版权声明:如果对大家有帮助,大家可以自行转载的。https://blog.csdn.net/qq_37992321/article/details/84892181
1.技术原理
Router>en Router#config t Enter configuration commands, one per line. End with CNTL/Z. Router(config)#int f0/0 Router(config-if)#ip add 172.16.1.1 255.255.255.0 Router(config-if)#no shu Router(config-if)# %LINK-5-CHANGED: Interface FastEthernet0/0, changed state to up %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to up Router(config-if)#int s2/0 Router(config-if)#ip add 172.16.2.1 255.255.255.0 Router(config-if)#no shu %LINK-5-CHANGED: Interface Serial2/0, changed state to down Router(config-if)# Router(config-if)#no ip add 172.16.2.1 255.255.255.0 Router(config-if)#int f1/0 Router(config-if)#ip add 172.16.2.1 255.255.255.0 Router(config-if)#no shu Router(config-if)#exit Router(config)#ip route 0.0.0.0 0.0.0.0 172.16.2.2
Router1
Router>en Router#config Configuring from terminal, memory, or network [terminal]? t Enter configuration commands, one per line. End with CNTL/Z. Router(config)#int f1/0 Router(config-if)#ip add 172.16.2.2 255.255.255.0 Router(config-if)#no shu Router(config-if)# %LINK-5-CHANGED: Interface FastEthernet1/0, changed state to up %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet1/0, changed state to up Router(config-if)# Router(config-if)#int s2/0 Router(config-if)#ip add 172.16.3.1 255.255.255.0 Router(config-if)#no shu Router(config)#ip route 0.0.0.0 0.0.0.0 172.16.2.1 Router(config)#ip route 0.0.0.0 0.0.0.0 172.16.3.2
Router2
Router>en Router#config t Enter configuration commands, one per line. End with CNTL/Z. Router(config)#int s2/0 Router(config-if)#ip add 172.16.3.2 255.255.255.0 Router(config-if)#no shu Router(config-if)# %LINK-5-CHANGED: Interface Serial2/0, changed state to up Router(config-if)#int f0/0 %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial2/0, changed state to up Router(config-if)#ip add 172.16.4.1 255.255.255.0 Router(config-if)#no shu Router(config)#ip route 0.0.0.0 0.0.0.0 172.16.3.1
服务器 ping PC0
5.Router1上配置扩展访问控制列表
Router(config)#access-list 100 permit tcp host 172.16.1.2 host 172.16.4.2 eq www Router(config)#access-list 100 deny icmp host 172.16.1.2 host 172.16.4.2 echo Router(config)#int s2/0 Router(config-if)#ip access-group 100 out Router(config-if)#end
6.网络测试
PC0
Web 浏览器:http://172.16.4.2(success)
PC 0 ping 172.16.4.2