驗(yàn)證ARP學(xué)習(xí)功能

3.5.1驗(yàn)證ARP功能驗(yàn)證ARP功能使用設(shè)備：（1）路由器；（2）交換機(jī)；（3）pc機(jī)。測(cè)試編號(hào)3.5.1驗(yàn)證ARP功能;測(cè)試組：驗(yàn)證ARP功能；測(cè)試項(xiàng)目：ARP;測(cè)試目的：驗(yàn)證ARP功能；測(cè)試步驟：1、 搭建拓?fù)浣Y(jié)構(gòu)圖；2、 配置基本命令；3、 驗(yàn)證arp功能；預(yù)期測(cè)試結(jié)果：可以查看到ARP的基本功能。測(cè)試準(zhǔn)備：路由器，交換機(jī)，pc機(jī)測(cè)試說(shuō)明：驗(yàn)證ARP功能；測(cè)試結(jié)果：（1）、清楚pc機(jī)的arp緩存；11112-^DocumentsandSettings\Administratorharp-d2-^DocumentsandSettings\Administrator>arp-a4oARPEntriesFound(2)、pingPC2地址；C：\DocumentsandSettingsMldministFatop>ping192.1G8.2.10Pinging192-1G8-2-10uith32bytesofdata：fromRepl^rfromEepl^rfromRepli/fromC：\DocumentsandSettingsMldministFatop>ping192.1G8.2.10Pinging192-1G8-2-10uith32bytesofdata：fromRepl^rfromEepl^rfromRepli/from192.169.2.10=192.169.2.10=192.168.2.10：192.168.2.10：l>5ftes=32hiftes=32biftes=32biftes=32time=118nsTTL=127time=12msTTL=127time=21n)3TTL=127time=15msTTL=127Fingstatisticsfor192.168-2-IS：Packets:Sent=4,Receiued=4,Lost=0<0zloss^,Approximateroundtriptinesinmilli-seconds:Minimum=12ms,Maximum=118ms,Auerage=41msFrame48:60bytesonwire(480bits)Frame48:60bytesonwire(480bits)s60bytescaptured(480bits)4/ yyUUUUcz:uu:u丄：丄o:uu:uu<_Z:UU:U丄：丄b:UUouKtpiy4863.090000DIAB_03：00：01BroadcastARP60Whohas192.168.1.1?Tell192.168.1.104963.133000c2:00:01:18:00:00DIAB_03：00：01|ARP60192.168.1.1isatc2:00:01:18:00:005063.133000192.168.1.10192.168.2.1074Echo(ping)requestid=0x0200,seq=45312/177,ttl=1285163.158000192.168.2.10192.168.1.10ICMP74Echo(ping)reply id=0x0200,seq=45312/177,rt1=1275264.095000192.168.1.10192.168.2.10ICMP74Echo(ping)requestid=OxO2OO,seq=45568/178,ttl=1285364.108000192.168.2.10192.168.1.10ICMP74Echo(ping)reply id=OxO2OO,seq=45568/178,ttl=127SEthernetII,Src:DIAB_0B:00:01(00:00:20:03:00:01),Dst:Broadcast(ff:ff:ff:ff:ff:ff}0Destination:0source:Type:Padding:000000000000000000000000000000000000QAddressResolufionProtocol(request)Hardwaretype:Ethernet(1)Protocoltype:IP(0x0800)Hsirdwaresize:6Protocolsize:4opcode:request(1)SenderMACaddress:DIAB_0B:00:01 ::20:03:□□:01)5enderIPaddress:192.168.1.10(192.16S.1.10)TargetMACaddress:00:00:00_00:00:00(00:00:00:00:00:00)TargetIPaddress:192.168.1.1(192.168.1.1)(4)、查看PCI的arp緩存表;C:\DocumentsandSettingsSfidministrator：arp-aInterface:192.168.1.10 0x10003InternetAddress PhysicalAddress Type192.168.1.1 c2-00-01-18-00-00 dynamic驗(yàn)證ARP代理功能:測(cè)試組網(wǎng)：

1/4mo_g1/4mo_gARP代理功能：測(cè)試組:ARP;測(cè)試項(xiàng)目：驗(yàn)證ARP代理功能；測(cè)試目的:驗(yàn)證ARP代理功能；測(cè)試步驟:1、 搭建號(hào)拓?fù)鋱D；2、 將路由器的接口和pc機(jī)的ip地址配好；不需要配置網(wǎng)關(guān)；3、 C1分別pingpc4/pc2/pc3,并在路由器相應(yīng)的接口抓包；4、 總結(jié)ping過(guò)程。預(yù)期測(cè)試結(jié)果：代理ARP的基本功能都能查看到。測(cè)試準(zhǔn)備：交換機(jī)，路由器，pc機(jī)；測(cè)試結(jié)果:（1）因?yàn)閏isco的路由器默認(rèn)開啟了代理ARP所以我們先關(guān)掉代理ARP.Rl#showipintf0/1EastEthe匚口召tCi/1is linepcotqgqIi日up工口ternetaddressis192.168.2.1/24Broadcastaddressis2S5.255.255.255Addressdet.erminedby三總izupcommandMTUisISO0bytesHelperaddressisnotsetDirec七電呂broadcast,forwardingisdisabledOutgoingaccesslistisnotsetIjOcqIP匸o去yARPisdisabled[SecuriTylevelxsaeraul^^^^^Splithotrizofiis^nablsdICMPredirec七呂arealwayssent.HUMPunreachablesarealwayssentHUMPmaskrepliesatfeneverssntIPfas七s硏itchingis■enabled(config-if)#noippro?[1(config-if)#noipproxy-arp灼蕙蕭￡谿盤囂:;陰(config-if)#EXIT(2)PC1pingpc2,pc3,pc4.查看arp緩存表。C：MJocuinentsandSettingsMldministratorfarp-dC：MJocuinentsandSettingsMldministratat?>arp-aNoARPEntriesFoundC：XDocumentsandSettingsXfidministrator>ping192.168.2.10Pinging192.168.2.10uith32bytesofdata：RequesttimedoutRequesttimedoutRequesttimedoutRequesttimedoutPingstatisticsfor192.168.2.10：Packets:Sent=4,Receiued=0,Lost=4<100Xloss>,C: cu.nent：#andSett：ing(sMldninistva七oh>pi_n日192_1&8_2.2SPinsringr192.i&S.2.20uith32bytes□￡dat^=Req;u.esttimedout?Req;u.esttimedout.Req;u.eettimedout.Req;u.eettimedout.Ping-statis：tic：s：fqy-192_1G8_2_20：Paekets：：￡&nt=4,Receiued=回亠L(fēng)ost=4<100^loss^..Ping完后查看ARP緩存表;Frame48:60bytesonwireFrame48:60bytesonwire(480bits)s60bytescaptured(480bits)133156.438000DIAB.03：00：02IBroadcastIARP60Whohas192.168.2.10?Tell192168.1.20134156.490000c2：00：Oe：dO：00：00DIAB0?^66:85IARP60192.168.2.1Cisatc2:00:0e:d0:00:00135156.490000192.168.1.20192.168.2.10ICMP74Echo(ping)requestid=0x0200,seq=18688/73,ttl=128136156.543000192.168.2.10192.168.1.20ICMP74Echo(ping)『eplyid=0x0200,seq=18688/73,ttl=127137157.450000192.16&l?20192.168.2.10ICMP74Echo(ping)request■id=0x0200,seq=18944/74,ttl=128138157.472000192.168.2.10ICMP74Echo(ping)『eply■id=0x0200,seq=18944/74,ttl=127141160.095000DIAB_O3：OO：O2■BroadcastARP60Whohas192.168.2.30?Tell192168.1.20142160.158000c2：00：Oe：dO：00：00DIAB03：00：02AFIP60192.168.2.3Cisarc2:00:0e:d0:00:00143160.158000192.168.1.20192.168.2.30ICMP74Echo(ping)requestid=0x0200,seq=19200/75,ttl=128144160.213000192.168.2.30192.168.1.20ICMP74Echo(ping)『eplyid=0x0200,seq=19200/75,ttl=127145161.093000192.16&1.20192.168.2.30ICMP74Echo(ping)request■id=0x0200,seq=19456/76,ttl=128146161.115000192.168.2.30192.168.1.20ICMP74Echo(ping)『eply1d=OxO20O,seq=19456/76,ttl=127SEthernetII,Src:DIAB_OB:00:01(00:00:20:03:00:01),Dst:Broadcast(ff:ff:ff:ff:ff:ff}0Destination:0Source:DIAB_7??TO??^7q??TO?20?03?0Q?0^|Type:Padding:000000000000000000000000000000000000QAddressResolufionProtocol(request)Hardwaretype:Ethernet(1)Protocoltype:IP(0x0800)Hardwaresize:6Protocolsize:4opcode:request(1)SenderMACaddress:DIAB_0B:00:01 ::20:03:□□:01)5enderIPaddress:192.168.1.10(192.16S.1.10)TargetMACaddress:00:00:00_00:00:00(00:00:00:00:00:00)TargetIPaddress:192.168.1.1(192.168.1.1)(4)、在路由器的接口開啟ipproxy-arpR1(config)#intf0/0R1(config-if)#ipproR1(config-if)#ipproxy-arpR1(config-if)#exit(uonficO#(5)、查看ping通信息;:documentsandSettingsinpins192.ItS.1.10-n2Jingfin^192.16S.1.IQwith32h^tesofdata:lepl^from192.16S.1.16:h^tes=32time=2msTTL=i28論*1勺from192.16S.1.10:L^tes=32tine=lnsTTL=128"ingstatIsticsfor192 ?1?1B；Packets:Sent=2j.Jtcccivcd=2,Lost=S<0Jiloss>,Ipproximateroundtriptinesinmilli-seconds:HinInun=Ins-Maximum=2ms,Average=1ms':documentsandSettingsMldninistrator：ping192.168.2.10~n2Jinging192.168.2.10with32h^tesofdata:彳Eplyfvon192.168.2.10:h^tes=32tine=105nsTTL=127lepl^from192.ItS.2.18:h^tes=32time=22msTTL=127C：^DocumentsandSettingsSfldministrator>ping192.168.2.30-n2Pinging192.168.2.30with32bytesofdata：Replvfrom192.168.2.30：bytes=32time=117msTTL=127Replvfrom192.168.2.30：bytes=32time=23msTTL=127Pingstatisticsfor192.168.2.30：Packets:Sent=2,Receiued=2,Lost=0<0Zloss>,Approximateroundtriptimesinmilli-seconds:Minimum=23ms,Maxiinuin=117ms,Auerage=70ms查看arp緩存表;C：XDocumentsandSettingsXAdministrator>arp-aInterface:192.168.1.20 0x10003InternetAddressPhysicalAddressType192.168.1.1000-00-20-03-00-01dynamic192.168.2.10c2—00—Be—d0—00—00dynamic192.168.2.30c2—00—Be—d0—00—00dynamic在路由器接口上面查看ARP;Rl#showarpProtocolAddressAge(min)HarclwareAclclrTypeInterfaceInternet192?168?1?1一c200?OeclO?0000ARPAFast.Ethernet.0/0Internet.192?168?1?1040000.2DD3.口[1[11ARPAFastEthernet.0/0Internet.192?168?1?2010000.ARPAFastEthernet.0/0Internet.192?1石8?2?1-c200.OedU.0001ARPAFastE七11點(diǎn)匸門€?仁0/1Internet.192?1占8?2?ID40000.2匚Mm.CKliHARPAFastEthernet.0/1Internet192.lf58.2?3020000?2□匚13?DDD3ARPAFast.Ethernet.0/1KI#

(6)、擴(kuò)展：ARP在cisco的老化時(shí)間默認(rèn)為4個(gè)小時(shí)，如圖所示:Rl#showintf0/0FastEthemet0/0isup,rlineprotocolisupHardwareisGt96kFEfaddressisc200?00d4?000CI(biac200?00d4?DDOO)Internet,addressis192.1EEL1.1/24MTU1500bytesfBW10000Kbit/secfDLY1000usecfreliability255/255ftxload1/255funload1/255EncapsulationAF：PAfloopbacknot-setKeepaliveset(Half-duplehf1OHb/sf100B.aseTX/'FXAR^typ^^ARPA^AR^T^neou^O^^^^OLastinputnever^tputh日ngneverLastclearingof''shov.?interf.acerrcountersneverInputqueue:0/7.5/0Z0(size/man/drops/flushes);Totaloutputclrops:0Queueingstrategy:fifoOutpi_itqueue: 0/40(size/mak)5minuteinputrate0bits/sec,r0packets/sec5minuteoutputrate0bits/3e.c.f0pmckets/sec0pacP^etsinputf0bytesReceived0broadcasts,r0runtsf0giantsf0throttles0inputerrorsf0CRU*0frarnef0overrunf0ignoreel0watchdog0inputp.acP:etswithdribbleconditiondetecteel7packetsoutputf420bytesf0underruns0outputerrorsf0collisionsf1interf.aceresets0unknownprotoco1drops0babbles,r01atecollisi0n,r0deferred0lostcarrier,r0nocarrier □__ti】~T__hii幵a廣__尸口~i1ii廣戸尺「□__門i】~T__卜：門】尸尸戸lr__主麗口__out. 在接口下面可以更改ARP的老化時(shí)間為arptimeout(seconds)R1(config)#intf0/0R1(config-if)#arptimeR1(config-if)#arptimeout60R1(config-if)#exitR1(config)#ARP的請(qǐng)求包為廣播，應(yīng)答為單播包。在特權(quán)模式下面showarpsummaryRl#showarpsummaryTotalnumber