• 全部
  • 经验案例
  • 典型配置
  • 技术公告
  • FAQ
  • 漏洞说明
  • 全部
  • 全部
  • 大数据引擎
  • 知了引擎
产品线
搜索
取消
案例类型
发布者
是否解决
是否官方
时间
搜索引擎
匹配模式
高级搜索

MSR3600 怎么配置拒绝外网的ICMP协议,还有限制外网IP地址SSH远程登录到路由器

2025-05-09提问
  • 0关注
  • 0收藏,637浏览
粉丝:0人 关注:0人

问题描述:

MSR3600怎么配置ACL拒绝外网的ICMP协议以及如何限制外网IP地址SSH远程登录到路由器weibo.com/ttarticle/p/show?id=2309405164414721458200weibo.com/ttarticle/p/show?id=2309405164412481700015weibo.com/ttarticle/p/show?id=2309405164413245325421weibo.com/ttarticle/p/show?id=2309405164413782196250weibo.com/ttarticle/p/show?id=2309405164414587502696weibo.com/ttarticle/p/show?id=2309405164413681533060weibo.com/ttarticle/p/show?id=2309405164414960795743weibo.com/ttarticle/p/show?id=2309405164412247081024weibo.com/ttarticle/p/show?id=2309405164414478450986weibo.com/ttarticle/p/show?id=2309405164414234918986weibo.com/ttarticle/p/show?id=2309405164413501177914weibo.com/ttarticle/p/show?id=2309405164412184166640weibo.com/ttarticle/p/show?id=2309405164412419047668weibo.com/ttarticle/p/show?id=2309405164414318805083weibo.com/ttarticle/p/show?id=2309405164413299589156weibo.com/ttarticle/p/show?id=2309405164412716843093weibo.com/ttarticle/p/show?id=2309405164414751080476weibo.com/ttarticle/p/show?id=2309405164414532714731weibo.com/ttarticle/p/show?id=2309405164412658122762weibo.com/ttarticle/p/show?id=2309405164414113284118weibo.com/ttarticle/p/show?id=2309405164414210015319weibo.com/ttarticle/p/show?id=2309405164414641766521weibo.com/ttarticle/p/show?id=2309405164413932929040weibo.com/ttarticle/p/show?id=2309405164413354115161weibo.com/ttarticle/p/show?id=2309405164412775301311weibo.com/ttarticle/p/show?id=2309405164412955918506weibo.com/ttarticle/p/show?id=2309405164414843093040weibo.com/ttarticle/p/show?id=2309405164412867576087weibo.com/ttarticle/p/show?id=2309405164413316366412weibo.com/ttarticle/p/show?id=2309405164413085941791weibo.com/ttarticle/p/show?id=2309405164414415274084weibo.com/ttarticle/p/show?id=2309405164413865820265weibo.com/ttarticle/p/show?id=2309405164412540682486weibo.com/ttarticle/p/show?id=2309405164413995843779weibo.com/ttarticle/p/show?id=2309405164413438001389weibo.com/ttarticle/p/show?id=2309405164412922102005weibo.com/ttarticle/p/show?id=2309405164414356815917weibo.com/ttarticle/p/show?id=2309405164414050631938weibo.com/ttarticle/p/show?id=2309405164413513760884weibo.com/ttarticle/p/show?id=2309405164414478188825weibo.com/ttarticle/p/show?id=2309405164412599140531weibo.com/ttarticle/p/show?id=2309405164413991911493weibo.com/ttarticle/p/show?id=2309405164412305801276weibo.com/ttarticle/p/show?id=2309405164414855938262weibo.com/ttarticle/p/show?id=2309405164413832527943weibo.com/ttarticle/p/show?id=2309405164414428119120weibo.com/ttarticle/p/show?id=2309405164414902075682weibo.com/ttarticle/p/show?id=2309405164413077291167weibo.com/ttarticle/p/show?id=2309405164415082430662weibo.com/ttarticle/p/show?id=2309405164412439756969weibo.com/ttarticle/p/show?id=2309405164414050369599weibo.com/ttarticle/p/show?id=2309405164412330967172weibo.com/ttarticle/p/show?id=2309405164413803167843weibo.com/ttarticle/p/show?id=2309405164412360065369weibo.com/ttarticle/p/show?id=2309405164413198925858weibo.com/ttarticle/p/show?id=2309405164414780178643weibo.com/ttarticle/p/show?id=2309405164412129378417weibo.com/ttarticle/p/show?id=2309405164412817506338weibo.com/ttarticle/p/show?id=2309405164414658543718weibo.com/ttarticle/p/show?id=2309405164414176198665weibo.com/ttarticle/p/show?id=2309405164414910464156weibo.com/ttarticle/p/show?id=2309405164414964990152weibo.com/ttarticle/p/show?id=2309405164414696292380weibo.com/ttarticle/p/show?id=2309405164412762718381weibo.com/ttarticle/p/show?id=2309405164413018570799weibo.com/ttarticle/p/show?id=2309405164414373593108weibo.com/ttarticle/p/show?id=2309405164414805606446weibo.com/ttarticle/p/show?id=2309405164413257646165weibo.com/ttarticle/p/show?id=2309405164413379543194weibo.com/ttarticle/p/show?id=2309405164413727408245weibo.com/ttarticle/p/show?id=2309405164412708454507weibo.com/ttarticle/p/show?id=2309405164414159683606weibo.com/ttarticle/p/show?id=2309405164414297833499weibo.com/ttarticle/p/show?id=2309405164415023710360weibo.com/ttarticle/p/show?id=2309405164412385493067weibo.com/ttarticle/p/show?id=2309405164413564092694weibo.com/ttarticle/p/show?id=2309405164414105157702weibo.com/ttarticle/p/show?id=2309405164413941317694weibo.com/ttarticle/p/show?id=2309405164412658122831weibo.com/ttarticle/p/show?id=2309405164412834021619weibo.com/ttarticle/p/show?id=2309405164413136273616weibo.com/ttarticle/p/show?id=2309405164412897198129weibo.com/ttarticle/p/show?id=2309405164413887053980weibo.com/ttarticle/p/show?id=2309405164413559898248weibo.com/ttarticle/p/show?id=2309405164412549070854weibo.com/ttarticle/p/show?id=2309405164412494282799weibo.com/ttarticle/p/show?id=2309405164413459234935weibo.com/ttarticle/p/show?id=2309405164414600085718weibo.com/ttarticle/p/show?id=2309405164413190799469weibo.com/ttarticle/p/show?id=2309405164413408903184weibo.com/ttarticle/p/show?id=2309405164412976628009weibo.com/ttarticle/p/show?id=2309405164412599402700weibo.com/ttarticle/p/show?id=2309405164413672882293weibo.com/ttarticle/p/show?id=2309405164414541365293weibo.com/ttarticle/p/show?id=2309405164413622812676weibo.com/ttarticle/p/show?id=2309405164413031153807weibo.com/ttarticle/p/show?id=2309405164413744185391weibo.com/ttarticle/p/show?id=2309405164414264541302weibo.com/ttarticle/p/show?id=2309405164413618618433weibo.com/ttarticle/p/show?id=2309405164413140205601

最佳答案

粉丝:19人 关注:0人

配置ACL拒绝外网的ICMP协议:

  1. 创建高级ACL

    system-view acl advanced 3000 rule 0 deny icmp source any destination <路由器外网接口IP> 0 quit
  2. 应用ACL到外网接口入方向

    interface GigabitEthernet0/0 # 假设为外网接口 packet-filter 3000 inbound quit

限制外网IP地址SSH登录:

  1. 创建基本ACL允许特定IP

    acl basic 2000 rule 5 permit source <允许的IP地址> 0 rule 10 deny source any quit
  2. 绑定ACL到SSH服务

    ssh server acl 2000 quit

关键点说明:

  • ACL规则顺序:H3C ACL默认隐藏deny any规则,需显式配置拒绝规则(如rule 10 deny)。
  • 接口方向:外网接口需使用inbound方向过滤进入流量。
  • SSH全局控制:此配置会全局限制SSH访问,仅允许ACL 2000中许可的IP。
  • 服务状态验证:确保已启用SSH服务(ssh server enable)。

暂无评论

2 个回答

这样配置只允许192.168.11.11 ssh登录


拒绝ICMP

IC


暂无评论

编辑答案

你正在编辑答案

如果你要对问题或其他回答进行点评或询问,请使用评论功能。

分享扩散:

提出建议

    +

亲~登录后才可以操作哦!

确定

亲~检测到您登陆的账号未在http://hclhub.h3c.com进行注册

注册后可访问此模块

跳转hclhub

你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作

举报

×

侵犯我的权益 >
对根叔社区有害的内容 >
辱骂、歧视、挑衅等(不友善)

侵犯我的权益

×

泄露了我的隐私 >
侵犯了我企业的权益 >
抄袭了我的内容 >
诽谤我 >
辱骂、歧视、挑衅等(不友善)
骚扰我

泄露了我的隐私

×

您好,当您发现根叔知了上有泄漏您隐私的内容时,您可以向根叔知了进行举报。 请您把以下内容通过邮件发送到pub.zhiliao@h3c.com 邮箱,我们会尽快处理。
  • 1. 您认为哪些内容泄露了您的隐私?(请在邮件中列出您举报的内容、链接地址,并给出简短的说明)
  • 2. 您是谁?(身份证明材料,可以是身份证或护照等证件)

侵犯了我企业的权益

×

您好,当您发现根叔知了上有关于您企业的造谣与诽谤、商业侵权等内容时,您可以向根叔知了进行举报。 请您把以下内容通过邮件发送到 pub.zhiliao@h3c.com 邮箱,我们会在审核后尽快给您答复。
  • 1. 您举报的内容是什么?(请在邮件中列出您举报的内容和链接地址)
  • 2. 您是谁?(身份证明材料,可以是身份证或护照等证件)
  • 3. 是哪家企业?(营业执照,单位登记证明等证件)
  • 4. 您与该企业的关系是?(您是企业法人或被授权人,需提供企业委托授权书)
我们认为知名企业应该坦然接受公众讨论,对于答案中不准确的部分,我们欢迎您以正式或非正式身份在根叔知了上进行澄清。

抄袭了我的内容

×

原文链接或出处

诽谤我

×

您好,当您发现根叔知了上有诽谤您的内容时,您可以向根叔知了进行举报。 请您把以下内容通过邮件发送到pub.zhiliao@h3c.com 邮箱,我们会尽快处理。
  • 1. 您举报的内容以及侵犯了您什么权益?(请在邮件中列出您举报的内容、链接地址,并给出简短的说明)
  • 2. 您是谁?(身份证明材料,可以是身份证或护照等证件)
我们认为知名企业应该坦然接受公众讨论,对于答案中不准确的部分,我们欢迎您以正式或非正式身份在根叔知了上进行澄清。

对根叔社区有害的内容

×

垃圾广告信息
色情、暴力、血腥等违反法律法规的内容
政治敏感
不规范转载 >
辱骂、歧视、挑衅等(不友善)
骚扰我
诱导投票

不规范转载

×

举报说明