静态综合实验

最新推荐文章于 2024-01-10 13:12:01 发布

C先生_

最新推荐文章于 2024-01-10 13:12:01 发布

阅读量59

点赞数

分类专栏： HCIA 文章标签：网络服务器

本文链接：https://blog.csdn.net/CCFYY_/article/details/128528800

版权

HCIA 专栏收录该内容

4 篇文章 0 订阅

订阅专栏

该配置过程涉及创建网络拓扑，通过划分192.168.1.0网段来分配IP地址，设置DHCP服务，以及在路由器r1至r5上配置静态路由和缺省路由，实现全网可达。此外，还包含了NAT设置和用户访问控制策略。

摘要由CSDN通过智能技术生成

在这里插入图片描述

先搭建网络拓扑，合理分配ip：只需六个网段即可，所以将192.168.1.0网段划分为8个，一个骨干，五个配置环回，剩下两个用作备用网段

在这里插入图片描述
r1：
[r1]int g0/0/0
[r1-GigabitEthernet0/0/0]ip add 192.168.1.1 30
[r1-GigabitEthernet0/0/0]int g0/0/1
[r1-GigabitEthernet0/0/1]ip add 192.168.1.13 30
[r1-GigabitEthernet0/0/1]int loopback0
[r1-LoopBack0]ip add 192.168.1.33 28
[r1-LoopBack0]int loopback1
[r1-LoopBack1]ip add 192.168.1.49 28

r2：
[r2]int g0/0/0
[r2-GigabitEthernet0/0/0]ip add 192.168.1.2 30
[r2-GigabitEthernet0/0/0]int g0/0/1
[r2-GigabitEthernet0/0/1]ip add 192.168.1.5 30
[r2-GigabitEthernet0/0/1]int loopback0
[r2-LoopBack0]ip add 192.168.1.65 28
[r2-LoopBack0]int loopback1
[r2-LoopBack1]ip add 192.168.1.81 28

r3：
[r3]int g0/0/1
[r3-GigabitEthernet0/0/1]ip add 192.168.1.14 30
[r3-GigabitEthernet0/0/1]int g0/0/0
[r3-GigabitEthernet0/0/0]ip add 192.168.1.9 30
[r3-GigabitEthernet0/0/0]int g0/0/2
[r3-GigabitEthernet0/0/2]ip add 192.168.1.161 27

r4：
[r4]int g0/0/0
[r4-GigabitEthernet0/0/0]ip add 192.168.1.6 30
[r4-GigabitEthernet0/0/0]int g0/0/1
[r4-GigabitEthernet0/0/1]ip add 192.168.1.10 30
[r4-GigabitEthernet0/0/1]int g0/0/2
[r4-GigabitEthernet2/0/0]ip add 192.168.1.17 30
[r4-GigabitEthernet2/0/0]int g4/0/0
[r4-GigabitEthernet0/0/2]ip add 192.168.1.21 30
[r4-GigabitEthernet0/0/2]int loopback0
[r4-LoopBack0]ip add 192.168.1.97 28
[r4-LoopBack0]int loopback1
[r4-LoopBack1]ip add 192.168.1.113 28

r5：
[r5]int g0/0/0
[r5-GigabitEthernet0/0/1]ip add 192.168.1.18 30
[r5-GigabitEthernet0/0/1]int g0/0/1
[r5-GigabitEthernet0/0/2]ip add 12.0.0.1 24
[r5-GigabitEthernet0/0/2]int g0/0/2
[r5-GigabitEthernet0/0/0]ip add 192.168.1.22 30
[r5-GigabitEthernet0/0/0]int loopback0
[r5-LoopBack0]ip add 192.168.1.129 28

r6：
[r6]int g0/0/0
[r6-GigabitEthernet0/0/0]ip add 12.0.0.2 24
[r6-GigabitEthernet0/0/0]int loopback0
[r6-LoopBack0]ip add 1.1.1.1 24

然后给r3配置DHCP服务，让其上的两个电脑自动获取ip地址

r3：
[r3]dhcp enable
[r3]ip pool abc
[r3-ip-pool-abc]network 192.168.1.160 mask 27
[r3-ip-pool-abc]gateway-list 192.168.1.161
[r3-ip-pool-abc]int g0/0/2
[r3-GigabitEthernet0/0/2]dhcp select global

再给r1-r5配置静态路由，缺省路由，空接口路由。使得全网可达

r1：
ip route-static 0.0.0.0 0.0.0.0 192.168.1.2
ip route-static 0.0.0.0 0.0.0.0 192.168.1.14
ip route-static 192.168.1.4 255.255.255.252 192.168.1.2
ip route-static 192.168.1.8 255.255.255.252 192.168.1.14
ip route-static 192.168.1.64 255.255.255.224 192.168.1.2
ip route-static 192.168.1.160 255.255.255.224 192.168.1.14
ip route-static 192.168.1.32 255.255.255.224 NULL0

r2：
ip route-static 0.0.0.0 0.0.0.0 192.168.1.6
ip route-static 192.168.1.12 255.255.255.252 192.168.1.1
ip route-static 192.168.1.32 255.255.255.224 192.168.1.1
ip route-static 192.168.1.160 255.255.255.224 192.168.1.6
ip route-static 192.168.1.160 255.255.255.224 192.168.1.1
ip route-static 192.168.1.64 255.255.255.224 NULL0

r3：
ip route-static 0.0.0.0 0.0.0.0 192.168.1.10
ip route-static 192.168.1.0 255.255.255.252 192.168.1.13
ip route-static 192.168.1.32 255.255.255.224 192.168.1.13
ip route-static 192.168.1.64 255.255.255.224 192.168.1.13
ip route-static 192.168.1.64 255.255.255.224 192.168.1.10

r4：
ip route-static 0.0.0.0 0.0.0.0 GigabitEthernet0/0/2 192.168.1.18
ip route-static 0.0.0.0 0.0.0.0 192.168.1.22 preference 70
ip route-static 192.168.1.0 255.255.255.252 192.168.1.5
ip route-static 192.168.1.12 255.255.255.252 192.168.1.9
ip route-static 192.168.1.32 255.255.255.224 192.168.1.9
ip route-static 192.168.1.32 255.255.255.224 192.168.1.5
ip route-static 192.168.1.64 255.255.255.224 192.168.1.5
ip route-static 192.168.1.160 255.255.255.224 192.168.1.9
ip route-static 192.168.1.96 255.255.255.224 NULL0
ip route-static 192.168.1.0 255.255.255.0 NULL0
ip route-static 192.168.1.128 255.255.255.224 192.168.1.18
ip route-static 192.168.1.128 255.255.255.224 192.168.1.22 preference 70
ip route-static 192.168.1.160 255.255.255.224 192.168.1.9

r5：
ip route-static 0.0.0.0 0.0.0.0 12.0.0.2
ip route-static 192.168.1.0 255.255.255.0 192.168.1.17
ip route-static 192.168.1.0 255.255.255.0 192.168.1.21 preference 70

最后配置nat和端口映射

[r5]acl 2000
[r5-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255
[r5-acl-basic-2000]int g0/0/1
[r5-GigabitEthernet0/0/1]nat outbound 2000
[r1]aaa
[r1-aaa]local-user admin privilege level 15 password cipher 123456
[r1-aaa]local-user admin service-type telnet
[r1-aaa]quit
[r1]user-group
[r1]user-interface vty 0 4
[r1-ui-vty0-4]authentication-mode aaa
[r5]int g0/0/1
[r5-GigabitEthernet0/0/1]nat server protocol tcp global current-interface 23 inside 192.168