作业10：ACL高级
拓扑 1026.zip
PC 地址配置
| PC | IP地址 | 子网掩码 | 网关 |
|---|---|---|---|
| PC_1 | 192.168.3.1 | 255.255.255.0 | 192.168.3.254 |
| Client1 | 192.168.1.1 | 255.255.255.0 | 192.168.1.254 |
| Server1 | 192.168.2.1 | 255.255.255.0 | 192.168.2.254 |
LSW1
<Huawei>sy
[Huawei]un in e
[Huawei]sysn LSW1
[LSW1]v b 30 12 23
[LSW1]int v30
[LSW1-Vlanif30]ip a 192.168.3.254 24
[LSW1-Vlanif30]int vl 12
[LSW1-Vlanif12]ip a 12.1.1.1 24
[LSW1-Vlanif12]int vl 23
[LSW1-Vlanif23]ip a 23.1.1.1 24
[LSW1-Vlanif23]int g0/0/03
[LSW1-GigabitEthernet0/0/3]port l a
[LSW1-GigabitEthernet0/0/3]port d v 30
[LSW1-GigabitEthernet0/0/3]int g0/0/1
[LSW1-GigabitEthernet0/0/1]port l a
[LSW1-GigabitEthernet0/0/1]port d v 12
[LSW1-GigabitEthernet0/0/1]int g0/0/2
[LSW1-GigabitEthernet0/0/2]port l a
[LSW1-GigabitEthernet0/0/2]port d v 23
[LSW1-GigabitEthernet0/0/2]ospf
[LSW1-ospf-1]a 0
[LSW1-ospf-1-area-0.0.0.0]n 12.1.1.1 0.0.0.0
[LSW1-ospf-1-area-0.0.0.0]n 23.1.1.1 0.0.0.0
[LSW1-ospf-1-area-0.0.0.0]q
[LSW1-ospf-1]i dAR1
<Huawei>sy
[Huawei]un in e
[Huawei]sysn AR1
[AR1]int g0/0/1
[AR1-GigabitEthernet0/0/1]ip a 12.1.1.254 24
[AR1-GigabitEthernet0/0/1]int g0/0/0
[AR1-GigabitEthernet0/0/0]ip a 192.168.1.254 24
[AR1-GigabitEthernet0/0/0]ospf
[AR1-ospf-1]a 0
[AR1-ospf-1-area-0.0.0.0]n 12.1.1.254 0.0.0.0
[AR1-ospf-1-area-0.0.0.0]q
[AR1-ospf-1]i d
[AR1-ospf-1]acl 3000
[AR1-acl-adv-3000]rule 5 permit tcp source 192.168.1.1 0 destination 192.168.2.1 0 destination-port eq www
[AR1-acl-adv-3000]rule 10 permit ip source 192.168.1.1 0 destination 192.168.3.0 0.0.0.255
[AR1-acl-adv-3000]rule 15 deny ip source 192.168.1.1 0
[AR1-acl-adv-3000]int g0/0/0
[AR1-GigabitEthernet0/0/0]traffic-filter in a 3000AR3
<Huawei>sy
[Huawei]un in e
[Huawei]sysn AR3
[AR3]int g0/0/2
[AR3-GigabitEthernet0/0/2]ip a 23.1.1.254 24
[AR3-GigabitEthernet0/0/2]int g0/0/1
[AR3-GigabitEthernet0/0/1]ip a 192.168.2.254 24
[AR3-GigabitEthernet0/0/1]ospf
[AR3-ospf-1]a 0
[AR3-ospf-1-area-0.0.0.0]n 23.1.1.254 0.0.0.0
[AR3-ospf-1-area-0.0.0.0]q
[AR3-ospf-1]i d测试web服务
双击Server1 点击服务器信息–> HttpServer –> 选择站点目录 –> 启动服务
选择的站点应包含html文件，可以使用 HBuilder X 建立站点目录
点击 Client1 客户端信息–> httpClient –> 输入服务器地址 –> 点击获取
服务器地址为 192.168.2.1
正常应获取到文件
