项目测试3三层交换机VLAN 间路由参考答案.docx

1、项目测试3 三层交换机VLAN 间路由参考答案项目测试3_三层交换机VLAN 间路由 日期： 年 月 日测试编号3项目测试三层交换机VLAN 间路由测试对象网络专业08级7班课时4姓名学籍号组别一、 测试环境一组PC机5台； H3C S3610交换机1台；交换机反转线及直连线4条；网络连线（若干根）。二、组网需求：在交换机上创建两个vlan100和vlan200，配置三层交换机，PC1和PC2 划分到vlan100，PC3和PC4 划分到Vlan200中，实现两个不同vlan互访。三、测试内容：1根据拓扑图进行物理连接，搭建配置环境。（10分）2. 在交换机上创建两个vlan100和vlan2

2、00，将交换端口e1/0/1 到e1/0/10划分到vlan100中，将交换端口e1/0/11到e1/0/200划分到vlan20中，将PC1和PC2 划分到vlan100，PC3和PC4 划分到Vlan200中。（20分）3配置三层vlan间通信，配置vlan100地址：192.168.1.1 配置vlan200地址：192.168.2.1（20分）4配置PC机地址：ip地址，子网掩码，网关。（10分）5测试三层交换机两个不同vlan互访(截图)。（20分）四、测试步骤：按照要求完成各题、并写出主要命令，并粘贴截图，完成测试项目报告。五、附加题（20分）用Cisco 模拟软件实现访问互联网N

3、APT配置 组网需求： 根据拓扑图配置动态NAPT地址转换，路由器R2接口F0/0与外网相连，外网有Web服务器地址为100.1.2.16，假设公网IP地址为172.16.1.11，在路由器R1上进行配置NAPT，并设置缺省路由指向路由器R2接口S2/0，实现内网主机PC0,PC1,PC2对Internet的访问。拓扑图：测试步骤：1、路由器R1和R2基本配置.（10分）2、在路由器R1配置动态NAPT端口地址转换，实现对Internet的访问。（10分）编制部门：大连计算机学校网络组项目测试3_三层交换机VLAN 间路由参考答案实训操作：环境搭建使用反转线将PC机的串口与交换机的Consol

4、e口连接，通过Console口搭建本地配置环境。通过Console口搭建配置环境。建立本地配置环境，将PC机（或终端）的串口通过配置电缆与以太网交换机的Console口连接，确定通过Console口正确配置以太网交换机VLAN1接口的IP地址（VLAN1为交换机的缺省VLAN）。通过Console口搭建本地配置环境实训操作： PC机上运行终端仿真程序在PC机上运行终端仿真程序 （Windows2000/ Windows XP的超级终端），设置终端通信参数：传输速率为9600bit/s、8位数据位、1位停止位、无校验和无流控。以太网交换机上电，PC机终端上将显示以太网交换机自检信息，自检结束后提

5、示用户键入回车，之后将出现命令行提示符。实训操作：三层交换机VLAN路由的配置 1、在交换机( S3610)上创建 Vlan 100、Vlan 200，并将 E1/0/1- E1/0/10端口划分到 Vlan 100中， 将 E1/0/11- E1/0/20端口划分到 Vlan 200中。sys System View: return to User View with Ctrl+Z. H3Cvlan 100 H3C-vlan100port e1/0/1 to e1/0/10 H3C-vlan100quit H3Cvlan 200 H3C-vlan200port e1/0/11 to e1/0

6、/20 H3C-vlan200quit H3Cdis vlan all VLAN ID: 1 VLAN Type: static Route Interface: not configured Description: VLAN 0001 Name: VLAN 0001 Tagged Ports: none Untagged Ports: Ethernet1/0/21 Ethernet1/0/22 Ethernet1/0/23 Ethernet1/0/24 GigabitEthernet1/1/1 GigabitEthernet1/1/2 GigabitEthernet1/1/3 Gigabi

7、tEthernet1/1/4 VLAN ID: 100 VLAN Type: static Route Interface: not configured Description: VLAN 0100 Name: VLAN 0100 Tagged Ports: none Untagged Ports: Ethernet1/0/1 Ethernet1/0/2 Ethernet1/0/3 Ethernet1/0/4 Ethernet1/0/5 Ethernet1/0/6 Ethernet1/0/7 Ethernet1/0/8 Ethernet1/0/9 Ethernet1/0/10 VLAN ID

8、: 200 VLAN Type: static Route Interface: not configured Description: VLAN 0200 Name: VLAN 0200 Tagged Ports: none Untagged Ports: Ethernet1/0/11 Ethernet1/0/12 Ethernet1/0/13 Ethernet1/0/14 Ethernet1/0/15 Ethernet1/0/16 Ethernet1/0/17 Ethernet1/0/18 Ethernet1/0/19Ethernet1/0/20 2、设置三层交换机 VLAN 间通信。在交

9、换机 H3C 上创建Vlan 100、 Vlan 200 并配置IP地址，查看三层交换机路由表。 H3Cinterface Vlan-interface 100 H3C-Vlan-interface100ip address 192.168.1.1 24%Apr 26 12:09:12:113 2000 H3C IFNET/4/UPDOWN: Line protocol on the interface Vlan-interface100 is UP H3C-Vlan-interface100undo shutdown Interface Vlan-interface100 is not sh

10、ut downH3C-Vlan-interface100quitH3Cinterface Vlan-interface 200H3C-Vlan-interface200ip address 192.168.2.1 24Line protocol on the interface Vlan-interface200 is UPH3C-Vlan-interface100undo shutdown Interface Vlan-interface200 is not shut downH3C-Vlan-interface200quitH3CH3Cdis ip routing-tableRouting

11、 Tables: Public Destinations : 6 Routes : 6Destination/Mask Proto Pre Cost NextHop Interface127.0.0.0/8 Direct 0 0 127.0.0.1 InLoop0127.0.0.1/32 Direct 0 0 127.0.0.1 InLoop0192.168.1.0/24 Direct 0 0 192.168.1.1 Vlan100192.168.1.1/32 Direct 0 0 127.0.0.1 InLoop0192.168.2.0/24 Direct 0 0 192.168.2.1 V

12、lan200192.168.2.1/32 Direct 0 0 127.0.0.1 InLoop0实训操作： PC机配置地址，PC机需要设置网关。将 PC1 和 PC2 的默认网关设置为：192.168.1.1 将 PC3 和 PC4 的默认网关设置为：192.168.2.1 任务测试：在PC1上 ping网关，ping PC3，测试如下：C:Documents and Settings107-101ping 192.168.2.1Pinging 192.168.2.1 with 32 bytes of data:Reply from 192.168.2.1: bytes=32 time=4m

13、s TTL=255Reply from 192.168.2.1: bytes=32 time=1ms TTL=255Reply from 192.168.2.1: bytes=32 time=1ms TTL=255Reply from 192.168.2.1: bytes=32 time=1ms TTL=255Ping statistics for 192.168.2.1: Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),Approximate round trip times in milli-seconds: Minimum = 1m

14、s, Maximum = 4ms, Average = 1msC:Documents and Settings107-101ping 192.168.2.3Pinging 192.168.2.3 with 32 bytes of data:Reply from 192.168.2.3: bytes=32 time1ms TTL=127Reply from 192.168.2.3: bytes=32 time1ms TTL=127Reply from 192.168.2.3: bytes=32 time1ms TTL=127Reply from 192.168.2.3: bytes=32 tim

15、e 测试结果：不同VLAN100、VLAN200下的主机PC1，PC3可以互相PING通，三层交换机不同 VLAN 内的主机之间可以互相通信，三层交换机实现VLAN互访。附加题（20分）用Cisco 模拟软件实现访问互联网NAPT配置 1.1 路由器配置第1步：路由器R2的基本配置 RouterenRouter#conf tEnter configuration commands, one per line. End with CNTL/Z.Router(config)#int f0/0Router(config-if)#ip address 100.1.2.1 255.255.255.0Ro

16、uter(config-if)#no shutdown Router(config-if)#int s2/0Router(config-if)#ip address 172.16.1.12 255.255.255.0第2步：路由器R1的基本配置 RouterenRouter#conf tEnter configuration commands, one per line. End with CNTL/Z.Router(config)#int f0/0Router(config-if)#ip address 192.168.1.1 255.255.255.0Router(config-if)#n

17、o shutdown Router(config-if)#int s2/0Router(config-if)#ip address 172.16.1.11 255.255.0.0Router(config-if)#clock rate 64000Router(config-if)#no shutdown %LINK-5-CHANGED: Interface Serial2/0, changed state to upRouter(config-if)#第3步：路由器R1 内部及外部端口定义F0/0为内网接口Router#conf tRouter(config-if)#int f0/0Route

18、r(config-if)#ip nat inside Router(config-if)#exit定义s2/0为外网接口Router1 (config)#interfast s2/0Router1 (config-if)#ip nat outsideRouter1 (config-if)#exit第4步：定义内部全局地址池地址池名称为to-net，范围为从172.16.1.11到172.16.1.11Router(config)#ip nat ? inside Inside address translation outside Outside address translation pool

19、 Define pool of addressesRouter(config)#ip nat pool ? WORD Pool nameRouter(config)#ip nat pool to-net ? A.B.C.D Start IP addressRouter(config)#ip nat pool to-net 172.16.1.11 ? A.B.C.D End IP addressRouter(config)#ip nat pool to-net 172.16.1.11 172.16.1.11 ? netmask Specify the network maskRouter(con

20、fig)#ip nat pool to-net 172.16.1.11 172.16.1.11 netmask 255.255.0.0 ? Router(config)#ip nat pool to-rnet 172.16.1.11 172.16.1.11 netmask 255.255.0.0第5步：定义允许转换的地址允许192.168.0.0网段地址转换Router(config)#access-list 100 permit ? eigrp Ciscos EIGRP routing protocol gre Ciscos GRE tunneling icmp Internet Contr

21、ol Message Protocol ip Any Internet Protocol ospf OSPF routing protocol tcp Transmission Control Protocol udp User Datagram ProtocolRouter(config)#access-list 100 permit ip ? A.B.C.D Source address any Any source host host A single source hostRouter(config)#access-list 100 permit ip 192.168.0.0 ? A.

22、B.C.D Source wildcard bitsRouter(config)#access-list 100 permit ip 192.168.0.0 0.0.255.255 ? A.B.C.D Destination address any Any destination host host A single destination hostRouter(config)#access-list 100 permit ip 192.168.0.0 0.0.255.255 100.1.2.16 ? A.B.C.D Destination wildcard bitsRouter(config

23、)#access-list 100 permit ip 192.168.0.0 0.0.255.255 100.1.2.16 0.0.255.255 ? dscp Match packets with given dscp value precedence Match packets with given precedence value Router(config)#access-list 100 permit ip 192.168.0.0 0.0.255.255 100.1.2.16 0.0.255.255第6步：建立映射关系Router(config)#ip nat inside ? s

24、ource Source address translationRouter(config)#ip nat inside source ? list Specify access list describing local addresses static Specify static local-global mappingRouter(config)#ip nat inside source list 100 ? interface Specify interface for global address pool Name pool of global addressesRouter(c

25、onfig)#ip nat inside source list 100 pool ? WORD Name pool of global addressesRouter(config)#ip nat inside source list 100 pool to-net ? overload Overload an address translation Router(config)#ip nat inside source list 100 pool to-net overload第7步：配置指向外网缺省路由，设置缺省路由指向路由器R2接口S2/0。Router(config)# ip rou

26、te 100.0.0.0 255.0.0.0 172.16.1.121.2交换机配置 三层交换机配置：SwitchenSwitch#conf tEnter configuration commands, one per line. End with CNTL/Z.Switch(config-if)#int vlan 1Switch(config-if)#ip address 192.168.1.2 255.255.255.0Switch(config-if)#endSwitch#1.3、配置主机配置PC0 IP Address. . . . . . . . . . . . : 192.168.

27、1.10 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 192.168.1.1配置PC1 IP Address. . . . . . . . . . . . : 192.168.1.11 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 192.168.1.1 任务测试： PC0主机，PC1主机访问外网服务器PC4。 PC0ping 100.1.2.

28、16Pinging 100.1.2.16 with 32 bytes of data:Request timed out.Reply from 100.1.2.16: bytes=32 time=140ms TTL=125Reply from 100.1.2.16: bytes=32 time=125ms TTL=125Reply from 100.1.2.16: bytes=32 time=141ms TTL=125Ping statistics for 100.1.2.16: Packets: Sent = 4, Received = 3, Lost = 1 (25% loss),Appr

29、oximate round trip times in milli-seconds:Minimum = 125ms, Maximum = 141ms, Average = 135msPacket Tracer PC Command Line 1.0在路由器查看NAPT映射关系（先建立访问会话）Router#show ip nat translations Pro Inside global Inside local Outside local Outside globalicmp 172.16.1.11:2 192.168.1.10:2 100.1.2.16:2 100.1.2.16:2icm

30、p 172.16.1.11:3 192.168.1.10:3 100.1.2.16:3 100.1.2.16:3icmp 172.16.1.11:4 192.168.1.10:4 100.1.2.16:4 100.1.2.16:4Router#show ip nat translations Pro Inside global Inside local Outside local Outside globalicmp 172.16.1.11:1 192.168.1.12:1 100.1.2.16:1 100.1.2.16:1icmp 172.16.1.11:2 192.168.1.12:2 100.1.2.16:2 100.1.2.16:2Router#Router