traffic-filter outbound acl 2000 //将接口设为流量流出,此命令用来在接口上配置基于ACL对报文进行过滤。inbound是在接口入方向上配置报文过滤;outbound是在接口出方向上配置报文过滤 扩展ACL配置 为路由器各接口配置IP,为主机配置IP地址、网关、掩码(以R2为例) interface Ethernet0/0/0 ip address 192.168.2.1 255...
1.基本ACL:acl 2000 rule 10 deny source 192.168.1.0 0.0.0.255 2.高级ACL: acl 3000 rule 10 deny ip source 192.168.1.0 0.0.0.255 destination 192.168.3.100 0.0.0.0 rule 20 deny ip souce any destination 192.168.3.100 0.0.0.0 interface g0/0/2 traffic-filter outbound acl 3000 三、NAT 1.静态N...
网络流量控制---ACL与traffic-filter,acl访问控制列表,匹配感兴趣的数据,与相应的工具对数据进行处理,本次与traffic-filter流量过滤一起,对相应的流量数据进行限制或者放行。
return [Huawei-acl-adv-3000]q //退出ACL视图 [Huawei]int g0/0/1 //进入对应的接口 [Huawei-GigabitEthernet0/0/1]traffic-filterinbound acl 3000 //接口下调用ACL 3000 [Huawei-GigabitEthernet0/0/1]q //退出接口视图 [Huawei] 展开
B、time-range am9topm5 08:00 to 17:00 off-day # acl number 2004 Rule 5 permit time-range C、time-range am9topm5 08:00 to 17:00 daily Acl number 2001 Rule 5 deny time-range am9topm5 D、time-range am9topm5 07:00 to 18:00 daily Acl number 2002 ...
(单选题)如图所示的网络,管理员希望所有主机都不能访问Web服务(端口号为80),其它服务正常访问,则在G0/0/1的接口配置“Traffic-filter outbound”中需要绑定哪一选项的L规则?;【acl number 3001】【rule 5 deny udp destination-port eq www】【rule 10 permit ip】;
If-match acl 2001If match acl 2002If-match acl 2003#Traffic behavior 2Filter deny#Qos policy 2Classifier 2 behavior 2#Interface GigabitEthernetO/1Port link-mode routeIp address192.168.1.1255.255.255.0 Qos apply policy 2 outbound则当源地址分别为192.168.2.2、192.168.3.2、192.168.0.2的报文从端口G0...
在MSR路由器配置命令如下:Aclnumber2003Rule0permitsource192.168.0.00.0.0.255#Trafficclassifier1operatororif-matchacl2003#Trafficbehavior1filterden#Qospolic1Classifier1behavior1#InterfaceGigabitEthernet0/1portlink-moderouteIpaddress192.168.1.1255.255.255.0Qosapplpolic2outbound则当源地址分别为192.168.2.2.192.168....
在MSR路由器配置命令如下:Aclnumber2003Rule0permitsource192.168.0.00.0.0.255#Trafficclassifier1operatororif-matchacl2003#Trafficbehavior1filterden#Qospolic1Classifier1behavior1#InterfaceGigabitEthernet0/1portlink-moderouteIpaddress192.168.1.1255.255.255.0Qosapplpolic2outbound则当源地址分别为192.168.2.2.192.168....