tcp的acl的established(tcp的Acl的established)

rule 0 deny tcp sourcce 192.168.90.0 0.0.0.255 destination 192.168.0.0 0.0.255.255 这条的意思应该是ACL中的规则0 拒绝源IP192.168.90.0 的IP访问目地192.168.0.0。或者是不建立TCP连接。。

命名扩展ACL配置 R2(config)#ip access-list extended cisco R2(config-ext-nacl)#10 permit eigrp any any R2(config-ext-nacl)#20 permit ip host 1.1.1.1 host 3.3.3.3 R2(config-ext-nacl)#30 permit ip any any R2(config-ext-nacl)#no 30 R2(config-ex 命名扩展ACL配置R2(config)#ip access-list extended ciscoR2(config-ext-nacl)#10 permit eigrp any anyR2(config-ext-nacl)#20 permit ip host 1.1.1.1 host 3.3.3.3R2(config-ext-nacl)#30 permit ip any anyR2(config-ext-nacl)#no 30R2(config-ext-nacl)#30 deny ip any anyR2(config)#int s0/0R2(config-if)#ip access-group in向标准acl里添加条目R2(config)#access-list 10 permit host 1.1.1.1R2(config)#access-list 10 deny anyR2(config)#ip access-list standard 10R2(config-ext-nacl)#1 permit eigrp any any基于TCP的ACLR2(config)#access-list 110 permit eigrp any anyR2(config)#access-list 110 tcp any host 10.1.1.1 established 被建立的 带ack的R2(config)#access-list 110 deny ip any anyR2(config)#int s0/1R2(config-if)#ip access-group 110 in自反ACLR2(config)#ip access-list extended outsideR2(config-ext-nacl)#10 permit eigrp any anyR2(config-ext-nacl)#20 permit tcp host 10.1.1.1 host 20.1.1.2 reflect ciscoR2(config-ext-nacl)#30 deny ip any anyR2(config)#ip access-list extended insideR2(config-ext-nacl)#10 permit eigrp any anyR2(config-ext-nacl)#20 evaluate ciscoR2(config-ext-nacl)#30 deny ip any anyR2(config)#int s0/1R2(config-if)#ip access-group outside outR2(config-if)#ip access-group inside in基于时间的ACLR2(config)#time-range ciscoR2(config-time-range)#periodic daily 12:00 to 13:00R2(config)#access-list 101 perimit ip any any time-range ciscoCBACR2(config)#access-list 101 permit eigrp any anyR2(config)#access-list 101 deny ip any anyR2(config)#int s1/2R2(config-if)#ip access-group 101 inR2(config)#ip inspect name cisco tcpR2(config)#int s1/3R2(config-if)#ip inspect cisco in查看：show access-lists cisco show ip inspect session

access-list 100 permit tcp host 192.168.10.10 host 192.168.20.10 established access-list 100 deny tcp host 192.168.10.10 host 192.168.20.10 这两个起到的作用一样，阻止ip地址为192.168.10.10的主机对IP地址为192.168.20.10的主机 的TCP链接 access-list 100 permit ip any any 允许任何主机对任何主机的访问 三行加在一起就是允许任何主机对任何主机的访问，除了192.168.10.10的主机对IP地址为192.168.20.10的访问 求采纳

哥们，到这问？其实我也不会，你最好找这方面的教授问问

你ACL关联对了吗？R1的ACL配置发来看看。