静态综合实验

静态综合实验

1.设置ip

AR1

system-view
[Huawei]sysname r1
[r1]int lo0
[r1-LoopBack0]ip add 192.168.1.33 28
[r1-LoopBack0]q
[r1]int lo1
[r1-LoopBack1]ip add 192.168.1.49 28
[r1]int g0/0/1
[r1-GigabitEthernet0/0/1]ip add 192.168.1.1 30
[r1-GigabitEthernet0/0/1]int g0/0/0
[r1-GigabitEthernet0/0/0]ip add 192.168.1.5 30

AR2

system-view
[Huawei]sysname r2
[r2]int lo0
[r2-LoopBack0]ip add 192.168.1.65 28
[r2-LoopBack0]int lo1
[r2-LoopBack1]ip add 192.168.1.81 28
[r2]int g0/0/0
[r2-GigabitEthernet0/0/0]ip add 192.168.1.2 30
[r2-GigabitEthernet0/0/0]int g0/0/1
[r2-GigabitEthernet0/0/1]ip add 192.168.1.9 30

AR3

system-view
[Huawei]sysname r3
[r3]int g0/0/2
[r3-GigabitEthernet0/0/2]ip add 192.168.1.97 27
[r3]int g0/0/1
[r3-GigabitEthernet0/0/1]ip add 192.168.1.6 30
[r3-GigabitEthernet0/0/1]int g0/0/0
[r3-GigabitEthernet0/0/0]ip add 192.168.1.13 30
[r3]dhcp enable
[r3]ip pool a
[r3-ip-pool-a]network 192.168.1.96 mask 27
[r3-ip-pool-a]gateway-list 192.168.1.97
[r3-ip-pool-a]dns-list 114.114.114.114 8.8.8.8
[r3-ip-pool-a]int g0/0/2
[r3-GigabitEthernet0/0/2]dhcp s
[r3-GigabitEthernet0/0/2]dhcp select g
[r3-GigabitEthernet0/0/2]dhcp select global

AR4

system-view
[Huawei]sysname r4
[r4]int lo0
[r4-LoopBack0]ip add 192.168.1.129 28
[r4-LoopBack0]int lo1
[r4-LoopBack1]ip add 192.168.1.145 28
[r4]int g0/0/0
[r4-GigabitEthernet0/0/0]ip add 192.168.1.10 30
[r4-GigabitEthernet0/0/0]int g0/0/1
[r4-GigabitEthernet0/0/1]ip add 192.168.1.14 30
[r4-GigabitEthernet0/0/1]int g0/0/2
[r4-GigabitEthernet0/0/2]ip add 192.168.1.17 30
[r4-GigabitEthernet0/0/2]int e4/0/0
[r4-Ethernet4/0/0]ip add 192.168.1.21 30

AR5

system-view
[Huawei]sysname r5
[r5]int lo0
[r5-LoopBack0]ip add 192.168.1.161 27
[r5]int g0/0/2
[r5-GigabitEthernet0/0/2]ip add 192.168.1.18 30
[r5-GigabitEthernet0/0/2]int e4/0/0
[r5-Ethernet4/0/0]int e4/0/0
[r5-Ethernet4/0/0]ip add 192.168.1.22 30
[r5-Ethernet4/0/0]int g0/0/1
[r5-GigabitEthernet0/0/1]ip add 56.1.1.1 24

AR6

system-view
[Huawei]sysname r6
[r6]int lo09
[r6-LoopBack9]ip add 6.6.6.6 24
[r6]int g0/0/0
[r6-GigabitEthernet0/0/0]ip add 56.1.1.2 24

2.配置路由

AR1

[r1]ip route-static 0.0.0.0 0 192.168.1.2
[r1]ip route-static 0.0.0.0 0 192.168.1.6
[r1]IP route-static 192.168.1.64 27 192.168.1.2
[r1]ip route-static 192.168.1.8 30 192.168.1.2
[r1]ip route-static 192.168.1.96 27 192.168.1.6
[r1]ip route-static 192.168.1.12 30 192.168.1.6

AR2

[r2]ip route-static 192.168.1.32 27 192.168.1.1
[r2]ip route-static 192.168.1.4 30 192.168.1.1
[r2]ip route-static 192.168.1.96 27 192.168.1.1
[r2]ip route-static 192.168.1.96 27 192.168.1.10

AR3

[r3]ip route-static 192.168.1.32 27 192.168.1.5
[r3]ip route-static 192.168.1.0 30 192.168.1.5
[r3]ip route-static 192.168.1.64 27 192.168.1.5
[r3]ip route-static 192.168.1.64 27 192.168.1.14

AR4

[r4]ip route-static 192.168.1.64 27 192.168.1.9
[r4]ip route-static 192.168.1.0 30 192.168.1.9
[r4]ip route-static 192.168.1.4 30 192.168.1.13
[r4]ip route-static 192.168.1.96 27 192.168.1.13
[r4]ip route-static 192.168.1.32 27 192.168.1.9
[r4]ip route-static 192.168.1.32 27 192.168.1.13

AR5

[r5]ip route-static 192.168.1.32 27 192.168.1.17
[r5]ip route-static 192.168.1.64 27 192.168.1.17
[r5]ip route-static 192.168.1.96 27 192.168.1.17
[r5]ip route-static 192.168.1.128 27 192.168.1.17
[r5]ip route-static 192.168.1.0 30 192.168.1.17
[r5]ip route-static 192.168.1.4 30 192.168.1.17
[r5]ip route-static 192.168.1.8 30 192.168.1.17
[r5]ip route-static 192.168.1.12 30 192.168.1.17
[r5]ip route-static 192.168.1.0 255.255.255.252 192.168.1.21 p 61
[r5]ip route-static 192.168.1.4 255.255.255.252 192.168.1.21 p 61
[r5]ip route-static 192.168.1.8 255.255.255.252 192.168.1.21 p 61
[r5]ip route-static 192.168.1.12 255.255.255.252 192.168.1.21 p 61
[r5]ip route-static 192.168.1.32 255.255.255.224 192.168.1.21 p 61
[r5]ip route-static 192.168.1.64 255.255.255.224 192.168.1.21 p 61
[r5]ip route-static 192.168.1.96 255.255.255.224 192.168.1.21 p 61
[r5]ip route-static 192.168.1.128 255.255.255.224 192.168.1.21 p 61
[r5]acl 2000
[r5-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255
[r5-acl-basic-2000]int g0/0/1
[r5-GigabitEthernet0/0/1]na
[r5-GigabitEthernet0/0/1]nat ou
[r5-GigabitEthernet0/0/1]nat outbound 2000

3.避免防环

[r1]ip route-static 192.168.1.32 27 NULL 0
[r2]ip route-static 192.168.1.64 27 NULL 0
[r4]ip route-static 192.168.1.128 27 NULL 0

4.满足条件7

[r1]aaa
[r1-aaa]lo
[r1-aaa]local-user panxi pr
[r1-aaa]local-user panxi privilege le
[r1-aaa]local-user panxi privilege level 15 pa
[r1-aaa]local-user panxi privilege level 15 password ci
[r1-aaa]local-user panxi privilege level 15 password cipher 123456
Info: Add a new user.
[r1-aaa]lo
[r1-aaa]local-user panxi ser
[r1-aaa]local-user panxi service-type tel
[r1-aaa]local-user panxi service-type telnet
[r1-aaa]q
[r1]us
[r1]user-int
[r1]user-interface vty 0 4
[r1-ui-vty0-4]au
[r1-ui-vty0-4]authentication-mode aaa

[r5]int g0/0/1
[r5-GigabitEthernet0/0/1]nat server protocol tcp global current-interface 23 inside 192.168.1.33 23
Warning:The port 23 is well-known port. If you continue it may cause functionfailure.
Are you sure to continue?[Y/N]:y