Cisco 单向ACL 单臂路由

在一个公司里有财务部、技术部、销售部。设备有一台36系列和两台2950交换机。要求：财务部能访问技术部和销售部。但技术部和销售部不能访问财务部。（单臂，单向ACL。）

具体步骤是:用小凡软件：1台3640路由和两台交换机.三台pc。具体连线是：switch1和switch2的f0/0连接。switch1的 f0/15和route1的f0/0连接。pc1的f0/0和switch1的f0/1连接。pc2的f0/0和switch2的f0/1连接。pc3的 f0/0和switch2的f0/2连接。
在switch1和2上分别创建vlan10、20、30。将switch1的f0/0和f0/15变成trunk模式，将f0/1加入到vlan10中。switch2的f0/0变成trunk模式，将f0/1加入到vlan20中，f0/2加入到vlan30中。
单臂路由，单向acl的路由具体配置（route1）：
router1
!
routing

FastEthernet0/0
no ip address
duplex auto
speed auto
!
interface FastEthernet0/0.1
encapsulation dot1Q 10
ip address 192.168.10.1 255.255.255.0
ip access-group lian in
ip access-group ming out
!
interface FastEthernet0/0.2
encapsulation dot1Q 20
ip address 192.168.20.1 255.255.255.0
!
interface FastEthernet0/0.3
encapsulation dot1Q 30
ip address 192.168.30.1 255.255.255.0
!
ip http server
no ip http secure-server
!
!
!
!
ip access-list extended lian
permit ip 192.168.10.0 0.0.0.255 any reflect jin
ip access-list extended ming
evaluate jin
pc1的配置：
pc1
!
no ip routing
interface FastEthernet0/0
ip address 192.168.10.10 255.255.255.0
duplex auto
speed auto
!
ip default-gateway 192.168.10.1
pc2的配置：
pc2
!
no ip routing
interface FastEthernet0/0
ip address 192.168.20.10 255.255.255.0
duplex auto
speed auto
!
ip default-gateway 192.168.20.1
pc3的配置：

pc3
!
no ip routing
interface FastEthernet0/0
ip address 192.168.30.10 255.255.255.0
duplex auto
speed auto
!
ip default-gateway 192.168.30.1

switch1

interface FastEthernet0/0
switchport mode trunk
!
interface FastEthernet0/1
switchport access vlan 10
!
interface FastEthernet0/2
!
interface FastEthernet0/3
!
interface FastEthernet0/4
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
switchport mode trunk

switch2
interface FastEthernet0/0
switchport mode trunk
!
interface FastEthernet0/1
switchport access vlan 10
!
interface FastEthernet0/2
!
interface FastEthernet0/3
!
interface FastEthernet0/4
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15