拓撲：

S1：

添加vl10

?添加vl20

all：所有

<Huawei>sy Enter system view, return user view with Ctrl+Z. [Huawei]un in e Info: Information center is disabled. [Huawei]int e0/0/2 [Huawei-Ethernet0/0/2]po [Huawei-Ethernet0/0/2]port li [Huawei-Ethernet0/0/2]port link-t [Huawei-Ethernet0/0/2]port link-type a [Huawei-Ethernet0/0/2]port link-type access [Huawei-Ethernet0/0/2]po [Huawei-Ethernet0/0/2]portde [Huawei-Ethernet0/0/2]port de [Huawei-Ethernet0/0/2]port default v [Huawei-Ethernet0/0/2]port default vlan 10 [Huawei-Ethernet0/0/2]int e0/0/3 [Huawei-Ethernet0/0/3]port link-type access [Huawei-Ethernet0/0/3]port default vlan 20 [Huawei-Ethernet0/0/3]int e0/0/4 [Huawei-Ethernet0/0/4]port link-type trunk [Huawei-Ethernet0/0/4]port trunk allow-pass vlan all [Huawei-Ethernet0/0/4]int e0/0/5 [Huawei-Ethernet0/0/5]port link-type access [Huawei-Ethernet0/0/5]port default vlan 30 [Huawei-Ethernet0/0/5]tr [Huawei-Ethernet0/0/5]traffic-filterou [Huawei-Ethernet0/0/5]traffic-filter ou [Huawei-Ethernet0/0/5]traffic-filter outbound acl 2000

R1：

查看命令：ensp 查看配置命令

R2：

<Huawei>sy Enter system view, return user view with Ctrl+Z. [Huawei]un in e Info: Information center is disabled. [Huawei]int g0/0/0 [Huawei-GigabitEthernet0/0/0]ip a [Huawei-GigabitEthernet0/0/0]ip add [Huawei-GigabitEthernet0/0/0]ip address 10.1.1.2 255.255.255.0 [Huawei-GigabitEthernet0/0/0]int g0/0/1 [Huawei-GigabitEthernet0/0/1]ip address 10.1.2.1 255.255.255.0

?pc1正常訪問，pc2被acl攔截：

總結

以上是生活随笔為你收集整理的nat，acl及单臂路由实验（ensp）的全部內容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網站內容還不錯，歡迎將生活随笔推薦給好友。