ACL
配置路由器上的三个接口:
interface g0/0/0
ip address 192.168.1.24 24
interface g0/0/1
ip address 192.168.2.254 24
interface g0/0/2
ip address 1.1.1.254 24
interface g0/0/3
ip address 192.168.3.254 24
quit
配置用一台路由器模拟互联网:
interface g0/0/0
ip address 1.1.1.1 24
quit
ip route-static 0.0.0.0 0 1.1.1.254
各终端都可以相互ping通
回到路由器接下来做ACL限制
acl 3000
rule 10 deny ip source 192.168.1.0 0.0.0.255 destination 19
2.168.3.100 0.0.0.0
rule 20 permit ip source 192.168.2.0 0.0.0.255 destination
192.168.3.100 0.0.0.0
rule 30 deny ip source any destination 192.168.3.100 0
quit
traffic-filter outbound acl 3000
页:
[1]