思科配置HSRPospfripNATACL以及定时ACL配置和路由重分发大型网络综合实验题Word格式.docx

1、另外R4可以telnet到Server上8.配置ACL要求在周一到周五的8:30到17:30之禁止工去登设设设设设设设设QQ,除此以外在所有设设设设设设设设设设设设设设设设段要求保工能正常的去外网的WWW,FTP,SMTP,TELNET设设设设些服,禁止工去其他的服。设设设设设设设设设设设我先用GNS3搭建起来的拓扑设注意,明:实实实实实本文中的所有命令都是写的,因思科的命令都是支持写的实实实实实实实实实实实实实实实实实实先敲所有网的配命令先实实实实实实实实实EnConfig tEnable password 1234No ip domain-loLine con 0Password 1234

2、No exec-tLogging syn配置地址R1Inter f0/0Ip add 10.255.0.5 255.255.255.252No shutInter f1/0Ip add 10.255.0.9 255.255.255.252No shutInter f2/0Ip add 10.255.0.1 255.255.255.252No shutInter f3/0Ip add 202.1.10.1 255.255.255.252No shutR2Ip add 10.255.0.2 255.255.255.252No shutR3Ip add 10.255.0.13 255.255.255

3、.252No shutInter lo0Ip add 10.100.0.3 255.255.255.0No shutInter lo1Ip add 10.100.1.3 255.255.255.0No shutInter lo2Ip add 10.100.2.3 255.255.255.0No shutInter lo3Ip add 10.100.3.3 255.255.255.0No shutInter lo4Ip add 10.100.4.3 255.255.255.0No shutInter lo5Ip add 10.100.5.3 255.255.255.0No shutInter l

4、o6Ip add 10.100.6.3 255.255.255.0No shutInter lo7Ip add 10.100.7.3 255.255.255.0No shutR4Ip add 202.1.10.2 255.255.255.252No shutIp add 200.1.20.1 255.255.255.255ExitSw1Ip routing （三交机启路由功能实实实实实实实实实实）No switchport （实实实实实实启三路由功能）Ip add 10.255.0.6 255.255.255.252No shutInter f0/10Ip add 10.255.0.14 25

5、5.255.255.252No shutInter range f0/14 -15 ，做以太通道,Sw mo tr （接口做实trunk模式）Inter range f0/1 -2Sw mo trExitSw2Ip routingNo swInter range f0/14 -15Sw3Inter range f0/0 -1Sw4在SW1、SW2、SW3、SW4上配置VTP,SW1和SW2是server模式,SW3和SW4是客设机模式。域名设benet,密设设cisco。添加VLAN 10、VLAN 50、VLAN 80、VLAN 90设4个VLAN并按照要求配置vlan地址Vlan daVt

6、p domain benetVtp password ciscoVlan 10 name vlan10Vlan 50 name vlan50Vlan 80 name vlan80Vlan 90 name vlan90Inter vlan 10Ip add 10.255.10.1 255.255.255.0No shutInter vlan 50Ip add 10.255.50.1 255.255.255.0No shutInter vlan 80Ip add 10.255.80.1 255.255.255.0No shutInter vlan 90Ip add 10.255.90.1 255.

7、255.255.0No shutIp add 10.255.10.2 255.255.255.0No shutIp add 10.255.50.2 255.255.255.0Ip add 10.255.80.2 255.255.255.0Ip add 10.255.90.2 255.255.255.0Vtp clientSW1和SW2上配置HSRP,要求SW1是VLAN 10和VLAN 50的活路由器,设设设设设SW2是VLAN 80和VLAN 90的活路由器设设设设Standby 1 ip 10.255.10.254 Standby 1 priority 150Standby 1 preem

8、ptStandby 1 track f0/0 100Inter vlan 50Standby 5 ip 10.255.50.254Standby 5 priority 150Standby 5 preemptStandby 5 track f0/0 100Inter vlan 80Standby 8 ip 10.255.80.254Standby 8 pri 100Standby 8 preeStandby 9 ip 10.255.90.254Standby 9 pri 100Standby 9 preeexitStandby 8 ip 10.255.80.254 Standby 8 prio

9、rity 150Standby 8 preemptStandby 8 track f0/0 100Inter vlan 90Standby 9 ip 10.255.90.254Standby 9 priority 150Standby 9 preemptStandby 9 track f0/0 100Inter vlan 10Standby 1 ip 10.255.10.254Standby 1 pri 100Standby 1 preeStandby 5 ip 10.255.50.254Standby 5 pri 100Standby 5 pree配置PVST设设设设设设设设设设流量的均衡,

10、在配置PVST设设注意与HSRP设设Sw1Spanning-tree vlan 10 priority 4096Spanning-tree vlan 50 priority 4096Sw2Spanning-tree vlan 80 priority 4096Spanning-tree vlan 90 priority 4096Inter f0/2Switchport mode accessSw access vlan 10Inter f0/3Sw acc vlan 50Sw acc vlan 80Sw acc vlan 90Pc1No ip routing （因是路由器模的设设设设设设设设PC

11、所以需要路由功能,后面的都一设设设设设设设设设设设设设）Inter f0/0Ip add 10.255.10.10 255.255.255.0No shutIp default-ga 10.255.10.254Pc2No ip routingIp add 10.255.50.50 255.255.255.0No shutIp default-g 10.255.50.254 ServerIp add 10.255.80.80 255.255.255.0No shutIp default-g 10.255.80.254Line vty 0 4LoginPc3Ip add 10.255.90.90

12、255.255.255.0No shutIp default-ga 10.255.90.254R1和R2之属于设设设area 8,R1和SW1,SW2之属于设设设area 0,SW1和SW2上所有VLAN接口属于area 10.SW1和R3之是属于设设设设RIP区域的。要求配置RIP和OSPF设设设设设网之能通信。把设设设设设Area 8配置完全末梢区域Ip route 0.0.0.0 0.0.0.0 202.1.10.2Router ospf 1Router-id 1.1.1.1Network 10.255.0.0 0.0.0.3 area 8Network 10.255.0.4 0.0.0

13、.3 area 0Network 10.255.0.8 0.0.0.3 area 0area 8 stub no-summarydefault-information originateexitr2router ospf 1router-id 2.2.2.2network 10.255.0.0 0.0.0.3 area 8area 8 stub no-summaryr3router ripversion 2no auto-summnetwork 10.100.0.0network 10.100.1.0network 10.100.2.0network 10.100.3.0network 10.

14、100.4.0network 10.100.5.0network 10.100.6.0network 10.100.7.0network 10.255.0.12sw1router-id 3.3.3.3network 10.255.0.4 0.0.0.3 area 0network 10.255.10.0 0.0.0.255 area 10network 10.255.50.0 0.0.0.255 area 10network 10.255.80.0 0.0.0.255 area 10network 10.255.90.0 0.0.0.255 area 10redistribute rip me

15、tric 200 subnetssummary-address 10.100.0.0 255.255.248.0exitnetwork 10.255.0.12 redistribute ospf 1 metric 3exitsw2router-id 4.4.4.4network 10.255.0.8 0.0.0.3 area 0network 10.255.10.0 0.0.0.255 area 10network 10.255.50.0 0.0.0.255 area 10network 10.255.80.0 0.0.0.255 area 10network 10.255.90.0 0.0.

16、0.255 area 10exitr4ip route 0.0.0.0 0.0.0.0 202.1.10.1exit实实,用PC机或者server机Ping实实R1或者R4上的地址在R1上配置PAT设设内网的所有PC能去设设设设200.1.20.1设设设个地址。R1:Access-list 1 permit any Ip nat pool yang 200.1.10.1 200.1.10.1 netmask 255.255.255.0Ip nat inside source list 1 pool yang overloadIp nat outsideIp nat inside用命令debug

17、 ip nat实实实实是否配置ACL要求在周一到周五的8:30之禁止工去登设设设设设设设设QQ,除此以外在所有设设段要求保工能正常的去外网的设设设设设设设设设设设设设设WWW,FTP,SMTP,TELNET设设设设设设些服,禁止工去其他的服。设设设设设设设设r1（config）#Time-range yangjunr1（config-time-range）#Periodic weekdays 8:30 to 17:30r1（config-time-range）#Exitr1（config）#Ip access-list extended tianr1（config-ext-nacl）#Deny

18、 udp any any eq 4000 time-range yangjunr1（config-ext-nacl）#Deny udp any any eq 8000 time-range yangjunr1（config-ext-nacl）#Permit tcp any any eq 80r1（config-ext-nacl）#Permit tcp any any eq 25r1（config-ext-nacl）#Permit tcp any any eq 21r1（config-ext-nacl）#Permit tcp any any eq 23r1（config-ext-nacl）#Inter f3/0r1（config-if）#Ip access-group tian out