静态综合实验

   

 

 

1.规划ip 公网IP 5和6 6环回

 5和6之间 56.1.1.0/24 

---

6环回 6.6.6.0/24

---

2.内部私网

192.168.1.0/24

 

192.168.1.0/27 骨干 192.168.1.0/30 192.168.1.4/30 192.168.1.8/30 192.168.1.12/30 192.168.1.16/30 192.168.1.20/30 192.168.1.24/30 192.168.1.28/30

 

192.168.1.32/27 R1 192.168.1.32/28 192.168.1.48/28

 

192.168.1.64/27 R2 192.168.1.64/28 192.168.1.80/24

 

192.168.1.96/27 R3

 

192.1681.128/27 R4 192.168.1.128/28 192.168.1.144/28

 

192.168.1.160/27 R5

 

192.168.1.192/27

 

192.168.1.224/27

---

 配置环回地址

r1

[Huawei]sys r1

[r1]int LoopBack 0

[r1-LoopBack0]ip add 192.168.1.32 28

[r1-LoopBack0]int LoopBack 1

[r1-LoopBack1]ip add 192.168.1.48 28

r2

[Huawei]sys r2

[r2]int LoopBack 0

[r2-LoopBack0]ip add 192.168.1.65 28

[r2-LoopBack0]int LoopBack 1

[r2-LoopBack1]ip add 192.168.1.81 28

r4

[Huawei]sys r4

[r4]int LoopBack 0

[r4-LoopBack0] ip add 192.168.1.129 28

[r4-LoopBack0]int LoopBack 1

[r4-LoopBack1]ip add 192.168.1.145 28

r5

[Huawei]sys r5
[r5]int LoopBack 0
[r5-LoopBack0]ip add 192.168.1.161 27

r6

[Huawei]sys r6

[r6]int LoopBack 0

[r6-LoopBack0]ip add 6.6.6.6 24

配置骨干

r1骨干

[r1]int g0/0/0

[r1-GigabitEthernet0/0/0]ip add 192.168.1.1 30

[r1-GigabitEthernet0/0/0]int g0/0/1

[r1-GigabitEthernet0/0/1]ip add 192.168.1.5 30

r2骨干

[r2]int g0/0/0

[r2-GigabitEthernet0/0/0]ip add 192.168.1.2 30

[r2-GigabitEthernet0/0/0]int g0/0/1

[r2-GigabitEthernet0/0/1]ip add 192.168.1.9 30

r3骨干

[r3]int g0/0/0

[r3-GigabitEthernet0/0/0]ip add 192.168.1.6 30

[r3-GigabitEthernet0/0/0]int g0/0/1

[r3-GigabitEthernet0/0/1]ip add 192.168.1.13 30

r4骨干

[r4]int g0/0/0
[r4-GigabitEthernet0/0/0]ip add 192.168.1.10 30
[r4-GigabitEthernet0/0/0]int g0/0/1
[r4-GigabitEthernet0/0/1]ip add 192.168.1.14 30
[r4-GigabitEthernet0/0/1]int g4/0/0
[r4-GigabitEthernet4/0/0]ip add 192.168.1.17 30
[r4-GigabitEthernet4/0/0]int g0/0/2
[r4-GigabitEthernet0/0/2]ip add 192.168.1.21 30

r5骨干

[r5]int g0/0/2

[r5-GigabitEthernet0/0/2]ip add 192.168.1.18 30

[r5-GigabitEthernet0/0/2]int g0/0/0

[r5-GigabitEthernet0/0/0]ip add 192.168.1.22 30

[r5-GigabitEthernet0/0/0]int g0/0/1

[r5-GigabitEthernet0/0/1]ip add 56.1.1.1 24

r6骨干

[r6]int g0/0/0

[r6-GigabitEthernet0/0/0]ip add 56.1.1.2 24

配置缺省路由，防止环化

缺省

r1

ip route-static 0.0.0.0 0 192.168.1.2

ip route-static 0.0.0.0 0 192.168.1.6

ip route-static 0.0.0.0 0 192.168.1.2

ip route-static 0.0.0.0 0 192.168.1.6

ip route-static 192.168.1.64 27 192.168.1.2

ip route-static 192.168.1.8 30 192.168.1.2

ip route-static 192.168.1.96 27 192.168.1.6

ip route-static 192.168.1.12 30 192.168.1.6

 

r2

 

ip route-static 0.0.0.0 0 192.168.1.10

ip route-static 192.168.1.32 27 192.168.1.1

ip route-static 192.168.1.4 30 192.168.1.1

ip route-static 192.168.1.96 27 192.168.1.1

ip route-static 192.168.1.96 27 192.168.1.10

 

r3

 

ip route-static 0.0.0.0 0 192.168.1.14

 

ip route-static 192.168.1.32 27 192.168.1.5

 

ip route-static 192.168.1.0 30 192.168.1.5

 

ip route-static 192.168.1.64 27 192.168.1.5

 

ip route-static 192.168.1.64 27 192.168.1.14

 

r4

 

ip route-static 0.0.0.0 0 192.168.1.18

 

ip route-static 192.168.1.0 30 192.168.1.9

 

ip route-static 192.168.1.64 27 192.168.1.9

 

ip route-static 192.168.1.4 30 192.168.1.13

 

ip route-static 192.168.1.96 27 192.168.1.13

 

ip route-static 192.168.1.32 27 192.168.1.13

 

ip route-static 192.168.1.32 27 192.168.1.9

 

r5

 

ip route-static 0.0.0.0 0 56.1.1.2

 

ip route-static 192.168.1.128 27 192.168.1.17

 

ip route-static 192.168.1.64 27 192.168.1.17

 

ip route-static 192.168.1.96 27 192.168.1.17

 

ip route-static 192.168.1.32 27 192.168.1.17

 

ip route-static 192.168.1.0 30 192.168.1.17

 

ip route-static 192.168.1.4 30 192.168.1.17

 

ip route-static 192.168.1.8 30 192.168.1.17

 

ip route-static 192.168.1.12 30 192.168.1.17

 

r3配置DHCP

 

[Huawei]sy r3

 

[r3]int g 0/0/2

 

[r3-GigabitEthernet0/0/0]ip add 192.168.1.97 27

 

[r3]dhcp enable

 

[r3]ip pool a

 

[r3-ip-pool-a]network 192.168.1.96 mask 27

 

[r3-ip-pool-a]gateway-list 192.168.1.97

 

[r3-ip-pool-a]dns-list 114.114.114.114 8.8.8.8

 

[r3-ip-pool-a]display this ip pool a gateway-list 192.168.1.97

 

network 192.168.1.96 mask 255.255.255.224

 

dns-list 114.114.114.114 8.8.8.8

 

return

 

[r3]int g0/0/2

 

[r3-GigabitEthernet0/0/2]dhcp select global

 

r5搭建NAT

 

[r5]acl 2000

[r5-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255

[r5-acl-basic-2000]int g0/0/1

[r5-GigabitEthernet0/0/1]nat outbound 2000

 

 

 

防环操作

 

r1

 

ip route-static 192.168.1.32 27 NULL 0

 

r2

 

ip route-static 192.168.1.64 27 NULL 0

 

r4

 

ip route-static 192.168.1.128 27 NULL 0

 

r4与r5正常通过1000链路,故障时通过100兆链路

 

r4

 

ip route-static 0.0.0.0 0 192.168.1.22 preference 61

 

r5

 

ip route-static 0.0.0.0 0.0.0 56.1.1.2

ip route-static 192.168.1.0 255.255.255.252 192.168.1.21 pr 61

 

ip route-static 192.168.1.4 255.255.255.252 192.168.1.21 pr 61

 

ip route-static 192.168.1.8 255.255.255.252 192.168.1.21 pr 61

 

ip route-static 192.168.1.12 255.255.255.252 192.168.1.21 pr 61

 

ip route-static 192.168.1.32 255.255.255.224 192.168.1.21 pr 61

 

ip route-static 192.168.1.64 255.255.255.224 192.168.1.21 pr 61

 

ip route-static 192.168.1.96 255.255.255.224 192.168.1.21 pr 61

 

ip route-static 192.168.1.128 255.255.255.224 192.168.1.21 pr 61

 

r6telnetr5的公有IP地址时,实际登陆到r1

 

r1开启telnet

 

[r1]aaa

 

[r1-aaa]local-user an password cipher 123

 

Info: Add a new user.

 

[r1-aaa]local-user an service-type telnet

 

[r1-aaa]q

 

[r1]user-interface vty 0 4

 

[r1-ui-vty0-4]authentication-mode aaa

 

R5端口映射

 

[r5]int g0/0/1

 

[r5-GigabitEthernet0/0/1]nat server protocol tcp global current-interface 23 ins

 

ide 192.168.1.1 23