标准IP访问控制列表配置
1、配置计算机PC0
IP: 172.16.1.2
Submask: 255.255.255.0
Gageway: 172.16.1.1
2、配置计算机PC1
IP: 172.16.2.2
Submask: 255.255.255.0
Gageway: 172.16.2.1
3、配置计算机PC2
IP: 172.16.4.2
Submask: 255.255.255.0
Gageway: 172.16.4.1
4、配置路由器Router>en
Router#conf t
Router(config)#host RO
RO(config)#int fa0/0
RO(config-if)#ip address 172.16.1.1 255.255.255.0
RO(config-if)#no shutdown
RO(config-if)#
RO(config-if)#int fa1/0
RO(config-if)#ip address 172.16.2.1 255.255.255.0
RO(config-if)#no shutdown
RO(config-if)#
RO(config-if)#int s2/0
RO(config-if)#ip address 172.16.3.1 255.255.255.0
RO(config-if)#no shutdown
RO(config-if)#clock rate 64000
RO(config-if)#
5、配置路由器R2
Router>EN
Router#en
Router#conf t
Router(config)#host R1
R1(config)#int 2/0
R1(config)#int s2/0
R1(config-if)#ip address 172.16.3.2 255.255.255.0
R1(config-if)#no shutdown
R1(config-if)#
R1(config-if)#int fa0/0
R1(config-if)#ip address 172.16.4.1 255.255.255.0
R1(config-if)#no shutdown
R1(config-if)#
R1(config-if)#
6、配置Router0
RO#en
RO#conf t
Enter configuration commands, one per line. End with CNTL/Z.
RO(config)#int fa0/0
RO(config-if)#ip address 172.16.1.1 255.255.255.0
RO(config-if)#no shutdown
RO(config-if)#int fa1/0
RO(config-if)#ip address 172.16.2.1 255.255.255.0
RO(config-if)#no shutdown
RO(config-if)#int s2/0
RO(config-if)#ip address 172.16.3.1 255.255.255.0
RO(config-if)#no shutdown
RO(config-if)#clock rate 64000
RO(config-if)#exit
RO(config)#ip route 172.16.4.0 255.255.255.0 172.16.3.2
RO(config)#
7、配置路由器Router1
R1(config-if)#
R1(config-if)#exit
R1(config)#ip route 0.0.0.0 0.0.0.0 172.16.3.1
R1(config)#end
R1#
R1#show ip route
Gateway of last resort is 172.16.3.1 to network 0.0.0.0
172.16.0.0/24 is subnetted, 2 subnets
C 172.16.3.0 is directly connected, Serial2/0
C 172.16.4.0 is directly connected, FastEthernet0/0
S* 0.0.0.0/0 [1/0] via 172.16.3.1
R1#
8、测试连通性
PC0
ping 172.16.4.2 (success)
PC1
ping 172.16.4.2 (success)
9、设置路由器防护火墙
RO(config)#ip access-list standard jsj
RO(config-std-nacl)#permit 172.16.1.0 0.0.0.255
RO(config-std-nacl)#deny 172.16.2.0 0.0.0.255
RO(config-std-nacl)#conf t
%Invalid hex value
RO(config)#int s2/0
RO(config-if)#ip access-group jsj out
RO(config-if)#end
10、测试连通性
PC0
ping 172.16.4.2
PC1
ping 172.16.4.2
