题目如下:
1.
对IP地址进行划分并配置
R1如下:
R2如下:
PC1如下:
PC2如下:
2.
在路由器上写路由表
[r2]ip route-static 192.168.1.0 24 192.168.2.1
3.
按照题目要求做ping的策略
[r1]acl 3000
[r1-acl-adv-3000]rule deny icmp source 192.168.1.10 0 destination 192.168.1.1 0
[r1-acl-adv-3000]rule deny icmp source 192.168.1.10 0 destination 192.168.2.1 0
[r1-acl-adv-3000]rule deny icmp source 192.168.1.20 0 destination 192.168.2.2 0
[r1-acl-adv-3000]q
[r1]int g0/0/0
[r1-GigabitEthernet0/0/0]traffic-filter inbound acl 3000
4.
在路由器上开启远程操控接口
R1如下:
[r1]aaa
[r1-aaa]local-user 810975 privilege level 15 password cipher 123456
[r1-aaa]local-user 810975 service-type telnet
[r1-aaa]q
[r1]user-interface vty 0 4
[r1-ui-vty0-4]authentication-mode aaa
R2如下:
[r2]aaa
[r2-aaa]local-user 810975 privilege level 15 password cipher 123456
[r2-aaa]local-user 810975 service-type telnet
[r2-aaa]q
[r2]user-interface vty 0 4
[r2-ui-vty0-4]authentication-mode aaa
5.
按题目要求在路由器上进行限制
[r1]acl 3000
[r1-acl-adv-3000]rule deny tcp source 192.168.1.10 0 destination 192.168.2.2 0 de
stination-port eq 23
[r1-acl-adv-3000]rule deny tcp source 192.168.1.20 0 destination 192.168.1.1 0 de
stination-port eq 23
[r1-acl-adv-3000]rule deny tcp source 192.168.1.20 0 destination 192.168.2.1 0 de
stination-port eq 23
6.
查看R1的G0/0/0接口的表
7.
对题目要求进行检验
至此,实验完成