实验指南：ACL（上）
版权声明：原创作品，谢绝转载！否则将追究法律责任。 |
实验指南
 EIGRP is the routing protocol for this entire network. The autonomous System ID is 2001.
Control routing updates so that the FBI router routes receive only even subnets from the State Patrol router and odd subnets from the County Sheriff router.
The two clouds represent IP networks that the router is attached to. These clouds will be simulated by creating a route generator.
Use named access lists. State_patrol conf t host State_patrol int l 1 ip ad 150.100.1.1 255.255.255.0 int l 2 ip ad 150.100.2.1 255.255.255.0 int l 3 ip ad 150.100.3.1 255.255.255.0 int l 4 ip ad 150.100.4.1 255.255.255.0 int l 5 ip ad 150.100.5.1 255.255.255.0 int l 6 ip ad 150.100.6.1 255.255.255.0 int l 7 ip ad 150.100.7.1 255.255.255.0 int l 8 ip ad 150.100.8.1 255.255.255.0 int l 9 ip ad 150.100.9.1 255.255.255.0 int l 10 ip ad 150.100.10.1 255.255.255.0 int s 2/0 ip ad 150.100.100.1 255.255.255.252 encap f no arp f no frame inver frame map ip 150.100.100.2 201 b no shut exit ip access-list standard EVEN permit 150.100.0.0 0.0.254.255 router eigrp 2001 no au net 150.100.100.1 0.0.0.0 net 150.100.1.0 0.0.15.255 distribute-list EVEN out s2/0 end County_sheriff
conf t host County_sheriff int l 1 ip ad 150.100.1.2 255.255.255.0 int l 2 ip ad 150.100.2.2 255.255.255.0 int l 3 ip ad 150.100.3.2 255.255.255.0 int l 4 ip ad 150.100.4.2 255.255.255.0 int l 5 ip ad 150.100.5.2 255.255.255.0 int l 6 ip ad 150.100.6.2 255.255.255.0 int l 7 ip ad 150.100.7.2 255.255.255.0 int l 8 ip ad 150.100.8.2 255.255.255.0 int l 9 ip ad 150.100.9.2 255.255.255.0 int l 10 ip ad 150.100.10.2 255.255.255.0 int s 2/1 ip ad 150.100.101.1 255.255.255.252 encap f no arp f no frame inver frame map ip 150.100.101.2 311 b no shut exit ip access-list standard ODD permit 150.100.1.0 0.0.254.255 router eigrp 2001 no au net 150.100.101.1 0.0.0.0 net 150.100.1.0 0.0.15.255 distribute-list ODD out s2/1 end Fbi_hq
conf t host Fbi_hq int s 2/0 encap f no arp f no frame inver ip ad 150.100.100.2 255.255.255.252 frame map ip 150.100.100.1 102 b no shut int s 2/1 ip ad 150.100.101.2 255.255.255.252 encap f no arp f no frame inver frame map ip 150.100.101.1 113 b no shut exit router eigrp 2001 no au net 150.100.100.2 0.0.0.0 net 150.100.101.2 0.0.0.0 end 校验
Fbi_hq#sh ip route Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route Gateway of last resort is not set
150.100.0.0/16 is variably subnetted, 12 subnets, 2 masks C 150.100.100.0/30 is directly connected, Serial2/0 C 150.100.101.0/30 is directly connected, Serial2/1 D 150.100.2.0/24 [90/2297856] via 150.100.100.1, 00:00:46, Serial2/0 D 150.100.3.0/24 [90/2297856] via 150.100.101.1, 00:01:36, Serial2/1 D 150.100.1.0/24 [90/2297856] via 150.100.101.1, 00:01:36, Serial2/1 D 150.100.6.0/24 [90/2297856] via 150.100.100.1, 00:00:46, Serial2/0 D 150.100.7.0/24 [90/2297856] via 150.100.101.1, 00:01:36, Serial2/1 D 150.100.4.0/24 [90/2297856] via 150.100.100.1, 00:00:46, Serial2/0 D 150.100.5.0/24 [90/2297856] via 150.100.101.1, 00:01:36, Serial2/1 D 150.100.10.0/24 [90/2297856] via 150.100.100.1, 00:00:46, Serial2/0 D 150.100.8.0/24 [90/2297856] via 150.100.100.1, 00:00:46, Serial2/0 D 150.100.9.0/24 [90/2297856] via 150.100.101.1, 00:01:36, Serial2/1 本文出自 “穿过地狱去看海” 博客，谢绝转载！ 本文出自 51CTO.COM技术博客 |
cj231210
博客统计信息
热门文章
最新评论
友情链接
