路由器防火墙acl配置

《路由器防火墙acl配置》由会员上传分享，免费在线阅读，更多相关内容在行业资料-天天文库。

1、标准ACL配置参考实验内容：拒绝PC2所在网段访问路由器R2，同时只允许主机PC3访问路由器R2的Telnet服务。整个网络配置EIGRP保证IP的连通性。实验调试：在PC1网络所在的主机上ping219.17.100.1，应该通，在PC2网络所在的主机上pingping219.17.100.1，应该不通，在主机PC3上Telnet219.17.100.1，应该成功。//配置路由器1Router#shiprouteCodes:C-connected,S-static,R-RIP,M-mobile,B-BGPD-EIGRP,EX-EIGRPexternal

2、,O-OSPF,IA-OSPFinterareaN1-OSPFNSSAexternaltype1,N2-OSPFNSSAexternaltype2E1-OSPFexternaltype1,E2-OSPFexternaltype2i-IS-IS,su-IS-ISsummary,L1-IS-ISlevel-1,L2-IS-ISlevia-IS-ISinterarea,*-candidatedefault,U-per-userstaticrouteo-ODR,P-periodicdownloadedstaticrouteGatewayoflastresorti

3、snotsetR219.17.100.0/24[120/1]via201.100.11.2,00:00:10,Serial0/0/0R199.6.13.0/24[120/1]via201.100.11.2,00:00:10,Serial0/0/0C192.5.5.0/24isdirectlyconnected,FastEthernet0/0R223.8.151.0/24[120/2]via201.100.11.2,00:00:10,Serial0/0/0C201.100.11.0/24isdirectlyconnected,Serial0/0/0C192

4、.168.3.0/24isdirectlyRouter#Router#conftEnterconfigurationcommands,oneperline.EndwithCNTL/Z.Router(config)#routereigrp1Router(config-router)#net192.168.3.00.0.0.255Router(config-router)#net192.5.5.00.0.0.255Router(config-router)#net201.100.11.0Router(config-router)#noautoRouter(c

5、onfig-router)#noauto-summaryRouter(config-router)#*Sep2503:08:55.927:IP-EIGRP(Default-IP-Routing-Table:1):Neighbor219.17.100.1notoncommonsubnetforFastEthernet0/1*Sep2503:09:09.915:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceFastEthernet0/1,changedstatetodown*Sep2503:09:11.907:%LIN

6、EPROTO-5-UPDOWN:LineprotocolonInterfaceFastEthernet0/1,changedstatetoup*Sep2503:09:16.487:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceFastEthernet0/1,changedstatetodown*Sep2503:09:28.371:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceFastEthernet0/1,changedstatetoup*Sep2503:09:57.627:

7、%DUAL-5-NBRCHANGE:IP-EIGRP(0)1:Neighbor201.100.11.2(Serial0/0/0)isresync:peergraceful-restart//配置路由器2Router#shiprouteCodes:C-connected,S-static,R-RIP,M-mobile,B-BGPD-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterareaN1-OSPFNSSAexternaltype1,N2-OSPFNSSAexternaltype2E1-OSPFexternaltype

8、1,E2-OSPFexternaltype2i-IS-IS,su-IS-ISsu