华为静态实验HCIP

华为静态实验

本图所用模拟器为ENSP
要求：1.R4为ISP，只要配置ip地址，不能再进行其他任何配置
2.R1-R3为内网，地址192.168.1.0/24合理分配
3.PC可以通过不同的域名来访问内网的两台服务器，两台服务器为不同的公有地址
4.内网的PC可以正常访问外网PC
5.R2-R3之间浮动静态路由备份路径
6.R4 Telnet R3实际登录R1
7.减少路由条目数量，避免环路

1.首先进行IP地址及子网的划分：已知R3右边的部分IP地址已知，所以只需要配置R3左边部分，
以及R4交换机下面的DNS及PC2.
192.168.1.0/27—骨干— 192.168.1.0/30（R1-R2）
192.168.1.4/30(R2-R3上部)
192.168.1.8/30(R2-R3下部)
192.168.1.32/27----R1 下部交换机所连的网段
192.168.1.64/27----R1环回
192.168.1.64/28
192.168.1.80/28
192.168.1.96/27----R2环回
192.168.1.96/28
192.168.1.112/28
Server1的IP为192.168.1.34 255.255.255.224 gateway为192.168.1.33
Server2的IP为192.168.1.35 255.255.255.224 gateway为192.168.1.33
DNS服务器的IP为1.1.1.3 255.255.255.0 gateway为1.1.1.1
PC2 的IP为1.1.1.2 255.255.255.0 gateway为1.1.1.1
PC1通过DHCP获得IP地址
3.开始配置
R1：
system-view
[Huawei]sysname r1
[r1]interface GigabitEthernet 0/0/0
[r1-GigabitEthernet0/0/0]ip address 192.168.1.1 255.255.255.252
[r1-GigabitEthernet0/0/0]quit
[r1]interface GigabitEthernet 0/0/01
[r1-GigabitEthernet0/0/1]ip address 192.168.1.33 255.255.255.224
[r1-GigabitEthernet0/0/1]quit
[r1]dhcp enable
[r1]ip pool a
[r1-ip-pool-a]gateway-list 192.168.1.33
[r1-ip-pool-a]network 192.168.1.32 mask 255.255.255.224
[r1-ip-pool-a]dns-list 114.114.114.114
[r1-GigabitEthernet0/0/1]dhcp select global
[r1-GigabitEthernet0/0/1]q
[r1]ip route-static 0.0.0.0 0 192.168.1.2
[r1]user-interface vty 0 4
[r1-ui-vty0-4]authentication-mode password
Please configure the login password (maximum length 16):123
[r1-ui-vty0-4]user privilege level 15
[r1-ui-vty0-4]q

R2:
system-view
[Huawei]sysname r2
[r2]interface g0/0/0
[r2-GigabitEthernet0/0/0]ip address 192.168.1.2 255.255.255.252
[r2-GigabitEthernet0/0/0]q
[r2]interface g0/0/1
[r2-GigabitEthernet0/0/1]ip address 192.168.1.9 255.255.255.252
[r2-GigabitEthernet0/0/1]q
[r2]interface g0/0/2
[r2-GigabitEthernet0/0/2]ip address 192.168.1.5 255.255.255.252
[r2-GigabitEthernet0/0/2]q
[r2]interface LoopBack 1
[r2-LoopBack1]ip address 192.168.1.65 255.255.255.240
[r2-LoopBack1]q
[r2]interface LoopBack 2
[r2-LoopBack2]ip address 192.168.1.81 255.255.255.240
[r2-LoopBack2]q
[r2]ip route-static 0.0.0.0 0 192.168.1.10
[r2]ip route-static 0.0.0.0 0 192.168.1.6 preference 100
[r2]ip route-static 192.168.1.32 255.255.255.224 192.168.1.1

R3:
system-view
[Huawei]sysname r3
[r3]interface g0/0/0
[r3-GigabitEthernet0/0/0]ip address 192.168.1.10 255.255.255.252
[r3-GigabitEthernet0/0/0]q
[r3]interface g0/0/1
[r3-GigabitEthernet0/0/1]ip add 192.168.1.6 255.255.255.252
[r3-GigabitEthernet0/0/1]q
[r3]int
[r3]interface g0/0/2
[r3-GigabitEthernet0/0/2]ip address 12.1.1.1 255.255.255.0
[r3-GigabitEthernet0/0/2]q
[r3]interface LoopBack 1
[r3-LoopBack1]ip add 192.168.1.97 255.255.255.240
[r3-LoopBack1]q
[r3]int LoopBack 2
[r3-LoopBack2]ip add 192.168.1.113 255.255.255.240
[r3-LoopBack2]q
[r3]ip route-static 0.0.0.0 0 12.1.1.2
[r3]ip route-static 192.168.1.32 255.255.255.224 192.168.1.9
[r3]ip route-static 192.168.1.0 255.255.255.252 192.168.1.9
[r3]ip route-static 192.168.1.64 255.255.255.224 192.168.1.9
[r3]ip route-static 192.168.1.32 255.255.255.224 192.168.1.5 preference 100
[r3]ip route-static 192.168.1.0 255.255.255.252 192.168.1.5 preference 100
[r3]ip route-static 192.168.1.64 255.255.255.224 192.168.1.5 preference 100
[r3]ACL 2000
[r3-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255
[r3-acl-basic-2000]q
[r3]int g0/0/2
[r3-GigabitEthernet0/0/2]nat outbound 2000
[r3-GigabitEthernet0/0/2]q
[r3]int GigabitEthernet 0/0/02
[r3-GigabitEthernet0/0/2]nat static global 12.1.1.4 inside 192.168.1.34
[r3-GigabitEthernet0/0/2]nat static global 12.1.1.5 inside 192.168.1.35
[r3-GigabitEthernet0/0/2]q
[r3]interface g0/0/02
[r3-GigabitEthernet0/0/2]nat server protocol tcp global current-interface 23 inside 192.168.1.1 23
Are you sure to continue?[Y/N]:y

R4：
system-view
[Huawei]sysname isp
[isp]int g0/0/0
[isp-GigabitEthernet0/0/0]ip add 12.1.1.2 255.255.255.0
[isp-GigabitEthernet0/0/0]q
[isp]int g0/0/01
[isp-GigabitEthernet0/0/1]ip add 1.1.1.1 255.255.255.0
[isp-GigabitEthernet0/0/1]q