学习ACL有感

在这个ACL实验中禁止R1 ping R4，但可以远程控制R4。
对于R2不能远程控制R4，能ping通R4。详细配置如下：
pc 1
-------------------------------------------
en
conf t
ho pc1
no ip do lo
no ip routing
lin c 0
no exec-t
logg s
exit

int f0/0
ip add 192.168.0.1 255.255.255.0
no sh
exit
ip default-g 192.168.0.3
end

-------------------------------------------
pc 2
-------------------------------------------
en
conf t
ho pc2
no ip do lo
no ip routing
lin c 0
no exec-t
logg s
exit

int f0/0
ip add 192.168.0.2 255.255.255.0
no sh
exit
ip default-g 192.168.0.3
end

-------------------------------------------
SW
-------------------------------------------
en
conf t
no ip do lo
lin c 0
no exec-t
logg s
end

-------------------------------------------
R3
-------------------------------------------
en
conf t
ho R3
no ip do lo
lin c 0
no exec-t
logg s
exit

int f0/0
ip add 192.168.0.3 255.255.255.0
no sh
int s1/0
ip add 34.0.0.3 255.0.0.0
no sh
exit

router ospf 1
net 192.168.0.0 0.0.0.255 area 1
net 34.0.0.0 0.255.255.255 area 1
exit

acc 101 de icmp ho 192.168.0.1 ho 34.0.0.4 echo
acc 101 de tcp ho 192.168.0.2 ho 34.0.0.4 eq 23
acc 101 p ip any any
int s1/0
ip access-g 101 out
end

-------------------------------------------
R4
-------------------------------------------
en
conf t
ho R4
no ip do lo
lin c 0
no exec-t
logg s
exit

int s0/0
ip add 34.0.0.4 255.0.0.0
no sh
exit

router ospf 1
net 34.0.0.0 0.255.255.255 area 1
enable pass 123456
lin vty 0 4
pass 123456
login

end