Cisco认证考试重要知识辅导(7)
重定向信息,由路由器发出,对主机有效,如果R1启用路由功能,配置默认路由指向R2,一样会收到重定向信息,但是对于作为路由器的R1,会忽视重定向信息,仍然会将后继数据报文发给R2,可通过以下办法验证:
启用R1的路由功能:
R1(config)#ip routing
R2(config)#access-list 101 permit ip any host .3
R2(config)#access-list 101 permit ip any any
R2(config)#interface ethernet 0
R2(config-if)#ip access-group 101 in
从R1发起ping
R1#ping .3
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to .3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = ms
R1#ping .3
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to .3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = ms
查看R2的访问列表计数:可见全部数据报文都经过了R2的以太网口在转发出去。
R2#show ip access-lists 101
Extended IP access list 101
10 permit ip any host .3 (20 matches)
20 permit ip any any (132 matches)
IOS对于进入本接口之后,本路由器应答或从相同接口转发出去的数据报文,会双倍计数,即五个数据报文计数为10.
(5)关闭R1的路由功能,并在此pingR3
R1#ping .3
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to .3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = ms
查看R2的通过访问控制,截取的数据报文个数:
R2#show access-lists 101
Extended IP access list 101
10 permit ip any host .3 (22 matches)
20 permit ip any any (434 matches)
相关内容