CCNA笔记之第二十三节:ACL(实验 2)
2013-04-26 12:09
141 查看
1. 实验2:扩展ACL:最好放在离目的地远的路由器上好
2. 拓扑图:
![](http://ilync.blog.51cto.com/attachment/201304/26/6203086_1366949324upM7.jpg)
3. 具体步骤:
1) 把上节实验远程控制中的ACL no 掉:
![](http://ilync.blog.51cto.com/attachment/201304/26/6203086_1366949328b2PB.jpg)
2) 验证telnet远程访问:R1、R2和PC1又可以telnet R3了:
![](http://ilync.blog.51cto.com/attachment/201304/26/6203086_1366949331dFrV.jpg)
![](http://ilync.blog.51cto.com/attachment/201304/26/6203086_1366949334MI6F.jpg)
3) 配置扩展ACL:使得R1、R2不可以访问R3,PC1可以telnet
![](http://ilync.blog.51cto.com/attachment/201304/26/6203086_1366949338CUBQ.jpg)
4) 验证telnet:R1、R2不可以,PC1可以:
![](http://ilync.blog.51cto.com/attachment/201304/26/6203086_1366949341bLZZ.jpg)
![](http://ilync.blog.51cto.com/attachment/201304/26/6203086_1366949343CZZ8.jpg)
5) PC1、R1、R2 ping PC2 :不通
![](http://ilync.blog.51cto.com/attachment/201304/26/6203086_1366949346aBns.jpg)
原因是:ACL中deny 掉了
6) 解决能够ping通:
![](http://ilync.blog.51cto.com/attachment/201304/26/6203086_1366949349pGz4.jpg)
7) 验证ping:
![](http://ilync.blog.51cto.com/attachment/201304/26/6203086_1366949354sFjs.jpg)
本文由联科教育www.ilync.cn提供,转载请注明出处!!
2. 拓扑图:
![](http://ilync.blog.51cto.com/attachment/201304/26/6203086_1366949324upM7.jpg)
3. 具体步骤:
1) 把上节实验远程控制中的ACL no 掉:
![](http://ilync.blog.51cto.com/attachment/201304/26/6203086_1366949328b2PB.jpg)
2) 验证telnet远程访问:R1、R2和PC1又可以telnet R3了:
![](http://ilync.blog.51cto.com/attachment/201304/26/6203086_1366949331dFrV.jpg)
![](http://ilync.blog.51cto.com/attachment/201304/26/6203086_1366949334MI6F.jpg)
3) 配置扩展ACL:使得R1、R2不可以访问R3,PC1可以telnet
![](http://ilync.blog.51cto.com/attachment/201304/26/6203086_1366949338CUBQ.jpg)
4) 验证telnet:R1、R2不可以,PC1可以:
![](http://ilync.blog.51cto.com/attachment/201304/26/6203086_1366949341bLZZ.jpg)
![](http://ilync.blog.51cto.com/attachment/201304/26/6203086_1366949343CZZ8.jpg)
5) PC1、R1、R2 ping PC2 :不通
![](http://ilync.blog.51cto.com/attachment/201304/26/6203086_1366949346aBns.jpg)
原因是:ACL中deny 掉了
6) 解决能够ping通:
![](http://ilync.blog.51cto.com/attachment/201304/26/6203086_1366949349pGz4.jpg)
7) 验证ping:
![](http://ilync.blog.51cto.com/attachment/201304/26/6203086_1366949354sFjs.jpg)
本文由联科教育www.ilync.cn提供,转载请注明出处!!
相关文章推荐
- CCNA笔记之第二十二节:ACL(实验 1)
- CCNA笔记之第十六节:RIP协议(大实验背景)
- CCNA学习笔记九——访问控制列表(ACL)
- CCNA培训课总结笔记--标准访问控制列表实验(八)
- CCNA笔记之第十七节:RIP协议(大实验1)
- CCNA实验—ACL
- CCNA培训课总结笔记--RIPv2的汇总实验(七)
- CCNA笔记之第十八节:RIP协议(大实验2)
- CCNA培训课总结笔记--RIPv2的汇总实验(七)
- CCNA培训课总结笔记--配置OSPF实验(十一)
- CCNA培训课总结笔记--标准访问控制列表实验(八)
- CCNA-ACL实验(标准ACL,扩展ACL,命名ACL,基于时间ACL,动态ACL,自反ACL)
- CCNA 学习笔记(八)--交换知识(ACL)
- CCNA培训课总结笔记--扩展访问控制列表实验(九)
- Packet Tracer 5.0建构CCNA实验攻略(15)――ACL简单的配置
- CCNA培训课总结笔记--配置EIGRP实验(十)
- CCNA-ACL实验动态ACL,自反ACL
- CCNA培训课总结笔记--配置OSPF实验(十一)
- CCNA笔记之第十九节:RIP协议(大实验3)
- (转载)CCNA学习笔记23--EIGRP实验