ACL实验

最新推荐文章于 2024-01-30 20:36:36 发布

nuli_student

最新推荐文章于 2024-01-30 20:36:36 发布

阅读量264

点赞数

文章标签：网络

本文链接：https://blog.csdn.net/nuli_student/article/details/130735863

版权

1.拓扑图

2.需求

1）R2开启telnet服务

2）PC1可以ping通R2，但是不能telnetR2

3）PC2可以telnetR2，但是不能ping通R2

3.配置内容

<Huawei>
May 17 2023 20:59:19-08:00 Huawei %%01IFPDT/4/IF_STATE(l)[0]:Interface GigabitEt
hernet0/0/0 has turned into UP state.
<Huawei>
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]sys r2
[r2]int g	
[r2]int GigabitEthernet 0/0/0
[r2-GigabitEthernet0/0/0]ip add	
[r2-GigabitEthernet0/0/0]ip address 12.0.0.2 24
[r2-GigabitEthernet0/0/0]
May 17 2023 21:00:16-08:00 r2 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP 
on the interface GigabitEthernet0/0/0 has entered the UP state. 
[r2-GigabitEthernet0/0/0]
[r2-GigabitEthernet0/0/0]q
[r2]user-in	
[r2]user-interface v	
[r2]user-interface vty 0 4
[r2-ui-vty0-4]au	
[r2-ui-vty0-4]authentication-mode aaa
[r2-ui-vty0-4]q
[r2]aaa
[r2-aaa]loc	
[r2-aaa]local-user huawei pass	
[r2-aaa]local-user huawei password ci	
[r2-aaa]local-user huawei password cipher 123456 level 15
Info: Add a new user.
[r2-aaa]local-u	
[r2-aaa]local-user huaweiser	
[r2-aaa]local-user huawei server-t	
[r2-aaa]local-user huawei serv	
[r2-aaa]local-user huawei service-type telnet
[r2-aaa]
[r2-aaa]q
[r2]

<Huawei>
May 17 2023 20:59:16-08:00 Huawei %%01IFPDT/4/IF_STATE(l)[0]:Interface GigabitEt
hernet0/0/0 has turned into UP state.
<Huawei>
May 17 2023 20:59:18-08:00 Huawei %%01IFPDT/4/IF_STATE(l)[1]:Interface GigabitEt
hernet0/0/1 has turned into UP state.
<Huawei>
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]r1
        ^
Error: Unrecognized command found at '^' position.
[Huawei]sys r1
[r1]int	
[r1]interface g	
[r1]interface GigabitEthernet 0/0/1
[r1-GigabitEthernet0/0/1]ip add	
[r1-GigabitEthernet0/0/1]ip address 12.0.0.1 24
May 17 2023 21:02:25-08:00 r1 %%01IFNET/4/LINK_STATE(l)[2]:The line protocol IP 
on the interface GigabitEthernet0/0/1 has entered the UP state. 
[r1-GigabitEthernet0/0/1]q
[r1]int g	
[r1]int GigabitEthernet 0/0/0
[r1-GigabitEthernet0/0/0]ip add
                                ^
Error:Incomplete command found at '^' position.
[r1-GigabitEthernet0/0/0]ip add	
[r1-GigabitEthernet0/0/0]ip address 192.168.1.3 24
May 17 2023 21:03:09-08:00 r1 %%01IFNET/4/LINK_STATE(l)[3]:The line protocol IP 
on the interface GigabitEthernet0/0/0 has entered the UP state. 
[r1-GigabitEthernet0/0/0]

  Please check whether system data has been changed, and save data in time

  Configuration console time out, please press any key to log on

<r1>telnet 12.0.0.2
  Press CTRL_] to quit telnet mode
  Trying 12.0.0.2 ...
  Connected to 12.0.0.2 ...

Login authentication


Username:huawei
Password:
<r2>
<r2>
<r2>q

  Configuration console exit, please retry to log on

  The connection was closed by the remote host
<r1>sys
Enter system view, return user view with Ctrl+Z.
[r1]acl 3000
[r1-acl-adv-3000]rule deny tcp source 192.168.1.1 0.0.0.0 dest	
[r1-acl-adv-3000]rule deny tcp source 192.168.1.1 0.0.0.0 destination 12.0.0.2 0
.0.0.0 des	
[r1-acl-adv-3000]rule deny tcp source 192.168.1.1 0.0.0.0 destination 12.0.0.2 0
.0.0.0 destination-port eq telnet
[r1-acl-adv-3000]q
[r1]acl

  Please check whether system data has been changed, and save data in time

  Configuration console time out, please press any key to log on

<r1>sys
Enter system view, return user view with Ctrl+Z.
[r1]acl 3100
[r1-acl-adv-3100]rule per	
[r1-acl-adv-3100]rule permit sour	
[r1-acl-adv-3100]rule permit source 192.168.1.2 0.0.0.0 destination 12.0.0.2 0.0
.0.0 destination-port eq ?
                             ^
Error: Wrong parameter found at '^' position.
[r1-acl-adv-310acl 3100
[r1-acl-adv-3100]rule per	
[r1-acl-adv-3100]rule permit tcp s	
[r1-acl-adv-3100]rule permit tcp source192.168.1.2 0.0.0.0 des	
[r1-acl-adv-3100]rule permit tcp source192.168.1.2 0.0.0.0 destin	
[r1-acl-adv-3100]rule permit tcp source192.168.1.2 0.0.0.0 destinationg 12.0.0.2
 0.0.0.0 destination-p	
[r1-acl-adv-3100]rule permit tcp source 192.168.1.2 0.0.0.0 des	
[r1-acl-adv-3100]rule permit tcp source 192.168.1.2 0.0.0.0 destination 12.0.0.2
 0.0.0.0 des	
[r1-acl-adv-3100]rule permit tcp source 192.168.1.2 0.0.0.0 destination 12.0.0.2
 0.0.0.0
[r1-acl-adv-3100]rule de	
[r1-acl-adv-3100]rule deny ip sou	
[r1-acl-adv-3100]rule deny ip source 192.168.1.2 0.0.0.0 des	
[r1-acl-adv-3100]rule deny ip source 192.168.1.2 0.0.0.0 destination 12.0.0.2 0.
0.0.0
[r1-acl-adv-3100]q

<Huawei>
May 17 2023 20:59:21-08:00 Huawei %%01IFPDT/4/IF_STATE(l)[0]:Interface GigabitEt
hernet0/0/0 has turned into UP state.
<Huawei>
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]sys PC1
[PC1]int g	
[PC1]int GigabitEthernet 0/0/0
[PC1-GigabitEthernet0/0/0]ip add	
[PC1-GigabitEthernet0/0/0]ip address 192.168.1.1 24
[PC1-GigabitEthernet0/0/0]
May 17 2023 21:03:46-08:00 PC1 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP
 on the interface GigabitEthernet0/0/0 has entered the UP state. 
[PC1-GigabitEthernet0/0/0]

  Please check whether system data has been changed, and save data in time

  Configuration console time out, please press any key to log on

<PC1>sys
Enter system view, return user view with Ctrl+Z.
[PC1]ping 12.0.0.2
  PING 12.0.0.2: 56  data bytes, press CTRL_C to break
    Request time out
    Request time out
    Request time out
    Request time out
    Request time out

  --- 12.0.0.2 ping statistics ---
    5 packet(s) transmitted
    0 packet(s) received

<PC1>telnet 12.0.0.2
  Press CTRL_] to quit telnet mode
  Trying 12.0.0.2 ...
  Error: Can't connect to the remote host
<PC1>

The device is running!
################################################################################
####################
<Huawei>
May 17 2023 20:59:25-08:00 Huawei %%01IFPDT/4/IF_STATE(l)[0]:Interface GigabitEt
hernet0/0/0 has turned into UP state.
<Huawei>
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]sys PC2
[PC2]int g	
[PC2]int GigabitEthernet 0/0/0
[PC2-GigabitEthernet0/0/0]ip add	
[PC2-GigabitEthernet0/0/0]ip address 192.168.1.2 24
May 17 2023 21:04:13-08:00 PC2 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP
 on the interface GigabitEthernet0/0/0 has entered the UP state. 
[PC2-GigabitEthernet0/0/0]

  Please check whether system data has been changed, and save data in time

  Configuration console time out, please press any key to log on

<PC2>telent 12.0.0.2
     ^
Error: Unrecognized command found at '^' position.
<PC2>telnet 12.0.0.2
  Press CTRL_] to quit telnet mode
  Trying 12.0.0.2 ...
  Connected to 12.0.0.2 ...
<r2>

4.配置结果