~~~~配置

rip 1
version 2    
undo summary
network 16.0.0.0

ospf 1 router-id 2.2.2.2
area 0
network 192.168.12.0 0.0.0.255
network 192.168.13 0 0.0.0.255

ospf 1    
import-route rip type 1 cost 5
rip 1
import-route ospf 1 cost 6

acl 2000
rule 5 deny source 192.168.1.0 0.0.0.255

rule permit ip
int g/0/0/0
traffic-filter inbound acl 2000
dis acl 2000

nat address-group 1 200.1.1.100 200.1.1.110
acl 2000
rule 5 deny source 192.168.1.0 0.0.0.255

rule permit ip
int g/0/0/0
nat outbound 2000 address-group 1 no-pat

 

不允许PC2通过域名访问Server2
acl 3000
rule 5 deny udp source 192.168.1.2 0.0.0.0 destination 10.1
.1.1 0.0.0.0 destination-port eq 53

rule permit ip
int g0/0/0
traffic-filter inbound acl 3000

不允许员工08:00 to 17:00工作日内访问淘宝

time-range work-time 08:00 to 17:00 working-day

rule deny tcp source 192.168.1.2 0.0.0.0 destination 10.1.1.1 0.0.0.0 destination-port eq 80 time-range work-time

rule permit ip

int g0/0/0
traffic-filter inbound acl 3000