H3C访问控制列表(ACL)实例精华

4.访问控制列表（ACL）

(1)标准 RouterA

[H3C]interface e0/0 192.\168.\1.1 255.\255.\255.\

[H3C]interface e0/1 198.\1. 1.\ 255.\255.\255.\[H3C]ospf 2 [H3C-ospf2]area 0 192.\168.\

1 / 15

1.0 0.\0. 0.\ 198.\168.\1.0 0.\0. 0.\

[H3C]display ip rout [H3C] firewall enable

[H3C]firewall default deny/permit（默认为permit） [H3C]acl number 2000

[H3C-acl-2000]rule permit source 192.\168.\2.0 0.\0. 0.\

2 / 15

[H3C]interface e1 [H3C]display acl 2000 [H3C]undo acl number 2000 RouterB

[H3C]interface e0/1 192.\168.\2.1 255.\255.\255.\

[H3C]interface e0/0 198.\1. 1.\ 255.\255.\255.\[H3C]ospf 2 [H3C-ospf2]area 0 192.\

3 / 15

168.\2.0 0.\0. 0.\ 198.\168.\1.0 0.\0. 0.\

[H3C]display ip rout (2)扩展 RouterA

[H3C]interface e0/0 192.\168.\1.1 255.\255.\255.\

4 / 15

[H3C]interface e0/1 198.\1. 1.\ 255.\255.\255.\[H3C]ospf 2 [H3C-ospf2]area 0 192.\168.\1.0 0.\0. 0.\ 198.\168.\1.0 0.\0. 0.\

5 / 15