配置靜態路由:
R1(config)#int f0/0
R1(config-if)#ip address 10.135.1.1 255.255.255.0
R1(config-if)#no shutdown
R1(config)#int f0/1
R1(config-if)#ip address 10.135.2.1 255.255.255.0
R1(config-if)#no shutdown
R4(config)#ip route 10.135.1.0 255.255.255.0 10.135.2.1
R3(config)#ip route 10.135.2.0 255.255.255.0 10.135.1.1
R2(config)#ip route 10.135.2.0 255.255.255.0 10.135.1.1
標准acl r4
說明ICMP是可以任意訪問的
R1(config)#ip access-list extended goto
R1(config-ext-nacl)#permit tcp any any eq telnet reflect abc timeout 60
R1(config-ext-nacl)#permit ip any any
R1(config)#int f0/1
R1(config-if)#ip access-group goto out
用戶數據
基於時間的acl
R1(config)#time-range TELNET
R1(config-time-range)#periodic weekdays 9:00 to 14:00
R1(config)#access-list 150 permit ip any any
R1(config)#int f0/0
R1(config-if)#ip access-group 150 in
在R1創建區域防火牆
Router1 (config)#zone security IN-ZONE
Router1(config-sec-zone)#zone security OUT-ZONE
Router1(config-sec-zone)#ex
Router1(config)#access-list 101 permit ip 10.135.1.0 0.0.0.255 any
Router1(config)#class-map type inspect match-all IN-NET-CLASS-MAP
Router1(config-cmap)#match access-group 101
Router1(config-cmap)#ex
Router1(config)#policy-map type inspect IN-2-OUT-PMAP
Router1(config-pmap)#class type inspect IN-NET-CLASS-MAP
Router1(config-pmap-c)#inspect
%No specific protocol configured in class IN-NET-CLASS-MAP for inspection. All protocols will be inspected
Router1(config-pmap)#ex
Router1(config)#zone-pair security IN-2-OUT-ZPAIR source IN-ZONE destination OUT-ZONE
Router1(config-sec-zone-pair)#service-policy type inspect IN-2-OUT-PMAP
Router1(config-sec-zone-pair)#ex
Router1(config)#int f0/0
Router1(config-if)#zone-member security IN-ZONE
Router1(config-if)#ex
Router1(config)#int s0/0/1
Router1(config-if)#zone-member security OUT-ZONE
Router1(config-if)#ex
Router1(config)#ex
Router1#
%SYS-5-CONFIG_I: Configured from console by console
Router3#show policy-map type inspect zone-pair sessions
Zone-pair: IN-2-OUT-ZPAIR
靜態路由配置
Ping通
實驗心得:這次實驗涉及的內容很多,同時也讓我懂得了靜態路由的配置和動態路由,還有防火牆的設置,中途遇到網絡拼不通的狀況,也重新做了幾遍,才發現是自己疏忽導致的問題,還好堅持下來了,再次拼通時很是開心,因為讓自己明白了其中的重要成分,所以不管怎樣還是要堅持,認真對待每件事,爭取做到最好,不煩躁,不退縮,這樣才能做好一切事情,也感謝老師辛苦的為我們講解重點內容,使自己也掌握很多知識。