<?xml version="1.0" encoding="UNICODE" ?>
<topo version="1.2.00.510">
    <devices>
        <dev id="D92897FB-50B5-4c44-BB39-F01E8D07E9C1" name="AR1" poe="0" model="AR1220" settings="" system_mac="00-E0-FC-5E-1C-13" com_port="2000" bootmode="0" cx="187.000000" cy="304.000000" edit_left="214" edit_top="358">
            <slot number="slot17" isMainBoard="1">
                <interface sztype="Ethernet" interfacename="GE" count="2" />
                <interface sztype="Ethernet" interfacename="Ethernet" count="8" />
            </slot>
        </dev>
        <dev id="207C374D-5B5D-4cd8-B194-76B1D8307D3E" name="Client1" poe="0" model="Client" settings="-domain 0 -eth 54-89-98-A6-4D-C0 -ipaddr 192.168.20.3 -ipmask 255.255.255.0 -gateway 192.168.20.254 -ipv6addr 2000::2 -ipv6gateway 2000::1 -prefixlen 64 -ipv4dns 202.96.128.68 -ipv6dns 3000::1 -dnslist NULL" system_mac="54-89-98-A6-4D-C0" com_port="0" bootmode="0" cx="543.000000" cy="548.000000" edit_left="570" edit_top="602">
            <slot number="slot17" isMainBoard="1">
                <interface sztype="Ethernet" interfacename="Ethernet" count="1" />
            </slot>
        </dev>
        <dev id="8487230B-4A63-4735-AA76-F042751D9658" name="LSW2" poe="0" model="S3700" settings="" system_mac="4C-1F-CC-7F-5F-87" com_port="2002" bootmode="0" cx="337.000000" cy="307.000000" edit_left="364" edit_top="361">
            <slot number="slot17" isMainBoard="1">
                <interface sztype="Ethernet" interfacename="Ethernet" count="22" />
                <interface sztype="Ethernet" interfacename="GE" count="2" />
            </slot>
        </dev>
        <dev id="B8867B8A-9B71-44a4-8AC8-B850F9F6C3CD" name="PC1" poe="0" model="PC" settings=" -simpc_ip 192.168.10.2  -simpc_mask 255.255.255.0  -simpc_gateway 192.168.10.254  -simpc_mac 54-89-98-98-3F-D5  -simpc_mc_dstip 0.0.0.0  -simpc_mc_dstmac 00-00-00-00-00-00  -simpc_dns1 202.96.128.68  -simpc_dns2 0.0.0.0  -simpc_ipv6 ::  -simpc_prefix 128  -simpc_gatewayv6 ::  -simpc_dhcp_state 0  -simpc_dhcpv6_state 0  -simpc_dns_auto_state 0  -simpc_igmp_version 1  -simpc_group_ip_start 0.0.0.0  -simpc_src_ip_start 0.0.0.0  -simpc_group_num 0  -simpc_group_step 0  -simpc_src_num 0  -simpc_src_step 0  -simpc_type MODE_IS_INCLUDE " system_mac="54-89-98-98-3F-D5" com_port="0" bootmode="0" cx="62.000000" cy="613.000000" edit_left="89" edit_top="667">
            <slot number="slot17" isMainBoard="1">
                <interface sztype="Ethernet" interfacename="Ethernet" count="1" />
            </slot>
        </dev>
        <dev id="DC2F9110-EB2E-4ce8-9EB6-C77874C2016D" name="LSW1" poe="0" model="S5700" settings="" system_mac="4C-1F-CC-42-5E-69" com_port="2001" bootmode="0" cx="187.000000" cy="488.000000" edit_left="214" edit_top="542">
            <slot number="slot17" isMainBoard="1">
                <interface sztype="Ethernet" interfacename="GE" count="24" />
            </slot>
        </dev>
        <dev id="0AA812EF-153A-4db0-8EC9-0A24362011A2" name="DNS Server" poe="0" model="Server" settings="-domain 0 -eth 54-89-98-F9-0F-7D -ipaddr 202.96.128.68 -ipmask 255.255.255.240 -gateway 202.96.128.65 -ipv6addr 2000::2 -ipv6gateway 2000::1 -prefixlen 64 -ipv4dns 0.0.0.0 -ipv6dns 3000::1 -dnslist _www.qq.com_202.96.128.71_www.baidu.com_202.96.128.70" system_mac="54-89-98-68-3F-B8" com_port="0" bootmode="0" cx="491.000000" cy="254.000000" edit_left="518" edit_top="308">
            <slot number="slot17" isMainBoard="1">
                <interface sztype="Ethernet" interfacename="Ethernet" count="1" />
            </slot>
        </dev>
        <dev id="C5B4A559-E88D-4002-8C0D-3CF963B53331" name="PC2" poe="0" model="PC" settings=" -simpc_ip 192.168.20.2  -simpc_mask 255.255.255.0  -simpc_gateway 192.168.20.254  -simpc_mac 54-89-98-99-13-EF  -simpc_mc_dstip 0.0.0.0  -simpc_mc_dstmac 00-00-00-00-00-00  -simpc_dns1 202.96.128.68  -simpc_dns2 0.0.0.0  -simpc_ipv6 ::  -simpc_prefix 128  -simpc_gatewayv6 ::  -simpc_dhcp_state 0  -simpc_dhcpv6_state 0  -simpc_dns_auto_state 0  -simpc_igmp_version 1  -simpc_group_ip_start 0.0.0.0  -simpc_src_ip_start 0.0.0.0  -simpc_group_num 0  -simpc_group_step 0  -simpc_src_num 0  -simpc_src_step 0  -simpc_type MODE_IS_INCLUDE " system_mac="54-89-98-99-13-EF" com_port="0" bootmode="0" cx="310.000000" cy="610.000000" edit_left="337" edit_top="664">
            <slot number="slot17" isMainBoard="1">
                <interface sztype="Ethernet" interfacename="Ethernet" count="1" />
            </slot>
        </dev>
        <dev id="164F44E8-31F4-400f-A131-0DA58D74C63A" name="Server2" poe="0" model="Server" settings="-domain 0 -eth 54-89-98-F5-80-F3 -ipaddr 202.96.128.70 -ipmask 255.255.255.240 -gateway 202.96.128.65 -ipv6addr 2000::2 -ipv6gateway 2000::1 -prefixlen 64 -ipv4dns 0.0.0.0 -ipv6dns 3000::1 -dnslist NULL" system_mac="54-89-98-99-35-72" com_port="0" bootmode="0" cx="490.000000" cy="371.000000" edit_left="517" edit_top="425">
            <slot number="slot17" isMainBoard="1">
                <interface sztype="Ethernet" interfacename="Ethernet" count="1" />
            </slot>
        </dev>
    </devices>
    <lines>
        <line srcDeviceID="D92897FB-50B5-4c44-BB39-F01E8D07E9C1" destDeviceID="8487230B-4A63-4735-AA76-F042751D9658">
            <interfacePair lineName="Copper" srcIndex="1" srcBoundRectIsMoved="0" srcBoundRect_X="257.175140" srcBoundRect_Y="331.863495" srcOffset_X="0.000000" srcOffset_Y="0.000000" tarIndex="22" tarBoundRectIsMoved="0" tarBoundRect_X="320.824860" tarBoundRect_Y="333.136505" tarOffset_X="0.000000" tarOffset_Y="0.000000" />
        </line>
        <line srcDeviceID="8487230B-4A63-4735-AA76-F042751D9658" destDeviceID="0AA812EF-153A-4db0-8EC9-0A24362011A2">
            <interfacePair lineName="Copper" srcIndex="0" srcBoundRectIsMoved="0" srcBoundRect_X="404.833221" srcBoundRect_Y="319.947021" srcOffset_X="0.000000" srcOffset_Y="0.000000" tarIndex="0" tarBoundRectIsMoved="0" tarBoundRect_X="477.166779" tarBoundRect_Y="295.052979" tarOffset_X="0.000000" tarOffset_Y="0.000000" />
        </line>
        <line srcDeviceID="8487230B-4A63-4735-AA76-F042751D9658" destDeviceID="164F44E8-31F4-400f-A131-0DA58D74C63A">
            <interfacePair lineName="Copper" srcIndex="1" srcBoundRectIsMoved="0" srcBoundRect_X="403.838776" srcBoundRect_Y="350.664581" srcOffset_X="0.000000" srcOffset_Y="0.000000" tarIndex="0" tarBoundRectIsMoved="0" tarBoundRect_X="477.161224" tarBoundRect_Y="381.335419" tarOffset_X="0.000000" tarOffset_Y="0.000000" />
        </line>
        <line srcDeviceID="B8867B8A-9B71-44a4-8AC8-B850F9F6C3CD" destDeviceID="DC2F9110-EB2E-4ce8-9EB6-C77874C2016D">
            <interfacePair lineName="Copper" srcIndex="0" srcBoundRectIsMoved="0" srcBoundRect_X="119.535538" srcBoundRect_Y="609.464478" srcOffset_X="0.000000" srcOffset_Y="0.000000" tarIndex="0" tarBoundRectIsMoved="1" tarBoundRect_X="183.464462" tarBoundRect_Y="545.535522" tarOffset_X="-54.000000" tarOffset_Y="-13.000000" />
        </line>
        <line srcDeviceID="DC2F9110-EB2E-4ce8-9EB6-C77874C2016D" destDeviceID="C5B4A559-E88D-4002-8C0D-3CF963B53331">
            <interfacePair lineName="Copper" srcIndex="9" srcBoundRectIsMoved="0" srcBoundRect_X="244.659912" srcBoundRect_Y="545.410645" srcOffset_X="0.000000" srcOffset_Y="0.000000" tarIndex="0" tarBoundRectIsMoved="0" tarBoundRect_X="306.340088" tarBoundRect_Y="606.589355" tarOffset_X="0.000000" tarOffset_Y="0.000000" />
        </line>
        <line srcDeviceID="DC2F9110-EB2E-4ce8-9EB6-C77874C2016D" destDeviceID="D92897FB-50B5-4c44-BB39-F01E8D07E9C1">
            <interfacePair lineName="Copper" srcIndex="23" srcBoundRectIsMoved="0" srcBoundRect_X="214.000000" srcBoundRect_Y="471.816223" srcOffset_X="0.000000" srcOffset_Y="0.000000" tarIndex="0" tarBoundRectIsMoved="0" tarBoundRect_X="214.000000" tarBoundRect_Y="374.183777" tarOffset_X="0.000000" tarOffset_Y="0.000000" />
        </line>
        <line srcDeviceID="DC2F9110-EB2E-4ce8-9EB6-C77874C2016D" destDeviceID="207C374D-5B5D-4cd8-B194-76B1D8307D3E">
            <interfacePair lineName="Copper" srcIndex="10" srcBoundRectIsMoved="0" srcBoundRect_X="256.583191" srcBoundRect_Y="522.176941" srcOffset_X="0.000000" srcOffset_Y="0.000000" tarIndex="0" tarBoundRectIsMoved="0" tarBoundRect_X="527.416809" tarBoundRect_Y="567.823059" tarOffset_X="0.000000" tarOffset_Y="0.000000" />
        </line>
    </lines>
    <shapes />
    <txttips>
        <txttip left="53" top="690" right="170" bottom="722" content="192.168.10.2/24&#x0D;&#x0A;vlan 10" fontname="Consolas" fontstyle="0" editsize="100" txtcolor="-16777216" txtbkcolor="-7278960" charset="1" />
        <txttip left="307" top="694" right="424" bottom="726" content="192.168.20.2/24&#x0D;&#x0A;vlan 20" fontname="Consolas" fontstyle="0" editsize="100" txtcolor="-16777216" txtbkcolor="-7278960" charset="1" />
        <txttip left="560" top="297" right="685" bottom="314" content="202.96.128.68/28" fontname="Consolas" fontstyle="0" editsize="100" txtcolor="-16777216" txtbkcolor="-7278960" charset="1" />
        <txttip left="559" top="411" right="684" bottom="428" content="202.96.128.70/28" fontname="Consolas" fontstyle="0" editsize="100" txtcolor="-16777216" txtbkcolor="-7278960" charset="1" />
        <txttip left="569" top="391" right="671" bottom="408" content="www.baidu.com" fontname="Consolas" fontstyle="0" editsize="100" txtcolor="-16777216" txtbkcolor="-7278960" charset="1" />
        <txttip left="223" top="275" right="348" bottom="307" content="g0/0/1&#x0D;&#x0A;202.96.128.65/28" fontname="Consolas" fontstyle="0" editsize="100" txtcolor="-16777216" txtbkcolor="-7278960" charset="1" />
        <txttip left="58" top="363" right="190" bottom="395" content="g0/0/0&#x0D;&#x0A;192.168.30.254/30" fontname="Consolas" fontstyle="0" editsize="100" txtcolor="-16777216" txtbkcolor="-7278960" charset="1" />
        <txttip left="99" top="461" right="156" bottom="478" content="g0/0/24" fontname="Consolas" fontstyle="0" editsize="100" txtcolor="-16777216" txtbkcolor="-7278960" charset="1" />
        <txttip left="289" top="36" right="444" bottom="53" content="标准ACL 扩展 ACL配置" fontname="Consolas" fontstyle="0" editsize="100" txtcolor="-16777216" txtbkcolor="-7278960" charset="1" />
        <txttip left="102" top="93" right="604" bottom="172" content="交换机SW1 G0/0/1-G0/0/9 属于vlan10 ，G0/0/0/10-G0/0/20 属于vlan20&#x0D;&#x0A;要求：&#x0D;&#x0A;1、禁止vlan10 访问DNS服务器&#x0D;&#x0A;2、禁止vlan10 与vlan20互访&#x0D;&#x0A;3、禁止vlan20 使用202.96.128.68的DNS服务" fontname="Consolas" fontstyle="0" editsize="100" txtcolor="-16777216" txtbkcolor="-7278960" charset="1" />
        <txttip left="831" top="133" right="1598" bottom="665" content="步骤：&#x0D;&#x0A;0、启动DNS Server &#x0D;&#x0A;&#x0D;&#x0A;1、禁止vlan10 访问DNS服务器&#x0D;&#x0A;   在SW2 实现&#x0D;&#x0A;   acl 2001&#x0D;&#x0A;       rule deny source 192.168.10.0 0.0.0.255&#x0D;&#x0A;       rule permit source  any&#x0D;&#x0A;&#x0D;&#x0A;   interface e0/0/1&#x0D;&#x0A;       traffic-filter outbound acl 2001&#x0D;&#x0A;&#x0D;&#x0A;     注意：标准ACL尽量靠近  数据目标ip 的接口 &#x0D;&#x0A;&#x0D;&#x0A;2、禁止vlan10 与vlan20互访&#x0D;&#x0A;   在SW1实现&#x0D;&#x0A;&#x0D;&#x0A;   acl 3001 &#x0D;&#x0A;       rule deny ip source 192.168.10.0 0.0.0.255 destination 192.168.20.0 0.0.0.255 &#x0D;&#x0A;&#x0D;&#x0A;   traffice-filter vlan 10 inbound acl 3001  (只能应用在vlan10 的in方向，不能应用在vlan20 的out方向)&#x0D;&#x0A;   注意：只能在全局视图中将 ACl应用到vlan&#x0D;&#x0A;&#x0D;&#x0A;3、禁止vlan20 使用202.96.128.68的DNS服务&#x0D;&#x0A;   &#x0D;&#x0A;   在SW1实现&#x0D;&#x0A;   acl  3002&#x0D;&#x0A;        rule deny udp source 192.168.20.0 0.0.0.255 destination-port eq dns&#x0D;&#x0A;        rule permit ip &#x0D;&#x0A;&#x0D;&#x0A;   interface  g0/0/24&#x0D;&#x0A;        traffice-filter outbound acl 3002&#x0D;&#x0A;&#x0D;&#x0A;   注意：扩展ACL尽量靠近 数据源ip 的接口" fontname="Consolas" fontstyle="0" editsize="100" txtcolor="-16777216" txtbkcolor="-7278960" charset="1" />
    </txttips>
</topo>
