一.划分网段
实验思路:
(1)网段划分,先划分广播域合理划分网段:可将网段划分6个网段,再取其中一个网段再划分六个网段作为骨干链路的网段(节约地址),其余网段再划分两个环回网段(存在两个环回网段的):
网段划分:
骨干链路:192.168.1.0000 0000 192.168.1.0/27
再划分六个网段:
192.168.1.0000 0000 192.168.1.0/30
192.168.1.0000 0100 192.168.1.4/30
192.168.1.0000 1000 192.168.1.8/30
192.168.1.0000 1100 192.168.1.12/30
192.168.1.0001 0000 192.168.1.16/30
192.168.1.0001 0100 192.168.1.20/30
......
直连链路:192.168.1.0010 0000 192.168.1.32/27------>192.168.1.32/28 , 192.168.1.48/28
192.168.1.0100 0000 192.168.1.64/27------>192.168.1.32/28 , 192.168.1.48/28
192.168.1.0110 0000 192.168.1.96/27
192.168.1.1000 0000 192.168.1.128/27------>192.168.1.32/28 , 192.168.1.48/28
192.168.1.1010 0000 192.168.1.160/27
192.168.1.1100 0000 192.168.1.172/27 (数量足够不再需要这两个网段)
192.168.1.1110 0000 192.168.1.204/27
二.配置网关,环回接口,静态路由与空接口
R1:
[R1]int g0/0/1
[R1-GigabitEthernet0/0/1]ip address 192.168.1.1 30
[R1-GigabitEthernet0/0/1]q
[R1]int g0/0/0
[R1-GigabitEthernet0/0/0]ip address 192.168.1.9 30
[R1-GigabitEthernet0/0/0]q
[R1]int l0
[R1-LoopBack0]ip address 192.168.1.32 28
[R1-LoopBack0]q
[R1]int l1
[R1-LoopBack1]ip address 192.168.1.49 28
R2:
[R2]int g0/0/0
[R2-GigabitEthernet0/0/0]ip ad
[R2-GigabitEthernet0/0/0]ip address 192.168.1.2 30
[R2-GigabitEthernet0/0/0]q
[R2]int g0/0/1
[R2-GigabitEthernet0/0/1]ip ad
[R2-GigabitEthernet0/0/1]ip address 192.168.1.5 30
[R2-GigabitEthernet0/0/1]q
[R2]int l0
[R2-LoopBack0]ip ad
[R2-LoopBack0]ip address 192.168.1.65 28
[R2-LoopBack0]q
[R2]int l1
[R2-LoopBack1]ip ad
[R2-LoopBack1]ip address 192.168.1.81 28
R3:
[R3]int g0/0/1
[R3-GigabitEthernet0/0/1]ip ad
[R3-GigabitEthernet0/0/1]ip address 192.168.1.14 30
[R3-GigabitEthernet0/0/1]q
[R3]int g0/0/0
[R3-GigabitEthernet0/0/0]ip ad
[R3-GigabitEthernet0/0/0]ip address 192.168.1.10 30
[R3-GigabitEthernet0/0/0]q
[R3]int g0/0/2
[R3-GigabitEthernet0/0/2]ip ad
[R3-GigabitEthernet0/0/2]ip address 192.168.1.97 27
R4:
[R4]int g0/0/1
[R4-GigabitEthernet0/0/1]ip ad
[R4-GigabitEthernet0/0/1]ip address 192.168.1.6 30
[R4-GigabitEthernet0/0/1]q
[R4]int g0/0/0
[R4-GigabitEthernet0/0/0]ip ad
[R4-GigabitEthernet0/0/0]ip address 192.168.1.13 30
[R4-GigabitEthernet0/0/0]q
[R4]int g0/0/2
[R4-GigabitEthernet0/0/2]ip ad
[R4-GigabitEthernet0/0/2]ip address 192.168.1.17 30
[R4-GigabitEthernet0/0/2]q
[R4]int g4/0/0
[R4-GigabitEthernet4/0/0]ip ad
[R4-GigabitEthernet4/0/0]ip address 192.168.1.21 30
[R4-GigabitEthernet4/0/0]q
[R4]int l0
[R4-LoopBack0]ip address 192.168.1.129 28
[R4-LoopBack0]q
[R4]int l1
[R4-LoopBack1]ip ad
[R4-LoopBack1]ip address 192.168.1.145 28
R5:
[R5]int g0/0/0
[R5-GigabitEthernet0/0/0]ip ad
[R5-GigabitEthernet0/0/0]ip address 192.168.1.18 30
[R5-GigabitEthernet0/0/0]q
[R5]int g0/0/2
[R5-GigabitEthernet0/0/2]ip ad
[R5-GigabitEthernet0/0/2]ip address 192.168.1.22 30
[R5-GigabitEthernet0/0/2]q
[R5]int g0/0/1
[R5-GigabitEthernet0/0/1]ip ad
[R5-GigabitEthernet0/0/1]ip address 12.0.0.5 24
[R5-GigabitEthernet0/0/1]q
[R5]int l0
[R5-LoopBack0]ip ad
[R5-LoopBack0]ip address 192.168.1.161 27
R6:
[R6]int g0/0/0
[R6-GigabitEthernet0/0/0]ip ad
[R6-GigabitEthernet0/0/0]ip address 12.0.0.6 24
[R6-GigabitEthernet0/0/0]q
[R6]int l0
[R6-LoopBack0]ip ad
[R6-LoopBack0]ip address 1.1.1.6 24
开启R3DHCP服务:
[R3]dhcp enable
[R3]ip pool pp
[R3-ip-pool-pp]netw
[R3-ip-pool-pp]network 192.168.1.96 mask 27
[R3-ip-pool-pp]gate
[R3-ip-pool-pp]gateway-list 192.168.1.97
[R3-ip-pool-pp]dns
[R3-ip-pool-pp]dns-list 114.114.114.114
[R3-ip-pool-pp]q
[R3]int g0/0/2
[R3-GigabitEthernet0/0/2]dhcp sel
[R3-GigabitEthernet0/0/2]dhcp select g
[R3-GigabitEthernet0/0/2]dhcp select global
二.配置全网通
R1:
[R1]ip route-static 192.168.1.4 30 192.168.1.2
[R1]ip route-static 192.168.1.16 30 192.168.1.2
[R1]ip route-static 192.168.1.16 30 192.168.1.10
[R1]ip route-static 192.168.1.20 30 192.168.1.2
[R1]ip route-static 192.168.1.20 30 192.168.1.10
[R1]ip route-static 192.168.1.12 30 192.168.1.10
[R1]ip route-static 192.168.1.64 27 192.168.1.2
[R1]ip route-static 192.168.1.96 27 192.168.1.10
[R1]ip route-static 192.168.1.128 27 192.168.1.2
[R1]ip route-static 192.168.1.128 27 192.168.1.10
[R1]ip route-static 192.168.1.160 27 192.168.1.2
[R1]ip route-static 192.168.1.160 27 192.168.1.10
R2:
[R2]ip ro
[R2]ip route
[R2]ip route-stati 192.168.1.12 30 192.168.1.6
[R2]ip route-stati 192.168.1.8 30 192.168.1.1
[R2]ip route-stati 192.168.1.128 27 192.168.1.6
[R2]ip route-stati 192.168.1.32 27 192.168.1.1
[R2]ip route-stati 192.168.1.96 27 192.168.1.1
[R2]ip route-stati 192.168.1.96 27 192.168.1.6
[R2]ip route-stati 192.168.1.16 30 192.168.1.6
[R2]ip route-stati 192.168.1.20 30 192.168.1.6
[R2]ip route-stati 192.168.1.160 27 192.168.1.6
R3:
[R3]ip ro
[R3]ip route
[R3]ip route-static 192.168.1.32 27 192.168.1.9
[R3]ip route-static 192.168.1.0 30 192.168.1.9
[R3]ip route-static 192.168.1.64 27 192.168.1.9
[R3]ip route-static 192.168.1.64 27 192.168.1.13
[R3]ip route-static 192.168.1.4 30 192.168.1.13
[R3]ip route-static 192.168.1.16 30 192.168.1.13
[R3]ip route-static 192.168.1.20 30 192.168.1.13
[R3]ip route-static 192.168.1.160 27 192.168.1.13
[R3]ip route-static 192.168.1.128 27 192.168.1.13
R4:
[R4]ip ro
[R4]ip route
[R4]ip route-static 192.168.1.64 27 192.168.1.5
[R4]ip route-static 192.168.1.96 27 192.168.1.14
[R4]ip route-static 192.168.1.8 30 192.168.1.14
[R4]ip route-static 192.168.1.0 30 192.168.1.5
[R4]ip route-static 192.168.1.32 27 192.168.1.5
[R4]ip route-static 192.168.1.32 27 192.168.1.14
[R4]ip route-static 192.168.1.160 27 192.168.1.22
[R4]ip route-static 192.168.1.160 27 192.168.1.18
R5:
[R5]ip ro
[R5]ip route
[R5]ip route-static 192.168.1.128 27 192.168.1.21
[R5]ip route-static 192.168.1.4 30 192.168.1.21
[R5]ip route-static 192.168.1.0 30 192.168.1.21
[R5]ip route-static 192.168.1.12 30 192.168.1.21
[R5]ip route-static 192.168.1.8 30 192.168.1.21
[R5]ip route-static 192.168.1.64 27 192.168.1.21
[R5]ip route-static 192.168.1.32 27 192.168.1.21
[R5]ip route-static 192.168.1.96 27 192.168.1.21
[R5]ip route-static 192.168.1.128 27 192.168.1.17
[R5]ip route-static 192.168.1.4 30 192.168.1.17
[R5]ip route-static 192.168.1.0 30 192.168.1.17
[R5]ip route-static 192.168.1.12 30 192.168.1.17
[R5]ip route-static 192.168.1.8 30 192.168.1.17
[R5]ip route-static 192.168.1.64 27 192.168.1.17
[R5]ip route-static 192.168.1.32 27 192.168.1.17
[R5]ip route-static 192.168.1.96 27 192.168.1.17
结果:
三.避免环路
R1:
[R1]ip ro
[R1]ip route
[R1]ip route-static 192.168.1.32 27 n
[R1]ip route-static 192.168.1.32 27 NULL 0
R2:
[R2]ip ro
[R2]ip route
[R2]ip route-static 192.168.1.64 27 n
[R2]ip route-static 192.168.1.64 27 NULL 0
R4:
[R4]ip ro
[R4]ip route
[R4]ip route-static 192.168.1.128 27 n
[R4]ip route-static 192.168.1.128 27 NULL 0
四.达到全网通
R1:
[R1]ip ro
[R1]ip route
[R1]ip route-static 0.0.0.0 0 192.168.1.2
[R1]ip route-static 0.0.0.0 0 192.168.1.10
R2:
[R2]ip ro
[R2]ip route
[R2]ip route-static 0.0.0.0 0 192.168.1.6
R3:
[R3]ip ro
[R3]ip route
[R3]ip route-static 0.0.0.0 0 192.168.1.13
R4:
[R4]ip ro
[R4]ip route
[R4]ip route-static 0.0.0.0 0 192.168.1.22
[R4]ip route-static 0.0.0.0 0 192.168.1.18
R5:
[R5]acl 2000
[R5-acl-basic-2000]rule per
[R5-acl-basic-2000]rule permit s
[R5-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255
[R5-acl-basic-2000]q
[R5]int g0/0/1
[R5-GigabitEthernet0/0/1]nat o
[R5-GigabitEthernet0/0/1]nat outbound 2000
[R5-GigabitEthernet0/0/1]q
五.R6 telnet R5 的共有地址时,实际上登录到R1上
R1:
[R1]aaa
[R1-aaa]lo
[R1-aaa]local-user my pas
[R1-aaa]local-user my password ci
[R1-aaa]local-user my password cipher my12345 pri
[R1-aaa]local-user my password cipher my12345 privilege l
[R1-aaa]local-user my password cipher my12345 privilege level 15
[R1-aaa]local
[R1-aaa]local-user my se
[R1-aaa]local-user my service-type t
[R1-aaa]local-user my service-type telnet
[R1]use
[R1]user-in
[R1]user-interface vty 0 4
[R1-ui-vty0-4]au
[R1-ui-vty0-4]authentication-mode aaa
R5:
[R5]int g0/0/1
[R5-GigabitEthernet0/0/1]nat s
[R5-GigabitEthernet0/0/1]nat serverpr
[R5-GigabitEthernet0/0/1]nat server pr
[R5-GigabitEthernet0/0/1]nat server protocol t
[R5-GigabitEthernet0/0/1]nat server protocol tcp g
[R5-GigabitEthernet0/0/1]nat server protocol tcp global cu
[R5-GigabitEthernet0/0/1]nat server protocol tcp global current-interface 23 in
[R5-GigabitEthernet0/0/1]nat server protocol tcp global current-interface 23 ins
ide 192.168.1.1 23
Warning:The port 23 is well-known port. If you continue it may cause function fa
ilure.
Are you sure to continue?[Y/N]:y
六.R4与R5正常通过1000M链路,故障时通过100M链路
R4:
[R4]ip route-static 0.0.0.0 0 192.168.1.22 preference 61
R5:
[R5]ip route-static 192.168.1.0 30 192.168.1.21 preference 61
Info: Succeeded in modifying route.
[R5]ip route-static 192.168.1.4 30 192.168.1.21 preference 61
Info: Succeeded in modifying route.
[R5]ip route-static 192.168.1.8 30 192.168.1.21 preference 61
Info: Succeeded in modifying route.
[R5]ip route-static 192.168.1.12 30 192.168.1.21 preference 61
Info: Succeeded in modifying route.
[R5]ip route-static 192.168.1.32 27 192.168.1.21 preference 61
Info: Succeeded in modifying route.
[R5]ip route-static 192.168.1.64 27 192.168.1.21 preference 61
Info: Succeeded in modifying route.
[R5]ip route-static 192.168.1.96 27 192.168.1.21 preference 61
Info: Succeeded in modifying route.
[R5]ip route-static 192.168.1.128 27 192.168.1.21 preference 61
Info: Succeeded in modifying route.
测试:
R4:
[R4]int g0/0/2
[R4-GigabitEthernet0/0/2]sh
[R4-GigabitEthernet0/0/2]shutdown
R1: