56 Sequence=5 ttl=254 time=70 ms

  --- 12.0.0.2 ping statistics ---
    5 packet(s) transmitted
    5 packet(s) received
    0.00% packet loss
    round-trip min/avg/max = 30/54/70 ms
[PC1]q
<PC1>telnet 12.0.0.2
  Press CTRL_] to quit telnet mode
  Trying 12.0.0.2 ...

pc2

<Huawei>sy
[Huawei]sys PC1
[PC1]int g0/0/0
[PC1-GigabitEthernet0/0/0]ip address 192.168.1.1 24
[PC1-GigabitEthernet0/0/0]q
[PC1]ip route-static 0.0.0.0 0 192.168.1.254
[PC1]ospf ?
  INTEGER<1-65535>  Process ID
  mib-binding       Mib-Binding a Process
  router-id         <Group> router-id command group
  valid-ttl-hops    Valid GTSM TTL hops
  vpn-instance      VPN routing/forwarding Instance
  <cr>              Please press ENTER to execute command 
[PC1]ospf router-id 3.3.3.3
[PC1-ospf-1]area 0
[PC1-ospf-1-area-0.0.0.0]network 192.168.1.0 0.0.0.255
[PC1-ospf-1-area-0.0.0.0]q
[PC1-ospf-1]q
[PC1]ping 12.0.0.2
  PING 12.0.0.2: 56  data bytes, press CTRL_C to break
    Reply from 12.0.0.2: bytes=56 Sequence=1 ttl=254 time=80 ms
    Reply from 12.0.0.2: bytes=56 Sequence=2 ttl=254 time=40 ms
    Reply from 12.0.0.2: bytes=56 Sequence=3 ttl=254 time=50 ms
    Reply from 12.0.0.2: bytes=56 Sequence=4 ttl=254 time=40 ms
    Reply from 12.0.0.2: bytes=56 Sequence=5 ttl=254 time=40 ms

  --- 12.0.0.2 ping statistics ---
    5 packet(s) transmitted
    5 packet(s) received
    0.00% packet loss
    round-trip min/avg/max = 40/50/80 ms

[PC1]ping 12.0.0.1
  PING 12.0.0.1: 56  data bytes, press CTRL_C to break
    Reply from 12.0.0.1: bytes=56 Sequence=1 ttl=255 time=60 ms
    Reply from 12.0.0.1: bytes=56 Sequence=2 ttl=255 time=50 ms
    Reply from 12.0.0.1: bytes=56 Sequence=3 ttl=255 time=20 ms
    Reply from 12.0.0.1: bytes=56 Sequence=4 ttl=255 time=60 ms
    Reply from 12.0.0.1: bytes=56 Sequence=5 ttl=255 time=40 ms

  --- 12.0.0.1 ping statistics ---
    5 packet(s) transmitted
    5 packet(s) received
    0.00% packet loss
    round-trip min/avg/max = 20/46/60 ms
[PC1]ping 12.0.0.2
  PING 12.0.0.2: 56  data bytes, press CTRL_C to break
    Reply from 12.0.0.2: bytes=56 Sequence=1 ttl=254 time=70 ms
    Reply from 12.0.0.2: bytes=56 Sequence=2 ttl=254 time=40 ms
    Reply from 12.0.0.2: bytes=56 Sequence=3 ttl=254 time=60 ms
    Reply from 12.0.0.2: bytes=56 Sequence=4 ttl=254 time=30 ms
    Reply from 12.0.0.2: bytes=56 Sequence=5 ttl=254 time=70 ms

  --- 12.0.0.2 ping statistics ---
    5 packet(s) transmitted
    5 packet(s) received
    0.00% packet loss
    round-trip min/avg/max = 30/54/70 ms
[PC1]q
<PC1>telnet 12.0.0.2
  Press CTRL_] to quit telnet mode
  Trying 12.0.0.2 ...

r2

<Huawei>sys
[Huawei]sy R2
[R2]int g0/0/0
[R2-GigabitEthernet0/0/0]ip address 12.0.0.2 24
[R2-GigabitEthernet0/0/0]q
[R2]ospf ?
  INTEGER<1-65535>  Process ID
  mib-binding       Mib-Binding a Process
  router-id         <Group> router-id command group
  valid-ttl-hops    Valid GTSM TTL hops
  vpn-instance      VPN routing/forwarding Instance
  <cr>              Please press ENTER to execute command 
[R2]ospf router-id 2.2.2.2
[R2-ospf-1]area 0
[R2-ospf-1-area-0.0.0.0]network 12.0.0.0 0.0.0.255
[R2-ospf-1-area-0.0.0.0]q
[R2-ospf-1]q
[R2]user-in	
[R2]user-interface vty 0 4
[R2-ui-vty0-4]au	
[R2-ui-vty0-4]authentication-mode aaa
[R2-ui-vty0-4]q
[R2]aaa
[R2-aaa]lo	
[R2-aaa]local-user huawei pa	
[R2-aaa]local-user huawei password c	
[R2-aaa]local-user huawei password cipher 123
Info: Add a new user.
[R2-aaa]local-user huawei service-type telnet


r1

<Huawei>sys
[Huawei]sy r1
[r1]int g0/0/0
[r1-GigabitEthernet0/0/0]ip address 192.168.1.254 24
[r1-GigabitEthernet0/0/0]q
[r1]int g0/0/1
[r1-GigabitEthernet0/0/1]ip address 12.0.0.1 24
[r1-GigabitEthernet0/0/1]q
[r1]ospf 1 router-id 1.1.1.1
[r1-ospf-1]area 0
[r1-ospf-1-area-0.0.0.0]network 192.168.1.0 0.0.0.255
[r1-ospf-1-area-0.0.0.0]network 12.0.0.0 0.0.0.255
[r1]acl 3000
[r1-acl-adv-3000]rule deny tcp source 192.168.1.1 0.0.0.0 destination 12.0.0.2 0
.0.0.0 destination-port eq telnet
[r1-acl-adv-3000]q
[r1]display acl 3000
Advanced ACL 3000, 1 rule
Acl's step is 5
 rule 5 deny tcp source 192.168.1.1 0 destination 12.0.0.2 0 destination-port eq
 telnet 

[r1]int g0/0/0
[r1-GigabitEthernet0/0/0]traffic-filter inbound acl 3000
[r1-GigabitEthernet0/0/0]q
[r1]acl 3000
[r1-acl-adv-3000]rule deny icmp source 192.168.1.2 0.0.0.0 destination 12.0.0.2 
0.0.0.0
[r1-acl-adv-3000]q
[r1]int g0/0/0
[r1-GigabitEthernet0/0/0]traffic-filter inbound acl 3000

评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值