eNSP:综合配置

实验拓扑

在这里插入图片描述

实验步骤

1、PC配置,PC2,其他类似
在这里插入图片描述
2、SW4二层交换机配置(VLAN)

sysname SW4

vlan batch 134 144

cluster enable
ntdp enable
ndp enable

drop illegal-mac alarm

diffserv domain default

drop-profile default

aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password simple admin
local-user admin service-type http

interface Vlanif1

interface MEth0/0/1

interface Ethernet0/0/1
port link-type trunk
port trunk allow-pass vlan 2 to 4094

interface Ethernet0/0/2
port link-type access
port default vlan 144

interface Ethernet0/0/3
port link-type access
port default vlan 134

3、三层交换机配置
sysname SW5

vlan batch 154 164 174

interface Vlanif154
ip address 172.16.154.254 255.255.255.0

interface Vlanif164
ip address 172.16.164.254 255.255.255.0

interface Vlanif174
ip address 10.1.174.3 255.255.255.0

interface MEth0/0/1

interface GigabitEthernet0/0/1
port link-type trunk
port trunk pvid vlan 174
port trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/2
port link-type access
port default vlan 154

interface GigabitEthernet0/0/3
port link-type access
port default vlan 164
4.R2上单臂路由的配置

interface Ethernet0/0/0
ip address 10.1.174.2 255.255.255.0

interface Ethernet0/0/1

interface Ethernet0/0/1.1
dot1q termination vid 134
ip address 192.168.134.254 255.255.255.0
arp broadcast enable

interface Ethernet0/0/1.2
dot1q termination vid 144
ip address 192.168.144.254 255.255.255.0
arp broadcast enable

在这里插入图片描述
5.R1上DHCP的配置
dhcp enable

ip pool 1
gateway-list 10.0.0.254
network 10.0.0.0 mask 255.255.255.0
dns-list 8.8.8.8

interface GigabitEthernet0/0/0
ip address 200.10.13.2 255.255.255.0

interface GigabitEthernet0/0/1
ip address 10.0.0.254 255.255.255.0
dhcp select global(接口启动全局地址池)

interface GigabitEthernet0/0/2
ip address 10.1.174.1 255.255.255.0

在这里插入图片描述

6。路由协议的配置(RIP,或者OSPF)
R1:

rip 1
network 10.0.0.0
network 200.10.13.0

到此内网全部互通
在这里插入图片描述

7、ACL配置
LSW5:
acl number 3000
rule 5 deny ip source 172.16.164.1 0 destination 192.168.144.1 0

在出口应用ACL
interface GigabitEthernet0/0/1
traffic-filter outbound acl 3000
R1:地址转换设置
acl number 2000
rule 4 permit source 192.168.134.0 0.0.0.255

nat address-group 1 200.10.13.4 200.10.13.6

interface GigabitEthernet0/0/0
ip address 200.10.13.2 255.255.255.0
nat outbound 2000 address-group 1 no-pat
8、R3配置

interface GigabitEthernet0/0/0
ip address 200.10.13.1 255.255.255.0

评论 4
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值