1.网络中有3个部门,均可自动获取地址
2.各部门可互相访问,也可访问内网服务器172.16.100.1
3.内网服务器对外发布的地址为64.1.1.3 互联网用户可以访问这台服务器
4.内网服务器的域名是www.baidu.com ,各PC可通过域名访问
LSW1
inter e 0/0/2
port link-t acc
inter e 0/0/1
port link-t acc
LSW2
vlan be 20 30
inter e 0/0/1
port link-t trunk
por tr all vlan all
inter e0/0/2
port link-t acc
por de vlan 20
inter e0/0/3
port link-t acc
por de vlan 30
LSW3
vlan ba 10 20 30 40 50
inter g 0/0/3
port link-t acc
port de vlan 10
inter g 0/0/2
port link-t acc
port de vlan 40
inter g 0/0/4
port link-t tr
port tr all vlan all
inter g 0/0/1
port link-t acc
port de vlan 50
dhcp enable
inter vlanif 50
ip add 10.10.10.1 24
inter vlanif 40
ip add 172.16.100.254 24
dhcp select interface
dhcp server dns-list 172.16.100.1
inter vlanif 10
ip add 192.168.10.254 24
dhcp select interface
dhcp server dns-list 172.16.100.1
inter vlanif 20
ip add 192.168.20.254 24
dhcp select interface
dhcp server dns-list 172.16.100.1
inter vlanif 30
ip add 192.168.30.254 24
dhcp select interface
dhcp server dns-list 172.16.100.1
ip rou s 0.0.0.0 0.0.0.0 10.10.10.2
AR4
inter g 0/0/0
ip add 10.10.10.2 24
inter g 0/0/1
ip add 64.1.1.1 24
ip rou s 192.168.0.0 255.255.0.0 10.10.10.1
ip rou s 172.16.100.0 24 10.10.10.1
nat server global 64.1.1.3 inside 172.16.100.1
AR5
inter g 0/0/0
ip add 64.1.1.10 24
inter g 0/0/1
ip add 8.8.8.1 24
inter e 0/0/0
ip add 9.9.9.1 24
AR1
acl 2000
rul per sou 192.168.0.0 0.0.255.255
nat add 1 64.1.1.5 64.1.1.6
inter g 0/0/1
nat ou 2000 add 1
acl 3000
rul den sou 192.168.10.0 255.255.255.0
rul per ip sou any
inter g0/0/0
tr in acl 3000