計(jì)算機(jī)網(wǎng)絡(luò)實(shí)驗(yàn)報(bào)告(7)訪(fǎng)問(wèn)控制列表ACL配置實(shí)驗(yàn)

1、一、實(shí)驗(yàn)項(xiàng)目名稱(chēng)訪(fǎng)問(wèn)控制列表ACL配置實(shí)驗(yàn)二、實(shí)驗(yàn)?zāi)康膶?duì)路由器的訪(fǎng)問(wèn)控制列表 ACL進(jìn)行配置。三、實(shí)驗(yàn)設(shè)備PC 3 臺(tái)；Router-PT 3 臺(tái)；交叉線(xiàn)；DCE 串 口線(xiàn)；Server-PT 1 臺(tái)；四、實(shí)驗(yàn)步驟標(biāo)準(zhǔn)IP訪(fǎng)問(wèn)控制列表配置：新建Packet Tracer拓?fù)鋱D（1） 路由器之間通過(guò) V.35電纜通過(guò)串口連接，DCE端連接在R1上，配置其時(shí)鐘 頻率64000;主機(jī)與路由器通過(guò)交叉線(xiàn)連接。（2）配置路由器接口 IP地址。（3） 在路由器上配置靜態(tài)路由協(xié)議，讓三臺(tái)PC能夠相互Ping通，因?yàn)橹挥性诨?通的前提下才涉及到方控制列表。（4）在R1上編號(hào)的IP標(biāo)準(zhǔn)訪(fǎng)問(wèn)控制。（5）將標(biāo)準(zhǔn)IP

2、訪(fǎng)問(wèn)控制應(yīng)用到接口上。（6）驗(yàn)證主機(jī)之間的互通性。擴(kuò)展IP訪(fǎng)問(wèn)控制列表配置：新建Packet Tracer拓?fù)鋱D（1） 分公司出口路由器與外路由器之間通過(guò)V.35電纜串口連接，DCE端連接在 R2上，配置其時(shí)鐘頻率 64000；主機(jī)與路由器通過(guò)交叉線(xiàn)連接。（2） 配置PC機(jī)、服務(wù)器及路由器接口IP地址。（3） 在各路由器上配置靜態(tài)路由協(xié)議，讓PC間能相互ping通，因?yàn)橹挥性诨ネ?的前提下才涉及到訪(fǎng)問(wèn)控制列表。（4）在R2上配置編號(hào)的IP擴(kuò)展訪(fǎng)問(wèn)控制列表。（5）將擴(kuò)展IP訪(fǎng)問(wèn)列表應(yīng)用到接口上。（6）驗(yàn)證主機(jī)之間的互通性。五、實(shí)驗(yàn)結(jié)果標(biāo)準(zhǔn)IP訪(fǎng)問(wèn)控制列表配置：PC0：IP AddressSubn

3、et MaskDefault Gateway172.1PC1：IP AddressSubnet MaskDefault Gateway172,16.2,1|PC2:IP AddressSubnet MaskDefault Gateway: ccnfig G103113132_tl0石 1口31131.32_罠0 (config)#103113132_H0 (ccnfig) inerface FascithernetO/0103113132

4、_R0(confiq-if)#ip address 172；55 r2S5,0.0E103113132_R0(config-if)#ip addxess 172 T1E,1,L ；S5,255,2S5.0 石 1口召1131.32 罠0 (config-itJno shutdovn1031L3132_-t0 (config) interface ?3tittierne,tl/01031L3132_R0 config-if)#ip address 2S5-255.25S. G1031L3132_X0 (config-if) tnc shuedciwnE103113132_R

5、0config)*inXi;fs Sgl12/Q5103113132_RO tconfig-if)#ip addrea 172.16.3,1 255.2S5.2S5,0 5ia3113132_RO(ennfig-if)Fcloek rate 4000呂 10311313花 RO IucirLf經(jīng)huhdmni1O31L313Z_R1 (cenfig) tinterface Seria.12/01031L3132_R1(config-if)#ip address 172,16.3.2 25S.ZSS.O.O1O31L3132_R1#tLINSPOTO-S-UPTOWNz Line piotoco

6、l cm Interzace Seiiat2/0,172.IS.4.1 2SS.25S.2SS .0&1Q3工 13132-R11匚口i寸#吐4 qtuztSnwnl；103L13132 RO (config) #ip route 25S . 255.255.0 17Z.1C.3.2&L03113132_51 : nenfig) Up ceute 0.0.Q.O 172 . IE.3.1 &LO3113132_R1 : eenfig) Sand&L03113132_kl# E103113132_SLl.#3hcw ip routeZodes: C - eQ

7、Einected, S - 3tatier I -工丸-IE, M - D - IGRPf X - EIGP extarnal, O - OSPrr Ik - OSP： KI - OSPF NSSA external type 1, N2 - OSPE NSSA ext El - OSPE axtemal type Lr 2 - OSPF external type i - IS-ISZ LI - ISIS level-i# L2 - IS-工替 level-；r * - Candida 1;e defaultt U - p&E-user aZaZic rauler i F - periodi

8、c dcwnlcaded atatlc routeSatsway 口 last; xassrx is 172.1G . 3.1 to nawork /24 xs suhnecedj 2 uhnesZ112 .1.3. im directly conne亡re己SeriaL2/0Z175 , L, 4.0 is directly connected, rasEZthernex.O/O5*/0 J./OJ via 172,16,3,1PC-PnP匚0PCIping:PCOping:rJtcuter-PT RouterOPC-PT PCIPC-PT P

9、C2RouterTRouterl103113132G10311313219311313261031131326103113132tl0311313；103113132103113132103113132103113132，就口 config)#3ceess-li3tRO configJ faccess-liatTlO config) #int s2/0TtO 4 confi-if) access-group 1 out乂口(config-if)texi0 , config： #ip acces5-li.3t standard Sij a jR0 ecnf ig-std-nacl) tpermi

10、t; S50(ccnfig-std-nacl)#deny G.0.0.2SSkd conf ig-td-Eiecl) tint /0jlO ( cenf ig-if i frip access-grcup Sijs j cutRQ(ecnfig-ifitendper line. End with CNTL/Z.1 permit 172.l.l,0 0,0,0,2551 den/ 172.16,2,0 0.0,0,255193113132_04fecnr tEnter EQHflgur&tian connnAnd.s f ane61031

11、13132t i 砧立i cut.TTL=12TTL=12G172.L.4.2 with 32 bytes d data:from 172,1.4.2; byte9=32 from 172,1.4.2: byt.es=32 from t birtes=3：Ping Htaxatlc? for 172.1G.4 .2:Packetg: Sent = 4, deceived Appraximt round trip times inMi ni mum 79m3 T MaxiTmini=3r Lcat = 1 ping Pinging 172.15 - 4.2

12、with 32 byte s of dm匸自：Reply from Reply from Reply fromReply from172-16-2 1172-16-2.1:172_16_2.li172-16-2.1：D呂號(hào)t-ination. hostDe b t; ina.t-1 on h呂匸De bt in a oxi hastDe a z inat on haatrunre a ciiab 1 e -unre aeh.abl -imrea chaLb 1 -POping Pinging with 32 byteg of data?POping 1

13、Pinging with 32 byteg of data?Ping statistics for 172 _16,4.2 :Packets: Sent = 4, Received = 0, Lost = 4 (100% loss)r擴(kuò)展IP訪(fǎng)問(wèn)控制列表配置:PCO:LP AddressSubnet Mask255.255.255,0default Gateway172.16,1.1Server。:IP AddressSubnet Mask255-255.255.0Default Gateway

14、Neuter ccnflg： thcatnajrie 103113132_ID103113132_a0 config) *103113132_ftD(ennrig)fInterface EastEtharnetO/OL03L13132_R0(config-if)*ip address 172255-255.9-0 6103L13132_R0(configif)*ip address 172,l.l.1 255,255.255,06L口3113132shutdown_ I alD3L13132_ftO-GDnffinerface FasxZhernatl/D al03L1313：_R0(conf

15、i-if)tip addefrss 172 L16.2.1 2SE.25S.2ES.Q S103113132 a0 : ccnf ig-if)片no shutdown6103113132 R2(config)#interface FastEthernecO/O 103113132_R2(config-if)t%LINHPROTO-5-UPDOWN: Line protocol on Interface Serial2/0 address 172 164】,2S5.255.255 0103113132_R2(config-if)tno shutdown 6103113132_M(ucmfig)*

16、ip routw 0.0).0 172.162.2|6103113132_R2(config)tip route 61O3113132_R1(config)tip route 2S 61O3113132_R1(config)#ip route 2S 61O3113132_R1(config)fend61O3113132_R1#6103H3132 RUshow in route172 160.0/24 i

17、s subnettedr 4 subnets 1/0 via C is directly connected FastEthernetl/0C172 16.3.0 is directly connected Serial2/0S 1/0 via POping Pinging 172 with 32 bytes of data:Request timed out Request timed outReply from 17216.4.2二 bytea=32 tim

18、e=125ms TTL=125Reply from 172164.2: bytes=32 time=12Sms TTL=125Ping statistics for 172 16.4.2二Packets: Sent = 4f Received = 2, Lost = 2 (50% loss)rApproximate round trip times in milli-seconds:Minimum = 125ms, Maximum = 125ms. Average = 125msWeh Browser URL http：/172. 16,4.2Cisco Packet TracerWelcom

19、e to Cisco Packet Tracer, th best thing since Packet Tracer 4.x.Quick Links：A smallCopyrightsIm a耽 61O3113132_R1(config)tacceas-list 100 permit tcp host host eq www% Invalid input detected at * * * marker 1O3113132_R1(config)#access-list 100 permit tcp host host eq www61O3113132_R1(config)taccesa-list 100 de