设计实验报告3实验报告.docx
《设计实验报告3实验报告.docx》由会员分享，可在线阅读，更多相关《设计实验报告3实验报告.docx（34页珍藏版）》请在冰豆网上搜索。
设计实验报告3实验报告
设计实验报告3实验报告
实验8综合组网实验
根据组网图，配置生成树协议和链路聚合。
并写出相关命令：
[S1和S2:
]
生成树协议：
stpenable
链路聚合：
interfacebridge-aggregation1
link-aggregationmodedynam
intere1/0/1
portlink-aggregationgroup1
intere1/0/3
portlink-aggregationgroup1
interbridge-aggregation1
portlink-typetrunk
porttrunkpermitall
因为本实验组网图实际上如下所示：
所示本实验只需要配置
生成树协议：
stpenable
链路聚合：
intere1/0/1
portlink-typetrunk
porttrunkpermitall（或者porttrunkpermit345）
请写出核心路由器和核心交换机中的指定路由器和备份指定路由器，并说明为什么？
指定路由器是R1，指定的备份路由器是R2，配置命令如下：
[R1]:
iproute-stat
intere0/0
ipaddr24
rpid11virtual-ip
rpid11priority100
ospf
default-route-advertisecost100
[R2]:
iproute-stat
intere0/0
ipaddr24
rpid11virtual-ip
rpid11priority80
ospf
default-route-advertisecost20
[S1]:
iproute-statpreference60
iproute-statpreference80
iproute-statpreference100
原因说明：
首先因为在S1上面配置了路由备份的三条默认路由，而第一条preference最低为60优先下一跳去往，路由表查找去往的下一跳是哪里，发现R1和R2的virtual-ip都是，因此选择priority为100优先级更高的R1进行转发。
所以R1是主路由器，R2是备份路由器。
（实验过程中核心交换机S1和汇聚交换机S2的不单独配置前往外网的默认路由，只需要在出口路由器R1和R2上，将默认路由引入至OSPF，并通过OSPF传播给S1和S2）而当S1路由备份失效时候，即静态路由失效时，由于R1和R2都启用了OSPF协议，并且R1的cost值比较小，优先选择R1，当R1失效时候才会选择R2路由器，因此R1是主出口路由器，R2是备份路由器。
写出访问控制列表的相关命令：
PCA的ip地址：
/24网关：
PCB的ip地址：
/24网关：
[R1]:
aclnumber201
rule0permitsource55
rule1permitsource55
rule2deny
[R2]:
aclnumber201
rule0denysource55
rule1permitsource55
rule2deny
当R1路由器正常时，PCA和PCB能够正常访问互联网，并且网路中的路由器和交换机是无法ping到外网的。
当关闭R1->S2->Inter这条路线的R1上端口e0/1时候，由于路由器R2的规则阻止，网段访问互联网，即PCA可以访问换联网，而PCB无法访问。
将路由器R1的E1接口断掉，截获并分析^pTrap报文，写出报文的字段名和字段值，然后重新连接，通过网络管理服务器查看路由器状态。
字段名
字段长度
字段表达信息
enterprise
10
企业：
SNMPv2-SMI:
:
enterprise.25506.1.580
agentaddr
4
代理的IP地址：
genertrap
1
Trap类型：
linkDown
（2）
speciftrap
1
特定代码：
0（不是代理自定义的事件）
timest
3
时间戳：
1767714
Variablebindings
51
变量绑定
VarBind1
Name
10
..1.1.13
Value
1
13
VarBind2
Name
10
..1.7.13
Value
1
1
VarBind3
Name
10
..1.8.13
Value
1
2
字段名
字段长度
字段表达信息
enterprise
10
企业：
SNMPv2-SMI:
:
enterprise.25506.1.580
agentaddr
4
代理的IP地址：
genertrap
1
Trap类型：
linkUp（3）
speciftrap
1
特定代码：
0（不是代理自定义的事件）
timest
3
时间戳：
1769651
Variablebindings
51
变量绑定
VarBind1
Name
10
..1.1.13
Value
1
13
VarBind2
Name
10
..1.7.13
Value
1
1
VarBind3
Name
10
..1.8.13
Value
1
1
每台设备上配置专用的网络管理地址有什么好处？
答：
因为网管软件需要按照ip地址添加设备，因此每台设备都配置专用网络管理地址可以方便的被网络管理工具实时监控和管理。
方便网络管理工具对设备进行故障管理，配置管理，计费管理，性能管理，安全管理。
请附上全部网络设备的最终配置
PS：
假如主机ping不通，而主机能ping通R1的接口地址，R1能ping通
删掉1的DHCP即可：
inter1
undoipaddrdhcp-alloc
S1S2都要undo不然会在网关卡主
[S1]discur
#
version5.20,Release2108P01
#
sysnameS1
#
irfmac-addresspersistenttimer
irfauto-updateenable
undoirflink-delay
#
domaindefaultenablesystem
#
ipttl-epiresenable
ipunreachablesenable
#
undoipenable
#
multastrouting-enable
#
password-recoveryenable
#
1
#
3
#
5
#
30
#
100
#
domainsystem
access-limitdisable
stateactive
idle-cutdisable
self-serve-urldisable
#
user-groupsystem
group-attributeallow-guest
#
interfaceNULL0
#
interface-interface1
#
interface-interface3
#
interface-interface5
ipaddress
pimdm
#
interface-interface100
ipaddress
pimdm
#
interfaceEther1/0/1
portlink-modebridge
portlink-typetrunk
porttrunkpermit13to5
#
interfaceEther1/0/2
portlink-modebridge
#
interfaceEther1/0/3
portlink-modebridge
#
interfaceEther1/0/4
portlink-modebridge
#
interfaceEther1/0/5
portlink-modebridge
#
interfaceEther1/0/6
portlink-modebridge
#
interfaceEther1/0/7
portlink-modebridge
#
interfaceEther1/0/8
portlink-modebridge
#
interfaceEther1/0/9
portlink-modebridge
#
interfaceEther1/0/10
portlink-modebridge
#
interfaceEther1/0/11
portlink-modebridge
#
interfaceEther1/0/12
portlink-modebridge
#
interfaceEther1/0/13
portlink-modebridge
#
interfaceEther1/0/14
portlink-modebridge
#
interfaceEther1/0/15
portlink-modebridge
#
interfaceEther1/0/16
portlink-modebridge
#
interfaceEther1/0/17
portlink-modebridge
#
interfaceEther1/0/18
portlink-modebridge
#
interfaceEther1/0/19
portlink-modebridge
#
interfaceEther1/0/20
portlink-modebridge
#
interfaceEther1/0/21
portlink-modebridge
#
interfaceEther1/0/22
portlink-modebridge
#
interfaceEther1/0/23
portlink-modebridge
portaccess100
#
interfaceEther1/0/24
portlink-modebridge
portaccess100
#
interfacegabitEther1/0/25
portlink-modebridge
#
interfacegabitEther1/0/26
portlink-modebridge
#
interfacegabitEther1/0/27
portlink-modebridge
#
interfacegabitEther1/0/28
portlink-modebridge
#
ospf1
area
work55
work55
#
iproute-stat
iproute-statpreference80
iproute-statpreference100
#
snmp-agent
snmp-agentlocal-enneid800063A2033C8C402A76CD
snmp-agentmunitywritep
snmp-agentmunityreadpubl
snmp-agentmunitywriteprivate
snmp-agentsys-infoversionall
snmp-agenttarget-hosttrapaddressudp-domainparamssecuritynamepubl
snmp-agenttrapenabledefault-route
#
loadml-configuration
#
loadtr069-configuration
#
user-interfaceau0
user-interfacevty015
#
return
/S1/
/S2/
[S2]discur
#
version5.20,Release2108P01
#
sysnameS2
#
irfmac-addresspersistenttimer
irfauto-updateenable
undoirflink-delay
#
domaindefaultenablesystem
#
ipttl-epiresenable
ipunreachablesenable
#
undoipenable
#
multastrouting-ena
#
password-recoveryenable
#
1
#
3to5
#
30
#
domainsystem
access-limitdisable
stateactive
idle-cutdisable
self-serve-urldisable
#
user-groupsystem
group-attributeallow-guest
#
interfaceNULL0
#
interface-interface1
#
interface-interface3
ipaddress
igmpenable
pimdm
#
interface-interface4
ipaddress
igmpenable
pimdm
#
interface-interface5
ipaddress
pimdm
#
interfaceEther1/0/1
portlink-modebridge
portlink-typetrunk
porttrunkpermit13to5
#
interfaceEther1/0/2
portlink-modebridge
#
interfaceEther1/0/3
portlink-modebridge
#
interfaceEther1/0/4
portlink-modebridge
#
interfaceEther1/0/5
portlink-modebridge
#
interfaceEther1/0/6
portlink-modebridge
#
interfaceEther1/0/7
portlink-modebridge
#
interfaceEther1/0/8
portlink-modebridge
#
interfaceEther1/0/9
portlink-modebridge
#
interfaceEther1/0/10
portlink-modebridge
#
interfaceEther1/0/11
portlink-modebridge
#
interfaceEther1/0/12
portlink-modebridge
#
interfaceEther1/0/13
portlink-modebridge
#
interfaceEther1/0/14
portlink-modebridge
#
interfaceEther1/0/15
portlink-modebridge
#
interfaceEther1/0/16
portlink-modebridge
#
interfaceEther1/0/17
portlink-modebridge
#
interfaceEther1/0/18
portlink-modebridge
#
interfaceEther1/0/19
portlink-modebridge
#
interfaceEther1/0/20
portlink-modebridge
#
interfaceEther1/0/21
portlink-modebridge
#
interfaceEther1/0/22
portlink-modebridge
#
interfaceEther1/0/23
portlink-modebridge
portaccess3
#
interfaceEther1/0/24
portlink-modebridge
portaccess4
#
interfacegabitEther1/0/25
portlink-modebridge
#
interfacegabitEther1/0/26
portlink-modebridge
#
interfacegabitEther1/0/27
portlink-modebridge
#
interfacegabitEther1/0/28
portlink-modebridge
#
ospf1
area
work55
work55
work55
#
snmp-agent
snmp-agentlocal-enneid800063A2033C8C402B3DF9
snmp-agentmunityreadpubl
snmp-agentmunitywriteprivate
snmp-agentsys-infoversionall
snmp-agenttarget-hosttrapaddressudp-domainparamssecuritynamepub
l
snmp-agenttrapenabledefault-route
#
loadml-configuration
#
loadtr069-configuration
#
user-interfaceau0
user-interfacevty015
#
Return
/S2/
/R1/
[R1]discur
#
version5.20,Release2513P27
#
sysnameR1
#
nataddress-group1
address1012
#
domaindefaultenablesystem
#
ipttl-epiresenable
ipunreachablesenable
#
darp2psignature-fileflash:
/p2pdefault.mtd
#
port-securityenable
#
undoipenable
#
multastrouting-enable
#
password-recoveryenable
#
aclnumber201
rule0permitsource55
rule1permitsource55
rule2deny
#
1
#
domainsystem
access-limitdisable
stateactive
idle-cutdisable
self-serve-urldisable
#
user-groupsystem
group-attributeallow-guest
#
local-useradmin
passwordcipher$c$3$40gC1cf/wIJNa1ufFPJsjKAof+QP5aV
authorization-attributelevel3
serve-typetel
#
stpenable
#
cwmp
undocwmpenable
#
interfaceAu
asyncmodeflow
link-protocolppp
#
interfaceCellular0/0
asyncmodeprotocol
link-protocolppp
#
interfaceEther0/0
portlink-moderoute
shutdown
ipaddress
rpid11virtual-ip
rpid11priority100
pimdm
#
interfaceEther0/1
portlink-moderoute
natoutbound201address-group1
ipaddress10
#
interfaceSerial1/0
link-protocolppp
#
interfaceSerial2/0
link-protocolppp
#
interfaceNULL0
#
interfaceEther0/2
portlink-modebridge
#
interfaceEther0/3
portlink-modebridge
#
interfaceEther0/4
portlink-modebridge
#
interfaceEther0/5
portlink-modebridge
#
interfaceEther0/6
portlink-modebridge
#
interfaceEther0/7
portlink-modebridge
#
interfaceEther0/8
portlink-modebridge
#
interfaceEther0/9
portlink-modebridge
#
interfaceEther0/10
portlink-modebridge
#
interfaceEther0/11
portlink-modebridge
#
interfaceEther0/12
portlink-modebridge
#
interfaceEther0/13
portlink-modebridge
#
interfaceEther0/14
portlink-modebridge
#
interfaceEther0/15
portlink-modebridge
#
interfaceEther0/16
portlink-modebridge
#
interfaceEther0/17
portlink-modebridge
#
升级会员 