实验原理图
实验要求：
p0能登陆r2，不能pingr2、p0不能登陆r1但能ping通r1；p1相反，既
p0 Telnet 192.168.2.2
p0 ICMP 192.168.1.1 192.168.2.1
p1 ICMP 192.168.2.2
p1 Telnet 192.168.1.1 192.168.2.1实验配置：
Router0路由器：
interface FastEthernet0/0
ip address 192.168.1.1 255.255.255.0
ip access-group ww in
interface FastEthernet0/1
ip address 192.168.2.1 255.255.255.0
ip flow-export version 9
ip access-list standard qq
access-list 100 permit ip host 192.168.1.2 host 192.168.1.1
access-list 100 permit ip host 192.168.1.2 host 192.168.2.1
ip access-list extended ww
permit tcp host 192.168.1.2 host 192.168.2.2 eq telnet
permit icmp host 192.168.1.2 host 192.168.1.1
permit icmp host 192.168.1.2 host 192.168.2.1
permit tcp host 192.168.1.3 host 192.168.1.1 eq telnet
permit tcp host 192.168.1.3 host 192.168.2.1 eq telnet
permit icmp host 192.168.1.3 host 192.168.2.2
line con 0
line aux 0
line vty 0 4
login localRouter1路由器：
username ccna privilege 15 secret 5 $1$mERr$5.a6P4JqbNiMX01usIfka/
interface FastEthernet0/0
ip address 192.168.2.2 255.255.255.0
ip access-group ww in
ip route 192.168.1.0 255.255.255.0 192.168.2.1
ip access-list extended ww
permit tcp host 192.168.1.2 host 192.168.2.2 eq telnet
permit icmp host 192.168.1.2 host 192.168.1.1
permit icmp host 192.168.1.2 host 192.168.2.1
permit tcp host 192.168.1.3 host 192.168.1.1 eq telnet
permit tcp host 192.168.1.3 host 192.168.2.1 eq telnet
permit icmp host 192.168.1.3 host 192.168.2.2
line con 0
line aux 0
line vty 0 4
login local实验结果测试：
PC0：
PC>ping 192.168.1.1
Pinging 192.168.1.1 with 32 bytes of data:
Reply from 192.168.1.1: bytes=32 time=0ms TTL=255
Reply from 192.168.1.1: bytes=32 time=0ms TTL=255
Reply from 192.168.1.1: bytes=32 time=0ms TTL=255
Reply from 192.168.1.1: bytes=32 time=0ms TTL=255
Ping statistics for 192.168.1.1:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
PC>ping 192.168.2.1
Pinging 192.168.2.1 with 32 bytes of data:
Reply from 192.168.2.1: bytes=32 time=1ms TTL=255
Reply from 192.168.2.1: bytes=32 time=1ms TTL=255
Reply from 192.168.2.1: bytes=32 time=0ms TTL=255
Reply from 192.168.2.1: bytes=32 time=0ms TTL=255
Ping statistics for 192.168.2.1:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 1ms, Average = 0ms
PC>ping 192.168.2.2
Pinging 192.168.2.2 with 32 bytes of data:
Reply from 192.168.1.1: Destination host unreachable.
Reply from 192.168.1.1: Destination host unreachable.
Reply from 192.168.1.1: Destination host unreachable.
Reply from 192.168.1.1: Destination host unreachable.
Ping statistics for 192.168.2.2:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),
PC>telnet 192.168.1.1
Trying 192.168.1.1 ...
% Connection timed out; remote host not responding
PC>telnet 192.168.2.1
Trying 192.168.2.1 ...
% Connection timed out; remote host not responding
PC>telnet 192.168.2.2
Trying 192.168.2.2 ...Open
User Access Verification
Username: ccna
Password:
r2#PC1:
PC>ping 192.168.1.1
Pinging 192.168.1.1 with 32 bytes of data:
Reply from 192.168.1.1: Destination host unreachable.
Reply from 192.168.1.1: Destination host unreachable.
Reply from 192.168.1.1: Destination host unreachable.
Reply from 192.168.1.1: Destination host unreachable.
Ping statistics for 192.168.1.1:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),
PC>ping 192.168.2.1
Pinging 192.168.2.1 with 32 bytes of data:
Reply from 192.168.1.1: Destination host unreachable.
Reply from 192.168.1.1: Destination host unreachable.
Reply from 192.168.1.1: Destination host unreachable.
Reply from 192.168.1.1: Destination host unreachable.
Ping statistics for 192.168.2.1:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),
PC>telnet 192.168.1.1
Trying 192.168.1.1 ...Open
User Access Verification
Username: ccna
Password:
r1#exit
[Connection to 192.168.1.1 closed by foreign host]
PC>telnet 192.168.2.2
Trying 192.168.2.2 ...
% Connection timed out; remote host not responding实验总结：
在实验过程中需要打开远程登陆的功能，在NP阶段会讲到ssh登录，此实验最重要的是需要运用ACL抓取路由进行路由策略