ACL 实验
1.PC1 不能ping通PC2
在R1上进行扩展ACL的配置
干掉去的流量
[R1]acl 3000
[R1-acl-adv-3000]rule deny icmp source 192.168.1.2 0.0.0.0 destination 172.16.1.2 0.0.0.0 icmp-type echo
[R1-acl-adv-3000]rule permit ip source any destination any
调用
[R1]interface g0/0/0
[R1-GigabitEthernet0/0/0]traffic-filter inbound acl 3000
2.R1 不能远程登陆R3
要使用远程登陆首先要开启远程登陆
R3上开启远程登陆
[R3]aaa
[R3-aaa]local-user xx privilege level 15 password cipher yy
调用
[R3]user-interface vty 0 4
[R3-ui-vty0-4]authentication-mode aaa
在R2上进行acl配置
[R2]acl 3000
[R2-acl-adv-3000]rule deny tcp source 12.1.1.1 0.0.0.0 destination23.1.1.2 0.0.0.0 destination-port eq telnet
[R2-acl-adv-3000]rule permit ip source any destination any
调用
[R2]interface g0/0/0
[R2-GigabitEthernet0/0/0]traffic-filter inbound acl 3000
3.R3不能ping通R1
同样在R2上进行配置
[R2]acl 3300
[R2-acl-adv-3300]rule deny icmp source 23.1.1.2 0.0.0.0 destination 12.1.1.1 0.0.0.0 icmp-type echo
[R2-acl-adv-3300]rule permit ip source any destination any
[R2]interface g0/0/1
[R2-GigabitEthernet0/0/1]traffic-filter inbound acl 3300
4.R3 登陆R1但不能ping通