静态综合实验

静态综合实验

 

 

拓扑图如上

1. 分配ip

私有ip地址分配为：

        192.168.1.0/24（需要规划的网段）

                192.168.1.0/27—骨干链路为：          

192.168.1.0/30   

192.168.1.4/30  

192.168.1.8/30

192.168.1.12/30

192.168.1.16/30

192.168.1.20/30

192.168.1.24/30（未使用）

192.168.1.28/30（未使用）

R1

192.168.1.32/27

192.168.1.32/28

192.168.1.48/28

R2

192.168.1.64/27

192.168.1.64/28

192.168.1.80/28

R3

192.168.1.96/27

R4

192.168.1.128/27

192.168.1.128/28

192.168.1.144/28

R5

192.168.1.160/27

192.168.1.192/27

192.168.1.224/27

配置环回、接口ip

R1

[r1-LoopBack0]ip add 192.168.1.33 28

[r1-LoopBack1]ip address 192.168.1.49 28

[r1-GigabitEthernet0/0/0]ip add 192.168.1.1 30

[r1-GigabitEthernet0/0/1]ip add 192.168.1.5 30

R2

[r2-LoopBack0]ip add 192.168.1.65 28

[r2-LoopBack1]ip add 192.168.1.81 28

[r2-GigabitEthernet0/0/0]ip add 192.168.1.2 30

[r2-GigabitEthernet0/0/1]ip add 192.168.1.9 30

R3

[r3-GigabitEthernet0/0/2]ip add 192.168.1.97 27（连接pc端的端口）

[r3-GigabitEthernet0/0/0]ip add 192.168.1.6 30

[r3-GigabitEthernet0/0/1]ip add 192.168.1.13 30

R4

[r4-LoopBack0]ip add 192.168.1.129 28

[r4-LoopBack1]ip add 192.168.1.145 28

[r4-GigabitEthernet0/0/0]ip add 192.168.1.10 30

[r4-GigabitEthernet0/0/1]ip add 192.168.1.14 30

[r4-GigabitEthernet0/0/2]ip add 192.168.1.17 30

[r4-Ethernet4/0/0]ip add 192.168.1.21 30

R5

[r5-LoopBack0]ip add 192.168.1.161 27

[r5-GigabitEthernet0/0/0]ip add 192.168.1.18 30

[r5-GigabitEthernet0/0/1]ip add 192.168.1.22 30

[r5-GigabitEthernet0/0/2]ip add 56.1.1.1 24

R6

[r6-LoopBack9]ip add 6.6.6.6 24

[r6-GigabitEthernet0/0/0]ip add 56.1.1.2 24

电脑ip自动获取：

[r3]dhcp enable 打开服务

Info: The operation may take a few seconds. Please wait for a moment.done.

[r3]ip pool a 

Info: It's successful to create an IP address pool.

[r3-ip-pool-a]network 192.168.1.96 mask 27（网段）

[r3-ip-pool-a]gateway-list 192.168.1.97（网关

[r3-ip-pool-a]dns-list 114.114.114.114 8.8.8.8（一个使用一个备份）

[r3-ip-pool-a]int g0/0/2（重回R3）的g2接口

[r3-GigabitEthernet0/0/2]dhcp select global（搞一下dhcp服务）  

 

 

 

配置路由：（缺省和nat）   display current-configuration查看当前配置

R1

ip route-static 0.0.0.0 0.0.0.0 192.168.1.2

ip route-static 0.0.0.0 0.0.0.0 192.168.1.6

ip route-static 192.168.1.8 255.255.255.252 192.168.1.2

ip route-static 192.168.1.12 255.255.255.252 192.168.1.6

ip route-static 192.168.1.64 255.255.255.224 192.168.1.2

ip route-static 192.168.1.96 255.255.255.224 192.168.1.6

R2

ip route-static 0.0.0.0 0.0.0.0 192.168.1.10

ip route-static 192.168.1.4 255.255.255.252 192.168.1.1

ip route-static 192.168.1.32 255.255.255.224 192.168.1.1

ip route-static 192.168.1.96 255.255.255.224 192.168.1.1

ip route-static 192.168.1.96 255.255.255.224 192.168.1.10

R3

ip route-static 0.0.0.0 0.0.0.0 192.168.1.14

ip route-static 192.168.1.0 255.255.255.252 192.168.1.5

ip route-static 192.168.1.32 255.255.255.224 192.168.1.5

ip route-static 192.168.1.64 255.255.255.224 192.168.1.5

ip route-static 192.168.1.64 255.255.255.224 192.168.1.14

R4

ip route-static 0.0.0.0 0.0.0.0 192.168.1.18

ip route-static 0.0.0.0 0.0.0.0 192.168.1.22 preference 61

ip route-static 192.168.1.0 255.255.255.252 192.168.1.9

ip route-static 192.168.1.4 255.255.255.252 192.168.1.13

ip route-static 192.168.1.32 255.255.255.224 192.168.1.9

ip route-static 192.168.1.32 255.255.255.224 192.168.1.13

ip route-static 192.168.1.64 255.255.255.224 192.168.1.9

ip route-static 192.168.1.96 255.255.255.224 192.168.1.13

R5

ip route-static 0.0.0.0 0.0.0.0 56.1.1.2

ip route-static 192.168.1.0 255.255.255.252 192.168.1.17

ip route-static 192.168.1.0 255.255.255.252 192.168.1.21 preference 61(优先级）

ip route-static 192.168.1.4 255.255.255.252 192.168.1.17

ip route-static 192.168.1.4 255.255.255.252 192.168.1.21 preference 61

ip route-static 192.168.1.8 255.255.255.252 192.168.1.17

ip route-static 192.168.1.8 255.255.255.252 192.168.1.21 preference 61

ip route-static 192.168.1.12 255.255.255.252 192.168.1.17

ip route-static 192.168.1.12 255.255.255.252 192.168.1.21 preference 61

ip route-static 192.168.1.32 255.255.255.224 192.168.1.17

ip route-static 192.168.1.32 255.255.255.224 192.168.1.21 preference 61

ip route-static 192.168.1.64 255.255.255.224 192.168.1.17

ip route-static 192.168.1.64 255.255.255.224 192.168.1.21 preference 61

ip route-static 192.168.1.96 255.255.255.224 192.168.1.17

ip route-static 192.168.1.96 255.255.255.224 192.168.1.21 preference 61

 

 

 

 

R1-R5已经ping通

Nat（R5）

[r5]acl 2000

[r5-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255

[r5-acl-basic-2000]int g0/0/0

[r5-GigabitEthernet0/0/0]nat ou

[r5-GigabitEthernet0/0/0]nat outbound 2000

R1已可以访问R6（外网）下图为pc ping外网

 

开始做R1、2、4、防环。

[r1]ip route-static 192.168.1.32 27 NULL 0

[r1]ip route-static 192.168.1.64 27 NULL 0

[r1]ip route-static 192.168.1.128 27 NULL 0

开始在1000M骨干故障时使用100M骨干

[r4-GigabitEthernet0/0/2]shutdown

 

 

 

条件7（实际要求是搭建服务器）

[r1]aaa

[r1-aaa]local-user  panxi（用户名称） privilege level 15 password cipher 123456（密码）

[r1-aaa]local-user panxi  service-type telnet

[r1]user-interface vty 0 4

[r1-ui-vty0-4]authentication-mode aaa