华为和锐捷设备流统配置

华为:

<AR6121E-S>dis acl 3333

Advanced ACL 3333, 4 rules

Acl's step is 5

rule 5 permit icmp source 192.168.188.2 0 destination 192.168.88.88 0

rule 10 permit icmp source 192.168.88.88 0 destination 192.168.188.2 0

rule 15 permit udp source 14.23.154.114 0 source-port eq 1701 destination 14.145.146.57 0 (7 matches)

rule 20 permit udp source 14.145.146.57 0 destination 14.23.154.114 0 destination-port eq 1701 (7 matches)

int g0/0/8

traffic-filter inbound acl 3333

traffic-filter outbound acl 3333

AR6121E-S\]capture-packet interface g 0/0/8 acl 3333 destination terminal 锐捷: 注意:以下ip地址仅为举例,以现场实际ip地址为准 第一步:创建ACL ip access-list extended test-down-in 10 permit icmp host 104.52.56.14 host 172.26.131.30 20 permit icmp host 172.26.131.30 host 104.52.56.14 100 permit ip any any ! ip access-list extended test-down-out 10 permit icmp host 104.52.56.14 host 172.26.131.30 20 permit icmp host 172.26.131.30 host 104.52.56.14 100 permit ip any any ! ip access-list extended test-up-in 10 permit icmp host 104.52.56.14 host 172.26.131.30 20 permit icmp host 172.26.131.30 host 104.52.56.14 100 permit ip any any ! ip access-list extended test-up-out 10 permit icmp host 104.52.56.14 host 172.26.131.30 20 permit icmp host 172.26.131.30 host 104.52.56.14 100 permit ip any any ! 第二步:开启ACL计数 ! ip access-list counter test-up-in ! ip access-list counter test-up-out ! ip access-list counter test-down-out ! ip access-list counter test-down-in 第三步: 上下联口调用ACL: 上联口(连接路由器的接口) 比如连接的是g0/1(以具体连接的接口为准) int g0/1 ip access-group test-up-in in ip access-group test-up-out out 下连口(连接电脑的接口) ip access-group test-down-in in ip access-group test-down-out out 第四步: 查看计数:show access-lists 清除计数:clear counters 注意:若clear counters无法清除计数统计,则clear counters access-list xx(xx代表acl的名字)来清除

相关推荐
大面积秃头30 分钟前
Http基础协议和解析
网络·网络协议·http
我也要当昏君2 小时前
6.3 文件传输协议 (答案见原书 P277)
网络
Greedy Alg3 小时前
Socket编程学习记录
网络·websocket·学习
刘逸潇20053 小时前
FastAPI(二)——请求与响应
网络·python·fastapi
Mongnewer4 小时前
通过虚拟串口和网络UDP进行数据收发的Delphi7, Lazarus, VB6和VisualFreeBasic实践
网络
我也要当昏君4 小时前
6.5 万维网(答案见原书P294)
网络
嶔某5 小时前
网络:传输层协议UDP和TCP
网络·tcp/ip·udp
文火冰糖的硅基工坊5 小时前
[嵌入式系统-154]:各种工业现场总线比较
网络·自动驾驶·硬件架构
以己之5 小时前
详解TCP(详细版)
java·网络·tcp/ip
Ronin3056 小时前
【Linux网络】封装Socket
linux·网络·socket·网络通信