当前位置： 首页 > news >正文

邢台信息港二手房出售seo合作代理

news 2025/11/3 15:42:09
邢台信息港二手房出售,seo合作代理,郑州公司网站设计,WordPress数据库防注入知识改变命运#xff0c;技术就是要分享#xff0c;有问题随时联系#xff0c;免费答疑#xff0c;欢迎联系#xff01; 微思简介#xff08;https://www.xmws.cn) 微思成立于2002年#xff0c;是一个诚信敬业、积极向上、充满活力、专注技术服务的企业。 微思获得了八… 知识改变命运技术就是要分享有问题随时联系免费答疑欢迎联系 微思简介https://www.xmws.cn) 微思成立于2002年是一个诚信敬业、积极向上、充满活力、专注技术服务的企业。 微思获得了八大厂商的培训授权成长为福建地区广受认可的IT认证培训机构同时也是知名的IT服务提供商及系统集成商业务主要包含国际IT认证培训及考试、IT维护服务、系统集成。微思从成立开始就把技术服务作为开展业务的主要根基视技术服务为企业发展的生存命脉。微思拥有一批由工程师和讲师组成的出色技术团队拥有8名CCIE、8名HCIE、5名OCP、8名MCITP、6名RHCE、5名VMware VCP、6名EMC/IBM存储/小型机工程师。到目前为止微思已经投资超过2000万元建立备件库和体验中心为本地客户提供优质的IT维护服务和完整的系统集成解决方案。 微思自成立以来培养了一万多名IT专业人才厦门85%大中型企业的IT技术人员都参加过微思的培训同时微思积累了丰富的就业渠道为学员的就业提供有力的保障。 凭借良好技术和服务能力微思完成了众多的IT建设项目如建发集团、国贸集团、厦门航空、厦门银行、厦门邮储银行、乾照光电、三安集团、嵩屿码头、海润码头、海通码头、联想移动、安踏、七匹狼、九牧王、柒牌、特步、361度、厦门边检、厦门海关、厦门国检、厦门国土局、厦门地震局、厦门国家会计学院、厦门大学、华侨大学等这些客户对微思的技术和服务给予了充分的肯定和良好的评价。 微思网络肩负“智造财富”的企业使命凭借出色的技术实力、齐全的实验环境、高效的服务体系为社会创造价值、为企业实现价值、为员工提升价值 微思22年国际IT认证培训经验 红帽RHCE OracleOCP VMware VCP 信息安全CISP 项目管理PMP 华为 HCIA/HCIP/HCIE 思科CCNA/CCNP/CCIE 网络实战、云计算实战企业IT技术定制培训 数据中心解决方案 网络架构解决方案 网络安全解决方案 视频会议解决方案 集成业务咨询容灾备份解决方案服务器代理:华为/H3C/联想/DELL网络产品代理:华为/H3C/思科/锐捷存储产品代理:华为/H3C/联想/DELL安全产品代理:深信服/奇安信/网御 合作厂商: 思科、华为、H3C、锐捷、联想、DELL、VMware深信服、奇安信、网御星云、绿盟、启明、IBM、EMC 微思软实力 【集成资质】 华为金牌代理商 思科金牌代理商 EMC金牌代理商 NetApp金牌代理商 VMware企业级代理商 数存金牌代理商 深信服金牌代理商 绿盟金牌代理商 天融信金牌代理商 北塔金牌代理商 联软金牌代理商 盈高金牌代理商 Radware金牌代理商 Panabit金牌代理商 【培训资质】 思科授权培训中心 Oralce授权培训中心 华为授权培训中心 VMware授权培训中心 红帽授权培训中心 微软授权培训中心 普尔文授权考试中心 VUE授权考试中心 【微思优势】 专业的技术专家团队 22年国际IT认证培训经验 设备齐全的备件库 拥有资深专家讲师团队 丰富的系统集成经验 拥有专业的机房和网络实验室 完美的产品体验中心 百家名企合作丰富的就业渠道 微思硬实力 【八大厂商授权】 【三大上课教师可同时容纳100人】 实验平台使用方法 步骤 安装VMware Workstation安装EVE-NG客户端关联SecureCRT解压“微思网络CCNA实验平台”虚拟机 步骤1安装VMware Workstation 双击VMware-workstation-full-15.5.1-15018445安装程序。 点击“下一步”。 勾选“我接受许可协议中的条款”点击“下一步”。 安装位置使用默认路径即可点击“下一步”。 按默认点击“下一步”。 按默认点击“下一步”。 点击“安装”。 程序正在安装耐心等待。 点击“许可证”输入许可。 输入VMware-workstation-full-15.5.1-15018445-KEY记事本中的序列号点击“输入”。 点击“完成”。 步骤2安装EVE-NG客户端 双击EVE-NG-Win-Client-Pack-2.0安装程序。 点击“运行”。 点击“下一步”。 点击“下一步”。 按默认即可点击“下一步” 选中“I accept the agreement”点击“Next”。 点击“Next”。 按默认即可点击“Next”。 按默认即可点击“Next”。 点击“Install”。 点击“Next”。 点击“Finish”。 安装Wireshark点击“Next” 点击“I Agree” 按默认即可点击“Next”。 按默认即可点击“Next” 安装路径按默认即可点击“Next”。 按默认即可点击“Next”。 按默认即可点击“Install” 点击“I Agree” 按默认即可点击“Install”。 点击“Next” 点击“Finish” 点击“Next” 点击“Finish” 点击“Finish” 步骤3关联SecureCRT 把“微思网络CCNA实验平台登录软件SecureCRT”压缩包解压到当前文件夹。 进入SecureCRT文件夹找到“SecureCRT.exe”文件鼠标右键“SecureCRT.exe”点击发送到“桌面快捷方式”。 进入EVE-NG客户端的安装目录默认在C:\Program Files\EVE-NG把注册表文件win10_64bit_sCRT.reg拷贝到其他盘比如D盘。 鼠标右键D盘中的win10_64bit_sCRT.reg文件单击“编辑”。 把SecureCRT的存放路径输入到箭头所指的地方注意路径是双斜杠改完之后保存。 注意SecureCRT的存放路径视具体情况而定截图中的路径只是个例子 保存后双击注册表文件win10_64bit_sCRT.reg选择“是”即可。 步骤4解压“微思网络CCNA实验平台”虚拟机 把“微思网络CCNA实验平台”压缩包解压到当前文件夹。 解压之后进入VM XMWS CCNA文件夹找到“VMware虚拟机配置”文件然后双击运行。 此时VMware Workstation会打开虚拟机XMWS CCNA。单击“开启此虚拟机”打开虚拟机的电源。 记录箭头所指的地方的IP地址。 在浏览器中输入上一步记录的IP地址访问实验台 用户名是admin 密码是www.xmws.cn 输入用户名和密码之后点击“Sign In”登录实验台。 鼠标点击某个Lab之后右边会有个“Open”按钮。 单击“Open”打开实验鼠标移动到浏览器左侧单击“More actions”点击“Start all nodes”开启实验设备。 设备启动完成之后图标颜色会变成蓝色如下图所示。 鼠标点击设备图标会自动关联SecureCRT连续敲几下回车即可进入设备控制界面。 实验做完之后鼠标移动到浏览器左侧单击“More actions”点击“Stop all nodes”关闭实验设备。 关闭实验台设备之后鼠标移动到浏览器左侧单击“Close lab”即可回到主页。 实验做完之后鼠标右键虚拟机XMWS CCNA单击“电源”点击“关闭客户机”即可关闭虚拟机。 熟悉CISCO IOS的各个模式 Router //用户模式 Router# //特权模式 Router(config-if)# //接口模式 Router(config-router)# //路由配置模式 Router(config-line)# //线路模式 Router(config-subif)# //子接口模式 Router //用户模式 Routerenable //在用户模式敲enable进入特权模式 Router#disable //在特权模式敲disable退出到用户模式 Routerenable //在用户模式敲enable进入特权模式 Router#configure terminal //在特权模式敲入configure terminal进入到配置模式 Router(config)#interface ethernet0/0 //在配置模式敲入“interface接口类型接口编号”进入接口模式 Router(config-if)#exit //敲exit退出接口模式 Router(config)#router rip //敲“router 路由协议”进入路由配置模式 Router(config-router)#exit //退出路由配置模式 Router(config)#line console 0 //进入线路模式 Router(config-line)#end //从线路模式退出任何时候敲入end会退出到特权模式 Router#configure terminal Router(config)#interface ethernet 0/0.1 //进入子接口模式 Router(config-subif)#end //任何时候敲入end会退出到特权模式 Router# 熟悉CISCO IOS的基本配置 CISCO IOS常用配置命令 Routerenable Router#configure terminal Router(config)#enable secret xmws   //设置enable的密码为xmws Router(config)#enable password wisdom   //设置enable的密码为wisdom不能和enable secret 设置的密码相同如果都设置secret生效 Router(config)#no ip domain-lookup   //关掉域名查找功能 Router(config)#service password-encryption   //对明文口令进行加密比如加密Console口、VTY或enable password设置的密码这样密码不再显示为明文 Router(config)#line console 0   //进入Cconsole口 Router(config-line)#password xmws  //设置Console口密码为xmws Router(config-line)#login  //启用密码 Router(config-line)#exec-timeout 0 0  //设置操作会话不超时 Router(config-line)#logging synchronous  //配置光标跟随, 阻止控制台信息打断你当前的输入从而使输入信息显得更为简单易读 Router(config)#line vty 0 4  //进入VTY Router(config-line)#password cisco Router(config-line)#login Router(config-line)#exec-timeout 0 0 Router(config-line)#logging synchronous 注VTY (虚拟终端) 在网络操作系统包括Cisco IOS中是一个接受telent或ssh连接的逻辑端口。 配置一台路由器当作PC使用 做实验时可以将路由器当作PC使用用来测试网络的连通性等。 步骤本例子中当作PC的路由器接口为Ethernet 0/0 关闭路由器的路由功能设置接口IP地址配置默认网关检查 Routerenable Router#configure terminal Router(config)#hostname PC1 PC1(config)#no ip routing   //关闭路由器的路由功能 PC1(config)#interface ethernet 0/0 PC1(config-if)#ip address 192.168.10.1 255.255.255.0   //配置接口IP地址 PC1(config-if)#no shutdown   //激活接口 PC1(config-if)#exit PC1(config)#ip default-gateway 192.168.10.254   //配置默认网关 PC1(config)#end PC1#show ip interface brief   //查看接口IP地址和状态 Interface                  IP-Address      OK? Method Status                Protocol Ethernet0/0                10.1.1.1        YES manual up                    up      Ethernet0/1                unassigned      YES unset  administratively down down    Ethernet0/2                unassigned      YES unset  administratively down down    Ethernet0/3                unassigned      YES unset  administratively down down    PC1#show ip route   //show ip route可以看到网关 Default gateway is 192.168.10.254 Host               Gateway           Last Use    Total Uses  Interface ICMP redirect cache is empty 实验01IOS基本配置 实验目的 熟悉CISCO IOS的常用模式掌握CISCO IOS模式之间的切换掌握CISCO IOS的基本配置命令掌握如何把一台路由器配置成PC 实验拓扑 实验需求 根据实验拓扑图完成设备的基本配置 包括主机名、Enable密码、关闭域名查找功能等 PC和Server使用路由器模拟把路由器PC1、PC2、PC3、Server A、Server B配置成PC测试主机与网关以及设备之间的网络连通性。 实验步骤 步骤1路由器和交换机的基本配置 配置R1 Routerenable Router#configure terminal Router(config)#hostname R1 R1(config)#enable password xmws R1(config)#no ip domain-lookup R1(config)#line console 0 R1(config-line)#password xmws R1(config-line)#login R1(config-line)#exec-timeout 0 0 R1(config-line)#logging synchronous R1(config-line)#exit R1(config)#line vty 0 4 R1(config-line)#password xmws R1(config-line)#login R1(config-line)#exec-timeout 0 0 R1(config-line)#logging synchronous R1(config-line)#exit R1(config)#interface serial1/0 R1(config-if)#ip address 10.1.12.1 255.255.255.0 R1(config-if)#no shutdown R1(config-if)#exit R1(config)#interface serial1/1 R1(config-if)#ip address 13.1.1.1 255.255.255.0 R1(config-if)#no shutdown R1(config-if)#exit R1(config)#interface ethernet0/0 R1(config-if)#ip address 192.168.10.254 255.255.255.0 R1(config-if)#no shutdown R1(config-if)#exit R1(config)#interface ethernet0/1 R1(config-if)#ip address 192.168.20.254 255.255.255.0 R1(config-if)#no shutdown R1(config-if)#end R1# 配置R2 Routerenable Router#configure terminal Router(config)#hostname R2 R2(config)#enable password xmws R2(config)#no ip domain-lookup R2(config)#line console 0 R2(config-line)#password xmws R2(config-line)#login R2(config-line)#exec-timeout 0 0 R2(config-line)#logging synchronous R2(config-line)#exit R2(config)#line vty 0 4 R2(config-line)#password xmws R2(config-line)#login R2(config-line)#exec-timeout 0 0 R2(config-line)#logging synchronous R2(config-line)#exit R2(config)#interface serial1/0 R2(config-if)#ip address 10.1.12.2 255.255.255.0 R2(config-if)#no shutdown R2(config-if)#exit R2(config)#interface serial1/1 R2(config-if)#ip address 23.1.1.2 255.255.255.0 R2(config-if)#no shutdown R2(config-if)#exit R2(config)#interface ethernet0/0 R2(config-if)#ip address 172.16.1.254 255.255.255.0 R2(config-if)#no shutdown R2(config-if)#end R2# 配置R3 Routerenable Router#configure terminal Router(config)#hostname R3conc R3(config)#enable password xmws R3(config)#no ip domain-lookup R3(config)#line console 0 R3(config-line)#password xmws R3(config-line)#login R3(config-line)#exec-timeout 0 0 R3(config-line)#logging synchronous R3(config-line)#exit R3(config)#line vty 0 4 R3(config-line)#password xmws R3(config-line)#login R3(config-line)#exec-timeout 0 0 R3(config-line)#logging synchronous R3(config-line)#exit R3(config)#interface serial1/0 R3(config-if)#ip address 13.1.1.3 255.255.255.0 R3(config-if)#no shutdown R3(config-if)#exit R3(config)#interface serial1/1 R3(config-if)#ip address 23.1.1.3 255.255.255.0 R3(config-if)#no shutdown R3(config-if)#exit R3(config)#interface loopback0 R3(config-if)#ip address 9.2.6.7 255.255.255.255 R3(config-if)#end R3# 配置SW1 Switchenable Switch#configure terminal Switch(config)#hostname SW1 SW1(config)#enable password xmws SW1(config)#no ip domain-lookup SW1(config)#line console 0 SW1(config-line)#password xmws SW1(config-line)#login SW1(config-line)#exec-timeout 0 0 SW1(config-line)#logging synchronous SW1(config-line)#exit SW1(config)#line vty 0 4 SW1(config-line)#password xmws SW1(config-line)#login SW1(config-line)#exec-timeout 0 0 SW1(config-line)#logging synchronous SW1(config-line)#exit SW1(config)#interface vlan 1 SW1(config-if)#ip address 192.168.10.11 255.255.255.0 SW1(config-if)#no shutdown SW1(config-if)#exit SW1(config)#ip default-gateway 192.168.10.254 SW1(config)#end SW1# 配置SW2 Switchenable Switch#configure terminal Switch(config)#hostname SW2 SW2(config)#enable password xmws SW2(config)#no ip domain-lookup SW2(config)#line console 0 SW2(config-line)#password xmws SW2(config-line)#login SW2(config-line)#exec-timeout 0 0 SW2(config-line)#logging synchronous SW2(config-line)#exit SW2(config)#line vty 0 4 SW2(config-line)#password xmws SW2(config-line)#login SW2(config-line)#exec-timeout 0 0 SW2(config-line)#logging synchronous SW2(config-line)#exit SW2(config)#interface vlan 1 SW2(config-if)#ip address 192.168.10.12 255.255.255.0 SW2(config-if)#no shutdown SW2(config-if)#exit SW2(config)#ip default-gateway 192.168.10.254 SW2(config)#end SW2# 配置SW3 Switchenable Switch#configure terminal Switch(config)#hostname SW3 SW3(config)#enable password xmws SW3(config)#no ip domain-lookup SW3(config)#line console 0 SW3(config-line)#password xmws SW3(config-line)#login SW3(config-line)#exec-timeout 0 0 SW3(config-line)#logging synchronous SW3(config-line)#exit SW3(config)#line vty 0 4 SW3(config-line)#password xmws SW3(config-line)#login SW3(config-line)#exec-timeout 0 0 SW3(config-line)#logging synchronous SW3(config-line)#exit SW3(config)#interface vlan 1 SW3(config-if)#ip address 192.168.10.13 255.255.255.0 SW3(config-if)#no shutdown SW3(config-if)#exit SW3(config)#ip default-gateway 192.168.10.254 SW3(config)#end SW3# 步骤2PC的基本配置 配置PC1 Routerenable Router#configure terminal Router(config)#hostname PC1 PC1(config)#no ip routing PC1(config)#ip default-gateway 192.168.10.254 PC1(config)#interface ethernet0/0 PC1(config-if)#ip address 192.168.10.1 255.255.255.0 PC1(config-if)#no shutdown PC1(config-if)#end PC1# 配置PC2 Routerenable Router#configure terminal Router(config)#hostname PC2 PC2(config)#no ip routing PC2(config)#ip default-gateway 192.168.10.254 PC2(config)#interface ethernet0/0 PC2(config-if)#ip address 192.168.10.2 255.255.255.0 PC2(config-if)#no shutdown PC2(config-if)#end PC2# 配置PC3 Routerenable Router#configure terminal Router(config)#hostname PC3 PC3(config)#no ip routing PC3(config)#ip default-gateway 172.16.1.254 PC3(config)#interface ethernet0/0 PC3(config-if)#ip address 172.16.1.1 255.255.255.0 PC3(config-if)#no shutdown PC3(config-if)#end PC3# 配置ServerA Routerenable Router#configure terminal Router(config)#hostname ServerA ServerA(config)#no ip routing ServerA(config)#ip default-gateway 192.168.10.254 ServerA(config)#interface ethernet0/0 ServerA(config-if)#ip address 192.168.10.3 255.255.255.0 ServerA(config-if)#no shutdown ServerA(config-if)#end ServerA# 配置PCB Routerenable Router#configure terminal Router(config)#hostname ServerB ServerB(config)#no ip routing ServerB(config)#ip default-gateway 192.168.10.254 ServerB(config)#interface ethernet0/0 ServerB(config-if)#ip address 192.168.10.4 255.255.255.0 ServerB(config-if)#no shutdown ServerB(config-if)#end ServerB# 实验检查 步骤1检查路由器 检查R1 R1#show ip interface brief Interface                  IP-Address      OK? Method Status                Protocol Ethernet0/0                192.168.10.254  YES manual up                    up      Ethernet0/1                192.168.20.254  YES manual up                    up      Ethernet0/2                unassigned      YES unset  administratively down down    Ethernet0/3                unassigned      YES unset  administratively down down    Serial1/0                  10.1.12.1       YES manual up                    up      Serial1/1                  13.1.1.1        YES manual up                    up      Serial1/2                  unassigned      YES unset  administratively down down    Serial1/3                  unassigned      YES unset  administratively down down   R1使用到的接口已经配置好IP地址并且是up up状态。 检查R2 R2#show ip interface brief Interface                  IP-Address      OK? Method Status                Protocol Ethernet0/0                172.16.1.254    YES manual up                    up      Ethernet0/1                unassigned      YES unset  administratively down down    Ethernet0/2                unassigned      YES unset  administratively down down    Ethernet0/3                unassigned      YES unset  administratively down down    Serial1/0                  10.1.12.2       YES manual up                    up      Serial1/1                  23.1.1.2        YES manual up                    up      Serial1/2                  unassigned      YES unset  administratively down down    Serial1/3                  unassigned      YES unset  administratively down down   R2使用到的接口已经配置好IP地址并且是up up状态。 检查R3 R3#show ip interface brief Interface                  IP-Address      OK? Method Status                Protocol Ethernet0/0                unassigned      YES unset  administratively down down    Ethernet0/1                unassigned      YES unset  administratively down down    Ethernet0/2                unassigned      YES unset  administratively down down    Ethernet0/3                unassigned      YES unset  administratively down down    Serial1/0                  13.1.1.3        YES manual up                    up      Serial1/1                  23.1.1.3        YES manual up                    up      Serial1/2                  unassigned      YES unset  administratively down down    Serial1/3                  unassigned      YES unset  administratively down down    Loopback0                  9.2.6.7         YES manual up                    up R3使用到的接口已经配置好IP地址并且是up up状态。 步骤2检查交换机 检查SW1 SW1#show ip interface brief Interface              IP-Address      OK? Method Status                Protocol Ethernet0/0            unassigned      YES unset  up                    up      Ethernet0/1            unassigned      YES unset  up                    up      Ethernet0/2            unassigned      YES unset  up                    up      Ethernet0/3            unassigned      YES unset  up                    up      Ethernet1/0            unassigned      YES unset  up                    up      Ethernet1/1            unassigned      YES unset  up                    up      Ethernet1/2            unassigned      YES unset  up                    up      Ethernet1/3            unassigned      YES unset  up                    up      Vlan1                 192.168.10.11   YES manual up                    up      SW1的Vlan1接口已经配置好IP地址并且是up up状态。 检查SW2 Interface              IP-Address      OK? Method Status                Protocol Ethernet0/0            unassigned      YES unset  up                    up      Ethernet0/1            unassigned      YES unset  up                    up      Ethernet0/2            unassigned      YES unset  up                    up      Ethernet0/3            unassigned      YES unset  up                    up      Ethernet1/0            unassigned      YES unset  up                    up      Ethernet1/1            unassigned      YES unset  up                    up      Ethernet1/2            unassigned      YES unset  up                    up      Ethernet1/3            unassigned      YES unset  up                    up      Vlan1                 192.168.10.12   YES manual up                    up      SW2的Vlan1接口已经配置好IP地址并且是up up状态。 检查SW3 SW3#show ip interface brief Interface              IP-Address      OK? Method Status                Protocol Ethernet0/0            unassigned      YES unset  up                    up      Ethernet0/1            unassigned      YES unset  up                    up      Ethernet0/2            unassigned      YES unset  up                    up      Ethernet0/3            unassigned      YES unset  up                    up      Ethernet1/0            unassigned      YES unset  up                    up      Ethernet1/1            unassigned      YES unset  up                    up      Ethernet1/2            unassigned      YES unset  up                    up      Ethernet1/3            unassigned      YES unset  up                    up      Vlan1                 192.168.10.13   YES manual up                    up      SW3的Vlan1接口已经配置好IP地址并且是up up状态。 步骤3检查PC 检查PC1 PC1#show ip interface brief Interface                  IP-Address      OK? Method Status                Protocol Ethernet0/0                192.168.10.1    YES manual up                    up      Ethernet0/1                unassigned      YES unset  administratively down down    Ethernet0/2                unassigned      YES unset  administratively down down    Ethernet0/3                unassigned      YES unset  administratively down down    PC1已经配置好IP地址并且是up up状态。 PC1#show ip route Default gateway is 192.168.10.254 Host               Gateway           Last Use    Total Uses  Interface ICMP redirect cache is empty PC1的网关是192.168.10.254。 检查PC2 PC2#show ip interface brief Interface                  IP-Address      OK? Method Status                Protocol Ethernet0/0                192.168.10.2    YES manual up                    up      Ethernet0/1                unassigned      YES unset  administratively down down    Ethernet0/2                unassigned      YES unset  administratively down down    Ethernet0/3                unassigned      YES unset  administratively down down    PC2已经配置好IP地址并且是up up状态。 PC2#show ip route Default gateway is 192.168.10.254 Host               Gateway           Last Use    Total Uses  Interface ICMP redirect cache is empty PC2的网关是192.168.10.254。 检查PC3 PC3#show ip interface brief Interface                  IP-Address      OK? Method Status                Protocol Ethernet0/0                172.16.1.1      YES manual up                    up      Ethernet0/1                unassigned      YES unset  administratively down down    Ethernet0/2                unassigned      YES unset  administratively down down    Ethernet0/3                unassigned      YES unset  administratively down down    PC3已经配置好IP地址并且是up up状态。 PC3#show ip route Default gateway is 172.16.1.254 Host               Gateway           Last Use    Total Uses  Interface ICMP redirect cache is empty PC3的网关是172.16.1.254。 检查ServerA ServerA#show ip interface brief Interface                  IP-Address      OK? Method Status                Protocol Ethernet0/0                192.168.10.3    YES manual up                    up      Ethernet0/1                unassigned      YES unset  administratively down down    Ethernet0/2                unassigned      YES unset  administratively down down    Ethernet0/3                unassigned      YES unset  administratively down down    ServerA已经配置好IP地址并且是up up状态。 ServerA#show ip route Default gateway is 192.168.10.254 Host               Gateway           Last Use    Total Uses  Interface ICMP redirect cache is empty ServerA的网关是192.168.10.254。 检查ServerB ServerB#show ip interface brief Interface                  IP-Address      OK? Method Status                Protocol Ethernet0/0                192.168.10.4    YES manual up                    up      Ethernet0/1                unassigned      YES unset  administratively down down    Ethernet0/2                unassigned      YES unset  administratively down down    Ethernet0/3                unassigned      YES unset  administratively down down    ServerB已经配置好IP地址并且是up up状态。 ServerB#show ip route Default gateway is 192.168.10.254 Host               Gateway           Last Use    Total Uses  Interface ICMP redirect cache is empty ServerB的网关是192.168.10.254。 连通性测试 步骤1测试PC和网关的连通性 测试PC1 PC1#ping 192.168.10.254 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.10.254, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 1/203/1012 ms PC1跟网关的连通性正常。 测试PC2 PC2#ping 192.168.10.254 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.10.254, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 1/203/1011 ms PC2跟网关的连通性正常。 测试PC3 PC3#ping 172.16.1.254 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 172.16.1.254, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 1/201/1002 ms PC3跟网关的连通性正常。 测试ServerA ServerA#ping 192.168.10.254 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.10.254, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 1/202/1009 ms ServerA跟网关的连通性正常。 测试ServerB ServerB#ping 192.168.10.254 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.10.254, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 1/202/1006 ms ServerB跟网关的连通性正常。 步骤2测试交换机和网关的连通性 测试SW1 SW1#ping 192.168.10.254 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.10.254, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 1/1/2 ms SW1跟网关的连通性正常。 测试SW2 SW2#ping 192.168.10.254 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.10.254, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 1/1/2 ms SW2跟网关的连通性正常。 测试SW3 SW3#ping 192.168.10.254 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.10.254, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 1/1/1 ms SW3跟网关的连通性正常。 步骤3测试路由器之间链路的连通性 测试R1和R2之间链路 R1#ping 10.1.12.2 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.1.12.2, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 5/9/10 ms R1和R2之间的连通性正常。 测试R1和R3之间的链路 R1#ping 13.1.1.3 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 13.1.1.3, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 9/10/11 ms R1和R3之间的连通性正常。 测试R2和R3之间的链路 R2#ping 23.1.1.3 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 23.1.1.3, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 8/9/11 ms R2和R3之间的连通性正常。 实验02配置Telnet与SSH 实验目的 理解Telnet与SSH的运行原理掌握Telnet与SSH的配置方法 实验拓扑 实验需求 根据实验拓扑图完成设备的基本配置SW1允许R1通过Telnet远程管理VTY密码为xmwsR2允许R1通过SSH version2远程管理用户名为xmws密码为wisdom域名为xmws.cn。 实验步骤 步骤1设备的基本配置 配置R1 Routerenable Router#configure terminal Router(config)#hostname R1 R1(config)#no ip domain-lookup R1(config)#line console 0 R1(config-line)#exec-timeout 0 0 R1(config-line)#logging synchronous R1(config-line)#exit R1(config)#enable password xmws R1(config)#interface ethernet0/0 R1(config-if)#ip address 192.168.1.254 255.255.255.0 R1(config-if)#no shutdown R1(config-if)#exit R1(config)#interface ethernet0/1 R1(config-if)#ip address 192.168.12.1 255.255.255.0 R1(config-if)#no shutdown R1(config-if)#end R1# 配置R2 Routerenable Router#configure terminal Router(config)#hostname R2 R2(config)#no ip domain-lookup R2(config)#line console 0 R2(config-line)#exec-timeout 0 0 R2(config-line)#logging synchronous R2(config-line)#exit R2(config)#enable password xmws R2(config)#interface ethernet0/0 R2(config-if)#ip address 192.168.12.2 255.255.255.0 R2(config-if)#no shutdown R2(config-if)#end R2# 配置SW1 Switchenable Switch#configure terminal Switch(config)#hostname SW1 SW1(config)#no ip domain-lookup SW1(config)#line console 0 SW1(config-line)#exec-timeout 0 0 SW1(config-line)#logging synchronous SW1(config-line)#exit SW1(config)#enable password xmws   //必须设置否则Telnet上SW1后无法进入特权模式 SW1(config)#interface vlan 1 SW1(config-if)#ip address 192.168.1.1 255.255.255.0 SW1(config-if)#no shutdown SW1(config-if)#exit SW1(config)#ip default-gateway 192.168.1.254 SW1(config)#end SW1# 步骤2配置Telnet 配置SW1 SW1enable SW1#configure terminal SW1(config)#line vty 0 4   //进入VTY SW1(config-line)#password xmws   //设置Telnet登录的密码为xmws SW1(config-line)#login   //启用密码 SW1(config-line)#transport input telnet   //允许通过Telnet远程登录 SW1(config-line)#end SW1# 步骤3配置SSH 配置R2 R2enable R2#configure terminal R2(config)#username xmws password wisdom   //创建用户名和密码 R2(config)#ip ssh version 2   //启用SSH版本2 R2(config)#ip domain-name xmws.cn   //定义域名 R2(config)#crypto key generate rsa   //生成密钥 The name for the keys will be: R2.xmws.cn Choose the size of the key modulus in the range of 360 to 4096 for your General Purpose Keys. Choosing a key modulus greater than 512 may take a few minutes. How many bits in the modulus [512]: 1024   //SSHv2密钥长度至少768位 % Generating 1024 bit RSA keys, keys will be non-exportable... [OK] (elapsed time was 0 seconds) R2(config)# R2(config)#line vty 0 4 R2(config-line)#login local   //使用用户名和密码验证 R2(config-line)# transport input ssh   //允许通过SSH远程登录 R2(config-line)#end R2# 实验检查 步骤1Telnet测试 R1#telnet 192.168.1.1 Trying 192.168.1.1 ... Open User Access Verification Password: SW1   //成功登录SW1 注意如果SW1没有设置Enable密码R1登录到SW1后输Enable会出现如下提示 R1#telnet 192.168.1.1 Trying 192.168.1.1 ... Open User Access Verification Password: SW1enable % No password set 同时按CtrlShit6组合键然后再按x把界面切回R1 R1#show sessions   //查看R1打开的Telnet会话 Conn Host                Address             Byte  Idle Conn Name *  1 192.168.1.1         192.168.1.1            6     5 192.168.1.1 R1#resume 1   //重新连接到SW1 [Resuming connection 1 to 192.168.1.1 ... ] SW1 步骤2检查Telnet SW1#show users   //SW1上查看谁登录到自己 Line       User       Host(s)              Idle       Location *  0 con 0                idle                 00:00:00   2 vty 0                idle                 00:02:47 192.168.1.254 Interface     User               Mode        Idle     Peer Address Location表示是谁登录到自己192.168.1.254是R1。 SW1#clear line 2   //清除R1的Telnet连接 [confirm] [OK] SW1#show users Line       User       Host(s)              Idle       Location *  0 con 0                idle                 00:00:00   Interface    User               Mode         Idle     Peer Address R1已经被清除。 步骤3SSH测试 R1#ssh -l xmws 192.168.12.2 Password: R2enable Password: R2#   //成功登录到R2 步骤4检查SSH R2#show ssh Connection Version   Mode  Encryption  Hmac          State            Username 0          1.99     IN    aes128-ctr  hmac-sha2-256 Session started       xmws 0          1.99     OUT  aes128-ctr  hmac-sha2-256 Session started       xmws 实验03配置CDP协议 实验目的 了解思科发现协议CDP的运行原理掌握思科发现协议CDP的配置方法 实验拓扑 实验需求 根据实验拓扑图完成设备的基本配置在R1上使用CDP查看SW1和R2的设备信息注意CDP默认已经运行不需要打开。 实验步骤 步骤1设备的基本配置 配置R1 Routerenable Router#configure terminal Router(config)#hostname R1 R1(config)#no ip domain-lookup R1(config)#line console 0 R1(config-line)#exec-timeout 0 0 R1(config-line)#logging synchronous R1(config-line)#exit R1(config)#interface ethernet0/0 R1(config-if)#ip address 192.168.1.254 255.255.255.0 R1(config-if)#no shutdown R1(config-if)#exit R1(config)#interface ethernet0/1 R1(config-if)#ip address 192.168.12.1 255.255.255.0 R1(config-if)#no shutdown R1(config-if)#end R1# 配置R2 Routerenable Router#configure terminal Router(config)#hostname R2 R2(config)#no ip domain-lookup R2(config)#line console 0 R2(config-line)#exec-timeout 0 0 R2(config-line)#logging synchronous R2(config-line)#exit R2(config)#interface ethernet0/0 R2(config-if)#ip address 192.168.12.2 255.255.255.0 R2(config-if)#no shutdown R2(config-if)#end R2# 配置SW1 Switchenable Switch#configure terminal Switch(config)#hostname SW1 SW1(config)#no ip domain-lookup SW1(config)#line console 0 SW1(config-line)#exec-timeout 0 0 SW1(config-line)#logging synchronous SW1(config-line)#exit SW1(config)#interface vlan 1 SW1(config-if)#ip address 192.168.1.1 255.255.255.0 SW1(config-if)#no shutdown SW1(config-if)#exit SW1(config)#ip default-gateway 192.168.1.254 SW1(config)#end SW1# 实验检查 步骤1检查设备的接口状态 检查R1 R1#show ip interface brief Interface                  IP-Address      OK? Method Status                Protocol Ethernet0/0                192.168.1.254   YES manual up                    up      Ethernet0/1                192.168.12.1    YES manual up                    up      Ethernet0/2                unassigned      YES unset  administratively down down    Ethernet0/3                unassigned      YES unset  administratively down down    R1使用到的接口已经配置好IP地址并且是up up状态。 检查R2 R2#show ip interface brief Interface                  IP-Address      OK? Method Status                Protocol Ethernet0/0                192.168.12.2    YES manual up                    up      Ethernet0/1                unassigned      YES TFTP  administratively down down    Ethernet0/2                unassigned      YES unset  administratively down down    Ethernet0/3                unassigned      YES unset  administratively down down    R2使用到的接口已经配置好IP地址并且是up up状态。 检查SW1 SW1#show ip interface brief Interface              IP-Address      OK? Method Status                Protocol Ethernet0/0            unassigned      YES unset  up                    up      Ethernet0/1            unassigned      YES unset  up                    up      Ethernet0/2            unassigned      YES unset  up                    up      Ethernet0/3            unassigned      YES unset  up                    up      Vlan1                 192.168.1.1     YES manual up                    up      SW1使用到的接口已经配置好IP地址并且是up up状态。 步骤2使用CDP查看物理相连的设备信息 检查R1上运行CDP的接口: R1#show cdp interface Ethernet0/0 is up, line protocol is up Encapsulation ARPA Sending CDP packets every 60 seconds   //CDP报文每60秒发送一次 Holdtime is 180 seconds   //CDP保持时间是180秒 Ethernet0/1 is up, line protocol is up Encapsulation ARPA Sending CDP packets every 60 seconds Holdtime is 180 seconds Ethernet0/2 is administratively down, line protocol is down Encapsulation ARPA Sending CDP packets every 60 seconds Holdtime is 180 seconds Ethernet0/3 is administratively down, line protocol is down Encapsulation ARPA Sending CDP packets every 60 seconds Holdtime is 180 seconds cdp enabled interfaces : 4 interfaces up          : 2 interfaces down        : 2 R1的E0/0和E0/1接口已经运行CDP。 检查R1上的CDP邻居: R1#show cdp neighbors Capability Codes: R - Router, T - Trans Bridge, B - Source Route Bridge S - Switch, H - Host, I - IGMP, r - Repeater, P - Phone, D - Remote, C - CVTA, M - Two-port Mac Relay Device ID        Local Intrfce     Holdtme    Capability  Platform  Port ID SW1             Eth 0/0           169             R S I  Linux Uni Eth 0/0 R2               Eth 0/1           163             R B   Linux Uni Eth 0/0 Total cdp entries displayed : 2 R1上能够看到SW1和R2两个CDP邻居。 检查R1上的CDP条目: R1#show cdp entry * ------------------------- Device ID: SW1   //R1的CDP邻居SW1 Entry address(es): IP address: 192.168.1.1   //SW1的IP地址 Platform: Linux Unix,  Capabilities: Router Switch IGMP Interface: Ethernet0/0,  Port ID (outgoing port): Ethernet0/0  //R1的E0/0连接到了SW1的E0/0 Holdtime : 132 sec Version : Cisco IOS Software, Linux Software (I86BI_LINUXL2-ADVENTERPRISEK9-M), Version 15.2(CML_NIGHTLY_20190423)FLO_DSGS7, EARLY DEPLOYMENT DEVELOPMENT BUILD, synced to  V152_6_0_81_E Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2019 by Cisco Systems, Inc. Compiled Tue 23-Apr-19 02:38 by mmen advertisement version: 2 VTP Management Domain: Native VLAN: 1 Duplex: full Management address(es): IP address: 192.168.1.1 ------------------------- Device ID: R2   //R1的CDP邻居R2 Entry address(es): IP address: 192.168.12.2   //R2的IP地址 Platform: Linux Unix,  Capabilities: Router Source-Route-Bridge Interface: Ethernet0/1,  Port ID (outgoing port): Ethernet0/0   //R1的E0/1连接到了R2的E0/0 Holdtime : 124 sec Version : Cisco IOS Software, Linux Software (I86BI_LINUX-ADVENTERPRISEK9-M), Version 15.7(3)M2, DEVELOPMENT TEST SOFTWARE Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2018 by Cisco Systems, Inc. Compiled Wed 28-Mar-18 11:18 by prod_rel_team advertisement version: 2 Management address(es): IP address: 192.168.12.2 R1有两个CDP邻居分别是SW1和R2。 实验04配置LLDP协议 实验目的 了解链路层发现协议LLDP的运行原理掌握链路层发现协议LLDP的配置方法 实验拓扑 实验需求 根据实验拓扑图完成设备的基本配置在R1上使用LLDP查看SW1和R2的设备信息注意LLDP默认关闭需要手工打开。 实验步骤 步骤1设备的基本配置 配置R1 Routerenable Router#configure terminal Router(config)#hostname R1 R1(config)#no ip domain-lookup R1(config)#line console 0 R1(config-line)#exec-timeout 0 0 R1(config-line)#logging synchronous R1(config-line)#exit R1(config)#interface ethernet0/0 R1(config-if)#ip address 192.168.1.254 255.255.255.0 R1(config-if)#no shutdown R1(config-if)#exit R1(config)#interface ethernet0/1 R1(config-if)#ip address 192.168.12.1 255.255.255.0 R1(config-if)#no shutdown R1(config-if)#end R1# 配置R2 Routerenable Router#configure terminal Router(config)#hostname R2 R2(config)#no ip domain-lookup R2(config)#line console 0 R2(config-line)#exec-timeout 0 0 R2(config-line)#logging synchronous R2(config-line)#exit R2(config)#interface ethernet0/0 R2(config-if)#ip address 192.168.12.2 255.255.255.0 R2(config-if)#no shutdown R2(config-if)#end R2# 配置SW1 Switchenable Switch#configure terminal Switch(config)#hostname SW1 SW1(config)#no ip domain-lookup SW1(config)#line console 0 SW1(config-line)#exec-timeout 0 0 SW1(config-line)#logging synchronous SW1(config-line)#exit SW1(config)#interface vlan 1 SW1(config-if)#ip address 192.168.1.1 255.255.255.0 SW1(config-if)#no shutdown SW1(config-if)#exit SW1(config)#ip default-gateway 192.168.1.254 SW1(config)#end SW1# 步骤2配置LLDP 配置R1 R1enable R1#configure terminal R1(config)#lldp run   //运行LLDP 配置R2 R2enable R2#configure terminal R2(config)#lldp run 配置SW1 SW1enable SW1#configure terminal SW1(config)#lldp run 实验检查 步骤1检查设备的接口状态 检查R1 R1#show ip interface brief Interface                  IP-Address      OK? Method Status                Protocol Ethernet0/0                192.168.1.254   YES manual up                    up      Ethernet0/1                192.168.12.1    YES manual up                    up      Ethernet0/2                unassigned      YES unset  administratively down down    Ethernet0/3                unassigned      YES unset  administratively down down    R1使用到的接口已经配置好IP地址并且是up up状态。 检查R2 R2#show ip interface brief Interface                  IP-Address      OK? Method Status                Protocol Ethernet0/0                192.168.12.2    YES manual up                    up      Ethernet0/1                unassigned      YES TFTP  administratively down down    Ethernet0/2                unassigned      YES unset  administratively down down    Ethernet0/3                unassigned      YES unset  administratively down down    R2使用到的接口已经配置好IP地址并且是up up状态。 检查SW1 SW1#show ip interface brief Interface              IP-Address      OK? Method Status                Protocol Ethernet0/0            unassigned      YES unset  up                    up      Ethernet0/1            unassigned      YES unset  up                    up      Ethernet0/2            unassigned      YES unset  up                    up      Ethernet0/3            unassigned      YES unset  up                    up      Vlan1                 192.168.1.1     YES manual up                    up      SW1使用到的接口已经配置好IP地址并且是up up状态。 步骤2使用LLDP查看物理相连的设备信息 检查R1上运行LLDP的接口: R1#show lldp interface Ethernet0/0: Tx: enabled Rx: enabled Tx state: IDLE Rx state: WAIT FOR FRAME Ethernet0/1: Tx: enabled Rx: enabled Tx state: IDLE Rx state: WAIT FOR FRAME Ethernet0/2: Tx: enabled Rx: enabled Tx state: INIT Rx state: WAIT PORT OPER Ethernet0/3: Tx: enabled Rx: enabled Tx state: INIT --More-- R1的E0/0和E0/1接口已经运行LLDP。 检查R1上的LLDP邻居: R1#show lldp neighbors Capability codes: (R) Router, (B) Bridge, (T) Telephone, (C) DOCSIS Cable Device (W) WLAN Access Point, (P) Repeater, (S) Station, (O) Other Device ID           Local Intf     Hold-time  Capability      Port ID SW1                 Et0/0          120        R               Et0/0 R2                   Et0/1          120        R               Et0/0 Total entries displayed: 2 R1上能够看到SW1和R2两个LLDP邻居。 检查R1上的LLDP条目: R1#show lldp entry * Capability codes: (R) Router, (B) Bridge, (T) Telephone, (C) DOCSIS Cable Device (W) WLAN Access Point, (P) Repeater, (S) Station, (O) Other ------------------------------------------------ Local Intf: Et0/0   //R1本端的接口 Chassis id: aabb.cc00.3000 Port id: Et0/0   //对端的接口 Port Description: Ethernet0/0 System Name: SW1   //对端设备的主机名 System Description: Cisco IOS Software, Linux Software (I86BI_LINUXL2-ADVENTERPRISEK9-M), Version 15.2(CML_NIGHTLY_20190423)FLO_DSGS7, EARLY DEPLOYMENT DEVELOPMENT BUILD, synced to  V152_6_0_81_E Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2019 by Time remaining: 103 seconds System Capabilities: B,R Enabled Capabilities: R Management Addresses: IP: 192.168.1.1   //SW1的IP地址 Auto Negotiation - not supported Physical media capabilities - not advertised Media Attachment Unit type - not advertised Vlan ID: - not advertised ------------------------------------------------ Local Intf: Et0/1 Chassis id: aabb.cc00.2000 Port id: Et0/0 Port Description: Ethernet0/0 System Name: R2 System Description: Cisco IOS Software, Linux Software (I86BI_LINUX-ADVENTERPRISEK9-M), Version 15.7(3)M2, DEVELOPMENT TEST SOFTWARE Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2018 by Cisco Systems, Inc. Compiled Wed 28-Mar-18 11:18 by prod_rel_te Time remaining: 98 seconds System Capabilities: B,R Enabled Capabilities: R Management Addresses: IP: 192.168.12.2 Auto Negotiation - not supported Physical media capabilities - not advertised Media Attachment Unit type - not advertised Vlan ID: - not advertised Total entries displayed: 2 R1有两个CDP邻居分别是SW1和R2。 实验05管理交换机MAC地址表 实验目的 理解交换机的工作原理掌握交换机MAC地址表的管理方法 实验拓扑 实验需求 根据实验拓扑图完成设备的基本配置测试主机之间以及主机和服务器之间的网络连通性把服务器的MAC地址绑定到SW2的MAC地址表。 实验步骤 步骤1设备的基本配置 配置PC1 VPCS set pcname PC1   //设置主机名 PC1 ip 10.1.1.1/24      //设置IP地址 配置PC2 VPCS set pcname PC2 PC2 ip 10.1.1.2/24 配置PC3 VPCS set pcname PC3 PC3 ip 10.1.1.3/24 配置PC4 VPCS set pcname PC4 PC4 ip 10.1.1.4/24 配置Server VPCS set pcname Server Server ip 10.1.1.5/24 配置SW1 Switchenable Switch#configure terminal Switch(config)#hostname SW1 SW1(config)#no ip domain-lookup SW1(config)#line console 0 SW1(config-line)#exec-timeout 0 0 SW1(config-line)#logging synchronous SW1(config-line)#end SW1# 配置SW2 Switchenable Switch#configure terminal Switch(config)#hostname SW2 SW2(config)#no ip domain-lookup SW2(config)#line console 0 SW2(config-line)#exec-timeout 0 0 SW2(config-line)#logging synchronous SW2(config-line)#end SW2# 步骤2绑定服务器的MAC地址到SW2的MAC地址表 配置SW2 SW2#configure terminal SW2(config)# mac address-table static 0050.7966.6805 vlan 1 interface Ethernet0/3 实验检查 步骤1网络连通性测试 PC1 ping 10.1.1.2 84 bytes from 10.1.1.2 icmp_seq1 ttl64 time0.502 ms 84 bytes from 10.1.1.2 icmp_seq2 ttl64 time0.738 ms 84 bytes from 10.1.1.2 icmp_seq3 ttl64 time0.584 ms 84 bytes from 10.1.1.2 icmp_seq4 ttl64 time0.646 ms 84 bytes from 10.1.1.2 icmp_seq5 ttl64 time0.730 ms PC1与PC2的连通性正常。 PC1 ping 10.1.1.3 84 bytes from 10.1.1.3 icmp_seq1 ttl64 time0.968 ms 84 bytes from 10.1.1.3 icmp_seq2 ttl64 time0.816 ms 84 bytes from 10.1.1.3 icmp_seq3 ttl64 time1.265 ms 84 bytes from 10.1.1.3 icmp_seq4 ttl64 time1.122 ms 84 bytes from 10.1.1.3 icmp_seq5 ttl64 time1.242 ms PC1与PC3的连通性正常。 PC1 ping 10.1.1.4 84 bytes from 10.1.1.4 icmp_seq1 ttl64 time0.900 ms 84 bytes from 10.1.1.4 icmp_seq2 ttl64 time1.303 ms 84 bytes from 10.1.1.4 icmp_seq3 ttl64 time0.880 ms 84 bytes from 10.1.1.4 icmp_seq4 ttl64 time1.086 ms 84 bytes from 10.1.1.4 icmp_seq5 ttl64 time1.259 ms PC1与PC4的连通性正常。 PC1 ping 10.1.1.5 84 bytes from 10.1.1.5 icmp_seq1 ttl64 time0.875 ms 84 bytes from 10.1.1.5 icmp_seq2 ttl64 time1.248 ms 84 bytes from 10.1.1.5 icmp_seq3 ttl64 time1.145 ms 84 bytes from 10.1.1.5 icmp_seq4 ttl64 time0.942 ms 84 bytes from 10.1.1.5 icmp_seq5 ttl64 time1.317 ms PC1与Server的连通性正常。 步骤2管理交换机的MAC地址表 查看SW1的MAC地址表 SW1#show mac address-table Mac Address Table ------------------------------------------- Vlan    Mac Address       Type          Ports ----     -----------          --------         ----- 1    0050.7966.6801    DYNAMIC     Et0/1 1    0050.7966.6802    DYNAMIC     Et0/2 1    0050.7966.6803    DYNAMIC     Et0/0 1    0050.7966.6804    DYNAMIC     Et0/0 1    0050.7966.6805    DYNAMIC     Et0/0 1    aabb.cc00.7000    DYNAMIC     Et0/0 Total Mac Addresses for this criterion: 6 SW1已经学习到PC1、PC2、PC3、PC4以及Server的MAC地址学习方式是Dynamic。 清除SW1动态学习到的MAC地址条目 SW1#clear mac address-table dynamic SW1#show mac address-table          Mac Address Table ------------------------------------------- Vlan    Mac Address       Type        Ports ----     -----------          --------       ----- 1    aabb.cc00.7000    DYNAMIC   Et0/0 Total Mac Addresses for this criterion: 1 Clear mac address-table dynamic命令能够清除通过Dynamic方式学习到的MAC地址条目。 查看SW2的MAC地址表 SW2#show mac address-table Mac Address Table ------------------------------------------- Vlan    Mac Address       Type          Ports ----     -----------          --------         ----- 1    0050.7966.6801    DYNAMIC     Et0/0 1    0050.7966.6803    DYNAMIC     Et0/1 1    0050.7966.6804    DYNAMIC     Et0/2 1    0050.7966.6805    STATIC       Et0/3 1    aabb.cc00.6000    DYNAMIC     Et0/0 Total Mac Addresses for this criterion: 5 Server的MAC地址是静态绑定的所以类型是STATIC。 清除SW2动态学习到的MAC地址条目 SW2#clear mac address-table dynamic SW2#show mac address-table          Mac Address Table ------------------------------------------- Vlan    Mac Address       Type        Ports ----     -----------          --------       ----- 1    0050.7966.6805    STATIC      Et0/3 1    aabb.cc00.6000    DYNAMIC    Et0/0 Total Mac Addresses for this criterion: 2 Clear mac address-table dynamic命令无法清除静态绑定的MAC地址条目。 实验06配置VLAN 实验目的 理解VLAN的运行原理掌握VLAN的配置方法 实验拓扑 实验需求 根据实验拓扑图完成设备的基本配置分别在SW1和SW2上创建VLAN 10名字为IT分别在SW1和SW2上把接口E0/0、E0/1和E0/2划入VLAN10测试PC之间的网络连通性。 实验步骤 步骤1设备的基本配置 配置PC1 VPCS set pcname PC1   //设置主机名 PC1 ip 10.1.1.1/24      //设置IP地址 配置PC2 VPCS set pcname PC2 PC2 ip 10.1.1.2/24 配置PC3 VPCS set pcname PC3 PC3 ip 10.1.1.3/24 配置PC4 VPCS set pcname PC4 PC4 ip 10.1.1.4/24 配置SW1 Switchenable Switch#configure terminal Switch(config)#hostname SW1 SW1(config)#no ip domain-lookup SW1(config)#line console 0 SW1(config-line)#exec-timeout 0 0 SW1(config-line)#logging synchronous SW1(config-line)#end SW1# 配置SW2 Switchenable Switch#configure terminal Switch(config)#hostname SW2 SW2(config)#no ip domain-lookup SW2(config)#line console 0 SW2(config-line)#exec-timeout 0 0 SW2(config-line)#logging synchronous SW2(config-line)#end SW2# 步骤2VLAN的配置 配置SW1 SW1(config)#vlan 10 SW1(config-vlan)#name IT SW1(config-vlan)#exit SW1(config)#interface Eth0/0 SW1(config-if)#switchport mode access SW1(config-if)#switchport access vlan 10 SW1(config-if)#exit SW1(config)#interface Eth0/1         SW1(config-if)#switchport mode access   SW1(config-if)#switchport access vlan 10 SW1(config-if)#exit                     SW1(config)#interface Eth0/2         SW1(config-if)#switchport mode access   SW1(config-if)#switchport access vlan 10 SW1(config-if)#end SW1# 配置SW2 SW2(config)#vlan 10 SW2(config-vlan)#name IT SW2(config-vlan)#exit SW2(config)#interface range Eth0/0 - 2   //同时将多个端口划入VLAN 10 SW2(config-if-range)#switchport mode access    SW2(config-if-range)#switchport access vlan 10 SW2(config-if-range)#end SW2# 实验检查 步骤1检查SW1的VLAN信息 SW1#show vlan brief VLAN Name                             Status    Ports ---- -------------------------------- --------- ------------------------------- 1    default                          active    Et0/3 10   IT                              active    Et0/0, Et0/1, Et0/2 1002 fddi-default                     act/unsup 1003 token-ring-default               act/unsup 1004 fddinet-default                  act/unsup 1005 trnet-default                    act/unsup VLAN10有三个接口分别是Et0/0、Et0/1、Et0/2。 步骤2检查SW1的接口配置 SW1#sh run int Eth0/0 Building configuration... Current configuration : 80 bytes ! interface Ethernet0/0 switchport access vlan 10 switchport mode access end SW1#sh run int Eth0/1 Building configuration... Current configuration : 80 bytes ! interface Ethernet0/1 switchport access vlan 10 switchport mode access end SW1#sh run int Eth0/2 Building configuration... Current configuration : 80 bytes ! interface Ethernet0/2 switchport access vlan 10 switchport mode access end 步骤3测试网络的连通性 PC1 ping 10.1.1.2 84 bytes from 10.1.1.2 icmp_seq1 ttl64 time0.835 ms 84 bytes from 10.1.1.2 icmp_seq2 ttl64 time0.765 ms 84 bytes from 10.1.1.2 icmp_seq3 ttl64 time0.866 ms 84 bytes from 10.1.1.2 icmp_seq4 ttl64 time0.824 ms 84 bytes from 10.1.1.2 icmp_seq5 ttl64 time0.828 ms PC1与PC2的连通性正常。 PC1 ping 10.1.1.3 84 bytes from 10.1.1.3 icmp_seq1 ttl64 time1.105 ms 84 bytes from 10.1.1.3 icmp_seq2 ttl64 time1.337 ms 84 bytes from 10.1.1.3 icmp_seq3 ttl64 time1.235 ms 84 bytes from 10.1.1.3 icmp_seq4 ttl64 time1.291 ms 84 bytes from 10.1.1.3 icmp_seq5 ttl64 time1.059 ms PC1与PC3的连通性正常。 PC1 ping 10.1.1.4 84 bytes from 10.1.1.4 icmp_seq1 ttl64 time0.826 ms 84 bytes from 10.1.1.4 icmp_seq2 ttl64 time0.957 ms 84 bytes from 10.1.1.4 icmp_seq3 ttl64 time1.194 ms 84 bytes from 10.1.1.4 icmp_seq4 ttl64 time1.214 ms 84 bytes from 10.1.1.4 icmp_seq5 ttl64 time1.184 ms PC1与PC4的连通性正常。 实验07配置Trunk 实验目的 理解Trunk的运行原理掌握Trunk的配置方法 实验拓扑 实验需求 根据实验拓扑图完成设备的基本配置分别在SW1和SW2创建VLAN10和VLAN20名字为IT和HR分别在SW1和SW2上把相应的接口划入VLAN10和VLAN20把SW1和SW2互连的链路配置成Trunk采用Dot1q封装测试PC之间的网络连通性。 实验步骤 步骤1设备的基本配置 配置PC1 VPCS set pcname PC1   //设置主机名 PC1 ip 10.1.1.1/24      //设置IP地址 配置PC2 VPCS set pcname PC2 PC2 ip 10.1.2.1/24 配置PC3 VPCS set pcname PC3 PC3 ip 10.1.1.2/24 配置PC4 VPCS set pcname PC4 PC4 ip 10.1.2.2/24 配置SW1 Switchenable Switch#configure terminal Switch(config)#hostname SW1 SW1(config)#no ip domain-lookup SW1(config)#line console 0 SW1(config-line)#exec-timeout 0 0 SW1(config-line)#logging synchronous SW1(config-line)#end SW1# 配置SW2 Switchenable Switch#configure terminal Switch(config)#hostname SW2 SW2(config)#no ip domain-lookup SW2(config)#line console 0 SW2(config-line)#exec-timeout 0 0 SW2(config-line)#logging synchronous SW2(config-line)#end SW2# 步骤2VLAN的配置 配置SW1 SW1(config)#vlan 10 SW1(config-vlan)#name IT SW1(config-vlan)#exit SW1(config)#vlan 20 SW1(config-vlan)#name HR SW1(config-vlan)#exit SW1(config)#interface Eth0/1 SW1(config-if)#switchport mode access SW1(config-if)#switchport access vlan 10 SW1(config-if)#exit SW1(config)#interface Eth0/2 SW1(config-if)#switchport mode access   SW1(config-if)#switchport access vlan 20 SW1(config-if)#end SW1# 配置SW2 SW2(config)#vlan 10 SW2(config-vlan)#name IT SW2(config-vlan)#exit SW2(config)#vlan 20 SW2(config-vlan)#name HR SW2(config-vlan)#exit SW2(config)#interface Eth0/1 SW2(config-if)#switchport mode access SW2(config-if)#switchport access vlan 10 SW2(config-if)#exit SW2(config)#interface Eth0/2 SW2(config-if)#switchport mode access   SW2(config-if)#switchport access vlan 20 SW2(config-if)#end SW2# 步骤3Trunk的配置 配置SW1 SW1(config)#interface Eth0/0 SW1(config-if)#switchport trunk encapsulation dot1q SW1(config-if)#switchport mode trunk SW1(config-if)#end SW1# 配置SW2 SW2(config)#interface Eth0/0 SW2(config-if)#switchport trunk encapsulation dot1q SW2(config-if)#switchport mode trunk SW2(config-if)#end SW2# 实验检查 步骤1检查VLAN 检查SW1 SW1#show vlan brief VLAN Name                             Status    Ports ---- -------------------------------- --------- ------------------------------- 1    default                             active     Et0/3 10   IT                                 active     Et0/1 20   HR                                active     Et0/2 1002 fddi-default                     act/unsup 1003 token-ring-default               act/unsup 1004 fddinet-default                  act/unsup 1005 trnet-default                    act/unsup SW1已经创建好VLAN10和VLAN20并已将对应接口划入。 检查SW2 SW2#show vlan brief VLAN Name                             Status    Ports ---- -------------------------------- --------- ------------------------------- 1    default                             active    Et0/3 10   IT                                 active    Et0/1 20   HR                                active    Et0/2 1002 fddi-default                     act/unsup 1003 token-ring-default               act/unsup 1004 fddinet-default                  act/unsup 1005 trnet-default                    act/unsup SW2已经创建好VLAN10和VLAN20并已将对应接口划入。 步骤2检查Trunk 检查SW1 SW1#show interfaces Eth0/0 switchport Name: Et0/0 Switchport: Enabled Administrative Mode: trunk Operational Mode: trunk Administrative Trunking Encapsulation: dot1q Operational Trunking Encapsulation: dot1q Negotiation of Trunking: On Access Mode VLAN: 1 (default) Trunking Native Mode VLAN: 1 (default) Administrative Native VLAN tagging: enabled Voice VLAN: none Administrative private-vlan host-association: none Administrative private-vlan mapping: none Administrative private-vlan trunk native VLAN: none Administrative private-vlan trunk Native VLAN tagging: enabled Administrative private-vlan trunk encapsulation: dot1q Administrative private-vlan trunk normal VLANs: none Administrative private-vlan trunk associations: none Administrative private-vlan trunk mappings: none Operational private-vlan: none Trunking VLANs Enabled: ALL Pruning VLANs Enabled: 2-1001 Capture Mode Disabled Capture VLANs Allowed: ALL Protected: false Appliance trust: none E0/0接口当前是Trunk封装的协议是dot1q。 SW1#show interfaces trunk Port        Mode            Encapsulation   Status        Native vlan Et0/0       on               802.1q         trunking      1 Port        Vlans allowed on trunk Et0/0       1-4094 Port        Vlans allowed and active in management domain Et0/0       1,10,20 Port        Vlans in spanning tree forwarding state and not pruned Et0/0       1,10,20 E0/0封装的Trunk协议是dot1q当前的状态是trunking。 SW1#sh run int Eth0/0 Building configuration... Current configuration : 90 bytes ! interface Ethernet0/0 switchport trunk encapsulation dot1q switchport mode trunk end E0/0接口的Trunk封装协议是dot1q模式是trunk。 检查SW2 SW2#show interfaces trunk Port        Mode             Encapsulation  Status        Native vlan Et0/0       on                802.1q        trunking      1 Port        Vlans allowed on trunk Et0/0       1-4094 Port        Vlans allowed and active in management domain Et0/0       1,10,20 Port        Vlans in spanning tree forwarding state and not pruned Et0/0       1,10,20 E0/0封装的Trunk协议是dot1q当前的状态是trunking。 步骤4网络连通性测试 测试PC1和PC3的连通性 PC1 ping 10.1.1.2 84 bytes from 10.1.1.2 icmp_seq1 ttl64 time1.603 ms 84 bytes from 10.1.1.2 icmp_seq2 ttl64 time1.234 ms 84 bytes from 10.1.1.2 icmp_seq3 ttl64 time1.027 ms 84 bytes from 10.1.1.2 icmp_seq4 ttl64 time2.372 ms 84 bytes from 10.1.1.2 icmp_seq5 ttl64 time1.200 ms PC1和PC3的网络连通性正常。 测试PC2和PC4的连通性 PC2 ping 10.1.2.2 84 bytes from 10.1.2.2 icmp_seq1 ttl64 time0.887 ms 84 bytes from 10.1.2.2 icmp_seq2 ttl64 time0.932 ms 84 bytes from 10.1.2.2 icmp_seq3 ttl64 time1.295 ms 84 bytes from 10.1.2.2 icmp_seq4 ttl64 time0.926 ms 84 bytes from 10.1.2.2 icmp_seq5 ttl64 time1.011 ms PC2和PC4的网络连通性正常。 实验08配置VTP 实验目的 了解VTP的运行原理掌握VTP的配置方法 实验拓扑 实验需求 根据实验拓扑图完成设备的基本配置把交换机互连的链路配置成Trunk采用Dot1q封装SW1是VTP服务器SW2和SW3是VTP客户端VTP域名为xmwsVTP密码为wisdom开启VTP裁剪在SW1上创建VLAN10和VLAN20名字为IT和HR分别在SW1、SW2和SW3上把相应的接口划入VLAN10和VLAN20 实验步骤 步骤1设备的基本配置 配置PC1 VPCS set pcname PC1   //设置主机名 PC1 ip 10.1.1.1/24      //设置IP地址 配置PC2 VPCS set pcname PC2 PC2 ip 10.1.2.1/24 配置PC3 VPCS set pcname PC3 PC3 ip 10.1.1.2/24 配置PC4 VPCS set pcname PC4 PC4 ip 10.1.2.2/24 配置PC5 VPCS set pcname PC5 PC5 ip 10.1.1.3/24 配置PC6 VPCS set pcname PC6 PC6 ip 10.1.2.3/24 配置SW1 Switchenable Switch#configure terminal Switch(config)#hostname SW1 SW1(config)#no ip domain-lookup SW1(config)#line console 0 SW1(config-line)#exec-timeout 0 0 SW1(config-line)#logging synchronous SW1(config-line)#end SW1# 配置SW2 Switchenable Switch#configure terminal Switch(config)#hostname SW2 SW2(config)#no ip domain-lookup SW2(config)#line console 0 SW2(config-line)#exec-timeout 0 0 SW2(config-line)#logging synchronous SW2(config-line)#end SW2# 配置SW3 Switchenable Switch#configure terminal Switch(config)#hostname SW3 SW3(config)#no ip domain-lookup SW3(config)#line console 0 SW3(config-line)#exec-timeout 0 0 SW3(config-line)#logging synchronous SW3(config-line)#end SW3# 步骤2配置Trunk 配置SW1 SW1(config)#interface Eth0/0 SW1(config-if)#switchport trunk encapsulation dot1q SW1(config-if)#switchport mode trunk SW1(config-if)#end SW1# 配置SW2 SW2(config)#interface range Eth0/0 , Eth0/3 SW2(config-if-range)#switchport trunk encapsulation dot1q SW2(config-if-range)#switchport mode trunk SW2(config-if-range)#end SW2# 配置SW3 SW3(config)#interface Eth0/0 SW3(config-if)#switchport trunk encapsulation dot1q SW3(config-if)#switchport mode trunk SW3(config-if)#end SW3# 步骤3配置VTP 配置SW1 SW1(config)#vtp mode server SW1(config)#vtp domain xmws SW1(config)#vtp password wisdom SW1(config)#vtp pruning 配置SW2 SW2(config)#vtp mode client SW2(config)#vtp domain xmws SW2(config)#vtp password wisdom 配置SW3 SW3(config)#vtp mode client SW3(config)#vtp domain xmws SW3(config)#vtp password wisdom 步骤4配置VLAN 配置SW1 SW1(config)#vlan 10 SW1(config-vlan)#name IT SW1(config-vlan)#exit SW1(config)#vlan 20 SW1(config-vlan)#name HR SW1(config-vlan)#exit SW1(config)#interface Eth0/1 SW1(config-if)#switchport mode access SW1(config-if)#switchport access vlan 10 SW1(config-if)#exit SW1(config)#interface Eth0/2 SW1(config-if)#switchport mode access   SW1(config-if)#switchport access vlan 20 SW1(config-if)#end SW1# 配置SW2 SW2(config)#interface Eth0/1 SW2(config-if)#switchport mode access SW2(config-if)#switchport access vlan 10 SW2(config-if)#exit SW2(config)#interface Eth0/2 SW2(config-if)#switchport mode access   SW2(config-if)#switchport access vlan 20 SW2(config-if)#end SW2# 配置SW3 SW3(config)#interface Eth0/1 SW3(config-if)#switchport mode access SW3(config-if)#switchport access vlan 10 SW3(config-if)#exit SW3(config)#interface Eth0/2 SW3(config-if)#switchport mode access   SW3(config-if)#switchport access vlan 20 SW3(config-if)#end SW3# 实验检查 步骤1检查VTP 检查SW1 SW1#show vtp status VTP Version capable             : 1 to 3 VTP version running             : 1 VTP Domain Name                 : xmws VTP Pruning Mode                : Enabled VTP Traps Generation            : Disabled Device ID                       : aabb.cc80.7000 Configuration last modified by 0.0.0.0 at 4-23-20 17:18:33 Local updater ID is 0.0.0.0 (no valid interface found) Feature VLAN: -------------- VTP Operating Mode                : Server Maximum VLANs supported locally   : 1005 Number of existing VLANs          : 7 Configuration Revision            : 3 MD5 digest                        : 0x85 0x2D 0x06 0xA3 0x42 0x1B 0x93 0xEE 0x90 0x66 0x1F 0x3C 0xA9 0x52 0xD5 0x38 SW1是VTP服务器域名是xmws裁剪已经启用。 SW1#show vtp password VTP Password: wisdom VTP密码是wisdom。 检查SW2 SW2#show vtp status VTP Version capable             : 1 to 3 VTP version running             : 1 VTP Domain Name                 : xmws VTP Pruning Mode                : Enabled VTP Traps Generation            : Disabled Device ID                       : aabb.cc80.8000 Configuration last modified by 0.0.0.0 at 4-23-20 17:18:33 Feature VLAN: -------------- VTP Operating Mode                : Client Maximum VLANs supported locally   : 1005 Number of existing VLANs          : 7 Configuration Revision            : 3 MD5 digest                        : 0x85 0x2D 0x06 0xA3 0x42 0x1B 0x93 0xEE 0x90 0x66 0x1F 0x3C 0xA9 0x52 0xD5 0x38 SW2是VTP客户端域名是xmws裁剪已经启用。 SW2#show vtp password VTP Password: wisdom VTP密码是wisdom。 步骤2检查VLAN信息 检查SW1 SW1#show vlan brief VLAN Name                           Status    Ports ---- -------------------------------- --------- ------------------------------- 1    default                           active    Et0/3 10   IT                               active    Et0/1 20   HR                              active    Et0/2 1002 fddi-default                     act/unsup 1003 token-ring-default               act/unsup 1004 fddinet-default                  act/unsup 1005 trnet-default                    act/unsup SW1作为VTP服务器已经创建好VLAN10和VLAN20。 检查SW2 SW2#show vlan brief VLAN Name                          Status    Ports ---- -------------------------------- --------- ------------------------------- 1    default                          active    10   IT                              active    Et0/1 20   HR                             active    Et0/2 1002 fddi-default                     act/unsup 1003 token-ring-default               act/unsup 1004 fddinet-default                  act/unsup 1005 trnet-default                    act/unsup SW2作为VTP客户端已经同步VTP服务器的VLAN信息。 检查SW3 SW3#show vlan brief VLAN Name                          Status    Ports ---- -------------------------------- --------- ------------------------------- 1    default                          active    Et0/3 10   IT                              active    Et0/1 20   HR                             active    Et0/2 1002 fddi-default                     act/unsup 1003 token-ring-default               act/unsup 1004 fddinet-default                  act/unsup 1005 trnet-default                    act/unsup SW3作为VTP客户端已经同步VTP服务器的VLAN信息。 实验09配置生成树 实验目的 理解生成树的运行原理掌握生成树的配置方法 实验拓扑 实验需求 根据实验拓扑图完成设备的基本配置把交换机互连的链路配置成Trunk采用Dot1q封装分别在SW1、SW2和SW3上创建VLAN10和VLAN20并将相应的接口划到对应的VLANSW1要作为VLAN10的根VLAN20的备份根使PC1访问Server1的路径通过PC1-SW3-SW1-Server1SW2要作为VLAN20的根VLAN10的备份根使PC2访问Server2的路径通过PC2-SW3-SW2-Server2 实验步骤 步骤1设备的基本配置 配置PC1 VPCS set pcname PC1   //设置主机名 PC1 ip 192.168.1.1/24      //设置IP地址 配置PC2 VPCS set pcname PC2 PC2 ip 172.16.1.1/24 配置Server1 VPCS set pcname Server1 Server1 ip 192.168.1.88/24 配置Server2 VPCS set pcname Server2 Server2 ip 172.16.1.88/24 配置SW1 Switchenable Switch#configure terminal Switch(config)#hostname SW1 SW1(config)#no ip domain-lookup SW1(config)#line console 0 SW1(config-line)#exec-timeout 0 0 SW1(config-line)#logging synchronous SW1(config-line)#end SW1# 配置SW2 Switchenable Switch#configure terminal Switch(config)#hostname SW2 SW2(config)#no ip domain-lookup SW2(config)#line console 0 SW2(config-line)#exec-timeout 0 0 SW2(config-line)#logging synchronous SW2(config-line)#end SW2# 配置SW3 Switchenable Switch#configure terminal Switch(config)#hostname SW3 SW3(config)#no ip domain-lookup SW3(config)#line console 0 SW3(config-line)#exec-timeout 0 0 SW3(config-line)#logging synchronous SW3(config-line)#end SW3# 步骤2配置Trunk与VLAN 配置SW1 SW1(config)#interface range Eth0/0 - 1 SW1(config-if-range)#switchport trunk encapsulation dot1q SW1(config-if-range)#switchport mode trunk SW1(config-if-range)#exit SW1(config)#vlan 10 SW1(config-vlan)#name IT SW1(config-vlan)#exit SW1(config)#vlan 20 SW1(config-vlan)#name HR SW1(config-vlan)#exit SW1(config)#interface Eth0/2 SW1(config-if)#switchport mode access SW1(config-if)#switchport access vlan 10 SW1(config-if)#exit SW1(config)#end SW1# 配置SW2 SW2(config)#interface range Eth0/1 , Eth0/3 SW2(config-if-range)#switchport trunk encapsulation dot1q SW2(config-if-range)#switchport mode trunk SW2(config-if-range)#exit SW2(config)#vlan 10 SW2(config-vlan)#name IT SW2(config-vlan)#exit SW2(config)#vlan 20 SW2(config-vlan)#name HR SW2(config-vlan)#exit SW2(config)#interface Eth0/2 SW2(config-if)#switchport mode access SW2(config-if)#switchport access vlan 20 SW2(config-if)#exit SW2(config)#end SW2# 配置SW3 SW3(config)#interface range Eth0/0 , Eth0/3 SW3(config-if-range)#switchport trunk encapsulation dot1q SW3(config-if-range)#switchport mode trunk SW3(config-if-range)#exit SW3(config)#vlan 10 SW3(config-vlan)#name IT SW3(config-vlan)#exit SW3(config)#vlan 20 SW3(config-vlan)#name HR SW3(config-vlan)#exit SW3(config)#interface Eth0/1 SW3(config-if)#switchport mode access SW3(config-if)#switchport access vlan 10 SW3(config-if)#exit SW3(config)#interface Eth0/2 SW3(config-if)#switchport mode access SW3(config-if)#switchport access vlan 20 SW2(config-if)#exit SW3(config)#end SW3# 步骤3配置生成树 配置SW1 SW1(config)#spanning-tree vlan 10 root primary SW1(config)#spanning-tree vlan 20 root secondary 配置SW2 SW2(config)#spanning-tree vlan 20 root primary SW2(config)#spanning-tree vlan 10 root secondary 实验检查 步骤1检查VLAN10的生成树 检查SW1 SW1#show spanning-tree vlan 10 VLAN0010 Spanning tree enabled protocol ieee Root ID    Priority    24586 Address     aabb.cc00.1000 This bridge is the root Hello Time   2 sec  Max Age 20 sec  Forward Delay 15 sec Bridge ID  Priority    24586  (priority 24576 sys-id-ext 10) Address     aabb.cc00.1000 Hello Time   2 sec  Max Age 20 sec  Forward Delay 15 sec Aging Time  15  sec Interface           Role Sts Cost      Prio.Nbr Type ------------------- ---- --- --------- -------- -------------------------------- Et0/0               Desg FWD 100       128.1    P2p Et0/1               Desg FWD 100       128.2    P2p Et0/2               Desg FWD 100       128.3    P2p SW1是VLAN10的根网桥因为SW2是VLAN10的备份根网桥所以SW3的E0/3针对VLAN10肯定是阻塞状态。 检查SW3 SW3#show spanning-tree vlan 10 VLAN0010 Spanning tree enabled protocol ieee Root ID    Priority    24586 Address     aabb.cc00.1000 Cost        100 Port        1 (Ethernet0/0) Hello Time   2 sec  Max Age 20 sec  Forward Delay 15 sec Bridge ID  Priority    32778  (priority 32768 sys-id-ext 10) Address     aabb.cc00.3000 Hello Time   2 sec  Max Age 20 sec  Forward Delay 15 sec Aging Time  300 sec Interface           Role Sts Cost      Prio.Nbr Type ------------------- ---- --- --------- -------- -------------------------------- Et0/0               Root FWD 100       128.1    P2p Et0/1               Desg FWD 100       128.2    P2p Et0/3               Altn BLK 100       128.4    P2p 针对VLAN10SW3的E0/3是阻塞的E0/0是转发的这样PC1访问Server1的路径就是PC1-SW3-SW1-Server1。 步骤2检查VLAN20的生成树 检查SW2 SW2#show spanning-tree vlan 20 VLAN0020 Spanning tree enabled protocol ieee Root ID    Priority    24596 Address     aabb.cc00.2000 This bridge is the root Hello Time   2 sec  Max Age 20 sec  Forward Delay 15 sec Bridge ID  Priority    24596  (priority 24576 sys-id-ext 20) Address     aabb.cc00.2000 Hello Time   2 sec  Max Age 20 sec  Forward Delay 15 sec Aging Time  300 sec Interface           Role Sts Cost      Prio.Nbr Type ------------------- ---- --- --------- -------- -------------------------------- Et0/1               Desg FWD 100       128.2    P2p Et0/2               Desg FWD 100       128.3    P2p Et0/3               Desg FWD 100       128.4    P2p SW2是VLAN20的根网桥因为SW1是VLAN10的备份根网桥所以SW3的E0/0针对VLAN20肯定是阻塞状态。 检查SW3 SW3#show spanning-tree vlan 20 VLAN0020 Spanning tree enabled protocol ieee Root ID    Priority    24596 Address     aabb.cc00.2000 Cost        100 Port        4 (Ethernet0/3) Hello Time   2 sec  Max Age 20 sec  Forward Delay 15 sec Bridge ID  Priority    32788  (priority 32768 sys-id-ext 20) Address     aabb.cc00.3000 Hello Time   2 sec  Max Age 20 sec  Forward Delay 15 sec Aging Time  300 sec Interface           Role Sts Cost      Prio.Nbr Type ------------------- ---- --- --------- -------- -------------------------------- Et0/0               Altn BLK 100       128.1    P2p Et0/2               Desg FWD 100       128.3    P2p Et0/3               Root FWD 100       128.4    P2p 针对VLAN20SW3的E0/0是阻塞的E0/3是转发的这样PC2访问Server2的路径就是PC2-SW3-SW2-Server2。 实验10配置VLAN间路由_01 实验目的 理解VLAN间路由的原理掌握VLAN间路由的配置 实验拓扑 实验需求 根据实验拓扑图完成设备的基本配置配置单臂路由实现VLAN10和VLAN20之间的互访。 实验步骤 步骤1设备的基本配置 配置PC1 VPCS set pcname PC1   //设置主机名 PC1 ip 192.168.1.1/24 192.168.1.254    //设置IP地址与网关 配置PC2 VPCS set pcname PC2 PC2 ip 172.16.1.1/24 172.16.1.254 配置R1 Routerenable Router#configure terminal Router(config)#hostname R1 R1(config)#no ip domain-lookup R1(config)#line console 0 R1(config-line)#exec-timeout 0 0 R1(config-line)#logging synchronous R1(config-line)#end R1# 配置SW1 Switchenable Switch#configure terminal Switch(config)#hostname SW1 SW1(config)#no ip domain-lookup SW1(config)#line console 0 SW1(config-line)#exec-timeout 0 0 SW1(config-line)#logging synchronous SW1(config-line)#end SW1# 步骤2单臂路由的配置 配置R1 R1(config)#interface Ethernet0/0 R1(config-if)#no shutdown R1(config-if)#exit R1(config)#interface Ethernet0/0.10 R1(config-if)#encapsulation dot1Q 10 R1(config-if)#ip address 192.168.1.254 255.255.255.0 R1(config-if)#exit R1(config)#interface Ethernet0/0.20 R1(config-if)#encapsulation dot1Q 20 R1(config-if)#ip address 172.16.1.254 255.255.255.0 R1(config-if)#end R1# 配置SW1 SW1(config)#vlan 10 SW1(config-vlan)#name IT SW1(config-vlan)#exit SW1(config)#vlan 20 SW1(config-vlan)#name HR SW1(config-vlan)#exit SW1(config)#interface Ethernet0/0 SW1(config-if)#switchport trunk encapsulation dot1q SW1(config-if)#switchport mode trunk SW1(config)#interface Ethernet0/1 SW1(config-if)#switchport mode access SW1(config-if)#switchport access vlan 10 SW1(config)#interface Ethernet0/2 SW1(config-if)#switchport mode access SW1(config-if)#switchport access vlan 20 实验检查 步骤1检查R1 检查R1的接口状态 R1#show ip interface brief Interface                  IP-Address      OK? Method Status                Protocol Ethernet0/0                unassigned      YES unset  up                    up      Ethernet0/0.10             192.168.1.254   YES manual up                    up      Ethernet0/0.20             172.16.1.254    YES manual up                    up      Ethernet0/1                unassigned      YES unset  administratively down down    Ethernet0/2                unassigned      YES unset  administratively down down    Ethernet0/3                unassigned      YES unset  administratively down down   检查R1的子接口信息 R1#show vlans Virtual LAN ID:  1 (IEEE 802.1Q Encapsulation) vLAN Trunk Interface:   Ethernet0/0 This is configured as native Vlan for the following interface(s) : Ethernet0/0 Protocols Configured:   Address:              Received:        Transmitted: Ethernet0/0 (1) Other                                           0                  20 0 packets, 0 bytes input 20 packets, 1440 bytes output Virtual LAN ID:  10 (IEEE 802.1Q Encapsulation) vLAN Trunk Interface:   Ethernet0/0.10 Protocols Configured:   Address:              Received:        Transmitted: Ethernet0/0.10 (10) IP              192.168.1.254               14                   9 Other                                           0                   3 72 packets, 5232 bytes input 12 packets, 1056 bytes output Virtual LAN ID:  20 (IEEE 802.1Q Encapsulation) vLAN Trunk Interface:   Ethernet0/0.20 Protocols Configured:   Address:              Received:        Transmitted: Ethernet0/0.20 (20) IP              172.16.1.254                14                   9 Other                                           0                   3 72 packets, 5232 bytes input 12 packets, 1056 bytes output 子接口E0/0.10的VLAN ID是10IP地址是192.168.1.254 子接口E0/0.20的VLAN ID是20IP地址是172.16.1.254。 步骤2检查SW1 检查SW1的VLAN信息 SW1#show vlan brief VLAN Name                             Status    Ports ---- -------------------------------- --------- ------------------------------- 1    default                             active    Et0/3 10   VLAN0010                         active    Et0/1 20   VLAN0020                         active    Et0/2 1002 fddi-default                     act/unsup 1003 token-ring-default               act/unsup 1004 fddinet-default                  act/unsup 1005 trnet-default                    act/unsup 检查SW1的Trunk状态 SW1#show interfaces trunk Port        Mode             Encapsulation  Status        Native vlan Et0/0       on               802.1q         trunking      1 Port        Vlans allowed on trunk Et0/0       1-4094 Port        Vlans allowed and active in management domain Et0/0       1,10,20 Port        Vlans in spanning tree forwarding state and not pruned Et0/0       1,10,20 步骤3测试网络连通性 PC1访问PC2 PC1 ping 172.16.1.1 84 bytes from 172.16.1.1 icmp_seq1 ttl63 time1.597 ms 84 bytes from 172.16.1.1 icmp_seq2 ttl63 time1.237 ms 84 bytes from 172.16.1.1 icmp_seq3 ttl63 time1.975 ms 84 bytes from 172.16.1.1 icmp_seq4 ttl63 time1.274 ms 84 bytes from 172.16.1.1 icmp_seq5 ttl63 time1.243 ms PC1 trace 172.16.1.1 trace to 172.16.1.1, 8 hops max, press CtrlC to stop 1   192.168.1.254   0.443 ms  0.400 ms  0.715 ms 2   *172.16.1.1   1.938 ms (ICMP type:3, code:3, Destination port unreachable) 通过Trace看到数据包先到网关R1再到PC2。 实验11配置VLAN间路由_02 实验目的 理解VLAN间路由的原理掌握VLAN间路由的配置 实验拓扑 实验需求 根据实验拓扑图完成设备的基本配置通过三层交换机的SVI实现VLAN10和VLAN20的互访。 实验步骤 步骤1设备的基本配置 配置PC1 VPCS set pcname PC1   //设置主机名 PC1 ip 192.168.1.1/24 192.168.1.254    //设置IP地址与网关 配置PC2 VPCS set pcname PC2 PC2 ip 172.16.1.1/24 172.16.1.254 配置SW1 Switchenable Switch#configure terminal Switch(config)#hostname SW1 SW1(config)#no ip domain-lookup SW1(config)#line console 0 SW1(config-line)#exec-timeout 0 0 SW1(config-line)#logging synchronous SW1(config-line)#end SW1# 步骤2VLAN间路由的配置 配置SW1 SW1(config)#vlan 10 SW1(config-vlan)#name IT SW1(config-vlan)#exit SW1(config)#vlan 20 SW1(config-vlan)#name HR SW1(config-vlan)#exit SW1(config)#interface Ethernet0/1 SW1(config-if)#switchport mode access SW1(config-if)#switchport access vlan 10 SW1(config)#interface Ethernet0/2 SW1(config-if)#switchport mode access SW1(config-if)#switchport access vlan 20 SW1(config-if)#exit SW1(config)#interface vlan 10 SW1(config-if)#ip address 192.168.1.254 255.255.255.0 SW1(config-if)#no shutdown SW1(config)#interface vlan 20 SW1(config-if)#ip address 172.16.1.254 255.255.255.0 SW1(config-if)#no shutdown SW1(config)#ip routing 实验检查 检查SW1的接口状态 SW1#show ip interface brief Interface              IP-Address      OK? Method Status                Protocol Ethernet0/0            unassigned      YES unset  administratively down down    Ethernet0/1            unassigned      YES unset  up                    up      Ethernet0/2            unassigned      YES unset  up                    up      Ethernet0/3            unassigned      YES unset  up                    up      Vlan10                 192.168.1.254   YES manual up                    up      Vlan20                 172.16.1.254    YES manual up                    up      SVI10和SVI20状态正常。 测试网络的连通性 PC1 ping 172.16.1.1 84 bytes from 172.16.1.1 icmp_seq1 ttl63 time2.123 ms 84 bytes from 172.16.1.1 icmp_seq2 ttl63 time0.626 ms 84 bytes from 172.16.1.1 icmp_seq3 ttl63 time0.533 ms 84 bytes from 172.16.1.1 icmp_seq4 ttl63 time0.466 ms 84 bytes from 172.16.1.1 icmp_seq5 ttl63 time0.505 ms PC1 trace 172.16.1.1 trace to 172.16.1.1, 8 hops max, press CtrlC to stop 1   192.168.1.254   0.758 ms  0.285 ms  0.736 ms 2   *172.16.1.1   0.636 ms (ICMP type:3, code:3, Destination port unreachable) 实验12配置静态路由 实验目的 了解静态路由的原理掌握静态路由的配置 实验任务 任务1任务2 任务1实验拓扑 任务1实验需求 根据实验拓扑图完成设备的基本配置在路由器R1、R2、R3上配置静态路由保证全网路由可达 任务1实验步骤 步骤1设备的基本配置 配置PC1 VPCS set pcname PC1   //设置主机名 PC1 ip 192.168.1.1/24 192.168.1.254    //设置IP地址与网关 配置PC2 VPCS set pcname PC2 PC2 ip 192.168.2.1/24 192.168.2.254 配置R1 Routerenable Router#configure terminal Router(config)#hostname R1 R1(config)#no ip domain-lookup R1(config)#line console 0 R1(config-line)#exec-timeout 0 0 R1(config-line)#logging synchronous R1(config-line)#exit R1(config)#interface ethernet0/0 R1(config-if)#ip address 192.168.1.254 255.255.255.0 R1(config-if)#no shutdown R1(config-if)#exit R1(config)#interface serial1/0 R1(config-if)#ip address 192.168.12.1 255.255.255.0 R1(config-if)#no shutdown R1(config-if)#end R1# 配置R2 Routerenable Router#configure terminal Router(config)#hostname R2 R2(config)#no ip domain-lookup R2(config)#line console 0 R2(config-line)#exec-timeout 0 0 R2(config-line)#logging synchronous R2(config-line)#exit R2(config)#interface serial1/0 R2(config-if)#ip address 192.168.12.2 255.255.255.0 R2(config-if)#no shutdown R2(config-if)#exit R2(config)#interface serial1/1 R2(config-if)#ip address 192.168.23.2 255.255.255.0 R2(config-if)#no shutdown R2(config-if)#end R2# 配置R3 Routerenable Router#configure terminal Router(config)#hostname R3 R3(config)#no ip domain-lookup R3(config)#line console 0 R3(config-line)#exec-timeout 0 0 R3(config-line)#logging synchronous R3(config-line)#exit R3(config)#interface ethernet0/0 R3(config-if)#ip address 192.168.2.254 255.255.255.0 R3(config-if)#no shutdown R3(config-if)#exit R3(config)#interface serial1/0 R3(config-if)#ip address 192.168.23.3 255.255.255.0 R3(config-if)#no shutdown R3(config-if)#end R3# 步骤2检查设备接口状态 检查PC1 PC1 show ip NAME        : PC1[1] IP/MASK     : 192.168.1.1/24 GATEWAY     : 192.168.1.254 DNS         : MAC         : 00:50:79:66:68:04 LPORT       : 20000 RHOST:PORT  : 127.0.0.1:30000 MTU         : 1500 检查R1 R1#show ip interface brief Interface                  IP-Address      OK? Method Status                Protocol Ethernet0/0                192.168.1.254   YES manual up                    up      Ethernet0/1                unassigned      YES unset  administratively down down    Ethernet0/2                unassigned      YES unset  administratively down down    Ethernet0/3                unassigned      YES unset  administratively down down    Serial1/0                  192.168.12.1    YES manual up                    up       Serial1/1                  unassigned      YES unset  administratively down down    Serial1/2                  unassigned      YES unset  administratively down down    Serial1/3                  unassigned      YES unset  administratively down down     检查R2 R2#show ip interface brief Interface                  IP-Address      OK? Method Status                Protocol Ethernet0/0                unassigned      YES unset  administratively down down    Ethernet0/1                unassigned      YES unset  administratively down down    Ethernet0/2                unassigned      YES unset  administratively down down    Ethernet0/3                unassigned      YES unset  administratively down down    Serial1/0                  192.168.12.2    YES manual up                    up      Serial1/1                  192.168.23.2    YES manual up                    up      Serial1/2                  unassigned      YES unset  administratively down down    Serial1/3                  unassigned      YES unset  administratively down down 检查R3 R3#show ip interface brief Interface                  IP-Address      OK? Method Status                Protocol Ethernet0/0                192.168.2.254   YES manual up                    up      Ethernet0/1                unassigned      YES unset  administratively down down    Ethernet0/2                unassigned      YES unset  administratively down down    Ethernet0/3                unassigned      YES unset  administratively down down    Serial1/0                  192.168.23.3    YES manual up                    up      Serial1/1                  unassigned      YES unset  administratively down down    Serial1/2                  unassigned      YES unset  administratively down down    Serial1/3                  unassigned      YES unset  administratively down down    检查PC2 PC2 show ip NAME        : PC2[1] IP/MASK     : 192.168.2.1/24 GATEWAY     : 192.168.2.254 DNS         : MAC         : 00:50:79:66:68:05 LPORT       : 20000 RHOST:PORT  : 127.0.0.1:30000 MTU         : 1500 步骤3测试直连网络的连通性 测试PC1跟网关的网络连通性 PC1 ping 192.168.1.254 84 bytes from 192.168.1.254 icmp_seq1 ttl255 time0.359 ms 84 bytes from 192.168.1.254 icmp_seq2 ttl255 time0.459 ms 84 bytes from 192.168.1.254 icmp_seq3 ttl255 time0.463 ms 84 bytes from 192.168.1.254 icmp_seq4 ttl255 time0.403 ms 84 bytes from 192.168.1.254 icmp_seq5 ttl255 time0.417 ms 测试R1跟R2之间的网络连通性 R1#ping 192.168.12.2 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.12.2, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 8/9/10 ms 测试R2跟R3之间的网络连通性 R2#ping 192.168.23.3 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.23.3, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 9/9/11 ms 测试PC2跟网关的网络连通性 PC2 ping 192.168.2.254 84 bytes from 192.168.2.254 icmp_seq1 ttl255 time0.469 ms 84 bytes from 192.168.2.254 icmp_seq2 ttl255 time0.484 ms 84 bytes from 192.168.2.254 icmp_seq3 ttl255 time0.518 ms 84 bytes from 192.168.2.254 icmp_seq4 ttl255 time0.400 ms 84 bytes from 192.168.2.254 icmp_seq5 ttl255 time0.405 ms 注意虽然设备之间的网络连通性正常了但是PC1和PC2之间的网络是不可达的 PC1 ping 192.168.2.1 *192.168.1.254 icmp_seq1 ttl255 time0.345 ms (ICMP type:3, code:1, Destination host unreachable) *192.168.1.254 icmp_seq2 ttl255 time0.462 ms (ICMP type:3, code:1, Destination host unreachable) *192.168.1.254 icmp_seq3 ttl255 time0.543 ms (ICMP type:3, code:1, Destination host unreachable) *192.168.1.254 icmp_seq4 ttl255 time0.494 ms (ICMP type:3, code:1, Destination host unreachable) *192.168.1.254 icmp_seq5 ttl255 time0.467 ms (ICMP type:3, code:1, Destination host unreachable) 因为PC1把数据包发送给R1后R1没有到达网络192.168.2.0/24的路由所以R1无法转发数据包。 检查R1的路由表 R1#show ip route Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP a - application route - replicated route, % - next hop override, p - overrides from PfR Gateway of last resort is not set 192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks C        192.168.1.0/24 is directly connected, Ethernet0/0 L        192.168.1.254/32 is directly connected, Ethernet0/0 192.168.12.0/24 is variably subnetted, 2 subnets, 2 masks C        192.168.12.0/24 is directly connected, Serial1/0 L        192.168.12.1/32 is directly connected, Serial1/0 R1只有两条直连路由分别是192.168.1.0/24和192.168.12.0/24。 因此我们需要在R1上配置去往192.168.2.0/24的静态路由。 步骤4配置静态路由 配置R1 R1(config)#ip route 192.168.2.0 255.255.255.0 192.168.12.2 //当然也可以跟出接口 路由要有去有回网络才能通所以R3上要配置回程路由。 配置R3 R3(config)#ip route 192.168.1.0 255.255.255.0 serial 1/0 //当然也可以跟下一跳 另外沿途的路由器也要有去往源和目标网络的路由。 配置R2 R2(config)#ip route 192.168.1.0 255.255.255.0 192.168.12.1 //当然也可以跟出接口 R2(config)#ip route 192.168.2.0 255.255.255.0 192.168.23.3 //当然也可以跟出接口 这样当PC1把数据包发送给R1时R1查路由表 R1#show ip route Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP a - application route - replicated route, % - next hop override, p - overrides from PfR Gateway of last resort is not set 192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks C        192.168.1.0/24 is directly connected, Ethernet0/0 L        192.168.1.254/32 is directly connected, Ethernet0/0 S     192.168.2.0/24 [1/0] via 192.168.12.2 192.168.12.0/24 is variably subnetted, 2 subnets, 2 masks C        192.168.12.0/24 is directly connected, Serial1/0 L        192.168.12.1/32 is directly connected, Serial1/0 R1有到达网络192.168.2.0/24的路由所以R1把数据包发送给下一跳R2R2检查路由表 R2#show ip route Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP a - application route - replicated route, % - next hop override, p - overrides from PfR Gateway of last resort is not set S     192.168.1.0/24 [1/0] via 192.168.12.1 S     192.168.2.0/24 [1/0] via 192.168.23.3 192.168.12.0/24 is variably subnetted, 2 subnets, 2 masks C        192.168.12.0/24 is directly connected, Serial1/0 L        192.168.12.2/32 is directly connected, Serial1/0 192.168.23.0/24 is variably subnetted, 2 subnets, 2 masks C        192.168.23.0/24 is directly connected, Serial1/1 L        192.168.23.2/32 is directly connected, Serial1/1 R2有到达网络192.168.2.0/24的路由所以R2把数据包发送给下一跳R3R3检查路由表 R3#show ip route Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP a - application route - replicated route, % - next hop override, p - overrides from PfR Gateway of last resort is not set S     192.168.1.0/24 is directly connected, Serial1/0 192.168.2.0/24 is variably subnetted, 2 subnets, 2 masks C        192.168.2.0/24 is directly connected, Ethernet0/0 L        192.168.2.254/32 is directly connected, Ethernet0/0 192.168.23.0/24 is variably subnetted, 2 subnets, 2 masks C        192.168.23.0/24 is directly connected, Serial1/0 L        192.168.23.3/32 is directly connected, Serial1/0 R3上192.168.2.0/24是自己的直连网络所以R3把数据包直接发给PC2。 回程数据包的转发原理一样这里不再撰述。 步骤5测试PC1跟PC2的网络连通性 PC1 ping 192.168.2.1 84 bytes from 192.168.2.1 icmp_seq1 ttl61 time22.503 ms 84 bytes from 192.168.2.1 icmp_seq2 ttl61 time18.859 ms 84 bytes from 192.168.2.1 icmp_seq3 ttl61 time19.251 ms 84 bytes from 192.168.2.1 icmp_seq4 ttl61 time19.350 ms 84 bytes from 192.168.2.1 icmp_seq5 ttl61 time17.856 ms 因为需求要求全网路由可达 如果这个时候在R1上Ping PC2能不能通呢不能 在R1上Ping PC2数据包源地址是192.168.12.1数据包能到达PC2但是回不来因为R3上没有到达192.168.12.0/24的路由 同理R3上Ping PC1也不通因为R1没有到达192.168.23.0/24的路由。 检查R3的路由表 R3#show ip route Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP a - application route - replicated route, % - next hop override, p - overrides from PfR Gateway of last resort is not set S     192.168.1.0/24 is directly connected, Serial1/0 192.168.2.0/24 is variably subnetted, 2 subnets, 2 masks C        192.168.2.0/24 is directly connected, Ethernet0/0 L        192.168.2.254/32 is directly connected, Ethernet0/0 192.168.23.0/24 is variably subnetted, 2 subnets, 2 masks C        192.168.23.0/24 is directly connected, Serial1/0 L        192.168.23.3/32 is directly connected, Serial1/0 R3没有到达网络192.168.12.0/24的路由。 配置R3 R3(config)#ip route 192.168.12.0 255.255.255.0 192.168.23.2 //当然也可以跟出接口 同理配置R1 R1(config)#ip route 192.168.23.0 255.255.255.0 serial 1/0 //当然也可以跟下一跳 检查R1的路由表 R1#show ip route Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP a - application route - replicated route, % - next hop override, p - overrides from PfR Gateway of last resort is not set 192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks C        192.168.1.0/24 is directly connected, Ethernet0/0 L        192.168.1.254/32 is directly connected, Ethernet0/0 S     192.168.2.0/24 [1/0] via 192.168.12.2 192.168.12.0/24 is variably subnetted, 2 subnets, 2 masks C        192.168.12.0/24 is directly connected, Serial1/0 L        192.168.12.1/32 is directly connected, Serial1/0 S     192.168.23.0/24 is directly connected, Serial1/0 R1有到达192.168.2.0/24和192.168.23.0/24的路由。 检查R3的路由表 R3#show ip route Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP a - application route - replicated route, % - next hop override, p - overrides from PfR Gateway of last resort is not set S     192.168.1.0/24 is directly connected, Serial1/0 192.168.2.0/24 is variably subnetted, 2 subnets, 2 masks C        192.168.2.0/24 is directly connected, Ethernet0/0 L        192.168.2.254/32 is directly connected, Ethernet0/0 S     192.168.12.0/24 [1/0] via 192.168.23.2 192.168.23.0/24 is variably subnetted, 2 subnets, 2 masks C        192.168.23.0/24 is directly connected, Serial1/0 L        192.168.23.3/32 is directly connected, Serial1/0 R3有到达192.168.1.0/24和192.168.12.0/24的路由。 步骤6测试网络连通性 在PC1上测试 PC1 ping 192.168.2.1 84 bytes from 192.168.2.1 icmp_seq1 ttl61 time21.429 ms 84 bytes from 192.168.2.1 icmp_seq2 ttl61 time18.079 ms 84 bytes from 192.168.2.1 icmp_seq3 ttl61 time19.108 ms 84 bytes from 192.168.2.1 icmp_seq4 ttl61 time19.006 ms 84 bytes from 192.168.2.1 icmp_seq5 ttl61 time18.163 ms PC1 ping 192.168.23.3 84 bytes from 192.168.23.3 icmp_seq1 ttl253 time18.265 ms 84 bytes from 192.168.23.3 icmp_seq2 ttl253 time18.186 ms 84 bytes from 192.168.23.3 icmp_seq3 ttl253 time18.184 ms 84 bytes from 192.168.23.3 icmp_seq4 ttl253 time18.257 ms 84 bytes from 192.168.23.3 icmp_seq5 ttl253 time18.240 ms PC1 ping 192.168.12.2 84 bytes from 192.168.12.2 icmp_seq1 ttl254 time9.899 ms 84 bytes from 192.168.12.2 icmp_seq2 ttl254 time9.380 ms 84 bytes from 192.168.12.2 icmp_seq3 ttl254 time9.159 ms 84 bytes from 192.168.12.2 icmp_seq4 ttl254 time9.300 ms 84 bytes from 192.168.12.2 icmp_seq5 ttl254 time9.268 ms 任务2实验拓扑 任务2实验需求 在R1和R3上删除任务1的静态路由在路由器R1、R3上配置默认路由使得全网路由可达。 任务2实验步骤 步骤1删除R1和R3上的静态路由并配置默认路由 配置R1 R1(config)#no ip route 192.168.2.0 255.255.255.0 192.168.12.2 R1(config)#no ip route 192.168.23.0 255.255.255.0 Serial1/0 R1(config)#ip route 0.0.0.0 0.0.0.0 192.168.12.2 配置R3 R3(config)#no ip route 192.168.1.0 255.255.255.0 Serial1/0 R3(config)#no ip route 192.168.12.0 255.255.255.0 192.168.23.2 R3(config)#ip route 0.0.0.0 0.0.0.0 192.168.23.2 步骤2检查默认路由 检查R1 R1#show ip route Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP a - application route - replicated route, % - next hop override, p - overrides from PfR Gateway of last resort is 192.168.12.2 to network 0.0.0.0 S*    0.0.0.0/0 [1/0] via 192.168.12.2 192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks C        192.168.1.0/24 is directly connected, Ethernet0/0 L        192.168.1.254/32 is directly connected, Ethernet0/0 192.168.12.0/24 is variably subnetted, 2 subnets, 2 masks C        192.168.12.0/24 is directly connected, Serial1/0 L        192.168.12.1/32 is directly connected, Serial1/0 检查R3 R3#show ip route Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP a - application route - replicated route, % - next hop override, p - overrides from PfR Gateway of last resort is 192.168.23.2 to network 0.0.0.0 S*    0.0.0.0/0 [1/0] via 192.168.23.2 192.168.2.0/24 is variably subnetted, 2 subnets, 2 masks C        192.168.2.0/24 is directly connected, Ethernet0/0 L        192.168.2.254/32 is directly connected, Ethernet0/0 192.168.23.0/24 is variably subnetted, 2 subnets, 2 masks C        192.168.23.0/24 is directly connected, Serial1/0 L        192.168.23.3/32 is directly connected, Serial1/0 步骤3网络连通性测试 PC1 ping 192.168.2.1 84 bytes from 192.168.2.1 icmp_seq1 ttl61 time20.698 ms 84 bytes from 192.168.2.1 icmp_seq2 ttl61 time19.478 ms 84 bytes from 192.168.2.1 icmp_seq3 ttl61 time18.593 ms 84 bytes from 192.168.2.1 icmp_seq4 ttl61 time19.404 ms 84 bytes from 192.168.2.1 icmp_seq5 ttl61 time19.616 ms PC1 ping 192.168.23.3 84 bytes from 192.168.23.3 icmp_seq1 ttl253 time22.048 ms 84 bytes from 192.168.23.3 icmp_seq2 ttl253 time20.271 ms 84 bytes from 192.168.23.3 icmp_seq3 ttl253 time19.362 ms 84 bytes from 192.168.23.3 icmp_seq4 ttl253 time20.110 ms 84 bytes from 192.168.23.3 icmp_seq5 ttl253 time21.321 ms PC1 ping 192.168.12.2 84 bytes from 192.168.12.2 icmp_seq1 ttl254 time10.201 ms 84 bytes from 192.168.12.2 icmp_seq2 ttl254 time10.220 ms 84 bytes from 192.168.12.2 icmp_seq3 ttl254 time8.304 ms 84 bytes from 192.168.12.2 icmp_seq4 ttl254 time9.170 ms 84 bytes from 192.168.12.2 icmp_seq5 ttl254 time10.084 ms 实验13配置EIGRP 实验目的 了解EIGRP的运行原理了解EIGRP自动汇总的原理掌握EIGRP基本的配置方法掌握EIGRP手工汇总的配置方法 实验任务 任务1任务2任务3 任务1实验拓扑 任务1实验需求 根据实验拓扑图完成设备的基本配置在R1、R2、R3上配置EIGRP使得全网路由可达测试网络的连通性。 任务1实验步骤 步骤1设备的基本配置 配置PC1 VPCS set pcname PC1   //设置主机名 PC1 ip 192.168.1.1/24 192.168.1.254    //设置IP地址与网关 配置PC2 VPCS set pcname PC2 PC2 ip 192.168.2.1/24 192.168.2.254 配置R1 Routerenable Router#configure terminal Router(config)#hostname R1 R1(config)#no ip domain-lookup R1(config)#line console 0 R1(config-line)#exec-timeout 0 0 R1(config-line)#logging synchronous R1(config-line)#exit R1(config)#interface ethernet0/0 R1(config-if)#ip address 192.168.1.254 255.255.255.0 R1(config-if)#no shutdown R1(config-if)#exit R1(config)#interface serial1/0 R1(config-if)#ip address 192.168.12.1 255.255.255.0 R1(config-if)#no shutdown R1(config-if)#end R1# 配置R2 Routerenable Router#configure terminal Router(config)#hostname R2 R2(config)#no ip domain-lookup R2(config)#line console 0 R2(config-line)#exec-timeout 0 0 R2(config-line)#logging synchronous R2(config-line)#exit R2(config)#interface serial1/0 R2(config-if)#ip address 192.168.12.2 255.255.255.0 R2(config-if)#no shutdown R2(config-if)#exit R2(config)#interface serial1/1 R2(config-if)#ip address 192.168.23.2 255.255.255.0 R2(config-if)#no shutdown R2(config-if)#end R2# 配置R3 Routerenable Router#configure terminal Router(config)#hostname R3 R3(config)#no ip domain-lookup R3(config)#line console 0 R3(config-line)#exec-timeout 0 0 R3(config-line)#logging synchronous R3(config-line)#exit R3(config)#interface ethernet0/0 R3(config-if)#ip address 192.168.2.254 255.255.255.0 R3(config-if)#no shutdown R3(config-if)#exit R3(config)#interface serial1/0 R3(config-if)#ip address 192.168.23.3 255.255.255.0 R3(config-if)#no shutdown R3(config-if)#end R3# 步骤2检查设备接口状态 检查PC1 PC1 show ip NAME        : PC1[1] IP/MASK     : 192.168.1.1/24 GATEWAY     : 192.168.1.254 DNS         : MAC         : 00:50:79:66:68:04 LPORT       : 20000 RHOST:PORT  : 127.0.0.1:30000 MTU         : 1500 检查R1 R1#show ip interface brief Interface                  IP-Address      OK? Method Status                Protocol Ethernet0/0                192.168.1.254   YES manual up                    up      Ethernet0/1                unassigned      YES unset  administratively down down    Ethernet0/2                unassigned      YES unset  administratively down down    Ethernet0/3                unassigned      YES unset  administratively down down    Serial1/0                  192.168.12.1    YES manual up                    up       Serial1/1                  unassigned      YES unset  administratively down down    Serial1/2                  unassigned      YES unset  administratively down down    Serial1/3                  unassigned      YES unset  administratively down down     检查R2 R2#show ip interface brief Interface                  IP-Address      OK? Method Status                Protocol Ethernet0/0                unassigned      YES unset  administratively down down    Ethernet0/1                unassigned      YES unset  administratively down down    Ethernet0/2                unassigned      YES unset  administratively down down    Ethernet0/3                unassigned      YES unset  administratively down down    Serial1/0                  192.168.12.2    YES manual up                    up      Serial1/1                  192.168.23.2    YES manual up                    up      Serial1/2                  unassigned      YES unset  administratively down down    Serial1/3                  unassigned      YES unset  administratively down down 检查R3 R3#show ip interface brief Interface                  IP-Address      OK? Method Status                Protocol Ethernet0/0                192.168.2.254   YES manual up                    up      Ethernet0/1                unassigned      YES unset  administratively down down    Ethernet0/2                unassigned      YES unset  administratively down down    Ethernet0/3                unassigned      YES unset  administratively down down    Serial1/0                  192.168.23.3    YES manual up                    up      Serial1/1                  unassigned      YES unset  administratively down down    Serial1/2                  unassigned      YES unset  administratively down down    Serial1/3                  unassigned      YES unset  administratively down down    检查PC2 PC2 show ip NAME        : PC2[1] IP/MASK     : 192.168.2.1/24 GATEWAY     : 192.168.2.254 DNS         : MAC         : 00:50:79:66:68:05 LPORT       : 20000 RHOST:PORT  : 127.0.0.1:30000 MTU         : 1500 步骤3测试直连网络的连通性 测试PC1跟网关的网络连通性 PC1 ping 192.168.1.254 84 bytes from 192.168.1.254 icmp_seq1 ttl255 time0.359 ms 84 bytes from 192.168.1.254 icmp_seq2 ttl255 time0.459 ms 84 bytes from 192.168.1.254 icmp_seq3 ttl255 time0.463 ms 84 bytes from 192.168.1.254 icmp_seq4 ttl255 time0.403 ms 84 bytes from 192.168.1.254 icmp_seq5 ttl255 time0.417 ms 测试R1跟R2之间的网络连通性 R1#ping 192.168.12.2 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.12.2, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 8/9/10 ms 测试R2跟R3之间的网络连通性 R2#ping 192.168.23.3 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.23.3, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 9/9/11 ms 测试PC2跟网关的网络连通性 PC2 ping 192.168.2.254 84 bytes from 192.168.2.254 icmp_seq1 ttl255 time0.469 ms 84 bytes from 192.168.2.254 icmp_seq2 ttl255 time0.484 ms 84 bytes from 192.168.2.254 icmp_seq3 ttl255 time0.518 ms 84 bytes from 192.168.2.254 icmp_seq4 ttl255 time0.400 ms 84 bytes from 192.168.2.254 icmp_seq5 ttl255 time0.405 ms 步骤4配置EIGRP 配置R1 R1(config)#router eigrp 100 R1(config-router)#network 192.168.1.0 0.0.0.255 R1(config-router)#network 192.168.12.0 0.0.0.255 R1(config-router)#end R1# 配置R2 R2(config)#router eigrp 100 R2(config-router)#network 192.168.12.0 0.0.0.255 R2(config-router)#network 192.168.23.0 0.0.0.255 R2(config-router)#end R2# 配置R3 R3(config)#router eigrp 100 R3(config-router)#network 192.168.23.0 0.0.0.255 R3(config-router)#network 192.168.2.0 0.0.0.255 R3(config-router)#end R3# 步骤5检查EIGRP路由 检查R1 R1#show ip route Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP a - application route - replicated route, % - next hop override, p - overrides from PfR Gateway of last resort is not set 192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks C        192.168.1.0/24 is directly connected, Ethernet0/0 L        192.168.1.254/32 is directly connected, Ethernet0/0 D     192.168.2.0/24 [90/2707456] via 192.168.12.2, 00:00:55, Serial1/0 192.168.12.0/24 is variably subnetted, 2 subnets, 2 masks C        192.168.12.0/24 is directly connected, Serial1/0 L        192.168.12.1/32 is directly connected, Serial1/0 D     192.168.23.0/24 [90/2681856] via 192.168.12.2, 00:01:34, Serial1/0 检查R2 R2#show ip route Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP a - application route - replicated route, % - next hop override, p - overrides from PfR Gateway of last resort is not set D     192.168.1.0/24 [90/2195456] via 192.168.12.1, 00:02:26, Serial1/0 D     192.168.2.0/24 [90/2195456] via 192.168.23.3, 00:01:24, Serial1/1 192.168.12.0/24 is variably subnetted, 2 subnets, 2 masks C        192.168.12.0/24 is directly connected, Serial1/0 L        192.168.12.2/32 is directly connected, Serial1/0 192.168.23.0/24 is variably subnetted, 2 subnets, 2 masks C        192.168.23.0/24 is directly connected, Serial1/1 L        192.168.23.2/32 is directly connected, Serial1/1 检查R3 R3#show ip route Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP a - application route - replicated route, % - next hop override, p - overrides from PfR Gateway of last resort is not set D     192.168.1.0/24 [90/2707456] via 192.168.23.2, 00:01:55, Serial1/0 192.168.2.0/24 is variably subnetted, 2 subnets, 2 masks C        192.168.2.0/24 is directly connected, Ethernet0/0 L        192.168.2.254/32 is directly connected, Ethernet0/0 D     192.168.12.0/24 [90/2681856] via 192.168.23.2, 00:01:55, Serial1/0 192.168.23.0/24 is variably subnetted, 2 subnets, 2 masks C        192.168.23.0/24 is directly connected, Serial1/0 L        192.168.23.3/32 is directly connected, Serial1/0 步骤6测试网络的连通性 测试PC1 PC1 ping 192.168.2.1 84 bytes from 192.168.2.1 icmp_seq1 ttl61 time21.438 ms 84 bytes from 192.168.2.1 icmp_seq2 ttl61 time14.345 ms 84 bytes from 192.168.2.1 icmp_seq3 ttl61 time19.706 ms 84 bytes from 192.168.2.1 icmp_seq4 ttl61 time18.968 ms 84 bytes from 192.168.2.1 icmp_seq5 ttl61 time19.006 ms PC1 ping 192.168.23.3 84 bytes from 192.168.23.3 icmp_seq1 ttl253 time18.992 ms 84 bytes from 192.168.23.3 icmp_seq2 ttl253 time18.513 ms 84 bytes from 192.168.23.3 icmp_seq3 ttl253 time18.559 ms 84 bytes from 192.168.23.3 icmp_seq4 ttl253 time18.514 ms 84 bytes from 192.168.23.3 icmp_seq5 ttl253 time15.974 ms PC1 ping 192.168.12.2 84 bytes from 192.168.12.2 icmp_seq1 ttl254 time9.668 ms 84 bytes from 192.168.12.2 icmp_seq2 ttl254 time9.340 ms 84 bytes from 192.168.12.2 icmp_seq3 ttl254 time9.307 ms 84 bytes from 192.168.12.2 icmp_seq4 ttl254 time9.189 ms 84 bytes from 192.168.12.2 icmp_seq5 ttl254 time9.086 ms 任务2实验拓扑 任务2实验需求 根据实验拓扑图完成设备的基本配置在R1和R3上分别创建Lo1、Lo2、Lo3IP地址如图所示并宣告进EIGRP在R1、R2、R3上配置EIGRP打开自动汇总保证全网路由可达。 任务2实验步骤 步骤1设备的基本配置 配置PC1 VPCS set pcname PC1   //设置主机名 PC1 ip 192.168.1.1/24 192.168.1.254    //设置IP地址与网关 配置PC2 VPCS set pcname PC2 PC2 ip 192.168.2.1/24 192.168.2.254 配置R1 Routerenable Router#configure terminal Router(config)#hostname R1 R1(config)#no ip domain-lookup R1(config)#line console 0 R1(config-line)#exec-timeout 0 0 R1(config-line)#logging synchronous R1(config-line)#exit R1(config)#interface loopback 1 R1(config-if)#ip address 172.16.1.1 255.255.255.0 R1(config-if)#exit R1(config)#interface loopback 2 R1(config-if)#ip address 172.16.2.1 255.255.255.0 R1(config-if)#exit R1(config)#interface loopback 3 R1(config-if)#ip address 172.16.3.1 255.255.255.0 R1(config-if)#exit R1(config)#interface ethernet0/0 R1(config-if)#ip address 192.168.1.254 255.255.255.0 R1(config-if)#no shutdown R1(config-if)#exit R1(config)#interface serial1/0 R1(config-if)#ip address 192.168.12.1 255.255.255.0 R1(config-if)#no shutdown R1(config-if)#end R1# 配置R2 Routerenable Router#configure terminal Router(config)#hostname R2 R2(config)#no ip domain-lookup R2(config)#line console 0 R2(config-line)#exec-timeout 0 0 R2(config-line)#logging synchronous R2(config-line)#exit R2(config)#interface serial1/0 R2(config-if)#ip address 192.168.12.2 255.255.255.0 R2(config-if)#no shutdown R2(config-if)#exit R2(config)#interface serial1/1 R2(config-if)#ip address 192.168.23.2 255.255.255.0 R2(config-if)#no shutdown R2(config-if)#end R2# 配置R3 Routerenable Router#configure terminal Router(config)#hostname R3 R3(config)#no ip domain-lookup R3(config)#line console 0 R3(config-line)#exec-timeout 0 0 R3(config-line)#logging synchronous R3(config-line)#exit R3(config)#interface loopback 1 R3(config-if)#ip address 172.16.10.1 255.255.255.0 R3(config-if)#exit R3(config)#interface loopback 2 R3(config-if)#ip address 172.16.20.1 255.255.255.0 R3(config-if)#exit R3(config)#interface loopback 3 R3(config-if)#ip address 172.16.30.1 255.255.255.0 R3(config-if)#exit R3(config)#interface ethernet0/0 R3(config-if)#ip address 192.168.2.254 255.255.255.0 R3(config-if)#no shutdown R3(config-if)#exit R3(config)#interface serial1/0 R3(config-if)#ip address 192.168.23.3 255.255.255.0 R3(config-if)#no shutdown R3(config-if)#end R3# 步骤2检查设备接口状态 检查PC1 PC1 show ip NAME        : PC1[1] IP/MASK     : 192.168.1.1/24 GATEWAY     : 192.168.1.254 DNS         : MAC         : 00:50:79:66:68:04 LPORT       : 20000 RHOST:PORT  : 127.0.0.1:30000 MTU         : 1500 检查R1 R1#show ip interface brief Interface                  IP-Address      OK? Method Status                Protocol Ethernet0/0                192.168.1.254   YES manual up                    up      Ethernet0/1                unassigned      YES unset  administratively down down    Ethernet0/2                unassigned      YES unset  administratively down down    Ethernet0/3                unassigned      YES unset  administratively down down    Serial1/0                  192.168.12.1    YES manual up                    up       Serial1/1                  unassigned      YES unset  administratively down down    Serial1/2                  unassigned      YES unset  administratively down down    Serial1/3                  unassigned      YES unset  administratively down down     检查R2 R2#show ip interface brief Interface                  IP-Address      OK? Method Status                Protocol Ethernet0/0                unassigned      YES unset  administratively down down    Ethernet0/1                unassigned      YES unset  administratively down down    Ethernet0/2                unassigned      YES unset  administratively down down    Ethernet0/3                unassigned      YES unset  administratively down down    Serial1/0                  192.168.12.2    YES manual up                    up      Serial1/1                  192.168.23.2    YES manual up                    up      Serial1/2                  unassigned      YES unset  administratively down down    Serial1/3                  unassigned      YES unset  administratively down down 检查R3 R3#show ip interface brief Interface                  IP-Address      OK? Method Status                Protocol Ethernet0/0                192.168.2.254   YES manual up                    up      Ethernet0/1                unassigned      YES unset  administratively down down    Ethernet0/2                unassigned      YES unset  administratively down down    Ethernet0/3                unassigned      YES unset  administratively down down    Serial1/0                  192.168.23.3    YES manual up                    up      Serial1/1                  unassigned      YES unset  administratively down down    Serial1/2                  unassigned      YES unset  administratively down down    Serial1/3                  unassigned      YES unset  administratively down down    检查PC2 PC2 show ip NAME        : PC2[1] IP/MASK     : 192.168.2.1/24 GATEWAY     : 192.168.2.254 DNS         : MAC         : 00:50:79:66:68:05 LPORT       : 20000 RHOST:PORT  : 127.0.0.1:30000 MTU         : 1500 步骤3测试直连网络的连通性 测试PC1跟网关的网络连通性 PC1 ping 192.168.1.254 84 bytes from 192.168.1.254 icmp_seq1 ttl255 time0.359 ms 84 bytes from 192.168.1.254 icmp_seq2 ttl255 time0.459 ms 84 bytes from 192.168.1.254 icmp_seq3 ttl255 time0.463 ms 84 bytes from 192.168.1.254 icmp_seq4 ttl255 time0.403 ms 84 bytes from 192.168.1.254 icmp_seq5 ttl255 time0.417 ms 测试R1跟R2之间的网络连通性 R1#ping 192.168.12.2 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.12.2, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 8/9/10 ms 测试R2跟R3之间的网络连通性 R2#ping 192.168.23.3 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.23.3, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 9/9/11 ms 测试PC2跟网关的网络连通性 PC2 ping 192.168.2.254 84 bytes from 192.168.2.254 icmp_seq1 ttl255 time0.469 ms 84 bytes from 192.168.2.254 icmp_seq2 ttl255 time0.484 ms 84 bytes from 192.168.2.254 icmp_seq3 ttl255 time0.518 ms 84 bytes from 192.168.2.254 icmp_seq4 ttl255 time0.400 ms 84 bytes from 192.168.2.254 icmp_seq5 ttl255 time0.405 ms 步骤4打开EIGRP自动汇总 配置R1 R1(config)#router eigrp 100 R1(config-router)#auto-summary R1(config-router)#network 172.16.1.0 0.0.0.255 R1(config-router)#network 172.16.2.0 0.0.0.255 R1(config-router)#network 172.16.3.0 0.0.0.255 R1(config-router)#network 192.168.1.0 0.0.0.255 R1(config-router)#network 192.168.12.0 0.0.0.255 R1(config-router)#end R1# 配置R2 R2(config)#router eigrp 100 R2(config-router)#auto-summary R2(config-router)#network 192.168.12.0 0.0.0.255 R2(config-router)#network 192.168.23.0 0.0.0.255 R2(config-router)#end R2# 配置R3 R3(config)#router eigrp 100 R3(config-router)#auto-summary R3(config-router)#network 172.16.10.0 0.0.0.255 R3(config-router)#network 172.16.20.0 0.0.0.255 R3(config-router)#network 172.16.30.0 0.0.0.255 R3(config-router)#network 192.168.23.0 0.0.0.255 R3(config-router)#network 192.168.2.0 0.0.0.255 R3(config-router)#end R3# 步骤5检查EIGRP路由 检查R2 R2#show ip route Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP a - application route - replicated route, % - next hop override, p - overrides from PfR Gateway of last resort is not set D     172.16.0.0/16 [90/2297856] via 192.168.23.3, 00:02:53, Serial1/1 [90/2297856] via 192.168.12.1, 00:02:53, Serial1/0 D     192.168.1.0/24 [90/2195456] via 192.168.12.1, 00:19:55, Serial1/0 D     192.168.2.0/24 [90/2195456] via 192.168.23.3, 00:18:53, Serial1/1 192.168.12.0/24 is variably subnetted, 2 subnets, 2 masks C        192.168.12.0/24 is directly connected, Serial1/0 L        192.168.12.2/32 is directly connected, Serial1/0 192.168.23.0/24 is variably subnetted, 2 subnets, 2 masks C        192.168.23.0/24 is directly connected, Serial1/1 L        192.168.23.2/32 is directly connected, Serial1/1 R2的路由表去往172.16.0.0/16是等价负载的为什么 EIGRP在自动汇总打开的情况下在主类网络边界会执行自动汇总将路由汇总成主类网络 R1和R3的Lo1、Lo2、Lo3接口地址都是B类地址所以R1和R3把它们汇总了B类网络即172.16.0.0/16。 假设这个时候R2有数据包要去往172.16.1.0/24或其它网络那么有可能会出现以下情况 R2#ping 172.16.1.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 172.16.1.1, timeout is 2 seconds: U.U.U Success rate is 0 percent (0/5) R2#ping 172.16.2.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 172.16.2.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 7/9/11 ms 因为路由是负载的所以有可能有的网络通有的网络不通。 怎么解决关闭自动汇总 步骤6关闭EIGRP自动汇总 注意12.X版本的IOS自动汇总默认打开15.X版本的IOS自动汇总默认关闭。 配置R1 R1(config)#router eigrp 100 R1(config-router)#no auto-summary R1(config-router)#end R1# 配置R2 R2(config)#router eigrp 100 R2(config-router)#no auto-summary R2(config-router)#end R2# 配置R3 R3(config)#router eigrp 100 R3(config-router)#no auto-summary R3(config-router)#end R3# 关闭自动汇总之后R2的路由表看到的就是Loopback口的明细路由而不是汇总路由了。 检查R2 R2#show ip route Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP a - application route - replicated route, % - next hop override, p - overrides from PfR Gateway of last resort is not set 172.16.0.0/24 is subnetted, 6 subnets D        172.16.1.0 [90/2297856] via 192.168.12.1, 00:01:01, Serial1/0 D        172.16.2.0 [90/2297856] via 192.168.12.1, 00:01:01, Serial1/0 D        172.16.3.0 [90/2297856] via 192.168.12.1, 00:01:01, Serial1/0 D        172.16.10.0 [90/2297856] via 192.168.23.3, 00:00:07, Serial1/1 D        172.16.20.0 [90/2297856] via 192.168.23.3, 00:00:07, Serial1/1 D        172.16.30.0 [90/2297856] via 192.168.23.3, 00:00:07, Serial1/1 D     192.168.1.0/24 [90/2195456] via 192.168.12.1, 00:34:55, Serial1/0 D     192.168.2.0/24 [90/2195456] via 192.168.23.3, 00:33:53, Serial1/1 192.168.12.0/24 is variably subnetted, 2 subnets, 2 masks C        192.168.12.0/24 is directly connected, Serial1/0 L        192.168.12.2/32 is directly connected, Serial1/0 192.168.23.0/24 is variably subnetted, 2 subnets, 2 masks C        192.168.23.0/24 is directly connected, Serial1/1 L        192.168.23.2/32 is directly connected, Serial1/1 当然也不会出现有的网络通有的网络不通的情况了。 R2#ping 172.16.1.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 172.16.1.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 9/9/10 ms R2#ping 172.16.2.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 172.16.2.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 9/9/10 ms R2#ping 172.16.3.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 172.16.3.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 10/10/10 ms R2#ping 172.16.10.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 172.16.10.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 10/10/10 ms R2#ping 172.16.20.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 172.16.20.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 10/10/10 ms R2#ping 172.16.30.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 172.16.30.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 9/9/10 ms 任务3需求拓扑 任务3实验需求 根据实验拓扑图完成设备的基本配置在R1、R2、R3上配置EIGRP保证全网路由可达在R1上创建Lo1、Lo2、Lo3IP地址如图所示并宣告进EIGRP在R1上对Loopback口路由进行汇总确保R2和R3能收到汇总路由 任务3实验步骤 步骤1设备的基本配置 配置PC1 VPCS set pcname PC1   //设置主机名 PC1 ip 192.168.1.1/24 192.168.1.254    //设置IP地址与网关 配置PC2 VPCS set pcname PC2 PC2 ip 192.168.2.1/24 192.168.2.254 配置R1 Routerenable Router#configure terminal Router(config)#hostname R1 R1(config)#no ip domain-lookup R1(config)#line console 0 R1(config-line)#exec-timeout 0 0 R1(config-line)#logging synchronous R1(config-line)#exit R1(config)#interface loopback 1 R1(config-if)#ip address 172.16.1.1 255.255.255.0 R1(config-if)#exit R1(config)#interface loopback 2 R1(config-if)#ip address 172.16.2.1 255.255.255.0 R1(config-if)#exit R1(config)#interface loopback 3 R1(config-if)#ip address 172.16.3.1 255.255.255.0 R1(config-if)#exit R1(config)#interface ethernet0/0 R1(config-if)#ip address 192.168.1.254 255.255.255.0 R1(config-if)#no shutdown R1(config-if)#exit R1(config)#interface serial1/0 R1(config-if)#ip address 192.168.12.1 255.255.255.0 R1(config-if)#no shutdown R1(config-if)#end R1# 配置R2 Routerenable Router#configure terminal Router(config)#hostname R2 R2(config)#no ip domain-lookup R2(config)#line console 0 R2(config-line)#exec-timeout 0 0 R2(config-line)#logging synchronous R2(config-line)#exit R2(config)#interface serial1/0 R2(config-if)#ip address 192.168.12.2 255.255.255.0 R2(config-if)#no shutdown R2(config-if)#exit R2(config)#interface serial1/1 R2(config-if)#ip address 192.168.23.2 255.255.255.0 R2(config-if)#no shutdown R2(config-if)#end R2# 配置R3 Routerenable Router#configure terminal Router(config)#hostname R3 R3(config)#no ip domain-lookup R3(config)#line console 0 R3(config-line)#exec-timeout 0 0 R3(config-line)#logging synchronous R3(config-line)#exit R3(config)#interface ethernet0/0 R3(config-if)#ip address 192.168.2.254 255.255.255.0 R3(config-if)#no shutdown R3(config-if)#exit R3(config)#interface serial1/0 R3(config-if)#ip address 192.168.23.3 255.255.255.0 R3(config-if)#no shutdown R3(config-if)#end R3# 步骤2检查设备接口状态 检查PC1 PC1 show ip NAME        : PC1[1] IP/MASK     : 192.168.1.1/24 GATEWAY     : 192.168.1.254 DNS         : MAC         : 00:50:79:66:68:04 LPORT       : 20000 RHOST:PORT  : 127.0.0.1:30000 MTU         : 1500 检查R1 R1#show ip interface brief Interface                  IP-Address      OK? Method Status                Protocol Ethernet0/0                192.168.1.254   YES manual up                    up      Ethernet0/1                unassigned      YES unset  administratively down down    Ethernet0/2                unassigned      YES unset  administratively down down    Ethernet0/3                unassigned      YES unset  administratively down down    Serial1/0                  192.168.12.1    YES manual up                    up      Serial1/1                  unassigned      YES unset  administratively down down    Serial1/2                  unassigned      YES unset  administratively down down    Serial1/3                  unassigned      YES unset  administratively down down    检查R2 R2#show ip interface brief Interface                  IP-Address      OK? Method Status                Protocol Ethernet0/0                unassigned      YES unset  administratively down down    Ethernet0/1                unassigned      YES unset  administratively down down    Ethernet0/2                unassigned      YES unset  administratively down down    Ethernet0/3                unassigned      YES unset  administratively down down    Serial1/0                  192.168.12.2    YES manual up                    up      Serial1/1                  192.168.23.2    YES manual up                    up      Serial1/2                  unassigned      YES unset  administratively down down    Serial1/3                  unassigned      YES unset  administratively down down 检查R3 R3#show ip interface brief Interface                  IP-Address      OK? Method Status                Protocol Ethernet0/0                192.168.2.254   YES manual up                    up       Ethernet0/1                unassigned      YES unset  administratively down down    Ethernet0/2                unassigned      YES unset  administratively down down    Ethernet0/3                unassigned      YES unset  administratively down down     Serial1/0                  192.168.23.3    YES manual up                    up      Serial1/1                  unassigned      YES unset  administratively down down    Serial1/2                  unassigned      YES unset  administratively down down     Serial1/3                  unassigned      YES unset  administratively down down  检查PC2 PC2 show ip NAME        : PC2[1] IP/MASK     : 192.168.2.1/24 GATEWAY     : 192.168.2.254 DNS         : MAC         : 00:50:79:66:68:05 LPORT       : 20000 RHOST:PORT  : 127.0.0.1:30000 MTU         : 1500 步骤3测试直连网络的连通性 测试PC1跟网关的网络连通性 PC1 ping 192.168.1.254 84 bytes from 192.168.1.254 icmp_seq1 ttl255 time0.359 ms 84 bytes from 192.168.1.254 icmp_seq2 ttl255 time0.459 ms 84 bytes from 192.168.1.254 icmp_seq3 ttl255 time0.463 ms 84 bytes from 192.168.1.254 icmp_seq4 ttl255 time0.403 ms 84 bytes from 192.168.1.254 icmp_seq5 ttl255 time0.417 ms 测试R1跟R2之间的网络连通性 R1#ping 192.168.12.2 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.12.2, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 8/9/10 ms 测试R2跟R3之间的网络连通性 R2#ping 192.168.23.3 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.23.3, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 9/9/11 ms 测试PC2跟网关的网络连通性 PC2 ping 192.168.2.254 84 bytes from 192.168.2.254 icmp_seq1 ttl255 time0.469 ms 84 bytes from 192.168.2.254 icmp_seq2 ttl255 time0.484 ms 84 bytes from 192.168.2.254 icmp_seq3 ttl255 time0.518 ms 84 bytes from 192.168.2.254 icmp_seq4 ttl255 time0.400 ms 84 bytes from 192.168.2.254 icmp_seq5 ttl255 time0.405 ms 步骤4配置EIGRP 配置R1 R1(config)#router eigrp 100 R1(config-router)#network 172.16.1.0 0.0.0.255 R1(config-router)#network 172.16.2.0 0.0.0.255 R1(config-router)#network 172.16.3.0 0.0.0.255 R1(config-router)#network 192.168.1.0 0.0.0.255 R1(config-router)#network 192.168.12.0 0.0.0.255 R1(config-router)#end R1# 配置R2 R2(config)#router eigrp 100 R2(config-router)#network 192.168.12.0 0.0.0.255 R2(config-router)#network 192.168.23.0 0.0.0.255 R2(config-router)#end R2# 配置R3 R3(config)#router eigrp 100 R3(config-router)#network 192.168.23.0 0.0.0.255 R3(config-router)#network 192.168.2.0 0.0.0.255 R3(config-router)#end R3# 步骤5配置EIGRP手工汇总 配置R1 R1(config)#interface serial 1/0 R1(config-if)#ip summary-address eigrp 100 172.16.0.0 255.255.0.0 R1(config-if)#end R1# 步骤6检查EIGRP手工汇总 检查R1 R1#show ip route Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP a - application route - replicated route, % - next hop override, p - overrides from PfR Gateway of last resort is not set 172.16.0.0/16 is variably subnetted, 7 subnets, 3 masks D        172.16.0.0/16 is a summary, 00:01:38, Null0 C        172.16.1.0/24 is directly connected, Loopback1 L        172.16.1.1/32 is directly connected, Loopback1 C        172.16.2.0/24 is directly connected, Loopback2 L        172.16.2.1/32 is directly connected, Loopback2 C        172.16.3.0/24 is directly connected, Loopback3 L        172.16.3.1/32 is directly connected, Loopback3 192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks C        192.168.1.0/24 is directly connected, Ethernet0/0 L        192.168.1.254/32 is directly connected, Ethernet0/0 D     192.168.2.0/24 [90/2707456] via 192.168.12.2, 00:49:54, Serial1/0 192.168.12.0/24 is variably subnetted, 2 subnets, 2 masks C        192.168.12.0/24 is directly connected, Serial1/0 L        192.168.12.1/32 is directly connected, Serial1/0 D     192.168.23.0/24 [90/2681856] via 192.168.12.2, 00:50:33, Serial1/0 R1做完EIGRP手工汇总之后本地会产生一条指向Null0的汇总路由目的是防止环路。 检查R2 R2#show ip route Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP a - application route - replicated route, % - next hop override, p - overrides from PfR Gateway of last resort is not set D     172.16.0.0/16 [90/2297856] via 192.168.12.1, 00:02:57, Serial1/0 D     192.168.1.0/24 [90/2195456] via 192.168.12.1, 00:52:14, Serial1/0 D     192.168.2.0/24 [90/2195456] via 192.168.23.3, 00:51:12, Serial1/1 192.168.12.0/24 is variably subnetted, 2 subnets, 2 masks C        192.168.12.0/24 is directly connected, Serial1/0 L        192.168.12.2/32 is directly connected, Serial1/0 192.168.23.0/24 is variably subnetted, 2 subnets, 2 masks C        192.168.23.0/24 is directly connected, Serial1/1 L        192.168.23.2/32 is directly connected, Serial1/1 R1收到了汇总路由。 检查R3 R3#show ip route Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP a - application route - replicated route, % - next hop override, p - overrides from PfR Gateway of last resort is not set 172.16.0.0/16 is subnetted, 1 subnets D        172.16.0.0 [90/2809856] via 192.168.23.2, 00:03:26, Serial1/0 D     192.168.1.0/24 [90/2707456] via 192.168.23.2, 00:51:49, Serial1/0 192.168.2.0/24 is variably subnetted, 2 subnets, 2 masks C        192.168.2.0/24 is directly connected, Ethernet0/0 L        192.168.2.254/32 is directly connected, Ethernet0/0 D     192.168.12.0/24 [90/2681856] via 192.168.23.2, 00:51:49, Serial1/0 192.168.23.0/24 is variably subnetted, 2 subnets, 2 masks C        192.168.23.0/24 is directly connected, Serial1/0 L        192.168.23.3/32 is directly connected, Serial1/0 R3也收到了汇总路由。 实验14配置OSPF 实验目的 了解OSPF的运行原理掌握OSPF的配置方法 实验拓扑 实验需求 根据实验拓扑图完成设备的基本配置分别在R1、R2、R3上创建Loopback0接口IP地址分别是1.1.1.1/32、2.2.2/32、3.3.3.3/32Loopback0地址作为OSPF的Router-ID根据实验拓扑图的区域划分在R1、R2、R3上配置OSPF使得全网路由可达。 实验步骤 步骤1设备的基本配置 配置PC1 VPCS set pcname PC1   //设置主机名 PC1 ip 192.168.1.1/24 192.168.1.254    //设置IP地址与网关 配置PC2 VPCS set pcname PC2 PC2 ip 192.168.2.1/24 192.168.2.254 配置R1 Routerenable Router#configure terminal Router(config)#hostname R1 R1(config)#no ip domain-lookup R1(config)#line console 0 R1(config-line)#exec-timeout 0 0 R1(config-line)#logging synchronous R1(config-line)#exit R1(config)#interface loopback0 R1(config-if)#ip address 1.1.1.1 255.255.255.255 R1(config-if)#exit R1(config)#interface ethernet0/0 R1(config-if)#ip address 192.168.1.254 255.255.255.0 R1(config-if)#no shutdown R1(config-if)#exit R1(config)#interface serial1/0 R1(config-if)#ip address 192.168.12.1 255.255.255.0 R1(config-if)#no shutdown R1(config-if)#end R1# 配置R2 Routerenable Router#configure terminal Router(config)#hostname R2 R2(config)#no ip domain-lookup R2(config)#line console 0 R2(config-line)#exec-timeout 0 0 R2(config-line)#logging synchronous R2(config-line)#exit R2(config)#interface loopback0 R2(config-if)#ip address 2.2.2.2 255.255.255.255 R2(config-if)#exit R2(config)#interface serial1/0 R2(config-if)#ip address 192.168.12.2 255.255.255.0 R2(config-if)#no shutdown R2(config-if)#exit R2(config)#interface serial1/1 R2(config-if)#ip address 192.168.23.2 255.255.255.0 R2(config-if)#no shutdown R2(config-if)#end R2# 配置R3 Routerenable Router#configure terminal Router(config)#hostname R3 R3(config)#no ip domain-lookup R3(config)#line console 0 R3(config-line)#exec-timeout 0 0 R3(config-line)#logging synchronous R3(config-line)#exit R3(config)#interface loopback0 R3(config-if)#ip address 3.3.3.3 255.255.255.255 R3(config-if)#exit R3(config)#interface ethernet0/0 R3(config-if)#ip address 192.168.2.254 255.255.255.0 R3(config-if)#no shutdown R3(config-if)#exit R3(config)#interface serial1/0 R3(config-if)#ip address 192.168.23.3 255.255.255.0 R3(config-if)#no shutdown R3(config-if)#end R3# 步骤2检查设备接口状态 检查PC1 PC1 show ip NAME        : PC1[1] IP/MASK     : 192.168.1.1/24 GATEWAY     : 192.168.1.254 DNS         : MAC         : 00:50:79:66:68:04 LPORT       : 20000 RHOST:PORT  : 127.0.0.1:30000 MTU         : 1500 检查R1 R1#show ip interface brief Interface                  IP-Address      OK? Method Status                Protocol Ethernet0/0                192.168.1.254   YES manual up                    up      Ethernet0/1                unassigned      YES unset  administratively down down    Ethernet0/2                unassigned      YES unset  administratively down down    Ethernet0/3                unassigned      YES unset  administratively down down    Serial1/0                  192.168.12.1    YES manual up                    up      Serial1/1                  unassigned      YES unset  administratively down down    Serial1/2                  unassigned      YES unset  administratively down down    Serial1/3                  unassigned      YES unset  administratively down down    Loopback0                  1.1.1.1         YES manual up                    up         检查R2 R2#show ip interface brief Interface                  IP-Address      OK? Method Status                Protocol Ethernet0/0                unassigned      YES unset  administratively down down    Ethernet0/1                unassigned      YES unset  administratively down down    Ethernet0/2                unassigned      YES unset  administratively down down    Ethernet0/3                unassigned      YES unset  administratively down down    Serial1/0                  192.168.12.2    YES manual up                    up      Serial1/1                  192.168.23.2    YES manual up                    up      Serial1/2                  unassigned      YES unset  administratively down down    Serial1/3                  unassigned      YES unset  administratively down down Loopback0                  2.2.2.2         YES manual up                    up      检查R3 R3#show ip interface brief Interface                  IP-Address      OK? Method Status                Protocol Ethernet0/0                192.168.2.254   YES manual up                    up      Ethernet0/1                unassigned      YES unset  administratively down down    Ethernet0/2                unassigned      YES unset  administratively down down    Ethernet0/3                unassigned      YES unset  administratively down down    Serial1/0                  192.168.23.3    YES manual up                    up      Serial1/1                  unassigned      YES unset  administratively down down    Serial1/2                  unassigned      YES unset  administratively down down    Serial1/3                  unassigned      YES unset  administratively down down    Loopback0                  3.3.3.3         YES manual up                    up      检查PC2 PC2 show ip NAME        : PC2[1] IP/MASK     : 192.168.2.1/24 GATEWAY     : 192.168.2.254 DNS         : MAC         : 00:50:79:66:68:05 LPORT       : 20000 RHOST:PORT  : 127.0.0.1:30000 MTU         : 1500 步骤3测试直连网络的连通性 测试PC1跟网关的网络连通性 PC1 ping 192.168.1.254 84 bytes from 192.168.1.254 icmp_seq1 ttl255 time0.359 ms 84 bytes from 192.168.1.254 icmp_seq2 ttl255 time0.459 ms 84 bytes from 192.168.1.254 icmp_seq3 ttl255 time0.463 ms 84 bytes from 192.168.1.254 icmp_seq4 ttl255 time0.403 ms 84 bytes from 192.168.1.254 icmp_seq5 ttl255 time0.417 ms 测试R1跟R2之间的网络连通性 R1#ping 192.168.12.2 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.12.2, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 8/9/10 ms 测试R2跟R3之间的网络连通性 R2#ping 192.168.23.3 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.23.3, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 9/9/11 ms 测试PC2跟网关的网络连通性 PC2 ping 192.168.2.254 84 bytes from 192.168.2.254 icmp_seq1 ttl255 time0.469 ms 84 bytes from 192.168.2.254 icmp_seq2 ttl255 time0.484 ms 84 bytes from 192.168.2.254 icmp_seq3 ttl255 time0.518 ms 84 bytes from 192.168.2.254 icmp_seq4 ttl255 time0.400 ms ytes from 192.168.2.254 icmp_seq5 ttl255 time0.405 ms 步骤4配置OSPF 配置R1 R1(config)#router ospf 1 R1(config-router)#router-id 1.1.1.1 R1(config-router)#network 192.168.1.0 0.0.0.255 area 0 R1(config-router)#network 192.168.12.0 0.0.0.255 area 0 R1(config-router)#end R1# 配置R2 R2(config)#router ospf 1 R2(config-router)#router-id 2.2.2.2 R2(config-router)#network 192.168.12.0 0.0.0.255 area 0 R2(config-router)#network 192.168.23.0 0.0.0.255 area 1 R2(config-router)#end R2# 配置R3 R3(config)#router ospf 1 R3(config-router)#router-id 3.3.3.3 R3(config-router)#network 192.168.23.0 0.0.0.255 area 1 R3(config-router)#network 192.168.2.0 0.0.0.255 area 1 R3(config-router)#end R3# 实验检查 步骤1检查OSPF邻居 检查R1 R1#show ip ospf neighbor Neighbor ID     Pri   State           Dead Time   Address         Interface 2.2.2.2           0   FULL/  -        00:00:31    192.168.12.2    Serial1/0 Full是完全邻接状态是正常的状态。 检查R2 R2#show ip ospf neighbor Neighbor ID     Pri   State           Dead Time   Address         Interface 1.1.1.1           0   FULL/  -        00:00:31    192.168.12.1    Serial1/0 3.3.3.3           0   FULL/  -        00:00:39    192.168.23.3    Serial1/1 检查R3 R3#show ip ospf neighbor Neighbor ID     Pri   State           Dead Time   Address         Interface 0   FULL/  -        00:00:33    192.168.23.2    Serial1/0 步骤2检查OSPF路由 检查R1 R1#show ip route Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP a - application route - replicated route, % - next hop override, p - overrides from PfR Gateway of last resort is not set 1.0.0.0/32 is subnetted, 1 subnets C        1.1.1.1 is directly connected, Loopback0 192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks C        192.168.1.0/24 is directly connected, Ethernet0/0 L        192.168.1.254/32 is directly connected, Ethernet0/0 O IA  192.168.2.0/24 [110/138] via 192.168.12.2, 00:04:48, Serial1/0 192.168.12.0/24 is variably subnetted, 2 subnets, 2 masks C        192.168.12.0/24 is directly connected, Serial1/0 L        192.168.12.1/32 is directly connected, Serial1/0 O IA  192.168.23.0/24 [110/128] via 192.168.12.2, 00:06:10, Serial1/0 R1有两条O IA的路由O IA表示OSPF区域间的路由 因为R1所有接口都是属于Area 0192.168.2.0/24和192.168.23.0/24都是属于Area 1所以通过R2跨区域传递给R1之后就形成了O IA路由。 检查R2 R2#show ip route Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP a - application route - replicated route, % - next hop override, p - overrides from PfR Gateway of last resort is not set 2.0.0.0/32 is subnetted, 1 subnets C        2.2.2.2 is directly connected, Loopback0 O     192.168.1.0/24 [110/74] via 192.168.12.1, 00:09:55, Serial1/0 O     192.168.2.0/24 [110/74] via 192.168.23.3, 00:08:24, Serial1/1 192.168.12.0/24 is variably subnetted, 2 subnets, 2 masks C        192.168.12.0/24 is directly connected, Serial1/0 L        192.168.12.2/32 is directly connected, Serial1/0 192.168.23.0/24 is variably subnetted, 2 subnets, 2 masks C        192.168.23.0/24 is directly connected, Serial1/1 L        192.168.23.2/32 is directly connected, Serial1/1 因为R1既有接口属于Area 0也有接口属于Area 1 所以R1的路由表看到的都是O路由O表示OSPF区域内的路由。 实验15配置标准ACL 实验目的 理解标准ACL的应用掌握标准ACL的配置 实验拓扑 实验需求 根据实验拓扑图完成设备的基本配置配置静态路由使得全网路由可达在R3上部署ACL只允许192.168.1.0/24和192.168.2.0/24网段的用户访问PC3。 实验步骤 步骤1设备的基本配置 配置PC1 Routerenable Router#configure terminal Router(config)#hostname PC1 PC1(config)#no ip routing PC1(config)#ip default-gateway 192.168.1.254 PC1(config)#interface ethernet0/0 PC1(config-if)#ip address 192.168.1.1 255.255.255.0 PC1(config-if)#no shutdown PC1(config-if)#end PC1# 配置PC2 Routerenable Router#configure terminal Router(config)#hostname PC2 PC2(config)#no ip routing PC2(config)#ip default-gateway 192.168.2.254 PC2(config)#interface ethernet0/0 PC2(config-if)#ip address 192.168.2.1 255.255.255.0 PC2(config-if)#no shutdown PC2(config-if)#end PC2# 配置PC3 Routerenable Router#configure terminal Router(config)#hostname PC3 PC3(config)#no ip routing PC3(config)#ip default-gateway 192.168.3.254 PC3(config)#interface ethernet0/0 PC3(config-if)#ip address 192.168.3.1 255.255.255.0 PC3(config-if)#no shutdown PC3(config-if)#end PC3# 配置R1 Routerenable Router#configure terminal Router(config)#hostname R1 R1(config)#no ip domain-lookup R1(config)#line console 0 R1(config-line)#exec-timeout 0 0 R1(config-line)#logging synchronous R1(config-line)#exit R1(config)#interface ethernet0/0 R1(config-if)#ip address 192.168.1.254 255.255.255.0 R1(config-if)#no shutdown R1(config-if)#exit R1(config)#interface serial1/0 R1(config-if)#ip address 192.168.12.1 255.255.255.0 R1(config-if)#no shutdown R1(config-if)#end R1# 配置R2 Routerenable Router#configure terminal Router(config)#hostname R2 R2(config)#no ip domain-lookup R2(config)#line console 0 R2(config-line)#exec-timeout 0 0 R2(config-line)#logging synchronous R2(config-line)#exit R2(config)#interface serial1/0 R2(config-if)#ip address 192.168.12.2 255.255.255.0 R2(config-if)#no shutdown R2(config-if)#exit R2(config)#interface serial1/1 R2(config-if)#ip address 192.168.23.2 255.255.255.0 R2(config-if)#no shutdown R2(config-if)#exit R2(config)#interface ethernet0/0 R2(config-if)#ip address 192.168.2.254 255.255.255.0 R2(config-if)#no shutdown R2(config-if)#end R2# 配置R3 Routerenable Router#configure terminal Router(config)#hostname R3 R3(config)#no ip domain-lookup R3(config)#line console 0 R3(config-line)#exec-timeout 0 0 R3(config-line)#logging synchronous R3(config-line)#exit R3(config)#interface ethernet0/0 R3(config-if)#ip address 192.168.3.254 255.255.255.0 R3(config-if)#no shutdown R3(config-if)#exit R3(config)#interface serial1/0 R3(config-if)#ip address 192.168.23.3 255.255.255.0 R3(config-if)#no shutdown R3(config-if)#end R3# 步骤2配置静态路由 配置R1 R1(config)#ip route 192.168.2.0 255.255.255.0 192.168.12.2 R1(config)#ip route 192.168.3.0 255.255.255.0 192.168.12.2 R1(config)#ip route 192.168.23.0 255.255.255.0 192.168.12.2 配置R2 R2(config)#ip route 192.168.1.0 255.255.255.0 serial1/0 R2(config)#ip route 192.168.3.0 255.255.255.0 serial1/1 配置R3 R3(config)#ip route 192.168.1.0 255.255.255.0 192.168.23.2 R3(config)#ip route 192.168.2.0 255.255.255.0 192.168.23.2 R3(config)#ip route 192.168.12.0 255.255.255.0 192.168.23.2 这个时候任何一个网段都能访问PC3。 测试PC1访问PC3 PC1#ping 192.168.3.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.3.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 19/20/22 ms 测试PC2访问PC3 PC2#ping 192.168.3.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.3.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 10/10/11 ms 测试R1访问PC3 R1#ping 192.168.3.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.3.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 16/19/22 ms 步骤3配置标准ACL 配置R3 R3(config)#access-list 1 permit 192.168.1.0 0.0.0.255 R3(config)#access-list 1 permit 192.168.2.0 0.0.0.255 R3(config)#interface serial1/0 R3(config-if)#ip access-group 1 in R3(config-if)#end R3# 这个时候除了192.168.1.0/24和192.168.2.0/24网段其他网段就访问不了了。 测试PC1访问PC3 PC1#ping 192.168.3.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.3.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 19/20/22 ms 测试PC2访问PC3 PC2#ping 192.168.3.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.3.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 10/10/11 ms 测试R1访问PC3 R1#ping 192.168.3.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.3.1, timeout is 2 seconds: U.U.U Success rate is 0 percent (0/5) 被ACL拒绝了。 实验16配置扩展ACL 实验目的 理解扩展ACL的应用掌握扩展ACL的配置 实验拓扑 实验需求 根据实验拓扑图完成设备的基本配置配置EIGRP使得全网路由可达在R3上部署ACL只允许192.168.1.0/24网段的用户Ping PC3在R3上部署ACL只允许192.168.2.0/24网段的用户Telnet PC3。 实验步骤 步骤1设备的基本配置 配置PC1 Routerenable Router#configure terminal Router(config)#hostname PC1 PC1(config)#no ip routing PC1(config)#ip default-gateway 192.168.1.254 PC1(config)#interface ethernet0/0 PC1(config-if)#ip address 192.168.1.1 255.255.255.0 PC1(config-if)#no shutdown PC1(config-if)#end PC1# 配置PC2 Routerenable Router#configure terminal Router(config)#hostname PC2 PC2(config)#no ip routing PC2(config)#ip default-gateway 192.168.2.254 PC2(config)#interface ethernet0/0 PC2(config-if)#ip address 192.168.2.1 255.255.255.0 PC2(config-if)#no shutdown PC2(config-if)#end PC2# 配置PC3 Routerenable Router#configure terminal Router(config)#hostname PC3 PC3(config)#no ip routing PC3(config)#line vty 0 4 PC3(config-line)#password xmws PC3(config-line)#login PC3(config-line)#transport input telnet PC3(config-line)#exit PC3(config)#ip default-gateway 192.168.3.254 PC3(config)#interface ethernet0/0 PC3(config-if)#ip address 192.168.3.1 255.255.255.0 PC3(config-if)#no shutdown PC3(config-if)#end PC3# 配置R1 Routerenable Router#configure terminal Router(config)#hostname R1 R1(config)#no ip domain-lookup R1(config)#line console 0 R1(config-line)#exec-timeout 0 0 R1(config-line)#logging synchronous R1(config-line)#exit R1(config)#interface ethernet0/0 R1(config-if)#ip address 192.168.1.254 255.255.255.0 R1(config-if)#no shutdown R1(config-if)#exit R1(config)#interface serial1/0 R1(config-if)#ip address 192.168.12.1 255.255.255.0 R1(config-if)#no shutdown R1(config-if)#end R1# 配置R2 Routerenable Router#configure terminal Router(config)#hostname R2 R2(config)#no ip domain-lookup R2(config)#line console 0 R2(config-line)#exec-timeout 0 0 R2(config-line)#logging synchronous R2(config-line)#exit R2(config)#interface serial1/0 R2(config-if)#ip address 192.168.12.2 255.255.255.0 R2(config-if)#no shutdown R2(config-if)#exit R2(config)#interface serial1/1 R2(config-if)#ip address 192.168.23.2 255.255.255.0 R2(config-if)#no shutdown R2(config-if)#exit R2(config)#interface ethernet0/0 R2(config-if)#ip address 192.168.2.254 255.255.255.0 R2(config-if)#no shutdown R2(config-if)#end R2# 配置R3 Routerenable Router#configure terminal Router(config)#hostname R3 R3(config)#no ip domain-lookup R3(config)#line console 0 R3(config-line)#exec-timeout 0 0 R3(config-line)#logging synchronous R3(config-line)#exit R3(config)#interface ethernet0/0 R3(config-if)#ip address 192.168.3.254 255.255.255.0 R3(config-if)#no shutdown R3(config-if)#exit R3(config)#interface serial1/0 R3(config-if)#ip address 192.168.23.3 255.255.255.0 R3(config-if)#no shutdown R3(config-if)#end R3# 步骤2配置静态路由 配置R1 R1(config)#ip route 192.168.2.0 255.255.255.0 192.168.12.2 R1(config)#ip route 192.168.3.0 255.255.255.0 192.168.12.2 R1(config)#ip route 192.168.23.0 255.255.255.0 192.168.12.2 配置R2 R2(config)#ip route 192.168.1.0 255.255.255.0 serial1/0 R2(config)#ip route 192.168.3.0 255.255.255.0 serial1/1 配置R3 R3(config)#ip route 192.168.1.0 255.255.255.0 192.168.23.2 R3(config)#ip route 192.168.2.0 255.255.255.0 192.168.23.2 R3(config)#ip route 192.168.12.0 255.255.255.0 192.168.23.2 这个时候任何一个网段都能访问PC3。 测试PC1 ping PC3 PC1#ping 192.168.3.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.3.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 19/20/22 ms 测试PC1 telnet PC3 PC1#telnet 192.168.3.1 Trying 192.168.3.1 ... Open User Access Verification Password: PC3 测试PC2 ping PC3 PC2#ping 192.168.3.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.3.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 10/10/11 ms 测试PC2 telnet PC3 PC1#telnet 192.168.3.1 Trying 192.168.3.1 ... Open User Access Verification Password: PC3 步骤3配置扩展ACL 配置R3 R3(config)#access-list 101 permit icmp 192.168.1.0 0.0.0.255 host 192.168.3.1 R3(config)#access-list 101 permit tcp 192.168.2.0 0.0.0.255 host 192.168.3.1 eq 23 R3(config)#interface serial 1/0 R3(config-if)#ip access-group 101 in R3(config-if)#end R3# 这个时候只有PC1能Ping PC3PC2能Telnet PC3。 测试PC1 ping PC3 PC1#ping 192.168.3.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.3.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 19/20/22 ms 测试PC1 telnet PC3 PC1#telnet 192.168.3.1 Trying 192.168.3.1 ... % Destination unreachable; gateway or host down PC1# 测试PC2 ping PC3 PC2#ping 192.168.3.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.3.1, timeout is 2 seconds: U.U.U Success rate is 0 percent (0/5) 测试PC2 telnet PC3 PC1#telnet 192.168.3.1 Trying 192.168.3.1 ... Open User Access Verification Password: PC3 实验17配置静态NAT 实验目的 理解静态NAT的转换原理掌握静态NAT的配置方法 实验拓扑 实验需求 根据实验拓扑图完成设备的基本配置在R2上创建Loopback0接口IP地址是9.6.7/32模拟公网上的一台服务器在R1上配置静态NATPC1访问服务器使用12.1.1.11转换源地址在R1上配置静态NATPC2访问服务器使用12.1.1.12转换源地址。 实验步骤 步骤1设备的基本配置 配置PC1 Routerenable Router#configure terminal Router(config)#hostname PC1 PC1(config)#no ip routing PC1(config)#ip default-gateway 192.168.1.254 PC1(config)#interface ethernet0/0 PC1(config-if)#ip address 192.168.1.1 255.255.255.0 PC1(config-if)#no shutdown PC1(config-if)#end PC1# 配置PC2 Routerenable Router#configure terminal Router(config)#hostname PC2 PC2(config)#no ip routing PC2(config)#ip default-gateway 192.168.1.254 PC2(config)#interface ethernet0/0 PC2(config-if)#ip address 192.168.1.2 255.255.255.0 PC2(config-if)#no shutdown PC2(config-if)#end PC2# 配置SW1 Switchena Switch#conf t Switch(config)#no ip domain-lookup Switch(config)#line console 0 Switch(config-line)# logging s Switch(config-line)# exec-t 0 0 Switch(config-line)# exit Switch(config)#hostname SW1 SW1(config)#end SW1# 配置R1 Routerenable Router#configure terminal Router(config)#hostname R1 R1(config)#no ip domain-lookup R1(config)#line console 0 R1(config-line)#exec-timeout 0 0 R1(config-line)#logging synchronous R1(config-line)#exit R1(config)#interface ethernet0/0 R1(config-if)#ip address 192.168.1.254 255.255.255.0 R1(config-if)#no shutdown R1(config-if)#exit R1(config)#interface ethernet0/1 R1(config-if)#ip address 12.1.1.1 255.255.255.0 R1(config-if)#no shutdown R1(config-if)#end R1# 配置R2 Routerenable Router#configure terminal Router(config)#hostname R2 R2(config)#no ip domain-lookup R2(config)#line console 0 R2(config-line)#exec-timeout 0 0 R2(config-line)#logging synchronous R2(config-line)#exit R2(config)#interface loopback0 R2(config-if)#ip address 9.2.6.7 255.255.255.255 R2(config-if)#exit R2(config)#interface ethernet0/0 R2(config-if)#ip address 12.1.1.2 255.255.255.0 R2(config-if)#no shutdown R2(config-if)#end R2# 步骤2配置静态NAT 配置R1 R1(config)#ip nat inside source static 192.168.1.1 12.1.1.11   //配置静态转换 R1(config)#ip nat inside source static 192.168.1.2 12.1.1.12   //配置静态转换 R1(config)#interface ethernet 0/0 R1(config-if)#ip nat inside   //指定inside接口 R1(config-if)#exit R1(config)#interface ethernet 0/1 R1(config-if)#ip nat outside   //指定outside接口 R1(config-if)#exit R1(config)#ip route 0.0.0.0 0.0.0.0 12.1.1.2   //配置到达公网的默认路由 R1(config)#end R1# 检查R1的NAT表项 R1#show ip nat translations Pro Inside global      Inside local       Outside local      Outside global --- 12.1.1.11          192.168.1.1        ---                --- --- 12.1.1.12          192.168.1.2        ---                --- R1的NAT映射表创建了两个静态NAT条目。 测试PC1访问服务器 PC1#ping 9.2.6.7 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 9.2.6.7, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 1/1/1 ms 测试PC2访问服务器 PC2#ping 9.2.6.7 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 9.2.6.7, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 1/1/1 ms 检查R1的NAT表项 R1#sh ip nat translations Pro Inside global      Inside local       Outside local      Outside global icmp 12.1.1.11:4       192.168.1.1:4      9.2.6.7:4          9.2.6.7:4 --- 12.1.1.11          192.168.1.1        ---                --- icmp 12.1.1.12:2       192.168.1.2:2      9.2.6.7:2          9.2.6.7:2 --- 12.1.1.12          192.168.1.2        ---                --- 实验18配置动态NAT 实验目的 理解动态NAT的转换原理掌握动态NAT的配置方法 实验拓扑 实验需求 根据实验拓扑图完成设备的基本配置在R2上创建Loopback0接口IP地址是9.6.7/32模拟公网上的一台服务器在R1上配置动态NAT地址池范围为12.1.1.11~12.1.1.20使得PC1和PC2能够访问公网服务器。 实验步骤 步骤1设备的基本配置 配置PC1 Routerenable Router#configure terminal Router(config)#hostname PC1 PC1(config)#no ip routing PC1(config)#ip default-gateway 192.168.1.254 PC1(config)#interface ethernet0/0 PC1(config-if)#ip address 192.168.1.1 255.255.255.0 PC1(config-if)#no shutdown PC1(config-if)#end PC1# 配置PC2 Routerenable Router#configure terminal Router(config)#hostname PC2 PC2(config)#no ip routing PC2(config)#ip default-gateway 192.168.1.254 PC2(config)#interface ethernet0/0 PC2(config-if)#ip address 192.168.1.2 255.255.255.0 PC2(config-if)#no shutdown PC2(config-if)#end PC2# 配置SW1 Switchena Switch#conf t Switch(config)#no ip domain-lookup Switch(config)#line console 0 Switch(config-line)# logging s Switch(config-line)# exec-t 0 0 Switch(config-line)# exit Switch(config)#hostname SW1 SW1(config)#end SW1# 配置R1 Routerenable Router#configure terminal Router(config)#hostname R1 R1(config)#no ip domain-lookup R1(config)#line console 0 R1(config-line)#exec-timeout 0 0 R1(config-line)#logging synchronous R1(config-line)#exit R1(config)#interface ethernet0/0 R1(config-if)#ip address 192.168.1.254 255.255.255.0 R1(config-if)#no shutdown R1(config-if)#exit R1(config)#interface ethernet0/1 R1(config-if)#ip address 12.1.1.1 255.255.255.0 R1(config-if)#no shutdown R1(config-if)#end R1# 配置R2 Routerenable Router#configure terminal Router(config)#hostname R2 R2(config)#no ip domain-lookup R2(config)#line console 0 R2(config-line)#exec-timeout 0 0 R2(config-line)#logging synchronous R2(config-line)#exit R2(config)#interface loopback0 R2(config-if)#ip address 9.2.6.7 255.255.255.255 R2(config-if)#exit R2(config)#interface ethernet0/0 R2(config-if)#ip address 12.1.1.2 255.255.255.0 R2(config-if)#no shutdown R2(config-if)#end R2# 步骤2配置动态NAT 配置R1 R1(config)#ip nat pool xmws 12.1.1.11 12.1.1.20 netmask 255.255.255.0   //创建地址池 R1(config)#access-list 1 permit 192.168.1.0 0.0.0.255   //通过ACL定义哪些子网能做NAT R1(config)#ip nat inside source list 1 pool xmws   //关联ALC和地址池 R1(config)#interface ethernet 0/0 R1(config-if)#ip nat inside   //指定inside接口 R1(config-if)#exit R1(config)#interface ethernet 0/1 R1(config-if)#ip nat outside   //指定outside接口 R1(config-if)#exit R1(config)#ip route 0.0.0.0 0.0.0.0 12.1.1.2   //配置到达公网的默认路由 测试PC1访问服务器 PC1#ping 9.2.6.7 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 9.2.6.7, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 1/1/1 ms 测试PC2访问服务器 PC2#ping 9.2.6.7 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 9.2.6.7, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 1/1/1 ms 检查R1的NAT表项 R1#show ip nat translations Pro Inside global      Inside local       Outside local      Outside global icmp 12.1.1.12:6       192.168.1.1:6      9.2.6.7:6          9.2.6.7:6 --- 12.1.1.12          192.168.1.1        ---                --- icmp 12.1.1.13:4       192.168.1.2:4      9.2.6.7:4          9.2.6.7:4 --- 12.1.1.13          192.168.1.2        ---                --- 实验19配置PAT 实验目的 理解PAT的转换原理掌握PAT的配置方法 实验拓扑 实验需求 根据实验拓扑图完成设备的基本配置在R2上创建Loopback0接口IP地址是9.6.7/32模拟公网上的一台服务器在R1上配置PAT使得PC1和PC2能够复用E0/1接口地址访问公网服务器。 实验步骤 步骤1设备的基本配置 配置PC1 Routerenable Router#configure terminal Router(config)#hostname PC1 PC1(config)#no ip routing PC1(config)#ip default-gateway 192.168.1.254 PC1(config)#interface ethernet0/0 PC1(config-if)#ip address 192.168.1.1 255.255.255.0 PC1(config-if)#no shutdown PC1(config-if)#end PC1# 配置PC2 Routerenable Router#configure terminal Router(config)#hostname PC2 PC2(config)#no ip routing PC2(config)#ip default-gateway 192.168.1.254 PC2(config)#interface ethernet0/0 PC2(config-if)#ip address 192.168.1.2 255.255.255.0 PC2(config-if)#no shutdown PC2(config-if)#end PC2# 配置SW1 Switchena Switch#conf t Switch(config)#no ip domain-lookup Switch(config)#line console 0 Switch(config-line)# logging s Switch(config-line)# exec-t 0 0 Switch(config-line)# exit Switch(config)#hostname SW1 SW1(config)#end SW1# 配置R1 Routerenable Router#configure terminal Router(config)#hostname R1 R1(config)#no ip domain-lookup R1(config)#line console 0 R1(config-line)#exec-timeout 0 0 R1(config-line)#logging synchronous R1(config-line)#exit R1(config)#interface ethernet0/0 R1(config-if)#ip address 192.168.1.254 255.255.255.0 R1(config-if)#no shutdown R1(config-if)#exit R1(config)#interface ethernet0/1 R1(config-if)#ip address 12.1.1.1 255.255.255.0 R1(config-if)#no shutdown R1(config-if)#end R1# 配置R2 Routerenable Router#configure terminal Router(config)#hostname R2 R2(config)#no ip domain-lookup R2(config)#line console 0 R2(config-line)#exec-timeout 0 0 R2(config-line)#logging synchronous R2(config-line)#exit R2(config)#interface loopback0 R2(config-if)#ip address 9.2.6.7 255.255.255.255 R2(config-if)#exit R2(config)#interface ethernet0/0 R2(config-if)#ip address 12.1.1.2 255.255.255.0 R2(config-if)#no shutdown R2(config-if)#end R2# 步骤2配置PAT 配置R1 R1(config)#access-list 1 permit 192.168.1.0 0.0.0.255   //定义ACL R1(config)#ip nat inside source list 1 interface ethernet 0/1 overload   //关联ACL和outside接口 R1(config)#interface ethernet 0/0 R1(config-if)#ip nat inside   //指定inside接口 R1(config-if)#exit R1(config)#interface ethernet 0/1 R1(config-if)#ip nat outside   //指定outside接口 R1(config-if)#exit R1(config)#ip route 0.0.0.0 0.0.0.0 12.1.1.2   //配置到达公网的默认路由 测试PC1访问服务器 PC1#ping 9.2.6.7 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 9.2.6.7, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 1/1/1 ms 测试PC2访问服务器 PC2#ping 9.2.6.7 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 9.2.6.7, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 1/1/1 ms 检查R1的NAT表项 R1#show ip nat translations Pro Inside global      Inside local       Outside local      Outside global icmp 12.1.1.1:7        192.168.1.1:7      9.2.6.7:7          9.2.6.7:7 icmp 12.1.1.1:5        192.168.1.2:5      9.2.6.7:5          9.2.6.7:5 Inside global都是12.1.1.1通过端口号区分不同的主机。 实验20配置静态PAT 实验目的 理解静态PAT的转换原理掌握静态PAT的配置方法 实验拓扑 实验需求 根据实验拓扑图完成设备的基本配置在R2上创建Loopback0接口IP地址是9.6.7/32模拟公网上的一台服务器在R1上配置静态PAT使得Internet用户能够访问PC1的Telnet服务在R1上配置静态PAT使得Internet用户能够访问PC2的Web服务。 实验步骤 步骤1设备的基本配置 配置PC1 Routerenable Router#configure terminal Router(config)#hostname PC1 PC1(config)#line vty 0 4   //进入VTY PC1(config-line)#password xmws   //设置VTY密码 PC1(config-line)#login   //启用密码 PC1(config-line)#transport input telnet   //允许Telnet远程登录 PC1(config-line)#exit PC1(config)#no ip routing PC1(config)#ip default-gateway 192.168.1.254 PC1(config)#interface ethernet0/0 PC1(config-if)#ip address 192.168.1.1 255.255.255.0 PC1(config-if)#no shutdown PC1(config-if)#end PC1# 配置PC2 Routerenable Router#configure terminal Router(config)#hostname PC2 PC2(config)#no ip routing PC2(config)#ip http server   //开启HTTP服务 PC2(config)#ip default-gateway 192.168.1.254 PC2(config)#interface ethernet0/0 PC2(config-if)#ip address 192.168.1.2 255.255.255.0 PC2(config-if)#no shutdown PC2(config-if)#end PC2# 配置SW1 Switchena Switch#conf t Switch(config)#no ip domain-lookup Switch(config)#line console 0 Switch(config-line)# logging s Switch(config-line)# exec-t 0 0 Switch(config-line)# exit Switch(config)#hostname SW1 SW1(config)#end SW1# 配置R1 Routerenable Router#configure terminal Router(config)#hostname R1 R1(config)#no ip domain-lookup R1(config)#line console 0 R1(config-line)#exec-timeout 0 0 R1(config-line)#logging synchronous R1(config-line)#exit R1(config)#interface ethernet0/0 R1(config-if)#ip address 192.168.1.254 255.255.255.0 R1(config-if)#no shutdown R1(config-if)#exit R1(config)#interface ethernet0/1 R1(config-if)#ip address 12.1.1.1 255.255.255.0 R1(config-if)#no shutdown R1(config-if)#end R1# 配置R2 Routerenable Router#configure terminal Router(config)#hostname R2 R2(config)#no ip domain-lookup R2(config)#line console 0 R2(config-line)#exec-timeout 0 0 R2(config-line)#logging synchronous R2(config-line)#exit R2(config)#interface loopback0 R2(config-if)#ip address 9.2.6.7 255.255.255.255 R2(config-if)#exit R2(config)#interface ethernet0/0 R2(config-if)#ip address 12.1.1.2 255.255.255.0 R2(config-if)#no shutdown R2(config-if)#end R2# 步骤2配置动态NAT 配置R1 R1(config)#ip nat inside source static tcp 192.168.1.1 23 12.1.1.1 23   //创建静态映射 R1(config)#ip nat inside source static tcp 192.168.1.2 80 12.1.1.1 80   //创建静态映射 R1(config)#interface ethernet 0/0 R1(config-if)#ip nat inside   //指定inside接口 R1(config-if)#exit R1(config)#interface ethernet 0/1 R1(config-if)#ip nat outside   //指定outside接口 R1(config-if)#exit R1(config)#ip route 0.0.0.0 0.0.0.0 12.1.1.2   //定义到达公网的默认路由 检查R1的NAT表项 R1#show ip nat translations Pro Inside global      Inside local       Outside local      Outside global tcp 12.1.1.1:23        192.168.1.1:23     ---                --- tcp 12.1.1.1:80        192.168.1.2:80     ---                --- 因为是静态PAT所以即使没有流量NAT转换表也有条目。 在R2上测试Telnet服务 R2#telnet 12.1.1.1 Trying 12.1.1.1 ... Open User Access Verification Password: PC1 PC1的Telnet服务发布成功。 在R2上测试Web服务 R2#telnet 12.1.1.1 80 Trying 12.1.1.1, 80 ... Open PC2的Web服务发布成功。 检查R1的NAT表项 R1#show ip nat translations Pro Inside global      Inside local       Outside local      Outside global tcp 12.1.1.1:23        192.168.1.1:23     12.1.1.2:64490     12.1.1.2:64490 tcp 12.1.1.1:23        192.168.1.1:23     ---                --- tcp 12.1.1.1:80        192.168.1.2:80     12.1.1.2:36455     12.1.1.2:36455 tcp 12.1.1.1:80        192.168.1.2:80     ---                --- 有流量触发之后NAT转换表多出两个动态条目。 实验21配置PAP单向认证 实验目的 理解PAP认证的原理掌握PAP认证的配置 实验拓扑 实验需求 根据实验拓扑图完成设备的基本配置在R1和R2之间做PAP单向认证R1是认证方R2是被认证方。 实验步骤 步骤1设备的基本配置 配置R1 Routerenable Router#configure terminal Router(config)#hostname R1 R1(config)#no ip domain-lookup R1(config)#line console 0 R1(config-line)#exec-timeout 0 0 R1(config-line)#logging synchronous R1(config-line)#exit R1(config)#interface serial1/0 R1(config-if)#ip address 12.1.1.1 255.255.255.0 R1(config-if)#no shutdown R1(config-if)#end R1# 配置R2 Routerenable Router#configure terminal Router(config)#hostname R2 R2(config)#no ip domain-lookup R2(config)#line console 0 R2(config-line)#exec-timeout 0 0 R2(config-line)#logging synchronous R2(config-line)#exit R2(config)#interface serial1/0 R2(config-if)#ip address 12.1.1.2 255.255.255.0 R2(config-if)#no shutdown R2(config-if)#end R2# 步骤2配置PAP认证 配置R1 R1(config)#interface serial 1/0 R1(config-if)#encapsulation ppp   //封装PPP R1(config-if)#ppp authentication pap   //启用PAP认证 R1(config-if)#exit R1(config)#username xmws password wisdom   //创建用户名和密码 R1(config)#end R1# 配置R2 R2(config)#interface serial 1/0 R2(config-if)#encapsulation ppp   //封装PPP R2(config-if)#ppp pap sent-username xmws password wisdom   //PAP发送的用户名和密码 R2(config-if)#end R2# 步骤3检查PAP认证 检查R1 R1#show ip interface brief Interface                  IP-Address      OK? Method Status                Protocol Ethernet0/0                unassigned      YES unset  administratively down down    Ethernet0/1                unassigned      YES unset  administratively down down    Ethernet0/2                unassigned      YES unset  administratively down down    Ethernet0/3                unassigned      YES unset  administratively down down    Serial1/0                  12.1.1.1        YES manual up                    up      Serial1/1                  unassigned      YES unset  administratively down down    Serial1/2                  unassigned      YES unset  administratively down down    Serial1/3                  unassigned      YES unset  administratively down down 检查R2 R2#show ip interface brief Interface                  IP-Address      OK? Method Status                Protocol Ethernet0/0                unassigned      YES unset  administratively down down    Ethernet0/1                unassigned      YES unset  administratively down down    Ethernet0/2                unassigned      YES unset  administratively down down    Ethernet0/3                unassigned      YES unset  administratively down down    Serial1/0                  12.1.1.2        YES manual up                    up      Serial1/1                  unassigned      YES unset  administratively down down    Serial1/2                  unassigned      YES unset  administratively down down    Serial1/3                  unassigned      YES unset  administratively down down 实验22配置PAP双向认证 实验目的 理解PAP认证的原理掌握PAP认证的配置 实验拓扑 实验需求 根据实验拓扑图完成设备的基本配置在R1和R2之间做PAP的双向认证。 实验步骤 步骤1设备的基本配置 配置R1 Routerenable Router#configure terminal Router(config)#hostname R1 R1(config)#no ip domain-lookup R1(config)#line console 0 R1(config-line)#exec-timeout 0 0 R1(config-line)#logging synchronous R1(config-line)#exit R1(config)#interface serial1/0 R1(config-if)#ip address 12.1.1.1 255.255.255.0 R1(config-if)#no shutdown R1(config-if)#end R1# 配置R2 Routerenable Router#configure terminal Router(config)#hostname R2 R2(config)#no ip domain-lookup R2(config)#line console 0 R2(config-line)#exec-timeout 0 0 R2(config-line)#logging synchronous R2(config-line)#exit R2(config)#interface serial1/0 R2(config-if)#ip address 12.1.1.2 255.255.255.0 R2(config-if)#no shutdown R2(config-if)#end R2# 步骤2配置PAP认证 配置R1 R1(config)#interface serial 1/0 R1(config-if)#encapsulation ppp   //封装PPP R1(config-if)#ppp authentication pap   //启用PAP认证 R1(config-if)#ppp pap sent-username R1 password xmws   //PAP发送的用户名和密码 R1(config-if)#exit R1(config)#username R2 password xmws   //创建用户名和密码 R1(config)#end R1# 配置R2 R2(config)#interface serial 1/0 R2(config-if)#encapsulation ppp   //封装PPP R2(config-if)#ppp authentication pap   //启用PAP认证 R2(config-if)#ppp pap sent-username R2 password xmws   //PAP发送的用户名和密码 R2(config-if)#exit R2(config)#username R1 password xmws   //创建用户名和密码 R2(config)#end R2# 步骤3检查PAP认证 检查R1 R1#show ip interface brief Interface                  IP-Address      OK? Method Status                Protocol Ethernet0/0                unassigned      YES unset  administratively down down    Ethernet0/1                unassigned      YES unset  administratively down down     Ethernet0/2                unassigned      YES unset  administratively down down    Ethernet0/3                unassigned      YES unset  administratively down down    Serial1/0                  12.1.1.1        YES manual up                    up       Serial1/1                  unassigned      YES unset  administratively down down    Serial1/2                  unassigned      YES unset  administratively down down    Serial1/3                  unassigned      YES unset  administratively down down     检查R2 R2#show ip interface brief Interface                  IP-Address      OK? Method Status                Protocol Ethernet0/0                unassigned      YES unset  administratively down down    Ethernet0/1                unassigned      YES unset  administratively down down    Ethernet0/2                unassigned      YES unset  administratively down down    Ethernet0/3                unassigned      YES unset  administratively down down    Serial1/0                  12.1.1.2        YES manual up                    up      Serial1/1                  unassigned      YES unset  administratively down down    Serial1/2                  unassigned      YES unset  administratively down down    Serial1/3                  unassigned      YES unset  administratively down down 实验23配置CHAP单向认证 实验目的 理解CHAP认证的原理掌握CHAP认证的配置 实验拓扑 实验需求 根据实验拓扑图完成设备的基本配置在R1和R2之间做CHAP单向认证R1是认证方R2是被认证方。 实验步骤 步骤1设备的基本配置 配置R1 Routerenable Router#configure terminal Router(config)#hostname R1 R1(config)#no ip domain-lookup R1(config)#line console 0 R1(config-line)#exec-timeout 0 0 R1(config-line)#logging synchronous R1(config-line)#exit R1(config)#interface serial1/0 R1(config-if)#ip address 12.1.1.1 255.255.255.0 R1(config-if)#no shutdown R1(config-if)#end R1# 配置R2 Routerenable Router#configure terminal Router(config)#hostname R2 R2(config)#no ip domain-lookup R2(config)#line console 0 R2(config-line)#exec-timeout 0 0 R2(config-line)#logging synchronous R2(config-line)#exit R2(config)#interface serial1/0 R2(config-if)#ip address 12.1.1.2 255.255.255.0 R2(config-if)#no shutdown R2(config-if)#end R2# 步骤2配置CHAP认证 配置R1 R1(config)#interface serial 1/0 R1(config-if)#encapsulation ppp   //封装PPP R1(config-if)#ppp authentication chap   //启用CHAP认证 R1(config-if)#exit R1(config)#username xmws password wisdom   //创建用户名和密码 R1(config)#end R1# 配置R2 R2(config)#interface serial 1/0 R2(config-if)#encapsulation ppp   //封装PPP R2(config-if)#ppp chap hostname xmws   //CHAP认证的用户名 R2(config-if)#ppp chap password wisdom   //CHAP认证的密码 R2(config-if)#end R2# 步骤3检查:CHAP认证 检查R1 R1#show ip interface brief Interface                  IP-Address      OK? Method Status                Protocol Ethernet0/0                unassigned      YES unset  administratively down down    Ethernet0/1                unassigned      YES unset  administratively down down    Ethernet0/2                unassigned      YES unset  administratively down down    Ethernet0/3                unassigned      YES unset  administratively down down    Serial1/0                  12.1.1.1        YES manual up                    up      Serial1/1                  unassigned      YES unset  administratively down down    Serial1/2                  unassigned      YES unset  administratively down down    Serial1/3                  unassigned      YES unset  administratively down down    检查R2 R2#show ip interface brief Interface                  IP-Address      OK? Method Status                Protocol Ethernet0/0                unassigned      YES unset  administratively down down    Ethernet0/1                unassigned      YES unset  administratively down down    Ethernet0/2                unassigned      YES unset  administratively down down    Ethernet0/3                unassigned      YES unset  administratively down down    Serial1/0                  12.1.1.2        YES manual up                    up      Serial1/1                  unassigned      YES unset  administratively down down    Serial1/2                  unassigned      YES unset  administratively down down    Serial1/3                  unassigned      YES unset  administratively down down 实验24配置CHAP双向认证 实验目的 理解CHAP认证的原理掌握CHAP认证的配置 实验拓扑 实验需求 根据实验拓扑图完成设备的基本配置在R1和R2之间做CHAP的双向认证。 实验步骤 步骤1设备的基本配置 配置R1 Routerenable Router#configure terminal Router(config)#hostname R1 R1(config)#no ip domain-lookup R1(config)#line console 0 R1(config-line)#exec-timeout 0 0 R1(config-line)#logging synchronous R1(config-line)#exit R1(config)#interface serial1/0 R1(config-if)#ip address 12.1.1.1 255.255.255.0 R1(config-if)#no shutdown R1(config-if)#end R1# 配置R2 Routerenable Router#configure terminal Router(config)#hostname R2 R2(config)#no ip domain-lookup R2(config)#line console 0 R2(config-line)#exec-timeout 0 0 R2(config-line)#logging synchronous R2(config-line)#exit R2(config)#interface serial1/0 R2(config-if)#ip address 12.1.1.2 255.255.255.0 R2(config-if)#no shutdown R2(config-if)#end R2# 步骤2配置CHAP认证 配置R1 R1(config)#interface serial 1/0 R1(config-if)#encapsulation ppp   //封装PPP R1(config-if)#ppp authentication chap   //启用CHAP认证 R1(config-if)#exit R1(config)#username R2 password xmws   //创建用户名和密码 R1(config)#end R1# 配置R2 R2(config)#interface serial 1/0 R2(config-if)#encapsulation ppp   //封装PPP R2(config-if)#ppp authentication chap   //启用CHAP认证 R2(config-if)#exit R2(config)#username R1 password xmws   //创建用户名和密码 R2(config-if)#end R2# 步骤3检查CHAP认证 检查R1 R1#show ip interface brief Interface                  IP-Address      OK? Method Status                Protocol Ethernet0/0                unassigned      YES unset  administratively down down    Ethernet0/1                unassigned      YES unset  administratively down down    Ethernet0/2                unassigned      YES unset  administratively down down    Ethernet0/3                unassigned      YES unset  administratively down down    Serial1/0                  12.1.1.1        YES manual up                    up      Serial1/1                  unassigned      YES unset  administratively down down    Serial1/2                  unassigned      YES unset  administratively down down    Serial1/3                  unassigned      YES unset  administratively down down    检查R2 R2#show ip interface brief Interface                  IP-Address      OK? Method Status                Protocol Ethernet0/0                unassigned      YES unset  administratively down down    Ethernet0/1                unassigned      YES unset  administratively down down    Ethernet0/2                unassigned      YES unset  administratively down down    Ethernet0/3                unassigned      YES unset  administratively down down    Serial1/0                  12.1.1.2        YES manual up                    up      Serial1/1                  unassigned      YES unset  administratively down down    Serial1/2                  unassigned      YES unset  administratively down down    Serial1/3                  unassigned      YES unset  administratively down down 实验25配置PPPoE 实验目的 理解PPPoE的原理掌握PPPoE的配置 实验拓扑 实验需求 根据实验拓扑图完成设备的基本配置R1是PPPoE服务器R2是PPPoE客户端R2去R1认证并获得IP地址。 实验步骤 步骤1设备的基本配置 配置PC1 VPCS set pcname PC1   //设置主机名 PC1 ip 192.168.1.1/24 192.168.1.254   //设置IP地址与默认网关 配置PC2 VPCS set pcname PC2   //设置主机名 PC2 ip 192.168.2.1/24 192.168.2.254   //设置IP地址与默认网关 配置R1 Routerenable Router#configure terminal Router(config)#hostname R1 R1(config)#no ip domain-lookup R1(config)#line console 0 R1(config-line)#exec-timeout 0 0 R1(config-line)#logging synchronous R1(config-line)#end R1# 配置R2 Routerenable Router#configure terminal Router(config)#hostname R2 R2(config)#no ip domain-lookup R2(config)#line console 0 R2(config-line)#exec-timeout 0 0 R2(config-line)#logging synchronous R2(config-line)#exit R2(config)#interface Eth0/1 R2(config-if)#ip address 192.168.1.254 255.255.255.0 R2(config-if)#no shutdown R2(config-if)#exit R2(config)#interface Eth0/2 R2(config-if)#ip address 192.168.2.254 255.255.255.0 R2(config-if)#no shutdown R2(config-if)#end R2# 步骤2配置PPPoE 配置R1 R1(config)#username xmws password wisdom R1(config)#bba-group pppoe ToR2 R1(config-bba-group)#virtual-template 1 R1(config-bba-group)#exit R1(config)#interface ethernet0/0 R1(config-if)#pppoe enable group ToR2 R1(config-if)#no shutdown R1(config-if)#exit R1(config)#interface virtual-template 1 R1(config-if)#ip address 12.1.1.1 255.255.255.252 R1(config-if)#ip mtu 1492 R1(config-if)#peer default ip address pool PoR2 R1(config-if)#ppp authentication chap R1(config-if)#exit R1(config)#ip local pool PoR2 12.1.1.2 R1(config)#end R1# 配置R2 R2(config)#interface ethernet0/0 R2(config-if)#pppoe enable R2(config-if)#pppoe-client dial-pool-number 1 R2(config-if)#no shutdown R2(config-if)#exit R2(config)#interface dialer 1   R2(config-if)#ip mtu 1492 R2(config-if)#dialer pool 1 R2(config-if)#ip address negotiated R2(config-if)#encapsulation ppp R2(config-if)#ppp ipcp route default R2(config-if)#ppp chap hostname xmws R2(config-if)#ppp chap password wisdom R2(config-if)#end R2# 步骤3检查PPPoE 检查R2 R2#show ip interface brief Interface                  IP-Address      OK? Method Status                Protocol Ethernet0/0                unassigned      YES unset  up                    up      Ethernet0/1                192.168.1.254   YES manual up                    up      Ethernet0/2                192.168.2.254   YES manual up                    up       Ethernet0/3                unassigned      YES unset  administratively down down    Serial1/0                  unassigned      YES unset  administratively down down    Serial1/1                  unassigned      YES unset  administratively down down     Serial1/2                  unassigned      YES unset  administratively down down    Serial1/3                  unassigned      YES unset  administratively down down    Dialer1                    12.1.1.2        YES IPCP   up                    up      Virtual-Access1            unassigned      YES unset  up                    up      Virtual-Access2            unassigned      YES unset  up                    up  R2#show ip route Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP a - application route - replicated route, % - next hop override, p - overrides from PfR Gateway of last resort is 12.1.1.1 to network 0.0.0.0 S*    0.0.0.0/0 [1/0] via 12.1.1.1 12.0.0.0/32 is subnetted, 2 subnets C        12.1.1.1 is directly connected, Dialer1 C        12.1.1.2 is directly connected, Dialer1 192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks C        192.168.1.0/24 is directly connected, Ethernet0/1 L        192.168.1.254/32 is directly connected, Ethernet0/1 192.168.2.0/24 is variably subnetted, 2 subnets, 2 masks C        192.168.2.0/24 is directly connected, Ethernet0/2 L        192.168.2.254/32 is directly connected, Ethernet0/2 R2#show interfaces dialer 1 Dialer1 is up, line protocol is up (spoofing) Hardware is Unknown Internet address is 12.1.1.2/32 MTU 1492 bytes, BW 56 Kbit/sec, DLY 20000 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation PPP, LCP Closed, loopback not set Keepalive set (10 sec) DTR is pulsed for 1 seconds on reset Interface is bound to Vi2 Last input never, output never, output hang never Last clearing of show interface counters 00:20:57 Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0 Queueing strategy: fifo Output queue: 0/40 (size/max) 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 0 bits/sec, 0 packets/sec 6 packets input, 84 bytes 250 packets output, 3500 bytes Bound to: Virtual-Access2 is up, line protocol is up Hardware is Virtual Access interface MTU 1492 bytes, BW 56 Kbit/sec, DLY 20000 usec, reliability 255/255, txload 1/255, rxload 1/255 --More-- 实验26配置IPv6地址与路由 实验目的 掌握IPv6地址的配置方法掌握IPv6静态路由的配置方法掌握IPv6默认路由的配置方法​​​​​​​ 实验拓扑 实验需求 根据实验拓扑图完成设备的基本配置在R2上配置IPv6静态路由使得R2能够访问R1的Loopback0在R1上配置IPv6默认路由使得R1能够访问R2的Loopback0。 实验步骤 步骤1设备的基本配置 配置R1 Routerenable Router#configure terminal Router(config)#hostname R1 R1(config)#no ip domain-lookup R1(config)#line console 0 R1(config-line)#exec-timeout 0 0 R1(config-line)#logging synchronous R1(config-line)#exit R1(config)#interface loopback 0 R1(config-if)#ipv6 address 2001:9267:1:1::1/64 R1(config-if)#exit R1(config)#interface ethernet0/0 R1(config-if)#ipv6 address 2001:9267:12::1/64 R1(config-if)#no shutdown R1(config-if)#end R1# 配置R2 Routerenable Router#configure terminal Router(config)#hostname R2 R2(config)#no ip domain-lookup R2(config)#line console 0 R2(config-line)#exec-timeout 0 0 R2(config-line)#logging synchronous R2(config-line)#exit R2(config)#interface loopback 0 R2(config-if)#ipv6 address 2001:9267:2:2::2/64 R2(config-if)#exit R2(config)#interface ethernet0/0 R2(config-if)#ipv6 address 2001:9267:12::2/64 R2(config-if)#no shutdown R2(config-if)#end R2# 步骤2配置IPv6静态路由 配置R1 R1(config)#ipv6 route ::/0 2001:9267:12::2 R1(config)#end R1# 配置R2 R2(config)#ipv6 route 2001:9267:1:1::/64 2001:9267:12::1 R2(config)#end R2# 步骤3检查IPv6静态路由 检查R1 R1#show ipv6 route IPv6 Routing Table - default - 6 entries Codes: C - Connected, L - Local, S - Static, U - Per-user Static route B - BGP, HA - Home Agent, MR - Mobile Router, R - RIP H - NHRP, I1 - ISIS L1, I2 - ISIS L2, IA - ISIS interarea IS - ISIS summary, D - EIGRP, EX - EIGRP external, NM - NEMO ND - ND Default, NDp - ND Prefix, DCE - Destination, NDr - Redirect RL - RPL, O - OSPF Intra, OI - OSPF Inter, OE1 - OSPF ext 1 OE2 - OSPF ext 2, ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2 la - LISP alt, lr - LISP site-registrations, ld - LISP dyn-eid lA - LISP away, a - Application S   ::/0 [1/0] via 2001:9267:12::2 C   2001:9267:1:1::/64 [0/0] via Loopback0, directly connected L   2001:9267:1:1::1/128 [0/0] via Loopback0, receive C   2001:9267:12::/64 [0/0] via Ethernet0/0, directly connected L   2001:9267:12::1/128 [0/0] via Ethernet0/0, receive L   FF00::/8 [0/0] via Null0, receive 检查R2 R2#show ipv6 route IPv6 Routing Table - default - 6 entries Codes: C - Connected, L - Local, S - Static, U - Per-user Static route B - BGP, HA - Home Agent, MR - Mobile Router, R - RIP H - NHRP, I1 - ISIS L1, I2 - ISIS L2, IA - ISIS interarea IS - ISIS summary, D - EIGRP, EX - EIGRP external, NM - NEMO ND - ND Default, NDp - ND Prefix, DCE - Destination, NDr - Redirect RL - RPL, O - OSPF Intra, OI - OSPF Inter, OE1 - OSPF ext 1 OE2 - OSPF ext 2, ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2 la - LISP alt, lr - LISP site-registrations, ld - LISP dyn-eid lA - LISP away, a - Application S   2001:9267:1:1::/64 [1/0] via 2001:9267:12::1 C   2001:9267:2:2::/64 [0/0] via Loopback0, directly connected L   2001:9267:2:2::2/128 [0/0] via Loopback0, receive C   2001:9267:12::/64 [0/0] via Ethernet0/0, directly connected L   2001:9267:12::2/128 [0/0] via Ethernet0/0, receive L   FF00::/8 [0/0] via Null0, receive 步骤3测试IPv6网络的连通性 测试R1 R1#ping 2001:9267:2:2::2 source loopback 0 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 2001:9267:2:2::2, timeout is 2 seconds: Packet sent with a source address of 2001:9267:1:1::1 !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 1/1/1 ms 联系我们
http://www.dnsts.com.cn/news/116329.html

相关文章：

  • 广州微型网站建设浙江门户网站建设公司
  • 中国核工业第五建设公司网站个人博客网站模板wordpress
  • 建设厅电工证查询网站wordpress验证密码
  • 专业做二手房装修网站网站制作还花钱
  • 微信分销网站建设官网吉林省水土保持生态建设网站
  • 网站的程序和数据库怎么做的网站框架代码
  • 信誉好的专业网站建设北京app制作公司
  • 昆明网站关键词优化html5手机网站源码下载
  • vue做的手机网站wordpress 计数器插件
  • osCommerce购物网站架设全攻略asp技校网站
  • 衡水购物网站制作三合一网站cms
  • 网站建设的意思企业建站框架
  • 网站建设捌金手指花总二六做企业咨询管理怎么样
  • 聚美优品网站设计营销型网站 策划运营网站
  • 有服务器有域名如何做网站建设部网站 造价
  • 公司官网网站建设个人网站建设方法
  • 广西临桂建设局网站ei网站怎么兼做
  • 三大门户网站是什么wordpress demo怎么下载
  • 诛仙3官方网站做花灯答案网站备案用的方案建设
  • 建网站需要编程吗建设部网站官工程质量手册
  • 建设银行网站 个人客户小程序开发工具怎么用
  • 河南定制网站建设企业logo查询有没有注册过
  • ps做游戏网站免费的个人网页
  • 个人简介网站html代码网站设计流程软件
  • 静态网站建设实训报告潍坊建筑公司排名
  • 企业网站策划论文别人的网站是怎么做的
  • 做一个网站需要投入多少钱网站keyword如何排列
  • 东莞网站建设制作哪家好莆田高端模板建站
  • 网站建设策划公司网站开发 链接指向文件夹
  • 无锡新吴区住房建设和交通局网站交易网站建设需要学什么软件