ACL基础配置

 1.网络配置

[Huawei]sysname pc1
[pc1]in e0/0/0
[pc1-Ethernet0/0/0]ip address 192.168.1.2 24

[Huawei]sysname pc2
[pc2]int e0/0/0
[pc2-Ethernet0/0/0]ip address 192.168.1.3 24

[r1]int e0/0/0
[r1-Ethernet0/0/0]ip address 192.168.1.1 24
[r1-Ethernet0/0/0]q
[r1]int e0/0/1
[r1-Ethernet0/0/1]ip address 192.168.2.1 24

[r2]int e0/0/0
[r2-Ethernet0/0/0]ip address 192.168.2.2 24

[pc1]ip route-static 192.168.2.0 24 192.168.1.1
[pc2]ip route-static 192.168.2.0 24 192.168.1.1
[r2]ip route-static 192.168.1.0 24 192.168.2.1

[r1]aaa
[r1-aaa]local-user yxz privilege level 15 password cipher 12345
[r1-aaa]local-user yxz service-type telnet
[r1]user-interface vty 0 4
[r1-ui-vty0-4]authentication-mode aaa

r2]aaa
[r2-aaa]local-user yxz privilege level 15 password cipher 12345
[r2-aaa]local-user yxz service-type telnet
[r2]user-interface vty 0 4
[r2-ui-vty0-4]authentication-mode aaa

[r1]acl 3000
[r1-acl-adv-3000]rule deny ip source 192.168.1.2 0 destination 192.168.1.1 0

[r1-acl-adv-3000]rule deny tcp source 192.168.1.3 0 destination 192.168.1.1 0 destination-port eq 23
[r1-acl-adv-3000]q
[r1]int g0/0/0
[r1-GigabitEthernet0/0/0]traffic-filter inbound acl 3000

r2]acl 3001    
[r2-acl-adv-3001]rule deny ip source 192.168.1.3 0 destination 192.168.2.2 0

r2-acl-adv-3001]rule deny tcp source 192.168.1.2 0 destination 192.168.2.2 0 destination-port eq 23
[r2-acl-adv-3001]q
[r2]int g0/0/0
[r2-GigabitEthernet0/0/0]traffic-filter inbound acl 3001