HCIP静态实验

根据要求划分子网如图划分 并且配置ip地址和环回接口

上面三点就已经达成完毕
配置AR3的DHCP
ar3:

[AR3]dhcp enable
[AR3]ip pool pool1
[AR3-ip-pool-pool1]network 192.168.1.96 mask 27
[AR3-ip-pool-pool1]gateway-list 192.168.1.97
[AR3-ip-pool-pool1]dns-list 8.8.8.8
[AR3]int g 0/0/0
[AR3-GigabitEthernet0/0/0]ip address 192.168.1.97 27
[AR3-GigabitEthernet0/0/0]dhcp select global

配置静态路由
ar1:
[AR1]ip route-static 0.0.0.0 0 192.168.1.2
[AR1]ip route-static 0.0.0.0 0 192.168.1.6
[AR1]ip route-static 192.168.1.64 27 192.168.1.2
[AR1]ip route-static 192.168.1.8 30 192.168.1.2
[AR1]ip route-static 192.168.1.12 30 192.168.1.6
[AR1]ip route-static 192.168.1.96 27 192.168.1.6
ar2:
[AR2]ip route-static 0.0.0.0 0 192.168.1.10
[AR2]ip route-static 192.168.1.96 27 192.168.1.1
[AR2]ip route-static 192.168.1.96 27 192.168.1.10
[AR2]ip route-static 192.168.1.4 30 192.168.1.1
[AR2]ip route-static 192.168.1.32 27 192.168.1.1
ar3
[AR3]ip route-static 0.0.0.0 0 192.168.1.14
[AR3]ip route-static 192.168.1.64 27 192.168.1.14
[AR3]ip route-static 192.168.1.64 27 192.168.1.5
[AR3]ip route-static 192.168.1.0 30 192.168.1.5
[AR3]ip route-static 192.168.1.32 27 192.168.1.5
ar4
[AR4]ip route-static 0.0.0.0 0 192.168.1.18
[AR4]ip route-static 0.0.0.0 0 192.168.1.22 preference 61
[AR4]ip route-static 192.168.1.32 27 192.168.1.9
[AR4]ip route-static 192.168.1.32 27 192.168.1.13
[AR4]ip route-static 192.168.1.0 30 192.168.1.9
[AR4]ip route-static 192.168.1.64 27 192.168.1.9
[AR4]ip route-static 192.168.1.96 27 192.168.1.13
[AR4]ip route-static 192.168.1.4 30 192.168.1.13
[AR4]ip route-static 192.168.1.160 27 192.168.1.18
ar5
[AR5]ip route-static 0.0.0.0 0 12.0.0.2
[AR5]ip route-static 192.168.1.0 24 192.168.1.21 preference 70

配置空接口
ar1
[AR1]ip route-static 192.168.1.32 27 NULL 0
ar2
[AR2]ip route-static 192.168.1.64 27 NULL 0
ar4
[AR4]ip route-static 0.0.0.0 0 GigabitEthernet 0/0/2 192.168.1.18

由于需要均要链接到ar6的环回所以可用NAT
ar5
[AR5]acl 2000
[AR5-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255
[AR5]int g 0/0/2
第七点
ar1开启telnet
[AR1]aaa
[AR1-aaa]local-user wuhu privilege level 15 password cipher 123
[AR1-aaa]local-user wuhu service-type telnet
[AR1]user-interface vty 0 4
[AR1-ui-vty0-4]authentication-mode aaa
ar5配置端口映射
[AR5]int g 0/0/2
[AR5-GigabitEthernet0/0/2]nat server protocol tcp global current-interface 23 inside 192.168.1.1 23