扩展访问控制列表 CISCO之CCNA篇之七（3）
Current configuration : 639 bytes !version 12.2
no service password-encryption
!
hostname r1
!
ip ssh version 1
!
interface FastEthernet0/0
ip address 192.168.1.1 255.255.255.0
ip access-group 101 in
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
duplex auto
speed auto
shutdown
!
interface Serial0/0
ip address 172.16.1.1 255.255.255.0
clock rate 64000
!
interface Serial0/1
no ip address
shutdown
!
ip> !
!
access-list 101 deny icmp host 192.168.1.2 host 172.16.1.2 echo
access-list 101 deny icmp host 192.168.1.2 host 172.16.1.2 echo-reply
access-list 101 permit ip any any
!
line con 0
line vty 0 4
login
!
end
路由器R2的配置如下：
r2>
r2>en
r2# sh run
Building configuration...
页:
[1]