HCIP第一天实验

最新推荐文章于 2024-07-23 21:00:00 发布
最新推荐文章于 2024-07-23 21:00:00 发布
阅读量171 收藏
点赞数
分类专栏： HCIP 文章标签： tcp/ip
版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
本文链接：https://blog.csdn.net/m0_59760462/article/details/120239449
版权

 1子网划分

 AR1 

G0/0/0   192.168.0.225/30          G0/0/1  192.168.0.229/30

Lo0 192.168.0.1/27                     Lo1       192.168.0.33/27

AR2

G0/0/0 192.168.0.237/30            G0/0/1  192.168.0.226/30

Lo0 192.168.0.65/27                   Lo1       192.168.0.97/27

AR3

G0/0/0    192.168.0.233/30          G0/0/1 192.168.0.230/30

G0/0/2    192.168.0.193/27          Lo0      192.168.0.193/27

AR4

G0/0/0   192.168.0.234/30          G0/0/1  192.168.0.238/30

G0/0/2   192.168.0.245/30          E0/0/0  192.168.0.241/30

Lo0 192.168.0.129/27                 Lo1      192.168.0.161/27

AR5

G0/0/0  4.4.4.1/24                       G0/0/2 192.168.0.246/30

E0/0/0 192.168.0.242/30

AR6

G0/0/0  4.4.4.200/24            LO0 5.5.5.5 /30 

为了防止环路，在每个路由器上配置黑洞路由。

ip route-static 192.168.0.64 255.255.255.192 NULL0

AR5上配置nat 

acl name nat 2000  
 rule 10 permit source 192.168.0.0 0.0.0.255 

nat address-group 2 4.4.4.10 4.4.4.20

interface GigabitEthernet0/0/0
 ip address 4.4.4.1 255.255.255.0 
 nat outbound 2000 address-group 2 

AR3上配置DHCP

ip pool 192
 gateway-list 192.168.0.193 
 network 192.168.0.192 mask 255.255.255.224 
 excluded-ip-address 192.168.0.194 192.168.0.196 
 lease day 0 hour 0 minute 30 
 dns-list 114.114.114.114 8.8.8.8 

interface GigabitEthernet0/0/2
 ip address 192.168.0.193 255.255.255.224 
 dhcp select global

AR5上配置端口映射

interface GigabitEthernet0/0/0
 nat server protocol tcp global 4.4.4.2 telnet inside 192.168.0.225 telnet
 

AR1上开启Tlenet

user-interface vty 0 4
 authentication-mode password
 set authentication password cipher %$%$4EN./\jo05V<{QCL#PY$,<#A5cp]Y;*3|1]GVwIw
7gXP<#D,%$%$
 

验证nat

 验证telnet及端口映射

验证DHCP

ar1配置

[V200R003C00]
#
 sysname ar1
#
 snmp-agent local-engineid 800007DB03000000000000
 snmp-agent 
#
 clock timezone China-Standard-Time minus 08:00:00
#
portal local-server load portalpage.zip
#
 drop illegal-mac alarm
#
 set cpu-usage threshold 80 restore 75
#
aaa 
 authentication-scheme default
 authorization-scheme default
 accounting-scheme default
 domain default 
 domain default_admin 
 local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
 local-user admin service-type http
#
firewall zone Local
 priority 15
#
interface GigabitEthernet0/0/0
 ip address 192.168.0.225 255.255.255.252 
#
interface GigabitEthernet0/0/1
 ip address 192.168.0.229 255.255.255.252 
#
interface GigabitEthernet0/0/2
#
interface NULL0
#
interface LoopBack0
 ip address 192.168.0.1 255.255.255.224 
#
interface LoopBack1
 ip address 192.168.0.33 255.255.255.224 
#
ip route-static 0.0.0.0 0.0.0.0 192.168.0.226
ip route-static 0.0.0.0 0.0.0.0 192.168.0.220 preference 100
ip route-static 192.168.0.0 255.255.255.192 NULL0
ip route-static 192.168.0.64 255.255.255.192 192.168.0.226
ip route-static 192.168.0.128 255.255.255.192 192.168.0.226
ip route-static 192.168.0.128 255.255.255.192 192.168.0.230
ip route-static 192.168.0.192 255.255.255.224 192.168.0.230
ip route-static 192.168.0.236 255.255.255.252 192.168.0.226
ip route-static 192.168.0.240 255.255.255.248 192.168.0.226
ip route-static 192.168.0.240 255.255.255.248 192.168.0.230
#
user-interface con 0
 authentication-mode password
user-interface vty 0 4
 authentication-mode password
 set authentication password cipher %$%$WAwH'yu$8EPFU2;T`SMR,<zO'|];QB",fJcVJ0=d
zKX@<zR,%$%$
user-interface vty 16 20
#
wlan ac
#
return

ar2配置

[V200R003C00]
#
 sysname ar2
#
 snmp-agent local-engineid 800007DB03000000000000
 snmp-agent 
#
 clock timezone China-Standard-Time minus 08:00:00
#
portal local-server load portalpage.zip
#
 drop illegal-mac alarm
#
 set cpu-usage threshold 80 restore 75
#
aaa 
 authentication-scheme default
 authorization-scheme default
 accounting-scheme default
 domain default 
 domain default_admin 
 local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
 local-user admin service-type http
#
firewall zone Local
 priority 15
#
interface GigabitEthernet0/0/0
 ip address 192.168.0.226 255.255.255.252 
#
interface GigabitEthernet0/0/1
 ip address 192.168.0.237 255.255.255.252 
#
interface GigabitEthernet0/0/2
#
interface NULL0
#
interface LoopBack0
 ip address 192.168.0.65 255.255.255.224 
#
interface LoopBack1
 ip address 192.168.0.97 255.255.255.224 
#
ip route-static 0.0.0.0 0.0.0.0 192.168.0.238
ip route-static 0.0.0.0 0.0.0.0 192.168.0.225 preference 100
ip route-static 192.168.0.0 255.255.255.192 192.168.0.225
ip route-static 192.168.0.64 255.255.255.192 NULL0
ip route-static 192.168.0.192 255.255.255.224 192.168.0.225
ip route-static 192.168.0.192 255.255.255.224 192.168.0.238 preference 100
ip route-static 192.168.0.228 255.255.255.252 192.168.0.225
ip route-static 192.168.0.232 255.255.255.252 192.168.0.238
ip route-static 192.168.0.240 255.255.255.248 192.168.0.238
#
user-interface con 0
 authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac
#
return

ar3配置

[V200R003C00]
#
 sysname ar3
#
 snmp-agent local-engineid 800007DB03000000000000
 snmp-agent 
#
 clock timezone China-Standard-Time minus 08:00:00
#
portal local-server load portalpage.zip
#
 drop illegal-mac alarm
#
 set cpu-usage threshold 80 restore 75
#
dhcp enable
#
ip pool 192
 gateway-list 192.168.0.193 
 network 192.168.0.192 mask 255.255.255.224 
 excluded-ip-address 192.168.0.194 192.168.0.196 
 lease day 0 hour 0 minute 30 
 dns-list 114.114.114.114 8.8.8.8 
#
aaa 
 authentication-scheme default
 authorization-scheme default
 accounting-scheme default
 domain default 
 domain default_admin 
 local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
 local-user admin service-type http
#
firewall zone Local
 priority 15
#
interface GigabitEthernet0/0/0
 ip address 192.168.0.233 255.255.255.252 
#
interface GigabitEthernet0/0/1
 ip address 192.168.0.230 255.255.255.252 
#
interface GigabitEthernet0/0/2
 ip address 192.168.0.193 255.255.255.224 
 dhcp select global
#
interface NULL0
#
interface LoopBack0
#
ip route-static 0.0.0.0 0.0.0.0 192.168.0.234
ip route-static 0.0.0.0 0.0.0.0 192.168.0.229 preference 100
ip route-static 192.168.0.0 255.255.255.192 192.168.0.229
ip route-static 192.168.0.64 255.255.255.192 192.168.0.229
ip route-static 192.168.0.64 255.255.255.192 192.168.0.234 preference 100
ip route-static 192.168.0.128 255.255.255.192 192.168.0.234
ip route-static 192.168.0.236 255.255.255.252 192.168.0.234
ip route-static 192.168.0.240 255.255.255.248 192.168.0.234
#
user-interface con 0
 authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac
#
return

ar4配置

[V200R003C00]
#
 sysname ar4
#
 board add 0/4 2FE 
#
 snmp-agent local-engineid 800007DB03000000000000
 snmp-agent 
#
 clock timezone China-Standard-Time minus 08:00:00
#
portal local-server load portalpage.zip
#
 drop illegal-mac alarm
#
 set cpu-usage threshold 80 restore 75
#
aaa 
 authentication-scheme default
 authorization-scheme default
 accounting-scheme default
 domain default 
 domain default_admin 
 local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
 local-user admin service-type http
#
firewall zone Local
 priority 15
#
interface Ethernet4/0/0
 ip address 192.168.0.241 255.255.255.252 
#
interface Ethernet4/0/1
#
interface GigabitEthernet0/0/0
 ip address 192.168.0.234 255.255.255.252 
#
interface GigabitEthernet0/0/1
 ip address 192.168.0.238 255.255.255.252 
#
interface GigabitEthernet0/0/2
 ip address 192.168.0.245 255.255.255.252 
#
interface NULL0
#
interface LoopBack0
 ip address 192.168.0.129 255.255.255.224 
#
interface LoopBack1
 ip address 192.168.0.161 255.255.255.224 
#
ip route-static 0.0.0.0 0.0.0.0 192.168.0.246
ip route-static 0.0.0.0 0.0.0.0 192.168.0.242 preference 100
ip route-static 192.168.0.0 255.255.255.192 192.168.0.237
ip route-static 192.168.0.0 255.255.255.192 192.168.0.233 preference 100
ip route-static 192.168.0.192 255.255.255.224 192.168.0.233
ip route-static 192.168.0.224 255.255.255.252 192.168.0.237
ip route-static 192.168.0.228 255.255.255.252 192.168.0.233
#
user-interface con 0
 authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac
#
return

ar5 配置
[V200R003C00]
#
 sysname ar5
#
 board add 0/4 2FE 
#
 snmp-agent local-engineid 800007DB03000000000000
 snmp-agent 
#
 clock timezone China-Standard-Time minus 08:00:00
#
portal local-server load portalpage.zip
#
 drop illegal-mac alarm
#
 set cpu-usage threshold 80 restore 75
#
acl name nat 2000  
 rule 10 permit source 192.168.0.0 0.0.0.255 
#
aaa 
 authentication-scheme default
 authorization-scheme default
 accounting-scheme default
 domain default 
 domain default_admin 
 local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
 local-user admin service-type http
#
firewall zone Local
 priority 15
#
 nat address-group 2 4.4.4.10 4.4.4.20
#
interface Ethernet4/0/0
 ip address 192.168.0.242 255.255.255.252 
#
interface Ethernet4/0/1
#
interface GigabitEthernet0/0/0
 ip address 4.4.4.1 255.255.255.0 
 nat server protocol tcp global 4.4.4.2 telnet inside 192.168.0.225 telnet
 nat outbound 2000 address-group 2 
#
interface GigabitEthernet0/0/1
#
interface GigabitEthernet0/0/2
 ip address 192.168.0.246 255.255.255.252 
#
interface NULL0
#
ip route-static 0.0.0.0 0.0.0.0 4.4.4.200
ip route-static 192.168.0.0 255.255.255.0 192.168.0.245
ip route-static 192.168.0.0 255.255.255.0 192.168.0.241 preference 100
#
user-interface con 0
 authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac
#
return

ar6配置

[V200R003C00]
#
 sysname ar6
#
 snmp-agent local-engineid 800007DB03000000000000
 snmp-agent 
#
 clock timezone China-Standard-Time minus 08:00:00
#
portal local-server load portalpage.zip
#
 drop illegal-mac alarm
#
 set cpu-usage threshold 80 restore 75
#
aaa 
 authentication-scheme default
 authorization-scheme default
 accounting-scheme default
 domain default 
 domain default_admin 
 local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
 local-user admin service-type http
#
firewall zone Local
 priority 15
#
interface GigabitEthernet0/0/0
 ip address 4.4.4.200 255.255.255.0 
#
interface GigabitEthernet0/0/1
#
interface GigabitEthernet0/0/2
#
interface NULL0
#
interface LoopBack0
 ip address 5.5.5.5 255.255.255.252 
#
user-interface con 0
 authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac
#
return

m0_59760462
关注
  • 0
    点赞
  • 踩
  • 0
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
专栏目录
hcip静态综合实验.docx
07-05
HCIP静态综合实验是HCIP认证中的一个重要组成部分，本实验旨在测试候选人的网络路由器配置和故障排除能力。 在本实验中，候选人需要配置R1、R2、R4和R5四个路由器的环回接口，并确保它们能够正常通信。环回接口是...
HCIP第一天复习HCIA的内容
11-04
HCIP第一天复习HCIA的内容 本资源为HCIP（华为认证网络工程师）的第一天复习内容，主要回顾了OSI模型和TCP/IP模型的区别、IPV4地址的组成和分类、静态路由的配置和应用。 OSI模型和TCP/IP模型的区别 OSI模型和TCP...
HCIP静态复习综合实验一
07-10
HCIP静态复习综合实验一
HCIP，BGP配置实验
08-11
BGP配置实验
【HCIP实验100】综合实验.paper
11-01
【HCIP实验100】综合实验.paper
HCIP第十一天笔记内容
07-21
HCIP第十一天笔记内容
臧家林hcip datacom ospf实验
10-19
在这个“臧家林HCIP Datacom OSPF实验”中，我们将深入探讨OSPF的工作原理、配置方法以及在实际网络环境中的应用。 OSPF是基于链路状态的路由协议，它通过收集网络拓扑信息，使用Dijkstra算法计算最短路径树（SPF ...
HCIP实验指导手册HCIP-IERS V2.5.docx
10-19
"HCIP实验指导手册HCIP-IERS V2.5.docx" HCIP-IERS实验指导手册是华为技术有限公司推出的网络工程师认证考试的实验手册，旨在帮助考生更好地理解和掌握HCIP-IERS相关知识。本手册涵盖了OSPF、IS-IS和BGP三大协议的...
HCIP课程基础实验配置
07-10
HCIP课程基础实验配置
HCIP第八天笔记内容
07-17
HCIP第八天笔记内容
HCIP第七天笔记内容
07-15
HCIP第七天笔记内容
HCIP第六天笔记内容
07-13
HCIP第六天笔记内容
HCIP第五天笔记内容
07-12
HCIP第五天笔记内容
HCIP第二天笔记内容
07-10
HCIP第二天笔记内容
HCIP第三天笔记内容
07-10
HCIP第三天笔记内容
HCIP第四天笔记内容
07-10
HCIP第四天笔记内容
HCIP，OSPF综合实验，第四次作业
08-05
OSPF MGRE
HCIP中MGRE实验
07-23
HCIP中MGRE实验
[网络通信原理]——TCP/IP模型——物理层
最新发布
nbdlsplyb的博客
07-23 592
物理层是TCP/IP模型的最底层，它为数据传输提供稳定的物理连接。
hcip实验100 综合实验
11-05
HCIP实验100是华为认证网络专家(Huawei Certified IP Professional)培养计划的一部分，是其可供选择的实验之一。综合实验的目的是为了让学员在真实的网络环境中应用所学知识和技能，通过解决实际问题来提升他们的...
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值