一.配置基本ACL1.在PC1，PC2，PC3上配置IP地址2.在R1上配置接口IP在PC1上ping PC23.在R1上配置基本ACL[R1]acl 2000 [R1-acl-basic-20
.
一.配置基本ACL
1.在PC1，PC2，PC3上配置IP地址
2.在R1上配置接口IP
在PC1上ping PC2
3.在R1上配置基本ACL
[R1]acl 2000
[R1-acl-basic-2000]rule deny source 10.1.1.1 0
[R1-acl-basic-2000]quit
4.调用基本ACL
[R1]int g0/0/1
[R1-GigabitEthernet0/0/1]traffic-filter outbound acl 2000
[R1-GigabitEthernet0/0/1]quit
二.配置扩展ACL
1.在PC1，PC2，PC3上配置IP地址
2.配置接口IP
3.配置扩展ACL
[R1]acl 3000
[R1-acl-adv-3000]rule deny ip source 10.1.1.1 0 destination 20.1.1.1 0
[R1-acl-adv-3000]quit
4.调用扩展ACL
[R1]int g0/0/0
[R1-GigabitEthernet0/0/0]traffic-filter inbound acl 3000
