项目五 配置访问控制列表(ACL)V.docVIP

［项目五］配置访问控制列表（ACL） ［项目内容］ 如图5.1所示的网络拓扑，要求实现以下任务： 配置EIGRP路由协议，保证网络通信正常； 在R1配置ACL，要求完成以下功能： 拒绝主机A所在的网络访问Web服务器； 拒绝主机A所在的网络ping到外部网络的任何地址。 配置R2，使得只允许主机C telnet到路由器R2； 图5.1 网络拓扑 ［操作步骤］ 一．EIGRP路由协议的配置 1．搭建网络环境 绘制如图5.1所示的网络拓扑并配置好路由器和计算机的端口及IP地址。 2．配置EIGRP路由协议 （1）配置R1 R1(config)#router eigrp 100 R1(config-router)#net 55 R1(config-router)#net 55 R1(config-router)#no auto-summary （2）配置R2 R2(config)#router eigrp 100 R2(config-router)#net 55 R2(config-router)#net 55 R2(config-router)#net 55 R2(config-router)#no auto-summary （3）配置R3 R3(config)#router eigrp 100 R3(config-router)#net 55 R3(config-router)#net 55 R3(config-router)#no auto-summary 3． 认证 R1#show ip route Gateway of last resort is not set /24 is subnetted, 1 subnets C is directly connected, FastEthernet0/0 /24 is subnetted, 1 subnets C is directly connected, Serial1/0 /24 is subnetted, 1 subnets D [90 via , 00:47:41, Serial1/0 /24 is subnetted, 1 subnets D [90 via , 00:47:41, Serial1/0 D /24 [90 via , 00:47:41, Serial1/0 R2#show ip route Gateway of last resort is not set /24 is subnetted, 1 subnets D [90 via , 00:49:02, Serial1/0 /24 is subnetted, 1 subnets C is directly connected, Serial1/0 /24 is subnetted, 1 subnets C is directly connected, Serial1/1 /24 is subnetted, 1 subnets C is directly connected, FastEthernet0/0 D /24 [90 via , 00:49:07, Serial1/1 R3#show ip route Gateway of last resort is not set /24 is subnetted, 1 subnets D [90 via , 00:51:11, Serial1/1 /24 is subnetted, 1 subnets D [90 via , 00:51:16, Serial1/1 /24 is subnetted, 1 subnets C is directly connected, Serial1/1 /24 is subnetted, 1 subnets D [90 via , 00:51:16, Serial1/1 C /24 is directly connected, FastEthernet0/0 二、在R1配置ACL 1. 配置 R1(config)#access-list 101 deny tcp 55 host 00 e