Administrator 发表于 4 天前

ACL


配置路由器上的三个接口:

interface g0/0/0
ip address 192.168.1.24 24
interface g0/0/1
ip address 192.168.2.254 24
interface g0/0/2
ip address 1.1.1.254 24
interface g0/0/3
ip address 192.168.3.254 24
quit



配置用一台路由器模拟互联网:

interface g0/0/0
ip address 1.1.1.1 24
quit
ip route-static 0.0.0.0 0 1.1.1.254


各终端都可以相互ping通


回到路由器接下来做ACL限制


acl 3000
rule 10 deny ip source 192.168.1.0 0.0.0.255 destination 19
2.168.3.100 0.0.0.0
rule 20 permit ip source 192.168.2.0 0.0.0.255 destination
192.168.3.100 0.0.0.0
rule 30 deny ip source any destination 192.168.3.100 0

quit
traffic-filter outbound acl 3000










页: [1]
查看完整版本: ACL