扩展ACL(Extended ACL)51CTO博客 - 超凡娱乐

扩展ACL(Extended ACL)51CTO博客

2019年02月19日08时52分15秒 | 作者: 鸿骞 | 标签: 设置,宋体,装备 | 浏览: 210

试验来历:工大瑞普Cisco网络技术论坛

要求:
1.制止r1 telnet r4
2.制止r2 ping r4
3.其它拜访均答应
1.依照拓扑装备好各个路由器的接口IP地址;
2.在每台路由器上装备OSPF路由协议(有不会的清看上一次的规范ACL的有关OSPF的根本装备)
3.3.设置ACL(注:规范ACL应该在间隔方针近的当地设置,扩展ACL应该在间隔源较近的当地设置)
r3(config)#access-list 100 deny tcp host 192.168.1.1 any eq telnet
r3(config)#access-list 100 deny icmp host 192.168.1.2 any
r3(config)#access-list 100 deny icmp host 131.16.24.1 any
r3(config)#access-list 100 permit ip any any
r3(config)#int s1/2
r3(config-if)#ip access-group 100 out
OK,设置完了扩展ACL。
验证:
r1#ping 172.16.1.2

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.1.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 120/132/160 ms
r1#telnet 172.16.1.2
Trying 172.16.1.2 ...
% Destination unreachable; gateway or host downr1能够ping通,可是无法telnet
r2#ping 172.16.1.2

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.1.2, timeout is 2 seconds:
U.U.U
Success rate is 0 percent (0/5)
r2#ping
Protocol [ip]:
Target IP address: 172.16.1.2
Repeat count [5]:
Datagram size [100]:
Timeout in seconds [2]:
Extended commands [n]: y
Source address or interface: 131.16.24.1
Type of service [0]:
Set DF bit in IP header? [no]:
Validate reply data? [no]:
Data pattern [0xABCD]:
Loose, Strict, Record, Timestamp, Verbose[none]:
Sweep range of sizes [n]:
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.1.2, timeout is 2 seconds:
Packet sent with a source address of 131.16.24.1
U.U.U
Success rate is 0 percent (0/5)
r2#telnet 172.16.1.2
Trying 172.16.1.2 ... Open


User Access Verification

Password:
% Password:  timeout expired!
Password:
r2无法ping通,可是能够telnet上。
r3#ping 172.16.1.2

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.1.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 40/63/80 msOK,试验完。
版权声明
本文来源于网络,版权归原作者所有,其内容与观点不代表超凡娱乐立场。转载文章仅为传播更有价值的信息,如采编人员采编有误或者版权原因,请与我们联系,我们核实后立即修改或删除。

猜您喜欢的文章