HCIA实验

1.拓扑及地址划分

2.设备配置

R1:

sysname r1
int g0/0/0.1	
dot1q termination vid 2
ip address 192.168.0.65 28 
q
interface g0/0/0.2
dot1q termination vid 3
ip address 192.168.0.81 28
q
ip pool 1
network 192.168.0.64 mask 255.255.255.240
gateway-list 192.168.0.65	
dns-list 8.8.8.8
q
ip pool 2
network 192.168.0.80 mask 255.255.255.240
gateway-list 192.168.0.81
dns-list 8.8.8.8
dhcp enable 
interface g0/0/0.1	
dhcp select global 
arp broadcast  enable 
q
int g0/0/0.2	
dhcp select global 
arp broadcast enable 
interface GigabitEthernet0/0/2
ip add 192.168.0.1 30
int g0/0/1
ip add 192.168.0.13 30

r2

sysname r2
[r2]int g0/0/0
[r2-GigabitEthernet0/0/0]ip add 192.168.0.2 30
[r2-GigabitEthernet0/0/0]q
[r2]int g0/0/1
[r2-GigabitEthernet0/0/1]ip add 192.168.0.5 30
[r2]interface LoopBack 0	
[r2-LoopBack0]ip address 10.1.1.1 24
[r2-LoopBack0]q
[r2]interface LoopBack 1
[r2-LoopBack1]ip address 10.1.2.1 24
[r2-LoopBack1]q
[r2]int lo 2
[r2-LoopBack2]ip add 10.1.3.1 24
[r2-LoopBack2]q

r3

sysname r3
[r3]int g0/0/1
[r3-GigabitEthernet0/0/1]ip add 192.168.0.6 30
[r3-GigabitEthernet0/0/1]q
[r3]int g0/0/0
[r3-GigabitEthernet0/0/0]ip add 192.168.0.9 30

r4

[Huawei]sysname r4
[r4]int g0/0/1
[r4-GigabitEthernet0/0/1]ip add 192.168.0.10 30
[r4-GigabitEthernet0/0/1]q
[r4]int g0/0/0
[r4-GigabitEthernet0/0/0]ip add 192.168.0.14 30
[r4-GigabitEthernet0/0/0]q
[r4]int g0/0/2
[r4-GigabitEthernet0/0/2]ip add 192.168.0.17 30
[r4-GigabitEthernet0/0/2]q
[r4]int g4/0/0
[r4-GigabitEthernet4/0/0]ip add 192.168.0.21 30

r5

[Huawei]sysname r5
[r5]int g0/0/0
[r5-GigabitEthernet0/0/0]ip add 192.168.0.18 30 
[r5-GigabitEthernet0/0/0]q
[r5]int g0/0/1
[r5-GigabitEthernet0/0/1]ip add 192.168.0.22 30
[r5-GigabitEthernet0/0/1]q
[r5]int g0/0/2
[r5-GigabitEthernet0/0/2]ip add 100.1.1.1 24

r6

[Huawei]sysname isp
[isp]int g0/0/0
[isp-GigabitEthernet0/0/0]ip add 100.1.1.2 24

s1

[Huawei]sysname s1
[s1]vlan 2
[s1-vlan2]q
[s1]vlan 3
[s1-vlan3]q
[s1]int g0/0/1
[s1-GigabitEthernet0/0/1]port link-type access 
[s1-GigabitEthernet0/0/1]port default vlan 2
[s1-GigabitEthernet0/0/1]q
[s1]int g0/0/2
[s1-GigabitEthernet0/0/2]port link-type access 
[s1-GigabitEthernet0/0/2]port default vlan 3
[s1-GigabitEthernet0/0/2]q
[s1]interface g0/0/3	
[s1-GigabitEthernet0/0/3]port link-type trunk 
[s1-GigabitEthernet0/0/3]port trunk allow-pass vlan all 
[s1-GigabitEthernet0/0/3]q
[s1]interface g0/0/4
[s1-GigabitEthernet0/0/4]port link-type trunk 
[s1-GigabitEthernet0/0/4]port trunk allow-pass vlan all 

s2

[Huawei]sysname s2
[s2]vlan 2
[s2-vlan2]q
[s2]vlan 3
[s2-vlan3]q
[s2]int g0/0/3
[s2-GigabitEthernet0/0/3]port link-type trunk 	
[s2-GigabitEthernet0/0/3]port trunk allow-pass vlan all 
[s2-GigabitEthernet0/0/3]q
[s2]interface g0/0/1
[s2-GigabitEthernet0/0/1]port link-type access 
[s2-GigabitEthernet0/0/1]port default vlan 2
[s2-GigabitEthernet0/0/1]q
[s2]int g0/0/2
[s2-GigabitEthernet0/0/2]port link-type access 
[s2-GigabitEthernet0/0/2]port default vlan 3

3.路由配置

r1

[Huawei]ip route-static 192.168.0.8 30 192.168.0.14
[Huawei]ip route-static 192.168.0.4 30 192.168.0.2
[Huawei]ip route-static 192.168.0.16 30 192.168.0.14
[Huawei]ip route-static 192.168.0.20 30 192.168.0.14
[Huawei]ip route-static 0.0.0.0 0 192.168.0.14
[Huawei]ip route-static 10.1.0.0 16 192.168.0.2

r2

[r2]ip route-static 192.168.0.12 30 192.168.0.1
[r2]ip route-static 192.168.0.64 28 192.168.0.1
[r2]ip route-static 192.168.0.80 28 192.168.0.1
[r2]ip route-static 192.168.0.16 30 192.168.0.1
[r2]ip route-static 192.168.0.20 30 192.168.0.1
[r2]ip route-static 192.168.0.8 30 192.168.0.6
[r2]ip route-static 0.0.0.0 0 192.168.0.1

r3

[r3]ip route-static 192.168.0.0 30 192.168.0.5
[r3]ip route-static 192.168.0.12 30 192.168.0.10
[r3]ip route-static 192.168.0.64 28 192.168.0.5
[r3]ip route-static 192.168.0.80 28 192.168.0.5
[r3]ip route-static 192.168.0.16 30 192.168.0.10
[r3]ip route-static 192.168.0.20 30 192.168.0.10
[r3]ip route-static 0.0.0.0 0 192.168.0.10
[r3]ip route-static 10.1.0.0 16 192.168.0.5

r4

[r4]ip route-static 0.0.0.0 0 192.168.0.22
[r4]ip route-static 192.168.0.4 30 192.168.0.9
[r4]ip route-static 192.168.0.0 30 192.168.0.13
[r4]ip route-static 192.168.0.64 28 192.168.0.13
[r4]ip route-static 192.168.0.80 28 192.168.0.13
[r4]ip route-static 10.1.0.0 16 192.168.0.13

r5

[r5]ip route-static 0.0.0.0 0 100.1.1.2
[r5]ip route-static 192.168.0.8 30 192.168.0.21
[r5]ip route-static 192.168.0.4 30 192.168.0.21
[r5]ip route-static 192.168.0.0 30 192.168.0.21
[r5]ip route-static 192.168.0.12 30 192.168.0.21
[r5]ip route-static 192.168.0.64 28 192.168.0.21
[r5]ip route-static 192.168.0.80 28 192.168.0.21
[r5]ip route-static 10.1.0.0 16 192.168.0.21

4.NAT配置

[r5]acl 2000	
[r5-acl-basic-2000]rule 5 permit source any 
[r5-acl-basic-2000]q
[r5]interface g0/0/2
[r5-GigabitEthernet0/0/2]nat outbound 2000

5.测试

先给isp上起个环回地址方便测试外网

[isp]interface LoopBack 0
[isp-LoopBack0]ip add 172.168.1.1 24
[isp]ip route-static 0.0.0.0 0 100.1.1.1 

pc1测试

PC>ipconfig

Link local IPv6 address...........: fe80::5689:98ff:fe9b:7a17
IPv6 address......................: :: / 128
IPv6 gateway......................: ::
IPv4 address......................: 192.168.0.78
Subnet mask.......................: 255.255.255.240
Gateway...........................: 192.168.0.65
Physical address..................: 54-89-98-9B-7A-17
DNS server........................: 8.8.8.8


PC>ping 10.1.1.1

Ping 10.1.1.1: 32 data bytes, Press Ctrl_C to break
From 10.1.1.1: bytes=32 seq=1 ttl=254 time=31 ms
From 10.1.1.1: bytes=32 seq=2 ttl=254 time=31 ms
From 10.1.1.1: bytes=32 seq=3 ttl=254 time=47 ms
From 10.1.1.1: bytes=32 seq=4 ttl=254 time=31 ms
From 10.1.1.1: bytes=32 seq=5 ttl=254 time=32 ms

--- 10.1.1.1 ping statistics ---
  5 packet(s) transmitted
  5 packet(s) received
  0.00% packet loss
  round-trip min/avg/max = 31/34/47 ms

PC>ping 10.1.2.1

Ping 10.1.2.1: 32 data bytes, Press Ctrl_C to break
From 10.1.2.1: bytes=32 seq=1 ttl=254 time=63 ms
From 10.1.2.1: bytes=32 seq=2 ttl=254 time=31 ms
From 10.1.2.1: bytes=32 seq=3 ttl=254 time=31 ms
From 10.1.2.1: bytes=32 seq=4 ttl=254 time=32 ms
From 10.1.2.1: bytes=32 seq=5 ttl=254 time=46 ms

--- 10.1.2.1 ping statistics ---
  5 packet(s) transmitted
  5 packet(s) received
  0.00% packet loss
  round-trip min/avg/max = 31/40/63 ms

PC>ping 10.1.3.1

Ping 10.1.3.1: 32 data bytes, Press Ctrl_C to break
From 10.1.3.1: bytes=32 seq=1 ttl=254 time=32 ms
From 10.1.3.1: bytes=32 seq=2 ttl=254 time=31 ms
From 10.1.3.1: bytes=32 seq=3 ttl=254 time=31 ms
From 10.1.3.1: bytes=32 seq=4 ttl=254 time=63 ms
From 10.1.3.1: bytes=32 seq=5 ttl=254 time=31 ms

--- 10.1.3.1 ping statistics ---
  5 packet(s) transmitted
  5 packet(s) received
  0.00% packet loss
  round-trip min/avg/max = 31/37/63 ms

PC>ping 172.168.1.1

Ping 172.168.1.1: 32 data bytes, Press Ctrl_C to break
From 172.168.1.1: bytes=32 seq=1 ttl=252 time=78 ms
From 172.168.1.1: bytes=32 seq=2 ttl=252 time=47 ms
From 172.168.1.1: bytes=32 seq=3 ttl=252 time=62 ms
From 172.168.1.1: bytes=32 seq=4 ttl=252 time=63 ms
From 172.168.1.1: bytes=32 seq=5 ttl=252 time=62 ms

--- 172.168.1.1 ping statistics ---
  5 packet(s) transmitted
  5 packet(s) received
  0.00% packet loss
  round-trip min/avg/max = 47/62/78 ms

pc4测试

PC>ipconfig

Link local IPv6 address...........: fe80::5689:98ff:feac:201a
IPv6 address......................: :: / 128
IPv6 gateway......................: ::
IPv4 address......................: 192.168.0.93
Subnet mask.......................: 255.255.255.240
Gateway...........................: 192.168.0.81
Physical address..................: 54-89-98-AC-20-1A
DNS server........................: 8.8.8.8


PC>ping 10.1.1.1

Ping 10.1.1.1: 32 data bytes, Press Ctrl_C to break
From 10.1.1.1: bytes=32 seq=1 ttl=254 time=62 ms
From 10.1.1.1: bytes=32 seq=2 ttl=254 time=47 ms
From 10.1.1.1: bytes=32 seq=3 ttl=254 time=62 ms
From 10.1.1.1: bytes=32 seq=4 ttl=254 time=47 ms
From 10.1.1.1: bytes=32 seq=5 ttl=254 time=63 ms

--- 10.1.1.1 ping statistics ---
  5 packet(s) transmitted
  5 packet(s) received
  0.00% packet loss
  round-trip min/avg/max = 47/56/63 ms

PC>ping 10.1.2.1

Ping 10.1.2.1: 32 data bytes, Press Ctrl_C to break
From 10.1.2.1: bytes=32 seq=1 ttl=254 time=63 ms
From 10.1.2.1: bytes=32 seq=2 ttl=254 time=47 ms
From 10.1.2.1: bytes=32 seq=3 ttl=254 time=47 ms
From 10.1.2.1: bytes=32 seq=4 ttl=254 time=62 ms
From 10.1.2.1: bytes=32 seq=5 ttl=254 time=63 ms

--- 10.1.2.1 ping statistics ---
  5 packet(s) transmitted
  5 packet(s) received
  0.00% packet loss
  round-trip min/avg/max = 47/56/63 ms

PC>ping 172.168.1.1

Ping 172.168.1.1: 32 data bytes, Press Ctrl_C to break
From 172.168.1.1: bytes=32 seq=1 ttl=252 time=93 ms
From 172.168.1.1: bytes=32 seq=2 ttl=252 time=94 ms
From 172.168.1.1: bytes=32 seq=3 ttl=252 time=78 ms
From 172.168.1.1: bytes=32 seq=4 ttl=252 time=63 ms
From 172.168.1.1: bytes=32 seq=5 ttl=252 time=93 ms

--- 172.168.1.1 ping statistics ---
  5 packet(s) transmitted
  5 packet(s) received
  0.00% packet loss
  round-trip min/avg/max = 63/84/94 ms