华为标准ACL高级ACL应用试验练作业(tony)

《华为标准ACL高级ACL应用试验练作业(tony)》由会员上传分享，免费在线阅读，更多相关内容在行业资料-天天文库。

1、华为标准ACL/高级ACL应用试验练习PC的IP：（PC1：192.168.10.2/24-----PC2:192.168.20.2/24-----PC3:192.168.30.2/24）《R1》配置sysnameR1#aclnumber2000rule5denysource192.168.30.00.0.0.255#interfaceGigabitEthernet0/0/0ipaddress12.12.12.1255.255.255.0#interfaceGigabitEthernet0/0/1ipaddress19

2、2.168.10.1255.255.255.0traffic-filteroutboundacl2000#interfaceLoopBack0ipaddress6.6.6.6255.255.255.255#ospf1router-id6.6.6.6area0.0.0.0network6.6.6.60.0.0.0network12.12.12.00.0.0.255network23.23.23.00.0.0.255network192.168.10.00.0.0.255network192.168.20.00.0.0.2

3、55network192.168.30.00.0.0.255实验练习人：tony华为标准ACL/高级ACL应用试验练习验证：R1上配置标准ACL实现除PC3网段外都能访问到PC1--------------------------------------------------------------------------------------《R2》配置#sysnameR2#superpasswordlevel3cipher%$%$re;;TUJ5HEeK)wHJ_7Z5,"cq%$%$#aclnumber200

4、0rule5permitsource192.168.30.20#aaalocal-useradminpasswordcipher%$%$"q=Na!UA&#;tK9i)imOPe9.%$%$local-useradminservice-typetelnet#interfaceGigabitEthernet0/0/0ipaddress12.12.12.2255.255.255.0#interfaceGigabitEthernet0/0/1ipaddress23.23.23.1255.255.255.0#interfac

5、eLoopBack0ipaddress5.5.5.5255.255.255.255#ospf1router-id5.5.5.5area0.0.0.0network5.5.5.50.0.0.0network12.12.12.00.0.0.255实验练习人：tony华为标准ACL/高级ACL应用试验练习network23.23.23.00.0.0.255network192.168.10.00.0.0.255network192.168.20.00.0.0.255network192.168.30.00.0.0.255#u

6、ser-interfacevty04acl2000inboundauthentication-modepassworduserprivilegelevel3setauthenticationpasswordcipher%$%$+^DtK!W3k(zO(gS4hO.K,"io7X'Q@.8~VPq],J,M^}lP"ir,%$%$#验证：在R2配置标准ACL只允许PC3远程管理R2，其他PC均不能telnet到R2实验练习人：tony华为标准ACL/高级ACL应用试验练习-------------------------

7、-----------------------------------------------《R3》配置#sysnameR3#aclnumber3000rule5permiticmpdestination192.168.20.20rule10permiticmpdestination192.168.30.20rule15denytcprule20denyigmprule25denyudp#interfaceGigabitEthernet0/0/0ipaddress192.168.20.1255.255.255.0#i

8、nterfaceGigabitEthernet0/0/1ipaddress23.23.23.2255.255.255.0#interfaceGigabitEthernet0/0/2ipaddress192.168.30.1255.255.255.0#interfaceLoopBack0ipaddress4.4.4.4255.255