Apply ACL to restrict SSH access to the experiment

Preface: I am a student studying network engineering at Peking University # training institutions. Because I am more interested in routing exchange technology, I took a ccna test during my school years, as a quasi-It practitioner, I hope that I can maintain my learning spirit and learn more from my predecessors. The following is a simple experiment by myself, which combines ACL and SSH applications.

1.Experiment topology and experiment requirements, because the Windows host does not support SSH itself, you need to install an additional SSH client, so the experiment uses a router to simulate pc650) This. width = 650; "Title =" Unnamed .jpg "src =" http://s3.51cto.com/wyfs02/M02/47/D1/wKioL1P_9vKSirrZAAB3TCFDaZ4135.jpg "alt =" wkiol1p_9vksirrzaab3tcfdaz4135.jpg "/>

2.Configure on H1, disable the routing function to simulate the PC, configure the interface IP address, and set the default gateway 650) This. width = 650; "Title =" Unnamed .jpg "src =" http://s3.51cto.com/wyfs02/M02/47/D1/wKioL1P_9yHi4FixAAD2t3WWjog717.jpg "alt =" wkiol1p_9yhi4fixaad2t3wwjog717.jpg "/>

3.Configure on H2, disable the routing function to simulate the PC, configure the interface IP address, and set the default gateway 650) This. width = 650; "Title =" Unnamed .jpg "src =" http://s3.51cto.com/wyfs02/M00/47/D1/wKioL1P_90uST60JAAE7TVC2mNk498.jpg "alt =" wkiol1p_90ust60jaae7tvc2mnk498.jpg "/>

4. Configure the interface IP address on R1, ping H2 on H1 650) This. length = 650; "Title =" Unnamed .jpg "src =" http://s3.51cto.com/wyfs02/M02/47/CF/wKiom1P_9liAuBO9AAIRDDIkXGE932.jpg "alt =" wkiom1p_9liaubo9aairddikxge932.jpg "/> / span>

5. Configure SSH on R1 and set the ACL limit. Only H1 can connect to R1 over SSH and apply it to vty interface 650) This. length = 650; "Title =" Unnamed .jpg "src =" http://s3.51cto.com/wyfs02/M00/47/CF/wKiom1P_9o3AbZKCAAHsQieiu0k715.jpg "alt =" wkiom1p_9o3abzkcaahsqieiu0k715.jpg "/> / span>

6.On H1, SSH can be used to connect to R1, while H2 cannot connect to R1. The experiment is successful. 650) This. width = 650; "Title =" Unnamed .jpg "src =" http://s3.51cto.com/wyfs02/M00/47/D1/wKioL1P_99_iXrVvAAClBK-yrqo083.jpg "alt =" wKioL1P_99_iXrVvAAClBK-yrqo083.jpg "/>

Apply ACL to restrict SSH access to the experiment