Shulou(Shulou.com)06/02 Report--

The topology diagram is as follows:

Experimental purpose

1. DMZ publishes Web server, and Client2 can access Server3

2. Configure ACL to prohibit Client3 from accessing Server2

3. Client1 can access server2 and server3

4. All Netcom

The steps of the experiment:

Configure inside, outside, DMZ and other settings

1. The cloud must be configured first.

Cloud1:

Cloud2:

Cloud3:

2. Configure inside and other settings

Inside:

Outside:

DMZ:

(first verify here. After configuration, the high security level can access the low security level by default. Oh, yes, there is no access there because there is a route in the private network, so we use DMZ to access the outside.)

OK, go on, next, give client2 access to server3

Purpose 1:

First, configure ACL to allow inbound connections

Now that it's configured, get the

Purpose two of the experiment:

Next, disable client3 from accessing server2

When it's done, you can also compare what you just got before.

Purpose 3:

1. Configure routing to enable client1 and server1 to get in touch with the outside world

Match IP~ first.

Secondly, configure the default route:

Then configure the firewall route

Now test (why is this OK? Because after the above operations, R1 already has route entries for 192.168.1.0 and 10.1.1.0), and because inside has the highest priority of three parties, the other two servers can be obtained by default:

Outside:

DMZ:

Purpose 4:

1. This sounds complicated, but in fact it is the simplest. Just configure the firewall directly.

Client1:

Client2

Client3:

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.