目的：
1、限制一pc192.168.85.**访问外围部分服务器172.18.0.0，并防止修改ip地址
2、限制该ip访问防火强dmz区域
步骤：
dis ver
Huawei Versatile Routing Platform Software
VRP (R) software, Version 5.70 (S5700 V100R005C01SPC100)
Copyright (C) 2000-2011 HUAWEI TECH CO., LTD
Quidway S5700-24TP-SI-AC Routing Switch uptime is 7 weeks, 3 days, 21 hours, 31
minutes
EFGEA 0(Master) : uptime is 7 weeks, 3 days, 21 hours, 30 minutes
256M bytes DDR Memory
32M bytes FLASH
Pcb Version : VER A
Basic BOOTROM Version : 127 Compiled at Jan 18 2011, 22:45:47
CPLD Version : 4
Software Version : VRP (R) Software, Version 5.70 (S5700 V100R005C01SPC100)
1、定义高级acl
6、飞秋
dis acl 3000
Advanced ACL 3000, 5 rules
Acl's step is 5
rule 5 deny tcp source-port eq 2425
rule 10 deny udp source-port eq 2425
rule 15 deny tcp destination-port eq 2425
rule 20 deny udp destination-port eq 2425
在端口下应用
traffic-filter inbound acl 3000 rule 5
traffic-filter inbound acl 3000 rule 10
traffic-filter inbound acl 3000 rule 15
traffic-filter inbound acl 3000 rule 20
测试成功
阅读(10376) | 评论(0) | 转发(0) |
