18 周实训作业

博主： dayi
发布时间：2024 年 06 月 27 日
328 次浏览
暂无评论
35853字数
分类：默认分类

18 周实训作业

注：分支要求详细配置，简化配置，期末见 <h.dayi.ink> cmd因版本过于乱，临时不再维护

版本0.9

排版比较乱，建议直接下下来，直接看running-config

文件

https://p.dabbit.net/blog/pic_bed/sharex/_pn-2024-06-27-15-48-28_Marten_Infatuated_Delirious.rar

周四要求和作业

要求：内网

某公司企业内网，内网当中存在四个vlan ，分别为vlan10 vlan20 vlan30 vlan100

财务部是vlan10，并命名为caiwu
技术部是vlan20,并命名为jishu
管理部门为vlan30，并命名为guanli
内网服务器内网HTTP-SERVER单独位于vlan100，vlan名称为fuwuqi。
配置基本网络：
1）财务部的网段是192.168.1.0/24，网关为192.168.1.254
2）技术部的网段为192.168.2.0/24，网关为192.168.2.254
3）管理部的网段为192.168.3.0/24，网关为192.168.3.254
4）服务器的网段为172.16.1.0/24，网关为172.16.1.254
5）R1和SW1之间互联的地址为192.168.10.0/30的地址
现在要求所有的网关都在内网核心交换机SW1上，使用svi接口充当网关
实现内网所有PC和服务器之间的互联
由于内网员工对于计算机的使用能力较差，因此，针对财务部，技术部和管理部的终端而言，需要通过DHCP的方式自动获取IP地址（需要排除每个网段1-100的地址作为保留使用，从101开始获取），而服务器的地址由于需要固定访问，所以通过手动静态配置IP地址。（dhcp的server位于出口路由器R1上，使用dhcp的中继完成最终地址的获取）
允许内网管理部门的员工通过telnet管理内网的路由器和核心交换机，其他部门不允许通过telnet管理路由器和交换机。（要配置telnet管理内网设备）

要求：公网

公网部分

R1和R2之间采用100.1.1.0/24网段，R2和R3之间采用124.126.100.0/24网段地址，R3和R4之间采用202.96.137.0/24网段地址，R3和外网HTTP-SERVER以及公网PC之间，采用124.126.200.0/24网段地址。（外网HTTP-SERVER和公网PC的网关为124.126.200.254）
为了保证公网之间能够通信，R1、R2、R3之间采用ospf动态路由协议进行通信
公网PC可以通过R1的8080端口访问到内网HTTP-SERVER的80端口的http业务
现在有一台公网服务器HTTP-SERVER，地址为124.126.200.10/24，现在需要内网用户能够访问到该公网服务器。（R1和R2之间使用124.126.100.0/24网段）
有一台公网的DNS-SERVER，地址为113.100.2.56/24，网关为113.100.2.1/24，我们最终想要通过访问www.shixun.com这个域名访问到公网http-server，并且查看首页的a small page，内容显示为：welcome to study our course!

要求：分支

内网PC7和PC8分别位于vlan70和vlan80这两个vlan当中
PC7和PC8的网关分别为192.168.70.254 192.168.80.254，且网关位于R4路由器上
PC7和PC8也要能够访问外网（测试访问公网HTTP-SERVER）

拓扑图

最后的拓扑图如下：

VLAN添加和配置

要求如下：VLAN配置要求

某公司企业内网中存在四个VLAN,具体配置如下:

VLAN ID	名称	部门/用途
10	caiwu	财务部
20	jishu	技术部
30	guanli	管理部门
100	fuwuqi	内网服务器(HTTP-SERVER)

核心交换机：建立VLAN

Switch>en
Switch#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
Switch(config)#host
Switch(config)#hostname 
Switch(config)#hostname core
core(config)#vlan 10
core(config-vlan)#name caiwu
core(config-vlan)#vlan 20
core(config-vlan)#name jishu
core(config-vlan)#vlan 30
core(config-vlan)#name guanli
core(config-vlan)#vlan 100
core(config-vlan)#name fuwuqi

核心交换机：配置完的VLAN信息：

core#show vlan brief 
VLAN Name                             Status    Ports
---- -------------------------------- --------- -------------------------------
1    default                          active    Fa0/1, Fa0/2, Fa0/3, Fa0/4
                                                Fa0/5, Fa0/6, Fa0/7, Fa0/8
                                                Fa0/9, Fa0/10, Fa0/11, Fa0/12
                                                Fa0/13, Fa0/14, Fa0/15, Fa0/16
                                                Fa0/17, Fa0/18, Fa0/19, Fa0/20
                                                Fa0/21, Fa0/22, Fa0/23, Fa0/24
                                                Gig0/1, Gig0/2
10   caiwu                            active    
20   jishu                            active    
30   guanli                           active    
100  fuwuqi                           active    
1002 fddi-default                     active    
1003 token-ring-default               active    
1004 fddinet-default                  active    
1005 trnet-default                    active

核心交换机：配置VLAN分发，VTP服务器

在核心交换机上：

core(config)#vtp mode server
  Device mode already VTP SERVER.
core(config)#vtp domain crazy-friday
  Changing VTP domain name from NULL to crazy-friday
core(config)#vtp password crazy
  Setting device VLAN database password to crazy

核心交换机：配置VLAN地址

要求

2、配置基本网络：
1）财务部的网段是192.168.1.0/24，网关为192.168.1.254
2）技术部的网段为192.168.2.0/24，网关为192.168.2.254
3）管理部的网段为192.168.3.0/24，网关为192.168.3.254
4）服务器的网段为172.16.1.0/24，网关为172.16.1.254
5）R1和SW1之间互联的地址为192.168.10.0/30的地址

配置

添加4个vlan，并且配置IP地址。

core(config)#int vlan 10
core(config-if)#ip addr 192.168.1.254 255.255.255.0
core(config-if)#no shut

core(config-if)#int vlan 20
core(config-if)#ip addr 192.168.2.254 255.255.255.0
core(config-if)#no shut

core(config-if)#int vlan 30
core(config-if)#ip addr 192.168.3.254 255.255.255.0
core(config-if)#no shut

core(config-if)#int vlan 100
core(config-if)#ip addr 172.16.1.254 255.255.255.0
core(config-if)#no shut

当前接口状态和IP配置概要

物理接口状态：

FastEthernet0/1 到 FastEthernet0/4: 启用且运行中（up/up）
FastEthernet0/5: 物理连接断开（down/down）
GigabitEthernet0/1 和 GigabitEthernet0/2: 物理连接断开（down/down）

VLAN ID	IP地址	状态
1	未分配	管理性关闭
10	192.168.1.254	启用但协议层关闭
20	192.168.2.254	启用但协议层关闭
30	192.168.3.254	启用但协议层关闭
100	172.16.1.254	启用但协议层关闭

公司内网：3、现在要求所有的网关都在内网核心交换机SW1上，使用svi接口充当网关

SW1上开启三层路由功能

core#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
core(config)#ip routing

公司内网：配置子交换机的VLAN同步：

财务部交换机

Switch>en
Switch#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
Switch(config)#vtp mode client
Setting device to VTP CLIENT mode.
Switch(config)#vtp domain crazy-friday
Changing VTP domain name from NULL to crazy-friday
Switch(config)#vtp password crazy
Setting device VLAN database password to crazy

Switch(config)#hostname finance-sw
finance-sw(config)#int fa0/4
finance-sw(config-if)#switchport mode trunk

可以看到VLAN数据库已经成功同步

划分VLAN接口：

将全部接口划分到VLAN:

finance-sw(config-if)#int range fa0/1,fa0/2,fa0/3,fa0/5-24
finance-sw(config-if-range)#sw mode access 
finance-sw(config-if-range)#sw ac vlan 10
finance-sw(config-if-range)#do show vlan br

VLAN Name                             Status    Ports
---- -------------------------------- --------- -------------------------------
1    default                          active    Gig0/1, Gig0/2
10   caiwu                            active    Fa0/1, Fa0/2, Fa0/3, Fa0/5
                                                Fa0/6, Fa0/7, Fa0/8, Fa0/9
                                                Fa0/10, Fa0/11, Fa0/12, Fa0/13
                                                Fa0/14, Fa0/15, Fa0/16, Fa0/17
                                                Fa0/18, Fa0/19, Fa0/20, Fa0/21
                                                Fa0/22, Fa0/23, Fa0/24
20   jishu                            active    
30   guanli                           active    
100  fuwuqi                           active    
1002 fddi-default                     active    
1003 token-ring-default               active    
1004 fddinet-default                  active    
1005 trnet-default                    active    
finance-sw(config-if-range)#

公司内网：管理部交换机

Switch>en
Switch#conf t
  Enter configuration commands, one per line.  End with CNTL/Z.
Switch(config)#hostname manage-sw
manage-sw(config)#int fa 0/1
manage-sw(config-if)#sw mode trunk 
  %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to down
  %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to up
manage-sw(config-if)#do show vlan br

VLAN Name                             Status    Ports
---- -------------------------------- --------- -------------------------------
1    default                          active    Fa0/2, Fa0/3, Fa0/4, Fa0/5
                                                Fa0/6, Fa0/7, Fa0/8, Fa0/9
                                                Fa0/10, Fa0/11, Fa0/12, Fa0/13
                                                Fa0/14, Fa0/15, Fa0/16, Fa0/17
                                                Fa0/18, Fa0/19, Fa0/20, Fa0/21
                                                Fa0/22, Fa0/23, Fa0/24, Gig0/1
                                                Gig0/2
1002 fddi-default                     active    
1003 token-ring-default               active    
1004 fddinet-default                  active    
1005 trnet-default                    active    
manage-sw(config-if)#
manage-sw(config-if)#vtp mode client
Setting device to VTP CLIENT mode.
manage-sw(config)#vtp domain crazy-friday
Domain name already set to crazy-friday.
manage-sw(config)#vtp password crazy
Setting device VLAN database password to crazy

manage-sw(config)#do show vlan br

VLAN Name                             Status    Ports
---- -------------------------------- --------- -------------------------------
1    default                          active    Fa0/2, Fa0/3, Fa0/4, Fa0/5
                                                Fa0/6, Fa0/7, Fa0/8, Fa0/9
                                                Fa0/10, Fa0/11, Fa0/12, Fa0/13
                                                Fa0/14, Fa0/15, Fa0/16, Fa0/17
                                                Fa0/18, Fa0/19, Fa0/20, Fa0/21
                                                Fa0/22, Fa0/23, Fa0/24, Gig0/1
                                                Gig0/2
10   caiwu                            active    
20   jishu                            active    
30   guanli                           active    
100  fuwuqi                           active    
1002 fddi-default                     active    
1003 token-ring-default               active    
1004 fddinet-default                  active    
1005 trnet-default                    active    
manage-sw(config)#

划分VLAN接口

manage-sw(config)#int range fa0/2-fa0/24
manage-sw(config-if-range)#sw mode access
manage-sw(config-if-range)#sw ac vlan 30
manage-sw(config-if-range)#do show vlan br

VLAN Name                             Status    Ports
---- -------------------------------- --------- -------------------------------
1    default                          active    Gig0/1, Gig0/2
10   caiwu                            active    
20   jishu                            active    
30   guanli                           active    Fa0/2, Fa0/3, Fa0/4, Fa0/5
                                                Fa0/6, Fa0/7, Fa0/8, Fa0/9
                                                Fa0/10, Fa0/11, Fa0/12, Fa0/13
                                                Fa0/14, Fa0/15, Fa0/16, Fa0/17
                                                Fa0/18, Fa0/19, Fa0/20, Fa0/21
                                                Fa0/22, Fa0/23, Fa0/24
100  fuwuqi                           active    
1002 fddi-default                     active    
1003 token-ring-default               active    
1004 fddinet-default                  active    
1005 trnet-default                    active    
manage-sw(config-if-range)#

公司内网：技术部交换机

Switch>en
Switch#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
Switch(config)#hostname tech-sw
tech-sw(config)#vtp mode client
Setting device to VTP CLIENT mode.
tech-sw(config)#vtp domain crazy-friday
Changing VTP domain name from NULL to crazy-friday
tech-sw(config)#vtp password crazy
Setting device VLAN database password to crazy
tech-sw(config)#do show vlan br

VLAN Name                             Status    Ports
---- -------------------------------- --------- -------------------------------
1    default                          active    Fa0/1, Fa0/2, Fa0/3, Fa0/4
                                                Fa0/5, Fa0/6, Fa0/7, Fa0/8
                                                Fa0/9, Fa0/10, Fa0/11, Fa0/12
                                                Fa0/13, Fa0/14, Fa0/15, Fa0/16
                                                Fa0/17, Fa0/18, Fa0/19, Fa0/20
                                                Fa0/21, Fa0/22, Fa0/23, Fa0/24
                                                Gig0/1, Gig0/2
1002 fddi-default                     active    
1003 token-ring-default               active    
1004 fddinet-default                  active    
1005 trnet-default                    active    
tech-sw(config)#int 
  %LINK-3-UPDOWN: Interface FastEthernet0/1, changed state to down
  %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to down
  %LINK-5-CHANGED: Interface GigabitEthernet0/1, changed state to up
  %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/1, changed state to up
  % Incomplete command.
tech-sw(config)#int g0/1
tech-sw(config-if)#sw mode tr
tech-sw(config-if)#sw mode trunk 
  %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/1, changed state to down
  %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/1, changed state to up
tech-sw(config-if)#dis vlan br    
tech-sw(config-if)#do show vlan br

VLAN Name                             Status    Ports
---- -------------------------------- --------- -------------------------------
1    default                          active    Fa0/1, Fa0/2, Fa0/3, Fa0/4
                                                Fa0/5, Fa0/6, Fa0/7, Fa0/8
                                                Fa0/9, Fa0/10, Fa0/11, Fa0/12
                                                Fa0/13, Fa0/14, Fa0/15, Fa0/16
                                                Fa0/17, Fa0/18, Fa0/19, Fa0/20
                                                Fa0/21, Fa0/22, Fa0/23, Fa0/24
                                                Gig0/2
1002 fddi-default                     active    
1003 token-ring-default               active    
1004 fddinet-default                  active    
1005 trnet-default                    active    
tech-sw(config-if)#do show vlan br

VLAN Name                             Status    Ports
---- -------------------------------- --------- -------------------------------
1    default                          active    Fa0/1, Fa0/2, Fa0/3, Fa0/4
                                                Fa0/5, Fa0/6, Fa0/7, Fa0/8
                                                Fa0/9, Fa0/10, Fa0/11, Fa0/12
                                                Fa0/13, Fa0/14, Fa0/15, Fa0/16
                                                Fa0/17, Fa0/18, Fa0/19, Fa0/20
                                                Fa0/21, Fa0/22, Fa0/23, Fa0/24
                                                Gig0/2
1002 fddi-default                     active    
1003 token-ring-default               active    
1004 fddinet-default                  active    
1005 trnet-default                    active    
tech-sw(config-if)#do show vlan br

VLAN Name                             Status    Ports
---- -------------------------------- --------- -------------------------------
1    default                          active    Fa0/1, Fa0/2, Fa0/3, Fa0/4
                                                Fa0/5, Fa0/6, Fa0/7, Fa0/8
                                                Fa0/9, Fa0/10, Fa0/11, Fa0/12
                                                Fa0/13, Fa0/14, Fa0/15, Fa0/16
                                                Fa0/17, Fa0/18, Fa0/19, Fa0/20
                                                Fa0/21, Fa0/22, Fa0/23, Fa0/24
                                                Gig0/2
10   caiwu                            active    
20   jishu                            active    
30   guanli                           active    
100  fuwuqi                           active    
1002 fddi-default                     active    
1003 token-ring-default               active    
1004 fddinet-default                  active    
1005 trnet-default                    active    
tech-sw(config-if)#int range fa0/1-24
tech-sw(config-if-range)#sw mode access
tech-sw(config-if-range)#sw ac vlan 30
tech-sw(config-if-range)#sw ac vlan 20
tech-sw(config-if-range)#do show vlan br

VLAN Name                             Status    Ports
---- -------------------------------- --------- -------------------------------
1    default                          active    Gig0/2
10   caiwu                            active    
20   jishu                            active    Fa0/1, Fa0/2, Fa0/3, Fa0/4
                                                Fa0/5, Fa0/6, Fa0/7, Fa0/8
                                                Fa0/9, Fa0/10, Fa0/11, Fa0/12
                                                Fa0/13, Fa0/14, Fa0/15, Fa0/16
                                                Fa0/17, Fa0/18, Fa0/19, Fa0/20
                                                Fa0/21, Fa0/22, Fa0/23, Fa0/24
30   guanli                           active    
100  fuwuqi                           active    
1002 fddi-default                     active    
1003 token-ring-default               active    
1004 fddinet-default                  active    
1005 trnet-default                    active    
tech-sw(config-if-range)#

公司内网：服务器交换机

Switch#en
Switch#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
Switch(config)#hostname server-sw
server-sw(config)#int g0/1
server-sw(config-if)#sw mode tr
server-sw(config-if)#sw mode trunk 
  %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/1, changed state to down
  %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/1, changed state to up
server-sw(config-if)#dis vlan br
server-sw(config-if)#do show vlan br

VLAN Name                             Status    Ports
---- -------------------------------- --------- -------------------------------
1    default                          active    Fa0/1, Fa0/2, Fa0/3, Fa0/4
                                                Fa0/5, Fa0/6, Fa0/7, Fa0/8
                                                Fa0/9, Fa0/10, Fa0/11, Fa0/12
                                                Fa0/13, Fa0/14, Fa0/15, Fa0/16
                                                Fa0/17, Fa0/18, Fa0/19, Fa0/20
                                                Fa0/21, Fa0/22, Fa0/23, Fa0/24
                                                Gig0/2
1002 fddi-default                     active    
1003 token-ring-default               active    
1004 fddinet-default                  active    
1005 trnet-default                    active    
server-sw(config-if)#vtp mode client
Setting device to VTP CLIENT mode.
server-sw(config)#vtp domain crazy-friday
Domain name already set to crazy-friday.
server-sw(config)#vtp password crazy
Setting device VLAN database password to crazy
server-sw(config)#do show vlan br

VLAN Name                             Status    Ports
---- -------------------------------- --------- -------------------------------
1    default                          active    Fa0/1, Fa0/2, Fa0/3, Fa0/4
                                                Fa0/5, Fa0/6, Fa0/7, Fa0/8
                                                Fa0/9, Fa0/10, Fa0/11, Fa0/12
                                                Fa0/13, Fa0/14, Fa0/15, Fa0/16
                                                Fa0/17, Fa0/18, Fa0/19, Fa0/20
                                                Fa0/21, Fa0/22, Fa0/23, Fa0/24
                                                Gig0/2
10   caiwu                            active    
20   jishu                            active    
30   guanli                           active    
100  fuwuqi                           active    
1002 fddi-default                     active    
1003 token-ring-default               active    
1004 fddinet-default                  active    
1005 trnet-default                    active    
server-sw(config)#int g0/2
server-sw(config-if)#sw mode ac
server-sw(config-if)#sw ac vlan 100
server-sw(config-if)#do show vlan b
server-sw(config-if)#do show vlan br

VLAN Name                             Status    Ports
---- -------------------------------- --------- -------------------------------
1    default                          active    Fa0/1, Fa0/2, Fa0/3, Fa0/4
                                                Fa0/5, Fa0/6, Fa0/7, Fa0/8
                                                Fa0/9, Fa0/10, Fa0/11, Fa0/12
                                                Fa0/13, Fa0/14, Fa0/15, Fa0/16
                                                Fa0/17, Fa0/18, Fa0/19, Fa0/20
                                                Fa0/21, Fa0/22, Fa0/23, Fa0/24
10   caiwu                            active    
20   jishu                            active    
30   guanli                           active    
100  fuwuqi                           active    Gig0/2
1002 fddi-default                     active    
1003 token-ring-default               active    
1004 fddinet-default                  active    
1005 trnet-default                    active    
server-sw(config-if)#

公司内网：服务器IP配置

IP：172.16.1.10/24
网关：172.16.1.254
DNS：临时：113.100.2.56

公司内网： 2.5： 5）R1和SW1之间互联的地址为192.168.10.0/30的地址

核心交换机：

core#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
core(config)#vlan 1000
core(config-vlan)#name R1-SW1-Interconnect
core(config-vlan)#interface vlan 1000
core(config-if)#
  %LINK-5-CHANGED: Interface Vlan1000, changed state to up
core(config-if)#ip address 192.168.10.2 255.255.255.252
core(config-if)#no shutdown
core(config-if)#interface GigabitEthernet0/0
core(config-if)#switchport mode access
core(config-if)#switchport access vlan 1000
core(config-if)#
  %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1000, changed state to up
no shut
core(config-if)#no shut
#配置静态路由
core(config-if)#ip route 0.0.0.0 0.0.0.0 192.168.10.1

路由器

Router>en    
Router#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
Router(config)#int g0/0
Router(config-if)#ip address 192.168.10.1 255.255.255.252
Router(config-if)#no shutdown
#子网静态路由
Router(config-if)#ip route 192.168.0.0 255.255.0.0 192.168.10.2

公司内网：4、实现内网所有PC和服务器之间的互联

允许trunk VLANIP互通

server-sw>en
server-sw#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
server-sw(config)#int g0/1
server-sw(config-if)#switchport trunk allowed vlan 10,20,30,100

finance-sw>en
finance-sw#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
finance-sw(config)#int f0/4
finance-sw(config-if)#switchport trunk allowed vlan 10,20,30,100

manage-sw#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
manage-sw(config)#int fa0/1
manage-sw(config-if)#switchport trunk allowed vlan 10,20,30,100

tech-sw>en
tech-sw#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
tech-sw(config)#int g0/1
tech-sw(config-if)#switchport trunk allowed vlan 10,20,30,100

核心交换机：

core#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
core(config)#int range g0/1,fa0/1-3
core(config-if-range)#switchport trunk allowed vlan 10,20,30,100

使用服务器进行测试

ping：172.16.1.254

ping 192.168.1.254

C:\>
C:\>ping 192.168.1.254

Pinging 192.168.1.254 with 32 bytes of data:

Reply from 192.168.1.254: bytes=32 time<1ms TTL=255
Reply from 192.168.1.254: bytes=32 time<1ms TTL=255

Ping statistics for 192.168.1.254:
    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 0ms, Maximum = 0ms, Average = 0ms

Control-C

ping 192.168.2.254

C:\>ping 192.168.2.254

Pinging 192.168.2.254 with 32 bytes of data:

Reply from 192.168.2.254: bytes=32 time<1ms TTL=255

Ping statistics for 192.168.2.254:
    Packets: Sent = 1, Received = 1, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 0ms, Maximum = 0ms, Average = 0ms

Control-C

ping 192.168.3.254

C:\>ping 192.168.3.254

Pinging 192.168.3.254 with 32 bytes of data:

Reply from 192.168.3.254: bytes=32 time<1ms TTL=255

Ping statistics for 192.168.3.254:
    Packets: Sent = 1, Received = 1, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 0ms, Maximum = 0ms, Average = 0ms

Control-C

ping 192.168.1.10

公司内网：5、由于内网员工对于计算机的使用能力较差，DHCP服务器

出口路由器

Router(config)#ip dhcp excluded-address 192.168.1.1 192.168.1.100
Router(config)#ip dhcp excluded-address 192.168.2.1 192.168.2.100
Router(config)#ip dhcp excluded-address 192.168.3.1 192.168.3.100

Router(config)#ip dhcp pool VLAN10-POOL
Router(dhcp-config)#network 192.168.1.0 255.255.255.0
Router(dhcp-config)#default-router 192.168.1.254
Router(dhcp-config)#dns-server 113.100.2.56
Router(dhcp-config)#exit

Router(config)#ip dhcp pool VLAN20-POOL
Router(dhcp-config)#network 192.168.2.0 255.255.255.0
Router(dhcp-config)#default-router 192.168.2.254
Router(dhcp-config)#dns-server 113.100.2.56
Router(dhcp-config)#exit

Router(config)#ip dhcp pool VLAN30-POOL
Router(dhcp-config)#network 192.168.3.0 255.255.255.0
Router(dhcp-config)#default-router 192.168.3.254
Router(dhcp-config)#dns-server 113.100.2.56
Router(dhcp-config)#exit

DHCP中继

core(config)#int vlan 10
core(config-if)#ip helper-address 192.168.10.1
core(config-if)#int vlan 20
core(config-if)#ip helper-address 192.168.10.1
core(config-if)#int vlan 30
core(config-if)#ip helper-address 192.168.10.1

测试：

公司内网：6、允许内网管理部门的员工通过telnet管理内网的路由器和核心交换机，其他部门不允许通过telnet管理路由器和交换机。（要配置telnet管理内网设备）

可能有问题目前。内网管理部门咱这里理解为内网管理部门是技术部了，也许是管理部

新建VLAN500用于管理，并配置ACL表

核心交换机： 192.168.20.10
路由器：192.168.10.1

核心交换机：

core#configure terminal
core(config)#vlan 500
core(config-vlan)#name tech-admin
core(config-vlan)#exit
core(config)#interface vlan 500
core(config-if)#ip address 192.168.2.1 255.255.255.0
core(config-if)#no shutdown
core(config-if)#exit
core(config)#ip access-list standard TELNET-ACL
core(config-std-nacl)#permit 192.168.2.0 0.0.0.255
core(config-std-nacl)#deny any
core(config-std-nacl)#exit
core(config)#line vty 0 4
core(config-line)#access-class TELNET-ACL in
core(config-line)#exit
core(config)#interface range g0/1-2,fa0/1-3
core(config-if-range)#switchport mode trunk
core(config-if-range)#switchport trunk allowed vlan add 500
core(config-if-range)#exit
core(config)#ip route 192.168.2.0 255.255.255.0 vlan 500
core(config)#end
core#copy running-config startup-config

路由器:

Router#configure terminal
Router(config)#ip access-list standard TELNET-ACL
Router(config-std-nacl)#permit 192.168.2.0 0.0.0.255
Router(config-std-nacl)#deny any
Router(config-std-nacl)#exit
Router(config)#line vty 0 4
Router(config-line)#access-class TELNET-ACL in
Router(config-line)#exit

技术部SW:

tech-sw#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
tech-sw(config)#interface vlan 500 
tech-sw(config-if)#
  %LINK-5-CHANGED: Interface Vlan500, changed state to up
tech-sw(config-if)#ip address 192.168.20.120 255.255.255.0
tech-sw(config-if)#no shut
tech-sw(config-if)#interface g0/1
tech-sw(config-if)#switchport trunk allowed vlan add 500

tech-sw(config-if)#username KFC4 password KFC4
tech-sw(config)#line vty 0 4
tech-sw(config-line)#login local
tech-sw(config-line)#transport input telnet

只有技术部可以访问：

路由：

其他部门被拒绝了。

公网部分：要求

R1和R2之间采用100.1.1.0/24网段，R2和R3之间采用124.126.100.0/24网段地址，R3和R4之间采用202.96.137.0/24网段地址，R3和外网HTTP-SERVER以及公网PC之间，采用124.126.200.0/24网段地址。（外网HTTP-SERVER和公网PC的网关为124.126.200.254）
为了保证公网之间能够通信，R1、R2、R3之间采用ospf动态路由协议进行通信
公网PC可以通过R1的8080端口访问到内网HTTP-SERVER的80端口的http业务
现在有一台公网服务器HTTP-SERVER，地址为124.126.200.10/24，现在需要内网用户能够访问到该公网服务器。（R1和R2之间使用124.126.100.0/24网段）
有一台公网的DNS-SERVER，地址为113.100.2.56/24，网关为113.100.2.1/24，我们最终想要通过访问www.shixun.com这个域名访问到公网http-server，并且查看首页的a small page，内容显示为：welcome to study our course!

公网部分：1、IP配置

R1-IP：

IP地址：

Interface	IP Address	Subnet Mask	Status
GigabitEthernet0/1	100.1.1.1	255.255.255.0	Up

Router>en                                  
Router#conf t                              
Enter configuration commands, one per line.  End with CNTL/Z.
Router(config)#int g0/1                    
Router(config-if)#ip address 100.1.1.1 255.255.255.0 
Router(config-if)#no shut                                   
  %LINK-5-CHANGED: Interface GigabitEthernet0/1, changed state to up
Router(config-if)#router ospf 1       
Router(config-router)#network 100.1.1.0 0.0.0.255 area 0 
Router(config-router)#hostname r1          
r1(config)#

R2-IP：

IP地址:

Interface	IP Address	Subnet Mask	Status
GigabitEthernet0/0	100.1.1.2	255.255.255.0	-

Router>en                                 
Router#conf t                              
Enter configuration commands, one per line.  End with CNTL/Z.    
Router(config)#hostname r2                 
r2(config)#int g0/0                        
r2(config-if)#ip address 100.1.1.2 255.255.255.0  
r2(config-if)#no shut                                               
  %LINK-5-CHANGED: Interface GigabitEthernet0/0, changed state to up                          
  %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/0, changed state to up
r2(config-if)#int g0/1                    
r2(config-if)#ip address 124.126.100.1 255.255.255.0  
r2(config-if)#no shut                                               
  %LINK-5-CHANGED: Interface GigabitEthernet0/1, changed state to up
#配置OSPF
r2(config-if)#router ospf 1                
r2(config-router)#network 100.1.1.0 0.0.0.255 area 0  
r2(config-router)#network 124.126.100.0 0.0.0.255 area 0

R3:

Router>en
Router#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
Router(config)#hostname r3
r3(config)#int g0/0
r3(config-if)#ip address 124.126.100.2 255.255.255.0
r3(config-if)#no shut
  %LINK-5-CHANGED: Interface GigabitEthernet0/0, changed state to up
  %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/0, changed state to up
r3(config-if)#int g0/1
r3(config-if)#ip address 202.96.137.1 255.255.255.0
r3(config-if)#no shut
  %LINK-5-CHANGED: Interface GigabitEthernet0/1, changed state to up
r3(config-if)#int g0/2
r3(config-if)#ip address 124.126.200.254 255.255.255.0
r3(config-if)#no shut
  %LINK-5-CHANGED: Interface GigabitEthernet0/2, changed state to up
  %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/2, changed state to up
#配置OSPF
r3(config-if)#router ospf 1
r3(config-router)#network 124.126.100.0 0.0.0.255 area 0
r3(config-router)#network 202.96.137.0 0.0.0.255 area 0
r3(config-router)#network 124.126.200.0 0.0.0.255 area 0

R4:

Router>en
Router#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
Router(config)#hostname r4
r4(config)#int g0/0
r4(config-if)#ip addr 202.96.137.2 255.255.255.0
r4(config-if)#no shut

当前路由表：

r1#show ip route 
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
       i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
       * - candidate default, U - per-user static route, o - ODR
       P - periodic downloaded static route

Gateway of last resort is not set

     100.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C       100.1.1.0/24 is directly connected, GigabitEthernet0/1
L       100.1.1.1/32 is directly connected, GigabitEthernet0/1
     124.0.0.0/24 is subnetted, 2 subnets
O       124.126.100.0/24 [110/2] via 100.1.1.2, 00:13:02, GigabitEthernet0/1
O       124.126.200.0/24 [110/3] via 100.1.1.2, 00:11:52, GigabitEthernet0/1
S    192.168.0.0/16 [1/0] via 192.168.10.2
     192.168.10.0/24 is variably subnetted, 2 subnets, 2 masks
C       192.168.10.0/30 is directly connected, GigabitEthernet0/0
L       192.168.10.1/32 is directly connected, GigabitEthernet0/0
O    202.96.137.0/24 [110/3] via 100.1.1.2, 00:00:33, GigabitEthernet0/1

r1#

公网部分：3、公网PC可以通过R1的8080端口访问到内网HTTP-SERVER的80端口的http业务

内网访问服务器(172.16.1.10/24)，可以正常访问

R1配置路由

r1(config)#ip route 172.16.1.0 255.255.255.0 192.168.10.2

路由可以ping通内网服务器：

配置NAT：

r1(config)#int g0/0
r1(config-if)#ip nat inside
r1(config-if)#int g0/1
r1(config-if)#ip nat outside
r1(config)#ip nat inside source static tcp 172.16.1.10 80 100.1.1.1 8080

测试访问：

公网PC:
IP地址:124.126.200.11
子网掩码:255.255.255.0
默认网关:124.126.200.254
DNS服务器：113.100.2.56

可以正常访问：

公网部分：4、现在有一台公网服务器HTTP-SERVER，地址为124.126.200.10/24，现在需要内网用户能够访问到该公网服务器。（R1和R2之间使用124.126.100.0/24网段）

（R1和R2之间使用124.126.100.0/24网段）此句话忽略。

IP配置：
IP地址:124.126.200.10
子网掩码:255.255.255.0
默认网关:124.126.200.254
DNS服务器：113.100.2.56

r1(config)#access-list 10 permit 192.168.0.0 0.0.255.255
r1(config)#ip nat inside source list 10 interface g0/1 overload

可以正常访问啦！

公网部分：5、有一台公网的DNS-SERVER，地址为113.100.2.56/24，网关为113.100.2.1/24，我们最终想要通过访问www.shixun.com这个域名访问到公网http-server，并且查看首页的a small page，内容显示为：welcome to study our course!

R2:

r2>en
r2#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
r2(config)#int g0/2
r2(config-if)#
r2(config-if)#ip address 113.100.2.1 255.255.255.0
r2(config-if)#no shut
  %LINK-5-CHANGED: Interface GigabitEthernet0/2, changed state to up
  %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/2, changed state to up
#配置OSPF
r2(config-if)# router ospf 1
r2(config-router)#network 113.100.2.0 0.0.0.255 area 1

配置DNS服务器：

DNS服务器IP：113.100.2.56/24 via 113.100.2.1

配置域名：

www.shixun.com

测试访问：

访问成功，修改HTML

HTML内容

index.html

<!DOCTYPE html>
<html lang="zh-CN">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>首页 - 欢迎来到实训课程</title>
</head>
<body>
    <div class="container">
        <h1>欢迎来到实训课程首页</h1>
        <p>点击下面的链接查看详细信息：</p>
        <a href="a_small_page.html">进入课程页面（a_small_page)</a>

        <a>疯狂星期5组奉献</a>
    </div>
</body>
</html>

a_small_page.html

<!DOCTYPE html>
<html lang="zh-CN">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>课程详情 - 欢迎学习我们的课程</title>
   
</head>
<body>
    <div class="container">
        <h1>欢迎学习我们的课程！</h1>
        <p>Welcome to study our course!</p>
        <a href="index.html">返回首页</a>
        <a>疯狂星期5组奉献</a>
    </div>
</body>
</html>

效果

分支：

分支：1、内网PC7和PC8分别位于vlan70和vlan80这两个vlan当中

分支：2、PC7和PC8的网关分别为192.168.70.254 192.168.80.254，且网关位于R4路由器上

Switch>
Switch>en
Switch#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
Switch(config)#
Switch(config)#hostname branch
branch(config)#vlan 70
branch(config-vlan)#int vlan 70
branch(config-if)#
  %LINK-5-CHANGED: Interface Vlan70, changed state to up

branch(config-if)#ip addr 192.168.70.254 255.255.255.0
branch(config-if)#vlan 80
branch(config-vlan)#int vlan 80
branch(config-if)#
  %LINK-5-CHANGED: Interface Vlan80, changed state to up

branch(config-if)#ip addr 192.168.80.254 255.255.255.0
branch(config-if)#
branch(config-if)#vlan 600
branch(config-vlan)#int vlan 600
branch(config-if)#
  %LINK-5-CHANGED: Interface Vlan600, changed state to up

branch(config-if)#ip addr 10.10.10.2 255.255.255.252
branch(config-if)#i
branch(config-if)#int fa0/2
branch(config-if)#sw mode acc
branch(config-if)#sw acc vlan 70
branch(config-if)#
  %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan70, changed state to up

branch(config-if)#no shut
branch(config-if)#
branch(config-if)#int fa0/3
branch(config-if)#sw mode acc
branch(config-if)#sw acc vlan 80
branch(config-if)#
  LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan80, changed state to up

branch(config-if)#no shut
branch(config-if)#
branch(config-if)#int f0/1
branch(config-if)#
branch(config-if)#sw mode acc
branch(config-if)#sw acc vlan 600
branch(config-if)#no shut
branch(config-if)#
branch(config-if)#ip route 0.0.0.0 0.0.0.0 10.10.10.1
branch(config)#ip routing

分支：3、PC7和PC8也要能够访问外网（测试访问公网HTTP-SERVER）

PC7:
IP地址:192.168.70.10
子网掩码:255.255.255.0
默认网关:192.168.70.254
DNS服务器：113.100.2.56

PC8：
IP地址:192.168.80.10
子网掩码:255.255.255.0
默认网关:192.168.80.254
DNS服务器：113.100.2.56

R4:

r4(config)#int g0/1
r4(config-if)#ip addr 10.10.10.1 255.255.255.252
r4(config-if)#no shut

PC8<->PC7相互访问

配置访问：

branch(config)#ip route 0.0.0.0 0.0.0.0 10.10.10.1
r4(config)#int g0/1
r4(config-if)#ip addr 10.10.10.1 255.255.255.252
r4(config-if)#no shut
r4(config)#access-list 100 permit ip 192.168.70.0 0.0.0.255 any 
r4(config)#access-list 100 permit ip 192.168.80.0 0.0.0.255 any
r4(config)#int g0/1
r4(config-if)#ip nat inside
r4(config-if)#int g0/0
r4(config-if)#ip nat outside
r4(config-if)#ip nat inside source list 100 interface g0/0 overload
r4(config)#ip route 192.168.70.0 255.255.255.0 10.10.10.2
r4(config)#ip route 192.168.80.0 255.255.255.0 10.10.10.2

r4(config)#do show ip int br
Interface IP-Address OK? Method Status Protocol
GigabitEthernet0/0 202.96.137.2 YES manual up up
GigabitEthernet0/1 10.10.10.1 YES manual up up
GigabitEthernet0/2 unassigned YES unset administratively down down
Vlan1 unassigned YES unset administratively down down
r4(config)#
r4(config)#router ospf 1
r4(config-router)#do show ip ospf neighbor

Neighbor ID Pri State Dead Time Address Interface
202.96.137.1 1 FULL/DR 00:00:30 202.96.137.1 GigabitEthernet0/0
r4(config-router)#

r4(config-router)#network 202.96.137.0 0.0.0.255 area 0

测试

PC7成功访问

PC8成功访问

文件

https://p.dabbit.net/blog/pic_bed/sharex/_pn-2024-06-27-15-48-28_Marten_Infatuated_Delirious.rar

最后修改：2024 年 07 月 11 日

如果觉得我的文章对你有用，请随意赞赏

发表评论取消回复
使用cookie技术保留您的个人信息以便您下次快速评论，继续评论表示您已同意该条款

评论 *

私密评论

名称 *

🎲

邮箱 *

地址

球
该评论仅登录用户及评论双方可见
dayi的小迷妹
0x344 如果你创建目录后找不到“软件包”，需要标记下。参考...
loper
୧(๑•̀⌄•́๑)૭
yy
该评论仅登录用户及评论双方可见
loper
装修了，好耶

18 周实训作业

dayi • 2024 年 06 月 27 日

<h1>18 周实训作业</h1><p>注：分支要求详细配置，简化配置，期末见 &lt;h.dayi.ink&gt; cmd因版本过于乱，临时不再维护</p><blockquote>版本0.9</blockquote><p>排版比较乱，建议直接下下来，直接看running-config</p><h2>文件</h2><p><span class="external-link"><a class="no-external-link" href="https://p.dabbit.net/blog/pic_bed/sharex/_pn-2024-06-27-15-48-28_Marten_Infatuated_Delirious.rar" target="_blank"><i data-feather="external-link"></i>https://p.dabbit.net/blog/pic_bed/sharex/_pn-2024-06-27-15-48-28_Marten_Infatuated_Delirious.rar</a></span></p><h2>周四要求和作业</h2><h3>要求：内网</h3><p>某公司企业内网，内网当中存在四个vlan ，分别为vlan10 vlan20 vlan30 vlan100</p><ol><li>财务部是vlan10，并命名为caiwu<br>技术部是vlan20,并命名为jishu<br>管理部门为vlan30，并命名为guanli<br>内网服务器内网HTTP-SERVER单独位于vlan100，vlan名称为fuwuqi。</li><li>配置基本网络：<br>1）财务部的网段是192.168.1.0/24，网关为192.168.1.254<br>2）技术部的网段为192.168.2.0/24，网关为192.168.2.254<br>3）管理部的网段为192.168.3.0/24，网关为192.168.3.254<br>4）服务器的网段为172.16.1.0/24，网关为172.16.1.254<br>5）R1和SW1之间互联的地址为192.168.10.0/30的地址</li><li>现在要求所有的网关都在内网核心交换机SW1上，使用svi接口充当网关</li><li>实现内网所有PC和服务器之间的互联</li><li>由于内网员工对于计算机的使用能力较差，因此，针对财务部，技术部和管理部的终端而言，需要通过DHCP的方式自动获取IP地址（需要排除每个网段1-100的地址作为保留使用，从101开始获取），而服务器的地址由于需要固定访问，所以通过手动静态配置IP地址。（dhcp的server位于出口路由器R1上，使用dhcp的中继完成最终地址的获取）</li><li>允许内网管理部门的员工通过telnet管理内网的路由器和核心交换机，其他部门不允许通过telnet管理路由器和交换机。（要配置telnet管理内网设备）</li></ol><h3>要求：公网</h3><p>公网部分</p><ol><li>R1和R2之间采用100.1.1.0/24网段，R2和R3之间采用124.126.100.0/24网段地址，R3和R4之间采用202.96.137.0/24网段地址，R3和外网HTTP-SERVER以及公网PC之间，采用124.126.200.0/24网段地址。（外网HTTP-SERVER和公网PC的网关为124.126.200.254）</li><li>为了保证公网之间能够通信，R1、R2、R3之间采用ospf动态路由协议进行通信</li><li>公网PC可以通过R1的8080端口访问到内网HTTP-SERVER的80端口的http业务</li><li>现在有一台公网服务器HTTP-SERVER，地址为124.126.200.10/24，现在需要内网用户能够访问到该公网服务器。（R1和R2之间使用124.126.100.0/24网段）</li><li>有一台公网的DNS-SERVER，地址为113.100.2.56/24，网关为113.100.2.1/24，我们最终想要通过访问www.shixun.com这个域名访问到公网http-server，并且查看首页的a small page，内容显示为：welcome to study our course!</li></ol><h3>要求：分支</h3><ol><li>内网PC7和PC8分别位于vlan70和vlan80这两个vlan当中</li><li>PC7和PC8的网关分别为192.168.70.254  192.168.80.254，且网关位于R4路由器上</li><li>PC7和PC8也要能够访问外网（测试访问公网HTTP-SERVER）</li></ol><h2>拓扑图</h2><p><img src="https://cmd.dayi.ink/uploads/upload_aaeef42422def15fb321a42db7532cfc.png" alt="" title=""style=""></p><p><img src="https://cmd.dayi.ink/uploads/upload_a68d4f28a753e832778392d65d0dadd1.png" alt="" title=""style=""></p><p><strong>最后的拓扑图如下：</strong></p><p><img src="https://cmd.dayi.ink/uploads/upload_c5f7daa6c7a4e0dcb61e6e892f57f9d7.png" alt="" title=""style=""></p><h2>VLAN添加和配置</h2><h3>要求如下：VLAN配置要求</h3><p>某公司企业内网中存在四个VLAN,具体配置如下:</p><table><thead><tr><th>VLAN ID</th><th>名称</th><th>部门/用途</th></tr></thead><tbody><tr><td>10</td><td>caiwu</td><td>财务部</td></tr><tr><td>20</td><td>jishu</td><td>技术部</td></tr><tr><td>30</td><td>guanli</td><td>管理部门</td></tr><tr><td>100</td><td>fuwuqi</td><td>内网服务器(HTTP-SERVER)</td></tr></tbody></table><h3>核心交换机：建立VLAN</h3><pre><code class="lang-bash">Switch&gt;en
Switch#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
Switch(config)#host
Switch(config)#hostname 
Switch(config)#hostname core
core(config)#vlan 10
core(config-vlan)#name caiwu
core(config-vlan)#vlan 20
core(config-vlan)#name jishu
core(config-vlan)#vlan 30
core(config-vlan)#name guanli
core(config-vlan)#vlan 100
core(config-vlan)#name fuwuqi</code></pre><p><img src="https://cmd.dayi.ink/uploads/upload_3dfc789fe6759ce1ca2a7ace82115557.png" alt="" title=""style=""></p><h4>核心交换机：配置完的VLAN信息：</h4><p><img src="https://cmd.dayi.ink/uploads/upload_8583898dc5c3ce3f0485c7c312a0a6f2.png" alt="" title=""style=""></p><pre><code class="lang-bash">core#show vlan brief 
VLAN Name                             Status    Ports
---- -------------------------------- --------- -------------------------------
1    default                          active    Fa0/1, Fa0/2, Fa0/3, Fa0/4
                                                Fa0/5, Fa0/6, Fa0/7, Fa0/8
                                                Fa0/9, Fa0/10, Fa0/11, Fa0/12
                                                Fa0/13, Fa0/14, Fa0/15, Fa0/16
                                                Fa0/17, Fa0/18, Fa0/19, Fa0/20
                                                Fa0/21, Fa0/22, Fa0/23, Fa0/24
                                                Gig0/1, Gig0/2
10   caiwu                            active    
20   jishu                            active    
30   guanli                           active    
100  fuwuqi                           active    
1002 fddi-default                     active    
1003 token-ring-default               active    
1004 fddinet-default                  active    
1005 trnet-default                    active </code></pre><h4>核心交换机：配置VLAN分发，VTP服务器</h4><p>在核心交换机上：</p><pre><code class="lang-bash">core(config)#vtp mode server
  Device mode already VTP SERVER.
core(config)#vtp domain crazy-friday
  Changing VTP domain name from NULL to crazy-friday
core(config)#vtp password crazy
  Setting device VLAN database password to crazy</code></pre><h3>核心交换机：配置VLAN地址</h3><h4>要求</h4><p>2、配置基本网络：<br>1）财务部的网段是192.168.1.0/24，网关为192.168.1.254<br>2）技术部的网段为192.168.2.0/24，网关为192.168.2.254<br>3）管理部的网段为192.168.3.0/24，网关为192.168.3.254<br>4）服务器的网段为172.16.1.0/24，网关为172.16.1.254<br>5）R1和SW1之间互联的地址为192.168.10.0/30的地址</p><h4>配置</h4><p>添加4个vlan，并且配置IP地址。</p><pre><code class="lang-bash">core(config)#int vlan 10
core(config-if)#ip addr 192.168.1.254 255.255.255.0
core(config-if)#no shut

core(config-if)#int vlan 20
core(config-if)#ip addr 192.168.2.254 255.255.255.0
core(config-if)#no shut

core(config-if)#int vlan 30
core(config-if)#ip addr 192.168.3.254 255.255.255.0
core(config-if)#no shut

core(config-if)#int vlan 100
core(config-if)#ip addr 172.16.1.254 255.255.255.0
core(config-if)#no shut       </code></pre><p><img src="https://cmd.dayi.ink/uploads/upload_7a6328b0a07a7dc25e3206c6cae67bf1.png" alt="" title=""style=""></p><h4>当前接口状态和IP配置概要</h4><p>物理接口状态：</p><ul><li>FastEthernet0/1 到 FastEthernet0/4: 启用且运行中（up/up）</li><li>FastEthernet0/5: 物理连接断开（down/down）</li><li>GigabitEthernet0/1 和 GigabitEthernet0/2: 物理连接断开（down/down）</li></ul><table><thead><tr><th>VLAN ID</th><th>IP地址</th><th>状态</th></tr></thead><tbody><tr><td>1</td><td>未分配</td><td>管理性关闭</td></tr><tr><td>10</td><td>192.168.1.254</td><td>启用但协议层关闭</td></tr><tr><td>20</td><td>192.168.2.254</td><td>启用但协议层关闭</td></tr><tr><td>30</td><td>192.168.3.254</td><td>启用但协议层关闭</td></tr><tr><td>100</td><td>172.16.1.254</td><td>启用但协议层关闭</td></tr></tbody></table><p><img src="https://cmd.dayi.ink/uploads/upload_cae87f94ac9e17072288118621cf4c56.png" alt="" title=""style=""></p><h2>公司内网：3、现在要求所有的网关都在内网核心交换机SW1上，使用svi接口充当网关</h2><p>SW1上开启三层路由功能</p><pre><code class="lang-bash">core#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
core(config)#ip routing</code></pre><h2>公司内网：配置子交换机的VLAN同步：</h2><h3>财务部交换机</h3><pre><code class="lang-bash">Switch&gt;en
Switch#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
Switch(config)#vtp mode client
Setting device to VTP CLIENT mode.
Switch(config)#vtp domain crazy-friday
Changing VTP domain name from NULL to crazy-friday
Switch(config)#vtp password crazy
Setting device VLAN database password to crazy

Switch(config)#hostname finance-sw
finance-sw(config)#int fa0/4
finance-sw(config-if)#switchport mode trunk</code></pre><p>可以看到VLAN数据库已经成功同步<br><img src="https://cmd.dayi.ink/uploads/upload_19aed7c21aa0b39eca53109aaee5ddd2.png" alt="" title=""style=""></p><h4>划分VLAN接口：</h4><p>将全部接口划分到VLAN:</p><pre><code class="lang-bash">finance-sw(config-if)#int range fa0/1,fa0/2,fa0/3,fa0/5-24
finance-sw(config-if-range)#sw mode access 
finance-sw(config-if-range)#sw ac vlan 10
finance-sw(config-if-range)#do show vlan br

VLAN Name                             Status    Ports
---- -------------------------------- --------- -------------------------------
1    default                          active    Gig0/1, Gig0/2
10   caiwu                            active    Fa0/1, Fa0/2, Fa0/3, Fa0/5
                                                Fa0/6, Fa0/7, Fa0/8, Fa0/9
                                                Fa0/10, Fa0/11, Fa0/12, Fa0/13
                                                Fa0/14, Fa0/15, Fa0/16, Fa0/17
                                                Fa0/18, Fa0/19, Fa0/20, Fa0/21
                                                Fa0/22, Fa0/23, Fa0/24
20   jishu                            active    
30   guanli                           active    
100  fuwuqi                           active    
1002 fddi-default                     active    
1003 token-ring-default               active    
1004 fddinet-default                  active    
1005 trnet-default                    active    
finance-sw(config-if-range)#</code></pre><p><img src="https://cmd.dayi.ink/uploads/upload_37018b42c1fbcea8e2d4ff0406e36d68.png" alt="" title=""style=""></p><h3>公司内网：管理部交换机</h3><pre><code class="lang-bash">Switch&gt;en
Switch#conf t
  Enter configuration commands, one per line.  End with CNTL/Z.
Switch(config)#hostname manage-sw
manage-sw(config)#int fa 0/1
manage-sw(config-if)#sw mode trunk 
  %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to down
  %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to up
manage-sw(config-if)#do show vlan br

VLAN Name                             Status    Ports
---- -------------------------------- --------- -------------------------------
1    default                          active    Fa0/2, Fa0/3, Fa0/4, Fa0/5
                                                Fa0/6, Fa0/7, Fa0/8, Fa0/9
                                                Fa0/10, Fa0/11, Fa0/12, Fa0/13
                                                Fa0/14, Fa0/15, Fa0/16, Fa0/17
                                                Fa0/18, Fa0/19, Fa0/20, Fa0/21
                                                Fa0/22, Fa0/23, Fa0/24, Gig0/1
                                                Gig0/2
1002 fddi-default                     active    
1003 token-ring-default               active    
1004 fddinet-default                  active    
1005 trnet-default                    active    
manage-sw(config-if)#
manage-sw(config-if)#vtp mode client
Setting device to VTP CLIENT mode.
manage-sw(config)#vtp domain crazy-friday
Domain name already set to crazy-friday.
manage-sw(config)#vtp password crazy
Setting device VLAN database password to crazy

manage-sw(config)#do show vlan br

VLAN Name                             Status    Ports
---- -------------------------------- --------- -------------------------------
1    default                          active    Fa0/2, Fa0/3, Fa0/4, Fa0/5
                                                Fa0/6, Fa0/7, Fa0/8, Fa0/9
                                                Fa0/10, Fa0/11, Fa0/12, Fa0/13
                                                Fa0/14, Fa0/15, Fa0/16, Fa0/17
                                                Fa0/18, Fa0/19, Fa0/20, Fa0/21
                                                Fa0/22, Fa0/23, Fa0/24, Gig0/1
                                                Gig0/2
10   caiwu                            active    
20   jishu                            active    
30   guanli                           active    
100  fuwuqi                           active    
1002 fddi-default                     active    
1003 token-ring-default               active    
1004 fddinet-default                  active    
1005 trnet-default                    active    
manage-sw(config)#
</code></pre><p>划分VLAN接口</p><pre><code class="lang-bash">manage-sw(config)#int range fa0/2-fa0/24
manage-sw(config-if-range)#sw mode access
manage-sw(config-if-range)#sw ac vlan 30
manage-sw(config-if-range)#do show vlan br

VLAN Name                             Status    Ports
---- -------------------------------- --------- -------------------------------
1    default                          active    Gig0/1, Gig0/2
10   caiwu                            active    
20   jishu                            active    
30   guanli                           active    Fa0/2, Fa0/3, Fa0/4, Fa0/5
                                                Fa0/6, Fa0/7, Fa0/8, Fa0/9
                                                Fa0/10, Fa0/11, Fa0/12, Fa0/13
                                                Fa0/14, Fa0/15, Fa0/16, Fa0/17
                                                Fa0/18, Fa0/19, Fa0/20, Fa0/21
                                                Fa0/22, Fa0/23, Fa0/24
100  fuwuqi                           active    
1002 fddi-default                     active    
1003 token-ring-default               active    
1004 fddinet-default                  active    
1005 trnet-default                    active    
manage-sw(config-if-range)#
</code></pre><h3>公司内网：技术部交换机</h3><pre><code class="lang-bash">Switch&gt;en
Switch#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
Switch(config)#hostname tech-sw
tech-sw(config)#vtp mode client
Setting device to VTP CLIENT mode.
tech-sw(config)#vtp domain crazy-friday
Changing VTP domain name from NULL to crazy-friday
tech-sw(config)#vtp password crazy
Setting device VLAN database password to crazy
tech-sw(config)#do show vlan br

VLAN Name                             Status    Ports
---- -------------------------------- --------- -------------------------------
1    default                          active    Gig0/2
10   caiwu                            active    
20   jishu                            active    Fa0/1, Fa0/2, Fa0/3, Fa0/4
                                                Fa0/5, Fa0/6, Fa0/7, Fa0/8
                                                Fa0/9, Fa0/10, Fa0/11, Fa0/12
                                                Fa0/13, Fa0/14, Fa0/15, Fa0/16
                                                Fa0/17, Fa0/18, Fa0/19, Fa0/20
                                                Fa0/21, Fa0/22, Fa0/23, Fa0/24
30   guanli                           active    
100  fuwuqi                           active    
1002 fddi-default                     active    
1003 token-ring-default               active    
1004 fddinet-default                  active    
1005 trnet-default                    active    
tech-sw(config-if-range)#</code></pre><h3>公司内网：服务器交换机</h3><pre><code class="lang-bash">Switch#en
Switch#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
Switch(config)#hostname server-sw
server-sw(config)#int g0/1
server-sw(config-if)#sw mode tr
server-sw(config-if)#sw mode trunk 
  %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/1, changed state to down
  %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/1, changed state to up
server-sw(config-if)#dis vlan br
server-sw(config-if)#do show vlan br

VLAN Name                             Status    Ports
---- -------------------------------- --------- -------------------------------
1    default                          active    Fa0/1, Fa0/2, Fa0/3, Fa0/4
                                                Fa0/5, Fa0/6, Fa0/7, Fa0/8
                                                Fa0/9, Fa0/10, Fa0/11, Fa0/12
                                                Fa0/13, Fa0/14, Fa0/15, Fa0/16
                                                Fa0/17, Fa0/18, Fa0/19, Fa0/20
                                                Fa0/21, Fa0/22, Fa0/23, Fa0/24
10   caiwu                            active    
20   jishu                            active    
30   guanli                           active    
100  fuwuqi                           active    Gig0/2
1002 fddi-default                     active    
1003 token-ring-default               active    
1004 fddinet-default                  active    
1005 trnet-default                    active    
server-sw(config-if)#</code></pre><p><img src="https://cmd.dayi.ink/uploads/upload_7b87ba02ab05fe1d9d0b2baea336f595.png" alt="" title=""style=""></p><h2>公司内网：服务器IP配置</h2><ul><li>IP：172.16.1.10/24</li><li>网关：172.16.1.254</li><li>DNS：临时：113.100.2.56</li></ul><p><img src="https://cmd.dayi.ink/uploads/upload_9532c8669c83fae548a481f24dd7bd9b.png" alt="" title=""style=""></p><h2>公司内网： 2.5： 5）R1和SW1之间互联的地址为192.168.10.0/30的地址</h2><h3>核心交换机：</h3><pre><code class="lang-bash">core#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
core(config)#vlan 1000
core(config-vlan)#name R1-SW1-Interconnect
core(config-vlan)#interface vlan 1000
core(config-if)#
  %LINK-5-CHANGED: Interface Vlan1000, changed state to up
core(config-if)#ip address 192.168.10.2 255.255.255.252
core(config-if)#no shutdown
core(config-if)#interface GigabitEthernet0/0
core(config-if)#switchport mode access
core(config-if)#switchport access vlan 1000
core(config-if)#
  %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1000, changed state to up
no shut
core(config-if)#no shut
#配置静态路由
core(config-if)#ip route 0.0.0.0 0.0.0.0 192.168.10.1</code></pre><p><img src="https://cmd.dayi.ink/uploads/upload_b7401eaed857c6203ea1656eb1a577d2.png" alt="" title=""style=""></p><h3>路由器</h3><pre><code class="lang-bash">Router&gt;en    
Router#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
Router(config)#int g0/0
Router(config-if)#ip address 192.168.10.1 255.255.255.252
Router(config-if)#no shutdown
#子网静态路由
Router(config-if)#ip route 192.168.0.0 255.255.0.0 192.168.10.2</code></pre><p><img src="https://cmd.dayi.ink/uploads/upload_9dacc776cafabcb63266b043dc78e315.png" alt="" title=""style=""></p><h2>公司内网：4、实现内网所有PC和服务器之间的互联</h2><h3>允许trunk VLANIP互通</h3><pre><code class="lang-bash">server-sw&gt;en
server-sw#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
server-sw(config)#int g0/1
server-sw(config-if)#switchport trunk allowed vlan 10,20,30,100

finance-sw&gt;en
finance-sw#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
finance-sw(config)#int f0/4
finance-sw(config-if)#switchport trunk allowed vlan 10,20,30,100

manage-sw#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
manage-sw(config)#int fa0/1
manage-sw(config-if)#switchport trunk allowed vlan 10,20,30,100

tech-sw&gt;en
tech-sw#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
tech-sw(config)#int g0/1
tech-sw(config-if)#switchport trunk allowed vlan 10,20,30,100
</code></pre><h3>核心交换机：</h3><pre><code class="lang-bash">core#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
core(config)#int range g0/1,fa0/1-3
core(config-if-range)#switchport trunk allowed vlan 10,20,30,100</code></pre><h3>使用服务器进行测试</h3><h4>ping：172.16.1.254</h4><p><img src="https://cmd.dayi.ink/uploads/upload_b87b9b500b0453b0e75202b2326c20f0.png" alt="" title=""style=""></p><h4>ping 192.168.1.254</h4><pre><code class="lang-bash">C:\&gt;
C:\&gt;ping 192.168.1.254

Pinging 192.168.1.254 with 32 bytes of data:

Reply from 192.168.1.254: bytes=32 time&lt;1ms TTL=255
Reply from 192.168.1.254: bytes=32 time&lt;1ms TTL=255

Ping statistics for 192.168.1.254:
    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 0ms, Maximum = 0ms, Average = 0ms

Control-C</code></pre><h4>ping 192.168.2.254</h4><pre><code class="lang-bash">C:\&gt;ping 192.168.2.254

Pinging 192.168.2.254 with 32 bytes of data:

Reply from 192.168.2.254: bytes=32 time&lt;1ms TTL=255

Ping statistics for 192.168.2.254:
    Packets: Sent = 1, Received = 1, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 0ms, Maximum = 0ms, Average = 0ms

Control-C</code></pre><h4>ping 192.168.3.254</h4><pre><code class="lang-bash">C:\&gt;ping 192.168.3.254

Pinging 192.168.3.254 with 32 bytes of data:

Reply from 192.168.3.254: bytes=32 time&lt;1ms TTL=255

Ping statistics for 192.168.3.254:
    Packets: Sent = 1, Received = 1, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 0ms, Maximum = 0ms, Average = 0ms

Control-C</code></pre><p><img src="https://cmd.dayi.ink/uploads/upload_1c8375ed6ce02cad2a360a061b551d05.png" alt="" title=""style=""></p><h4>ping 192.168.1.10</h4><p><img src="https://cmd.dayi.ink/uploads/upload_f254c527e2a9d00cf05404e718226f44.png" alt="" title=""style=""></p><h2>公司内网：5、由于内网员工对于计算机的使用能力较差，DHCP服务器</h2><h3>出口路由器</h3><pre><code class="lang-bash">Router(config)#ip dhcp excluded-address 192.168.1.1 192.168.1.100
Router(config)#ip dhcp excluded-address 192.168.2.1 192.168.2.100
Router(config)#ip dhcp excluded-address 192.168.3.1 192.168.3.100

Router(config)#ip dhcp pool VLAN10-POOL
Router(dhcp-config)#network 192.168.1.0 255.255.255.0
Router(dhcp-config)#default-router 192.168.1.254
Router(dhcp-config)#dns-server 113.100.2.56
Router(dhcp-config)#exit

Router(config)#ip dhcp pool VLAN20-POOL
Router(dhcp-config)#network 192.168.2.0 255.255.255.0
Router(dhcp-config)#default-router 192.168.2.254
Router(dhcp-config)#dns-server 113.100.2.56
Router(dhcp-config)#exit

Router(config)#ip dhcp pool VLAN30-POOL
Router(dhcp-config)#network 192.168.3.0 255.255.255.0
Router(dhcp-config)#default-router 192.168.3.254
Router(dhcp-config)#dns-server 113.100.2.56
Router(dhcp-config)#exit</code></pre><h3>DHCP中继</h3><pre><code class="lang-bash">core(config)#int vlan 10
core(config-if)#ip helper-address 192.168.10.1
core(config-if)#int vlan 20
core(config-if)#ip helper-address 192.168.10.1
core(config-if)#int vlan 30
core(config-if)#ip helper-address 192.168.10.1</code></pre><h3>测试：</h3><p><img src="https://cmd.dayi.ink/uploads/upload_5858fa0d1ab73b3de2fb559f505503dd.png" alt="" title=""style=""></p><p><img src="https://cmd.dayi.ink/uploads/upload_f7bb2896acbbb62149021930cc7df486.png" alt="" title=""style=""></p><p><img src="https://cmd.dayi.ink/uploads/upload_bff95b6bb316031ce9af61d2c3c0dbc1.png" alt="" title=""style=""></p><p><img src="https://cmd.dayi.ink/uploads/upload_89bde1319d5efe3e0cebc19547f775a2.png" alt="" title=""style=""></p><p><img src="https://cmd.dayi.ink/uploads/upload_20036f35316100af19f96957c68617d7.png" alt="" title=""style=""></p><p><img src="https://cmd.dayi.ink/uploads/upload_f0eb8145992faf2e4864c03be9b350b7.png" alt="" title=""style=""></p><h2>公司内网：6、允许内网管理部门的员工通过telnet管理内网的路由器和核心交换机，其他部门不允许通过telnet管理路由器和交换机。（要配置telnet管理内网设备）</h2><blockquote>可能有问题目前。内网管理部门咱这里理解为内网管理部门是技术部了 ，也许是管理部</blockquote><h3>新建VLAN500用于管理，并配置ACL表</h3><ul><li>核心交换机： 192.168.20.10</li><li>路由器：192.168.10.1</li></ul><p>核心交换机：</p><pre><code class="lang-bash">core#configure terminal
core(config)#vlan 500
core(config-vlan)#name tech-admin
core(config-vlan)#exit
core(config)#interface vlan 500
core(config-if)#ip address 192.168.2.1 255.255.255.0
core(config-if)#no shutdown
core(config-if)#exit
core(config)#ip access-list standard TELNET-ACL
core(config-std-nacl)#permit 192.168.2.0 0.0.0.255
core(config-std-nacl)#deny any
core(config-std-nacl)#exit
core(config)#line vty 0 4
core(config-line)#access-class TELNET-ACL in
core(config-line)#exit
core(config)#interface range g0/1-2,fa0/1-3
core(config-if-range)#switchport mode trunk
core(config-if-range)#switchport trunk allowed vlan add 500
core(config-if-range)#exit
core(config)#ip route 192.168.2.0 255.255.255.0 vlan 500
core(config)#end
core#copy running-config startup-config</code></pre><p>路由器:</p><pre><code class="lang-bash">Router#configure terminal
Router(config)#ip access-list standard TELNET-ACL
Router(config-std-nacl)#permit 192.168.2.0 0.0.0.255
Router(config-std-nacl)#deny any
Router(config-std-nacl)#exit
Router(config)#line vty 0 4
Router(config-line)#access-class TELNET-ACL in
Router(config-line)#exit
</code></pre><p>技术部SW:</p><pre><code class="lang-bash">tech-sw#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
tech-sw(config)#interface vlan 500 
tech-sw(config-if)#
  %LINK-5-CHANGED: Interface Vlan500, changed state to up
tech-sw(config-if)#ip address 192.168.20.120 255.255.255.0
tech-sw(config-if)#no shut
tech-sw(config-if)#interface g0/1
tech-sw(config-if)#switchport trunk allowed vlan add 500

tech-sw(config-if)#username KFC4 password KFC4
tech-sw(config)#line vty 0 4
tech-sw(config-line)#login local
tech-sw(config-line)#transport input telnet</code></pre><p>只有技术部可以访问：<br><img src="https://cmd.dayi.ink/uploads/upload_cbcbf8b074e69816793f4adeca4bf8d6.png" alt="" title=""style=""></p><p>路由：<br><img src="https://cmd.dayi.ink/uploads/upload_b2e8287873f6bf09dac635c1a53ac4ad.png" alt="" title=""style=""></p><p>其他部门被拒绝了。<br><img src="https://cmd.dayi.ink/uploads/upload_5f127d766a61a5d465bb7c4ece62d10c.png" alt="" title=""style=""></p><p><img src="https://cmd.dayi.ink/uploads/upload_23a569ef5c731d1fa64d2b6369adc4f0.png" alt="" title=""style=""></p><h2>公网部分：要求</h2><ol><li>R1和R2之间采用100.1.1.0/24网段，R2和R3之间采用124.126.100.0/24网段地址，R3和R4之间采用202.96.137.0/24网段地址，R3和外网HTTP-SERVER以及公网PC之间，采用124.126.200.0/24网段地址。（外网HTTP-SERVER和公网PC的网关为124.126.200.254）</li><li>为了保证公网之间能够通信，R1、R2、R3之间采用ospf动态路由协议进行通信</li><li>公网PC可以通过R1的8080端口访问到内网HTTP-SERVER的80端口的http业务</li><li>现在有一台公网服务器HTTP-SERVER，地址为124.126.200.10/24，现在需要内网用户能够访问到该公网服务器。（R1和R2之间使用124.126.100.0/24网段）</li><li>有一台公网的DNS-SERVER，地址为113.100.2.56/24，网关为113.100.2.1/24，我们最终想要通过访问www.shixun.com这个域名访问到公网http-server，并且查看首页的a small page，内容显示为：welcome to study our course!</li></ol><h2>公网部分：1、IP配置</h2><h3>R1-IP：</h3><p>IP地址：</p><table><thead><tr><th>Interface</th><th>IP Address</th><th>Subnet Mask</th><th>Status</th></tr></thead><tbody><tr><td>GigabitEthernet0/1</td><td>100.1.1.1</td><td>255.255.255.0</td><td>Up</td></tr></tbody></table><pre><code class="lang-bash">Router&gt;en                                  
Router#conf t                              
Enter configuration commands, one per line.  End with CNTL/Z.
Router(config)#int g0/1                    
Router(config-if)#ip address 100.1.1.1 255.255.255.0 
Router(config-if)#no shut                                   
  %LINK-5-CHANGED: Interface GigabitEthernet0/1, changed state to up
Router(config-if)#router ospf 1       
Router(config-router)#network 100.1.1.0 0.0.0.255 area 0 
Router(config-router)#hostname r1          
r1(config)#                                </code></pre><h3>R2-IP：</h3><p>IP地址:</p><table><thead><tr><th>Interface</th><th>IP Address</th><th>Subnet Mask</th><th>Status</th></tr></thead><tbody><tr><td>GigabitEthernet0/0</td><td>100.1.1.2</td><td>255.255.255.0</td><td>-</td></tr></tbody></table><pre><code class="lang-bash">Router&gt;en                                 
Router#conf t                              
Enter configuration commands, one per line.  End with CNTL/Z.    
Router(config)#hostname r2                 
r2(config)#int g0/0                        
r2(config-if)#ip address 100.1.1.2 255.255.255.0  
r2(config-if)#no shut                                               
  %LINK-5-CHANGED: Interface GigabitEthernet0/0, changed state to up                          
  %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/0, changed state to up
r2(config-if)#int g0/1                    
r2(config-if)#ip address 124.126.100.1 255.255.255.0  
r2(config-if)#no shut                                               
  %LINK-5-CHANGED: Interface GigabitEthernet0/1, changed state to up
#配置OSPF
r2(config-if)#router ospf 1                
r2(config-router)#network 100.1.1.0 0.0.0.255 area 0  
r2(config-router)#network 124.126.100.0 0.0.0.255 area 0  </code></pre><h3>R3:</h3><pre><code class="lang-bash">Router&gt;en
Router#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
Router(config)#hostname r3
r3(config)#int g0/0
r3(config-if)#ip address 124.126.100.2 255.255.255.0
r3(config-if)#no shut
  %LINK-5-CHANGED: Interface GigabitEthernet0/0, changed state to up
  %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/0, changed state to up
r3(config-if)#int g0/1
r3(config-if)#ip address 202.96.137.1 255.255.255.0
r3(config-if)#no shut
  %LINK-5-CHANGED: Interface GigabitEthernet0/1, changed state to up
r3(config-if)#int g0/2
r3(config-if)#ip address 124.126.200.254 255.255.255.0
r3(config-if)#no shut
  %LINK-5-CHANGED: Interface GigabitEthernet0/2, changed state to up
  %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/2, changed state to up
#配置OSPF
r3(config-if)#router ospf 1
r3(config-router)#network 124.126.100.0 0.0.0.255 area 0
r3(config-router)#network 202.96.137.0 0.0.0.255 area 0
r3(config-router)#network 124.126.200.0 0.0.0.255 area 0</code></pre><h3>R4:</h3><pre><code class="lang-bash">Router&gt;en
Router#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
Router(config)#hostname r4
r4(config)#int g0/0
r4(config-if)#ip addr 202.96.137.2 255.255.255.0
r4(config-if)#no shut</code></pre><p>当前路由表：</p><pre><code class="lang-bash">r1#show ip route 
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
       i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
       * - candidate default, U - per-user static route, o - ODR
       P - periodic downloaded static route

Gateway of last resort is not set

100.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C       100.1.1.0/24 is directly connected, GigabitEthernet0/1
L       100.1.1.1/32 is directly connected, GigabitEthernet0/1
     124.0.0.0/24 is subnetted, 2 subnets
O       124.126.100.0/24 [110/2] via 100.1.1.2, 00:13:02, GigabitEthernet0/1
O       124.126.200.0/24 [110/3] via 100.1.1.2, 00:11:52, GigabitEthernet0/1
S    192.168.0.0/16 [1/0] via 192.168.10.2
     192.168.10.0/24 is variably subnetted, 2 subnets, 2 masks
C       192.168.10.0/30 is directly connected, GigabitEthernet0/0
L       192.168.10.1/32 is directly connected, GigabitEthernet0/0
O    202.96.137.0/24 [110/3] via 100.1.1.2, 00:00:33, GigabitEthernet0/1

r1#</code></pre><h2>公网部分：3、公网PC可以通过R1的8080端口访问到内网HTTP-SERVER的80端口的http业务</h2><p>内网访问服务器(172.16.1.10/24)，可以正常访问<br><img src="https://cmd.dayi.ink/uploads/upload_2369ba009e335c402b34a3f6c7b1286f.png" alt="" title=""style=""></p><p>R1配置路由</p><pre><code class="lang-bash">r1(config)#ip route 172.16.1.0 255.255.255.0 192.168.10.2</code></pre><p>路由可以ping通内网服务器：</p><p><img src="https://cmd.dayi.ink/uploads/upload_2a2d111b521a35d60eaced12af379ad6.png" alt="" title=""style=""></p><p>配置NAT：</p><pre><code class="lang-bash">r1(config)#int g0/0
r1(config-if)#ip nat inside
r1(config-if)#int g0/1
r1(config-if)#ip nat outside
r1(config)#ip nat inside source static tcp 172.16.1.10 80 100.1.1.1 8080

</code></pre><p>测试访问：</p><p>公网PC:<br>IP地址:124.126.200.11<br>子网掩码:255.255.255.0<br>默认网关:124.126.200.254<br>DNS服务器：113.100.2.56</p><p><img src="https://cmd.dayi.ink/uploads/upload_088bcc31a636689a93b2d334efff609c.png" alt="" title=""style=""></p><p>可以正常访问：</p><p><img src="https://cmd.dayi.ink/uploads/upload_378bab083213483b2d0bad4620d957ff.png" alt="" title=""style=""></p><h2>公网部分：4、现在有一台公网服务器HTTP-SERVER，地址为124.126.200.10/24，现在需要内网用户能够访问到该公网服务器。（R1和R2之间使用124.126.100.0/24网段）</h2><blockquote>（R1和R2之间使用124.126.100.0/24网段） 此句话忽略。</blockquote><p>IP配置：<br>IP地址:124.126.200.10<br>子网掩码:255.255.255.0<br>默认网关:124.126.200.254<br>DNS服务器：113.100.2.56<br><img src="https://cmd.dayi.ink/uploads/upload_01462ca187a3461790cd7bfa84af66ea.png" alt="" title=""style=""></p><pre><code class="lang-bash">r1(config)#access-list 10 permit 192.168.0.0 0.0.255.255
r1(config)#ip nat inside source list 10 interface g0/1 overload
</code></pre><p>可以正常访问啦！<br><img src="https://cmd.dayi.ink/uploads/upload_e15a70088cc7206a7e636eeaf5d9f30c.png" alt="" title=""style=""></p><h2>公网部分：5、有一台公网的DNS-SERVER，地址为113.100.2.56/24，网关为113.100.2.1/24，我们最终想要通过访问www.shixun.com这个域名访问到公网http-server，并且查看首页的a small page，内容显示为：welcome to study our course!</h2><h3>R2:</h3><pre><code class="lang-bash">r2&gt;en
r2#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
r2(config)#int g0/2
r2(config-if)#
r2(config-if)#ip address 113.100.2.1 255.255.255.0
r2(config-if)#no shut
  %LINK-5-CHANGED: Interface GigabitEthernet0/2, changed state to up
  %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/2, changed state to up
#配置OSPF
r2(config-if)# router ospf 1
r2(config-router)#network 113.100.2.0 0.0.0.255 area 1</code></pre><h3>配置DNS服务器：</h3><p>DNS服务器IP：113.100.2.56/24 via 113.100.2.1</p><p><img src="https://cmd.dayi.ink/uploads/upload_791d200f152ba2f12d00b2194ebf85f1.png" alt="" title=""style=""></p><h3>配置域名：</h3><p>www.shixun.com</p><p><img src="https://cmd.dayi.ink/uploads/upload_00330c8e017312cfaa0ce881850a2315.png" alt="" title=""style=""></p><p><img src="https://cmd.dayi.ink/uploads/upload_513f27cf3730be16fcc685304ba95519.png" alt="" title=""style=""></p><h3>测试访问：</h3><p><img src="https://cmd.dayi.ink/uploads/upload_e6af4afb49e8c36de003a2b021f1288a.png" alt="" title=""style=""></p><p>访问成功，修改HTML</p><h3>HTML内容</h3><h4>index.html</h4><pre><code class="lang-html">&lt;!DOCTYPE html&gt;
&lt;html lang=&quot;zh-CN&quot;&gt;
&lt;head&gt;
    &lt;meta charset=&quot;UTF-8&quot;&gt;
    &lt;meta name=&quot;viewport&quot; content=&quot;width=device-width, initial-scale=1.0&quot;&gt;
    &lt;title&gt;首页 - 欢迎来到实训课程&lt;/title&gt;
&lt;/head&gt;
&lt;body&gt;
    &lt;div class=&quot;container&quot;&gt;
        &lt;h1&gt;欢迎来到实训课程首页&lt;/h1&gt;
        &lt;p&gt;点击下面的链接查看详细信息：&lt;/p&gt;
        &lt;a href=&quot;a_small_page.html&quot;&gt;进入课程页面（a_small_page)&lt;/a&gt;

&lt;a&gt;疯狂星期5组奉献&lt;/a&gt;
    &lt;/div&gt;
&lt;/body&gt;
&lt;/html&gt;</code></pre><h4>a_small_page.html</h4><pre><code class="lang-html">&lt;!DOCTYPE html&gt;
&lt;html lang=&quot;zh-CN&quot;&gt;
&lt;head&gt;
    &lt;meta charset=&quot;UTF-8&quot;&gt;
    &lt;meta name=&quot;viewport&quot; content=&quot;width=device-width, initial-scale=1.0&quot;&gt;
    &lt;title&gt;课程详情 - 欢迎学习我们的课程&lt;/title&gt;
   
&lt;/head&gt;
&lt;body&gt;
    &lt;div class=&quot;container&quot;&gt;
        &lt;h1&gt;欢迎学习我们的课程！&lt;/h1&gt;
        &lt;p&gt;Welcome to study our course!&lt;/p&gt;
        &lt;a href=&quot;index.html&quot;&gt;返回首页&lt;/a&gt;
        &lt;a&gt;疯狂星期5组奉献&lt;/a&gt;
    &lt;/div&gt;
&lt;/body&gt;
&lt;/html&gt;</code></pre><p><img src="https://cmd.dayi.ink/uploads/upload_1de2b7d64d2aaf23714b8df798b4447e.png" alt="" title=""style=""></p><h3>效果</h3><p><img src="https://cmd.dayi.ink/uploads/upload_69abcaee96a5b26bdc4d66076d99836a.png" alt="" title=""style=""></p><p><img src="https://cmd.dayi.ink/uploads/upload_a2c3c19bca3fca66b9b885b9a0b594d4.png" alt="" title=""style=""></p><h2>分支：</h2><h2>分支：1、内网PC7和PC8分别位于vlan70和vlan80这两个vlan当中</h2><h2>分支：2、PC7和PC8的网关分别为192.168.70.254  192.168.80.254，且网关位于R4路由器上</h2><pre><code class="lang-bash">Switch&gt;
Switch&gt;en
Switch#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
Switch(config)#
Switch(config)#hostname branch
branch(config)#vlan 70
branch(config-vlan)#int vlan 70
branch(config-if)#
  %LINK-5-CHANGED: Interface Vlan70, changed state to up

branch(config-if)#ip addr 192.168.70.254 255.255.255.0
branch(config-if)#vlan 80
branch(config-vlan)#int vlan 80
branch(config-if)#
  %LINK-5-CHANGED: Interface Vlan80, changed state to up

branch(config-if)#ip addr 192.168.80.254 255.255.255.0
branch(config-if)#
branch(config-if)#vlan 600
branch(config-vlan)#int vlan 600
branch(config-if)#
  %LINK-5-CHANGED: Interface Vlan600, changed state to up

branch(config-if)#ip addr 10.10.10.2 255.255.255.252
branch(config-if)#i
branch(config-if)#int fa0/2
branch(config-if)#sw mode acc
branch(config-if)#sw acc vlan 70
branch(config-if)#
  %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan70, changed state to up

branch(config-if)#no shut
branch(config-if)#
branch(config-if)#int fa0/3
branch(config-if)#sw mode acc
branch(config-if)#sw acc vlan 80
branch(config-if)#
  LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan80, changed state to up

branch(config-if)#no shut
branch(config-if)#
branch(config-if)#int f0/1
branch(config-if)#
branch(config-if)#sw mode acc
branch(config-if)#sw acc vlan 600
branch(config-if)#no shut
branch(config-if)#
branch(config-if)#ip route 0.0.0.0 0.0.0.0 10.10.10.1
branch(config)#ip routing
</code></pre><h2>分支：3、PC7和PC8也要能够访问外网（测试访问公网HTTP-SERVER）</h2><p>PC7:<br>IP地址:192.168.70.10<br>子网掩码:255.255.255.0<br>默认网关:192.168.70.254<br>DNS服务器：113.100.2.56<br><img src="https://cmd.dayi.ink/uploads/upload_591f34e47fa67f265b0c008362491f42.png" alt="" title=""style=""></p><p>PC8：<br>IP地址:192.168.80.10<br>子网掩码:255.255.255.0<br>默认网关:192.168.80.254<br>DNS服务器：113.100.2.56</p><p><img src="https://cmd.dayi.ink/uploads/upload_245d3f61957495e023033971ac31ed97.png" alt="" title=""style=""></p><p>R4:</p><pre><code class="lang-bash">r4(config)#int g0/1
r4(config-if)#ip addr 10.10.10.1 255.255.255.252
r4(config-if)#no shut</code></pre><p>PC8<->PC7相互访问</p><p><img src="https://cmd.dayi.ink/uploads/upload_4b1fc58fcca247780261156cef92bee3.png" alt="" title=""style=""></p><p>配置访问：</p><pre><code class="lang-bash">branch(config)#ip route 0.0.0.0 0.0.0.0 10.10.10.1
r4(config)#int g0/1
r4(config-if)#ip addr 10.10.10.1 255.255.255.252
r4(config-if)#no shut
r4(config)#access-list 100 permit ip 192.168.70.0 0.0.0.255 any 
r4(config)#access-list 100 permit ip 192.168.80.0 0.0.0.255 any
r4(config)#int g0/1
r4(config-if)#ip nat inside
r4(config-if)#int g0/0
r4(config-if)#ip nat outside
r4(config-if)#ip nat inside source list 100 interface g0/0 overload
r4(config)#ip route 192.168.70.0 255.255.255.0 10.10.10.2
r4(config)#ip route 192.168.80.0 255.255.255.0 10.10.10.2</code></pre><p>r4(config)#do show ip int br<br>Interface              IP-Address      OK? Method Status                Protocol <br>GigabitEthernet0/0     202.96.137.2    YES manual up                    up <br>GigabitEthernet0/1     10.10.10.1      YES manual up                    up <br>GigabitEthernet0/2     unassigned      YES unset  administratively down down <br>Vlan1                  unassigned      YES unset  administratively down down<br>r4(config)#<br>r4(config)#router ospf 1<br>r4(config-router)#do show ip ospf neighbor</p><p>Neighbor ID     Pri   State           Dead Time   Address         Interface<br>202.96.137.1      1   FULL/DR         00:00:30    202.96.137.1    GigabitEthernet0/0<br>r4(config-router)#</p><p>r4(config-router)#network 202.96.137.0 0.0.0.255 area 0</p><h3>测试</h3><p>PC7成功访问</p><p><img src="https://cmd.dayi.ink/uploads/upload_928bfc0af3f0df1ba9d3724d28611f80.png" alt="" title=""style=""><br><img src="https://cmd.dayi.ink/uploads/upload_9dd9f94f7478ae2f182e788ae063638e.png" alt="" title=""style=""></p><p>PC8成功访问</p><p><img src="https://cmd.dayi.ink/uploads/upload_7f1303850d2109ad52d7e681e88f02a9.png" alt="" title=""style=""></p><p><img src="https://cmd.dayi.ink/uploads/upload_759292ecba4ab938d55a4c092c045430.png" alt="" title=""style=""></p><h2>文件</h2><p><span class="external-link"><a class="no-external-link" href="https://p.dabbit.net/blog/pic_bed/sharex/_pn-2024-06-27-15-48-28_Marten_Infatuated_Delirious.rar" target="_blank"><i data-feather="external-link"></i>https://p.dabbit.net/blog/pic_bed/sharex/_pn-2024-06-27-15-48-28_Marten_Infatuated_Delirious.rar</a></span></p>

18 周实训作业

文件

周四要求和作业

要求：内网

要求：公网

要求：分支

拓扑图

VLAN添加和配置

要求如下：VLAN配置要求

核心交换机：建立VLAN

核心交换机：配置完的VLAN信息：

核心交换机：配置VLAN分发，VTP服务器

核心交换机：配置VLAN地址

要求

配置

当前接口状态和IP配置概要

公司内网：3、现在要求所有的网关都在内网核心交换机SW1上，使用svi接口充当网关

公司内网：配置子交换机的VLAN同步：

财务部交换机

划分VLAN接口：

公司内网：管理部交换机

公司内网：技术部交换机

公司内网：服务器交换机

公司内网：服务器IP配置

公司内网： 2.5： 5）R1和SW1之间互联的地址为192.168.10.0/30的地址

核心交换机：

路由器

公司内网：4、实现内网所有PC和服务器之间的互联

允许trunk VLANIP互通

核心交换机：

使用服务器进行测试

ping：172.16.1.254

ping 192.168.1.254

ping 192.168.2.254

ping 192.168.3.254

ping 192.168.1.10

公司内网：5、由于内网员工对于计算机的使用能力较差，DHCP服务器

出口路由器

DHCP中继

测试：

公司内网：6、允许内网管理部门的员工通过telnet管理内网的路由器和核心交换机，其他部门不允许通过telnet管理路由器和交换机。（要配置telnet管理内网设备）

新建VLAN500用于管理，并配置ACL表

公网部分：要求

公网部分：1、IP配置

R1-IP：

R2-IP：

R3:

R4:

公网部分：3、公网PC可以通过R1的8080端口访问到内网HTTP-SERVER的80端口的http业务

公网部分：4、现在有一台公网服务器HTTP-SERVER，地址为124.126.200.10/24，现在需要内网用户能够访问到该公网服务器。（R1和R2之间使用124.126.100.0/24网段）

公网部分：5、有一台公网的DNS-SERVER，地址为113.100.2.56/24，网关为113.100.2.1/24，我们最终想要通过访问www.shixun.com这个域名访问到公网http-server，并且查看首页的a small page，内容显示为：welcome to study our course!

R2:

配置DNS服务器：

配置域名：

测试访问：

HTML内容

index.html

a_small_page.html

效果

分支：

分支：1、内网PC7和PC8分别位于vlan70和vlan80这两个vlan当中

分支：2、PC7和PC8的网关分别为192.168.70.254 192.168.80.254，且网关位于R4路由器上

分支：3、PC7和PC8也要能够访问外网（测试访问公网HTTP-SERVER）

测试

文件

发表评论 取消回复 使用cookie技术保留您的个人信息以便您下次快速评论，继续评论表示您已同意该条款

18 周实训作业

发表评论取消回复
使用cookie技术保留您的个人信息以便您下次快速评论，继续评论表示您已同意该条款