ENSP(综合实验 1)

1.网络中有3个部门，均可自动获取地址

2.各部门可互相访问，也可访问内网服务器172.16.100.1

3.内网服务器对外发布的地址为64.1.1.3 互联网用户可以访问这台服务器

4.内网服务器的域名是www.baidu.com ,各PC可通过域名访问

LSW1

inter e 0/0/2

port link-t acc

inter e 0/0/1

port link-t acc

LSW2

vlan be 20 30

inter e 0/0/1 

port link-t trunk 

por tr all vlan all

inter e0/0/2

port link-t acc 

por de vlan 20

inter e0/0/3

port link-t acc 

por de vlan 30

LSW3

vlan ba 10 20 30 40 50

inter g 0/0/3

port link-t acc

port de vlan 10

inter g 0/0/2

port link-t acc

port de vlan 40

inter g 0/0/4

port link-t tr

port tr all vlan all

inter g 0/0/1

port link-t acc

port de vlan 50

dhcp enable

inter vlanif 50 

ip add 10.10.10.1 24

inter vlanif 40

ip add 172.16.100.254 24

dhcp select interface
dhcp server dns-list 172.16.100.1

inter vlanif 10

ip add 192.168.10.254 24

dhcp select interface
dhcp server dns-list 172.16.100.1

inter vlanif 20

ip add 192.168.20.254 24

dhcp select interface
dhcp server dns-list 172.16.100.1

inter vlanif 30 

ip add 192.168.30.254 24

dhcp select interface
dhcp server dns-list 172.16.100.1

ip rou s 0.0.0.0 0.0.0.0 10.10.10.2

AR4

inter g  0/0/0

ip add 10.10.10.2 24

inter g 0/0/1 

ip add 64.1.1.1 24

ip rou s 192.168.0.0 255.255.0.0 10.10.10.1

ip rou s 172.16.100.0 24 10.10.10.1

nat server global 64.1.1.3 inside 172.16.100.1

AR5

inter g 0/0/0 

ip add 64.1.1.10 24

inter g 0/0/1

ip add 8.8.8.1 24

inter e 0/0/0

ip add 9.9.9.1 24

AR1

acl 2000

rul per sou 192.168.0.0 0.0.255.255

nat add 1 64.1.1.5 64.1.1.6

inter g 0/0/1

nat ou 2000 add 1

acl 3000

rul den sou 192.168.10.0 255.255.255.0

rul per ip sou any

inter g0/0/0 

tr in acl 3000