该配置展示了如何在路由器上创建高级ACL，拒绝来自特定IP地址的TCP流量到特定端口，以及ICMP流量到其他IP地址。同时，设置了用户权限，包括telnet服务的认证，并应用了ACL到接口以过滤入站流量。
17:11:31
[r1-acl-adv-3000]rule deny tcp source 192.168.1.2 0.0.0.0 destination 192.168.2.
1
[r1-acl-adv-3000]rule deny tcp source 192.168.1.2 0.0.0.0 destination 192.168.2.
1 0.0.0.0 destination-port eq 23
[r1-acl-adv-3000]q
[r1]interface g0/0/0
[r1-GigabitEthernet0/0/0]traffic-filter inbound acl 3000
[r1-aaa]local-user liujie privilege level 15 password cipher 123456
[r1-aaa]local-user liujie service-type telnet
[r1]user-interface vty 0 4
[r1-ui-vty0-4]authentication-mode aaa
[r1-acl-adv-3000]rule deny icmp source 192.168.1.2 0.0.0.0 destination 192.168.1 .1 0.0.0.0
[r1-GigabitEthernet0/0/0]traffic-filter inbound acl 3000
[r1]acl 3002
[r1-acl-adv-3002]rule deny tcp source 192.168.1.3 0.0.0.0 destination 192.168.1. 1 0.0.0.0 destination-port eq 23
[r1-GigabitEthernet0/0/0]traffic-filter inbound acl 3002
[r1]acl 3003
[r1-acl-adv-3003]rule deny icmp source 192.168.1.3 0.0.0.0 destination 192.168.2
.1 0.0.0.0
[r1-GigabitEthernet0/0/0]traffic-filter inbound acl 3003
142
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
