某某宾馆网络建设方案Word文件下载.docx

某某宾馆网络建设方案Word文件下载.docx

《某某宾馆网络建设方案Word文件下载.docx》由会员分享，可在线阅读，更多相关《某某宾馆网络建设方案Word文件下载.docx（12页珍藏版）》请在冰豆网上搜索。

5、配置动态路由协议OSPF

6、配置NAT，其公网的地址池为99.1.1.0/28

7、在所有接入层交换机的接口上配置端口安全，最大数为3，违规则关闭接口

8、在VLAN10中有两台服务，分别WEB和FTP服务器，需要发布到互联网上，其公网地址为99.1.1.9和99.1.1.10

9、财务部不能访问互联网，而客房部只能访问互联的WEB和MAIL服务，其它的不受限制

实验拓扑：

编址规划：

客房部：

网络号：

192.168.1.0/24

网关：

192.168.1.1/24

实验用址：

192.168.1.10/24

技术部：

192.168.2.0/24

192.168.2.1/24

192.168.2.10/24

管理部：

192.168.3.0/24

192.168.3.1/24

192.168.3.10/24

服务部：

192.168.4.0/24

192.168.4.1/24

192.168.4.10/24

财务部：

192.168.5.0/24

192.168.5.1/24

192.168.5.10/24

服务器：

192.168.6.0/24

192.168.6.1/24

WEB服务器用址：

192.168.6.10/24

FTP服务器用址：

192.168.6.20/24

osfp域地址：

MSW0f0/1接口：

172.16.1.2/24

MSW1f0/1接口：

172.16.2.2/24

RAf0/0接口：

172.16.1.1/24

RAf0/1接口：

172.16.2.1/24

实验设备:

Cisco2811Routerx2

Cisco3560-24PSSwitchx2

Cisco2960-24TTSwitchx2

PCx5

Server服务器x2

实施步骤

MSW0

spanning-treemoderapid-pvst

spanning-treevlan13-15priority4096

spanning-treevlan10-12priority8192

interfaceFastEthernet0/1

noswitchport

ipaddress172.16.1.2255.255.255.0

duplexauto

speedauto

interfaceFastEthernet0/9

switchportmodetrunk

interfaceFastEthernet0/10

interfaceFastEthernet0/11

channel-group1modeon

interfaceFastEthernet0/12

interfacePort-channel1

interfaceVlan1

noipaddress

shutdown

interfaceVlan10

ipaddress192.168.6.1255.255.255.0

interfaceVlan11

ipaddress192.168.1.1255.255.255.0

interfaceVlan12

ipaddress192.168.2.1255.255.255.0

interfaceVlan13

ipaddress192.168.3.2255.255.255.0

interfaceVlan14

ipaddress192.168.4.2255.255.255.0

interfaceVlan15

ipaddress192.168.5.2255.255.255.0

ipaccess-group100out

routerospf1

log-adjacency-changes

network192.168.1.00.0.0.255area0

network192.168.2.00.0.0.255area0

network192.168.3.00.0.0.255area0

network192.168.4.00.0.0.255area0

network192.168.5.00.0.0.255area0

network192.168.6.00.0.0.255area0

network172.16.1.00.0.0.255area0

access-list100denyip192.168.1.00.0.0.255192.168.5.00.0.0.255

access-list100denyip192.168.2.00.0.0.255192.168.5.00.0.0.255

MSW1

spanning-treevlan10-12priority4096

spanning-treevlan13-15priority8192

ipaddress172.16.2.2255.255.255.0

ipaddress192.168.6.2255.255.255.0

ipaddress192.168.1.2255.255.255.0

ipaddress192.168.2.2255.255.255.0

ipaddress192.168.3.1255.255.255.0

ipaddress192.168.4.1255.255.255.0

ipaddress192.168.5.1255.255.255.0

network172.16.2.00.0.0.255area0

RA

interfaceFastEthernet0/0

ipaddress172.16.1.1255.255.255.0

ipnatinside

ipaddress172.16.2.1255.255.255.0

interfaceSerial0/0/0

ipaddress99.1.1.2255.255.255.0

encapsulationppp

pppauthenticationchap

ipaccess-group100out

ipnatoutside

network172.16.1.00.0.0.255area0

network99.1.1.00.0.0.15area0

ipnatpool199.1.1.399.1.1.14netmask255.255.255.240

ipnatinsidesourcelist10pool1overload

ipnatinsidesourcestatic192.168.6.1099.1.1.9

ipnatinsidesourcestatic192.168.6.2099.1.1.10

access-list10permit192.168.1.00.0.0.255

access-list10permit192.168.2.00.0.0.255

access-list10permit192.168.3.00.0.0.255

access-list10permit192.168.4.00.0.0.255

access-list10permit192.168.5.00.0.0.255

access-list10permit172.16.1.00.0.0.255

access-list10permit172.16.2.00.0.0.255

access-list100denyip192.168.5.00.0.0.255any

access-li