Lab:10标准访问列表

 

Router>
Router>en
Router#con t
Router(config)#host R1
R1(config)#int s0
R1(config-if)#ip add 20.2.2.1 255.255.255.0
R1(config-if)#no sh
R1(config-if)#exit
R1(config)#route rip
R1(config-router)#net 10.0.0.0
R1(config-router)#net 20.0.0.0
R1(config-router)#exit
R1(config)#exit
R1#show ip route
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
       i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate default
       U - per-user static route

Gateway of last resort is not set

     10.0.0.0/24 is subnetted, 1 subnets
C       10.1.1.0 is directly connected, Loopback1
     20.0.0.0/24 is subnetted, 1 subnets
C       20.2.2.0 is directly connected, Serial0

R1#show ip route
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
       i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate default
       U - per-user static route

Gateway of last resort is not set

     10.0.0.0/24 is subnetted, 1 subnets
C       10.1.1.0 is directly connected, Loopback1
     20.0.0.0/24 is subnetted, 1 subnets
C       20.2.2.0 is directly connected, Serial0
R    30.0.0.0 [120/1] via 20.2.2.2, 00:07:36, Serial0

R1#ping 30.3.3.2

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 30.3.3.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms
R1#con t
Enter configuration commands, one per line.  End with CNTL/Z.
R1(config)#access-list 2 deny host 30.3.3.2             写标准ACL2拒绝主机30.3.3.2通过
R1(config)#access-list 2 permit any                          其他均允许
R1(config)#int s0
R1(config-if)#ip access-group 2 in                             将ACL2 应用在S0端口，禁止进入
R1(config-if)#exit
R1(config)#exit
R1# ping 30.3.3.2

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 30.3.3.2, timeout is 2 seconds:
UUUUU
Success rate is 0 percent (0/5), round-trip min/avg/max = 1/2/4 ms
R1# ping 30.3.3.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 30.3.3.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms

 

Router>
Router>en
Router#con t
Enter configuration commands, one per line.  End with CNTL/Z.
Router(config)#host R2
R2(config)#int s0
R2(config-if)#ip add 20.2.2.2 255.255.255.0
R2(config-if)#clock rate 64000
R2(config-if)#no sh
%LINK-3-UPDOWN: Interface Serial0, changed state to up
R2(config-if)#exit
R2(config)#int s1
R2(config-if)#ip add 30.3.3.1 255.255.255.0
R2(config-if)#clock rate 64000
R2(config-if)#no sh
%LINK-3-UPDOWN: Interface Serial1, changed state to up
R2(config-if)#exit
R2(config)#route rip
R2(config-router)#net 20.0.0.0
R2(config-router)#net 30.0.0.0
R2(config-router)#exit
R2(config)#exit

 

Router>
Router>en
Router#con t
Enter configuration commands, one per line.  End with CNTL/Z.
Router(config)#hostname R3
R3(config)#int s0
R3(config-if)#ip add 30.3.3.2 255.255.255.0
R3(config-if)#no sh
%LINK-3-UPDOWN: Interface Serial0, changed state to up
R3(config-if)#exit
R3(config)#route rip
R3(config-router)#net 30.0.0.0
R3(config-router)#exit
R3(config)#exit