编 号： 067-20240822
飘落的秋叶
ICMP协议控制策略
目录
1、 概述
2、 拓扑
3、 配置
4、 验证
1、概述
本文通过示例来演示ICMP协议控制策略
放行ICMP ping以及路由跟踪，其它拒绝
2、拓扑
3、配置
---------R1关键配置---------
<R1>
sysname R1
acl name icmp 3999
rule 10 permit icmp icmp-type echo
rule 15 permit icmp icmp-type echo-reply
rule 25 permit icmp icmp-type ttl-exceeded
rule 30 deny icmp
#
traffic classifier icmp operator or
if-match acl icmp
#
traffic behavior icmp
permit
#
traffic policy icmp
classifier icmp behavior icmp
#
interface GigabitEthernet0/0/0
ip address 12.1.1.1 255.255.255.252
traffic-policy icmp outbound
#
interface GigabitEthernet0/0/2
ip address 192.168.1.1 255.255.255.0
#
ospf 1 router-id 1.1.1.1
import-route direct
area 0.0.0.0
network 12.1.1.1 0.0.0.0
---------R2关键配置---------
<R2>
sysname R2
#
interface GigabitEthernet0/0/0
ip address 12.1.1.2 255.255.255.252
#
interface GigabitEthernet0/0/2
ip address 192.168.2.1 255.255.255.0
#
ospf 1 router-id 2.2.2.2
import-route direct
area 0.0.0.0
network 12.1.1.2 0.0.0.0
4.验证
版权声明：本文转载于今日头条，版权归作者所有，如果侵权，请联系本站编辑删除