ACL 华为设备

ACL 实验

1.PC1 不能ping通PC2

在R1上进行扩展ACL的配置
干掉去的流量

[R1]acl 3000
[R1-acl-adv-3000]rule deny icmp  source 192.168.1.2 0.0.0.0 destination 172.16.1.2 0.0.0.0  icmp-type echo
[R1-acl-adv-3000]rule permit ip source any destination any 

调用

[R1]interface g0/0/0
[R1-GigabitEthernet0/0/0]traffic-filter inbound acl 3000

2.R1 不能远程登陆R3

要使用远程登陆首先要开启远程登陆
R3上开启远程登陆

[R3]aaa	
[R3-aaa]local-user xx privilege level 15 password cipher yy
调用
[R3]user-interface vty 0 4
[R3-ui-vty0-4]authentication-mode aaa

在R2上进行acl配置

[R2]acl 3000
[R2-acl-adv-3000]rule deny tcp source 12.1.1.1 0.0.0.0 destination23.1.1.2 0.0.0.0 destination-port eq telnet 
[R2-acl-adv-3000]rule permit ip source any destination any 

调用

[R2]interface g0/0/0	
[R2-GigabitEthernet0/0/0]traffic-filter inbound acl 3000

3.R3不能ping通R1

同样在R2上进行配置

[R2]acl 3300
[R2-acl-adv-3300]rule deny icmp source 23.1.1.2 0.0.0.0 destination 12.1.1.1 0.0.0.0 icmp-type echo
[R2-acl-adv-3300]rule permit ip source any  destination any 
[R2]interface g0/0/1
[R2-GigabitEthernet0/0/1]traffic-filter inbound acl 3300

4.R3 登陆R1但不能ping通

5.R1不能登陆但可以ping通R3