ACL 訪問控制列表ide
1.實驗拓撲:spa
使用ENSP模擬器(版本V100R002C00 1.2.00.350)blog
2.實驗需求圖片
1:R1作ACL ip
2:使R1 ping不通C1get
3.實驗配置it
R1:io
syclass
int g0/0/2配置
ip add 192.168.10.1 255.255.255.0
R1:
q
acl 2000
rule permit source 192.168.10.10 0.0.0.255
traffic classifier tc1
if-match acl 2000
q
traffic behavior tb1
deny
q
[traffic policy tpl
classifier tcl behavior tb1
q
int g0/0/2
traffic-policy tpl in
traffic-policy tpl inbound
q