HCIP第一天------复习静态综合实验

题目

如图所示

思路：
1、设计网络拓扑图，进行IP地址划分
2、实施：底层所有节点拥有合法的IP地址；静态路由，动态路由，全网可达；

根据题目要求设计拓扑图并划分IP

1.IP划分

根据分析拓扑结构可得：
该实验需要划分6个网段，所以需要借3位 2^3>8 ，8个网段如下，又因为路由器上两个环回接口，在将对应路由器网段划分为2段具体如下

192.168.1.0/24划分：
192.168.1.0/27用于骨干
192.168.1.32/27用于R1的环回，继续划分192.168.1.32/28和192.168.1.48/28
192.168.1.64/27用于R2的环回，继续划分192.168.1.64/28和192.168.1.80/28
192.168.1.96/27用于R3的环回
192.168.1.128/27用于R4的环回，继续划分192.168.1.128/28和192.168.1.144/28
192.168.1.160/27用于R5的环回
192.168.1.192/27
192.168.1.224/27

2.配置

IP地址和环回地址

AR1：

[Huawei-GigabitEthernet0/0/1]ip add 192.168.1.1 30
[Huawei-GigabitEthernet0/0/1]int g0/0/0
[Huawei-GigabitEthernet0/0/0]ip add 192.168.1.5 30
[Huawei-GigabitEthernet0/0/0]int lo0
[Huawei-LoopBack0]ip add 192.168.1.33 28
[Huawei-LoopBack0]int lo1
[Huawei-LoopBack1]ip add 192.168.1.49 28
[Huawei-LoopBack1]

AR2：

[Huawei]int g0/0/0
[Huawei-GigabitEthernet0/0/0]ip add 192.168.1.2 30
[Huawei-GigabitEthernet0/0/0]int g0/0/1
[Huawei-GigabitEthernet0/0/1]ip add 192.168.1.9 30
[Huawei-GigabitEthernet0/0/1]int lo0
[Huawei-LoopBack0]ip add 192.168.1.65 28
[Huawei-LoopBack0]int lo1
[Huawei-LoopBack1]ip add 192.168.1.81 28
[Huawei-LoopBack1]

AR3：

[Huawei]int g0/0/1
[Huawei-GigabitEthernet0/0/1]ip add 192.168.1.6 30
[Huawei-GigabitEthernet0/0/1]int g0/0/0
[Huawei-GigabitEthernet0/0/0]ip add 192.168.1.13 30
[Huawei-GigabitEthernet0/0/0]int g0/0/2
[Huawei-GigabitEthernet0/0/2]ip add 192.168.1.97 27

AR4：

[Huawei]int g0/0/0
[Huawei-GigabitEthernet0/0/0]ip add 192.168.1.10 30
[Huawei-GigabitEthernet0/0/0]int g0/0/1
[Huawei-GigabitEthernet0/0/1]ip add 192.168.1.14 30
[Huawei-GigabitEthernet0/0/1]int g0/0/2
[Huawei-GigabitEthernet0/0/2]ip add 192.168.1.17 30
[Huawei-GigabitEthernet0/0/2]int g4/0/0
[Huawei-GigabitEthernet4/0/0]ip add 192.168.1.21 30
[Huawei-GigabitEthernet4/0/0]int lo0
[Huawei-LoopBack0]ip add 192.168.1.129 28
[Huawei-LoopBack0]int lo1
[Huawei-LoopBack1]ip add 192.168.1.145 28

AR5：

[Huawei]int g0/0/2
[Huawei-GigabitEthernet0/0/2]ip add 192.168.1.18 30
[Huawei-GigabitEthernet0/0/2]int g0/0/0
[Huawei-GigabitEthernet0/0/0]ip add 192.168.1.22 30
[Huawei-GigabitEthernet0/0/0]int g0/0/1
[Huawei-GigabitEthernet0/0/1]ip add 56.1.1.1 24
[Huawei-GigabitEthernet0/0/1]int lo0
[Huawei-LoopBack0]ip add 192.168.1.161 27

AR6：

[Huawei]int g0/0/0
[Huawei-GigabitEthernet0/0/0]ip add 56.1.1.2 24
[Huawei-GigabitEthernet0/0/0]int lo0
[Huawei-LoopBack0]ip add 6.6.6.6 24

dhcp动态分配

AR3路由器下面的两个主机需要DHCP动态分配

[Huawei]dhcp enable
[Huawei]ip pool qq
Info: It's successful to create an IP address pool.
[Huawei-ip-pool-qq]network 192.168.1.96 mask 27
[Huawei-ip-pool-qq]gateway-list 192.168.1.97
[Huawei-ip-pool-qq]dns-list 114.114.114.114 8.8.8.8
[Huawei-ip-pool-qq]q
[Huawei]int g0/0/2
[Huawei-GigabitEthernet0/0/2]dhcp select global

到AR6的缺省路由

AR1
[Huawei]ip route-static 0.0.0.0 0 192.168.1.2
[Huawei]ip route-static 0.0.0.0 0 192.168.1.6
AR2
[Huawei]ip route-static 0.0.0.0 0 192.168.1.10
AR3
[Huawei]ip route-static 0.0.0.0 0 192.168.1.14
AR4
[Huawei]ip route-static 0.0.0.0 0 192.168.1.18
AR5
[Huawei]ip route-static 0.0.0.0 0 56.1.1.2

最优路径

AR1：

[Huawei]ip route-static 192.168.1.64 27 192.168.1.2
[Huawei]ip route-static 192.168.1.8 30 192.168.1.2
[Huawei]ip route-static 192.168.1.96 27 192.168.1.6
[Huawei]ip route-static 192.168.1.12 30 192.168.1.6

AR2：

[Huawei]ip route-static 192.168.1.32 27 192.168.1.1
[Huawei]ip route-static 192.168.1.4 30 192.168.1.1
[Huawei]ip route-static 192.168.1.96 27 192.168.1.1
[Huawei]ip route-static 192.168.1.96 27 192.168.1.10

AR3：

[Huawei]ip route-static 192.168.1.32 27 192.168.1.5
[Huawei]ip route-static 192.168.1.0 30 192.168.1.5
[Huawei]ip route-static 192.168.1.64 27 192.168.1.5
[Huawei]ip route-static 192.168.1.64 27 192.168.1.14

AR4：

[Huawei]ip route-sta 192.168.1.0 30 192.168.1.9
[Huawei]ip route-sta 192.168.1.64 27 192.168.1.9
[Huawei]ip route-sta 192.168.1.4 30 192.168.1.13
[Huawei]ip route-sta 192.168.1.96 27 192.168.1.13
[Huawei]ip route-sta 192.168.1.32 27 192.168.1.13
[Huawei]ip route-sta 192.168.1.32 27 192.168.1.9

AR5：

[Huawei]ip route-st 192.168.1.128 27 192.168.1.17
[Huawei]ip route-st 192.168.1.64 27 192.168.1.17
[Huawei]ip route-st 192.168.1.96 27 192.168.1.17
[Huawei]ip route-st 192.168.1.32 27 192.168.1.17
[Huawei]ip route-st 192.168.1.0 30 192.168.1.17
[Huawei]ip route-st 192.168.1.4 30 192.168.1.17
[Huawei]ip route-st 192.168.1.8 30 192.168.1.17
[Huawei]ip route-st 192.168.1.12 30 192.168.1.17

NAT

在AR5路由器上配置nat

[Huawei]acl 2000
[Huawei-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255
[Huawei-acl-basic-2000]int g0/0/1
[Huawei-GigabitEthernet0/0/1]nat outbound 2000

避免环路

AR1：[Huawei]ip route-s 192.168.1.32 27 null 0
AR2：[Huawei]ip route-s 192.168.1.64 27 null 0
AR3：[Huawei]ip route-s 192.168.1.128 27 null 0

正常通过1000M，故障通过100M

思路：将100M的优先级改为61；将AR4以AR5上的g0/0/2为下一跳的路由再以AR5上的g0/0/0为下一跳，回来的时候将AR5上以r4的g0/0/2为下一跳的路由再以AR4上的g4/0/0为下一跳

AR4：[Huawei]ip route-s 0.0.0.0 0 192.168.1.22 preference 61
AR5：
[Huawei]ip route-s 192.168.1.0 255.255.255.252 192.168.1.21 pr 61 [Huawei]ip route-s 192.168.1.4 255.255.255.252 192.168.1.21 pr 61 [Huawei]ip route-s 192.168.1.8 255.255.255.252 192.168.1.21 pr 61 [Huawei]ip route-s 192.168.1.12 255.255.255.252 192.168.1.21 pr 61 [Huawei]ip route-s 192.168.1.32 255.255.255.252 192.168.1.21 pr 61 [Huawei]ip route-s 192.168.1.64 255.255.255.252 192.168.1.21 pr 61 [Huawei]ip route-s 192.168.1.96 255.255.255.252 192.168.1.21 pr 61 [Huawei]ip route-s 192.168.1.128 255.255.255.252 192.168.1.21 pr 61

AR6telnetAR5登录到AR1

AR1:

[Huawei]aaa
[Huawei-aaa]local-user cn pass cipher 123456
Info: Add a new user.
[Huawei-aaa]local-user cn service-type telnet
[Huawei-aaa]user-interface vty 0 4
[Huawei-ui-vty0-4]authentication-mode aaa

AR5：

[Huawei]int g0/0/1
[Huawei-GigabitEthernet0/0/1]nat server protocol tcp global current-interface 23
 inside 192.168.1.1 23
Warning:The port 23 is well-known port. If you continue it may cause function fa
ilure.
Are you sure to continue?[Y/N]:y

运行测试

PC2pingAR6的环回

AR1pingAR6的环回

AR6telnetAR5登录AR1