HCIP实验-静态路由综合

实验拓扑图：

实验要求：

1.R6为ISP，接口IP地址均为公有地址；该设备智能配置IP地址，之后不能在对其进行任何配置；

2.R1-R5为局域网，，私有IP地址192.168.1.0/24，请合理分配；

3.所有路由器上的环回，均代表连接用户的接口，R1、R2、R4有两个环回，R3无环回，R5、R6有一个环回；

4.R3下的两台PC通过DHCP自动获取IP地址；

5.选路最佳，路由表尽量小，避免环路；

6.R1-R5均可访问R6的环回；

7.R6telnetR5的公有地址，实际上登录到R1上；

8.R4与R5正常通过1000兆链路，故障时通过100兆链路；

实验过程：

1.IP地址规划

分析可知该实验网络分为公网和私网；

公网需要两个网段，由于未作要求，随机给两个网段（56.1.1.0/24  5.5.5.0/24）

私网骨干网需要6个网段，用户网先分为5个，在基于本地环回接口数量进一步划分

划分结果如下图：

2.基础配置（实现要求1-3）

R1:

[Huawei]interface g0/0/0

[Huawei-GigabitEthernet0/0/0]ip address 192.168.1.129 30

[Huawei-GigabitEthernet0/0/0]quit

[Huawei]interface g0/0/1

[Huawei-GigabitEthernet0/0/1]ip address 192.168.1.161 30

[Huawei-GigabitEthernet0/0/1]quit

[Huawei]interface loopback 0

[Huawei-LoopBack0]ip address 192.168.1.1 29

[Huawei-LoopBack0]quit

[Huawei]interface loopback 1

[Huawei-LoopBack1]ip add 192.168.1.9 29

R2：

Huawei]interface g0/0/0

[Huawei-GigabitEthernet0/0/0]ip address 192.168.1.130 30

[Huawei-GigabitEthernet0/0/0]quit

[Huawei]interface g0/0/1

[Huawei-GigabitEthernet0/0/1]ip address 192.168.1.145 30

[Huawei-GigabitEthernet0/0/1]quit

[Huawei]interface loopback 0

[Huawei-LoopBack0]ip address 192.168.1.17 29

[Huawei-LoopBack0]quit

[Huawei]interface loopback 1

[Huawei-LoopBack1]ip address 192.168.1.25 29

R3:

[Huawei]interface g0/0/1

[Huawei-GigabitEthernet0/0/1]ip address 192.168.1.162 30

[Huawei-GigabitEthernet0/0/1]quit

[Huawei]interface g0/0/0

[Huawei-GigabitEthernet0/0/0]ip address 192.168.1.177 30

[Huawei-GigabitEthernet0/0/0]quit

[Huawei]interface g0/0/2

[Huawei-GigabitEthernet0/0/2]ip address 192.168.1.33 28

R4:

[Huawei]interface g0/0/0

[Huawei-GigabitEthernet0/0/0]ip address 192.168.1.146 30

[Huawei-GigabitEthernet0/0/0]quit

[Huawei]interface g0/0/1

[Huawei-GigabitEthernet0/0/1]ip address 192.168.1.178 30

[Huawei-GigabitEthernet0/0/1]quit

[Huawei]interface g0/0/2

[Huawei-GigabitEthernet0/0/2]ip address 192.168.1.193 30

[Huawei-GigabitEthernet0/0/2]quit

[Huawei]interface e4/0/0

[Huawei-Ethernet4/0/0]ip address 192.168.1.209 30

[Huawei-Ethernet4/0/0]quit

[Huawei]interface loopback 0

[Huawei-LoopBack0]ip address 192.168.1.49 29

[Huawei-LoopBack0]quit

[Huawei]interface loopback 1

[Huawei-LoopBack1]ip address 192.168.1.57 29

[Huawei-LoopBack1]quit

R5:

[Huawei]interface g0/0/0

[Huawei-GigabitEthernet0/0/0]ip address 192.168.1.194 30

[Huawei-GigabitEthernet0/0/0]quit

[Huawei]interface g0/0/1

[Huawei-GigabitEthernet0/0/1]ip address 56.1.1.1 24

[Huawei-GigabitEthernet0/0/1]quit

[Huawei]interface g0/0/2

[Huawei-GigabitEthernet0/0/2]ip address 192.168.1.210 30

[Huawei-GigabitEthernet0/0/2]quit

[Huawei]interface loopback 0

[Huawei-LoopBack0]ip address 192.168.1.65 28

R6:

[Huawei]interface g0/0/0

[Huawei-GigabitEthernet0/0/0]ip address 56.1.1.2 24

[Huawei-GigabitEthernet0/0/0]

[Huawei-GigabitEthernet0/0/0]quit

[Huawei]interface loopback 0

[Huawei-LoopBack0]ip address 3.3.3.1 24

3.在R3上配置DHCP（实现要求4）

R3:

[Huawei]dhcp enable

[Huawei]ip pool a

[Huawei-ip-pool-a]network 192.168.1.32 mask 28

[Huawei-ip-pool-a]gateway-list 192.168.1.33

[Huawei-ip-pool-a]dns-list 8.8.8.8

[Huawei-ip-pool-a]quit

[Huawei]interface g0/0/2

[Huawei-GigabitEthernet0/0/2]dhcp select global

如图，R3下的pc可以通过DHCP获取地址

4.在内网路由器上写静态路由，实现内网通（实现要求5）

R1:

[Huawei]ip route-static 192.168.1.16 28 192.168.1.130

[Huawei]ip route-static 192.168.1.144 30 192.168.1.130

[Huawei]ip route-static 192.168.1.32 28 192.168.1.162

[Huawei]ip route-static 192.168.1.176 30 192.168.1.162

[Huawei]ip route-static 0.0.0.0 0.0.0.0 192.168.1.130

[Huawei]ip route-static 0.0.0.0 0.0.0.0 192.168.1.162

R2：

Huawei]ip route-static 192.168.1.0 28 192.168.1.129

[Huawei]ip route-static 192.168.1.160 30 192.168.1.129

[Huawei]ip route-static 192.168.1.32 28 192.168.1.129

[Huawei]ip route-static 192.168.1.32 28 192.168.1.146

[Huawei]ip route-static 0.0.0.0 0.0.0.0 192.168.1.146

R3:

[Huawei]ip route-static 192.168.1.0 28 192.168.1.161

[Huawei]ip route-static 192.168.1.128 30 192.168.1.161

[Huawei]ip route-static 192.168.1.16 28 192.168.1.161

[Huawei]ip route-static 192.168.1.16 28 192.168.1.178

[Huawei]ip route-static 0.0.0.0 0.0.0.0 192.168.1.178

R4:

[Huawei]ip route-static 192.168.1.16 28 192.168.1.145

[Huawei]ip route-static 192.168.1.128 30 192.168.1.145

[Huawei]ip route-static 192.168.1.0 28 192.168.1.145

[Huawei]ip route-static 192.168.1.0 28 192.168.1.177

[Huawei]ip route-static 192.168.1.32 28 192.168.1.177

[Huawei]ip route-static 192.168.1.160 30 192.168.1.177

[Huawei]ip route-static 0.0.0.0 0.0.0.0 192.168.1.194

R5:

[Huawei]ip route-static 192.168.1.0 24 192.168.1.193

[Huawei]ip route-static 0.0.0.0 0.0.0.0 56.1.1.2

这样写到内网的路由和缺省相遇会极容易成环，所以须在R4上做空接口：

[Huawei]ip route-static 192.168.1.0 24 NULL 0

此时内网全通，如下图：

5.边界路由器上做nat，实现内网访外网（实现要求6）

R5:

[Huawei]acl 2000

[Huawei-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255

[Huawei-acl-basic-2000]quit

[Huawei]interface g0/0/1

[Huawei-GigabitEthernet0/0/1]nat outbound 2000

此时1，内网可以正常访问外网，如图：

6.R1上开启telnet服务，边界路由器上做端口映射（实现要求7）

R1:

[Huawei]aaa

[Huawei-aaa]local-user litong privilege level 15 password cipher 123456

[Huawei-aaa]local-user litong service-type telnet

[Huawei-aaa]quit

[Huawei]user-interface vty 0 4

[Huawei-ui-vty0-4]authentication-mode aaa

R5:

Huawei]interface g0/0/1

[Huawei-GigabitEthernet0/0/1]nat server protocol tcp global current-interface 23 inside 192.168.1.129 23

Are you sure to continue?[Y/N]:y

此时R6telnetR5的公有地址，实际上登录到R1上，如图：

7.在R4和R5上做浮动静态（实现要求8）

R4:

[Huawei]ip route-static 0.0.0.0 0.0.0.0 192.168.1.210  preference 61

R5:

[Huawei]ip route-static 192.168.1.0 24 192.168.1.209 preference 61

当千兆链路故障时，如图：