高级ACL配置

 高级ACL

AR1配置

<Huawei>sys
Enter system view, return user view with Ctrl+Z.   
[Huawei]sysname R1
[R1]int g0/0/2
[R1-GigabitEthernet0/0/2]ip ad 192.168.1.254 24
[R1-GigabitEthernet0/0/2]int g0/0/0
[R1-GigabitEthernet0/0/0]ip ad 192.168.12.1 24
[R1-GigabitEthernet0/0/0]q  
[R1]ip route-static 0.0.0.0 0.0.0.0 192.168.12.2
[R1]acl 3000  
[R1-acl-adv-3000]rule 10 permit tcp source 192.168.1.0 0.0.0.255 destination 192.168.3.10 0.0.0.0 destination-port eq 80
[R1]acl 3000
[R1-acl-adv-3000]rule 20 permit ip source 192.168.1.0 0.0.0.255 destination 192.
168.2.0 0.0.0.255
[R1-acl-adv-3000]rule 30 deny ip source 192.168.1.0 0.0.0.255 destination any
[R1]int g0/0/2
[R1-GigabitEthernet0/0/2]traffic-filter inbound acl 3000
 

AR2配置

<Huawei> sys
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname R2
[R2]int g0/0/0
[R2-GigabitEthernet0/0/0]ip ad 192.168.12.2 24
[R2-GigabitEthernet0/0/0]int g0/0/2
[R2-GigabitEthernet0/0/2]ip ad 192.168.2.254 24
[R2-GigabitEthernet0/0/2]int g0/0/1
[R2-GigabitEthernet0/0/1]ip ad 192.168.23.2 24
[R2-GigabitEthernet0/0/1]Q
[R2]ip route-static 192.168.1.0 24 192.168.12.1
[R2]ip route-static 192.168.3.0 24 192.168.23.3

AR3配置·

<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname R3
[R3]int g0/0/0
[R3-GigabitEthernet0/0/0]ip ad 192.168.23.3 24
[R3-GigabitEthernet0/0/0]int g0/0/1
[R3-GigabitEthernet0/0/1]ip ad 192.168.3.254 24
[R3]ip route-static 0.0.0.0 0.0.0.0 192.168.23.2