一.拓扑图
二.实验需求
1、R2开启telnet服务
2、PC1可以ping通R2,但是不能telnet R2
3、PC2可以telnet R2,但是不能ping通R2
分析
1.配置IP
2.在R1.R2上配置telnet
3.写ACL表
三.配置
PC1:
int g0/0/0
ip address 192.168.1.10 24
q
ip route-static 0.0.0.0 0 192.168.1.1
PC2:
int g0/0/0
ip address 192.168.1.11 24
q
ip route-static 0.0.0 0 192.168.1.1
R1:
int g0/0/0
ip add 192.168.1.1 24
int g0/0/1
ip add 192.168.2.1 24
R2:
int g0/0/0
ip add 192.168.2.2 24
q
ip route-static 192.168.1.1 24 192.168.2.1
R1的telent:
aaa
local-user a privilege level 15 password cipher 88888888
local-user a service-type telent
q
user-interface vty 0 4
R2的telent:
aaa
local-user b privilege ;eve; 15 password cipher 88888888
local-user bservice-type telent
us
q
user-interface vty 0 4
authentication-mode aaa
调用ACL
rule deny icmp source 192.168.1.10 0.0.0.0 destination 192.168.2.2 0.0.0.0 desrination-port eq 23
rule deny icmp source 192.168.1.11 0.0.0.0 destination 192.168.2.2 0.0.0.0
rule deny tcp source 192.168.1.11 0.0.0.0 destination 192.168.1.1 0.0.255.0 destination-port eq 23
teaffic-filter inbound acl name acl1
四.结果