注册 | 登录 忘记密码? 51cto首页 | 博客 | 论坛 | 招聘
热点文章 科普系列之-使用Windows的..
 帮助

Lab:10标准访问列表


2007-04-18 17:00:29
 标签:Lab:10 标准访问   [推送到技术圈]

版权声明:原创作品,允许转载,转载时请务必以超链接形式标明文章 原始出处 、作者信息和本声明。否则将追究法律责任。http://guyun.blog.51cto.com/71128/24148
 
Router>
Router>en
Router#con t
Router(config)#host R1
R1(config)#int s0
R1(config-if)#ip add 20.2.2.1 255.255.255.0
R1(config-if)#no sh
R1(config-if)#exit
R1(config)#route rip
R1(config-router)#net 10.0.0.0
R1(config-router)#net 20.0.0.0
R1(config-router)#exit
R1(config)#exit
R1#show ip route
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
       i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate default
       U - per-user static route
Gateway of last resort is not set
     10.0.0.0/24 is subnetted, 1 subnets
C       10.1.1.0 is directly connected, Loopback1
     20.0.0.0/24 is subnetted, 1 subnets
C       20.2.2.0 is directly connected, Serial0
R1#show ip route
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
       i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate default
       U - per-user static route
Gateway of last resort is not set
     10.0.0.0/24 is subnetted, 1 subnets
C       10.1.1.0 is directly connected, Loopback1
     20.0.0.0/24 is subnetted, 1 subnets
C       20.2.2.0 is directly connected, Serial0
R    30.0.0.0 [120/1] via 20.2.2.2, 00:07:36, Serial0
R1#ping 30.3.3.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 30.3.3.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms
R1#con t
Enter configuration commands, one per line.  End with CNTL/Z.
R1(config)#access-list 2 deny host 30.3.3.2             写标准ACL2拒绝主机30.3.3.2通过
R1(config)#access-list 2 permit any                          其他均允许
R1(config)#int s0
R1(config-if)#ip access-group 2 in                             将ACL2 应用在S0端口,禁止进入

R1(config-if)#exit
R1(config)#exit
R1#ping 30.3.3.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 30.3.3.2, timeout is 2 seconds:
UUUUU
Success rate is 0 percent (0/5), round-trip min/avg/max = 1/2/4 ms
R1#ping 30.3.3.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 30.3.3.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms
 
Router>
Router>en
Router#con t
Enter configuration commands, one per line.  End with CNTL/Z.
Router(config)#host R2
R2(config)#int s0
R2(config-if)#ip add 20.2.2.2 255.255.255.0
R2(config-if)#clock rate 64000
R2(config-if)#no sh
%LINK-3-UPDOWN: Interface Serial0, changed state to up
R2(config-if)#exit
R2(config)#int s1
R2(config-if)#ip add 30.3.3.1 255.255.255.0
R2(config-if)#clock rate 64000
R2(config-if)#no sh
%LINK-3-UPDOWN: Interface Serial1, changed state to up
R2(config-if)#exit
R2(config)#route rip
R2(config-router)#net 20.0.0.0
R2(config-router)#net 30.0.0.0
R2(config-router)#exit
R2(config)#exit
 
Router>
Router>en
Router#con t
Enter configuration commands, one per line.  End with CNTL/Z.
Router(config)#hostname R3
R3(config)#int s0
R3(config-if)#ip add 30.3.3.2 255.255.255.0
R3(config-if)#no sh
%LINK-3-UPDOWN: Interface Serial0, changed state to up
R3(config-if)#exit
R3(config)#route rip
R3(config-router)#net 30.0.0.0
R3(config-router)#exit
R3(config)#exit

本文出自 “Ж孤云Ж” 博客,请务必保留此出处http://guyun.blog.51cto.com/71128/24148





    文章评论
 
2007-04-18 17:26:23
看过。。呵

 

发表评论

昵   称:
验证码:  点击图片可刷新验证码  博客过2级,无需填写验证码
内   容: