4.访问控制列表(ACL)
(1)标准 RouterA
[H3C]interface e0/0 192.\168.\1.1 255.\255.\255.\
[H3C]interface e0/1 198.\1. 1.\ 255.\255.\255.\[H3C]ospf 2 [H3C-ospf2]area 0 192.\168.\
1 / 15
1.0 0.\0. 0.\ 198.\168.\1.0 0.\0. 0.\
[H3C]display ip rout [H3C] firewall enable
[H3C]firewall default deny/permit(默认为permit) [H3C]acl number 2000
[H3C-acl-2000]rule permit source 192.\168.\2.0 0.\0. 0.\
2 / 15
[H3C]interface e1 [H3C]display acl 2000 [H3C]undo acl number 2000 RouterB
[H3C]interface e0/1 192.\168.\2.1 255.\255.\255.\
[H3C]interface e0/0 198.\1. 1.\ 255.\255.\255.\[H3C]ospf 2 [H3C-ospf2]area 0 192.\
3 / 15
168.\2.0 0.\0. 0.\ 198.\168.\1.0 0.\0. 0.\
[H3C]display ip rout (2)扩展 RouterA
[H3C]interface e0/0 192.\168.\1.1 255.\255.\255.\
4 / 15
[H3C]interface e0/1 198.\1. 1.\ 255.\255.\255.\[H3C]ospf 2 [H3C-ospf2]area 0 192.\168.\1.0 0.\0. 0.\ 198.\168.\1.0 0.\0. 0.\
5 / 15
H3C访问控制列表(ACL)实例精华
![](/skin/haowen/images/icon_star.png)
![](/skin/haowen/images/icon_star.png)
![](/skin/haowen/images/icon_star.png)
![](/skin/haowen/images/icon_star.png)