1- R6为isp,接口IP地址均为公有地址;该设备只能配置IP地址,之后不能再对其进行任何配置;
2- R1-R5为局域网,私有IP地址192.168.1.0/24,请合理分配;
3-所有路由器上环回,均代表连接用户的接口;
4-R3下的两台PC通过DHCP自动获取IP地址
5-选路最佳,路由表尽量小,避免环路;
6-R1-R5均可访问R6的环回
7-R6telnetR5的公有IP地址时,实际登陆到R1上
8-R4与R5正常通过1000链路,故障时通过100兆链路;
IP划分如下:
操作思路:1.规划IP
2.配置路由IP以及环回口IP,再做dhcp配置PC1和PC2的IP
3.配置静态路由,做到R1-R5内网全通,注意配置时要防环以及负载均衡
4.R5-R6采用NAT
5.配置telnel,采用NAT的端口映射来实现第7个要求
6.采用浮动静态路由实现第8个要求。
具体配置如下:
R1
ip route-static 0.0.0.0 0.0.0.0 192.168.1.2
ip route-static 0.0.0.0 0.0.0.0 192.168.1.13
ip route-static 192.168.1.4 255.255.255.252 192.168.1.2
ip route-static 192.168.1.8 255.255.255.252 192.168.1.13
ip route-static 192.168.1.16 255.255.255.252 192.168.1.2
ip route-static 192.168.1.16 255.255.255.252 192.168.1.13
ip route-static 192.168.1.32 255.255.255.224 NULL0
ip route-static 192.168.1.64 255.255.255.224 192.168.1.2
ip route-static 192.168.1.96 255.255.255.224 192.168.1.2
ip route-static 192.168.1.96 255.255.255.224 192.168.1.13
ip route-static 192.168.1.128 255.255.255.240 192.168.1.13
ip route-static 192.168.1.144 255.255.255.240 192.168.1.2
ip route-static 192.168.1.144 255.255.255.240 192.168.1.13
authentication-mode aaa
user-interface vty 0 4
local-user huawei service-type telnet
local-user huawei privilege level 15 password cipher ******
aaa
R2
[R2]int LoopBack 0
[R2-LoopBack0]ip address 192.168.1.65 28
[R2-LoopBack0]q
[R2]int LoopBack 1
[R2-LoopBack1]ip address 192.168.1.81 28
[R2-LoopBack1]q
[R2]int g 0/0/0
[R2-GigabitEthernet0/0/0]ip address 192.168.1.2 30
[R2-GigabitEthernet0/0/0]int g 0/0/1
[R2-GigabitEthernet0/0/1]ip address 192.168.1.5 30
[R2-GigabitEthernet0/0/1]q
[R2]ip route-static 192.168.1.12 30 192.168.1.1
[R2]ip route-static 192.168.1.128 28 192.168.1.1
[R2]ip route-static 192.168.1.128 28 192.168.1.6
[R2]ip route-static 192.168.1.8 30 192.168.1.6
[R2]ip route-static 192.168.1.16 30 192.168.1.6
[R2]ip route-static 192.168.1.32 27 192.168.1.1
[R2]ip route-static 192.168.1.96 27 192.168.1.6
[R2]ip route-static 192.168.1.144 28 192.168.1.6
[R2]ip route-static 0.0.0.0 0.0.0.0 192.168.1.6
[R2]ip route-static 192.168.1.64 27 null 0
R3
[R3]int LoopBack 0
[R3-LoopBack0]q
[R3]int g 0/0/0
[R3-GigabitEthernet0/0/0]ip ad
[R3-GigabitEthernet0/0/0]ip address 192.168.1.13 30
[R3-GigabitEthernet0/0/0]int g 0/0/1
[R3-GigabitEthernet0/0/1]ip address 192.168.1.10 30
[R3-GigabitEthernet0/0/1]q
[R3]dhcp enable
[R3]ip policy-based-route
[R3]ip pool huawei
[R3-ip-pool-huawei]network 192.168.1.128 mask 28
[R3-ip-pool-huawei]gateway-list 192.168.1.129
[R3-ip-pool-huawei]q
[R3]int g 0/0/2
[R3-GigabitEthernet0/0/2]dhcp select global
[R3-GigabitEthernet0/0/2]ip address 192.168.1.129 28
[R3-GigabitEthernet0/0/2]q
[R3]ip route-static 192.168.1.0 30 192.168.1.14
[R3]ip route-static 192.168.1.4 30 192.168.1.9
[R3]ip route-static 192.168.1.16 30 192.168.1.9
[R3]ip route-static 192.168.1.96 27 192.168.1.9
[R3]ip route-static 192.168.1.64 27 192.168.1.9
[R3]ip route-static 192.168.1.144 28 192.168.1.9
[R3]ip route-static 192.168.1.32 27 192.168.1.14
[R3]ip route-static 192.168.1.64 27 192.168.1.14
[R3]ip route-static 0.0.0.0 0.0.0.0 192.168.1.9
[R3]ip route-static 192.168.1.128 28 null 0
R4
[R4]int g 0/0/0
[R4-GigabitEthernet0/0/0]ip address 192.168.1.6 30
[R4-GigabitEthernet0/0/0]int g 0/0/1
[R4-GigabitEthernet0/0/1]ip address 192.168.1.17 30
[R4-GigabitEthernet0/0/1]int g 0/0/2
[R4-GigabitEthernet0/0/2]ip address 192.168.1.9 30
[R4-GigabitEthernet0/0/2]q
[R4]int LoopBack 0
[R4-LoopBack0]ip address 192.168.1.97 28
[R4-LoopBack0]q
[R4]int LoopBack 1
[R4-LoopBack1]ip address 192.168.1.113 28
[R4-LoopBack1]q
[R4]ip route-static 192.168.1.0 30 192.168.1.5
[R4]ip route-static 192.168.1.12 30 192.168.1.10
[R4]ip route-static 192.168.1.144 28 192.168.1.18
[R4]ip route-static 192.168.1.64 27 192.168.1.5
[R4]ip route-static 192.168.1.32 27 192.168.1.5
[R4]ip route-static 192.168.1.32 27 192.168.1.10
[R4]ip route-static 192.168.1.128 28 192.168.1.10
[R4]ip route-static 0.0.0.0 0.0.0.0 192.168.1.18
[R4]ip route-static 192.168.1.96 27 null 0
R5
[R5]int LoopBack 0
[R5-LoopBack0]ip address 192.168.1.145 28
[R5]int g 0/0/1
[R5-GigabitEthernet0/0/1]ip address 192.168.1.18 30
[R5-GigabitEthernet0/0/1]int g 0/0/2
[R5-GigabitEthernet0/0/2]ip address 1.1.1.1 24
[R5-GigabitEthernet0/0/2]q
[R5]ip route-static 192.168.1.0 30 192.168.1.17
[R5]ip route-static 192.168.1.4 30 192.168.1.17
[R5]ip route-static 192.168.1.8 30 192.168.1.17
[R5]ip route-static 192.168.1.12 30 192.168.1.17
[R5]ip route-static 192.168.1.32 27 192.168.1.17
[R5]ip route-static 192.168.1.64 27 192.168.1.17
[R5]ip route-static 192.168.1.96 27 192.168.1.17
[R5]ip route-static 192.168.1.128 28 192.168.1.17
[R5]ip route-static 0.0.0.0 0.0.0.0 1.1.1.2
[R5]acl 2000
[R5-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255
[R5-acl-basic-2000]q
[R5]int g 0/0/2
[R5-GigabitEthernet0/0/2]nat outbound 2000
[R5-GigabitEthernet0/0/2]q
[R5]int g 0/0/2
[R5-GigabitEthernet0/0/2]nat static protocol tcp global current-interface 23 ins
ide 192.168.1.1 23
[R5]ip route-static 192.168.1.0 30 192.168.1.17 pr 61
[R5]ip route-static 192.168.1.4 30 192.168.1.17 pr 61
[R5]ip route-static 192.168.1.8 30 192.168.1.17 pr 61
[R5]ip route-static 192.168.1.12 30 192.168.1.17 pr 61
[R5]ip route-static 192.168.1.32 27 192.168.1.17 pr 61
[R5]ip route-static 192.168.1.64 27 192.168.1.17 pr 61
[R5]ip route-static 192.168.1.96 27 192.168.1.17 pr 61
[R5]ip route-static 192.168.1.128 28 192.168.1.17 pr 61
R6
[Huawei]int g 0/0/0
[Huawei-GigabitEthernet0/0/0]ip address 1.1.1.2 24
[Huawei-GigabitEthernet0/0/0]q
[Huawei]int LoopBack 0
[Huawei-LoopBack0]ip address 2.2.2.2 24