{"id":645,"date":"2025-12-24T09:30:09","date_gmt":"2025-12-24T01:30:09","guid":{"rendered":"https:\/\/www.axeuh.com\/?p=645"},"modified":"2025-12-24T09:32:28","modified_gmt":"2025-12-24T01:32:28","slug":"%e6%a0%87%e5%87%86acl","status":"publish","type":"post","link":"https:\/\/www.axeuh.com\/index.php\/2025\/12\/24\/%e6%a0%87%e5%87%86acl\/","title":{"rendered":"\u6807\u51c6ACL"},"content":{"rendered":"
\n
\"\"<\/div><\/figure>\n<\/div>\n\n\n

\u4e3a\u4e86\u5728 Cisco Packet Tracer \u4e2d\u5b9e\u73b0\u4f60\u63cf\u8ff0\u7684\u7f51\u7edc\u62d3\u6251\u53ca\u9700\u6c42\uff0c\u6211\u4eec\u9700\u8981\u5206\u4e09\u4e2a\u6b65\u9aa4\u8fdb\u884c\uff1a\u57fa\u7840\u914d\u7f6e\uff08IP \u5206\u914d\uff09<\/strong>\u3001\u5b9e\u73b0\u5168\u7f51\u901a\uff08\u9759\u6001\u8def\u7531\uff09<\/strong>\u3001\u4ee5\u53ca\u5e94\u7528\u8bbf\u95ee\u63a7\u5236\u5217\u8868\uff08ACL\uff09<\/strong>\u3002<\/p>\n

1. \u57fa\u7840 IP \u5730\u5740\u5206\u914d<\/h3>\n

\u9996\u5148\uff0c\u8bf7\u786e\u4fdd\u6240\u6709\u63a5\u53e3\u5df2\u6253\u5f00 (no shutdown<\/code>) \u5e76\u914d\u7f6e\u4e86\u6b63\u786e\u7684 IP \u5730\u5740\u3002<\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n
\u8bbe\u5907<\/th>\n\u63a5\u53e3<\/th>\nIP \u5730\u5740<\/th>\n\u5b50\u7f51\u63a9\u7801<\/th>\n\u9ed8\u8ba4\u7f51\u5173<\/th>\n<\/tr>\n<\/thead>\n
PC0<\/strong><\/td>\nNIC<\/td>\n192.168.1.2<\/td>\n255.255.255.0<\/td>\n192.168.1.1<\/td>\n<\/tr>\n
PC1<\/strong><\/td>\nNIC<\/td>\n192.168.2.2<\/td>\n255.255.255.0<\/td>\n192.168.2.1<\/td>\n<\/tr>\n
PC2<\/strong><\/td>\nNIC<\/td>\n192.168.4.2<\/td>\n255.255.255.0<\/td>\n192.168.4.1<\/td>\n<\/tr>\n
RA<\/strong><\/td>\nFa0\/0<\/td>\n192.168.1.1<\/td>\n255.255.255.0<\/td>\n–<\/td>\n<\/tr>\n
RA<\/strong><\/td>\nFa1\/0<\/td>\n192.168.2.1<\/td>\n255.255.255.0<\/td>\n–<\/td>\n<\/tr>\n
RA<\/strong><\/td>\nSe2\/0<\/td>\n192.168.3.1<\/td>\n255.255.255.0<\/td>\n–<\/td>\n<\/tr>\n
RB<\/strong><\/td>\nSe2\/0<\/td>\n192.168.3.2<\/td>\n255.255.255.0<\/td>\n–<\/td>\n<\/tr>\n
RB<\/strong><\/td>\nFa0\/0<\/td>\n192.168.4.1<\/td>\n255.255.255.0<\/td>\n–<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
\n

2. \u5b9e\u73b0\u5168\u7f51\u901a\uff08\u9759\u6001\u8def\u7531\uff09<\/h3>\n

\u8981\u8ba9 1.0\u30012.0 \u548c 4.0 \u7f51\u6bb5\u4e92\u901a\uff0c\u8def\u7531\u5668\u5fc5\u987b\u77e5\u9053\u5982\u4f55\u5230\u8fbe\u5bf9\u65b9\u7684\u7f51\u6bb5\u3002<\/p>\n

\u5728 RA \u4e0a\u914d\u7f6e\uff1a<\/strong>\uff08\u544a\u77e5 RA \u5982\u4f55\u53bb\u5f80 4.0 \u7f51\u6bb5\uff09<\/p>\n

RA(config)# ip route 192.168.4.0 255.255.255.0 192.168.3.2\n\n<\/code><\/pre>\n
\u5728 RB \u4e0a\u914d\u7f6e\uff1a<\/strong>\uff08\u544a\u77e5 RB \u5982\u4f55\u56de\u5305\u7ed9 1.0 \u548c 2.0 \u7f51\u6bb5\uff09<\/p>\n
RB(config)# ip route 192.168.1.0 255.255.255.0 192.168.3.1\nRB(config)# ip route 192.168.2.0 255.255.255.0 192.168.3.1\n\n<\/code><\/pre>\n
\u6b64\u65f6\uff0c\u6240\u6709 PC \u4e4b\u95f4\u5e94\u8be5\u53ef\u4ee5\u4e92\u76f8 Ping \u901a\u3002<\/em><\/p>\n
\n
3. \u914d\u7f6e ACL \u8bbf\u95ee\u63a7\u5236<\/h3>\n
\u9700\u6c42\uff1a<\/strong><\/p>\n
    \n
  1. \u5141\u8bb8 192.168.1.0<\/code> \u8bbf\u95ee 192.168.4.0<\/code><\/li>\n
  2. \u62d2\u7edd 192.168.2.0<\/code> \u8bbf\u95ee 192.168.4.0<\/code><\/li>\n<\/ol>\n
    \u6700\u4f73\u5b9e\u8df5\u5efa\u8bae\uff1a<\/strong>\n\u5bf9\u4e8e\u7b80\u5355\u7684\u6e90\u5730\u5740\u8fc7\u6ee4\uff0c\u6211\u4eec\u53ef\u4ee5\u4f7f\u7528\u6807\u51c6 ACL\uff08Standard ACL\uff09<\/strong>\u3002\u6807\u51c6 ACL \u5efa\u8bae\u653e\u7f6e\u5728\u79bb\u76ee\u7684\u5730\u6700\u8fd1<\/strong>\u7684\u8def\u7531\u5668\u4e0a\u3002\u5728\u8fd9\u4e2a\u6848\u4f8b\u4e2d\uff0c\u5c31\u662f\u5728 RB<\/strong> \u4e0a\u914d\u7f6e\u3002<\/p>\n
    \u5728 RB \u4e0a\u914d\u7f6e\u6807\u51c6 ACL\uff1a<\/strong><\/p>\n
    RB(config)# access-list 1 permit 192.168.1.0 0.0.0.255\nRB(config)# access-list 1 deny 192.168.2.0 0.0.0.255\nRB(config)# access-list 1 permit any  # \u5141\u8bb8\u5176\u4ed6\u6240\u6709\u6d41\u91cf\uff08\u5982\u679c\u6709\u7684\u8bdd\uff09\n\n# \u5c06 ACL \u5e94\u7528\u5230\u63a5\u53e3\n# \u6211\u4eec\u8981\u4fdd\u62a4 4.0 \u7f51\u6bb5\uff0c\u6240\u4ee5\u5728 RB \u7684 Fa0\/0 \u51fa\u53e3\u65b9\u5411\u62e6\u622a\nRB(config)# interface FastEthernet0\/0\nRB(config-if)# ip access-group 1 out\n\n<\/code><\/pre>\n
    \n
    \u6ce8\u610f\uff1a<\/strong> ACL \u672b\u5c3e\u9690\u85cf\u4e86\u4e00\u8df3 deny any<\/code>\uff0c\u6240\u4ee5\u5982\u679c\u4f60\u4e0d\u52a0\u4e0a permit any<\/code>\uff0c\u9664\u4e86 1.0 \u4ee5\u5916\u7684\u6240\u6709\u7f51\u6bb5\u90fd\u5c06\u65e0\u6cd5\u901a\u8fc7\u8be5\u63a5\u53e3\u3002<\/p>\n<\/blockquote>\n
    \n
    4. \u9a8c\u8bc1\u6d4b\u8bd5<\/h3>\n
      \n
    1. PC0 (1.0 \u7f51\u6bb5) -> PC2 (4.0 \u7f51\u6bb5)\uff1a<\/strong> * \u5728 PC0 \u7684 Command Prompt \u8f93\u5165 ping 192.168.4.2<\/code>\uff0c\u7ed3\u679c\u5e94\u4e3a Success<\/strong>\u3002<\/li>\n
    2. PC1 (2.0 \u7f51\u6bb5) -> PC2 (4.0 \u7f51\u6bb5)\uff1a<\/strong> * \u5728 PC1 \u7684 Command Prompt \u8f93\u5165 ping 192.168.4.2<\/code>\uff0c\u7ed3\u679c\u5e94\u4e3a Destination host unreachable<\/strong> (\u7531 RB \u62e6\u622a)\u3002<\/li>\n
    3. \u67e5\u770b ACL \u72b6\u6001\uff1a<\/strong><\/li>\n<\/ol>\n