ACL访问控制

ACL部分目前了解的还不是很透。

先放2个例子吧

例1：设置让R1无法ping通R3上的3.3.3.3

 

 在R2上得e0/0端口做如下设置：

 

!
interface Ethernet0/0
 ip address 192.168.12.2 255.255.255.0
 ip access-group 1 out
 half-duplex
!
interface Ethernet0/1
 ip address 192.168.23.2 255.255.255.0
 half-duplex
!
interface Ethernet0/2
 no ip address
 shutdown
 half-duplex
!
interface Ethernet0/3
 no ip address
 shutdown
 half-duplex
!
router eigrp 10
 network 192.168.12.0
 network 192.168.23.0
 auto-summary
!
ip http server
no ip http secure-server
!
!
!
access-list 1 deny   3.3.3.3
access-list 1 permit any
!
!
control-plane
!

 

 

例2：

让R1可以ping通R3的3.3.3.3,但是无法连接上

还是在R2上进行设置

 

!
interface Ethernet0/0
 ip address 192.168.12.2 255.255.255.0
 ip access-group 101 in
 half-duplex
!
interface Ethernet0/1
 ip address 192.168.23.2 255.255.255.0
 half-duplex
!
interface Ethernet0/2
 no ip address
 shutdown
 half-duplex
!
interface Ethernet0/3
 no ip address
 shutdown
 half-duplex
!
router eigrp 10
 network 192.168.12.0
 network 192.168.23.0
 auto-summary
!
ip http server
no ip http secure-server
!
!
!
access-list 101 deny   tcp any host 3.3.3.3 eq telnet
access-list 101 permit ip any any
!
!
control-plane
!