防火墙的配置(第十组)
配置静态路由:
R1(config)#int f0/0
R1(config-if)#ip address 10.135.1.1 255.255.255.0
R1(config-if)#no shutdown
R1(config)#int f0/1
R1(config-if)#ip address 10.135.2.1 255.255.255.0
R1(config-if)#no shutdown
R4(config)#ip route 10.135.1.0 255.255.255.0 10.135.2.1
R3(config)#ip route 10.135.2.0 255.255.255.0 10.135.1.1
R2(config)#ip route 10.135.2.0 255.255.255.0 10.135.1.1
标准acl r4
说明ICMP是可以任意访问的
R1(config)#ip access-list extended goto
R1(config-ext-nacl)#permit tcp any any eq telnet reflect abc timeout 60
R1(config-ext-nacl)#permit ip any any
R1(config)#int f0/1
R1(config-if)#ip access-group goto out
用户数据
基于时间的acl
R1(config)#time-range TELNET
R1(config-time-range)#periodic weekdays 9:00 to 14:00
R1(config)#access-list 150 permit ip any any
R1(config)#int f0/0
R1(config-if)#ip access-group 150 in
在R1创建区域防火墙
Router1 (config)#zone security IN-ZONE
Router1(config-sec-zone)#zone security OUT-ZONE
Router1(config-sec-zone)#ex
Router1(config)#access-list 101 permit ip 10.135.1.0 0.0.0.255 any
Router1(config)#class-map type inspect match-all IN-NET-CLASS-MAP
Router1(config-cmap)#match access-group 101
Router1(config-cmap)#ex
Router1(config)#policy-map type inspect IN-2-OUT-PMAP
Router1(config-pmap)#class type inspect IN-NET-CLASS-MAP
Router1(config-pmap-c)#inspect
%No specific protocol configured in class IN-NET-CLASS-MAP for inspection. All protocols will be inspected
Router1(config-pmap)#ex
Router1(config)#zone-pair security IN-2-OUT-ZPAIR source IN-ZONE destination OUT-ZONE
Router1(config-sec-zone-pair)#service-policy type inspect IN-2-OUT-PMAP
Router1(config-sec-zone-pair)#ex
Router1(config)#int f0/0
Router1(config-if)#zone-member security IN-ZONE
Router1(config-if)#ex
Router1(config)#int s0/0/1
Router1(config-if)#zone-member security OUT-ZONE
Router1(config-if)#ex
Router1(config)#ex
Router1#
%SYS-5-CONFIG_I: Configured from console by console
Router3#show policy-map type inspect zone-pair sessions
Zone-pair: IN-2-OUT-ZPAIR
静态路由配置
Ping通
实验心得:这次实验涉及的内容很多,同时也让我懂得了静态路由的配置和动态路由,还有防火墙的设置,中途遇到网络拼不通的状况,也重新做了几遍,才发现是自己疏忽导致的问题,还好坚持下来了,再次拼通时很是开心,因为让自己明白了其中的重要成分,所以不管怎样还是要坚持,认真对待每件事,争取做到最好,不烦躁,不退缩,这样才能做好一切事情,也感谢老师辛苦的为我们讲解重点内容,使自己也掌握很多知识。