一、配置IP

二、基本配置
命名路由器为AR1,配置路由器端口IP地址
sysname AR1
interface GigabitEthernet 0/0/0
ip address 172.16.1.254 24
interface GigabitEthernet 0/0/1
ip address 172.16.3.254 24
interface GigabitEthernet 0/0/2
ip address 172.16.2.254 24
quit
三、定义基本ACL规则
选择ACL编号为2000
acl 2000
rule deny source 172.16.2.0 0.0.0.255
quit
四、将定义好的规则应用在接口上
interface GigabitEthernet 0/0/1
traffic-filter outbound acl 2000

Comments NOTHING