NA阶段综合练习

root

233
文章

0
评论

2020年12月29日18:55:33 评论 14698字阅读48分59秒

NA阶段综合练习

公司有三个部门：生产部门【黄色】（150人）、综合部门【粉色】（60人）、IT部门【红色】（15人）。现搭建网络有以下要求：

所有PC自动获取IP地址后可以正常上网。
不同部门之间的广播报文需要被隔离。
其中生产部门要求高可靠性
仅运维部网络管理员可以管理所有网络设备
提高互联网出口的可靠性，申请两条线路上网（电信为主、移动为备）。

解答

所有PC自动获取IP地址后可以正常上网。【生产部门可靠性包含在内】

设备的基础配置

//R1
[R1]INT G0/0/1
[R1-GigabitEthernet0/0/1]IP ADD 13.1.1.1 24
[R1]INT G0/0/0
[R1-GigabitEthernet0/0/0]IP ADD 12.1.1.1 24
[R1]INT G2/0/0 
[R1-GigabitEthernet2/0/0]IP ADD 10.12.12.1 24
[R1]INT G0/0/2
[R1-GigabitEthernet0/0/2]IP ADD 10.11.11.1 24

[R2]INT G0/0/1
[R2-GigabitEthernet0/0/1]IP ADD 12.1.1.2 24
[R2]int g0/0/0
[R2-GigabitEthernet0/0/0]ip add 24.1.1.1 24

[R3]int g0/0/1
[R3-GigabitEthernet0/0/1]ip add 13.1.1.2 24
[R3]int g0/0/0
[R3-GigabitEthernet0/0/0]ip add 34.1.1.1 24

[R4]int g0/0/0
[R4-GigabitEthernet0/0/0]ip add 24.1.1.2 24
[R4]int g0/0/1
[R4-GigabitEthernet0/0/1]ip add 34.1.1.2 24

DHCP配置

//配置IP地址
[DHCP]int g0/0/0
[DHCP-GigabitEthernet0/0/0]ip add 10.4.1.2 24

//开启DHCP服务
[DHCP]dhcp enable 
Info: The operation may take a few seconds. Please wait for a moment.done.

//创建vlan 10 的地址池名称为Vlan10
[DHCP]ip pool vlan10
Info: It's successful to create an IP address pool.

//Vlan10地址池DHCP进行配置
[DHCP-ip-pool-vlan10]dis this
[V200R003C00]
#
ip pool vlan10
 gateway-list 10.1.10.254 
 network 10.1.10.0 mask 255.255.255.0 
 excluded-ip-address 10.1.10.252 10.1.10.253 
 dns-list 114.114.114.114 

//创建vlan 20 的地址池名称为Vlan20
[DHCP]ip pool vlan20
Info: It's successful to create an IP address pool.

//Vlan20地址池DHCP进行配置
[DHCP-ip-pool-vlan20]dis this
[V200R003C00]
#
ip pool vlan20
 gateway-list 10.1.20.254 
 network 10.1.20.0 mask 255.255.255.0 
 excluded-ip-address 10.1.20.252 10.1.20.253 
 dns-list 114.114.114.114 

//创建vlan 30 的地址池名称为Vlan30
[DHCP]ip pool vlan30
Info: It's successful to create an IP address pool.

//Vlan30地址池DHCP进行配置
[DHCP-ip-pool-vlan30]dis this            
[V200R003C00]
#
ip pool vlan30
 gateway-list 10.2.30.254 
 network 10.2.30.0 mask 255.255.255.0 
 dns-list 114.114.114.114 

//创建vlan 40 的地址池名称为Vlan40
[DHCP]ip pool vlan40
Info: It's successful to create an IP address pool.

//Vlan40地址池DHCP进行配置
[DHCP-ip-pool-vlan40]dis this
[V200R003C00]
#
ip pool vlan40
 gateway-list 10.2.40.254 
 network 10.2.40.0 mask 255.255.255.0 
 dns-list 114.114.114.114

//接口开启DHCP全局模式
[DHCP]int g0/0/0
[DHCP-GigabitEthernet0/0/0]dhcp select global

//开启DHCP中继器
//SW3中继器配置
[SW3]dhcp enable 
[SW3]int vlan 10
[SW3-Vlanif10]dhcp select relay 
[SW3-Vlanif10]dhcp relay server-ip 10.4.1.2

[SW3]int vlan 20
[SW3-Vlanif20]dhcp select relay
[SW3-Vlanif20]dhcp relay server-ip 10.4.1.2

//SW4中继器配置
[SW4]dhcp enable
[SW4]int vlan 10
[SW4-Vlanif10]dhcp select relay
[SW4-Vlanif10]dhcp relay server-ip 10.4.1.2

[SW4]int vlan 20
[SW4-Vlanif20]dhcp select relay 
[SW4-Vlanif20]dhcp relay server-ip 10.4.1.2

//SW5开启中继
[SW5]int Vlanif 30
[SW5-Vlanif30]dhcp select relay
[SW5-Vlanif30]dhcp relay server-ip 10.4.1.2

//单臂路由开启中继
[R6]dhcp enable
[R6]int g0/0/2.1
[R6-GigabitEthernet0/0/2.1]dhcp select relay
[R6-GigabitEthernet0/0/2.1]dhcp relay server-ip 10.4.1.2

二层交换机端口改trunk口，三层交换机与路由器相连接的端口改access口

SW1

//关闭STP
[SW1]stp disable 
Warning: The global STP state will be changed. Continue? [Y/N]y
Info: This operation may take a few seconds. Please wait for a moment...done.

//核心层中间两条线为冗余线路，接口全都为trunk口
[SW1]int g0/0/3
[SW1-GigabitEthernet0/0/3]port link-type trunk
[SW1-GigabitEthernet0/0/3]port trunk allow-pass vlan all
[SW1]int g0/0/4
[SW1-GigabitEthernet0/0/4]port link-type trunk
[SW1-GigabitEthernet0/0/4]port trunk allow-pass vlan all

//核心层其他接口为acees口
[SW1]int g0/0/1
[SW1-GigabitEthernet0/0/1]port link-type access
[SW1-GigabitEthernet0/0/1]port default vlan 111
[SW1]int g0/0/2
[SW1-GigabitEthernet0/0/2]port link-type access 
[SW1-GigabitEthernet0/0/2]port default vlan 41

[SW1]int g0/0/5
[SW1-GigabitEthernet0/0/5]port link-type access
[SW1-GigabitEthernet0/0/5]port default vlan 113

[SW1]int g0/0/6
[SW1-GigabitEthernet0/0/6]port link-type access
[SW1-GigabitEthernet0/0/6]port default vlan 114

[SW1]int g0/0/7
[SW1-GigabitEthernet0/0/7]port link-type access
[SW1-GigabitEthernet0/0/7]port default vlan 215

[SW1]int g0/0/8
[SW1-GigabitEthernet0/0/8]port link-type access
[SW1-GigabitEthernet0/0/8]port default vlan 315

[SW1]dis port vlan
Port                    Link Type    PVID  Trunk VLAN List
-------------------------------------------------------------------------------
GigabitEthernet0/0/1    access       113     -                                   
GigabitEthernet0/0/2    access       41    -                                   
GigabitEthernet0/0/3    trunk        1     1-4094
GigabitEthernet0/0/4    trunk        1     1-4094
GigabitEthernet0/0/5    access       113   -                                   
GigabitEthernet0/0/6    access       114   -                                   
GigabitEthernet0/0/7    access       215   -                                   
GigabitEthernet0/0/8    access       315   -

//创建VLAN
[SW1]vlan batch 41 111 113 114 215 315

//配置SVI 41 ip地址
[SW1]int vlan 41
[SW1-Vlanif41]ip add 10.4.1.1 24

//配置SVI 111 ip地址
[SW1]int vlan 111
[SW1-Vlanif111]ip add 10.11.11.2 24

//配置SVI 113 ip地址
[SW1]int vlan 113
[SW1-Vlanif113]ip add 10.1.13.1 24

//配置SVI 114 ip地址
[SW1]int vlan 114
[SW1-Vlanif114]ip add 10.1.14.1 24

//配置SVI 215 ip地址
[SW1]int vlan 215
[SW1-Vlanif215]ip add 10.2.15.1 24

//配置SVI 315 ip地址
[SW1]int vlan 315
[SW1-Vlanif315]ip add 10.3.15.1 24

SW2

//关闭stp
[SW2]stp disab
Warning: The global STP state will be changed. Continue? [Y/N]y
Info: This operation may take a few seconds. Please wait for a moment...done.

//核心层中间两条线为冗余线路，接口全都为trunk口 
[SW2]int g0/0/3 
[SW2-GigabitEthernet0/0/3]port link-type trunk
[SW2-GigabitEthernet0/0/3]port trunk allow-pass vlan all

[SW2]int g0/0/4 
[SW2-GigabitEthernet0/0/4]port link-type trunk
[SW2-GigabitEthernet0/0/4]port trunk allow-pass vlan all

//核心层其他接口为acees口
[SW2]int g0/0/1
[SW2-GigabitEthernet0/0/1]port link-type access
[SW2-GigabitEthernet0/0/1]port default vlan 121

[SW2]int g0/0/2
[SW2-GigabitEthernet0/0/2]port link-type access
[SW2-GigabitEthernet0/0/2]port default vlan 123

[SW2]int g0/0/5
[SW2-GigabitEthernet0/0/5]port link-type access
[SW2-GigabitEthernet0/0/5]port default vlan 124

[SW2]int g0/0/6
[SW2-GigabitEthernet0/0/6]port link-type access 
[SW2-GigabitEthernet0/0/6]port default vlan 225

[SW2]int g0/0/7
[SW2-GigabitEthernet0/0/7]port link-type access 
[SW2-GigabitEthernet0/0/7]port default vlan 325

[SW2]dis port vlan
Port                    Link Type    PVID  Trunk VLAN List
-------------------------------------------------------------------------------
GigabitEthernet0/0/1    access       121   -                                   
GigabitEthernet0/0/2    access       123   -                                   
GigabitEthernet0/0/3    trunk        1     1-4094
GigabitEthernet0/0/4    trunk        1     1-4094
GigabitEthernet0/0/5    access       124   -                                   
GigabitEthernet0/0/6    access       225   -                                   
GigabitEthernet0/0/7    access       325   -

//创建VLAN
[SW2]vlan batch 121 123 124 225 325

//配置SVI 121 ip地址
[SW2]int vlan 121
[SW2-Vlanif121]ip add 10.12.12.2 24

//配置SVI 123 ip地址
[SW2]int vlan 123
[SW2-Vlanif123]ip add 10.1.23.1 24

//配置SVI 124 ip地址
[SW2]int vlan 124
[SW2-Vlanif124]ip add 10.1.24.1 24

//配置SVI 225 ip地址
[SW2]int vlan 225
[SW2-Vlanif225]ip add 10.2.25.1 24

//配置SVI 325 ip地址
[SW2]int vlan 325
[SW2-Vlanif325]ip add 10.3.25.1 24

SW3

//创建VLAN
[SW3]vlan batch 10 20 113 123

//配置SVI 113 ip地址
[SW3]int vlan 113
[SW3-Vlanif113]ip add 10.1.13.2 24

//配置SVI 123 ip地址
[SW3]int vlan 123
[SW3-Vlanif123]ip add 10.1.23.2 24

//配置SVI 10 ip地址
[SW3]interface vlan 10
[SW3-Vlanif10]ip add 10.1.10.252 24
//配置VRRP VRID 10 为master
 [SW3-Vlanif10]vrrp vrid 10 virtual-ip 10.1.10.254
[SW3-Vlanif10]vrrp vrid 10 priority 11
//VRPP缺陷设置
[SW3-Vlanif10]vrrp vrid 10 track interface g0/0/1 reduced 20
[SW3-Vlanif10]vrrp vrid 10 track interface g0/0/2 reduced 20

//配置SVI 20 ip地址
[SW3]int vlan 20
[SW3-Vlanif20]ip add 10.1.20.252 24
//配置VRRP VRID 20
[SW3]int vlan 20
[SW3-Vlanif20]vrrp vrid 20 virtual-ip 10.1.20.254

//G001接口设置接口类型为access
[SW3-GigabitEthernet0/0/1]dis this
#
interface GigabitEthernet0/0/1
 port link-type access
 port default vlan 113
#
return

//G002接口设置接口类型为access
[SW3-GigabitEthernet0/0/2]dis this
#
interface GigabitEthernet0/0/2
 port link-type access
 port default vlan 123
#
return

//配置聚合接口聚合g005与g004
[SW3]int Eth-Trunk 11
[SW3-Eth-Trunk11]mode lacp-static 
[SW3-Eth-Trunk11]trunkport g0/0/4
[SW3-Eth-Trunk11]trunkport g0/0/5

//聚合接口Eth-trunk 11 设置为trunk口
[SW3]int Eth-Trunk 11
[SW3-Eth-Trunk11]dis this    
interface Eth-Trunk11
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
 mode lacp-static

//g005修改为trunk口
[SW3]int g0/0/5
[SW3-GigabitEthernet0/0/5]port link-type trunk 
[SW3-GigabitEthernet0/0/5]port trunk allow-pass vlan all

SW4

//创建VLAN
[SW4]vlan batch 10 20 114 215

//配置SVI 10 ip地址
[SW4]int vlan 10
[SW4-Vlanif10]ip add 10.1.10.253 24
//配置VRRP VRID 10
[SW4-Vlanif10]vrrp vrid 10 virtual-ip 10.1.10.254

//配置SVI 20 ip地址
[SW4]int vlan 20
[SW4-Vlanif20]ip add 10.1.20.253 24
//配置VRRP VRID 20 master
[SW4-Vlanif20]vrrp vrid 20 virtual-ip 10.1.20.254
[SW4-Vlanif20]vrrp vrid 20 priority 110
//VRPP缺陷设置
[SW4-Vlanif20]vrrp vrid 20 track interface g0/0/1 reduced 20
[SW4-Vlanif20]vrrp vrid 20 track interface g0/0/2 reduced 20

//配置SVI 114 ip地址
[SW4]int vlan 114
[SW4-Vlanif114]ip add 10.1.14.2 24

//配置SVI 124 ip地址
[SW4]int vlan 124
[SW4-Vlanif124]ip add 10.1.24.2 24

//G001接口设置接口类型为access
[SW4-GigabitEthernet0/0/1]dis this
#
interface GigabitEthernet0/0/1
 port link-type access
 port default vlan 114
#
return

//G002接口设置接口类型为access
[SW4-GigabitEthernet0/0/2]dis this
#
interface GigabitEthernet0/0/2
 port link-type access
 port default vlan 124
#
return

//配置聚合接口聚合g005与g004
[SW4]int Eth-Trunk 11
[SW4-Eth-Trunk11]mode lacp-static
[SW4-Eth-Trunk11]trunkport g0/0/3
[SW4-Eth-Trunk11]trunkport g0/0/4
//聚合接口Eth-trunk 11 设置为trunk口
[SW4]int Eth-Trunk 11
[SW4-Eth-Trunk11]port link-type trunk
[SW4-Eth-Trunk11]port trunk allow-pass vlan all

//g005修改为trunk口
[SW4]int g0/0/5
[SW4-GigabitEthernet0/0/5]port link-type trunk
[SW4-GigabitEthernet0/0/5]port trunk allow-pass vlan all

查看VRRP的状态

SW5

//创建VLAN 
[SW5]vlan batch 30 215 225

//配置SVI 30 ip地址
[SW5]int vlan 30
[SW5-Vlanif30]ip add 10.2.30.254 24

//配置SVI 215 ip地址
[SW5]int vlan 215
[SW5-Vlanif215]ip add 10.2.15.2 24

//配置SVI 225 ip地址
[SW5]int vlan 225
[SW5-Vlanif225]ip add 10.2.25.2 24

//g001修改为access口
[SW5-GigabitEthernet0/0/1]dis this
#
interface GigabitEthernet0/0/1
 port link-type access
 port default vlan 215
#
return

//g002修改为access口
[SW5-GigabitEthernet0/0/2]dis this
#
interface GigabitEthernet0/0/2
 port link-type access
 port default vlan 225
#
return
//g003修改为trunk口
[SW5]int g0/0/5
[SW5-GigabitEthernet0/0/5]port link-type trunk 
[SW5-GigabitEthernet0/0/5]port trunk allow-pass vlan all

R6单臂路由与SW8

//单臂路由操作
//与SW相连接的接口
[R6]int g0/0/2
[R6-GigabitEthernet0/0/2]undo shutdown
Info: Interface GigabitEthernet0/0/2 is not shutdown.
//配置虚拟接口为VLAN40的网关
[R6]int g0/0/2.1
[R6-GigabitEthernet0/0/2.1]dot1q ter vid 40
[R6-GigabitEthernet0/0/2.1]ip add 10.2.40.254 24
[R6-GigabitEthernet0/0/2.1]arp broadcast enable

//R6g000配置IP地址
[R6]int g0/0/0
[R6-GigabitEthernet0/0/0]ip add 10.3.15.2 24

//R6g001配置IP地址
[R6]int g0/0/1
[R6-GigabitEthernet0/0/1]ip add 10.3.25.2 24
//与单臂路由R6相连接的SW8操作
//SW8创建VLAN 40
[SW8]vlan 40
//修改与单臂路由相连接的接口为trunk口
[SW8]int e0/0/1
[SW8-Ethernet0/0/1]port link-type trunk 
[SW8-Ethernet0/0/1]port trunk allow-pass vlan all

//修改e0/0/2为access接口，允许通过VLAN 40
[SW8]int e0/0/2
[SW8-Ethernet0/0/2]port link-type access
[SW8-Ethernet0/0/2]port default vlan 40

SW6

//创建VLAN 10 20
[SW6]vlan batch 10 20

//e001接口为trunk接口
[SW6]int e0/0/1
[SW6-Ethernet0/0/1]port link-type trunk 
[SW6-Ethernet0/0/1]port trunk allow-pass vlan all

//e002接口为trunk接口
[SW6]int e0/0/2
[SW6-Ethernet0/0/2]port link-type trunk 
[SW6-Ethernet0/0/2]port trunk allow-pass vlan all

//e003接口为access接口，允许通过10
[SW6]int e0/0/3
[SW6-Ethernet0/0/3]port link-type access 
[SW6-Ethernet0/0/3]port default vlan 10

//e004接口为access接口，允许通过20
[SW6]int e0/0/4
[SW6-Ethernet0/0/4]port link-type access
[SW6-Ethernet0/0/4]port default vlan 20

SW7

//创建VLAN 30
[SW7]vlan 30  

//e001接口为trunk接口
[SW7]int e0/0/1 
[SW7-Ethernet0/0/1]port link-type trunk 
[SW7-Ethernet0/0/1]port trunk allow-pass vlan all

//e002接口为access接口，允许通过30
[SW7]int e0/0/2
[SW7-Ethernet0/0/2]port link-type access
[SW7-Ethernet0/0/2]port default vlan 30

配置OSPF 全网通，ACL，nat实现内网PC机访问外网

R1上配置两条默认路由，以电信为主要出口
//R1
[R1]ip route-static 0.0.0.0 0.0.0.0 12.1.1.2 preference 10
[R1]ip route-static 0.0.0.0 0 13.1.1.2
//OSPF1
[R1]ospf
[R1-ospf-1]area 0
[R1-ospf-1-area-0.0.0.0]network 10.11.11.0 0.0.0.255
[R1-ospf-1-area-0.0.0.0]network 10.12.12.0 0.0.0.255

R1配置本地内部网络下发默认路由
[R1]ospf 
[R1-ospf-1]default-route-advertise
R1作为出口需要做NAT 
[R1]acl name NAT 2000
[R1-acl-basic-NAT]rule 10 permit source 10.1.10.0 0.0.0.255
[R1-acl-basic-NAT]rule 20 permit source 10.1.20.0 0.0.0.255
[R1-acl-basic-NAT]rule 30 permit source 10.2.30.0 0.0.0.255
[R1-acl-basic-NAT]rule 40 permit source 10.2.40.0 0.0.0.255
[R1-acl-basic-NAT]rule 50 deny
//出接口开启
[R1-acl-basic-NAT]int g0/0/1
[R1-GigabitEthernet0/0/1]nat outbound 2000 
[R1]int g0/0/0
[R1-GigabitEthernet0/0/0]nat outbound 2000


OSPF2运行在设备R2，R3，R4之间
//R2
[R2]ospf 2
[R2-ospf-2]area 0
[R2-ospf-2-area-0.0.0.0]network 24.1.1.0 0.0.0.255
[R2-ospf-2-area-0.0.0.0]network  12.1.1.0 0.0.0.255
//修改连接模式为P-2-P
[R2]int g0/0/0
[R2-GigabitEthernet0/0/0]ospf network-type p2p 

//R3
[R3]ospf 2
[R3-ospf-2]area 0
[R3-ospf-2-area-0.0.0.0]network 34.1.1.0 0.0.0.255
[R3-ospf-2-area-0.0.0.0]network 13.1.1.0 0.0.0.255
//修改连接模式为P-2-P
[R3]int g0/0/0
[R3-GigabitEthernet0/0/0]ospf network-type p2p

//R4
[R4]int l 0     
[R4-LoopBack0]ip add 114.114.114.114 32
[R4]ospf 2
[R4-ospf-2]area 0
[R4-ospf-2-area-0.0.0.0]network 34.1.1.0 0.0.0.255
[R4-ospf-2-area-0.0.0.0]network 24.1.1.0 0.0.0.255
[R4-ospf-2-area-0.0.0.0]network 114.114.114.114 0.0.0.0
//修改连接模式为P-2-P
[R4]int g0/0/0
[R4-GigabitEthernet0/0/0]ospf ne
[R4-GigabitEthernet0/0/0]ospf network-type p2p
[R4]int g0/0/1
[R4-GigabitEthernet0/0/1]ospf network-type p2p 

//DHCP
[DHCP]ospf
[DHCP-ospf-1]area 0
[DHCP-ospf-1-area-0.0.0.0]network 10.4.1.0 0.0.0.255
//SW1
[SW1]ospf 
[SW1-ospf-1]area 0
[SW1-ospf-1-area-0.0.0.0]network 10.11.11.0 0.0.0.255
[SW1-ospf-1-area-0.0.0.0]network 10.3.15.0 0.0.0.255
[SW1-ospf-1-area-0.0.0.0]network 10.2.15.0 0.0.0.255
[SW1-ospf-1-area-0.0.0.0]network 10.1.14.0 0.0.0.255
[SW1-ospf-1-area-0.0.0.0]network 10.1.13.0 0.0.0.255
[SW1-ospf-1-area-0.0.0.0]network 10.4.1.0 0.0.0.255
//SW2
[SW2]ospf 
[SW2-ospf-1]area 0
[SW2-ospf-1-area-0.0.0.0]network 10.12.12.0 0.0.0.255
[SW2-ospf-1-area-0.0.0.0]network 10.1.23.0 0.0.0.255
[SW2-ospf-1-area-0.0.0.0]network 10.1.24.0 0.0.0.255
[SW2-ospf-1-area-0.0.0.0]network 10.2.25.0 0.0.0.255
[SW2-ospf-1-area-0.0.0.0]network 10.3.25.0 0.0.0.255
//SW3
[SW3]ospf
[SW3-ospf-1]area 0
[SW3-ospf-1-area-0.0.0.0]network 10.1.13.0 0.0.0.255
[SW3-ospf-1-area-0.0.0.0]network 10.1.23.0 0.0.0.255
[SW3-ospf-1-area-0.0.0.0]network 10.1.10.0 0.0.0.255
//SW4
[SW4]ospf
[SW4-ospf-1]area 0
[SW4-ospf-1-area-0.0.0.0]network 10.1.14.0 0.0.0.255
[SW4-ospf-1-area-0.0.0.0]network 10.1.24.0 0.0.0.255
[SW4-ospf-1-area-0.0.0.0]network 10.1.20.0 0.0.0.255
//SW5
[SW5]ospf 
[SW5-ospf-1]area 0
[SW5-ospf-1-area-0.0.0.0]network 10.1.24.0 0.0.0.255
[SW5-ospf-1-area-0.0.0.0]network 10.2.25.0 0.0.0.255
[SW5-ospf-1-area-0.0.0.0]network 10.2.30.0 0.0.0.255
//单臂路由
[R6]ospf
[R6-ospf-1]area 0
[R6-ospf-1-area-0.0.0.0]network 10.2.25.0 0.0.0.255
[R6-ospf-1-area-0.0.0.0]network 10.3.25.0 0.0.0.255
[R6-ospf-1-area-0.0.0.0]network 10.2.40.0 0.0.0.255

测试网络联通

PC4>ping 114.114.114.114

Ping 114.114.114.114: 32 data bytes, Press Ctrl_C to break
From 114.114.114.114: bytes=32 seq=1 ttl=251 time=94 ms
From 114.114.114.114: bytes=32 seq=2 ttl=251 time=63 ms

--- 114.114.114.114 ping statistics ---
  2 packet(s) transmitted
  2 packet(s) received
  0.00% packet loss
  round-trip min/avg/max = 63/78/94 ms

仅运维部网络管理员可以管理所有网络设备

把这些loopback都宣告ospf，ospfRID使用这个管理地址，前面就应该做
//所有设备都配置loopback口，router为单数1.1.1.1 ，switch为双数11.11.11.11
//R1
[R1]int l 0
[R1-LoopBack0]ip add 1.1.1.1 32

//SW1
[SW1]int l 0
[SW1-LoopBack0]ip add 11.11.11.11 32

//SW2
[SW2]int l 0
[SW2-LoopBack0]ip add 12.12.12.12 32

//SW3
[SW3]int l 0
[SW3-LoopBack0]ip add 13.13.13.13 32

//SW4
[SW4]int l 0
[SW4-LoopBack0]ip add 14.14.14.14 32

//SW5
[SW5]int l 0
[SW5-LoopBack0]ip add 15.15.15.15 32

//SW6
[SW6]int l 0
[SW6-LoopBack0]ip add 16.16.16.16 32

//SW7
[SW7]int l 0
[SW7-LoopBack0]ip add 17.17.17.17 32

//SW8
[SW8]int l 0
[SW8-LoopBack0]ip add 18.18.18.18 32

//DHCP
[DHCP]int l 0
[DHCP-LoopBack0]ip add 5.5.5.5 32

//单臂路由
[R6]int l 0
[R6-LoopBack0]ip add 6.6.6.6 32

只想让IP部的运维人员进行管理设备，那么每一台设备都要写acl

acl name yunwei 2001
rule 10 permit source 10.2.30.0 0.0.0.255
rule 20 deny

每台设备都设置telnet，在远程接口下进行调用ACL

user-interface vty 0 4
authentication-mode aaa
aaa
local-user kk password cipher 123 privilege 15
local-user kk service-type telnet

//在[RX-ui-vty0-4]接口下调用ACL，这种方式才可以
user-interface vty 0 4
[RX-ui-vty0-4]acl 2001 inbound

继续阅读