（推薦）網(wǎng)絡工程實習報告

1、如果您需要使用本文檔，請點擊下載按鈕下載!南京工程學院實習報告 課 程 名 稱 網(wǎng)絡工程實習 院（系、部、中心） 計算機工程學院 專 業(yè) 網(wǎng)絡工程 班 級 網(wǎng)絡 132 起 止 日 期 2015.4.62015.4.17 指 導 教 師 袁宗福 如果您需要使用本文檔，請點擊下載按鈕下載!一、 報告摘要大二下學期的六七周，我們網(wǎng)絡工程班在建策公司進行了首次實習，CCIE大神老師講課很生動，在為期兩周的實習期間，學到了很多。在建策，老師是以實際案例給我們講課，從工程的角度分析客戶需求，需要怎樣的技術支持，總的來說，偏重于實踐應用。期間，CCIE老師帶我們這一組學生主要做了以下幾個實驗：單臂路由，靜

2、態(tài)路由和訪問控制列表，分別對應地鐵網(wǎng)或者校園網(wǎng)，企業(yè)的路由備份以及服務器過濾方面的知識。很實際的問題，我們對做這些實驗的印象至今很深刻。除此之外，老師還給我們講了些我們學生很關心的問題，比如學校電信寬帶的PPPOE連接，無線路由沒作用的原因，無線加密方式以及破解方法等等。重點介紹了他從事這行業(yè)的一些經(jīng)歷，網(wǎng)絡行業(yè)現(xiàn)在的形勢以及預測一下將來的行情。讓我們對網(wǎng)絡工程有了一定的了解，有助于我們對未來有個清晰的規(guī)劃。二、 摘要翻譯In the sixth and seventh week of the next semester of our sophomore year, we network en

3、gineering students went to JIANCE company for internship for the first time. The teachers lesson who has a certificate “CCIE” is very lively. During the two weeks of internship, we learned a lot.In the company, the teacher gave us a lecture on actual cases. From the perspective of the project, we an

4、alysed customers demand and what kind of technical support his need. In general, the class was focus on practical application. During the classes. The CCIE teacher took our a group of students to do mainly the following experiments: single-arm routing, static routing and access control lists, corres

5、ponding to the subway network or campus network, the companys routing backup and server filter. They are such practical problems that we have a deep impression on these experiments up to now.In addition, the teacher also told us some interesting things that our students are very concerned about, suc

6、h as the PPPOE connection of campus telecom broadband, the cause of the wireless router which is invalid in school, wirelesss way of encryption and how to decode and so on. He mainly introduced some experiences when he was engaged in this industry, the present situation of 如果您需要使用本文檔，請點擊下載按鈕下載!netwo

7、rk industry and he also forecasted the future market. Lets have a certain understand of network engineering which can help us have a clear plan for the future.三、 實習目的本次實習是我們作為網(wǎng)絡工程學生的一次知識實踐，其主要目的在于：1. 掌握局域網(wǎng)的設計組建方法，并知曉對局域網(wǎng)的管理和排錯維護等理論知識。2. 熟練運用網(wǎng)絡配置命令，主要掌握有單臂路由，靜態(tài)路由和訪問控制列表配置方法。3. 將理論和實際工程結合起來，學會需求分析，增長做

8、工程的見聞。4. 認清社會現(xiàn)實，對計算機相關行業(yè)有一定的了解。四、 實習內(nèi)容分析(一) 實現(xiàn)在不同VLAN的兩臺主機的相互訪問。案例：某企業(yè)的需求，需要將兩個部門的某兩臺主機能互相訪問。原理：在兩臺主機所連的三層交換機上給同VLAN配置ip地址，作為主機的網(wǎng)關，交換機和三層交換機的連接接口配成trunk模式，使不同VLAN通過共享鏈路與其它交換機中的相同VLAN通信。實踐：二層交換機：SwitchenSwitch#conf tEnter configuration commands, one per line. End with CNTL/Z.Switch(config)#vlan 2如果您需

9、要使用本文檔，請點擊下載按鈕下載!Switch(config-vlan)#int f0/2Switch(config-if)#switch acc vlan 2Switch(config-if)#int f0/1Switch(config-if)#switch mode trunkSwitch(config-if)#endSwitch#show vlan VLAN Name Status Ports- - - -1 default active Fa0/3, Fa0/4, Fa0/5, Fa0/6 Fa0/7, Fa0/8, Fa0/9, Fa0/10 Fa0/11, Fa0/12, Fa0/

10、13, Fa0/14 Fa0/15, Fa0/16, Fa0/17, Fa0/18 Fa0/19, Fa0/20, Fa0/21, Fa0/22 Fa0/23, Fa0/24, Gig1/1, Gig1/22 VLAN0002 active Fa0/21002 fddi-default act/unsup 1003 token-ring-default act/unsup 1004 fddinet-default act/unsup 1005 trnet-default act/unsup 三層交換機：SwitchenSwitch#conf tEnter configuration comma

11、nds, one per line. End with CNTL/Z.Switch(config)#ip routingSwitch(config)#vlan 2Switch(config-vlan)#vlan 3Switch(config-vlan)#int f0/2Switch(config-if)#switch acc vlan 3Switch(config-if)#int vlan 2Switch(config-if)#ip add Switch(config-if)#int vlan 3Switch(config-if)#ip add

12、 Switch(config-if)#int f0/1Switch(config-if)#switch trunk en dot1q /給端口封裝協(xié)議Switch(config-if)#switch mode trunkSwitch(config-if)#endSwitch#show vlanVLAN Name Status Ports- - - -1 default active Fa0/3, Fa0/4, Fa0/5, Fa0/6 Fa0/7, Fa0/8, Fa0/9, Fa0/10如果您需要使用本文檔，請點擊下載按鈕下載! Fa0/11

13、, Fa0/12, Fa0/13, Fa0/14 Fa0/15, Fa0/16, Fa0/17, Fa0/18 Fa0/19, Fa0/20, Fa0/21, Fa0/22 Fa0/23, Fa0/24, Gig0/1, Gig0/22 VLAN0002 active 3 VLAN0003 active Fa0/21002 fddi-default act/unsup 1003 token-ring-default act/unsup 1004 fddinet-default act/unsup 1005 trnet-default act/unsup Switch#show ip int b

14、riInterface IP-Address OK? Method Status Protocol FastEthernet0/1 unassigned YES unset up up FastEthernet0/2 unassigned YES unset up up Vlan1 unassigned YES unset administratively down down Vlan2 YES manual up up Vlan3 YES manual up up驗證：PC0 ping PC1注意點：三層交換機封裝端口配trunk的原理Cisc

15、o設備支持ISL和802.1q（dot1Q）協(xié)議。華為只支持802.1q。DOT1Q和ISL的區(qū)別：DOT1Q是各類產(chǎn)品的VLAN通用協(xié)議模式，Dot1q是一種普遍使用的標準，適用所有交換機與路由設備。支持超過1024vlan,而ISL最多支持1024個vlan。ISL是CISCO設備的專用協(xié)議，適用于Cisco設備。ISL(Interior Switching Link)交換機間協(xié)議用于實現(xiàn)CISCO交換機間的VLAN中繼。它是一個信息包標記協(xié)議，在支持ISL接口上發(fā)送的幀由一個標準以太網(wǎng)幀及相關的VLAN信息組成。(二) 實現(xiàn)某臺主機只能以web的形式訪問服務器。如果您需要使用本文檔，請點

16、擊下載按鈕下載!案例：出于安全考慮，地鐵某臺服務器只允許通過web形式訪問，任何主機不能ping通它，且主機間不能相互訪問。原理：通過給路由器或者三層交換機配置訪問控制列表，使數(shù)據(jù)包只允許通過80端口，起到過濾的作用。實踐：二層交換機Switch0：Switch#conf tEnter configuration commands, one per line. End with CNTL/Z.Switch(config)#vlan 2Switch(config-vlan)#int f0/1Switch(config-if)#switch acc vlan 2Switch(config-if)#

17、int f0/2Switch(config-if)#switch mode trunkSwitch(config)#endSwitch#show vlanVLAN Name Status Ports- - - -1 default active Fa0/3, Fa0/4, Fa0/5, Fa0/6 Fa0/7, Fa0/8, Fa0/9, Fa0/10 Fa0/11, Fa0/12, Fa0/13, Fa0/14 Fa0/15, Fa0/16, Fa0/17, Fa0/18 Fa0/19, Fa0/20, Fa0/21, Fa0/22 Fa0/23, Fa0/24, Gig1/1, Gig1/

18、22 VLAN0002 active Fa0/11002 fddi-default act/unsup 1003 token-ring-default act/unsup 1004 fddinet-default act/unsup 1005 trnet-default act/unsup 如果您需要使用本文檔，請點擊下載按鈕下載!二層交換機Switch1：Switch#conf tEnter configuration commands, one per line. End with CNTL/Z.Switch(config)#vlan 3Switch(config-vlan)#int f0

19、/1Switch(config-if)#switch acc vlan 3Switch(config-if)#int f0/2Switch(config-if)#switch mode trunkSwitch(config)#endSwitch#show vlanVLAN Name Status Ports- - - -1 default active Fa0/3, Fa0/4, Fa0/5, Fa0/6 Fa0/7, Fa0/8, Fa0/9, Fa0/10 Fa0/11, Fa0/12, Fa0/13, Fa0/14 Fa0/15, Fa0/16, Fa0/17, Fa0/18 Fa0/1

20、9, Fa0/20, Fa0/21, Fa0/22 Fa0/23, Fa0/24, Gig1/1, Gig1/23 VLAN0003 active Fa0/11002 fddi-default act/unsup 1003 token-ring-default act/unsup 1004 fddinet-default act/unsup 1005 trnet-default act/unsup三層交換機：Switch#conf tEnter configuration commands, one per line. End with CNTL/Z.Switch(config)#ip rou

21、tingSwitch(config)#vlan 2Switch(config-vlan)#vlan 3Switch(config-vlan)#vlan 4Switch(config-vlan)#int vlan 2Switch(config-if)#ip add Switch(config-if)#int vlan 3Switch(config-if)#ip add Switch(config-if)#int vlan 4Switch(config-if)#ip add

22、Switch(config-if)#int f0/3Switch(config-if)#switch acc vlan 4Switch(config-if)#int f0/4Switch(config-if)#switch acc vlan 4Switch(config-if)#int f0/1Switch(config-if)#switch trunk en dot1q如果您需要使用本文檔，請點擊下載按鈕下載!Switch(config-if)#switch mode trunkSwitch(config-if)#int f0/2Switch(config-if)#

23、switch trunk en dot1qSwitch(config-if)#switch mode trunkSwitch#show vlanVLAN Name Status Ports- - - -1 default active Fa0/5, Fa0/6, Fa0/7, Fa0/8 Fa0/9, Fa0/10, Fa0/11, Fa0/12 Fa0/13, Fa0/14, Fa0/15, Fa0/16 Fa0/17, Fa0/18, Fa0/19, Fa0/20 Fa0/21, Fa0/22, Fa0/23, Fa0/24 Gig0/1, Gig0/22 VLAN0002 active

24、3 VLAN0003 active 4 VLAN0004 active Fa0/3, Fa0/41002 fddi-default act/unsup 1003 token-ring-default act/unsup 1004 fddinet-default act/unsup 1005 trnet-default act/unsupSwitch#show ip int briInterface IP-Address OK? Method Status Protocol FastEthernet0/1 unassigned YES unset up up FastEthernet0/2 un

25、assigned YES unset up up FastEthernet0/3 unassigned YES unset up up FastEthernet0/4 unassigned YES unset up up Vlan1 unassigned YES unset administratively down down Vlan2 YES manual up up Vlan3 YES manual up up Vlan4 YES manual up upSwitch#conf tEnter configuratio

26、n commands, one per line. End with CNTL/Z.Switch(config)# access-list 100 permit ip 55 55如果您需要使用本文檔，請點擊下載按鈕下載!Switch(config)#int vlan 2Switch(config-if)# ip access-group 100 outSwitch(config-if)#exitSwitch(config)# access-list 101 permit ip 55

27、 55Switch(config)#int vlan 3Switch(config-if)# ip access-group 101 outSwitch(config-if)#exitSwitch(config)# access-list 103 permit tcp any host eq 80Switch(config)# access-list 103 deny ip any host Switch(config)# access-list 103 permit ip any anySwitch(conf

28、ig)#int vlan 4Switch(config-if)# ip access-group 103 out/訪問列表101和102實現(xiàn)：pc0和pc1不能相互訪問，但都能訪問server0/訪問列表103實現(xiàn)：所有ip只能以web形式訪問server1Switch#show access-lExtended IP access list 100 permit ip 55 55Extended IP access list 101 permit ip 55 192.168.3.

29、0 55Extended IP access list 103 permit tcp any host eq www deny ip any host permit ip any any驗證：1) PC0 無法ping通 PC12) PC0 無法ping通 server13) PC0 通過web訪問 server1如果您需要使用本文檔，請點擊下載按鈕下載!(三) 實現(xiàn)線路備份，在某條線路故障的情況下，導通另一條線路。特別說明：本次實驗是在上次vlan互訪實驗和過濾實驗的基礎上進行拓展的，是個綜合實驗，所以之前的已經(jīng)配置過的相關命令就不

30、再贅述了。案例：某用戶正常上網(wǎng)時通聯(lián)通的網(wǎng)，當聯(lián)通網(wǎng)故障時，則自動切換到移動網(wǎng)。原理：在中間路由器上配置默認靜態(tài)路由時，多設置一個管理距離，則管理距離小的先通，大的不通。實踐：三層交換機：將f0/5劃入vlan5，f0/6劃入vlan6，f0/23和f0/24劃入vlan2。給vlan2，vlan5和vlan6分配地址，作為所在vlan主機的網(wǎng)關。具體配置命令如上兩次實驗，略過。服務器過濾采用的訪問控制列表實現(xiàn)如上次實驗，不再贅述。給端口f0/1配置IP需要注意：Switch(config)#int f0/1Switch(config-if)# no switchport /開啟三層端口配置功

31、能Switch(config-if)# ip address 靜態(tài)路由Switch(config)# ip route FastEthernet0/1 /采用默認靜態(tài)路由形式Switch#show ip routeCodes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA e

32、xternal type 1, N2 - OSPF NSSA external type 2如果您需要使用本文檔，請點擊下載按鈕下載! E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area * - candidate default, U - per-user static route, o - ODR P - periodic downloaded static routeGat

33、eway of last resort is to network C /24 is directly connected, FastEthernet0/1C /24 is directly connected, Vlan2C /24 is directly connected, Vlan5C /24 is directly connected, Vlan6S* /0 is directly connected, FastEthernet0/1中間路由器Route

34、0：給端口f0/0，f0/1，f1/0分配地址后，配置靜態(tài)路由。發(fā)出方向：Router(config)# ip route FastEthernet0/1 Router(config)# ip route FastEthernet1/0 34 /改這條默認靜態(tài)路由管理距離為34返回方向：Router(config)# ip route FastEthernet0/0 Router(config)# ip route FastEt

35、hernet0/0Router#show ip routeCodes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS,

36、 L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area * - candidate default, U - per-user static route, o - ODR P - periodic downloaded static routeGateway of last resort is to network C /24 is directly connected, FastEthernet0/0S /24 is directly connect

37、ed, FastEthernet0/0S /24 is directly connected, FastEthernet0/0C /24 is directly connected, FastEthernet0/1C /24 is directly connected, FastEthernet1/0S* /0 is directly connected, FastEthernet0/1路由器Router1：給端口f0/0，f0/1分配地址后，配置靜態(tài)路由。Router(config)# ip route 192.168.

38、1.0 FastEthernet0/0Router(config)# ip route FastEthernet0/0Router(config)# ip route FastEthernet0/0Router#show ip route如果您需要使用本文檔，請點擊下載按鈕下載!Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP

39、 external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area * - candidate default, U - per-user static route, o - ODR P

40、- periodic downloaded static routeGateway of last resort is not setC /8 is directly connected, FastEthernet0/1S /24 is directly connected, FastEthernet0/0S /24 is directly connected, FastEthernet0/0S /24 is directly connected, FastEthernet0/0C /24 is

41、directly connected, FastEthernet0/0路由器Router2：給端口f0/0，f0/1分配地址后，配置靜態(tài)路由。Router(config)# ip route FastEthernet0/0Router(config)# ip route FastEthernet0/0Router(config)# ip route FastEthernet0/0Router#show ip routeCodes: C -

42、connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area * - candidate default, U