網(wǎng)絡(luò)實(shí)訓(xùn)報(bào)告

目錄一、實(shí)訓(xùn)目的 2二、實(shí)訓(xùn)步驟 32.1配置與管理 32.2網(wǎng)絡(luò)互聯(lián)部分設(shè)計(jì) 3三、實(shí)訓(xùn)要求 4四、實(shí)訓(xùn)項(xiàng)目及內(nèi)容 54.1實(shí)驗(yàn)一：NAT+DHCP 54.2實(shí)驗(yàn)二：Vrrp 104.3實(shí)驗(yàn)三：ACL 124.4實(shí)驗(yàn)四：小綜合 154.5實(shí)驗(yàn)五：NAT 224.6實(shí)驗(yàn)六：OSPF 254.7實(shí)驗(yàn)七：綜合實(shí)驗(yàn) 27五、總結(jié)及體會(huì) 35參考資料 36

一、實(shí)訓(xùn)目的

通過本次實(shí)訓(xùn)，進(jìn)一步熟悉并掌握網(wǎng)絡(luò)的基本概念，提高基本操作技能。用現(xiàn)有的設(shè)備完成一個(gè)真實(shí)網(wǎng)絡(luò)的設(shè)計(jì)與實(shí)現(xiàn),并進(jìn)行網(wǎng)絡(luò)安全規(guī)劃。通過理論研究際應(yīng)用中的使用方法，加深對(duì)網(wǎng)絡(luò)技術(shù)的理解。通過實(shí)際應(yīng)用鍛煉動(dòng)手能力和思維能力。培養(yǎng)學(xué)生系統(tǒng)、完整、具體地解決實(shí)際問題的職業(yè)綜合能力，具備收集信息、制定計(jì)劃、實(shí)施計(jì)劃和自我評(píng)價(jià)的能力，鍛煉團(tuán)隊(duì)工作的能力，學(xué)生經(jīng)歷綜合實(shí)訓(xùn)完整的工作過程，學(xué)會(huì)網(wǎng)絡(luò)拓?fù)鋱D的繪制、用網(wǎng)絡(luò)設(shè)備組建和管理網(wǎng)絡(luò)的核心能力和關(guān)鍵能力。

二、實(shí)訓(xùn)步驟 2.1配置與管理網(wǎng)絡(luò)設(shè)計(jì)，網(wǎng)絡(luò)分析，Windows操作系統(tǒng)基本配置，Windows系統(tǒng)管理，Windows下常用服務(wù)器的配置與管理，Windows下安全工具的綜合應(yīng)用。2.2網(wǎng)絡(luò)互聯(lián)部分設(shè)計(jì)根據(jù)實(shí)際情況自行設(shè)計(jì)網(wǎng)絡(luò)拓?fù)浣Y(jié)構(gòu)，要求在設(shè)計(jì)中對(duì)二層、三層交換機(jī)的設(shè)計(jì)合理，并對(duì)網(wǎng)絡(luò)中的路由做出合理的部署。實(shí)訓(xùn)內(nèi)容知識(shí)點(diǎn)和操作要點(diǎn)：設(shè)計(jì)過程中要求有以下的知識(shí)要點(diǎn)：高級(jí)VLAN技術(shù)應(yīng)用VLAN間路由技術(shù)STP技術(shù)應(yīng)用ACL基礎(chǔ)及高級(jí)應(yīng)用路由設(shè)計(jì)（靜態(tài)、RIP、OSPF綜合）廣域網(wǎng)技術(shù)（PPP）

三、實(shí)訓(xùn)要求根據(jù)用戶需求進(jìn)行網(wǎng)絡(luò)設(shè)計(jì)，熟練進(jìn)行Windows操作系統(tǒng)的安裝與基本配置，掌握Windows系統(tǒng)管理基本方法，掌握Windows下常用服務(wù)器的配置與管理方法，熟練應(yīng)用Windows下的安全工具。

四、實(shí)訓(xùn)項(xiàng)目及內(nèi)容4.1實(shí)驗(yàn)一：NAT+DHCP圖4-1在RT2s0/1/0接口配置NAT使Pc1和RT1都可登錄PC3，在RT2和RT4之間創(chuàng)建隧道PC1可以和PC2通信，RT2開啟DHCP功能設(shè)置IP網(wǎng)段，子網(wǎng)掩碼,RT1可以自動(dòng)獲取IP RT1<RT1>sysSystemView:returntoUserViewwithCtrl+Z.[RT1]intg0/0/0[RT1-GigabitEthernet0/0/0]ipaddhcp-alloc[RT1-GigabitEthernet0/0/0]disipintbrief*down:administrativelydown(s):spoofingInterfacePhysicalProtocolIPAddressDescriptionGigabitEthernet0/0/0upupGigabitEt...GigabitEthernet0/0/1downdownunassignedGigabitEt...GigabitEthernet0/0/2downdownunassignedGigabitEt...GigabitEthernet0/0/3downdownunassignedGigabitEt...Serial0/1/0downdownunassignedSerial0/1...Serial0/1/1downdownunassignedSerial0/1...Serial0/1/2downdownunassignedSerial0/1...Serial0/1/3downdownunassignedSerial0/1...[RT1]pingPING:56databytes,pressCTRL_CtobreakRequesttimeoutReplyfrom:bytes=56Sequence=2ttl=62time=9msReplyfrom:bytes=56Sequence=3ttl=62time=26msReplyfrom:bytes=56Sequence=4ttl=62time=4msReplyfrom:bytes=56Sequence=5ttl=62time=4msRT2<RT2>sys[RT2]intg0/0/1[RT2-GigabitEthernet0/0/1]ipad5424[RT2-GigabitEthernet0/0/1]qu[RT2]intg0/0/0[RT2-GigabitEthernet0/0/0]ipad5424[RT2-GigabitEthernet0/0/0]ints0/1/0[RT2-Serial0/1/0]ipad24[RT2-Serial0/1/0]qu[RT2]dhcpenableDHCPisenabledsuccessfully![RT2]dhcpserverip-pool1[RT2-dhcp-pool-1]networkmask[RT2-dhcp-pool-1]gateway-list54[RT2-dhcp-pool-1]expiredday1[RT2-dhcp-pool-1]qu[RT2]iproute-static0[RT2]pingPING:56databytes,pressCTRL_CtobreakReplyfrom:bytes=56Sequence=1ttl=254time=25msReplyfrom:bytes=56Sequence=2ttl=254time=5msReplyfrom:bytes=56Sequence=3ttl=254time=5msReplyfrom:bytes=56Sequence=4ttl=254time=4msRequesttimeoutpingstatistics5packet(s)transmitted4packet(s)received20.00%packetlossround-tripmin/avg/max=4/9/25ms[RT2]intTunnel1[RT2-Tunnel1]source[RT2-Tunnel1]destination[RT2-Tunnel1]%Dec121:59:30:2132015RT2IFNET/3/LINK_UPDOWN:Tunnel1linkstatusisUP.%Dec121:59:30:2132015RT2IFNET/5/LINEPROTO_UPDOWN:LineprotocolontheinterfaceTunnel1isUP.[RT2-Tunnel1]ipad24[RT2-Tunnel1]qu[RT2]iproute-static24Tunnel1[RT2]aclnumber2000[RT2-acl-basic-2000]rule1permits55[RT2-acl-basic-2000]rule2permits55[RT2-acl-basic-2000]qu[RT2]ints0/1/0[RT2-Serial0/1/0]natoutbound2000[RT2-Serial0/1/0]qu[RT2]disnatsessionTherearecurrently5NATsessions:ProtocolGlobalAddrPortInsideAddrPortDestAddrPortICMP122883703537035status:11TTL:00:00:10Left:00:00:01VPN:ICMP122923805938059status:11TTL:00:00:10Left:00:00:06VPN:ICMP122893729137291status:11TTL:00:00:10Left:00:00:02VPN:ICMP122903754737547status:11TTL:00:00:10Left:00:00:03VPN:ICMP122913780337803status:11TTL:00:00:10Left:00:00:05VPN:RT3<RT3>sys[RT3]ints0/1/0[RT3-Serial0/1/0]ipad24[RT3-Serial0/1/0]%Dec121:50:56:5052015RT3IFNET/5/PROTOCOL_UPDOWN:ProtocolPPPIPCPontheinterfaceSerial0/1/0isUP.[RT3-Serial0/1/0]qu[RT3]ints0/1/1[RT3-Serial0/1/1]ipad24[RT3-Serial0/1/1]intg0/0/0[RT3-GigabitEthernet0/0/0]ipad5424[RT3-GigabitEthernet0/0/0]%Dec121:53:15:0962015RT3IFNET/5/PROTOCOL_UPDOWN:ProtocolPPPIPCPontheinterfaceSerial0/1/1isUP.RT4<RT4>sysSystemView:returntoUserViewwithCtrl+Z.[RT4]ints0/1/1[RT4-Serial0/1/1]ipad24[RT4-Serial0/1/1]%Dec121:53:15:1612015RT4IFNET/5/PROTOCOL_UPDOWN:ProtocolPPPIPCPontheinterfaceSerial0/1/1isUP.[RT4-Serial0/1/1]intg0/0/0[RT4-GigabitEthernet0/0/0]ipad5424[RT4-GigabitEthernet0/0/0]qu[RT4]iproute-static0[RT4]intTunnel1[RT4-Tunnel1]source[RT4-Tunnel1]destination[RT4-Tunnel1]%Dec122:00:32:6352015RT4IFNET/3/LINK_UPDOWN:Tunnel1linkstatusisUP.%Dec122:00:32:6352015RT4IFNET/5/LINEPROTO_UPDOWN:LineprotocolontheinterfaceTunnel1isUP.[RT4-Tunnel1]ipad24[RT4-Tunnel1]qu[RT4]iproute-static24Tunnel14.2實(shí)驗(yàn)二：Vrrp圖4-2RT1interfaceGigabitEthernet0/0/0portlink-moderouteipaddress5224vrrpvrid1virtual-ip54vrrpvrid1priority120rip1undosummaryversion2networknetworkinterfaces0/1/0ipaddress24RT2interfaceGigabitEthernet0/0/0portlink-moderouteipaddress5324vrrpvrid1virtual-ip54rip1undosummaryversion2networknetworkinterfaces0/1/1ipaddress24RT3interfaceSerial0/1/0link-protocolpppipaddressinterfaceSerial0/1/1link-protocolpppipaddressinterfaceLoopBack0ipaddress55rip1undosummaryversion2network

4.3實(shí)驗(yàn)三：ACL圖4-3需求：R1可以ping通R2，不可以telnetR2,R3可以ping通R2,可以telnetR2RT1<RT1>sysSystemView:returntoUserViewwithCtrl+Z.[RT1]ints0/1/0[RT1-Serial0/1/0]ipad24[RT1-Serial0/1/0]%Dec218:51:58:8912015RT1IFNET/5/PROTOCOL_UPDOWN:ProtocolPPPIPCPontheinterfaceSerial0/1/0isUP.[RT1-Serial0/1/0]qu[RT1]pingPING:56databytes,pressCTRL_CtobreakRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeoutpingstatistics5packet(s)transmitted0packet(s)received100.00%packetlossRT2<RT2>sysSystemView:returntoUserViewwithCtrl+Z.[RT2]ints0/1/0[RT2-Serial0/1/0]ipad24[RT2-Serial0/1/0]%Dec218:51:58:2972015RT2IFNET/5/PROTOCOL_UPDOWN:ProtocolPPPIPCPontheinterfaceSerial0/1/0isUP.[RT2-Serial0/1/0]ints0/1/1[RT2-Serial0/1/1]ipad24[RT2-Serial0/1/1]qu[RT2]tel[RT2]telnetserverenable%StartTelnetserver[RT2]user-interfacevty0[RT2-ui-vty0]authentication-modenone[RT2-ui-vty0]userprivilegelevel3[RT2]firewallenable[RT2]aclnumber3000[RT2-acl-adv-3000]rule1denytcpsource0destination-porteqtelnet[RT2-acl-adv-3000]qu[RT2]ints0/1/0[RT2-Serial0/1/0]firewallpacket-filter3000inbound[RT2-Serial0/1/0]quRT3<RT3>sysSystemView:returntoUserViewwithCtrl+Z.[RT3]ints0/1/1[RT3-Serial0/1/1]ipad24[RT3-Serial0/1/1]%Dec218:52:43:5152015RT3IFNET/5/PROTOCOL_UPDOWN:ProtocolPPPIPCPontheinterfaceSerial0/1/1isUP.[RT3-Serial0/1/1]qu[RT3]pingPING:56databytes,pressCTRL_CtobreakReplyfrom:bytes=56Sequence=1ttl=255time=4msReplyfrom:bytes=56Sequence=2ttl=255time=1msRequesttimeoutReplyfrom:bytes=56Sequence=4ttl=255time=1msReplyfrom:bytes=56Sequence=5ttl=255time=1mspingstatistics5packet(s)transmitted4packet(s)received20.00%packetlossround-tripmin/avg/max=1/1/4ms[RT3]<RT3>telnetTrying...<RT2><RT2>quit<RT3>

4.4實(shí)驗(yàn)四：小綜合圖4-4需求：PC1和PC2是A部，PC3是B部；PC1和PC2可以通信，但不能和PC3通信。PC1、PC2、PC3都可以訪問網(wǎng)關(guān)54.要求10網(wǎng)段主機(jī)使用靜態(tài)路由訪問20網(wǎng)段；使用動(dòng)態(tài)路由訪問30網(wǎng)段。RT2開啟telnet功能，RT1使用密碼模式登陸。SW1<SW1>sysSystemView:returntoUserViewwithCtrl+Z.[SW1]vlan10[SW1-vlan10]porte0/4/0[SW1-vlan10]porte0/4/1[SW1-vlan10]vlan20[SW1-vlan20]porte0/4/2[SW1-vlan20]vlan30[SW1-vlan30]qu[SW1]inte0/4/0[SW1-Ethernet0/4/0]portlink-typehybrid[SW1-Ethernet0/4/0]porthybridvlan1030untaggedPleasewait...Done.[SW1-Ethernet0/4/0]qu[SW1]inte0/4/1[SW1-Ethernet0/4/1]portlink-typehybrid[SW1-Ethernet0/4/1]porthybridvlan1030untaggedPleasewait...Done.[SW1-Ethernet0/4/1]qu[SW1]inte0/4/2[SW1-Ethernet0/4/2]portlink-typehybrid[SW1-Ethernet0/4/2]porthybridvlan2030untaggedPleasewait...Done.[SW1-Ethernet0/4/2]qu[SW1]inte0/4/3[SW1-Ethernet0/4/3]portlink-typetrunk[SW1-Ethernet0/4/3]porttrunkpermitvlan102030Pleasewait...Done.SW2<SW2>sysSystemView:returntoUserViewwithCtrl+Z.[SW2]vlan10[SW2-vlan10]vlan20[SW2-vlan20]vlan30[SW2-vlan30]qu[SW2]inte0/4/3[SW2-Ethernet0/4/3]portlink-typetrunk[SW2-Ethernet0/4/3]porttrunkpermitvlan102030Pleasewait...Done.[SW2-Ethernet0/4/3]qu[SW2]vlan30[SW2-vlan30]porte0/4/4[SW2-vlan30]qu[SW2]inte0/4/4[SW2-Ethernet0/4/4]portlink-typehybrid[SW2-Ethernet0/4/4]porthybridvlan102030untaggedPleasewait...Done.[SW2-Ethernet0/4/4]qu[SW2]RT1<RT1>sysSystemView:returntoUserViewwithCtrl+Z.[RT1]intg0/0/0[RT1-GigabitEthernet0/0/0]ipad5424[RT1-GigabitEthernet0/0/0]qu[RT1]ints0/1/0[RT1-Serial0/1/0]ipaddress24[RT1-Serial0/1/0]ints0/1/1[RT1-Serial0/1/1]ipaddress24[RT1-Serial0/1/1]%Dec221:12:28:9842015RT1IFNET/5/PROTOCOL_UPDOWN:ProtocolPPPIPCPontheinterfaceSerial0/1/0isUP.[RT1-Serial0/1/1]%Dec221:15:33:3902015RT1IFNET/5/PROTOCOL_UPDOWN:ProtocolPPPIPCPontheinterfaceSerial0/1/1isUP.[RT1-Serial0/1/1]displayiprouting-tableRoutingTables:PublicDestinations:10Routes:10Destination/MaskProtoPreCostNextHopInterface/24Direct0054GE0/0/054/32Direct00InLoop0/24Direct00S0/1/0/32Direct00InLoop0/32Direct00S0/1/0/24Direct00S0/1//32Direct00InLoop0/32Direct00S0/1/1/8Direct00InLoop0/32Direct00InLoop0[RT1-Serial0/1/1]qu[RT1]iproute-static24[RT1]displayiprouting-tableRoutingTables:PublicDestinations:11Routes:11Destination/MaskProtoPreCostNextHopInterface/24Direct0054GE0/0/054/32Direct00InLoop0/24Direct00S0/1/0/32Direct00InLoop0/32Direct00S0/1/0/24Direct00S0/1//32Direct00InLoop0/32Direct00S0/1//24Static600S0/1/0/8Direct00InLoop0/32Direct00InLoop0[RT1]rip[RT1-rip-1]v2[RT1-rip-1]us[RT1-rip-1]network[RT1-rip-1]network<RT1>telnetTrying...PressCTRL+KtoabortFailedtoconnecttotheremotehost!<RT1>telnetTrying...PressCTRL+KtoabortPassword:RT2<RT2>sysSystemView:returntoUserViewwithCtrl+Z.[RT2]ints0/1/0[RT2-Serial0/1/0]ipaddress24[RT2-Serial0/1/0]%Dec221:12:29:3912015RT2IFNET/5/PROTOCOL_UPDOWN:ProtocolPPPIPCPontheinterfaceSerial0/1/0isUP.[RT2-Serial0/1/0]qu[RT2]intg0/0/0[RT2-GigabitEthernet0/0/0]ipad5424[RT2-GigabitEthernet0/0/0]qu[RT2]pingPING:56databytes,pressCTRL_CtobreakRequesttimeoutReplyfrom:bytes=56Sequence=2ttl=64time=5msReplyfrom:bytes=56Sequence=3ttl=64time=4msRequesttimeoutReplyfrom:bytes=56Sequence=5ttl=64time=4mspingstatistics5packet(s)transmitted3packet(s)received40.00%packetlossround-tripmin/avg/max=4/4/5ms[RT2]iproute-static24[RT2]displayiprouting-tableRoutingTables:PublicDestinations:8Routes:8Destination/MaskProtoPreCostNextHopInterface/24Static600S0/1/0/24Direct00S0/1/0/32Direct00S0/1/0/32Direct00InLoop0/24Direct0054GE0/0/054/32Direct00InLoop0/8Direct00InLoop0/32Direct00InLoop0[RT2]telnetserverenable%StartTelnetserver[RT2]user-interfacevty0[RT2-ui-vty0]authentication-modepassword[RT2-ui-vty0]setauthenticationpasswordsimple123[RT2-ui-vty0]userprivilegelevel3[RT2-ui-vty0]#Dec221:32:35:7822015RT2SHELL/4/LOGIN:Trap.4.1.2550.<hh3cLogIn>:loginfromVTY%Dec221:32:35:7822015RT2SHELL/5/SHELL_LOGIN:VTYloggedinfrom.RT3<RT3>sysSystemView:returntoUserViewwithCtrl+Z.[RT3]ints0/1/1[RT3-Serial0/1/1]ipaddress24[RT3-Serial0/1/1]%Dec221:15:33:3122015RT3IFNET/5/PROTOCOL_UPDOWN:ProtocolPPPIPCPontheinterfaceSerial0/1/1isUP.[RT3-Serial0/1/1]qu[RT3]intg0/0/0[RT3-GigabitEthernet0/0/0]ipaddress5424[RT3-GigabitEthernet0/0/0]qu[RT3]pingPING:56databytes,pressCTRL_CtobreakReplyfrom:bytes=56Sequence=1ttl=64time=26msReplyfrom:bytes=56Sequence=2ttl=64time=1msReplyfrom:bytes=56Sequence=3ttl=64time=4msReplyfrom:bytes=56Sequence=4ttl=64time=16msReplyfrom:bytes=56Sequence=5ttl=64time=26mspingstatistics5packet(s)transmitted5packet(s)received0.00%packetlossround-tripmin/avg/max=1/14/26ms[RT3]rip[RT3-rip-1]v2[RT3-rip-1]us[RT3-rip-1]network[RT3-rip-1]network

4.5實(shí)驗(yàn)五：NAT圖4-5NAT網(wǎng)絡(luò)地址轉(zhuǎn)換EasyIpR1開啟Telnet功能R3登錄R1RT1<RT1>sysSystemView:returntoUserViewwithCtrl+Z.[RT1]sysnamepc[pc]intg0/0/0[pc-GigabitEthernet0/0/0]ipaddress24[pc]iproute-static054[pc]telnetserverenable%StartTelnetserver[pc]user-interfacevty0[pc-ui-vty0]authentication-modenone#Nov3020:33:27:2642015pcSHELL/4/LOGIN:Trap.4.1.2550.<hh3cLogIn>:loginfromVTY%Nov3020:33:27:2642015pcSHELL/5/SHELL_LOGIN:VTYloggedinfrom.[pc-ui-vty0]qu[pc]pingPING:56databytes,pressCTRL_CtobreakReplyfrom:bytes=56Sequence=1ttl=254time=29msReplyfrom:bytes=56Sequence=2ttl=254time=11msReplyfrom:bytes=56Sequence=3ttl=254time=4msReplyfrom:bytes=56Sequence=4ttl=254time=25msRequesttimeoutpingstatistics5packet(s)transmitted4packet(s)received20.00%packetlossRT2<RT2>sysSystemView:returntoUserViewwithCtrl+Z.[RT2]sysnamenat[nat]intg0/0/0[nat-GigabitEthernet0/0/0]ipaddress5424[nat-GigabitEthernet0/0/0]qu[nat]ints0/1/0[nat-Serial0/1/0]ipaddress24%Nov3020:26:17:3102015natIFNET/5/PROTOCOL_UPDOWN:ProtocolPPPIPCPontheinterfaceSerial0/1/0isUP.[nat-Serial0/1/0]qu[nat]aclnumber2000[nat-acl-basic-2000]rule1permitsource55[nat-acl-basic-2000]qu[nat]ints0/1/0[nat-Serial0/1/0]natoutbound2000[nat-Serial0/1/0]qu[nat]ints0/1/0[nat-Serial0/1/0]natserverprotocoltcpglobal0insidetelnetRT3<RT3>sysSystemView:returntoUserViewwithCtrl+Z.[RT3]sysnameisp[isp]ints0/1/0[isp-Serial0/1/0]ipaddress24[isp-Serial0/1/0]%Nov3020:26:14:0522015ispIFNET/5/PROTOCOL_UPDOWN:ProtocolPPPIPCPontheinterfaceSerial0/1/0isUP.[isp-Serial0/1/0]<isp>telnet0<pc>Theconnectionwasclosedbytheremotehost!<isp>

4.6實(shí)驗(yàn)六：OSPF圖4-6Pc1ip54，Pc2ip54R1<RT1><RT1>system-view[RT1]interfaceg0/0/0[RT1-GigabitEthernet0/0/0]ipaddress5424[RT1]interfaces0/1/0[RT1-Serial0/1/0]ipaddress24[RT1]ospf[RT1-ospf-1]area1[RT1-ospf-1-area-]network55[RT1-ospf-1-area-]network55R2<RT2><RT2>system-view[RT2]interfaces0/1/0[RT2-Serial0/1/0]ipaddress24[RT2]interfaces0/1/1[RT2-Serial0/1/1]ipaddress24[RT2]ospf[RT2-ospf-1]area1[RT2-ospf-1-area-]network54[RT2-ospf-1]area0[RT2-ospf-1-area-]network54R3<RT3>system-view[RT3]ints0/1/1[RT3-Serial0/1/1]ipaddress24[RT3]ints0/1/2[RT3-Serial0/1/2]ipaddress24[RT3]ospf[RT3-ospf-1]area0[RT3-ospf-1-area-]network55[RT3-ospf-1]area2[RT3-ospf-1-area-]network55R4<RT4>system-view[RT4]interfaces0/1/2[RT4-Serial0/1/2]ipaddress24[RT4-Serial0/1/2]intg0/0/0[RT4-GigabitEthernet0/0/0]ipaddress5424[RT4]ospf[RT4-ospf-1]area2[RT4-ospf-1-area-]network4.7實(shí)驗(yàn)七：綜合實(shí)驗(yàn)圖4-7需求：1、IP地址如圖所示主機(jī)1與主機(jī)2都屬于vlan10中其中R1--R2--R3為公網(wǎng)設(shè)備，服務(wù)器與R2相連地址為/2，（合理的運(yùn)用靜態(tài)路由協(xié)議）總部內(nèi)部運(yùn)行RIPv1協(xié)議互通內(nèi)網(wǎng)服務(wù)器采用DHCP自動(dòng)獲得IP地址的方式來進(jìn)行IP分配R1做NAT使得內(nèi)網(wǎng)主機(jī)能夠訪問外網(wǎng)服務(wù)器R3要求做NATSERVER(NATSTATIC)使得（外網(wǎng)服務(wù)器）能夠訪問（內(nèi)網(wǎng)服務(wù)器）在R1與R3上搭建VPN隧道使內(nèi)網(wǎng)所有主機(jī)直接能夠訪問（內(nèi)網(wǎng)的服務(wù)器）SW1<SW1>sysSystemView:returntoUserViewwithCtrl+Z.[SW1]vl10[SW1-vlan10]porte0/4/0[SW1-vlan10]porte0/4/1[SW1-vlan10]porte0/4/2RT1<RT1>sysSystemView:returntoUserViewwithCtrl+Z.[RT1]intg0/0/0[RT1-GigabitEthernet0/0/0]ipadd24[RT1-GigabitEthernet0/0/0]ints0/1/0[RT1-Serial0/1/0]ipadd24[RT1-GigabitEthernet0/0/0]qu[RT1]rip[RT1-rip-1]ve2[RT1-rip-1]uns[RT1-rip-1]net[RT1-rip-1]qu[RT1]iproute-static0[RT1]aclnumber2000[RT1-acl-basic-2000]rulepermitsource55[RT1-acl-basic-2000]qu[RT1]ints0/1/0[RT1-Serial0/1/0]natoutbound2000[RT1-Serial0/1/0]qu[RT1]disnatsessionTherearecurrently2NATsessions:ProtocolGlobalAddrPortInsideAddrPortDestAddrPortICMP122924929349293status:11TTL:00:00:10Left:00:00:03VPN:ICMP122914903749037status:11TTL:00:00:10Left:00:00:01VPN:[RT1]intt0.[RT1-Tunnel0]source[RT1-Tunnel0]destination[RT1-Tunnel0]%Dec515:19:47:5632015RT1IFNET/3/LINK_UPDOWN:Tunnel0linkstatusisUP.%Dec515:19:47:5632015RT1IFNET/5/LINEPROTO_UPDOWN:LineprotocolontheinterfaceTunnel0isUP.[RT1-Tunnel0]ipadd24[RT1]iproute-static24Tunnel0RT2<RT2>sysSystemView:returntoUserViewwithCtrl+Z.[RT2]ints0/1/0[RT2-Serial0/1/0]ipadd24[RT2-Serial0/1/0]ints0/1/1[RT2-Serial0/1/1]ipadd24[RT2-Serial0/1/1]intg0/0/0[RT2-GigabitEthernet0/0/0]ipadd5424RT3<RT3>sysSystemView:returntoUserViewwithCtrl+Z.[RT3]ints0/1/1[RT3-Serial0/1/1]ipadd24[RT3-Serial0/1/1]intg0/0/0[RT3-GigabitEthernet0/0/0]ipadd5424[RT3-GigabitEthernet0/0/0]qu[RT3]dhcpenableDHCPisenabledsuccessfully![RT3]dhcpserverip-pool1[RT3-dhcp-pool-1]network24[RT3-dhcp-pool-1]gateway-list54[RT3-dhcp-pool-1]dns-list[RT3-dhcp-pool-1]expiredday365[RT3-dhcp-pool-1]qu[RT3]iproute-static0[RT3]ints0/1/1[RT3-Serial0/1/1]natserverprotocolicmpglobalinside[RT3]disnatserverNATserverinprivatenetworkinformation:Therearecurrently1internalserver(s)Interface:Serial0/1/1,Protocol:1(icmp)Global::Local::[RT3]intt0[RT3-Tunnel0]source[RT3-Tunnel0]destination[RT3-Tunnel0]%Dec515:21:39:5632015RT3IFNET/3/LINK_UPDOWN:Tunnel0linkstatusisUP.%Dec515:21:39:5632015RT3IFNET/5/LINEPROTO_UPDOWN:LineprotocolontheinterfaceTunnel0isUP.[RT3-Tunnel0]ipadd24[RT3]iproute-static24Tunnel0RT4<RT4>sysSystemView:returntoUserViewwithCtrl+Z.[RT4]intg0/0/0[RT4-GigabitEthernet0/0/0]ipadd5424[RT4-GigabitEthernet0/0/0]intg0/0/1[RT4-GigabitEthernet0/0/1]ipadd24[RT4-GigabitEthernet0/0/1]qu[RT4]rip[RT4-rip-1]ve2[RT4-rip-1]uns[RT4-rip-1]net[RT4-rip-1]net[RT4-rip-1]qu[RT4]iproute-static0RT5<RT5>sysSystemView:returntoUserViewwithCtrl+Z.[RT5]intg0/0/0[RT5-GigabitEthernet0/0/0]ipaddressdhcp-alloc[RT5-GigabitEthernet0/0/0]disipintbrief*down:administrativelydown(s):spoofingInterfacePhysicalProtocolIPAddressDescriptionGigabitEthernet0/0/0upupGigabitEt...GigabitEthernet0/0/1downdownunassignedGigabitEt...GigabitEthernet0/0/2downdownunassignedGigabitEt...GigabitEthernet0/0/3downdownunassignedGigabitEt...Serial0/1/0downdownunassignedSerial0/1...Serial0/1/1downdownunassignedSerial0/1...Serial0/1/2downdownunassignedSerial0/1...Serial0/1/3downdownunassignedSerial0/1...[RT5]pingPING:56databytes,pressCTRL_CtobreakReplyfrom:bytes=56Sequence=1ttl=61time=70msReplyfrom:bytes=56Sequence=2ttl=61time=39msReplyfrom:bytes=56Sequence=3ttl=61time=25msReplyfrom:bytes=56Sequence=4ttl=61time=34msReplyfrom:bytes=56Sequence=5ttl=61time=40mspingstatistics5packet(s)transmitted5packet(s)received0.00%packetlossround-tripmin/avg/max=25/41/70ms實(shí)訓(xùn)內(nèi)容：VLAN接口類型：trunk、hybrid和access（1）trunk：portlink-typetrunkPorttrunkpermitvlan1020（2）hybrid:portlink-typehybridPorthybridvlan102030untagged靜態(tài)路由及動(dòng)態(tài)路由(rip)配置靜態(tài)路由：iproute-static目標(biāo)地址目標(biāo)掩碼下一跳動(dòng)態(tài)路由：RIP：ripversion2undosummarynetworkRIP有限制，最大數(shù)為15。劃分VLAN先創(chuàng)建不同VLAN，再將接口劃分到所需求的VLAN中，即：[vlan10]porte0/4/0telnet遠(yuǎn)程登錄要求：保證IP可達(dá)；開啟telnet功能；設(shè)置登陸方式（無驗(yàn)證、密碼驗(yàn)證、用戶名+密碼驗(yàn)證）telnetserverenableuser-interfacevty04(最多允許5個(gè)人登陸)authentication-modenone/password/scheme(登陸方式)userprivilegelevel3(權(quán)限：0訪問級(jí)/1監(jiān)控級(jí)/2系統(tǒng)級(jí)/3管理級(jí))OSPF動(dòng)態(tài)路由協(xié)議OSPF:無數(shù)量限制，引入?yún)^(qū)域（骨干區(qū)域0和非骨干區(qū)域）的概念；劃分原則為骨干區(qū)域必須相連，非骨干區(qū)域必須和骨干區(qū)域直接相連。[R