静态综合实验报告

一、实验拓扑

二、实验要求

1、R6为ISP，接口IP地址均为公有地址，该设备只能配置IP地址，之后不能再对其进行任何配置；
2、R1-R5为局域网，私有IP地址192.168.1.0/24，请合理分配；
3、R1、R2、R4，各有两个环回IP地址；R5,R6各有一个环回地址；所有路由器上环回均代表连接用户的接口；
4、R3下面的两台PC通过DHCP自动获取IP地址；
5、选路最佳，路由表尽量小，避免环路；
6、R1-R5均可以访问R6的环回；
7、R6 telnet R5的公有地址时，实际登录到R1上；
8、R4与R5正常通过1000M链路，故障时通过100m链路；

三、实验思路

1.根据网段数并且简化路由再划分IP

2.给R3的路由器配置DHCP服务，给旗下网段

3.R1-R5给R6的环回的配置路由表

4.在R5上做NAT

5.修改R5和R4的接口线路的优先级

6.R6的Telnet

四、实验步骤

1、配置ip地址

R1上相关配置

<R1>sys
Enter system view, return user view with Ctrl+Z.
[R1]int g0/0/0
[R1-GigabitEthernet0/0/0]ip add	
[R1-GigabitEthernet0/0/0]ip address 192.168.1.1 30

[R1]int g0/0/1
[R1-GigabitEthernet0/0/1]ip ad	
[R1-GigabitEthernet0/0/1]ip address 192.168.1.5 30

R1]int l0
[R1-LoopBack0]ip add	
[R1-LoopBack0]ip address 192.168.1.33 28

[R1]int l1
[R1-LoopBack1]ip add	
[R1-LoopBack1]ip address 192.168.1.49 28

R2上相关配置

<R2>sys
Enter system view, return user view with Ctrl+Z.
[R2]int g0/0/0
[R2-GigabitEthernet0/0/0]ip add	
[R2-GigabitEthernet0/0/0]ip address 192.168.1.2 30

[R2]int g 0/0/1
[R2-GigabitEthernet0/0/1]ip add	
[R2-GigabitEthernet0/0/1]ip address 192.168.1.9 30

[R2]int l0
[R2-LoopBack0]ip add	
[R2-LoopBack0]ip address 192.168.1.65 28

[R2]int l1
[R2-LoopBack1]ip add	
[R2-LoopBack1]ip address 192.168.1.81 28

R3上相关配置

<R3>sys
Enter system view, return user view with Ctrl+Z.
[R3]int g0/0/0
[R3-GigabitEthernet0/0/0]ip add	
[R3-GigabitEthernet0/0/0]ip address 192.168.1.6 30

[R3]int g 0/0/1
[R3-GigabitEthernet0/0/1]ip add	
[R3-GigabitEthernet0/0/1]ip address 192.168.1.13 30

[R3]int g0/0/2
[R3-GigabitEthernet0/0/2]ip add 	
[R3-GigabitEthernet0/0/2]ip address 192.168.1.97 27

R4上相关配置

<R4>sys
Enter system view, return user view with Ctrl+Z.
[R4]int g0/0/0
[R4-GigabitEthernet0/0/0]ip add	
[R4-GigabitEthernet0/0/0]ip address 192.168.1.10 30

[R4]int g 0/0/1
[R4-GigabitEthernet0/0/1]ip add	
[R4-GigabitEthernet0/0/1]ip address 192.168.1.14 30

[R4]int g 0/0/2
[R4-GigabitEthernet0/0/2]ip add	
[R4-GigabitEthernet0/0/2]ip address 192.168.1.17 30

[R4]int g4/0/0
[R4-GigabitEthernet4/0/0]ip add 	
[R4-GigabitEthernet4/0/0]ip address 192.168.1.21 30

[R4]int l0
[R4-LoopBack0]ip add	
[R4-LoopBack0]ip address 192.168.1.129 28

[R4]int l1 
[R4-LoopBack1]ip add	
[R4-LoopBack1]ip address 192.168.1.145 28

R5上相关配置

<R5>sys
Enter system view, return user view with Ctrl+Z.
[R5]int g0/0/0
[R5-GigabitEthernet0/0/0]ip add	
[R5-GigabitEthernet0/0/0]ip address 192.168.1.18 30

[R5]int g 0/0/1
[R5-GigabitEthernet0/0/1]ip add	
[R5-GigabitEthernet0/0/1]ip address 12.0.0.1 24

[R5]int g 0/0/2
[R5-GigabitEthernet0/0/2]ip add	
[R5-GigabitEthernet0/0/2]ip address 192.168.1.22 30

[R5]int l0
[R5-LoopBack0]ip add	
[R5-LoopBack0]ip address 192.168.1.161 27

R6上相关配置

<R6>sys
Enter system view, return user view with Ctrl+Z.
[R6]
[R6]int g0/0/0
[R6-GigabitEthernet0/0/0]ip add	
[R6-GigabitEthernet0/0/0]ip address 12.0.0.2 24

[R6]int l0
[R6-LoopBack0]ip add 1.0.0.1 24

2、配置DHCP服务

<R3>sys
[R3]dhcp enable 
[R3]ip pool hh
[R3-ip-pool-hh]network 192.168.1.96 mask 27
[R3-ip-pool-hh]gateway-list 192.168.1.97
[R3-ip-pool-hh]dns-list 144.144.144.144 8.8.8.8
[R3-ip-pool-hh]int g 0/0/2	
[R3-GigabitEthernet0/0/2]dhcp select global 

 查看pcIP地址

3、配置全网通

（1）配置私网通

R1上相关配置

[R1]ip route-static 192.168.1.64 27 192.168.1.2
[R1]ip route-static 192.168.1.8 30 192.168.1.2
[R1]ip route-static 192.168.1.128 27 192.168.1.2
[R1]ip route-static 192.168.1.128 27 192.168.1.6
[R1]ip route-static 192.168.1.16 30 192.168.1.6
[R1]ip route-static 192.168.1.16 30 192.168.1.2
[R1]ip route-static 192.168.1.20 30 192.168.1.2
[R1]ip route-static 192.168.1.20 30 192.168.1.6
[R1]ip route-static 192.168.1.160 27 192.168.1.6
[R1]ip route-static 192.168.1.160 27 192.168.1.2
[R1]ip route-static 192.168.1.12 30 192.168.1.6
[R1]ip route-static 192.168.1.96 27 192.168.1.6

R2上相关配置

[R2]ip route-static 192.168.1.128 27 192.168.1.10
[R2]ip route-static 192.168.1.160 27 192.168.1.10
[R2]ip route-static 192.168.1.16 30 192.168.1.10
[R2]ip route-static 192.168.1.20 30 192.168.1.10
[R2]ip route-static 192.168.1.12 30 192.168.1.10
[R2]ip route-static 192.168.1.96 27 192.168.1.10
[R2]ip route-static 192.168.1.96 27 192.168.1.1
[R2]ip route-static 192.168.1.4 30 192.168.1.1
[R2]ip route-static 192.168.1.32 27 192.168.1.1

R3上相关配置

[R3]ip route-static 192.168.1.32 27 192.168.1.5
[R3]ip route-static 192.168.1.0 30 192.168.1.5
[R3]ip route-static 192.168.1.64 27 192.168.1.5
[R3]ip route-static 192.168.1.64 27 192.168.1.14
[R3]ip route-static 192.168.1.8 30 192.168.1.14
[R3]ip route-static 192.168.1.128 27 192.168.1.14
[R3]ip route-static 192.168.1.16 30 192.168.1.14
[R3]ip route-static 192.168.1.20 30 192.168.1.14
[R3]ip route-static 192.168.1.160 27 192.168.1.14

R4上相关配置

[R4]ip route-static 192.168.1.160 27 192.168.1.18
[R4]ip route-static 192.168.1.160 27 192.168.1.22
[R4]ip route-static 192.168.1.96 27 192.168.1.13
[R4]ip route-static 192.168.1.4 30 192.168.1.13
[R4]ip route-static 192.168.1.32 27 192.168.1.13
[R4]ip route-static 192.168.1.32 27 192.168.1.9
[R4]ip route-static 192.168.1.0 30 192.168.1.9
[R4]ip route-static 192.168.1.64 27 192.168.1.9

R5上相关配置

[R5]ip route-static 192.168.1.128 27 192.168.1.17
[R5]ip route-static 192.168.1.128 27 192.168.1.21
[R5]ip route-static 192.168.1.12 30 192.168.1.21
[R5]ip route-static 192.168.1.12 30 192.168.1.17
[R5]ip route-static 192.168.1.96 27 192.168.1.17
[R5]ip route-static 192.168.1.96 27 192.168.1.21
[R5]ip route-static 192.168.1.4 30 192.168.1.21
[R5]ip route-static 192.168.1.4 30 192.168.1.17
[R5]ip route-static 192.168.1.32 27 192.168.1.17
[R5]ip route-static 192.168.1.32 27 192.168.1.21
[R5]ip route-static 192.168.1.0 30 192.168.1.21
[R5]ip route-static 192.168.1.0 30 192.168.1.17
[R5]ip route-static 192.168.1.64 27 192.168.1.17
[R5]ip route-static 192.168.1.64 27 192.168.1.21
[R5]ip route-static 192.168.1.8 30 192.168.1.21
[R5]ip route-static 192.168.1.8 30 192.168.1.17

（2）配置公网通

[R5]ip route-static 0.0.0.0 0 12.0.0.2

（2）防环

R1上相关配置

[R1]ip route-static 192.168.1.32 27 NULL 0

R2上相关配置

[R2]ip route-static 192.168.1.64 27 NULL 0

R4上相关配置 

[R4]ip route-static 192.168.1.128 27 NULL 0

（3）配置nat

[R5]acl 2000
[R5-acl-basic-2000]ru	
[R5-acl-basic-2000]rule per	
[R5-acl-basic-2000]rule permit sou	
[R5-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255
[R5-acl-basic-2000]q
[R5]int g 0/0/1
[R5-GigabitEthernet0/0/1]nat ou	
[R5-GigabitEthernet0/0/1]nat outbound 2000

4、配置telnet

[R1]aaa
[R1-aaa]local-user hk password cipher hk123456 privilege level 15
[R1-aaa]local-user hk service-type telnet 
[R1-aaa]q

[R1]user-interface vty 0 4
[R1-ui-vty0-4]auth	
[R1-ui-vty0-4]authentication-mode aaa

5、修改优先级

[R5]ip route-static 192.168.1.0 30 192.168.1.21 preference 61
[R5]ip route-static 192.168.1.8 30 192.168.1.21 preference 61
[R5]ip route-static 192.168.1.12 30 192.168.1.21 preference 61
[R5]ip route-static 192.168.1.4 30 192.168.1.21 preference 61
[R5]ip route-static 192.168.1.32 27 192.168.1.21 preference 61
[R5]ip route-static 192.168.1.64 27 192.168.1.21 preference 61
[R5]ip route-static 192.168.1.96 27 192.168.1.21 preference 61
[R5]ip route-static 192.168.1.128 27 192.168.1.21 preference 61

 测试

<R1>tracert 192.168.1.161