課后作業(yè)2017ccie security firewall-第七天

NPSECASA上交作業(yè)須知:作業(yè)以word格式上交到sech，郵件和作業(yè)格式為“人名-科目--YYYMMD-IEcityFirwal--NPSECASA上交作業(yè)須知:作業(yè)以word格式上交到sech，郵件和作業(yè)格式為“人名-科目--YYYMMD-IEcityFirwal--###第一部分-A/S-FOV4LAB實(shí)驗(yàn)拓?fù)?ASA1考點(diǎn)###G0（.10）G1（.10）G2G3（.10）（.10）E1/0E1/2E1/3E1/1OutsideInsideE0/0.1E0/0E0/0E0/1.1E2/0E2/2E2/3E2/1G2G3（.20）（.20）G0（.20）G1（.20）環(huán)境描述：1.分別是OtsdeIsie墻HstmeA1，SA（otaeSW。2.連接方式：兩臺(tái)ASAG0–3E1/0–3E2/0–3接口，兩臺(tái)路由器的E0/0接口分別接入交換機(jī)的E0/0和E0/1接口。地址范圍：Otide0/0-1/43.VLAN2（Outside）202.100.1.0/24VLAN4（FO）192.168.1.0/24VLAN5（Stateful）192.168.2.0/24VLAN3（Inside）10.1.1.0/24Iside路由器：Iside路由器：0/0–1/SW交換機(jī)：E1/0–VLAN2E1/1–VLAN3E1/2–VLAN4E1/3–VLAN5E2/0–VLAN2E2/1–VLAN3E2/2–VLAN4E2/3–VLAN5E0/0–VLAN2E0/1–VLAN3ASA1：G0–202.100.1.10/24G1–10.1.1.10/24ASA2：G0–202.100.1.20/24G1–10.1.1.20/241.注意事項(xiàng)：設(shè)備預(yù)配參考教主NL的W有BUioerSW實(shí)驗(yàn)需求：1.按照教主進(jìn)行預(yù)配2.A/S的O：AA實(shí)驗(yàn)需求：1.按照教主進(jìn)行預(yù)配2.A/S的O：AA(cong#shailoFailovrOnFailovritPimayFailovrANItrfac:FOGgabttrt2()UitPollfrqcy1scds,dtme5scondsItrfcePllrqcy5conds,dtime5scodsItrfcePliy1MonitordItfacs2of0umVrion:Os(),Mate()Lastalovrat:2TCDc9Tisst:riary-Activectvetm:5(s)ItraceOtsde():Normal(Monitrd)ItraceIide():NomalMonitord)Otrst:cdary-tadbyRdyctvetm:0(sc)ItraceOtsde():Normal(Monitrd)ItraceIide():NomalMonitord)tatflailorLgcalUdatetatstcsik:Uconigd.3.當(dāng)對(duì)應(yīng)交換機(jī)的E1/1口DOWN時(shí)，測(cè)試故障切換。4.指派ASA1的G3接口為Stateful鏈路，并測(cè)試故障切換。5.更改單元輪詢(xún)時(shí)間為200毫秒和hold時(shí)間為6003秒和hold時(shí)間為9秒。###第二部分-A/A-FOV4LAB考點(diǎn)###實(shí)驗(yàn)拓?fù)?C1ActiveASA1C2SP1Group2InsideVLAN3（SP1_UP）202.100.1.0/24VLAN6（SP1_Down）202.100.2.0/24SWVLAN4（SP2_UP）61.128.1.0/24VLAN7（SP2_Down）61.128.2.0/24C2SP2ActiveASA2C1Group1環(huán)境描述：1.（otae###第二部分-A/A-FOV4LAB考點(diǎn)###實(shí)驗(yàn)拓?fù)?C1ActiveASA1C2SP1Group2InsideVLAN3（SP1_UP）202.100.1.0/24VLAN6（SP1_Down）202.100.2.0/24SWVLAN4（SP2_UP）61.128.1.0/24VLAN7（SP2_Down）61.128.2.0/24C2SP2ActiveASA2C1Group1環(huán)境描述：1.（otaeS1S2Isie火墻otaeASA，AA2Hstm：W。2.連接方式：兩臺(tái)ASAG0–3E1/0–3E2/0–3接口，三臺(tái)路由器的E0/0接口分別接入交換機(jī)的E0/02接口。地址范圍：P10/0-1/4&.1/4SP2路由器：E0/0–61.128.1.124&222.1.1.2/24Isde0/0–1/4&.1/24SW交換機(jī)：E1/0VLAN33.VLAN2（Internet）222.1.1.0/24E1/1–VLAN4E1/2–VLAN5–VLANE1/1–VLAN4E1/2–VLAN5–VLAN6，7E2/0–VLAN3E2/1–VLAN4E2/2–VLAN5–VLAN6，7–VLAN6，7–VLAN2，3E0/1–VLAN2，42.注意事項(xiàng)：設(shè)備預(yù)配參考教主NL的W有BUioerSW實(shí)驗(yàn)需求：1.按照教主A/A-FO。AA(conig#shfilovrFailovrOnFailovritPimayFailovrANItrfac:FO/taigabittrt2()UitPollfrqcy1scds,dtme5scondsItrfcePllrqcy5conds,dtime5scodsItrfcePliy1MonitordItfacs2of0umVrion:Os(),Mate()Group1lstfilovrat:4UTCDc0Group2lstfilovrat:1UTCDc0Tsst:roup1PimaryState:ctvTsst:roup1PimaryState:ctvetmState:ctvetmctvetadbyRady6(sec)roup2c1ItrfaceOtde():Norml(Montord)c1ItrfaceIsde():Normal(Not-Moitord)c2ItrfaceOtde():Norml(Moitord)c2ItrfaceIsde():Normal(Not-Monitord)Otrst:roup1SecondaryState:ctvetState:ctvetmtadbydy0(sec)ctve38(sec)roup2c1ItrfaceOtde():Norml(Montord)c1ItrfaceIsde():Normal(Not-Moitord)c2ItrfaceOtde():Norml(Moitord)c2ItrfaceIsde():Normal(Not-Monitord)tatflailorLgcalUdatetatstcsik:FO/tagbittrt2()ttflGrlsyscmdptmeRCsricsTCPconnUDPconnPtblXlatTmoutPv6DtblIKEv1SAIKEv1P2IKEv2SAIKEv2P2CTCPupdIdDHCPupdPssionRouteUsr-dtitymit96000000000000000030000000000000000000rcvrer