实验题目
第一步先划分路由
把划分好的结果写入图中
先配置一下各个接口的路由(注意例如r1 第一个32不能用得从第二个开始)
r1配置
第一步配置
[ r1]int LoopBack 0
[r1-LoopBack0]ip address 192.168.1.33 28
[r3-LoopBack0]ip address 192.168.1.49 28
[r1]int g0/0/0
[r1-GigabitEthernet0/0/0]ip address 192.168.1.1 30
[r1-GigabitEthernet0/0/0]int g0/0/1
[r1-GigabitEthernet0/0/1]ip address 192.168.1.5 30
第二步写缺省路由:
ip route-static 0.0.0.0 0.0.0.0 192.168.1.2
ip route-static 0.0.0.0 0.0.0.0 192.168.1.6
第三步用静态下一跳方式使处r6以外的网络联通
ip route-static 192.168.1.8 255.255.255.252 192.168.1.2
ip route-static 192.168.1.12 255.255.255.252 192.168.1.6
ip route-static 192.168.1.64 255.255.255.224 192.168.1.2
ip route-static 192.168.1.96 255.255.255.224 192.168.1.6
避免成环
ip route-static 192.168.1.32 255.255.255.224 NULL0
第四步打开远程登陆
r2配置
第一步配置
[r2]int LoopBack 0
[r2-LoopBack0]ip address 192.168.1.65 28
[r2-LoopBack0]ip address 192.168.1.81 28
[r2]int g0/0/0
[r2-GigabitEthernet0/0/0]ip address 192.168.1.2 30
[r2-GigabitEthernet0/0/0]int g0/0/1
[r2-GigabitEthernet0/0/1]ip address 192.168.1.9 30
第二步写缺省路由:
[r2]ip route-static 0.0.0.0 0 192.168.1.10
第三步用静态下一跳方式使处r6以外的网络联通
ip route-static 192.168.1.4 255.255.255.252 192.168.1.1
ip route-static 192.168.1.32 255.255.255.224 192.168.1.1
ip route-static 192.168.1.96 255.255.255.224 192.168.1.1
ip route-static 192.168.1.96 255.255.255.224 192.168.1.10
避免成环
ip route-static 192.168.1.64 255.255.255.224 NULL0
r3配置
第一步配置
[r3]int g0/0/2
[r3-GigabitEthernet0/0/2]ip address 192.168.1.97 27
[r3-GigabitEthernet0/0/2]int g0/0/0
[r3-GigabitEthernet0/0/0]ip address 192.168.1.6 30
[r3-GigabitEthernet0/0/0]int g0/0/1
[r3-GigabitEthernet0/0/1]ip address 192.168.1.13 30
第二步:使r3下两台电脑自动获取ip
[r3]dhcp enable
[r3]ip pool 1
[r3-ip-pool-1]network 192.168.1.96 mask 27
[r3-ip-pool-1]gateway-list 192.168.1.97
[r3-ip-pool-1]dns 8.8.8.8
[r3]int g0/0/2
[r3-GigabitEthernet0/0/2]dhcp select global
第三步写缺省路由:
[r3]ip route-static 0.0.0.0 0 192.168.1.14
第三步用静态下一跳方式使处r6以外的网络联通
[r3]ip route-static 192.168.1.32 27 192.168.1.5
[r3]ip route-static 192.168.1.0 30 192.168.1.5
[r3]ip route-static 192.168.1.64 27 192.168.1.5
[r3]ip route-static 192.168.1.64 27 192.168.1.14
r3登录r1
r4配置
第一步配置
[r4]int LoopBack 0
[r4-LoopBack0]ip address 192.168.1.129 28
[r4-LoopBack0]ip address 192.168.1.145 28
interface GigabitEthernet0/0/0
ip address 192.168.1.10 255.255.255.252
#
interface GigabitEthernet0/0/1
ip address 192.168.1.14 255.255.255.252
#
interface GigabitEthernet0/0/2
ip address 192.168.1.17 255.255.255.252
#
interface GigabitEthernet4/0/0
ip address 192.168.1.21 255.255.255.252
第二步写缺省路由:
ip route-static 0.0.0.0 0.0.0.0 192.168.1.18
ip route-static 0.0.0.0 0.0.0.0 192.168.1.22 preference 61
第三步用静态下一跳方式使处r6以外的网络联通
ip route-static 192.168.1.0 255.255.255.252 192.168.1.9
ip route-static 192.168.1.4 255.255.255.252 192.168.1.13
ip route-static 192.168.1.32 255.255.255.224 192.168.1.9
ip route-static 192.168.1.32 255.255.255.224 192.168.1.13
ip route-static 192.168.1.64 255.255.255.224 192.168.1.9
ip route-static 192.168.1.96 255.255.255.224 192.168.1.13
避免成环
ip route-static 192.168.1.128 255.255.255.224 NULL0
r5配置
第一步配置
interface GigabitEthernet0/0/0
ip address 192.168.1.18 255.255.255.252
#
interface GigabitEthernet0/0/1
ip address 56.1.1.1 255.255.255.0
interface GigabitEthernet0/0/2
ip address 192.168.1.22 255.255.255.252
interface LoopBack0
ip address 192.168.1.161 255.255.255.224
第二步写缺省路由:
ip route-static 0.0.0.0 0.0.0.0 56.1.1.2
第三步用静态下一跳方式使处r6以外的网络联通
[r5]ip route-static 192.168.1.0 255.255.255.252 192.168.1.21 p 61
[r5]ip route-static 192.168.1.4 255.255.255.252 192.168.1.21 p 61
[r5]ip route-static 192.168.1.8 255.255.255.252 192.168.1.21 p 61
[r5]ip route-static 192.168.1.12 255.255.255.252 192.168.1.21 p 61
[r5]ip route-static 192.168.1.32 255.255.255.224 192.168.1.21 p 61
[r5]ip route-static 192.168.1.64 255.255.255.224 192.168.1.21 p 61
[r5]ip route-static 192.168.1.96 255.255.255.224 192.168.1.21 p 61
[r5]ip route-static 192.168.1.128 255.255.255.224 192.168.1.21 p61
ip route-static 192.168.1.0 255.255.255.252 192.168.1.21 p 61
ip route-static 192.168.1.4 255.255.255.252 192.168.1.21 p 61
ip route-static 192.168.1.8 255.255.255.252 192.168.1.21 p 61
ip route-static 192.168.1.12 255.255.255.252 192.168.1.21 p 61
ip route-static 192.168.1.32 255.255.255.224 192.168.1.21 p 61
ip route-static 192.168.1.64 255.255.255.224 192.168.1.21 p 61
ip route-static 192.168.1.96 255.255.255.224 192.168.1.21 p 61
ip route-static 192.168.1.128 255.255.255.224 192.168.1.21 p61
第四步做nat使内网可以和r6联通
[r5]acl 2000
[r5-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255
[r5-acl-basic-2000]int g0/0/1
[r5-GigabitEthernet0/0/1]nat outbound 2000
第五步做端口映射 使r6登录23端口可以登录到r1上
[r5]int g0/0/1
[r5-GigabitEthernet0/0/1]nat server protocol tcp global current-interface 23 in
side 192.168.1.33 23
Warning:The port 23 is well-known port. If you continue it may cause function fa
ilure.
Are you sure to continue?[Y/N]:y
r6配置
第一步配置
[r6]interface LoopBack 0
[r6-LoopBack0]ip address 6.6.6.6 24
[r6-LoopBack0]int g0/0/0
[r6-GigabitEthernet0/0/0]ip address 56.1.1.2 24
R6telnetR5的公有IP地址时,实际登陆到R1上