标准ACL实验.doc

标准ACL实验：要求：配置标准ACL禁止PC3、PC4、PC5、PC6访问PC1和PC2。1.绘制拓扑结构图2.配置路由器R0的端口ip地址、串口时钟和动态路由协议RouterenableRouter#configure terminalRouter(config)#hostname R0R0(config)#interface FastEthernet0/0R0(config-if)#ip address 192.168.10.1 255.255.255.0R0(config-if)#no shutdownR0(config-if)#exitR0(config)#interface FastEthernet1/0R0(config-if)#ip address 192.168.20.1 255.255.255.0R0(config-if)#no shutdownR0(config-if)#exitR0(config)#interface Serial2/0R0(config-if)#ip address 172.16.1.1 255.255.255.0R0(config-if)#clock rate 64000R0(config-if)#no shutdownR0(config-if)#exitR0(config)#interface Serial3/0R0(config-if)#ip address 172.16.2.2 255.255.255.0R0(config-if)#clock rate 64000R0(config-if)#no shutdownR0(config-if)#exitR0(config)#router ripR0(config-router)#network 192.168.10.0R0(config-router)#network 192.168.20.0R0(config-router)#network 172.16.0.0R0(config-router)#exitR0(config)#3.配置路由器R1的端口ip地址、串口时钟和动态路由协议RouterenableRouter#configure terminalRouter(config)#hostname R1R1(config)#interface FastEthernet0/0R1(config-if)#ip address 192.168.30.1 255.255.255.0R1(config-if)#no shutdownR1(config-if)#exitR1(config)#interface FastEthernet1/0R1(config-if)#ip address 192.168.40.1 255.255.255.0R1(config-if)#no shutdownR1(config-if)#exitR1(config)#interface Serial2/0R1(config-if)#ip address 172.16.1.2 255.255.255.0R1(config-if)#no shutdownR1(config-if)#exitR1(config)#router ripR1(config-router)#network 192.168.30.0R1(config-router)#network 192.168.40.0R1(config-router)#network 172.16.0.0R1(config-router)#exitR1(config)#4.配置路由器R2的端口ip地址、串口时钟和动态路由协议RouterenableRouter#configure terminalRouter(config)#hostname R2R2(config)#interface FastEthernet0/0R2(config-if)#ip address 192.168.50.1 255.255.255.0R2(config-if)#no shutdownR2(config-if)#exitR2(config)#interface FastEthernet1/0R2(config-if)#ip address 192.168.60.1 255.255.255.0R2(config-if)#no shutdownR2(config-if)#exitR2(config)#interface Serial2/0R2(config-if)#ip address 172.16.2.1 255.255.255.0R2(config-if)#no shutdownR2(config-if)#exitR2(config)#router ripR2(config-router)#network 192.168.50.0R2(config-router)#network 192.168.60.0R2(config-router)#network 172.16.0.0R2(config-router)#exitR2(config)#5.配置PC1PC6的ip地址、子网掩码、默认网关，确保6台PC之间能够相互通信。如测试不成功，应仔细检查。提示：将此拓扑结构图另存为两个文件，一个用来做标准ACL实验，另一个做扩展ACL实验。6.在路由器R0上设置标准ACLR0(config)#access-list 1 deny 192.168.30.0 0.0.0.255R0(config)#access-list 1 deny 192.168.40.0 0.0.0.255R0(config)#access-list 1 deny 192.168.50.0 0.0.0.255R0(config)#access-list 1 deny 192.168.60.0 0.0.0.255R0(config)#access-list 1 permit anyR0(config)#int fa0/0R0(config-if)#ip acR0(config-if)#ip access-group 1 outR0(config-if)#int fa1/0R0(config-if)#ip acR0(config-if)#ip access-group 1 outR0(config-if)#ex