ACL基础实验

ACL基础实验

题目要求：

 第一步：给各个接口配置IP，因为下面两个路由器充当pc，所以需要写两条缺省，下一跳是R1的0/0/0接口

第二步：先进行ping的配置（PC1不可以pingR1，PC2不可以pingR2）

[R1]acl 3000
[R1-acl-adv-3000]rule deny icmp source 192.168.1.1 0 destination 192.168.1.3 0
[R1-acl-adv-3000]rule deny icmp source 192.168.1.2 0 destination 192.168.2.2 0
[R1-acl-adv-3000]q
[R1]interface GigabitEthernet 0/0/0
[R1-GigabitEthernet0/0/0]traffic-filter inbound acl 3000
[R1]acl 3000

第三步：在路由器上开启远程端口

[R1]aaa
[R1-aaa]local-user niuma privilege level 15 password cipher 123456
[R1-aaa]local-user niuma service-type telnet 
[R1-aaa]q
[R1]user-interface vty 0 4	
[R1-ui-vty0-4]authentication-mode aaa
[R2]aaa
[R2-aaa]local-user niuma privilege level 15 password cipher 123456	
[R2-aaa]local-user niuma service-type telnet 
[R2-aaa]q
[R2]user-interface vty0 4	
[R2-ui-vty0-4]authentication-mode aaa

第四步：配置telnet设置

[R1]acl 3001
[R1-acl-adv-3001]rule deny tcp source 192.168.1.1 0 destination 192.168.2.2 0 de
stination-port eq 23 
[R1-acl-adv-3001]rule deny tcp source 192.168.1.2 0 destination 192.168.1.3 0 de
stination-port eq 23
[R1]interface GigabitEthernet 0/0/0
[R1-GigabitEthernet0/0/0]traffic-filter inbound acl 3001
[R1]acl 3001

最后查看是否完成配置要求