上面为整个实验的完整拓扑图,条件附上。
下面开始做这个实验:
基于192.168.1.0/24来分配接口ip和环回网段,以下是具体的分配:
拓扑设计-----ip地址规划(局域网不用考虑ip浪费,考虑便于汇总以及便于管理;广域网必须考虑ip浪费):
192.168.1.0 /24
192.168.1.0/27(骨干)
192.168.1.32/27(r1环回)
192.168.1.64/27(r2环回)
192.168.1.96/27(r3网段)
192.168.1.128/27(r4环回)
192.168.1.160/27(r5网段)
192.168.1.192/27(多余出来的网段便于以后增添)
192.168.1.224/27(多余出来的网段便于以后增添)
1条骨干(r1-r5):
192.168.1.0/27子网划分为:
192.168.1.0/30
192.168.1.4/30
192.168.1.8/30
192.168.1.12/30
192.168.1.16/30
192.168.1.20/30
192.168.1.24/30(多余出来的网段便于以后增添)
192.168.1.28/30(多余出来的网段便于以后增添)
5个网段(r1-r5):
192.168.1.32/27(r1环回)
192.168.1.32/28
192.168.1.48/28
192.168.1.64/27(r2环回)
192.168.1.64/28
192.168.1.80/28
192.168.1.96/27(r3网段)
192.168.1.128/27(r4环回)
192.168.1.128/28
192.168.1.144/28
192.168.1.160/27(r5网段)
r1和r2和R4都是两个环回,所以为了便于汇总,将一个网段分为拆分为两个子网段。
2.接下来就是将ip属性配置(利用缺省加静态路由实现全网互通)
有个值的注意的地方,r1写缺省的时候,会有负载均衡,如果此时访问r2,那么r1会往上和往下发送路由,那么会导致选录不佳,所以可以适当用一点静态路由,指向r2的环回。
3.写r3的dhcp(记得要先给r3的0/0/2接口配ip)
[Huawei]dhcp enable
Info: The operation may take a few seconds. Please wait for a moment.done.
[Huawei]ip pool a
Info: It's successful to create an IP address pool.
[Huawei-ip-pool-a]network 192.168.1.96 mask 27
[Huawei-ip-pool-a]gateway-list 192.168.1.97
[Huawei-ip-pool-a]dns-list 114.114.114.114
[Huawei-ip-pool-a]in g0/0/02
[Huawei-GigabitEthernet0/0/2]dhcp select global
4.r6代表LSP,所以要在r5配置nat才能访问外网。
[Huawei]acl 2000
[Huawei-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255
[Huawei-acl-basic-2000]in g0/0/01
[Huawei-GigabitEthernet0/0/1]nat outbound 2000
5.在r5上弄端口映射
[Huawei]aaa
[Huawei-aaa]local-user li privilege level 15 password cipher 123456
Info: Add a new user.
[Huawei-aaa]local-user li service-type telnet
[Huawei-aaa]q
[Huawei]user-interface vty 0 4
[Huawei-ui-vty0-4]authentication-mode aaa
[Huawei-GigabitEthernet0/0/1]nat server protocol tcp global current-interface 23
inside 192.168.1.33 23
Warning:The port 23 is well-known port. If you continue it may cause function fa
ilure.
Are you sure to continue?[Y/N]:y
8行以上是r1,以下是r5