HCIA--ACL、telnet的使用（复习）

zhang.504

已于 2024-06-09 18:04:08 修改

阅读量245

点赞数 2

文章标签：网络

于 2024-06-09 16:52:19 首次发布

本文链接：https://blog.youkuaiyun.com/weixin_65476290/article/details/139451661

版权

R1:

[Huawei]sysname r1
[r1]interface g0/0/0
[r1-GigabitEthernet0/0/0]ip address 192.168.2.1 24
[r1-GigabitEthernet0/0/0]q

[r1]interface g0/0/1
[r1-GigabitEthernet0/0/1]ip address 192.168.1.1 24 
[r1-GigabitEthernet0/0/1]

[r1]aaa	
[r1-aaa]local-user zbn privilege level 15 password cipher 123456
Info: Add a new user.
[r1-aaa]local-user zbn service-type telnet
[r1-aaa]q

[r1]user-interface vty 0 4
[r1-ui-vty0-4]authentication-mode aaa
[r1-ui-vty0-4]

[r1]acl 3000	
[r1-acl-adv-3000]rule deny icmp source 192.168.2.2 0 destination 192.168.2.1 0
[r1-acl-adv-3000]rule deny icmp source 192.168.2.2 0 destination 192.168.1.1 0	
[r1-acl-adv-3000]rule deny tcp source 192.168.2.2 0 destination 192.168.1.2 0 de
stination-port eq 23
[r1-acl-adv-3000]rule deny tcp source 192.168.2.3 0 destination 192.168.2.1 0 
destination-port eq 23
[r1-acl-adv-3000]rule deny tcp source 192.168.2.3 0 destination 192.168.1.1 0 de
stination-port eq 23
[r1-acl-adv-3000]rule deny icmp  source 192.168.2.3 0 destination 192.168.1.2 0
	
[r1-acl-adv-3000]display acl 3000
Advanced ACL 3000, 6 rules
Acl's step is 5
 rule 5 deny icmp source 192.168.2.2 0 destination 192.168.2.1 0 
 rule 10 deny icmp source 192.168.2.2 0 destination 192.168.1.1 0 
 rule 15 deny tcp source 192.168.2.2 0 destination 192.168.1.2 0 destination-por
t eq telnet 
 rule 20 deny tcp source 192.168.2.3 0 destination 192.168.2.1 0 destination-por
t eq telnet 
 rule 25 deny tcp source 192.168.2.3 0 destination 192.168.1.1 0 destination-por
t eq telnet 
 rule 30 deny icmp source 192.168.2.3 0 destination 192.168.1.2 0 

[r1-acl-adv-3000]

PC1:

[Huawei]sysname pc1

[pc1]interface g0/0/0
[pc1-GigabitEthernet0/0/0]ip address 192.168.2.2 24
[pc1-GigabitEthernet0/0/0]q

[pc1]ip route-static 0.0.0.0 0 192.168.2.1
[pc1]ping 192.168.1.2
  PING 192.168.1.2: 56  data bytes, press CTRL_C to break
    Reply from 192.168.1.2: bytes=56 Sequence=1 ttl=254 time=110 ms
    Reply from 192.168.1.2: bytes=56 Sequence=2 ttl=254 time=80 ms
    Reply from 192.168.1.2: bytes=56 Sequence=3 ttl=254 time=50 ms
    Reply from 192.168.1.2: bytes=56 Sequence=4 ttl=254 time=50 ms
    Reply from 192.168.1.2: bytes=56 Sequence=5 ttl=254 time=50 ms

远程登陆R1
	
<pc1>telnet 192.168.1.1
  Press CTRL_] to quit telnet mode
  Trying 192.168.1.1 ...
  Connected to 192.168.1.1 ...

Login authentication


Username:zbn 
Password:
Error: Failed to send authen-req.

  Logged Fail!

Username:
  Username or Domain invalid!
Username:zbn
Password:
<r1>sys
Enter system view, return user view with Ctrl+Z.
[r1]
[r1]q
<r1>
<r1>q

  Configuration console exit, please retry to log on

  The connection was closed by the remote host
<pc1>
<pc1>

远程登陆R2
<pc1>telnet 192.168.1.2
  Press CTRL_] to quit telnet mode
  Trying 192.168.1.2 ...
  Connected to 192.168.1.2 ...

Login authentication


Username:zbn
Password:

<r2>sys
Enter system view, return user view with Ctrl+Z.
[r2]q
<r2>
<r2>q

  Configuration console exit, please retry to log on

  The connection was closed by the remote host
<pc1>