H1-6 天眼科技有限公司网络搭建与维护
(1)任务描述
天眼科技有限公司由于业务的发展,在外地新建了分公司,现在需要总公司和分公司网络连通。总公司有3栋大楼,每栋大楼有信息点600余个,总公司还有一个服务器机房,有50个信息点,放置文件服务器和其他服务器。分公司共有信息点100余个。该企业需要让总公司各部门和分公司通过配置OSPF路由协议,使分公司可以访问总公司服务器中的文件服务器,并能实现部门之间信息化的合作。总公司和分公司属于不同子网。为了方便管理员管理分公司计算机,采用DHCP自动为分公司用户分配IP地址。总公司内部使用网络段172.16.0.0/20来进行IP地址的划分,分总司使用172.16.13.0/24,各网段的网关使用该网段最后一个可用IP地址。
网络拓扑结构如下图所示:
任务一:网络系统分析与设计(15分)
根据项目需求完成总公司网络IP地址分配,并将下表填写完整。
把“网络地址分配表”以指定的文件名存放到指定位置——考场说明指定路径考生号网络地址分配表.doc。
怎么算出来的?请看VCR:【牛逼!让人头疼的ip子网划分原来这么简单......超详细例题解析|附子网计算器】 牛逼!让人头疼的ip子网划分原来这么简单......超详细例题解析|附子网计算器_哔哩哔哩_bilibili
或者直接对照此表!
任务二:网络设备选型与互联(15分)
② 使用eNSP模拟器进行组网。(2分)
②选择合适的连接线缆,用于连接网络设备。(3分)
③交换机使用S5700,路由器选择AR2220,将网线连接到各网络设备接口上,完成拓扑图。(10分)
连接串口线:
任务三:交换机配置(25分)
①使用eNSP模拟器,创建LSW1、LSW2、LSW3、LSW4,配置LSW1的主机名为S1,LSW2的主机名为S2,LSW3的主机名为S3,LSW4的主机名为S4。(6分)
sysname S1-4
②根据网络地址表配置VLAN,在LSW3中创建VLAN,将G0/0/2-5接口加入到VLAN 10中,将G0/0/6-10接口加入到VLAN 20,将G0/0/11-20接口加入到VLAN 30中。(5分)
int g0/0/2
p l a
p d v 10
int g0/0/3
p l a
p d v 10
int g0/0/4
p l a
p d v 10
int g0/0/5
p l a
p d v 10
int g0/0/6
p l a
p d v 20
int g0/0/7
p l a
p d v 20
int g0/0/8
p l a
p d v 20
int g0/0/9
p l a
p d v 20
int g0/0/10
p l a
p d v 20
int g0/0/11
p l a
p d v 30
int g0/0/12
p l a
p d v 30
int g0/0/13
p l a
p d v 30
int g0/0/14
p l a
p d v 30
int g0/0/15
p l a
p d v 30
int g0/0/16
p l a
p d v 30
int g0/0/17
p l a
p d v 30
int g0/0/18
p l a
p d v 30
int g0/0/19
p l a
p d v 30
int g0/0/20
p l a
p d v 30
③将LSW1、LSW2、LSW4的相应接口配置为TRUNK,放行所有业务VLAN;(6分)
LSW1
[S1]vlan batch 10 20 30 40
Info: This operation may take a few seconds. Please wait for a moment...done.
[S1]int g0/0/24
[S1-GigabitEthernet0/0/24]p l t
[S1-GigabitEthernet0/0/24]p t a v 40
LSW2
[S2]vlan batch 10 20 30 40
Info: This operation may take a few seconds. Please wait for a moment...done.
[S2]int g0/0/1
[S2-GigabitEthernet0/0/1]p l t
[S2-GigabitEthernet0/0/1]p t a v 10 20 30 40
LSW3
[S3]int g0/0/1
[S3-GigabitEthernet0/0/1]p l t
[S3-GigabitEthernet0/0/1]p t a v 10 20 30 40
④LSW1和LSW2的G0/0/22-23端口链路聚合,ID为1,放行所有业务VLAN;(8分)
LSW1
[S1]int eth-trunk 1
[S1-Eth-Trunk1]p l t
[S1-Eth-Trunk1]p t a v 10 20 30 40
[S1-Eth-Trunk1]int g0/0/22
[S1-GigabitEthernet0/0/22]eth-trunk 1
Info: This operation may take a few seconds. Please wait for a moment...done.
[S1-GigabitEthernet0/0/22]int g0/0/23
[S1-GigabitEthernet0/0/23]eth-trunk 1
LSW2
[S2]int eth-trunk 1
[S2-Eth-Trunk1]p l t
[S2-Eth-Trunk1]p t a v 10 20 30 40
[S2-Eth-Trunk1]int g0/0/22
[S2-GigabitEthernet0/0/22]eth-trunk 1
Info: This operation may take a few seconds. Please wait for a moment...done.
[S2-GigabitEthernet0/0/22]int g0/0/23
[S2-GigabitEthernet0/0/23]eth-trunk 1
任务四:路由器配置(25分)
①修改AR1主机名为R1,AR2名为R2,AR3名为R3,根据IP地址分配表为接口配置IP地址;(3分)
R1
[Huawei]sysname R1
[R1]int s1/0/0
[R1-Serial1/0/0]ip add 1.1.1.1 30
[R1-Serial1/0/0]int s1/0/1
[R1-Serial1/0/1]ip add 1.1.1.5 30
[R1-Serial1/0/1]
R2
[Huawei]sysname R2
[R2]int s1/0/0
[R2-Serial1/0/0]ip add 1.1.1.2 30
[R2-Serial1/0/0]
R3
[Huawei]sysname R3
[R3]int s1/0/1
[R3-Serial1/0/1]ip add 1.1.1.6 30
[R3-Serial1/0/1]q
[R3]
②在AR2上配置单臂路由,保证公司总部内网VLAN之间能够互通。(5分)
interface GigabitEthernet0/0/0.10
dot1q termination vid 10
ip address 172.16.3.254 255.255.252.0
arp broadcast enable
interface GigabitEthernet0/0/0.20
dot1q termination vid 20
ip address 172.16.7.254 255.255.252.0
arp broadcast enable
interface GigabitEthernet0/0/0.30
dot1q termination vid 30
ip address 172.16.11.254 255.255.252.0
arp broadcast enable
interface GigabitEthernet0/0/0.40
dot1q termination vid 40
ip address 172.16.12.62 255.255.255.192
arp broadcast enable
③在AR1、AR2、AR3上配置OSPF路由协议,使得OSPF区域为0,并且保证公司网络的连通性。(9分)
AR1
[R1]ospf 1 router-id 1.1.1.1
[R1-ospf-1]area 0
[R1-ospf-1-area-0.0.0.0]net 1.1.1.0 0.0.0.3
[R1-ospf-1-area-0.0.0.0]net 1.1.1.4 0.0.0.3
[R1-ospf-1-area-0.0.0.0]q
AR2
[R2]ospf 1 router-id 2.2.2.2
[R2-ospf-1]area 0
[R2-ospf-1-area-0.0.0.0]net 1.1.1.0 0.0.0.3
[R2-ospf-1-area-0.0.0.0]net 172.16.0.0 0.0.7.255
[R2-ospf-1-area-0.0.0.0]net 172.16.8.0 0.0.3.255
[R2-ospf-1-area-0.0.0.0]net 172.16.12.0 0.0.0.63
[R2-ospf-1-area-0.0.0.0]q
[R2-ospf-1]
AR3
[R3]ospf 1 router-id 3.3.3.3
[R3-ospf-1]area 0
[R3-ospf-1-area-0.0.0.0]net 172.16.13.0 0.0.0.255
[R3-ospf-1-area-0.0.0.0]net 1.1.1.4 0.0.0.3
[R3-ospf-1-area-0.0.0.0]q
[R3-ospf-1]
④在AR3上配置DHCP服务,地址池名为FGS,排除地址范围为:172.16.13.200~172.16.13.253,DNS地址为8.8.8.8,为分公司用户分配IP地址。(8分)
dhcp enable
ip pool FGS
gateway-list 172.16.13.254
network 172.16.13.0 mask 255.255.255.0
excluded-ip-address 172.16.13.200 172.16.13.253
dns-list 8.8.8.8
interface GigabitEthernet0/0/0
ip address 172.16.13.254 255.255.255.0
dhcp select global
查看获取的DHCP的IP地址
PC>ipconfig Link local IPv6 address...........: fe80::5689:98ff:fe9b:5abb IPv6 address......................: :: / 128 IPv6 gateway......................: :: IPv4 address......................: 172.16.13.199 Subnet mask.......................: 255.255.255.0 Gateway...........................: 172.16.13.254 Physical address..................: 54-89-98-9B-5A-BB DNS server........................: 8.8.8.8
加一个Client1设备
配置Server - FTP服务器地址
配置Client1参数;再连接!
配置命令
R1
sysname R1
interface Serial1/0/0
link-protocol ppp
ip address 1.1.1.1 255.255.255.252
interface Serial1/0/1
link-protocol ppp
ip address 1.1.1.5 255.255.255.252
ospf 1 router-id 1.1.1.1
area 0.0.0.0
network 1.1.1.0 0.0.0.3
network 1.1.1.4 0.0.0.3
R2
sysname R2
interface Serial1/0/0
link-protocol ppp
ip address 1.1.1.2 255.255.255.252
interface GigabitEthernet0/0/0.10
dot1q termination vid 10
ip address 172.16.3.254 255.255.252.0
arp broadcast enable
interface GigabitEthernet0/0/0.20
dot1q termination vid 20
ip address 172.16.7.254 255.255.252.0
arp broadcast enable
interface GigabitEthernet0/0/0.30
dot1q termination vid 30
ip address 172.16.11.254 255.255.252.0
arp broadcast enable
interface GigabitEthernet0/0/0.40
dot1q termination vid 40
ip address 172.16.12.62 255.255.255.192
arp broadcast enable
ospf 1 router-id 2.2.2.2
area 0.0.0.0
network 1.1.1.0 0.0.0.3
network 172.16.0.0 0.0.7.255
network 172.16.8.0 0.0.3.255
network 172.16.12.0 0.0.0.63
R3
sysname R3
dhcp enable
ip pool FGS
gateway-list 172.16.13.254
network 172.16.13.0 mask 255.255.255.0
excluded-ip-address 172.16.13.200 172.16.13.253
dns-list 8.8.8.8
interface Serial1/0/1
link-protocol ppp
ip address 1.1.1.6 255.255.255.252
interface GigabitEthernet0/0/0
ip address 172.16.13.254 255.255.255.0
dhcp select global
ospf 1 router-id 3.3.3.3
area 0.0.0.0
network 1.1.1.4 0.0.0.3
network 172.16.13.0 0.0.0.255
S1
sysname S1
vlan batch 10 20 30 40
interface Eth-Trunk1
port link-type trunk
port trunk allow-pass vlan 10 20 30 40
interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 10 20 30 40
interface GigabitEthernet0/0/22
eth-trunk 1
interface GigabitEthernet0/0/23
eth-trunk 1
interface GigabitEthernet0/0/24
port link-type access
port default vlan 40
S2
sysname S2
vlan batch 10 20 30 40
interface Eth-Trunk1
port link-type trunk
port trunk allow-pass vlan 10 20 30 40
interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 10 20 30 40
interface GigabitEthernet0/0/22
eth-trunk 1
interface GigabitEthernet0/0/23
eth-trunk 1
S3
sysname S3
vlan batch 10 20 30
interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 10 20 30 40
interface GigabitEthernet0/0/2
port link-type access
port default vlan 10
interface GigabitEthernet0/0/3
port link-type access
port default vlan 10
interface GigabitEthernet0/0/4
port link-type access
port default vlan 10
interface GigabitEthernet0/0/5
port link-type access
port default vlan 10
interface GigabitEthernet0/0/6
port link-type access
port default vlan 20
interface GigabitEthernet0/0/7
port link-type access
port default vlan 20
interface GigabitEthernet0/0/8
port link-type access
port default vlan 20
interface GigabitEthernet0/0/9
port link-type access
port default vlan 20
interface GigabitEthernet0/0/10
port link-type access
port default vlan 20
interface GigabitEthernet0/0/11
port link-type access
port default vlan 30
interface GigabitEthernet0/0/12
port link-type access
port default vlan 30
interface GigabitEthernet0/0/13
port link-type access
port default vlan 30
interface GigabitEthernet0/0/14
port link-type access
port default vlan 30
interface GigabitEthernet0/0/15
port link-type access
port default vlan 30
interface GigabitEthernet0/0/16
port link-type access
port default vlan 30
interface GigabitEthernet0/0/17
port link-type access
port default vlan 30
interface GigabitEthernet0/0/18
port link-type access
port default vlan 30
interface GigabitEthernet0/0/19
port link-type access
port default vlan 30
interface GigabitEthernet0/0/20
port link-type access
port default vlan 30
S4
sysname S4