一、基本架构图
二、需求
- PC之间互相ping通,PC和网关能够ping通。
- PC0可以同时远程管理(telnet/ssh)两台交换机和路由器。
三、实现过程
交换机接口默认是开启的
路由器接口默认是关闭的,需要人工开启
1、直通线连接所有设备
连接端口及IP规划如下图所示
PC配置对应的IP及网关IP
2、手工开启路由器的连接端口并配置IP
1)查看端口列表
Router(config)#do show ip int b
Interface IP-Address OK? Method Status Protocol
GigabitEthernet0/0 unassigned YES unset administratively down down
GigabitEthernet0/1 unassigned YES unset administratively down down
GigabitEthernet0/2 unassigned YES unset administratively down down
Vlan1 unassigned YES unset administratively down down
2)根据上图连接的端口情况分别进入g0/g1手工开启
Router(config)#int g0/0
Router(config-if)#no shut
Router(config-if)#do show ip int b
Router(config-if)#ip add 10.1.1.254 255.255.255.0 配置网关IP
Interface IP-Address OK? Method Status Protocol
GigabitEthernet0/0 10.1.1.254 YES unset up up
GigabitEthernet0/1 unassigned YES unset administratively down down
GigabitEthernet0/2 unassigned YES unset administratively down down
Vlan1 unassigned YES unset administratively down down
Router(config-if)#exit
Router(config)#int g0/1
Router(config-if)#no shut
Router(config)#do show ip int b
Router(config-if)#ip add 20.1.1.254 255.255.255.0 配置网关IP
Interface IP-Address OK? Method Status Protocol
GigabitEthernet0/0 10.1.1.254 YES manual up up
GigabitEthernet0/1 20.1.1.254 YES manual up up
GigabitEthernet0/2 unassigned YES unset administratively down down
Vlan1 unassigned YES unset administratively down down
以上操作做完所有设备均以连通,可以互PING进行检测
3、路由器开启远程服务
1)路由器配置
Router>en
Router#conf t
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#ho r1 设置主机名
r1(config)#ip domain-name aa.bb.com 设置域名 远程连接必须设置域名和主机名
r1(config)#crypto key generate rsa 开启rsa加密认证
r1(config)#line vty 0 4 开启终端 最大连接数5
r1(config-line)#login local 开启本地身份验证模式
r1(config-line)#transport input all 开启所有远程服务telnet/ssh
r1(config)#username xx password 123456 设置本地账户
r1(config)#enable password 123 特权密码 (远程登陆必须设置)
2)PC远程连接测试
telnet
C:\>telnet 10.1.1.254
Trying 10.1.1.254 ...Open
User Access Verification
Username: xx
Password:
r1>
r1>
r1>exit
ssh
C:\>ssh -l xx 10.1.1.254
Open
Password:
r1>
4、给交换机中的虚拟接口配置IP
想要跨网段管理交换机,需要给交换机配置网关
1)交换机配置
Switch>en
Switch#conf t
Switch(config)#hostname sw2
sw2(config)#int vlan 1
sw2(config-if)#ip add 20.1.1.253 255.255.255.0
sw2(config-if)#no shut
sw2(config-if)#do show ip int b
Interface IP-Address OK? Method Status Protocol
FastEthernet0/1 unassigned YES manual up up
FastEthernet0/2 unassigned YES manual up up
FastEthernet0/3 unassigned YES manual up up
FastEthernet0/4 unassigned YES manual down down
FastEthernet0/5 unassigned YES manual down down
FastEthernet0/6 unassigned YES manual down down
FastEthernet0/7 unassigned YES manual down down
FastEthernet0/8 unassigned YES manual down down
FastEthernet0/9 unassigned YES manual down down
FastEthernet0/10 unassigned YES manual down down
FastEthernet0/11 unassigned YES manual down down
FastEthernet0/12 unassigned YES manual down down
FastEthernet0/13 unassigned YES manual down down
FastEthernet0/14 unassigned YES manual down down
FastEthernet0/15 unassigned YES manual down down
FastEthernet0/16 unassigned YES manual down down
FastEthernet0/17 unassigned YES manual down down
FastEthernet0/18 unassigned YES manual down down
FastEthernet0/19 unassigned YES manual down down
FastEthernet0/20 unassigned YES manual down down
FastEthernet0/21 unassigned YES manual down down
FastEthernet0/22 unassigned YES manual down down
FastEthernet0/23 unassigned YES manual down down
FastEthernet0/24 unassigned YES manual down down
GigabitEthernet0/1 unassigned YES manual down down
GigabitEthernet0/2 unassigned YES manual down down
Vlan1 20.1.1.253 YES manual up up
sw2(config)#line vty 0 4
sw2(config-line)#login local
sw2(config-line)#transport input all
sw2(config)#username oo password 123456
sw2(config)#ip default-gateway 20.1.1.254 配置网关
sw2(config)#enable password 123 配置特权密码 (远程登陆必须设置)
2)PC0测试连接
PC0管理s2交换机
C:\>telnet 20.1.1.253
Trying 20.1.1.253 ...Open
User Access Verification
Username: yy
Password:
sw2>
sw2>
这里需要注意:
远程连接时必须配置特权密码,不管是几层设备
sw2(config)#enable password 123
交换机
C:\>telnet 20.1.1.253
Trying 20.1.1.253 ...Open
User Access Verification
Username: yy
Password: 123456 交换机本地账户密码
sw2>en
sw2>enable
Password: 123 特权密码
sw2#
sw2#
路由器
C:\>telnet 20.1.1.254
Trying 20.1.1.254 ...Open
User Access Verification
Username: xx
Password:
r1>en
r1>enable
Password:
r1#