思科IOU模拟器拓扑搭建教程.docx
《思科IOU模拟器拓扑搭建教程.docx》由会员分享，可在线阅读，更多相关《思科IOU模拟器拓扑搭建教程.docx（12页珍藏版）》请在冰豆网上搜索。
思科IOU模拟器拓扑搭建教程
Here’sanexampletopologyforCiscoIOUtohelpyougetstarted:
Inthisexample,SFisanIOUinstancerunningonhost“solaris”.IOUliveisalsorunningonthishost,bridgingSF’sEthernet0/0interfacetomyphysicalnetwork（andtotheworld）.
SJ1,SJ2,andSJ3areIOUinstancesrunningonhost“helium”.
TheEthernet1/0interfaceonSFisconnectedtoEthernet0/1onSJ1areconnected,eventhoughtheyareonseparatephysicalhosts.
TheEthernet0/0interfacesonSJ1,SJ2,andSJ3areconnected,sharingacommonnetworksegment.
Last,SJ2andSJ3areconnectedviatheirSerial1/0interfaces.
Hopefully,thisshouldbegoodenoughtodemonstratethevariousoptionsforconnectingIOUinstances.
TheNETMAPfile
WhenconnectingIOUinstancesacrossphysicalhosts,thehostsshouldshareacommonNETMAPfile.Ifitisn’tpossibletouseNFS,you’llneedtoduplicatethefileoneachhost.I’mnotrunningNFSathome,soI’vesimplycopiedthefileovertobothhosts.
TheIOUinstanceIDsareassignedasfollows:
∙SF:
100
∙SF:
199（IOUlive）
∙SJ1:
151
∙SJ2:
152
∙SJ3:
153
Here’swhatmyNETMAPfilelookslike:
100:
0@solaris199:
0@solaris
100:
1@solaris151:
16@helium
151:
0@helium152:
0@helium153:
0@helium
152:
1@helium153:
1@helium
ConnectSFtotherealworld
I’llstartbyfiringuptheSFrouteronsolaris:
$./unix-js-m100
IOSOnUnix-CiscoSystemsconfidential,internaluseonly
Port0isconnectedto:
199:
0@solaris
Port16isconnectedto:
151:
16@helium
...outputsnipped...
Next,I’llstartupIOUlivesothatSFisconnectedtomyphysicalnetwork:
$./ioulive/dev/hme0199
Port0isconnectedto:
100:
0@solaris
/dev/hme0istheNIConsolaristhatisconnectedtomynetwork.
I’llbringuptheEthernet0/0interfaceonSF:
SF#conft
Enterconfigurationcommands,oneperline.EndwithCNTL/Z.
SF（config）#interfaceethernet0/0
SF（config-if）#ipaddress203.0.113.2255.255.255.0
SF（config-if）#noshutdown
VerifyIcanpingmy（physical）router:
SF（config-if）#doping203.0.113.1
Typeescapesequencetoabort.
Sending5,100-byteICMPEchosto203.0.113.1,timeoutis2seconds:
.!
!
!
!
Successrateis80percent（4/5）,round-tripmin/avg/max=20/33/40ms
SoSF,anIOUinstance,hasconnectivitywithmyphysicalrouterathome,aCisco1811.Justforgoodmeasure,let’saddadefaultrouteandseeifwecanpinghostsontheInternet:
SF（config-if）#exit
SF（config）#iproute0.0.0.00.0.0.0203.0.113.1
SF（config）#doping4.2.2.2
Typeescapesequencetoabort.
Sending5,100-byteICMPEchosto4.2.2.2,timeoutis2seconds:
!
!
!
!
!
Successrateis100percent（5/5）,round-tripmin/avg/max=40/50/72ms
Lookslikewe’reallset!
BringupSJ1
Nowlet’sbringuptheSJ1IOUinstanceonhelium:
$./i86bi_linux-ipbase-ms-e1-s0151
***************************************************************
IOSOnUnix-CiscoSystemsconfidential,internaluseonly
Undernocircumstancesisthissoftwaretobeprovidedtoany
nonCiscostafforcustomers.Todosoislikelytoresult
indisciplinaryaction.PleaserefertotheIOUUsagepolicyat
wwwin-formoreinformation.
***************************************************************
Port0/0isconnectedto:
152:
0@helium
153:
0@helium
Port0/1isconnectedto:
100:
1@solaris
...outputsnipped...
ConnectSJ1toSF
NowthatSJ1isup,let’sgetitconnectedtotheSFrouter:
SF（config）#inte1/0
SF（config-if）#ipaddr10.0.0.1255.255.255.0
SF（config-if）#noshutdown
SJ1#conft
Enterconfigurationcommands,oneperline.EndwithCNTL/Z.
SJ1（config）#inte0/1
SJ1（config-if）#ipaddress10.0.0.2255.255.255.0
SJ1（config-if）#noshutdown
NotethatSFisrunningonthephysicalhost“solaris”,aSolaris8/SPARCbox,andSJ1isrunningonthephysicalhost“helium”,anUbuntu10.04/x86box.
Let’sverifywehaveconnectivity:
SJ1（config-if）#doping10.0.0.1
Typeescapesequencetoabort.
Sending5,100-byteICMPEchosto10.0.0.1,timeoutis2seconds:
.!
!
!
!
Successrateis80percent（4/5）,round-tripmin/avg/max=20/28/40ms
Nowwe’llbringuptheEthernet0/0interfaceonSJ1thatsharesasegmentwithSJ2andSJ3:
SJ1（config-if）#inte0/0
SJ1（config-if）#ipaddr10.123.123.1255.255.255.0
SJ1（config-if）#noshutdown
BringupSJ2
Let’sbringuptheSJ2instance:
$./i86bi_linux-ipbase-ms-e1-s1152
***************************************************************
IOSOnUnix-CiscoSystemsconfidential,internaluseonly
Undernocircumstancesisthissoftwaretobeprovidedtoany
nonCiscostafforcustomers.Todosoislikelytoresult
indisciplinaryaction.PleaserefertotheIOUUsagepolicyat
wwwin-formoreinformation.
***************************************************************
Port0/0isconnectedto:
151:
0@helium
153:
0@helium
Port1/0isconnectedto:
153:
1@helium
...outputsnipped...
Let’sconfiguretheEthernet0/0andSerial1/0interfaces:
SJ2#conft
Enterconfigurationcommands,oneperline.EndwithCNTL/Z.
SJ2（config）#interfaceethernet0/0
SJ2（config-if）#ipaddress10.123.123.2255.255.255.0
SJ2（config-if）#noshutdown
SJ2（config-if）#interfaceserial1/0
SJ2（config-if）#ipaddress10.10.23.2255.255.255.0
SJ2（config-if）#noshutdown
VerifywecanpingSJ1′sEthernet0/0interface:
SJ2（config-if）#doping10.123.123.1
Typeescapesequencetoabort.
Sending5,100-byteICMPEchosto10.123.123.1,timeoutis2seconds
.!
!
!
!
Successrateis80percent（4/5）,round-tripmin/avg/max=4/6/8ms
BringupSJ3
Nowwe’llbringuptheSJ3router:
$./i86bi_linux-ipbase-ms-e1-s1153
***************************************************************
IOSOnUnix-CiscoSystemsconfidential,internaluseonly
Undernocircumstancesisthissoftwaretobeprovidedtoany
nonCiscostafforcustomers.Todosoislikelytoresult
indisciplinaryaction.PleaserefertotheIOUUsagepolicyat
wwwin-formoreinformation.
***************************************************************
Port0/0isconnectedto:
151:
0@helium
152:
0@helium
Port1/0isconnectedto:
152:
1@helium
...outputsnipped...
ConfigureEthernet0/0andSerial1/0:
SJ3#conft
Enterconfigurationcommands,oneperline.EndwithCNTL/Z.
SJ3（config）#interfaceethernet0/0
SJ3（config-if）#ipaddress10.123.123.3255.255.255.0
SJ3（config-if）#noshutdown
SJ3（config-if）#interfaceserial1/0
SJ3（config-if）#ipaddress10.10.23.3255.255.255.0
SJ3（config-if）#noshutdown
VerifywecanpingSJ1andSJ2′sEthernet0/0interfaces:
SJ3（config-if）#doping10.123.123.1
Typeescapesequencetoabort.
Sending5,100-byteICMPEchosto10.123.123.1,timeoutis2seconds:
.!
!
!
!
Successrateis80percent（4/5）,round-tripmin/avg/max=1/1/1ms
SJ3（config-if）#doping10.123.123.2
Typeescapesequencetoabort.
Sending5,100-byteICMPEchosto10.123.123.2,timeoutis2seconds:
.!
!
!
!
Successrateis80percent（4/5）,round-tripmin/avg/max=1/1/4ms
VerifywecanpingSJ2overtheSerial1/0interface:
SJ3（config-if）#doping10.10.23.2
Typeescapesequencetoabort.
Sending5,100-byteICMPEchosto10.10.23.2,timeoutis2seconds:
!
!
!
!
!
Successrateis100percent（5/5）,round-tripmin/avg/max=12/12/12ms
Great,fullconnectivitysofar!
Let’senableOSPFonSFandSJ1:
SF（config-if）#routerospf42
SF（config-router）#network10.0.0.10.0.0.0area0
SJ1（config-if）#routerospf42
SJ1（config-router）#network10.0.0.20.0.0.0area0
SJ1（config-router）#network10.123.123.10.0.0.0area0
MakesuretheOSPFadjacencybetweenSFandSJ1cameup:
SF（config-router）#doshipospfneigh
NeighborIDPriStateDeadTimeAddressInterface
10.123.123.11FULL/BDR00:
00:
3610.0.0.2Ethernet1/0
Let’slookattheroutingtableonSF:
SF（config-router）#doshiproute|beginGateway
Gatewayoflastresortis203.0.113.1tonetwork0.0.0.0
C203.0.113.0/24isdirectlyconnected,Ethernet0/0
10.0.0.0/24issubnetted,2subnets
O10.123.123.0[110/20]via10.0.0.2,00:
00:
50,Ethernet1/0
C10.0.0.0isdirectlyconnected,Ethernet1/0
S*0.0.0.0/0[1/0]via203.0.113.1
InjectdefaultrouteintoOSPF
SinceSFhasaroutetotheworld,let’sinjectadefaultroutethereintoOSPF:
SF（config-router）#default-informationoriginate
MakesureitshowsuponSJ1:
SJ1（config-router）#doshiproute|beginGateway
Gatewayoflastresortis10.0.0.1tonetwork0.0.0.0
O*E20.0.0.0/0[110/1]via10.0.0.1,00:
00:
44,Ethernet0/1
10.0.0.0/8isvariablysubnetted,4subnets,2masks
C10.0.0.0/24isdirectlyconnected,Ethernet0/1
L10.0.0.2/32isdirectlyconnected,Ethernet0/1
C10.123.123.0/24isdirectlyconnected,Ethernet0/0
L10.123.123.1/32isdirectlyconnected,Ethernet0/0
ConfiguredefaultrouteonSJ2andSJ3
OnSJ2andSJ3,let’sconfigureadefaultroutetowardsSJ1:
SJ2（config-if）#iproute0.0.0.00.0.0.010.123.123.1
SJ3（config-if）#iproute0.0.0.00.0.0.010.123.123.1
MakesureSFcantalktoSJ2andSJ3:
SF（config-router）#doping10.123.123.2
Typeescapesequencetoabort.
Sending5,100-byteICMPEchosto10.123.123.2,timeoutis2seconds:
!
!
!
!
!
Successrateis100percent（5/5）,round-tripmin/avg/max=28/44/60ms
SF（config-router）#doping10.123.123.3
Typeescapesequencetoabort.
Sending5,100-byteICMPEchosto10.123.123.3,timeoutis2seconds:
!
!
!
!
!
Successrateis100percent（5/5）,round-tripmin/avg/max=28/52/88ms
ConfigureNATonSF
Nowthatwehavefullconnectivity,let’sconfigureNATontheSFroutersothatSJ1,SJ2,andSJ3cantalktotheoutsideworld:
SF（config-router）#interfaceethernet0/0
SF（config-if）#ipnatoutside
SF（config-if）#interfaceethernet1/0
SF（config-if）#ipnatinside
We’llneedanACLmatchingthesourceaddressestomatch,ofcourse:
SF（config-if）#ipaccess-liststanda
升级会员 