瀘溪ssl適用于網(wǎng)站、小程序/APP、API接口等需要進(jìn)行數(shù)據(jù)傳輸應(yīng)用場(chǎng)景,ssl證書(shū)未來(lái)市場(chǎng)廣闊!成為成都創(chuàng)新互聯(lián)公司的ssl證書(shū)銷(xiāo)售渠道,可以享受市場(chǎng)價(jià)格4-6折優(yōu)惠!如果有意向歡迎電話聯(lián)系或者加微信:028-86922220(備注:SSL證書(shū)合作)期待與您的合作!
三臺(tái)主機(jī),一臺(tái)路由器
win10 -1 :綁定VMnet1網(wǎng)卡
win10-2:綁定VMnet2網(wǎng)卡
linux:綁定VMnet8網(wǎng)卡作為測(cè)試
f0/0:192.168.1.1/24
f1/0:192.168.2.1/24
f10/1:192.168.100.1/242.配置linux服務(wù)器,安裝兩個(gè)服務(wù)VSFTPD,HTTPD
[root@localhost ~]# yum install vsftpd -y
已加載插件:fastestmirror, langpacks
Loading mirror speeds from cached hostfile
* base: mirrors.163.com
* extras: mirrors.cn99.com
* updates: mirrors.cn99.com
正在解決依賴(lài)關(guān)系
--> 正在檢查事務(wù)
---> 軟件包 vsftpd.x86_64.0.3.0.2-25.el7 將被 安裝
--> 解決依賴(lài)關(guān)系完成
[root@localhost ~]# yum install httpd -y
已加載插件:fastestmirror, langpacks
Loading mirror speeds from cached hostfile
* base: mirrors.163.com
* extras: mirrors.cn99.com
* updates: mirrors.cn99.com
正在解決依賴(lài)關(guān)系
--> 正在檢查事務(wù)
[root@localhost ~]# vim /etc/sysconfig/network-scripts/ifcfg-ens33
TYPE=Ethernet
PROXY_METHOD=none
BROWSER_ONLY=no
BOOTPROTO=static
DEFROUTE=yes
IPV4_FAILURE_FATAL=no
IPV6INIT=yes
IPV6_AUTOCONF=yes
IPV6_DEFROUTE=yes
IPV6_FAILURE_FATAL=no
IPV6_ADDR_GEN_MODE=stable-privacy
NAME=ens33
UUID=849aa04e-1874-490f-8cb0-b2fde4b9a6f8
DEVICE=ens33
ONBOOT=yes
IPADDR=192.168.100.100
NETMASK=255.255.255.0
GATEWAY=192.168.100.1
[root@localhost ~]# systemctl restart network
重啟linux服務(wù)器
R1#conf t
R1(config)#int f0/0
R1(config-if)#ip add 192.168.1.1 255.255.255.0
R1(config-if)#no shut
R1(config-if)#int f0/1
R1(config-if)#ip add 192.168.100.1 255.255.255.0
R1(config-if)#no shut
R1(config-if)#int f1/0
R1(config-if)#ip add 192.168.2.1 255.255.255.0
R1(config-if)#no shut
R1(config-if)#ex
R1(config)#do show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route
Gateway of last resort is not set
C 192.168.1.0/24 is directly connected, FastEthernet0/0
C 192.168.2.0/24 is directly connected, FastEthernet1/0
C 192.168.100.0/24 is directly connected, FastEthernet0/1
C:\Users\CHEN>ping 192.168.1.2
正在 Ping 192.168.1.2 具有 32 字節(jié)的數(shù)據(jù):
來(lái)自 192.168.1.2 的回復(fù): 字節(jié)=32 時(shí)間=19ms TTL=127
來(lái)自 192.168.1.2 的回復(fù): 字節(jié)=32 時(shí)間=18ms TTL=127
來(lái)自 192.168.1.2 的回復(fù): 字節(jié)=32 時(shí)間=14ms TTL=127
來(lái)自 192.168.1.2 的回復(fù): 字節(jié)=32 時(shí)間=15ms TTL=127
root@localhost chen]# systemctl stop firewalld.service
root@localhost chen]# setenforce 0
[root@localhost chen]# cd /var/www/html
[root@localhost html]# vim index.html
<h2>this is test web</h2>
[root@localhost html]# ls
index.html
[root@localhost html]# systemctl start httpd
[root@localhost html]# systemctl start vsftpd
[root@localhost html]# cd /var/ftp
[root@localhost ftp]# ls
pub
[root@localhost ftp]# echo "this is ftp" > ftp.txt
[root@localhost ftp]# ls
ftp.txt pub
[root@localhost html]# netstat -nuap | egrep '(21|80)'
udp 0 0 192.168.122.1:53 0.0.0.0:* 1380/DNSmasq
udp 0 0 0.0.0.0:67 0.0.0.0:* 1380/dnsmasq
R1#conf t
R1(config)#access-list 100 permit tcp host 192.168.1.2 host 192.168.100.100 eq www
//擴(kuò)展的序列號(hào)100-199,允許tcp協(xié)議,固定地址192.168.1.2去訪問(wèn)
192.168.100.100 后面跟端口號(hào)80也可以是名字
R1(config)#do show access-list //查看訪問(wèn)控制列表
Extended IP access list 100
10 permit tcp host 192.168.1.2 host 192.168.100.100 eq www
R1(config)#access-list 100 deny ip host 192.168.1.2 host 192.168.100.100
R1(config)#do show access-list
Extended IP access list 100
10 permit tcp host 192.168.1.2 host 192.168.100.100 eq www
20 deny ip host 192.168.1.2 host 192.168.100.100
R1(config)#access-list 100 permit ip host 192.168.1.2 192.168.2.0 0.0.0.255
R1(config)#do show access-list
Extended IP access list 100
10 permit tcp host 192.168.1.2 host 192.168.100.100 eq www
20 deny ip host 192.168.1.2 host 192.168.100.100
30 permit ip host 192.168.1.2 192.168.2.0 0.0.0.255
R1(config-if)#ip access-group 100 in //應(yīng)用在接口,離限制方最近的端口,是入口方向。
文章名稱(chēng):ACL擴(kuò)展訪問(wèn)控制列表詳解
網(wǎng)站路徑:http://bm7419.com/article0/jcgoio.html
成都網(wǎng)站建設(shè)公司_創(chuàng)新互聯(lián),為您提供網(wǎng)站策劃、定制開(kāi)發(fā)、做網(wǎng)站、網(wǎng)站建設(shè)、、網(wǎng)站排名
聲明:本網(wǎng)站發(fā)布的內(nèi)容(圖片、視頻和文字)以用戶(hù)投稿、用戶(hù)轉(zhuǎn)載內(nèi)容為主,如果涉及侵權(quán)請(qǐng)盡快告知,我們將會(huì)在第一時(shí)間刪除。文章觀點(diǎn)不代表本網(wǎng)站立場(chǎng),如需處理請(qǐng)聯(lián)系客服。電話:028-86922220;郵箱:631063699@qq.com。內(nèi)容未經(jīng)允許不得轉(zhuǎn)載,或轉(zhuǎn)載時(shí)需注明來(lái)源: 創(chuàng)新互聯(lián)