目标
拓扑图
思考
(1) IP网址规划,在局域网内使用192.168.1.0/24网段;
(2) R1—R5路由器需要配置缺省路由访问R6环回(ISP)
(3) R1—R5配置同接口防环;
(4) R3—R5配置回包路由,R1,R4配置回到R2的路由;
(5) R3与R5之间的链路需要做浮动静态,通过增加100M链路路由的优先级实现;
(6) R4设备配置192.168.1.160网段的DHCP服务;
(7) R5需要做NAT,实现内网访问ISP;
规划
(1)配置IP
R1:ip add 192.168.1.2 30
int g0/0/1
int g0/0/0
ip add 192.168.1.9 30
int l0
ip add 192.168.1.65 28
int l1
ip add 192.168.1.81 28
R2:int g0/0/0
ip add 192.168.1.1 30
int g0/0/1
ip add 192.168.1.5 30
int l0
ip add 192.168.1.33 28
int l1
ip add 192.168.1.49 28
R3:int g0/0/1
ip add 192.168.1.10 30
int g0/0/0
ip add 192.168.1.14 30
int g0/0/2
ip add 192.168.1.17 30
int e4/0/0
ip add 192.168.1.21 30
int l0
ip add 192.168.1.97 28
int l1
ip add 192.168.1.113 28
R4:int g0/0/0
ip add 192.168.1.6 30
int g0/0/1
ip add 192.168.1.13 30
int g0/0/2
ip add 192.168.1.161 28
R5:int g0/0/0
ip add 192.168.1.18 30
int g0/0/2
ip add 2.2.2.1 24
int g0/0/1
ip add 192.168.1.22 30
int l0
ip add 192.168.1.129 27
R6:int g0/0/0
ip address 2.2.2.2 24
int l0
ip add 3.3.3.3 24
(2)配置路由
R1:ip route-static 0.0.0.0 0 192.168.1.2
ip route-static 192.168.1.160 27 192.168.1.1
ip route-static 192.168.1.160 27 192.168.1.10
ip route-static 192.168.1.32 27 192.168.1.1
ip route-static 192.18.1.64 27 NULL 0
R2:ip route-static 0.0.0.0 0 192.168.1.2
ip route-static 0.0.0.0 0 192.168.1.6
ip route-static 192.168.1.32 27 NULL 0
R3:ip route-static 0.0.0.0 0 192.168.1.18
ip route-static 192.168.1.64 27 192.168.1.9
ip route-static 192.168.1.0 30 192.168.1.9
ip route-static 192.168.1.4 30 192.168.1.13
ip route-static 192.168.1.32 27 192.168.1.9
ip route-static 192.168.1.32 27 192.168.1.13
ip route-static 192.168.1.160 27 192.168.1.13
ip route-static 192.168.1.96 27 NULL 0
R4:ip route-static 0.0.0.0 0 192.168.1.14
ip route-static 192.168.1.32 27 192.168.1.5
ip route-static 192.168.1.64 27 192.168.1.5
ip route-static 192.168.1.64 27 192.168.1.14
ip route-static 192.168.1.160 27 NULL 0
R5:ip route-static 0.0.0.0 0 2.2.2.2
ip route-static 192.168.1.0 30 192.168.1.17
ip route-static 192.168.1.4 30 192.168.1.17
ip route-static 192.168.1.8 30 192.168.1.17
ip route-static 192.168.1.12 30 192.168.1.17
ip route-static 192.168.1.32 27 192.168.1.17
ip route-static 192.168.1.64 27 192.168.1.17
ip route-static 192.168.1.160 27 192.168.1.17
ip route-static 192.168.1.96 27 192.168.1.17
ip route-static 192.168.1.128 27 NULL 0
(3) R4配置DHCP服务:
dhcp enable
network 192.168.1.160 mask 27
gateway-list 192.168.1.161
lease day 1
int g0/0/2
dhcp select global
(4)R5配置NAT服务:
nat address-group 1 2.2.2.5 2.2.2.50
acl 2000
rule 5 permit source 192.168.0.0 0.0.255.255
int g0/0/2
nat outbound 2000 address-group 1 no-pat
(5) R2、R5配置Telnet:
[r5-GigabitEthernet0/0/2]nat static protocol tcp global current-interface 23 inside 192.168.1.32 27
[r2-ui-vty0]user-interface vty 0 4
[r2-ui-vty0-4]authentication-mode password
Please configure the login password (maximum length 16):12345678