ACL问题

fxxx20110612

这个是拓扑。     R1配置：interface Loopback1
ip address 1.1.1.1 255.255.255.0
!         
interface Serial0/0
ip address 12.1.1.1 255.255.255.0
serial restart-delay 0
!         
interface Serial0/1
no ip address
shutdown
serial restart-delay 0
!         
interface Serial0/2
no ip address
shutdown
serial restart-delay 0
!         
interface Serial0/3
no ip address
shutdown
serial restart-delay 0
!         
router eigrp 90
network 1.1.1.0 0.0.0.255
network 12.1.1.0 0.0.0.255
no auto-summary









R2配置：interface Serial0/0
ip address 12.1.1.2 255.255.255.0
ip access-group 1 in
serial restart-delay 0
!         
interface Serial0/1
ip address 23.1.1.2 255.255.255.0
serial restart-delay 0
!         
interface Serial0/2
ip address 24.1.1.2 255.255.255.0
serial restart-delay 0
!         
interface Serial0/3
no ip address
shutdown
serial restart-delay 0
!         
router eigrp 90
redistribute ospf 110 metric 1500 100 255 1 1500
network 12.1.1.0 0.0.0.255
no auto-summary
!         
router ospf 110
router-id 2.2.2.2
log-adjacency-changes
redistribute rip subnets
network 24.1.1.0 0.0.0.255 area 0
!         
router rip
version 2
network 23.0.0.0
no auto-summary

fxxx20110612

R1的环回口做源PING不通12.1.1.2（R1，R2之间12网段）

qq360870025

ACL的配置没有看见，看你咋定义的

独侠

Sphinx

ACL问题怎么没贴ACL?

庄歪

fxxx20110612

access-list 1 permit 1.1.1.0 0.0.0.255

fxxx20110612

R2定义的。用在s0/0的IN方向。R1上用环回口做源怎么PING不通R2呢？PING 12.1.1.2 SO 1.1.1.1

tony_bian

这个ACL当然不通了,ACL有隐藏语句,你只放行了一个1.1.1.0的流量, EIGRP建立邻居的流量怎么办呢?

tony_bian

R2#show ip access-lists
Extended IP access list 100
    10 permit ip 1.1.1.0 0.0.0.255 any (15 matches)
    20 permit eigrp any any (51 matches)


这样写就可以了~~~