NA阶段综合练习

root
233
文章
0
评论
2020年12月29日18:55:33 评论 14698字阅读48分59秒

NA阶段综合练习

 

公司有三个部门:生产部门【黄色】(150人)、综合部门【粉色】(60人)、IT部门【红色】(15人)。现搭建网络有以下要求:

  1. 所有PC自动获取IP地址后可以正常上网。
  2. 不同部门之间的广播报文需要被隔离。
  3. 其中生产部门要求高可靠性
  4. 仅运维部网络管理员可以管理所有网络设备
  5. 提高互联网出口的可靠性,申请两条线路上网(电信为主、移动为备)。

解答

  1. 所有PC自动获取IP地址后可以正常上网。【生产部门可靠性包含在内】

设备的基础配置

R1

//R1
[R1]INT G0/0/1
[R1-GigabitEthernet0/0/1]IP ADD 13.1.1.1 24
[R1]INT G0/0/0
[R1-GigabitEthernet0/0/0]IP ADD 12.1.1.1 24
[R1]INT G2/0/0 
[R1-GigabitEthernet2/0/0]IP ADD 10.12.12.1 24
[R1]INT G0/0/2
[R1-GigabitEthernet0/0/2]IP ADD 10.11.11.1 24

R2

[R2]INT G0/0/1
[R2-GigabitEthernet0/0/1]IP ADD 12.1.1.2 24
[R2]int g0/0/0
[R2-GigabitEthernet0/0/0]ip add 24.1.1.1 24

R3

[R3]int g0/0/1
[R3-GigabitEthernet0/0/1]ip add 13.1.1.2 24
[R3]int g0/0/0
[R3-GigabitEthernet0/0/0]ip add 34.1.1.1 24

R4

[R4]int g0/0/0
[R4-GigabitEthernet0/0/0]ip add 24.1.1.2 24
[R4]int g0/0/1
[R4-GigabitEthernet0/0/1]ip add 34.1.1.2 24

DHCP配置

//配置IP地址
[DHCP]int g0/0/0
[DHCP-GigabitEthernet0/0/0]ip add 10.4.1.2 24

//开启DHCP服务
[DHCP]dhcp enable 
Info: The operation may take a few seconds. Please wait for a moment.done.

//创建vlan 10 的地址池名称为Vlan10
[DHCP]ip pool vlan10
Info: It's successful to create an IP address pool.

//Vlan10地址池DHCP进行配置
[DHCP-ip-pool-vlan10]dis this
[V200R003C00]
#
ip pool vlan10
 gateway-list 10.1.10.254 
 network 10.1.10.0 mask 255.255.255.0 
 excluded-ip-address 10.1.10.252 10.1.10.253 
 dns-list 114.114.114.114 

//创建vlan 20 的地址池名称为Vlan20
[DHCP]ip pool vlan20
Info: It's successful to create an IP address pool.

//Vlan20地址池DHCP进行配置
[DHCP-ip-pool-vlan20]dis this
[V200R003C00]
#
ip pool vlan20
 gateway-list 10.1.20.254 
 network 10.1.20.0 mask 255.255.255.0 
 excluded-ip-address 10.1.20.252 10.1.20.253 
 dns-list 114.114.114.114 

//创建vlan 30 的地址池名称为Vlan30
[DHCP]ip pool vlan30
Info: It's successful to create an IP address pool.

//Vlan30地址池DHCP进行配置
[DHCP-ip-pool-vlan30]dis this            
[V200R003C00]
#
ip pool vlan30
 gateway-list 10.2.30.254 
 network 10.2.30.0 mask 255.255.255.0 
 dns-list 114.114.114.114 

//创建vlan 40 的地址池名称为Vlan40
[DHCP]ip pool vlan40
Info: It's successful to create an IP address pool.

//Vlan40地址池DHCP进行配置
[DHCP-ip-pool-vlan40]dis this
[V200R003C00]
#
ip pool vlan40
 gateway-list 10.2.40.254 
 network 10.2.40.0 mask 255.255.255.0 
 dns-list 114.114.114.114 
//接口开启DHCP全局模式
[DHCP]int g0/0/0
[DHCP-GigabitEthernet0/0/0]dhcp select global
//开启DHCP中继器
//SW3中继器配置
[SW3]dhcp enable 
[SW3]int vlan 10
[SW3-Vlanif10]dhcp select relay 
[SW3-Vlanif10]dhcp relay server-ip 10.4.1.2

[SW3]int vlan 20
[SW3-Vlanif20]dhcp select relay
[SW3-Vlanif20]dhcp relay server-ip 10.4.1.2

//SW4中继器配置
[SW4]dhcp enable
[SW4]int vlan 10
[SW4-Vlanif10]dhcp select relay
[SW4-Vlanif10]dhcp relay server-ip 10.4.1.2

[SW4]int vlan 20
[SW4-Vlanif20]dhcp select relay 
[SW4-Vlanif20]dhcp relay server-ip 10.4.1.2

//SW5开启中继
[SW5]int Vlanif 30
[SW5-Vlanif30]dhcp select relay
[SW5-Vlanif30]dhcp relay server-ip 10.4.1.2

//单臂路由开启中继
[R6]dhcp enable
[R6]int g0/0/2.1
[R6-GigabitEthernet0/0/2.1]dhcp select relay
[R6-GigabitEthernet0/0/2.1]dhcp relay server-ip 10.4.1.2

 

 

 

二层交换机端口改trunk口,三层交换机与路由器相连接的端口改access口

SW1

//关闭STP
[SW1]stp disable 
Warning: The global STP state will be changed. Continue? [Y/N]y
Info: This operation may take a few seconds. Please wait for a moment...done.

//核心层中间两条线为冗余线路,接口全都为trunk口
[SW1]int g0/0/3
[SW1-GigabitEthernet0/0/3]port link-type trunk
[SW1-GigabitEthernet0/0/3]port trunk allow-pass vlan all
[SW1]int g0/0/4
[SW1-GigabitEthernet0/0/4]port link-type trunk
[SW1-GigabitEthernet0/0/4]port trunk allow-pass vlan all

//核心层其他接口为acees口
[SW1]int g0/0/1
[SW1-GigabitEthernet0/0/1]port link-type access
[SW1-GigabitEthernet0/0/1]port default vlan 111
[SW1]int g0/0/2
[SW1-GigabitEthernet0/0/2]port link-type access 
[SW1-GigabitEthernet0/0/2]port default vlan 41

[SW1]int g0/0/5
[SW1-GigabitEthernet0/0/5]port link-type access
[SW1-GigabitEthernet0/0/5]port default vlan 113

[SW1]int g0/0/6
[SW1-GigabitEthernet0/0/6]port link-type access
[SW1-GigabitEthernet0/0/6]port default vlan 114

[SW1]int g0/0/7
[SW1-GigabitEthernet0/0/7]port link-type access
[SW1-GigabitEthernet0/0/7]port default vlan 215

[SW1]int g0/0/8
[SW1-GigabitEthernet0/0/8]port link-type access
[SW1-GigabitEthernet0/0/8]port default vlan 315

[SW1]dis port vlan
Port                    Link Type    PVID  Trunk VLAN List
-------------------------------------------------------------------------------
GigabitEthernet0/0/1    access       113     -                                   
GigabitEthernet0/0/2    access       41    -                                   
GigabitEthernet0/0/3    trunk        1     1-4094
GigabitEthernet0/0/4    trunk        1     1-4094
GigabitEthernet0/0/5    access       113   -                                   
GigabitEthernet0/0/6    access       114   -                                   
GigabitEthernet0/0/7    access       215   -                                   
GigabitEthernet0/0/8    access       315   -
//创建VLAN
[SW1]vlan batch 41 111 113 114 215 315

//配置SVI 41 ip地址
[SW1]int vlan 41
[SW1-Vlanif41]ip add 10.4.1.1 24

//配置SVI 111 ip地址
[SW1]int vlan 111
[SW1-Vlanif111]ip add 10.11.11.2 24

//配置SVI 113 ip地址
[SW1]int vlan 113
[SW1-Vlanif113]ip add 10.1.13.1 24

//配置SVI 114 ip地址
[SW1]int vlan 114
[SW1-Vlanif114]ip add 10.1.14.1 24

//配置SVI 215 ip地址
[SW1]int vlan 215
[SW1-Vlanif215]ip add 10.2.15.1 24

//配置SVI 315 ip地址
[SW1]int vlan 315
[SW1-Vlanif315]ip add 10.3.15.1 24

SW2

//关闭stp
[SW2]stp disab
Warning: The global STP state will be changed. Continue? [Y/N]y
Info: This operation may take a few seconds. Please wait for a moment...done.
//核心层中间两条线为冗余线路,接口全都为trunk口 
[SW2]int g0/0/3 
[SW2-GigabitEthernet0/0/3]port link-type trunk
[SW2-GigabitEthernet0/0/3]port trunk allow-pass vlan all

[SW2]int g0/0/4 
[SW2-GigabitEthernet0/0/4]port link-type trunk
[SW2-GigabitEthernet0/0/4]port trunk allow-pass vlan all

//核心层其他接口为acees口
[SW2]int g0/0/1
[SW2-GigabitEthernet0/0/1]port link-type access
[SW2-GigabitEthernet0/0/1]port default vlan 121

[SW2]int g0/0/2
[SW2-GigabitEthernet0/0/2]port link-type access
[SW2-GigabitEthernet0/0/2]port default vlan 123

[SW2]int g0/0/5
[SW2-GigabitEthernet0/0/5]port link-type access
[SW2-GigabitEthernet0/0/5]port default vlan 124

[SW2]int g0/0/6
[SW2-GigabitEthernet0/0/6]port link-type access 
[SW2-GigabitEthernet0/0/6]port default vlan 225

[SW2]int g0/0/7
[SW2-GigabitEthernet0/0/7]port link-type access 
[SW2-GigabitEthernet0/0/7]port default vlan 325

[SW2]dis port vlan
Port                    Link Type    PVID  Trunk VLAN List
-------------------------------------------------------------------------------
GigabitEthernet0/0/1    access       121   -                                   
GigabitEthernet0/0/2    access       123   -                                   
GigabitEthernet0/0/3    trunk        1     1-4094
GigabitEthernet0/0/4    trunk        1     1-4094
GigabitEthernet0/0/5    access       124   -                                   
GigabitEthernet0/0/6    access       225   -                                   
GigabitEthernet0/0/7    access       325   -
//创建VLAN
[SW2]vlan batch 121 123 124 225 325

//配置SVI 121 ip地址
[SW2]int vlan 121
[SW2-Vlanif121]ip add 10.12.12.2 24

//配置SVI 123 ip地址
[SW2]int vlan 123
[SW2-Vlanif123]ip add 10.1.23.1 24

//配置SVI 124 ip地址
[SW2]int vlan 124
[SW2-Vlanif124]ip add 10.1.24.1 24

//配置SVI 225 ip地址
[SW2]int vlan 225
[SW2-Vlanif225]ip add 10.2.25.1 24

//配置SVI 325 ip地址
[SW2]int vlan 325
[SW2-Vlanif325]ip add 10.3.25.1 24

SW3

//创建VLAN
[SW3]vlan batch 10 20 113 123

//配置SVI 113 ip地址
[SW3]int vlan 113
[SW3-Vlanif113]ip add 10.1.13.2 24

//配置SVI 123 ip地址
[SW3]int vlan 123
[SW3-Vlanif123]ip add 10.1.23.2 24

//配置SVI 10 ip地址
[SW3]interface vlan 10
[SW3-Vlanif10]ip add 10.1.10.252 24
//配置VRRP VRID 10 为master
 [SW3-Vlanif10]vrrp vrid 10 virtual-ip 10.1.10.254
[SW3-Vlanif10]vrrp vrid 10 priority 11
//VRPP缺陷设置
[SW3-Vlanif10]vrrp vrid 10 track interface g0/0/1 reduced 20
[SW3-Vlanif10]vrrp vrid 10 track interface g0/0/2 reduced 20

//配置SVI 20 ip地址
[SW3]int vlan 20
[SW3-Vlanif20]ip add 10.1.20.252 24
//配置VRRP VRID 20
[SW3]int vlan 20
[SW3-Vlanif20]vrrp vrid 20 virtual-ip 10.1.20.254

//G001接口设置接口类型为access
[SW3-GigabitEthernet0/0/1]dis this
#
interface GigabitEthernet0/0/1
 port link-type access
 port default vlan 113
#
return

//G002接口设置接口类型为access
[SW3-GigabitEthernet0/0/2]dis this
#
interface GigabitEthernet0/0/2
 port link-type access
 port default vlan 123
#
return

//配置聚合接口聚合g005与g004
[SW3]int Eth-Trunk 11
[SW3-Eth-Trunk11]mode lacp-static 
[SW3-Eth-Trunk11]trunkport g0/0/4
[SW3-Eth-Trunk11]trunkport g0/0/5

//聚合接口Eth-trunk 11 设置为trunk口
[SW3]int Eth-Trunk 11
[SW3-Eth-Trunk11]dis this    
interface Eth-Trunk11
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
 mode lacp-static

//g005修改为trunk口
[SW3]int g0/0/5
[SW3-GigabitEthernet0/0/5]port link-type trunk 
[SW3-GigabitEthernet0/0/5]port trunk allow-pass vlan all

SW4

//创建VLAN
[SW4]vlan batch 10 20 114 215

//配置SVI 10 ip地址
[SW4]int vlan 10
[SW4-Vlanif10]ip add 10.1.10.253 24
//配置VRRP VRID 10
[SW4-Vlanif10]vrrp vrid 10 virtual-ip 10.1.10.254

//配置SVI 20 ip地址
[SW4]int vlan 20
[SW4-Vlanif20]ip add 10.1.20.253 24
//配置VRRP VRID 20 master
[SW4-Vlanif20]vrrp vrid 20 virtual-ip 10.1.20.254
[SW4-Vlanif20]vrrp vrid 20 priority 110
//VRPP缺陷设置
[SW4-Vlanif20]vrrp vrid 20 track interface g0/0/1 reduced 20
[SW4-Vlanif20]vrrp vrid 20 track interface g0/0/2 reduced 20

//配置SVI 114 ip地址
[SW4]int vlan 114
[SW4-Vlanif114]ip add 10.1.14.2 24

//配置SVI 124 ip地址
[SW4]int vlan 124
[SW4-Vlanif124]ip add 10.1.24.2 24

//G001接口设置接口类型为access
[SW4-GigabitEthernet0/0/1]dis this
#
interface GigabitEthernet0/0/1
 port link-type access
 port default vlan 114
#
return

//G002接口设置接口类型为access
[SW4-GigabitEthernet0/0/2]dis this
#
interface GigabitEthernet0/0/2
 port link-type access
 port default vlan 124
#
return

//配置聚合接口聚合g005与g004
[SW4]int Eth-Trunk 11
[SW4-Eth-Trunk11]mode lacp-static
[SW4-Eth-Trunk11]trunkport g0/0/3
[SW4-Eth-Trunk11]trunkport g0/0/4
//聚合接口Eth-trunk 11 设置为trunk口
[SW4]int Eth-Trunk 11
[SW4-Eth-Trunk11]port link-type trunk
[SW4-Eth-Trunk11]port trunk allow-pass vlan all

//g005修改为trunk口
[SW4]int g0/0/5
[SW4-GigabitEthernet0/0/5]port link-type trunk
[SW4-GigabitEthernet0/0/5]port trunk allow-pass vlan all

查看VRRP的状态

SW5

//创建VLAN 
[SW5]vlan batch 30 215 225

//配置SVI 30 ip地址
[SW5]int vlan 30
[SW5-Vlanif30]ip add 10.2.30.254 24

//配置SVI 215 ip地址
[SW5]int vlan 215
[SW5-Vlanif215]ip add 10.2.15.2 24

//配置SVI 225 ip地址
[SW5]int vlan 225
[SW5-Vlanif225]ip add 10.2.25.2 24
//g001修改为access口
[SW5-GigabitEthernet0/0/1]dis this
#
interface GigabitEthernet0/0/1
 port link-type access
 port default vlan 215
#
return

//g002修改为access口
[SW5-GigabitEthernet0/0/2]dis this
#
interface GigabitEthernet0/0/2
 port link-type access
 port default vlan 225
#
return
//g003修改为trunk口
[SW5]int g0/0/5
[SW5-GigabitEthernet0/0/5]port link-type trunk 
[SW5-GigabitEthernet0/0/5]port trunk allow-pass vlan all

R6单臂路由与SW8

//单臂路由操作
//与SW相连接的接口
[R6]int g0/0/2
[R6-GigabitEthernet0/0/2]undo shutdown
Info: Interface GigabitEthernet0/0/2 is not shutdown.
//配置虚拟接口为VLAN40的网关
[R6]int g0/0/2.1
[R6-GigabitEthernet0/0/2.1]dot1q ter vid 40
[R6-GigabitEthernet0/0/2.1]ip add 10.2.40.254 24
[R6-GigabitEthernet0/0/2.1]arp broadcast enable

//R6g000配置IP地址
[R6]int g0/0/0
[R6-GigabitEthernet0/0/0]ip add 10.3.15.2 24

//R6g001配置IP地址
[R6]int g0/0/1
[R6-GigabitEthernet0/0/1]ip add 10.3.25.2 24
//与单臂路由R6相连接的SW8操作
//SW8创建VLAN 40
[SW8]vlan 40
//修改与单臂路由相连接的接口为trunk口
[SW8]int e0/0/1
[SW8-Ethernet0/0/1]port link-type trunk 
[SW8-Ethernet0/0/1]port trunk allow-pass vlan all

//修改e0/0/2为access接口,允许通过VLAN 40
[SW8]int e0/0/2
[SW8-Ethernet0/0/2]port link-type access
[SW8-Ethernet0/0/2]port default vlan 40

SW6

//创建VLAN 10 20
[SW6]vlan batch 10 20

//e001接口为trunk接口
[SW6]int e0/0/1
[SW6-Ethernet0/0/1]port link-type trunk 
[SW6-Ethernet0/0/1]port trunk allow-pass vlan all

//e002接口为trunk接口
[SW6]int e0/0/2
[SW6-Ethernet0/0/2]port link-type trunk 
[SW6-Ethernet0/0/2]port trunk allow-pass vlan all

//e003接口为access接口,允许通过10
[SW6]int e0/0/3
[SW6-Ethernet0/0/3]port link-type access 
[SW6-Ethernet0/0/3]port default vlan 10

//e004接口为access接口,允许通过20
[SW6]int e0/0/4
[SW6-Ethernet0/0/4]port link-type access
[SW6-Ethernet0/0/4]port default vlan 20

SW7

//创建VLAN 30
[SW7]vlan 30  

//e001接口为trunk接口
[SW7]int e0/0/1 
[SW7-Ethernet0/0/1]port link-type trunk 
[SW7-Ethernet0/0/1]port trunk allow-pass vlan all

//e002接口为access接口,允许通过30
[SW7]int e0/0/2
[SW7-Ethernet0/0/2]port link-type access
[SW7-Ethernet0/0/2]port default vlan 30

 

配置OSPF 全网通,ACL,nat实现内网PC机访问外网

R1上配置两条默认路由,以电信为主要出口
//R1
[R1]ip route-static 0.0.0.0 0.0.0.0 12.1.1.2 preference 10
[R1]ip route-static 0.0.0.0 0 13.1.1.2
//OSPF1
[R1]ospf
[R1-ospf-1]area 0
[R1-ospf-1-area-0.0.0.0]network 10.11.11.0 0.0.0.255
[R1-ospf-1-area-0.0.0.0]network 10.12.12.0 0.0.0.255

R1配置本地内部网络下发默认路由
[R1]ospf 
[R1-ospf-1]default-route-advertise
R1作为出口需要做NAT 
[R1]acl name NAT 2000
[R1-acl-basic-NAT]rule 10 permit source 10.1.10.0 0.0.0.255
[R1-acl-basic-NAT]rule 20 permit source 10.1.20.0 0.0.0.255
[R1-acl-basic-NAT]rule 30 permit source 10.2.30.0 0.0.0.255
[R1-acl-basic-NAT]rule 40 permit source 10.2.40.0 0.0.0.255
[R1-acl-basic-NAT]rule 50 deny
//出接口开启
[R1-acl-basic-NAT]int g0/0/1
[R1-GigabitEthernet0/0/1]nat outbound 2000 
[R1]int g0/0/0
[R1-GigabitEthernet0/0/0]nat outbound 2000


OSPF2运行在设备R2,R3,R4之间
//R2
[R2]ospf 2
[R2-ospf-2]area 0
[R2-ospf-2-area-0.0.0.0]network 24.1.1.0 0.0.0.255
[R2-ospf-2-area-0.0.0.0]network  12.1.1.0 0.0.0.255
//修改连接模式为P-2-P
[R2]int g0/0/0
[R2-GigabitEthernet0/0/0]ospf network-type p2p 

//R3
[R3]ospf 2
[R3-ospf-2]area 0
[R3-ospf-2-area-0.0.0.0]network 34.1.1.0 0.0.0.255
[R3-ospf-2-area-0.0.0.0]network 13.1.1.0 0.0.0.255
//修改连接模式为P-2-P
[R3]int g0/0/0
[R3-GigabitEthernet0/0/0]ospf network-type p2p

//R4
[R4]int l 0     
[R4-LoopBack0]ip add 114.114.114.114 32
[R4]ospf 2
[R4-ospf-2]area 0
[R4-ospf-2-area-0.0.0.0]network 34.1.1.0 0.0.0.255
[R4-ospf-2-area-0.0.0.0]network 24.1.1.0 0.0.0.255
[R4-ospf-2-area-0.0.0.0]network 114.114.114.114 0.0.0.0
//修改连接模式为P-2-P
[R4]int g0/0/0
[R4-GigabitEthernet0/0/0]ospf ne
[R4-GigabitEthernet0/0/0]ospf network-type p2p
[R4]int g0/0/1
[R4-GigabitEthernet0/0/1]ospf network-type p2p 

//DHCP
[DHCP]ospf
[DHCP-ospf-1]area 0
[DHCP-ospf-1-area-0.0.0.0]network 10.4.1.0 0.0.0.255
//SW1
[SW1]ospf 
[SW1-ospf-1]area 0
[SW1-ospf-1-area-0.0.0.0]network 10.11.11.0 0.0.0.255
[SW1-ospf-1-area-0.0.0.0]network 10.3.15.0 0.0.0.255
[SW1-ospf-1-area-0.0.0.0]network 10.2.15.0 0.0.0.255
[SW1-ospf-1-area-0.0.0.0]network 10.1.14.0 0.0.0.255
[SW1-ospf-1-area-0.0.0.0]network 10.1.13.0 0.0.0.255
[SW1-ospf-1-area-0.0.0.0]network 10.4.1.0 0.0.0.255
//SW2
[SW2]ospf 
[SW2-ospf-1]area 0
[SW2-ospf-1-area-0.0.0.0]network 10.12.12.0 0.0.0.255
[SW2-ospf-1-area-0.0.0.0]network 10.1.23.0 0.0.0.255
[SW2-ospf-1-area-0.0.0.0]network 10.1.24.0 0.0.0.255
[SW2-ospf-1-area-0.0.0.0]network 10.2.25.0 0.0.0.255
[SW2-ospf-1-area-0.0.0.0]network 10.3.25.0 0.0.0.255
//SW3
[SW3]ospf
[SW3-ospf-1]area 0
[SW3-ospf-1-area-0.0.0.0]network 10.1.13.0 0.0.0.255
[SW3-ospf-1-area-0.0.0.0]network 10.1.23.0 0.0.0.255
[SW3-ospf-1-area-0.0.0.0]network 10.1.10.0 0.0.0.255
//SW4
[SW4]ospf
[SW4-ospf-1]area 0
[SW4-ospf-1-area-0.0.0.0]network 10.1.14.0 0.0.0.255
[SW4-ospf-1-area-0.0.0.0]network 10.1.24.0 0.0.0.255
[SW4-ospf-1-area-0.0.0.0]network 10.1.20.0 0.0.0.255
//SW5
[SW5]ospf 
[SW5-ospf-1]area 0
[SW5-ospf-1-area-0.0.0.0]network 10.1.24.0 0.0.0.255
[SW5-ospf-1-area-0.0.0.0]network 10.2.25.0 0.0.0.255
[SW5-ospf-1-area-0.0.0.0]network 10.2.30.0 0.0.0.255
//单臂路由
[R6]ospf
[R6-ospf-1]area 0
[R6-ospf-1-area-0.0.0.0]network 10.2.25.0 0.0.0.255
[R6-ospf-1-area-0.0.0.0]network 10.3.25.0 0.0.0.255
[R6-ospf-1-area-0.0.0.0]network 10.2.40.0 0.0.0.255

测试网络联通

PC4>ping 114.114.114.114

Ping 114.114.114.114: 32 data bytes, Press Ctrl_C to break
From 114.114.114.114: bytes=32 seq=1 ttl=251 time=94 ms
From 114.114.114.114: bytes=32 seq=2 ttl=251 time=63 ms

--- 114.114.114.114 ping statistics ---
  2 packet(s) transmitted
  2 packet(s) received
  0.00% packet loss
  round-trip min/avg/max = 63/78/94 ms

 

 

  1. 仅运维部网络管理员可以管理所有网络设备

把这些loopback都宣告ospf,ospfRID使用这个管理地址,前面就应该做
//所有设备都配置loopback口,router为单数1.1.1.1 ,switch为双数11.11.11.11
//R1
[R1]int l 0
[R1-LoopBack0]ip add 1.1.1.1 32

//SW1
[SW1]int l 0
[SW1-LoopBack0]ip add 11.11.11.11 32

//SW2
[SW2]int l 0
[SW2-LoopBack0]ip add 12.12.12.12 32

//SW3
[SW3]int l 0
[SW3-LoopBack0]ip add 13.13.13.13 32

//SW4
[SW4]int l 0
[SW4-LoopBack0]ip add 14.14.14.14 32

//SW5
[SW5]int l 0
[SW5-LoopBack0]ip add 15.15.15.15 32

//SW6
[SW6]int l 0
[SW6-LoopBack0]ip add 16.16.16.16 32

//SW7
[SW7]int l 0
[SW7-LoopBack0]ip add 17.17.17.17 32

//SW8
[SW8]int l 0
[SW8-LoopBack0]ip add 18.18.18.18 32

//DHCP
[DHCP]int l 0
[DHCP-LoopBack0]ip add 5.5.5.5 32

//单臂路由
[R6]int l 0
[R6-LoopBack0]ip add 6.6.6.6 32

只想让IP部的运维人员进行管理设备,那么每一台设备都要写acl

acl name yunwei 2001
rule 10 permit source 10.2.30.0 0.0.0.255
rule 20 deny

每台设备都设置telnet,在远程接口下进行调用ACL

user-interface vty 0 4
authentication-mode aaa
aaa
local-user kk password cipher 123 privilege 15
local-user kk service-type telnet

//在[RX-ui-vty0-4]接口下调用ACL,这种方式才可以
user-interface vty 0 4
[RX-ui-vty0-4]acl 2001 inbound

 

 

 

 

 

继续阅读
weinxin
我的微信
这是我的微信扫一扫
  • 文本由 发表于 2020年12月29日18:55:33
  • 除非特殊声明,本站文章均为原创,转载请务必保留本文链接
OSPF综合练习 Route

OSPF综合练习

OSPF综合练习   IP地址规划 R5/R6/R7之间的网段为:172.16.146.X R5/R6/R2之间的网段为:172.16.100.X 所有路由器都有一个Loopbacck 0接...
IS-IS链路状态路由协议 Route

IS-IS链路状态路由协议

IS-IS链路状态路由协议   IS-IS的由来 IS-IS是国际标准组织ISO为OSI中的无连接网络协议CLNP设计的一种动态路由协议。 现网使用TCP/IP协议,为了提供对IP路由的支持...
路由引入 Route

路由引入

路由引入 什么情况下需要路由引入 不同的路由协议需要互相学习到对方的路由信息 外部路由协议的优先级全都按照OSPF外部路由优先级150计算   情况有很多种 单点单向重分发 单点双向重分发 ...
OSPF其它特性 Route

OSPF其它特性

OSPF其它特性 只要有5类 LSA或7类 LSA产生就会产生LSA 静默接口/被动接口 启用找接口,PC机不会收到hello包了,不收到LSA报文了 ospf silent-interface g0...
匿名

发表评论

匿名网友 填写信息

:?: :razz: :sad: :evil: :!: :smile: :oops: :grin: :eek: :shock: :???: :cool: :lol: :mad: :twisted: :roll: :wink: :idea: :arrow: :neutral: :cry: :mrgreen: