acl綜合配置練習

1、實用文檔ACL綜合配置練習姓名： 學號： 班級：任務1:配置帶有CHAP身份驗證的PPP步驟1:將HQ和B1之間的鏈路配置為使用帶有 CHAP身份驗證的PPP封裝Password:HQ>enablePassword:HQ#config tHQ(config)#username B1 password cisco123HQ(config)#interface s0/0/0HQ(config-if)#no shutdownHQ(config-if)#encapsulation pppHQ(config-if)#encapsulation pppHQ(config-if)#ppp authen

2、tication chapHQ(config-if)#endHQ#copy running-config startup-configHQ#Password:B1>enablePassword:B1#config t文案大全實用文檔B1(config)#username HQ password cisco123B1(config)#interface s0/0/0B1(config-if)#no shutdownB1(config-if)#encapsulation pppB1(config-if)#ppp authentication chapB1(config-if)#endB1#c

3、opy running-config startup-config步驟2:將HQ和B2之間的鏈路配置為使用帶有 CHAP身份驗證的PPP封裝HQ#config tHQ(config)#username B2 password cisco123HQ(config)#interface s0/0/1HQ(config-if)#no shutdownHQ(config-if)#encapsulation pppHQ(config-if)#ppp authentication chapHQ(config-if)#endHQ#copy running-config startup-configHQ#Pa

4、ssword:B2>enable文案大全實用文檔Password:B2#config tB2(config)#username HQ password cisco123B2(config)#interface s0/0/0B2(config-if)#no shutdownB2(config-if)#encapsulation pppB2(config-if)#ppp authentication chapB2(config-if)#endB2#copy running-config startup-config步驟3:檢查路由器之間是否已恢復連通性HQ ping B1HQtping 10

5、.1,1,2Type escape七口 ahcrt.Sending Sr 100-byt® I CHS Seties 七0 10-1.1.2, 七土正且 cut is 2 里且亡duel 鳥二MillSuccess rate is 100 percent ：S/S) * round-trip min/avg/rruax = 31/31/32 hsHQ ping B2HQtping Iyp& Emump型 asquence tcSending 5 r 100-teyts ICMP Ectics te r tirasnut is W seccnds

6、 ： p I t i rSuccess race im 100 percent f5/6i r rcuni-trip Kin/avg/xa>c = 19/23/32 xs任務2:配置默認路由步驟1:配置從HQ到ISP的默認路由HQ#config tHQ(config)#ip route s0/1/0HQ(config)#end文案大全實用文檔HQ#copy running-config startup-configHQ#步驟2：測t與 Web Server的連通性Hoping 209,Type escape sequence tc abort, Sendi

7、ng 5. lOO*byte ICMP 三uticm ed 209.165.2 02,130f tixecut is 2 seccnds r i i rSuuuemw80 percent (4/5) f round-teip nin/av$/'iLax = 34/51/G2 iu任務3:配置OSPF路由步驟1:在HQ上配置OSPFHQ#config tHQ(config)#router ospf 1HQ(config-router)#network 55 area 0HQ(config-router)#network

8、55 area 0HQ(config-router)#network area 0HQ(config-router)#network area 0HQ(config-router)#passive-interface f0/0HQ(config-router)#passive-interface f0/1HQ(config-router)#passive-interface s0/1/0HQ(config-router)#log-adjacency-changesHQ(config-router)#default-inform

9、ation originateHQ(config-router)#endHQ#copy running-config startup-configHQ#步驟2:在B1和B2上酉己置 OSPF文案大全實用文檔Password:B1>enablePassword:B1#config tB1(config)#router ospf 1B1(config-router)#network 55 area 0B1(config-router)#network 55 area 0B1(config-router)#network 10

10、.1.1.0 area 0B1(config)#router ospf 1B1(config-router)#passive-interface f0/0B1(config-router)#passive-interface f0/1B1(config-router)#endB1#copy running-config startup-configB1#Password:B2>enablePassword:B2#config tB2(config)#router ospf 1B2(config-router)#network area 0

11、文案大全實用文檔B2(config-router)#network 55 area 0B2(config-router)#network 55 area 0B2(config-router)#passive-interface f0/0B2(config-router)#passive-interface f0/1B2(config-router)#endB2#copy running-config startup-configB2#步驟3:測試整個網(wǎng)絡(luò)的連通性PC1 ping PC2PC1 ping PC4PC1 ping

12、PC5文案大全實用文檔PC1 ping PC6POping 10.1,70.2Pinging 101.70.2 with 32 bytes of data zReply from 10.1x70.2: bytes=3S time=lOSim TTL=126Reply front : byteg=32 t±JHe=10 5nis TTI12Reply from : bytas=32 tima=78m3 TTL=126Reply from : bytes=32 tima=14Lnis TTL=126Ping statistics fo

13、r :Packets: Sent = 4 F Received = 4, Lost = 0 f0% Ics3)tAppcoxunate round trip t jjneg in mi Hi-seconds:MiniJBum = TSm曰. 兩*311 = 141m. Awe工age = 09tgPC1 ping Server-PT 內(nèi)部網(wǎng)PC>ping LO.L.BQ.lttinging 10.1.B0.1 with 32 bytes af data:Reply from 10.1. B0.15 z bytea=32 t;±iaE=125iiiH TTL12

14、6Reply flam 10.1. SO . lz toytea=32 tjjna=127niB TTL=126Reply from 61 i>ytea=32 t±rag=l4口tu TTL-12 6Reply from : bytas=32 EijBe=141jns TTT,=126Ping statistics for 10.1.GO.16:Packets; Sent = 4. Received = 4. Last - 0 (Ot lass)tApproKiznate round teip time3 in milli-seeondg z

15、MiniEUHi 125mMr MaxiJimiii = 141ni3, Average = 133msPC1 ping Server-PT Web Server文案大全實用文檔PC5 ping Server-PT Web Server任務4:實施多項ACL平安策略 步驟1:實施第一項平安策略HQ>enablePassword:HQ#config tHQ(config)#access-list 10 deny 55HQ(config)#access-list 10 permit anyHQ(config)#interface f0/1HQ(config-

16、if)#ip access-group 10 outHQ(config-if)#endHQ#copy running-config startup-config文案大全實用文檔HQ#步驟2:檢查第一項平安策略是否已實現(xiàn)PC5 ping PC1步驟4:實施第二項平安策略B1(config)#access-list 115 deny ip host host B1(config)#access-list 115 permit ip any anyB1(config)#interface f0/0B1(config-if)#ip access-group 115

17、 inB1(config-if)#endB1#copy running-config startup-configB1#步驟5:檢查第二項平安策略是否已實現(xiàn)PC5 ping PC3文案大全實用文檔步驟7:實施第三項平安策略 配置前測試；pc2|L-irn|fxPhysical Config Desktop Software/Services| URL hLtp："lQ 1.80 16| G* StopIntranet Web ServerTARUNG: kUTHOKIZED M7CESS DILI!This is a test page to verify that you can

18、access the Intranet ServerPC2 ping Server-PT 內(nèi)部的PC3 ping Server-PT 內(nèi)部的文案大全實用文檔01110Physical Config Desktop Software/Services配置HQ(config)#access-list 101 deny tcp 3 host 6eq wwwHQ(config)#access-list 101 permit ip any anyHQ(config)#interface f0/0HQ(config-if)#ip access-group

19、 101 in配置后測試文案大全實用文檔DesktopPhysical ConfigSoftware/Services PC 3【eb BrowserURL hUp：/H0.L80 15Request Tintepui步驟10：實施第四項平安策略B2>enablePassword:B2#config tB2(config)#ip access-list extended NO_FTPB2(config-ext-nacl)#deny tcp 55 host eq 21B2(config-ext-nacl)#permit ip any any文案大