- 论坛徽章:
- 0
|
内网的电脑PING不通路由器,telnet也不能到路由器;
路由器也PING 不通内网的IP,PING外网的就没问题;
可是网络却是好的,内网的电脑都可以上网什么的,都没问题;
在路由器内网的接口上的ACL如下:
ip access-list extend temp_in
deny tcp any any eq 135
deny tcp any any eq 445
deny tcp any any eq 9996
deny tcp any any eq 5554
deny tcp any any eq 1068
permit ip 192.168.0.0 0.0.0.255 192.168.2.0 0.0.0.255
permit ip 192.168.0.0 0.0.0.255 192.168.3.0 0.0.0.255
permit ip 192.168.0.0 0.0.0.255 192.168.4.0 0.0.0.255
permit ip 192.168.0.0 0.0.0.255 192.168.5.0 0.0.0.255
permit ip 192.168.0.0 0.0.0.255 192.168.9.0 0.0.0.255
permit ip 192.168.2.0 0.0.0.255 192.168.0.0 0.0.0.255
permit ip 192.168.3.0 0.0.0.255 192.168.0.0 0.0.0.255
permit ip 192.168.4.0 0.0.0.255 192.168.0.0 0.0.0.255
permit ip 192.168.5.0 0.0.0.255 192.168.0.0 0.0.0.255
permit ip 192.168.9.0 0.0.0.255 192.168.0.0 0.0.0.255
deny ip 192.168.0.0 0.0.255.255 192.168.0.0 0.0.255.255
permit ip 192.168.0.0 0.0.0.255 any
permit ip 192.168.2.0 0.0.0.255 any
permit ip 192.168.3.0 0.0.0.255 any
permit ip 192.168.4.0 0.0.0.255 any
permit ip 192.168.5.0 0.0.0.255 any
permit ip 192.168.9.0 0.0.0.255 any
ip access-list extend temp_out
permit ip 10.1.1.0 0.0.0.255 host 192.168.0.1
permit ip 10.1.1.0 0.0.0.255 host 192.168.0.65
permit ip 10.1.1.0 0.0.0.255 host 192.168.0.88
permit ip 10.2.1.0 0.0.0.255 host 192.168.0.1
permit ip 10.2.1.0 0.0.0.255 host 192.168.0.65
permit ip 10.3.1.0 0.0.0.255 host 192.168.0.1
permit ip 10.3.1.0 0.0.0.255 host 192.168.0.65
permit ip 10.4.1.0 0.0.0.255 host 192.168.0.1
permit ip 10.4.1.0 0.0.0.255 host 192.168.0.65
permit ip 10.4.1.0 0.0.0.255 host 192.168.5.53
deny ip 10.1.1.0 0.0.0.255 192.168.0.0 0.0.255.255
deny ip 10.2.1.0 0.0.0.255 192.168.0.0 0.0.255.255
deny ip 10.3.1.0 0.0.0.255 192.168.0.0 0.0.255.255
deny ip 10.4.1.0 0.0.0.255 192.168.0.0 0.0.255.255
permit ip any 192.168.0.0 0.0.0.255
permit ip any 192.168.2.0 0.0.0.255
permit ip any 192.168.3.0 0.0.0.255
permit ip any 192.168.4.0 0.0.0.255
permit ip any 192.168.5.0 0.0.0.255
permit ip any 192.168.9.0 0.0.0.255
是ACL的关系呢,还是跟其他的配置有关系,请教各位了。 |
|