网络综合设计

##前言
随便记录一下吧！交换机以及路由的配置。
##eNSP模拟
首先我们搭建如下网络拓扑

PC机的配置

PC1
vlan10
ip : 192.168.10.1
默认网关：192.168.10.254

PC2
vlan20
ip : 192.168.20.1
默认网关：192.168.20.254

PC3
vlan10
ip : 192.168.10.2
默认网关：192.168.10.254

PC4
vlan20
ip : 192.168.20.2
默认网关：192.168.20.254

PC6
internet
ip : 192.168.100.1
默认网关: 192.168.100.254

PC8
vlan 10
ip : 192.168.10.3
默认网关: 192.168.10.254

交换机的配置

二层交换机

LSW1
vlan 10 20
interface GigabitEthernet 0/0/2
port link-type access
port default vlan 10
quit
interface GigabitEthernet 0/0/3
port link-type access
port default vlan 20
quit
interface GigabitEthernet 0/0/1
port link-type trunk
port trunk allow-pass vlan all
quit

LSW2
vlan 10 20
interface GigabitEthernet 0/0/1
port link-type access
port default vlan 10
quit
interface GigabitEthernet 0/0/2
port link-type access
port default vlan 20
quit
interface GigabitEthernet 0/0/3
port link-type trunk
port trunk allow-pass vlan all
quit

三层交换机

LSW3
vlan 10 20 200
interface GigabitEthernet 0/0/1
port link-type trunk
port trunk allow-pass vlan all
quit
interface GigabitEthernet 0/0/2
port link-type trunk
port trunk allow-pass vlan all
quit
interface GigabitEthernet 0/0/3
port link-type access
port default vlan 200
quit
interface Vlanif 200
ip address 192.168.200.1 24
quit
ip route-static 0.0.0.0 0.0.0.0 192.168.200.2
quit

路由器的配置

AR1
interface GigabitEthernet 0/0/0
ip address 192.168.200.2 24
quit
interface GigabitEthernet 0/0/1
ip address 192.168.100.254 24
quit
ip route-static 192.168.10.0 24 192.168.200.1
ip route-static 192.168.20.0 24 192.168.200.1

访问控制列表ACL

首先我们可以查看AR2200的产品手册

acl number 2000
rule 5 deny source 192.168.10.0 0.0.0.255
quit
acl number 2001
rule 5 permit source 192.168.20.0 0.0.0.255
quit
acl number 3001
rule 5 deny tcp source 192.168.200.0 0.0.0.255 destination 0.0.0.0 0 destination-port eq telnet
quit
interface GigabitEthernet 0/0/0
traffic-filter inbound acl 2001
quit
interface GigabitEthernet 0/0/1
traffic-filter inbound acl 3001
quit

常用的其他命令

display vlan 显示Vlan
display ip routing-table 显示路由表
display ip interface brief 显示所有的接口
display acl all 显示所有的acl表项
clear configuration interface GigabitEthernet 0/0/1
undo shutdown 开启已关闭的接口

注意事项

一些sys,quit之类的命令可能不是很全，自己注意！
#总结
其实是一些比较简单的东西，只是没什么时间了解罢了！