第一步拓扑设计 将192.168.1.0/24向主机位借三位 因为是六个用户 所以划分为 192.168.1.0/27
192.168.1.32/27 192.168.1.64/27 192.168.1.96/27 192.168.1.128/27 192.168.1.160/27 192.168.1.192/27 192.168.1.224/27 剩下最后两个作为预留备用
R1、R2、 R4上分别有两个用户 分别各再借一位
如图有六个骨干所以将192.168.1.0/27划分为 192.168.1.0/30 192.168.1.4/30 192.168.1.8/30 192.168.1.12/30 192.168.1.16/30 192.168.1.20/30 192.168.1.24/30 192.168.1.28/30 使用之中六个作为骨干IP地址 剩下的两个预留备用
第二步进行路由配置以R2为例 先进行环回配置再配置端口的ip
R2
[Huawei]int LoopBack 0
[Huawei-LoopBack0]ip add 192.168.1.65 28
[Huawei-LoopBack0]int loop1
[Huawei-LoopBack1]ip add 192.168.1.81 28
[Huawei-LoopBack1]display ip interface brief
Interface IP Address/Mask Physical Protocol
Ethernet0/0/0 unassigned down down
Ethernet0/0/1 unassigned down down
GigabitEthernet0/0/0 unassigned up down
GigabitEthernet0/0/1 unassigned down down
GigabitEthernet0/0/2 unassigned up down
GigabitEthernet0/0/3 unassigned down down
LoopBack0 192.168.1.65/28 up up(s)
LoopBack1 192.168.1.81/28 up up(s)
NULL0 unassigned up up(s)
Serial0/0/0 unassigned down down
Serial0/0/1 unassigned down down
Serial0/0/2 unassigned down down
Serial0/0/3 unassigned down down
[Huawei]int g0/0/0
[Huawei-GigabitEthernet0/0/0]ip add 192.168.1.2 30
[Huawei-GigabitEthernet0/0/0]int g0/0/2
[Huawei-GigabitEthernet0/0/2]ip add 192.168.1.9 30
[Huawei-GigabitEthernet0/0/2]display ip interface brief
Interface IP Address/Mask Physical Protocol
Ethernet0/0/0 unassigned down down
Ethernet0/0/1 unassigned down down
GigabitEthernet0/0/0 192.168.1.2/30 up up
GigabitEthernet0/0/1 unassigned down down
GigabitEthernet0/0/2 192.168.1.9/30 up up
GigabitEthernet0/0/3 unassigned down down
LoopBack0 192.168.1.65/28 up up(s)
LoopBack1 192.168.1.81/28 up up(s)
NULL0 unassigned up up(s)
Serial0/0/0 unassigned down down
Serial0/0/1 unassigned down down
Serial0/0/2 unassigned down down
Serial0/0/3 unassigned down down
第三步进行缺省路由配置 从R5开始像R6 R4到R5 R1有两条一条走上一条走下 R4有两条路百兆口作为备用所以优先级写为61
R1
ip route-static 0.0.0.0 0.0.0.0 192.168.1.2
ip route-static 0.0.0.0 0.0.0.0 192.168.1.6
R2
[Huawei]ip route-static 0.0.0.0 0 192.168.1.10
R3
[Huawei]ip route-static 0.0.0.0 0 192.168.1.14
R4
[Huawei]ip route-static 0.0.0.0 0 192.168.1.18
[Huawei]ip route-static 0.0.0.0 0 192.168.1.22 preference 61
R5
ip route-static 0.0.0.0 0.0.0.0 56.1.1.2
不能只有一条缺省 不然只有去的路由没有回来的地址 将剩下的路由补齐
R1
ip route-static 192.168.1.8 255.255.255.252 192.168.1.2
ip route-static 192.168.1.12 255.255.255.252 192.168.1.6
ip route-static 192.168.1.64 255.255.255.224 192.168.1.2
ip route-static 192.168.1.96 255.255.255.224 192.168.1.6
R2
ip route-static 192.168.1.4 255.255.255.252 192.168.1.1
ip route-static 192.168.1.12 255.255.255.252 192.168.1.10
ip route-static 192.168.1.32 255.255.255.224 192.168.1.1
ip route-static 192.168.1.96 255.255.255.224 192.168.1.1
R3
ip route-static 192.168.1.0 255.255.255.252 192.168.1.5
ip route-static 192.168.1.32 255.255.255.224 192.168.1.5
ip route-static 192.168.1.64 255.255.255.224 192.168.1.5
ip route-static 192.168.1.64 255.255.255.224 192.168.1.14
R4
ip route-static 192.168.1.0 255.255.255.224 192.168.1.13
ip route-static 192.168.1.0 255.255.255.252 192.168.1.9
ip route-static 192.168.1.4 255.255.255.252 192.168.1.13
ip route-static 192.168.1.32 255.255.255.224 192.168.1.9
ip route-static 192.168.1.32 255.255.255.224 192.168.1.13
ip route-static 192.168.1.64 255.255.255.224 192.168.1.9
ip route-static 192.168.1.96 255.255.255.224 192.168.1.13
R5
ip route-static 0.0.0.0 0.0.0.0 56.1.1.2
ip route-static 192.168.1.0 255.255.255.252 192.168.1.17
ip route-static 192.168.1.0 255.255.255.252 192.168.1.21 preference 61
ip route-static 192.168.1.4 255.255.255.252 192.168.1.17
ip route-static 192.168.1.4 255.255.255.252 192.168.1.21 preference 61
ip route-static 192.168.1.8 255.255.255.252 192.168.1.17
ip route-static 192.168.1.8 255.255.255.252 192.168.1.21 preference 61
ip route-static 192.168.1.12 255.255.255.252 192.168.1.17
ip route-static 192.168.1.12 255.255.255.252 192.168.1.21 preference 61
ip route-static 192.168.1.32 255.255.255.224 192.168.1.17
ip route-static 192.168.1.32 255.255.255.224 192.168.1.21 preference 61
ip route-static 192.168.1.64 255.255.255.224 192.168.1.17
ip route-static 192.168.1.64 255.255.255.224 192.168.1.21 preference 61
ip route-static 192.168.1.96 255.255.255.224 192.168.1.17
ip route-static 192.168.1.96 255.255.255.224 192.168.1.21 preference 61
ip route-static 192.168.1.128 255.255.255.224 192.168.1.17
根据第四问给R3配一个·dhcp池来自动获取ip
[Huawei]dhcp enable
[Huawei]ip pool pool1
Info:It's successful to create an IP address pool.
[Huawei-ip-pool-pool1]network 192.168.1.96 mask 27
[Huawei-ip-pool-pool1]gateway-list 192.168.1.97
[Huawei-ip-pool-pool1]dns-list 114.114.114.114 8.8.8.8
[Huawei]int g0/0/2
[Huawei-GigabitEthernet0/0/2]dhcp select global
检查是否成功 pc1
pc2
到这一步为止R1-R5全网可达
R1
[Huawei]ping 192.168.1.161
PING 192.168.1.161: 56 data bytes, press CTRL_C to break
Reply from 192.168.1.161: bytes=56 Sequence=1 ttl=253 time=140 ms
Reply from 192.168.1.161: bytes=56 Sequence=2 ttl=253 time=90 ms
Reply from 192.168.1.161: bytes=56 Sequence=3 ttl=253 time=80 ms
Reply from 192.168.1.161: bytes=56 Sequence=4 ttl=253 time=60 ms
Reply from 192.168.1.161: bytes=56 Sequence=5 ttl=253 time=70 ms
--- 192.168.1.161 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 60/88/140 ms
R4
<Huawei>ping 192.168.1.4
PING 192.168.1.4: 56 data bytes, press CTRL_C to break
Reply from 192.168.1.6: bytes=56 Sequence=1 ttl=255 time=50 ms
Reply from 192.168.1.6: bytes=56 Sequence=2 ttl=255 time=10 ms
Reply from 192.168.1.6: bytes=56 Sequence=3 ttl=255 time=40 ms
Reply from 192.168.1.6: bytes=56 Sequence=4 ttl=255 time=50 ms
Reply from 192.168.1.6: bytes=56 Sequence=5 ttl=255 time=30 ms
--- 192.168.1.4 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 10/36/50 ms
要想和R6通网只需要加一个nat网卡
[Huawei]acl 2000
[Huawei-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255
[Huawei-acl-basic-2000]int g0/0/1
[Huawei-GigabitEthernet0/0/1]nat outbound 2000
实现全网可达 第五问要求避免成环所以要在R1、2、4做空接口防环
R1
ip route-static 192.168.1.32 255.255.255.224 NULL0
R2
ip route-static 192.168.1.64 255.255.255.224 NULL0
R4
ip route-static 192.168.1.128 255.255.255.224 NULL0
第七问telnat就是做一个端口映射 将R6的端口映射到R1 的23端口
先开启R1的远程登陆
R1
[Huawei]aaa
[Huawei-aaa]local-user cjl privilege level 15 password cipher love
[Huawei-aaa]local-user cjl service-type telnet
[Huawei]user-interface vty 0 4
[Huawei-ui-vty0-4]authentication-mode aaa
R5
[Huawei-GigabitEthernet0/0/1]nat server protocol tcp global current-interface 23 inside
192.168.1.33 23