企業(yè)級網(wǎng)絡(luò)ip地址規(guī)劃與配置0001

1、F?Q 血 2T、IQ 2. H5 1IO； id J. 14S HRctterLfl： 172./soSnjer-PT企業(yè)級網(wǎng)絡(luò)ip地址規(guī)劃與配置以設(shè)計(jì)具有三層結(jié)構(gòu)的大型企業(yè)級網(wǎng)絡(luò)設(shè)計(jì)為例，完成IP地址的分配、NAT地址轉(zhuǎn)換、三層網(wǎng)絡(luò)拓?fù)浣Y(jié)構(gòu)等功能，并選擇合適的設(shè)備實(shí)現(xiàn)該網(wǎng)絡(luò)，用模擬器 驗(yàn)證通連性。二、實(shí)驗(yàn)拓?fù)浣Y(jié)構(gòu)圖與IP規(guī)劃PC-iT/PC7IPCTPC65 err er-FT。心灑皿pPCPTPC-FTPC 10V14ILPC2PC-FTvLsn*M: L7S.1&.95.&S01T2 IS 32 勺 30t1 &J-.S血 1/0 19?. L&Q 10 1 /24irtsmst-12

2、.168.10ROUTERO為本園區(qū)網(wǎng)絡(luò)的出口,并在出口處通過NAT轉(zhuǎn)換來實(shí)現(xiàn)與外網(wǎng)的拓?fù)鋵?shí)現(xiàn):連接，出口網(wǎng)絡(luò)地址為102145.91,三臺路由器構(gòu)成的主路由區(qū)域使用RIP動態(tài)路由協(xié)議，ROUTER1所連為園區(qū)網(wǎng)絡(luò)服務(wù)器群，網(wǎng)段為 /24 ;由于設(shè) 備限制在此只設(shè)置 WEB與FTP服務(wù)器模擬現(xiàn)實(shí)中的服務(wù)器群，ROUTER3所連網(wǎng)段為 /24。Switch。模擬現(xiàn)實(shí)中的新交換機(jī)，并與 switch3做鏈路負(fù)載均衡，switch1與 switch1之間使用PVLAN技術(shù)連接，做到本交換機(jī)上VLAN之間的隔離與整體的透傳，Switch3模擬學(xué)生機(jī)房主交換機(jī)

3、，與 switchl之間使用兩條普通鏈路，利用端口匯聚技術(shù)實(shí)現(xiàn)帶寬的增加，并在交換機(jī)上連接一臺 DHCP服務(wù)器實(shí)現(xiàn)IP 地址的自動分配，DHCP服務(wù)器使用 windows 2003 server附帶的DHCP組建實(shí) 現(xiàn)，由于設(shè)備限制，本次試驗(yàn)采用架設(shè)在 VM虛擬機(jī)中的windows 2003 server 操作系統(tǒng)實(shí)現(xiàn)，虛擬機(jī)與現(xiàn)實(shí)網(wǎng)絡(luò)通過橋接網(wǎng)絡(luò)通信，wlan部分采用單AP布局，AP 型號為 NETGEA，in ternet 接口地址為：54, LAN 地址段為 /24。三、實(shí)驗(yàn)器材:設(shè)備名稱設(shè)備數(shù)量設(shè)備作用華為R2501路由器3路由、尋徑華

4、為S2008交換機(jī)4服務(wù)器2Web服務(wù)器/DHCP服務(wù)器無線 AP(netgear)1構(gòu)建無線網(wǎng)絡(luò)PC機(jī)6筆記本（帶無線網(wǎng)卡）2四、配置過程:配置命令：RouterO :Quidwaysys name router0/重新命名交路由器routerO int s0/配置串行鏈路接口routerO-SerialOip add 52/配置接口 IP地址router0-Serial0l in k-protocol ppp/鏈路層啟用PPP協(xié)議routerO-SerialOquitrouterO int s1routerO-Serial1ip add 1

5、 52 routerO-Serial1li nk-protocol ppprouterO-Serial1quit routerOriprouterO-rip n etwork allrouterO-ripquitrouterO nat address-group 1 1 pool 1池router0acl 1router0-acl-2rule permit source router0-acl-2rule permit source router0-acl-2q

6、uitrouter0i nt e0router0-Ether net0 nat outbo und 1 address-group pool1 表和端口關(guān)聯(lián)router0-Ethernet0ip route-s router0-Ethernet0 nat server global ftp tcprouter0-Ethernet0 nat server global tcp router0-Ethernet0quit/啟用RIP協(xié)議/發(fā)布直連網(wǎng)絡(luò)/設(shè)定n at地址/設(shè)定ACL規(guī)則/增加訪問控制列/設(shè)置缺

7、省路由/設(shè)置部FTP服務(wù)器/設(shè)置部WWW服務(wù)器Router1 :syspassword:Quidwaysys name router1router1i nt s0router1-Serial0ip add 52router1-Serial0l in k-protocol ppprouter1-Serial0clock dteclk1router1-Serial0i nt s1router1-Serial1ip add 0 52router1-Serial1li nk-protocol ppprou

8、ter1-Serial1i nt e0 router1-Ethernet0ip add router1-EthernetOquitrouter1riprouterl-rip network allrouter1ip route-s s0Router 3 :sysQuidwaysys name router3router3 int s0router3-SerialOip add 52router3-SerialOl in k-protocol ppprouter3-Se

9、rialOclock dteclk1router3-SerialOi nt s1router3-Serial1ip add 52router3-Serial1li nk-protocol ppprouter3-Serial1clock dteclk1router3-Serial1i nt e0router3-EthernetOip add router3-EthernetOquitrouter3riprouter3-rip n etwork allrouter3-riprouter3ip ro

10、ute-s s1Switch0:syspassword:Quidwaysys name switch0/設(shè)置端口類型為 TRUNKswitchO-EthernetO/1port lin k-type trunkswitchOi nt e 0/1/進(jìn)入端口視圖switchO-EthernetO/1port trunk permit via n all/允許通過所有VLAN聯(lián)信息switchO-EthernetO/1duplex fullswitchO-EthernetO/1speed 100switchOi nt e 0/2switchO-EthernetO/2p

11、ort lin k-type trunkswitchO-EthernetO/2port trunk permit vla n allswitchO-EthernetO/2duplex fullswitchO-EthernetO/2speed 100switchO-EthernetO/2quitswitchOlink-aggreation int e0/1 to int e0/2 both switch。Switch1:sysQuidwaysys name switch1switch1vlan 8switch1-vla n8port eth 0/1 to eth 0/4switch1-vla n

12、8vlan 24switch1-vla n24port eth 0/5 to eth 0/8switch1-vla n24quitswitch1vlan 23switch1-vlan23isolate-user-vlan enableswitch1-vla n23port eth 0/9switch1-vla n23isolate-user-vlan 23 seco ndary 8 24/設(shè)置工作模式為全雙工/設(shè)置速率為100Mbps/設(shè)置工作模式為全雙工/設(shè)置速率為100Mbps/設(shè)置匯聚連接/配置VLAN信息/加入端口/配己置isovlan/啟用ISO/加入端口/配置與二層vlan之間關(guān)Q

13、uidwaysys name switch2switch2vlan 4switch1-vla n23Switch2:sysswitchl-vla n8port eth 0/8switch2-vla n8port eth 0/1 to eth 0/4switch2-vla n8vlan 5switch2-vla n24port eth 0/5 to eth 0/8switch2-vla n24quitswitch2vlan 23switch2-vla n23isolate-user-vla n en ableswitch2-vla n23port eth 0/9switch2-vla n23is

14、olate-user-vla n 23 sec on dary 4 5switch2-vla n23Switch3:syspassword:Quidwaysys name switch3switch3i nt e 0/1switch3-Ethernet0/1port lin k-type trunkswitch3-Ethernet0/1port trunk permit vla n allswitch3-Ethernet0/1duplex fullswitch3-Ethernet0/1speed 100switch3-Ethernet0/1i nt e 0/2switch3-Ethernet0

15、/2port lin k-type trunkswitch3-Ethernet0/2port trunk permit vla n allswitch3-Ethernet0/2duplex fullswitch3-Ethernet0/2speed 100switch3-Ethernet0/2quitswitch3link-aggreation int e 0/1 to e 0/2 both switch3i nt e 0/3switch3mo niter e 0/3switch3-Ethernet0/3quit-皿、sue-|IONnjsEml 口Mll-Iwl-lW1旦-EBI hGElot

16、r Ejj -眉一0? sko ww 5-1 DtppllQ 芯G帥?Air.5m旳N 口 口址s口號建 dm一 ElllliM 呂-B.2=二巻 V shrQ 一！-IplarFIIUJN IdlAJllz為=暗！1- lil-GQJPFQ-吉莖 aeoSIIMIW n=si % dCJJ-Erdte-FCELIEOg.ll-d-.* 二s 二sz口 *u 占 -as.一 53 艮總沖59 01WET1詈 Im f HEPMIE mu 口 丄xod萬連IM upa&dn Hlnoa: fu 5 MUEavldJa pg 場lulTeo-tfm =1FIQC_5np*5 UO_E wQ-葫 t

17、poeT二-rm* M-B -KH10=g av-s 番Etv護(hù)usrIEH p 葺.tKdm*#_=a =-*&3M -pxsifcs- Yl*9veoe sss d m JU! Hw (IQgVTDlmSUBAAd220 0 -u 一 01 寸、o 0 -u 一o-lu 七 od-glp 七 ms 一PAAfT - qvvi bA-LUAIL JUILIliyiLWire lew SettingiLogsBlack SitiesBlock SawicesSdiodulvEjmiailIRuutei SlalmAttuched RtvireH lockup Settings Scl P ar

18、aword Aotilei Upf)iadcWiielvw Sttiingv Part F arwafddng tPori Trigg eiingWAN SoiupLAN IP Setup Dyinannic DNS Siafic RoulrsiLAN IP SetupLAN ICP * Sell!)回.一F SubflEt Mask|2 55 .懺5 *255. |t)hip Dtvcldnhip veto onHonei |d嶺 atoledl 工 iP use,is DHCP serwiEtsrtiriQ IP AddressL.廠Endlr y IP AdKlrBss廠.1 ”A.db

19、 呂 Rsseivatiain冃 |IP Aikfir&ssPwice ILiiifepAdd | Ej | Dalsla |Apply GertcelNETGEARraster mtac_M NEXT W|ralesi Rcutepr測試和驗(yàn)證:RO配置信息：interface EthernetBip address 10.0.30,1 tinterface Serial0clock DTECLK1 link-protocol ppp ip address 172,16,32.2 255.255.255,252 finterface Seriallclock DTE

20、CLK1 link-protocol ppp ppp authentication-mode chap ppp chap user bip address 17246,32.5 255.255,255.2521interface Serial2flowcontrol none async mode protocol link-protocol pppvquitripnetwork all More Press CTRL_C to break) R1配置信息:irterface EthernetOip address 18.0.10,1 255*255,255.0nat outbound 1 a

21、ddress-group pooll tinterface Serial0link-protocol pppppp pap local-user flybird password simple fh ip address 52!interfd匚巳 Serialllink-protocol pppip address 0 52 !interfdere Serial2flow-conirol noneasync mode protocollink-protocol pppquitripnetwork

22、allquitR3配置信息:interface Ethernetip address Iinterface SeridlB link-proiocol ppp ip address 172,16.32.6 255,255.255.252interface Seriallclock DTECLK1 link-proioGol ppp ip address 172_ 16；32；9 52interface SeriaL2 flow-control none asnc mode protocol linkproiocol

23、pppquitrip network allRO路由表：routeOJdis ip routRout irtg Tables: lestinalion/Nask Proto 0.0.30/0 Static 1(1.1, l .U/2i RIP /24 Direct10.2.115481/32 Direct/8 Direct 127,0.1/3? Direct /30 Direct /32 Direct /32 Direct 172,16,32.4/30 Direct /92 Direct 172 16,92 6/32 Direct 172,16.32.8/30RIP192.160,10.0/24RIPef00 廣6 a pl00000000000090JI iI 1r0X00000000001111eMNexthop 68 1 127.0