ACL Access Control List Experiment

ACL Access Control List Experiment

Insert picture description here

All interface IP addresses have been configured, set ACL according to requirements

Experimental requirements: only host 1 is allowed to access host 2, and the others are prohibited
[router] acl number 2000
[router] rule 5 permit source 192.168.1.1 0
[router] rule deny
[router] interface GigabitEthernet0/0/2
[router] ip address 192.168.2.254 255.255.255.0
[router] traffic-filter outbound acl 2000

Experimental requirements: prohibit ping web server from 192.168.1.0/24 network
[router] acl number 3000
[router] rule 5 deny icmp source 192.168.1.0 0.0.0.255 destination 192.168.3.1 0
[router] interface GigabitEthernet0/0/1
[router] ip address 192.168.3.254 255.255.255.0
[Router] Enter the entry interface or enter the exit interface settings. The next step can be
[Router] interface GigabitEthernet0/0/0
[Router] ip address 192.168.1.254 255.255.255.0
[Router] traffic-filter inbound acl 3000

Experimental requirements: only the test machine is allowed to access the WEB server www service
[router] rule permit tcp source 192.168.1.2 0 destination 192.168.3.1 0
.0.0.255 destination-port eq 80

Guess you like

Origin blog.csdn.net/Dark_Tk/article/details/112392562