1-R6为isp,接口IP地址均为公有地址;该设备只能配置IP地址,之后不能再对其进行任何配置;
2-R1-R5为局域网,私有IP地址192.168.1.0/24,请合理分配;
3-所有路由器上环回,均代表连接用户的接口;
4-R3下的两台FC通过DHCP自动获取IP地址
5-选路最佳,路由表尽量小,避免环路;6-R1-R5均可访问R6的环回
7-R6telnetR5的公有IP地址时,实际登陆到R1上
8-R4与R5正常通过1000链路,故障时通过100兆链路;
网段划分
骨干192.168.1.0/28
环回192.168.1.16/28
骨干192.168.1.32/28
环回192.168.1.48/28
骨干192.168.1.64/28
环回192.168.1.80/28
骨干192.168.1.96/28
环回192.168.1.112/28
骨干192.168.1.128/28
环回192.168.1.144/28
骨干192.168.1.160/28
环回192.168.1.172/28
骨干192.168.1.192/28
环回192.168.1.208/28
骨干192.168.1.224/28
环回192.168.1.240/28
在R3上配置地址池下放IP地址给PC1、PC2,打开交换机的dhcp服务,在PC上应用dhcp
[R3]dhcp enable
Info: The operation may take a few seconds. Please wait for a moment.done.
[R3]ip pool 1
Info: It's successful to create an IP address pool.
[R3-ip-pool-1]network 192.168.1.192 mask 28
[R3-ip-pool-1]gateway-list 192.168.1.193
[R3-ip-pool-1]dns-list 8.8.8.8
[R3-ip-pool-1]qu
[R3]interface g0/0/2
[R3-GigabitEthernet0/0/2]dhcp select global
[LSW1]dhcp enable
Info: The operation may take a few seconds. Please wait for a moment.done.
给路由器配置缺省路由,其中负载均衡的有
R1到R4环回、R5、R6
R2到R3环回及骨干192.168.1.192/28,R3到R2环回
R4到R1环回
[R1]ip route-static 0.0.0.0 0 192.168.1.2
[R1]ip route-static 0.0.0.0 0 192.168.1.66
[R1]ip route-static 192.168.1.32 28 192.168.1.2
[R1]ip route-static 192.168.1.96 28 192.168.1.66
[R1]aaa
[R1-aaa]local-user PC1 privilege level 0 password cipher 123456
Info: Add a new user.
[R1-aaa]local-user PC1 service-type telnet
Info: Add a new user.
[R1-aaa]qu
[R1]user-interface vty 0 4
[R1-ui-vty0-4]authentication-mode aaa
[R2]ip route-static 0.0.0.0 0 192.168.1.34
[R2]ip route-static 192.168.1.64 28 192.168.1.1
[R2]ip route-static 192.168.1.192 28 192.168.1.1
[R2]ip route-static 192.168.1.192 28 192.168.1.34
[R2]ip route-static 192.168.1.16 28 192.168.1.1
[R2]ip route-static 192.168.1.80 28 192.168.1.1
[R2]ip route-static 192.168.1.80 28 192.168.1.34
[R3]ip route-static 0.0.0.0 0 192.168.1.98
[R3]ip route-static 192.168.1.0 28 192.168.1.65
[R3]ip route-static 192.168.1.32 28 192.168.1.98
[R3]ip route-static 192.168.1.16 28 192.168.1.65
[R3]ip route-static 192.168.1.48 28 192.168.1.65
[R3]ip route-static 192.168.1.48 28 192.168.1.98
[R4]ip route-static 0.0.0.0 0 192.168.1.130
[R4]ip route-static 0.0.0.0 0 192.168.1.162 preference 61
[R4]ip route-static 192.168.1.0 28 192.168.1.33
[R4]ip route-static 192.168.1.64 28 192.168.1.97
[R4]ip route-static 192.168.1.192 28 192.168.1.97
[R4]ip route-static 192.168.1.16 28 192.168.1.33
[R4]ip route-static 192.168.1.16 28 192.168.1.97
[R5]ip route-static 0.0.0.0 0 192.168.1.129
[R5]ip route-static 0.0.0.0 0 192.168.1.161 preference 61
[R5]ip route-static 6.6.6.6 32 56.1.1.2
[R5]acl 2000
[R5-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255
[R5-acl-basic-2000]qu
[R5]interface g0/0/1
[R5-GigabitEthernet0/0/1]nat outbound 2000
[R5]aaa
[R5-aaa]local-user PC5 privilege level 0 password cipher 123456
Info: Add a new user.
[R5-aaa]local-user PC1 service-type telnet
Info: Add a new user.
[R5-aaa]qu
[R5]user-interface vty 0 4
[R5-ui-vty0-4]authentication-mode aaa
[R5-ui-vty0-4]qu
[R5]interface g0/0/1
[R5-GigabitEthernet0/0/1]nat server protocol tcp global current-interface 23 inside 192.168.1.1 23
结果检验