王哲伟ACL实验

一.拓扑图

 二.实验需求

 1、R2开启telnet服务
2、PC1可以ping通R2，但是不能telnet R2
3、PC2可以telnet R2，但是不能ping通R2

分析

1.配置IP
2.在R1.R2上配置telnet
3.写ACL表

三.配置

     PC1：

int g0/0/0

ip address 192.168.1.10 24

q

ip route-static 0.0.0.0 0 192.168.1.1

     PC2:

int g0/0/0

ip address 192.168.1.11 24

q

ip route-static 0.0.0 0 192.168.1.1

      R1:

int g0/0/0

ip add 192.168.1.1 24

int g0/0/1

ip add 192.168.2.1 24

      R2:

int g0/0/0

ip add 192.168.2.2 24

q

ip route-static 192.168.1.1 24 192.168.2.1

     R1的telent:

aaa

local-user a privilege level 15 password cipher 88888888

local-user a service-type telent

q

user-interface vty 0 4

      R2的telent:

aaa

local-user b privilege ;eve; 15 password cipher 88888888

local-user bservice-type telent

us

q

user-interface vty 0 4

authentication-mode aaa

      调用ACL

rule deny icmp source 192.168.1.10 0.0.0.0 destination 192.168.2.2 0.0.0.0 desrination-port eq 23

rule deny icmp source 192.168.1.11 0.0.0.0 destination 192.168.2.2 0.0.0.0

rule deny tcp source 192.168.1.11 0.0.0.0 destination 192.168.1.1 0.0.255.0 destination-port eq 23

teaffic-filter inbound acl name acl1

四.结果