实验二十七：基本的ACL包过滤

1、实验二十七：基本的ACL包过滤一、 理论基础基本的ACL包过滤只能根据数据包的源地址进行访问控制。二、 实验案例ACL包过滤的配置1、实验拓扑图： 1、 配置说明：交换机的管理IP地址：192.168.10.10 子网掩码；255.255.255.0PC1的IP：192.168.10.2 子网掩码；255.255.255.0PC2的IP：192.168.10.3 子网掩码；255.255.255.02、 具体配置：Quidwayacl number 2000 match-order configQuidway-acl-basic-2000rule 1 permit source 192.168

2、.10.2 0Quidway-acl-basic-2000quitQuidwayuser-interface vty 0 4Quidway-ui-vty0-4acl 2000 inboundQuidway-ui-vty0-4authentication-mode passwordQuidway-ui-vty0-4user privilege level 3Quidway-ui-vty0-4set authentication password simple sunkeQuidway-ui-vty0-4quitQuidwayint vlan 1Quidway-Vlan-interface1%Ap

3、r 2 00:10:15 2000 Quidway L2INF/5/VLANIF LINK STATUS CHANGE: Vlan-interface1: turns into UP stateQuidway-Vlan-interface1ip address 192.168.10.10 255.255.255.0Quidway-Vlan-interface1%Apr 2 00:10:36 2000 Quidway IFNET/5/UPDOWN:Line protocol on the interface Vlan-interface1 turns into UP stateQuidwaydi

4、s cur sysname Quidwayradius scheme system server-type huawei primary authentication 127.0.0.1 1645 primary accounting 127.0.0.1 1646 user-name-format without-domaindomain system radius-scheme system access-limit disable state active idle-cut disable self-service-url disable messenger time disable do

5、main default enable system local-server nas-ip 127.0.0.1 key huawei queue-scheduler wrr 1 2 4 8acl number 2000 rule 1 permit source 192.168.10.2 0vlan 1interface Vlan-interface1 ip address 192.168.10.10 255.255.255.0interface Aux0/0interface Ethernet0/1interface Ethernet0/2interface Ethernet0/3interface Ethernet0/4interface Ethernet0/5interface Ethernet0/6interface Ethernet0/7interface Ethernet0/8interface NULL0user-interface aux 0user-interface vty 0 4 acl 2000 inbound user privilege level 3 set authentication password simple sunkereturn<Quidway>%Apr 2 00:17:40 2000 Quidway