CBAC FTP Test

1. Test topology:

R2 (20.1.1.2/24)--------------(20.1.1.1/24) R1 (10.1.1.1/25)-------(10.1.1.18) ftpserver

Situation one: Outside inside

Situation two: Inside outside

Reference: http://wenku.baidu.com/view/0b0c0f0490c69ec3d5bb75b6.html

2. Test Purpose:

A. Understanding the active mode of FTP, passive mode

B. Understanding the processing of CBAC technology for FTP applications

C. Understanding the basic configuration method of Cbac

----CBAC in the old version of iOS, has been replaced by ZBF, this test 2691 platform, did not configure Nat.

----CBAC is simpler to configure than ZBF, just configure it on the interface, rather than configuring it between different zone like ZBF

3. Basic configuration:

R1:

Interface fastethernet0/0

IP address 20.1.1.1 255.255.255.0

No shutdown

!

Interface FASTETHERNET0/1

IP address 10.1.1.1 255.255.255.0

No shutdown

R2:

Interface fastethernet0/0

IP address 20.1.1.2 255.255.255.0

No shutdown

IP Route 0.0.0.0 0.0.0.0 20.1.1.1

IP FTP username XLL

IP ftp Password 1234qwer

FTP Server:

Ip:10.1.1.18/24

gw:10.1.1.1

4.FTP Server network:

A. Configure the access policy at the outer port of R1, allowing only TCP 21 connections to access the FTP server

Access-list permit TCP Any host 10.1.1.18 eq FTP

Interface fastethernet0/0

IP access-group