华为和锐捷设备流统配置

华为:


<AR6121E-S>dis acl 3333
Advanced ACL 3333, 4 rules
Acl's step is 5
 rule 5 permit icmp source 192.168.188.2 0 destination 192.168.88.88 0 
 rule 10 permit icmp source 192.168.88.88 0 destination 192.168.188.2 0 
 rule 15 permit udp source 14.23.154.114 0 source-port eq 1701 destination 14.145.146.57 0 (7 matches)
 rule 20 permit udp source 14.145.146.57 0 destination 14.23.154.114 0 destination-port eq 1701 (7 matches)

 int g0/0/8
 traffic-filter inbound acl 3333
 traffic-filter outbound acl 3333

 [AR6121E-S]capture-packet interface g 0/0/8 acl 3333 destination terminal 
 

锐捷:

注意:以下ip地址仅为举例,以现场实际ip地址为准

第一步:创建ACL

ip access-list extended test-down-in

 10 permit icmp host 104.52.56.14 host 172.26.131.30

 20 permit icmp host 172.26.131.30  host 104.52.56.14

 100 permit ip any any

!

ip access-list extended test-down-out

 10 permit icmp host 104.52.56.14 host 172.26.131.30

 20 permit icmp host 172.26.131.30  host 104.52.56.14

 100 permit ip any any

!

ip access-list extended test-up-in

10 permit icmp host 104.52.56.14 host 172.26.131.30

 20 permit icmp host 172.26.131.30  host 104.52.56.14

 100 permit ip any any

!

ip access-list extended test-up-out

10 permit icmp host 104.52.56.14 host 172.26.131.30

 20 permit icmp host 172.26.131.30  host 104.52.56.14

 100 permit ip any any

 第二步:开启ACL计数

 !

ip access-list counter test-up-in

!         

ip access-list counter test-up-out

!

ip access-list counter test-down-out

!

ip access-list counter test-down-in

第三步:

上下联口调用ACL:

上联口(连接路由器的接口)

比如连接的是g0/1(以具体连接的接口为准)

int g0/1

ip access-group test-up-in in

ip access-group test-up-out out

下连口(连接电脑的接口)

ip access-group test-down-in in

ip access-group test-down-out out

第四步:

查看计数:show access-lists

清除计数:clear counters

注意:若clear counters无法清除计数统计,则clear counters access-list xx(xx代表acl的名字)来清除

相关推荐

  1. 华为设备配置

    2024-06-11 18:32:02       8 阅读
  2. 设备常用命令

    2024-06-11 18:32:02       69 阅读
  3. 华为、华三、、思科巡检命令大全

    2024-06-11 18:32:02       72 阅读

最近更新

  1. TCP协议是安全的吗?

    2024-06-11 18:32:02       16 阅读
  2. 阿里云服务器执行yum,一直下载docker-ce-stable失败

    2024-06-11 18:32:02       16 阅读
  3. 【Python教程】压缩PDF文件大小

    2024-06-11 18:32:02       15 阅读
  4. 通过文章id递归查询所有评论(xml)

    2024-06-11 18:32:02       18 阅读

热门阅读

  1. Linux下的lvm镜像与快照

    2024-06-11 18:32:02       6 阅读
  2. STM32 UART串口与物联网设备的集成方案

    2024-06-11 18:32:02       9 阅读
  3. PostgreSQL教程

    2024-06-11 18:32:02       4 阅读
  4. 1. 面向对象的由来

    2024-06-11 18:32:02       10 阅读