hcip第二天实验

1.搭建拓扑

 

 

 

 2.网段规划：

除去给定的100.1.1.0/24剩下的七个网段由192.168.0.0/24划分所得

192.168.0.0/28
（r1环回：192.168.0.0/30
    192.168.0.4/30
    192.168.0.8/30）
192.168.0.16/28
192.168.0.32/28
192.168.0.48/28
192.168.0.64/28
192.168.0.80/28
192.168.0.96/28

3.IP地址配定：

R1上：

 

 

R2上：

 

 

R3上:

 

 

 

 

R4：

 

 

 

 R5：

 

 4.R4上dhcp服务启用

 

5.划分vlan

[SW1]vlan 2 
[SW1-vlan2]vlan 3
[SW1-vlan3]q
[SW1]
[SW1]int e0/0/2
[SW1-Ethernet0/0/2]port link-type access 
[SW1-Ethernet0/0/2]port default vlan 2
[SW1-Ethernet0/0/2]q
[SW1]int e 0/0/3
[SW1-Ethernet0/0/3]port link-type access 
[SW1-Ethernet0/0/3]port default vlan 3
[SW1]int e 0/0/1
[SW1-Ethernet0/0/1]port link-type trunk 
[SW1-Ethernet0/0/1]port trunk allow-pass vlan all
[SW1-Ethernet0/0/1]q
[SW1]int e 0/0/4
[SW1-Ethernet0/0/4]port link-type trunk 
[SW1-Ethernet0/0/4]port trunk allow-pass vlan all 

 [SW2]vlan 2
[SW2-vlan2]vlan3
[SW2-vlan3]
[SW2]int e0/0/2
[SW2-Ethernet0/0/2]port link-type access 
[SW2-Ethernet0/0/2]port default vlan 2
[SW2-Ethernet0/0/2]q
[SW2]int e 0/0/3
[SW2-Ethernet0/0/3]port link-type access 
[SW2-Ethernet0/0/3]port default vlan 3
[SW2-Ethernet0/0/3]q
[SW2]int e0/0/1
[SW2-Ethernet0/0/1]port link-type trunk 
[SW2-Ethernet0/0/1]port trunk allow-pass vlan all
[SW2-Ethernet0/0/1]q

6.静态路由配置

R1：

ip route-static 192.168.0.32 28 192.168.0.17
ip route-static 192.168.0.80 28 192.168.0.97
ip route-static 192.168.0.48 28 192.168.0.17
ip route-static 192.168.0.64 28 192.168.0.97
ip route-static 192.168.0.112 28 192.168.0.97
ip route-static 192.168.0.128 28 192.168.0.97                                                                                  ip route-static 0.0.0.0 0 192.168.0.17                                                                                              ip route-static 0.0.0.0 0 192.168.0.97

R2：
ip route-static 192.168.0.96 28 192.168.0.18
ip route-static 192.168.0.80 28 192.168.0.34
ip route-static 192.168.0.48 28 192.168.0.34
ip route-static 192.168.0.64 28 192.168.0.34
ip route-static 192.168.0.112 28 192.168.0.18
ip route-static 192.168.0.128 28 192.168.0.18                         
ip route-static 192.168.0.0 28 192.168.0.18                                                                                    ip route-static 0.0.0.0 0 192.168.0.34
R3：

ip route-static 192.168.0.112 28 192.168.0.82
ip route-static 192.168.0.16 28 192.168.0.33
ip route-static 192.168.0.96 28 192.168.0.82
ip route-static 192.168.0.128 28 192.168.0.82
ip route-static 192.168.0.0 28 192.168.0.33
ip route-static 192.168.0.0 28 192.168.0.82

R4：
ip route-static 192.168.0.32 28 192.168.0.81
ip route-static 192.168.0.16 28 192.168.0.98
ip route-static 192.168.0.48 28 192.168.0.81
ip route-static 192.168.0.64 28 192.168.0.81
ip route-static 192.168.0.0 28 192.168.0.98
 

R5：

ip route-static 192.168.0.32 28 192.168.0.49
ip route-static 192.168.0.80 28 192.168.0.49
ip route-static 192.168.0.16 28 192.168.0.49
ip route-static 192.168.0.96 28 192.168.0.49
ip route-static 192.168.0.112 28 192.168.0.49
ip route-static 192.168.0.128 28 192.168.0.49

7.Nat设置

R5上：

[R5]acl 2000
[R5-acl-basic-2000]rule 5 permit source any
[R5-acl-basic-2000]q   
[R5]int gi 0/0/2
[R5-GigabitEthernet0/0/2]nat  outbound 2000
[R5-GigabitEthernet0/0/2]q            
[R5]ip route-static 0.0.0.0 0 100.1.1.6
[R5]ip route-static 192.168.0.0 28 192.168.0.49 
[R5]ip route-static 192.168.0.0 28 192.168.0.65
试验结束：