ACL

Administrator

配置路由器上的三个接口：

[Route]interface g0/0/0
[Route-GigabitEthernet0/0/0]ip address 192.168.1.24 24
[Route-GigabitEthernet0/0/0]interface g0/0/1
[Route-GigabitEthernet0/0/1]ip address 192.168.2.254 24
[Route-GigabitEthernet0/0/1]interface g0/0/2
[Route-GigabitEthernet0/0/2]ip address 1.1.1.254 24
[Route-GigabitEthernet0/0/2]interface g0/0/3
[Route-GigabitEthernet0/0/3]ip address 192.168.3.254 24
[Route-GigabitEthernet0/0/3]quit



配置用一台路由器模拟互联网：

[Huawei]interface g0/0/0
[Huawei-GigabitEthernet0/0/0]ip address 1.1.1.1 24
[Huawei-GigabitEthernet0/0/0]quit
[Huawei]ip route-static 0.0.0.0 0 1.1.1.254


各终端都可以相互ping通


回到路由器接下来做ACL限制


[Router]acl 3000
[Router-acl-adv-3000]rule 10 deny ip source 192.168.1.0 0.0.0.255 destination 19
2.168.3.100 0.0.0.0
[Router-acl-adv-3000]rule 20 permit ip source 192.168.2.0 0.0.0.255 destination
192.168.3.100 0.0.0.0
[Router-acl-adv-3000]rule 30 deny ip source any destination 192.168.3.100 0

[Router-acl-adv-3000]quit
[Router-GigabitEthernet0/0/2]traffic-filter outbound acl 3000