HCIA结课综合实验

注：router路由器没有千兆口（GE口），只有3260和2240模拟器才能做策略。觉得日志烦可以使用undo terminal trapping 关闭日志

R1接口IP地址配置：
[r1]int LoopBack 0
[r1-LoopBack0]ip address 192.168.1.33 28
[r1-LoopBack0]int LoopBack 1
[r1-LoopBack1]ip address 192.168.1.49 28
[r1-LoopBack1]int g0/0/0
[r1-GigabitEthernet0/0/0]ip address 192.168.1.1 30
[r1-GigabitEthernet0/0/0]int g0/0/1
[r1-GigabitEthernet0/0/1]ip address 192.168.1.5 30   //配置完接口IP之后用display ip interface brie检查一下
静态路由和缺省路由和沉默接口（当一个路由器缺省和环回接口汇总同时用到需要用到沉默接口防环）
ip route-static 0.0.0.0 0.0.0.0 192.168.1.2
ip route-static 0.0.0.0 0.0.0.0 192.168.1.6
先配置缺省路由再配置静态路由可以少写几条静态
ip route-static 192.168.1.8 255.255.255.252 192.168.1.2
ip route-static 192.168.1.12 255.255.255.252 192.168.1.6
ip route-static 192.168.1.64 255.255.255.224 192.168.1.2
ip route-static 192.168.1.96 255.255.255.224 192.168.1.6
ip route-static 192.168.1.128 255.255.255.224 192.168.1.2
ip route-static 192.168.1.128 255.255.255.224 192.168.1.6

ip route-static 192.168.1.32 255.255.255.224 NULL0
将R1的telnet开启：
[r1]aaa
[r1-aaa]local-user zxd privilege level 15 password cipher zxd666
Error: The level should not higher than current user's.（优先级太高就降为3）
[r1-aaa]local-user zxd privilege level 3 password cipher zxd666
[r1-aaa]local-user zxd service-type telnet
[r1]user-interface vty 0 4
[r1-ui-vty0-4]authentication-mode aaa

R2配置：

<Huawei>sys
[Huawei]sysname r2
[r2]interface LoopBack 0
[r2-LoopBack0]ip address 192.168.1.65 28
[r2-LoopBack0]int loopback 1
[r2-LoopBack1]ip address 192.168.1.81 28
[r2-LoopBack1]int g0/0/0
[r2-GigabitEthernet0/0/0]ip address 192.168.1.2 30
[r2-GigabitEthernet0/0/0]int g0/0/1
[r2-GigabitEthernet0/0/1]ip address 192.168.1.9 30
[r2-GigabitEthernet0/0/1]q
[r2]ip route-static 0.0.0.0 0 192.168.1.10
[r2]ip route-static 192.168.1.32 27 192.168.1.1
[r2]ip route-static 192.168.1.4 30 192.168.1.1
[r2]ip route-static 192.168.1.96 27 192.168.1.1
[r2]ip route-static 192.168.1.96 27 192.168.1.10
[r2]ip route-static 192.168.1.64 27 NULL 0

R3配置：

[Huawei]sysname r3
[r3-GigabitEthernet0/0/0]ip address 192.168.1.6 30
[r3-GigabitEthernet0/0/0]int g0/0/1
[r3-GigabitEthernet0/0/1]ip address 192.168.1.13 30
[r3-GigabitEthernet0/0/1]int g0/0/2
[r3-GigabitEthernet0/0/2]ip address 192.168.1.97 27
[r3-GigabitEthernet0/0/2]q
[r3]ip route-static 0.0.0.0 0 192.168.1.14
[r3]ip route-static 192.168.1.32 27 192.168.1.5
[r3]ip route-static 192.168.1.0 30 192.168.1.5
[r3]ip route-static 192.168.1.64 27 192.168.1.5
[r3]ip route-static 192.168.1.64 27 192.168.1.14
[r3]dhcp enable 
[r3]ip pool a
[r3-ip-pool-a]network 192.168.1.96 mask 27
[r3-ip-pool-a]gateway-list 192.168.1.97
[r3-ip-pool-a]int 
[r3-GigabitEthernet0/0/2]dhcp select global 

R4上的配置：

<Huawei>sys
[Huawei]sysname r4
[r4]int LoopBack 0
[r4-LoopBack0]ip address 192.168.1.129 28 
[r4-LoopBack0]int LoopBack 1
[r4-LoopBack1]ip address 192.168.1.145 28
[r4-LoopBack1]int g0/0/0
[r4-GigabitEthernet0/0/0]ip address 192.168.1.10 30
[r4-GigabitEthernet0/0/0]int g0/0/1
[r4-GigabitEthernet0/0/1]ip address 192.168.1.14 30
[r4-GigabitEthernet0/0/1]int g0/0/2
[r4-GigabitEthernet0/0/2]ip address 192.168.1.21 30
[r4-GigabitEthernet0/0/2]int e0/0/0
[r4-Ethernet0/0/0]ip address 192.168.1.17 30    
[r4]ip route-static 0.0.0.0 0 192.168.1.18 preference 61
[r4]ip route-static 0.0.0.0 0 192.168.1.22
[r4]ip route-static 192.168.1.64 27 192.168.1.9
[r4]ip route-static 192.168.1.0 30 192.168.1.9
[r4]ip route-static 192.168.1.32 27 192.168.1.9
[r4]ip route-static 192.168.1.96 27 192.168.1.13
[r4]ip route-static 192.168.1.4 30 192.168.1.13
[r4]ip route-static 192.168.1.32 27 192.168.1.13
[r4]ip route-static 192.168.1.128 27 NULL 0

R5上的配置：

<Huawei>sys
[Huawei]sysname r5
[r5]int g0/0/0
[r5-GigabitEthernet0/0/0]ip address 192.168.1.22 30
[r5-GigabitEthernet0/0/0]int g0/0/1
[r5-GigabitEthernet0/0/1]ip address 192.168.1.18 30
[r5-GigabitEthernet0/0/1]int g0/0/2
[r5-GigabitEthernet0/0/2]ip address 56.1.1.1 24
[r5-GigabitEthernet0/0/2]q
[r5]interface LoopBack 0    
[r5-LoopBack0]ip address 192.168.1.161 27
[r5-LoopBack0]q
[r5]ip route-static 6.6.6.0 24 56.1.1.2（与边界路由器的静态路由）
[r5]ip route-static 192.168.1.128 27 192.168.1.21
[r5]ip route-static 192.168.1.12 30 192.168.1.21
[r5]ip route-static 192.168.1.8 30 192.168.1.21
[r5]ip route-static 192.168.1.64 27 192.168.1.21
[r5]ip route-static 192.168.1.96 27 192.168.1.21
[r5]ip route-static 192.168.1.0 30 192.168.1.21
[r5]ip route-static 192.168.1.4 30 192.168.1.21
[r5]ip route-static 192.168.1.32 27 192.168.1.21
[r5]ip route-static 192.168.1.128 27 192.168.1.17 pr 61
[r5]ip route-static 192.168.1.12 30 192.168.1.17 pr 61
[r5]ip route-static 192.168.1.8 30 192.168.1.17 pr 61
[r5]ip route-static 192.168.1.64 27 192.168.1.17 pr 61
[r5]ip route-static 192.168.1.96 27 192.168.1.17 pr 61
[r5]ip route-static 192.168.1.0 30 192.168.1.17 pr 61
[r5]ip route-static 192.168.1.4 30 192.168.1.17 pr 61
[r5]ip route-static 192.168.1.32 27 192.168.1.17 pr 61
[r5]acl 2000
[r5-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255
[r5-acl-basic-2000]int g0/0/2
[r5-GigabitEthernet0/0/2]nat outbound 2000
[r5]int g0/0/2    
[r5-GigabitEthernet0/0/2]nat static protocol tcp global current-interface 23 ins
ide 192.168.1.33 23（将当前接口的23端口转换成1.33的tcp协议下的23端口）
Warning:The port 23 is well-known port. If you continue it may cause function fa
ilure.
Are you sure to continue?[Y/N]:y
 

isp上的配置：

<Huawei>sys
[Huawei]sysname isp
[isp]interface LoopBack 0
[isp-LoopBack0]ip address 6.6.6.6 24
[isp-GigabitEthernet0/0/0]ip address 56.1.1.2 24
<isp>telnet 56.1.1.1
Trying 56.1.1.1 ...
Press CTRL+K to abort
Connected to 56.1.1.1 ...
Login authentication
Username:zxd
Password:
Info: The max number of VTY users is 10, and the number
      of current VTY users on line is 1.
      The current login time is 2024-05-25 16:07:35.
<r1>
到此完成实验所有要求