交换机和路由器实验

实验软件为华为ensp1.3版本

1.SW2使用telnet方式登录另一台交换机SW1

实验配置：两台二层交换机，IP分别为192.168.1.10/20，子网掩码255.255.255.0

(1)交换机初始化操作

undo terminal monitor　　 #关闭消息提示（用户视图）
system-view　　　　　　　   #登录系统视图
sysname SW1/SW2　　　      #交换机改名为SW1/2
user-interface console 0　#进入主控模式
idle-timeout 0 0　　　　　 #设置窗口永不过期

(2)配置交换机IP（系统视图）

interface Vlanif 1
ip address 192.168.1.10/20 255.255.255.0　

(3)测试两个交换机是否能互相ping通

ping 192.168.1.10/20

(4)SW1作为telnet服务端配置telnet服务（系统视图）

user-interface vty 0 4　　　　　　　　　　　　　   #进入telnet
authentication-mode password　　　　　　　　　    #验证模式为密码模式
set authentication password simple　<密码>　　  #设置密文或者明文密码
user privilege level 3　　　　　　　　　　　　　　 #设置用户权限为3级

(5)客户机验证telnet功能（SW2 telnet SW1登录）

telnet 192.168.1.10（用户视图）

命令提升符变为<SW1>，实验成功

2.配置VLAN使得同一台交换机下的3台PC不互通

实验配置：一台二层交换机，3台PC

(1)划分vlan

交换机默认有vlan1，所有接口都在vlan1中，所以需要划分vlan2,vlan3

system-view
vlan bat 2 3　   #批量划分vlan，连续划分命令为 vlan bat ?? to ??　　
dis vlan　　     #查看vlan是否划分成功

(2)将交换机接口划分到vlan，e0/0/1--vlan1，e0/0/2--vlan2，e0/0/3--vlan3，一号接口默认在vlan1中，不需要划分

int e0/0/2　　　　　　　　 #进入2号接口
port link-type access　　#设置接口模式为access，华为有三种接口模式 access,trunk,hybrid
port default vlan 2　　　 #设置2号接口在vlan 2中
display vlan　　　　　　　 #查看vlan，U为使用的接口，D为未使用的接口

3号接口划分到vlan 3中

(3)验证

3台PC无法互相ping通,vlan隔离完成

(4)清除配置

交换机清除接口配置后接口会关闭，使用需手动开启，int 进入接口，undo shutdown开启接口

clear config int e0/0/?
display this　　#查看接口状态

3.同一个部门的员工划分到了不同交换机，但是是在同一个vlan，要求同一个部门员工可以通信，不同部门员工不可通信

实验配置：两台二层交换机，6台PC

(1)两台交换机分别创建vlan

vlan bat 10 20 30 

(2)将两台交换机接口划分到对应的vlan中

e0/0/1--vlan10　　e0/0/2--vlan20　　e0/0/3--vlan30

int e0/0/1
port link-type access
port default vlan 10
dis vlan　

其他接口对应操作

(3)两台交换机设置trunk（接口号要一样）

int e0/0/22　　　　　　  #接口号自选，不冲突就行
port link-type trunk　 #设置为trunk模式
port trunk allow-pass vlan 10 20 30　　#允许带有vlan标签 10 20 30 的数据帧通过
dis port vlan　　　　　 #查看

(4)测试连通性

vlan10，vlan20 ，vlan30互相隔离，不可ping通

相同vlan里面的两台机可以ping通

4.不同VLAN如何通信（使用单臂路由技术）

实验配置：一台路由器（router或者AR），一台二层交换机，两台PC

(1)交换机配置

undo terminal monitor
system-view
sysname SW1
user-interface console 0
idle-timeout 0 0
vlan bat 10 20
int e0/0/1
port link-type access
port default vlan 10
int e0/0/2
port link-type access
port default vlan 20
int g0/0/1
port link-type trunk
port trunk allow-pass vlan all

(2)路由器配置

undo terminal monitor
system-view
sysname R1
user-interface console 0
idle-timeout 0 0
int g0/0/0
undo shutdown　　#开启接口，开启物理接口后虚拟接口也开启
q
int g0/0/0.?　　 #查看最多子接口的数量
int g0/0/0.10
vlan-type dot1q 10 default
ip add 192.168.10.1 24
q
int g0/0/0.20
vlan-type dot1q 20 default
ip add 192.168.20.1 24
q
display ip routing-table　　#查看路由表

(3)PC配置

PC1
192.168.10.10
255.255.255.0
192.168.10.1
PC2
192.168.20.10
255.255.255.0
192.168.20.1

(4)验证

PC1和PC2互相能ping通，则不同vlan可以互相通信

(5) 使用AR路由器完成此实验

AR路由器命令和R1路由器不太一样，配置如下

undo terminal monitor
system-view
sysname AR1
user-interface console 0
idle-timeout 0 0
int g0/0/0
undo shutdown     
q
int g0/0/0.?     
int g0/0/0.10
dot1q termination vid 10
ip add 192.168.10.1 255.255.255.0
arp broadcast enable    #AR路由器ARP广播默认关闭，需手动开启    
q
int g0/0/0.20
dot1q termination vid 20
ip add 192.168.20.1 255.255.255.0
arp broadcast enable
q
display ip routing-table     

5.使用三层交换机实现不同VLAN机器通信

实验配置：一台三层交换机，两台PC

(1)交换机配置

undo terminal monitor
system-view
syaname layer3-SW
user-interface console 0
idle-time 0 0
q
vlan bat 10 20
int g0/0/1
port link-type access
port default vlan 10
q
int g0/0/2
port link-type access
port default vlan 20
q
dis vlan
int Vlanif 10    #物理接口不可以配置IP，可以在虚拟接口配置
ip address 192.168.10.1 24
q
int Vlanif 20
ip address 192.168.20.1 24

(2)PC机配置

PC1
192.168.10.10
255.255.255.0
192.168.10.1
PC2
192.168.20.10
255.255.255.0
192.168.20.1

(3)验证

PC机可互相ping通，实验成功

6.使用二层交换机实现链路聚合（eth-trunk）

实验配置：两台二层交换机，两台PC

(1)两个交换机配置

undo terminal monitor
system-view
sysname link-SW1/link-SW2
user-interface console 0
idle-timeout 0 0

vlan 2             #两个交换机分别创建vlan2

int eth-trunk 1    #创建eth-trunk链路1

int e0/0/1
eth-trunk 1        #一号接口成为eth-trunk 1成员
int e0/0/2    
eth-trunk 1

int eth-trunk 1    #进入eth-trunk 1号链路接口
port link-type trunk    #设置为trunk模式
port trunk allow-pass vlan all

int e0/0/3    
port link-type access
port default vlan 2     #两个交换机3号接口连接pc，处在vlan 2中    

(2)PC机配置

PC1
192.168.1.10
255.255.255.0
PC2
192.168.1.20
255.255.255.0

(3)验证

PC1/2可以互相Ping通，链路连通

7.路由配置实验

实验配置：三台AR1220路由器，两台PC

(1)AR1配置

int g0/0/1
ip add 192.168.1.1 24
undo shutdown
int g0/0/0
ip add 10.1.1.1 24
undo shutdown
dis ip routing-table
ip route-static 10.1.2.0 24 10.1.1.2
ip route-static 192.168.2.0 24 10.1.1.2

(2)AR2配置

int g0/0/0
ip add 10.1.1.2 24
undo shutdown
int g0/0/1
ip add 10.1.2.2 24
undo shutdown
dis ip routing-table
ip route-static 192.168.1.0 24 10.1.1.1
ip route-static 192.168.2.0 24 10.1.2.3

(3)AR3配置

int g0/0/0
ip add 10.1.2.3 24
undo shutdown
int g0/0/1
ip add 192.168.2.3 24
undo shutdown
dis ip routing-table
ip route-static 192.168.1.0 24 10.1.2.2
ip route-static 10.1.1.0 24 10.1.2.2

(4)PC配置

PC1
192.168.1.10
255.255.255.0
192.168.1.1
PC2
192.168.2.10
255.255.255.0
192.168.2.3

(5)验证

PC1和PC2能互相ping通

8.默认路由实现PC1和PC2互通

(1)AR1配置

int g0/0/0
ip add 192.168.1.1 24 
undo shutdown
int g0/0/1
ip add 10.1.1.1 24
undo shutdown
ip route-static 0.0.0.0 0 10.1.1.2

(2)AR2配置

int g0/0/0
ip add 10.1.1.2 24 
undo shutdown
int g0/0/1
ip add 10.1.2.2 24
undo shutdown
ip route-static 192.168.1.0 24 10.1.1.1
ip route-static 192.168.2.0 24 10.1.2.3

(3)AR3配置

int g0/0/0
ip add 10.1.2.3 24 
undo shutdown
int g0/0/1
ip add 192.168.2.3 24
undo shutdown
ip route-static 0.0.0.0 0 10.1.2.2

(4)PC配置

PC1
192.168.1.10
255.255.255.0
192.168.1.1
PC2
192.168.2.10
255.255.255.0
192.168.2.3

(5)验证

ping或者tracert

9.在实验8基础上实现浮动路由

浮动路由指的是配置两条静态路由，默认选取链路质量优（带宽大的）作为主路径，当路径出现故障时，由带宽较小的备份路由顶替，保持网络的不中断。

AR1和AR2之间加了一条链路，网段设为 10.1.3.0/24

(1) AR1配置

int g0/0/2
ip add 10.1.3.1 24
undo shutdown
ip route-static 0.0.0.0 0 10.1.3.2 preference 65　　　　#优先级要设置比60大，范围为1-255

(2)AR2配置

int g0/0/2
ip add 10.1.3.2 24
undo shutdown
ip route-static 192.168.1.0 24 10.1.3.1 preference 65

(3)验证

关闭10.1.1.0网段链路，PC1和PC2仍可互通，证明备用链路可用

关闭AR1的主链路接口测试一下
int g0/0/1
shutdown    #关闭接口
q
dis ip routing-table    #查看路由表有一条10.1.3.0，优先级为65的路由
ping 192.168.2.10
tracert 192.168.2.10
int g0/0/1
undo shutdown　　#开启接口

10.三层链路聚合

实验配置：两台三层CE12800交换机 

(1)优化配置

undo terminal monitor
system-view
sysname CE1/CE2
user-interface console 0
idle-timeout 1440

(2)CE1

在系统视图下创建一个eth-trunk接口，开启三层端口并设置IP地址（三层接口不能划分VLAN）

int eth-trunk 1
undo portswitch　　　　#portswitch是将三层接口转换为二层接口，undo portswitch取消转换
ip add 10.1.1.1 24

将成员接口加入到eth-trunk中

int g1/0/0
undo shutdown
eth-trunk 1
int g1/0/1
undo shutdown
eth-trunk 1

int loopback0
ip address 192.168.1.100 32
<>save
display ip routing-table

(2)CE2

int eth-trunk 1
undo portswitch
ip add 10.1.1.2 255.255.255.0
将成员接口加入eth-trunk接口
int GE1/0/0
undo shutdown
eth-trunk 1
int GE1/0/1
undo shutdown
eth-trunk 1
int loopback0
ip add 192.168.2.100 32
save
display ip routing-table
ping 10.1.1.1

(3)CE1　　#添加双向主机网络路由，实现通信

ip route-static 192.168.2.100 32 10.1.1.2
save
display ip routing-table

(4)CE2

ip route-static 192.168.1.100 32 10.1.1.1
save
display ip routing-table

(5)带源IP ping/tracert 目标IP

CE1    源IP           目标IP
ping -a 192.168.1.100 192.168.2.100
CE2
ping -a 192.168.2.100 192.168.1.100

tracert -a 源IP 目标IP

11.使用动态路由协议RIP实现通信

需求配置：三台AR3260路由器

(1)三台路由器初始化配置

undo terminal monitor
system-view
sysname AR1/2/3
user-interface console 0
idle-timeout 0 0
q

(2)AR1配置

int g0/0/0
ip add 192.168.1.1 24
int LoopBack 0
ip add 10.2.1.8 32
rip
version 2
undo summary
dis this    #查看版本是否已改变
network 10.0.0.0
network 192.168.1.0
dis ip routing-table

(3)AR2配置

int g0/0/0
ip add 192.168.1.2 24
int g0/0/1
ip add 172.16.1.2 24
rip
version 2
undo summary
dis this
network 192.168.1.0
network 172.16.0.0
dis ip routing-table

(4)AR3配置

int g0/0/1
ip add 172.16.1.3 24
int LoopBack 0
ip add 10.2.3.10 32
rip
version 2
undo summary
dis this
network 172.16.0.0
network 10.0.0.0
dis ip routing-table

(5)验证

ping  -a  10.2.1.8  1.2.3.10　

12.使用动态路由协议OSPF实现单区域通信

实验配置：三台AR3260路由器

(1)三台路由器初始化配置

undo terminal monitor
system-view
sysname AR1/2/3
user-interface console 0
idle-timeout 0 0

(2)三台路由器接口加IP

AR1

[AR1]int g0/0/0
[AR1-GigabitEthernet0/0/0]ip add 10.1.1.1 24
[AR1-GigabitEthernet0/0/0]q    
[AR1]int LoopBack 0
[AR1-LoopBack0]ip add 192.168.1.1 32
[AR1-LoopBack0]q

AR2

[AR2]int g0/0/0
[AR2-GigabitEthernet0/0/0]ip add 10.1.1.2 24
[AR2-GigabitEthernet0/0/0]int g0/0/1
[AR2-GigabitEthernet0/0/1]ip add 10.1.2.2 24
[AR2-GigabitEthernet0/0/1]q

AR3

[AR3]int g0/0/1
[AR3-GigabitEthernet0/0/1]ip add 10.1.2.3 24
[AR3-GigabitEthernet0/0/1]q    
[AR3]int LoopBack 0
[AR3-LoopBack0]ip add 172.16.1.1 32
[AR3-LoopBack0]q

(3)配置OSPF协议

AR1

[AR1]ospf 1 router-id 1.1.1.1
[AR1-ospf-1]area 0
[AR1-ospf-1-area-0.0.0.0]network 192.168.1.1 0.0.0.0
[AR1-ospf-1-area-0.0.0.0]network 10.1.1.0 0.0.0.255
[AR1-ospf-1-area-0.0.0.0]dis ospf peer

AR2

[AR2]ospf 1 router-id 2.2.2.2
[AR2-ospf-1]area 0
[AR2-ospf-1-area-0.0.0.0]network 10.1.1.0 0.0.0.255
[AR2-ospf-1-area-0.0.0.0]network 10.1.2.0 0.0.0.255
[AR2-ospf-1-area-0.0.0.0]dis ospf peer

AR3

[AR3]ospf 1
[AR3-ospf-1]area 0
[AR3-ospf-1-area-0.0.0.0]network 10.1.2.0 0.0.0.255
[AR3-ospf-1-area-0.0.0.0]network 172.16.1.1 0.0.0.0
[AR3-ospf-1-area-0.0.0.0]dis ospf peer

(4)测试

ping/tracert 两个主机网段是否可以通信

(5)重选DR/BDR

reset ospf process       #重启ospf,重选DR/BDR需要重启OSPF协议
ospf dr-priority ?       #设置DR/BDR优先级,优先级范围为0-255，数值越大，优先级越高，默认为1,如果路由器的优先级被设置为0，它将不参与DR和BDR的选举
dis ospf interface       #查看DR/BDR  

13.使用动态路由协议OSPF实现多区域通信

实验配置：4台AR3260路由器

(1)初始化配置

%%%
%%%
%%%
undo terminal monitor
system-view
sysname AR1/2/3/4
user-interface console 0
idle-timeout 0 0

(2)配置路由器IP并测试直连网段是否联通

AR1

[AR1]int g0/0/0
[AR1-GigabitEthernet0/0/0]ip add 10.1.1.1 24
[AR1-GigabitEthernet0/0/0]q
[AR1]int LoopBack 0
[AR1-LoopBack0]ip add 1.1.1.1 32
[AR1-LoopBack0]q
[AR1]ping 10.1.1.2

AR2

[AR2]int g0/0/0
[AR2-GigabitEthernet0/0/0]ip add 10.1.1.2 24
[AR2-GigabitEthernet0/0/0]q
[AR2]int g0/0/1
[AR2-GigabitEthernet0/0/1]ip add 10.1.2.2 24
[AR2-GigabitEthernet0/0/1]q
[AR2]int LoopBack 0
[AR2-LoopBack0]ip add 2.2.2.2 32
[AR2-LoopBack0]q
[AR2]ping 10.1.2.3

AR3

[AR3]int g0/0/1
[AR3-GigabitEthernet0/0/1]ip add 10.1.2.3 24
[AR3-GigabitEthernet0/0/1]q
[AR3]int g0/0/0
[AR3-GigabitEthernet0/0/0]ip add 10.1.3.3 24
[AR3-GigabitEthernet0/0/0]q
[AR3]int LoopBack 0
[AR3-LoopBack0]ip add 3.3.3.3 32
[AR3-LoopBack0]q
[AR3]ping 10.1.3.4

AR4

[AR4]int g0/0/0
[AR4-GigabitEthernet0/0/0]ip add 10.1.3.4 24
[AR4-GigabitEthernet0/0/0]q
[AR4]int loo    
[AR4]int LoopBack 0
[AR4-LoopBack0]ip add 4.4.4.4 32
[AR4-LoopBack0]q

(3)配置OSPF动态路由协议

AR1

[AR1]ospf 1 router-id 1.1.1.1　　　　#进程内设router-id
[AR1-ospf-1]area 1
[AR1-ospf-1-area-0.0.0.1]network 10.1.1.0 0.0.0.255
[AR1-ospf-1-area-0.0.0.1]network 1.1.1.1 0.0.0.0

AR2

[AR2]ospf 1 router-id 2.2.2.2
[AR2-ospf-1]area 1
[AR2-ospf-1-area-0.0.0.1]network 10.1.1.0 0.0.0.255
[AR2-ospf-1-area-0.0.0.1]network 2.2.2.2 0.0.0.0
[AR2-ospf-1-area-0.0.0.1]q
[AR2-ospf-1]area 0
[AR2-ospf-1-area-0.0.0.0]network 10.1.2.0 0.0.0.255

AR3

[AR3]ospf 1 router-id 3.3.3.3
[AR3-ospf-1]area 0    
[AR3-ospf-1-area-0.0.0.0]network 10.1.2.0 0.0.0.255
[AR3-ospf-1-area-0.0.0.0]q
[AR3-ospf-1]area 2
[AR3-ospf-1-area-0.0.0.2]network 3.3.3.3 0.0.0.0
[AR3-ospf-1-area-0.0.0.2]network 10.1.3.0 0.0.0.255

AR4

[AR4]router id 4.4.4.4　　#全局设router-id
Info: Router ID has been modified, please reset the relative protocols manually 
to update the Router ID.
[AR4]ospf 1
[AR4-ospf-1]area 2
[AR4-ospf-1-area-0.0.0.2]network 10.1.3.0 0.0.0.255
[AR4-ospf-1-area-0.0.0.2]network 4.4.4.4 0.0.0.0

(4)查看邻居关系和路由表

dis ospf peer            #查看邻接关系

dis ip routing-table     #查看路由表

(5)测试

ping 测试全网互通

14.OSPF通过虚链路实现跨区域连接

实验配置：五台AR3260路由器

说明：默认情况下，通过OSPF动态路由协议连接的路由器只有和area 0相连的路由器才可以互相通信，但是我们可以通过在area 0和area 3之间建立虚链路来进行通信，虚链路只能跨一个区域。

(1)初始化配置

undo terminal monitor
system-view
sysname AR1/2/3/4/5
user-interface console 0
idle-timeout 0 0
q

(2)配置IP并测试直连

AR1

[AR1]int g0/0/0
[AR1-GigabitEthernet0/0/0]ip add 12.1.1.1 24
[AR1-GigabitEthernet0/0/0]q
[AR1]int LoopBack 0
[AR1-LoopBack0]ip add 1.1.1.1 32

AR2

[AR2]int g0/0/0
[AR2-GigabitEthernet0/0/0]ip add 12.1.1.2 24
[AR2-GigabitEthernet0/0/0]q
[AR2]int LoopBack 0
[AR2-LoopBack0]ip add 2.2.2.2 32
[AR2-LoopBack0]q
[AR2]int g0/0/1
[AR2-GigabitEthernet0/0/1]ip add 23.1.1.2 24

AR3

[AR3]int g0/0/1
[AR3-GigabitEthernet0/0/1]ip add 23.1.1.3 24
[AR3-GigabitEthernet0/0/1]q
[AR3]int LoopBack 0
[AR3-LoopBack0]ip add 3.3.3.3 32
[AR3-LoopBack0]q
[AR3]int g0/0/0
[AR3-GigabitEthernet0/0/0]ip add 34.1.1.3 24

AR4

[AR4]int g0/0/0
[AR4-GigabitEthernet0/0/0]ip add 34.1.1.4 24
[AR4-GigabitEthernet0/0/0]q    
[AR4]int LoopBack 0
[AR4-LoopBack0]ip add 4.4.4.4 32
[AR4-LoopBack0]q
[AR4]int g0/0/1
[AR4-GigabitEthernet0/0/1]ip add 45.1.1.4 24

AR5

[AR5]int g0/0/1
[AR5-GigabitEthernet0/0/1]ip add 45.1.1.5 24
[AR5-GigabitEthernet0/0/1]q    
[AR5]int LoopBack 0
[AR5-LoopBack0]ip add 5.5.5.5 32

(3)配置OSPF路由协议

AR1

[AR1]ospf 1 router-id 1.1.1.1
[AR1-ospf-1]area 1
[AR1-ospf-1-area-0.0.0.1]network 12.1.1.0 0.0.0.255
[AR1-ospf-1-area-0.0.0.1]network 1.1.1.1 0.0.0.0

AR2

[AR2]ospf 1 router-id 2.2.2.2
[AR2-ospf-1]area 1
[AR2-ospf-1-area-0.0.0.1]network 12.1.1.0 0.0.0.255
[AR2-ospf-1-area-0.0.0.1]q
[AR2-ospf-1]area 0
[AR2-ospf-1-area-0.0.0.0]network 23.1.1.0 0.0.0.255
[AR2-ospf-1-area-0.0.0.0]network 2.2.2.2 0.0.0.0

AR3

[AR3]ospf 1 router-id 3.3.3.3
[AR3-ospf-1]area 0
[AR3-ospf-1-area-0.0.0.0]network 3.3.3.3 0.0.0.0
[AR3-ospf-1-area-0.0.0.0]network 23.1.1.0 0.0.0.255
[AR3-ospf-1-area-0.0.0.0]q
[AR3-ospf-1]area 2
[AR3-ospf-1-area-0.0.0.2]network 34.1.1.0 0.0.0.255

AR4

[AR4]ospf 1 router-id 4.4.4.4
[AR4-ospf-1]area 2
[AR4-ospf-1-area-0.0.0.2]network 34.1.1.0 0.0.0.255
[AR4-ospf-1-area-0.0.0.2]network 4.4.4.4 0.0.0.0
[AR4-ospf-1-area-0.0.0.2]q
[AR4-ospf-1]area 3
[AR4-ospf-1-area-0.0.0.3]network 45.1.1.0 0.0.0.255

AR5

[AR5]ospf 1 router-id 5.5.5.5
[AR5-ospf-1]area 3
[AR5-ospf-1-area-0.0.0.3]network 45.1.1.0 0.0.0.255
[AR5-ospf-1-area-0.0.0.3]network 5.5.5.5 0.0.0.0

(4)area 2配置虚链路

AR3

[AR3]ospf 1
[AR3-ospf-1]area 2
[AR3-ospf-1-area-0.0.0.2]vlink-peer 4.4.4.4    #写的对方router-id

AR4

[AR4]ospf 1
[AR4-ospf-1]area 2
[AR4-ospf-1-area-0.0.0.2]vlink-peer 3.3.3.3

(5)测试

ping 测试全网互通

15.rip和ospf通过重分发实现互联互通

实验配置：在14实验的基础上加一个AR3260

说明：AR5和AR6配置rip动态路由协议

 (1)AR6初始配置

undo terminal monitor
system-view
sysname AR6
user-interface console 0
idle-timeout 0 0
q

(2)接口配置IP并测试直连

AR5

[AR5]int g0/0/0
[AR5-GigabitEthernet0/0/0]ip add 56.1.1.5 24
[AR5-GigabitEthernet0/0/0]q

AR6

[AR6]int g0/0/0
[AR6-GigabitEthernet0/0/0]ip add 56.1.1.6 24
[AR6-GigabitEthernet0/0/0]q
[AR6]int LoopBack 0
[AR6-LoopBack0]ip add 6.6.6.6 32
[AR6-LoopBack0]q

(3)配置RIP协议

AR5

[AR5]rip
[AR5-rip-1]version 2
[AR5-rip-1]undo summary 
[AR5-rip-1]network 56.0.0.0

AR6

[AR6]rip
[AR6-rip-1]version 2    
[AR6-rip-1]undo summary 
[AR6-rip-1]dis this
[V200R003C00]
#
rip 1
 undo summary
 version 2
#
return
[AR6-rip-1]network 56.0.0.0
[AR6-rip-1]network 6.0.0.0

(4)AR5配置重分发

AR5

[AR5]ospf 1    
[AR5-ospf-1]import-route rip 1 cost 100
[AR5-ospf-1]q
[AR5]rip
[AR5-rip-1]import-route ospf 1 cost 0

(5)测试全网互通

在AR1上

ping -a 1.1.1.1 6.6.6.6

(6)area 3 做 NSSA

AR4

[AR4]ospf 1
[AR4-ospf-1]area 3
[AR4-ospf-1-area-0.0.0.3]nssa
dis ospf lsdb asbr　　#4类LSA存在
dis ospf lsdb ase　　 #5类LSA存在
dis ospf lsdb nssa　　#7类LSA存在

AR5

[AR5]ospf 1
[AR5-ospf-1]area 3
[AR5-ospf-1-area-0.0.0.3]nssa
dis ospf lsdb asbr　　#4类LSA没了
dis ospf lsdb ase　　 #5类LSA还在
dis ospf lsdb nssa　　#生成了7类LSA

AR3

dis ospf lsdb asbr    #4类LSA存在
dis ospf lsdb ase     #5类LSA存在
dis ospf lsdb nssa    #7类LSA不存在

AR4

[AR4]ospf
[AR4-ospf-1]area 3    
[AR4-ospf-1-area-0.0.0.3]nssa no-summary    #完全次末节

AR5

[AR5]rip
[AR5-rip-1]default-route originate cost 0　　#rip里下发默认路由给rip邻居
[AR5-rip-1]dis this

(7)area 1 做末梢STUB

简化路由

AR1

[AR1]ospf 1
[AR1-ospf-1]area 1
[AR1-ospf-1-area-0.0.0.1]stub

AR2

[AR2]ospf 1
[AR2-ospf-1]area 1    
[AR2-ospf-1-area-0.0.0.1]stub no-summary 

16.使用三层交换机开启DHCP功能给下接PC分配地址

 实验配置：一台三层交换机，4台PC

(1)交换机初始化命令

undo terminal monitor
system-view
sysname SW1
user-interface console 0
idle-timeout 0 0
q

(2)交换机将接口分配到VLAN中

vlan bat 10 20
int g0/0/1
port link-type access
port default vlan 10
q
int g0/0/2
port link-type access
port default vlan 20
q
int g0/0/3
port link-type access
port default vlan 10
q
int g0/0/4
port link-type access
port default vlan 20
q

(3)全局开启DHCP

dhcp enable

(4)vlan10用方法1配置DHCP

int vlan 10
ip add 192.168.10.1 255.255.255.0
dhcp select interface     
dhcp server dns-list 8.8.8.8 218.2.135.1     

(5)vlan20用方法2配置DHCP

ip pool dhcp2
network 192.168.20.0 mask 24
gateway-list 192.168.20.1
dns-list 4.4.4.4 114.114.114.114
lease day 7
int vlan 20
ip add 192.168.20.1 255.255.255.0
dhcp select global

(6)4台PC开启dhcp配置

(7)验证

PC命令行输入ipconfig查看是否有ip

17.DHCP中继

实验配置：一台三层交换机，两台二层交换机，一台普通路由器，4台PC

(1)初始化命令

undo terminal monitor
system-view
sysname xxx
user-interface console 0
idle-timeout 0 0
q

(2)二层交换机配置

LSW2

[SW2]vlan bat 10 20
[SW2]int e0/0/1    
[SW2-Ethernet0/0/1]port link-type access 
[SW2-Ethernet0/0/1]port default vlan 10
[SW2-Ethernet0/0/1]q
[SW2]int e0/0/2    
[SW2-Ethernet0/0/2]port link-type access 
[SW2-Ethernet0/0/2]port default vlan 20
[SW2-Ethernet0/0/2]q
[SW2]int g0/0/1
[SW2-GigabitEthernet0/0/1]port link-type trunk     
[SW2-GigabitEthernet0/0/1]port trunk allow-pass vlan all
[SW2-GigabitEthernet0/0/1]q

LSW3

[SW3]vlan bat 10 20
[SW3]int e0/0/1
[SW3-Ethernet0/0/1]port link-type access
[SW3-Ethernet0/0/1]port default vlan 10
[SW3-Ethernet0/0/1]q
[SW3]int e0/0/2    
[SW3-Ethernet0/0/2]port link-type access 
[SW3-Ethernet0/0/2]port default vlan 20
[SW3-Ethernet0/0/2]q
[SW3]int g0/0/1
[SW3-GigabitEthernet0/0/1]port link-type trunk 
[SW3-GigabitEthernet0/0/1]port trunk allow-pass vlan all
[SW3-GigabitEthernet0/0/1]q

(3)三层交换机LSW1配置

[SW1]int g0/0/1
[SW1-GigabitEthernet0/0/1]port link-type trunk    
[SW1-GigabitEthernet0/0/1]port trunk allow-pass vlan all
[SW1-GigabitEthernet0/0/1]q
[SW1]int g0/0/2
[SW1-GigabitEthernet0/0/2]port link-type trunk     
[SW1-GigabitEthernet0/0/2]port trunk allow-pass vlan all
[SW1-GigabitEthernet0/0/2]q
[SW1]vlan bat 10 20 100
[SW1]int vlan 10
[SW1-Vlanif10]ip add 192.168.10.1 24
[SW1-Vlanif10]q
[SW1]int vlan 20
[SW1-Vlanif20]ip add 192.168.20.1 24
[SW1-Vlanif20]q
[SW1]int g0/0/3    
[SW1-GigabitEthernet0/0/3]port link-type access 
[SW1-GigabitEthernet0/0/3]port default vlan 100
[SW1-GigabitEthernet0/0/3]q
[SW1]int vlan 100
[SW1-Vlanif100]ip add 10.10.10.1 24
[SW1-Vlanif100]q
[SW1]dhcp enable 
[SW1]int vlan 10
[SW1-Vlanif10]dhcp select relay    
[SW1-Vlanif10]dhcp relay server-ip 10.10.10.2
[SW1-Vlanif10]q
[SW1]int vlan 20
[SW1-Vlanif20]dhcp select relay
[SW1-Vlanif20]dhcp relay server-ip 10.10.10.2
[SW1-Vlanif20]q

(4)路由器R1配置

[R1]int g0/0/0
[R1-GigabitEthernet0/0/0]ip add 10.10.10.2 24
[R1-GigabitEthernet0/0/0]undo shutdown
[R1-GigabitEthernet0/0/0]q
[R1]dhcp enable
[R1]ip pool dhcp1    
[R1-ip-pool-dhcp1]network 192.168.10.0 mask 24
[R1-ip-pool-dhcp1]gateway-list 192.168.10.1
[R1-ip-pool-dhcp1]dns-list 8.8.8.8 192.168.10.1    
[R1-ip-pool-dhcp1]lease day 7
[R1-ip-pool-dhcp1]q
[R1]ip pool dhcp2
[R1-ip-pool-dhcp2]network 192.168.20.0 mask 24
[R1-ip-pool-dhcp2]gateway-list 192.168.20.1
[R1-ip-pool-dhcp2]dns-list 114.114.114.114 192.168.20.1
[R1-ip-pool-dhcp2]lease day 7
[R1-ip-pool-dhcp2]q
[R1]int g0/0/0
[R1-GigabitEthernet0/0/0]dhcp select global 
[R1-GigabitEthernet0/0/0]q
[R1]ip route-static 192.168.10.0 24 10.10.10.1
[R1]ip route-static 192.168.20.0 24 10.10.10.1

(5)PC配置

4台PC打开DHCP

(6)验证

PC命令行输入ipconfig查看是否有ip

18.VRRP实验

实验配置：一台普通路由器，两台三层交换机，一台二层交换机，两台PC

(1)路由器交换机初始化配置

undo terminal monitor
system-view
sysname xxx
user-interface console 0
idle-timeout 0 0
q

(2)二层交换机配置L2-SW3

vlan bat 10 20
int e0/0/1
port link-type access
port default vlan 10
int e0/0/2
port link-type access
port default vlan 20
q
int g0/0/1
port link-type trunk
port trunk allow-pass vlan all
q
int g0/0/2
port link-type trunk
port trunk allow-pass vlan all
q

(3)三层交换机配置

L3-SW1

vlan bat 10 20 100
int g0/0/1
port link-type trunk
port trunk allow-pass vlan all
q
int g0/0/2
port link-type access
port default vlan 100
q
int vlan 10
ip add 192.168.10.10 24
vrrp vrid 1 virtual-ip 192.168.10.1
vrrp vrid 1 priority 105
vrrp vrid 1 track interface g0/0/2
q
int vlan 20
ip add 192.168.20.10 24
vrrp vrid 2 virtual-ip 192.168.20.1
vrrp vrid 2 track interface g0/0/2
q
int vlan 100
ip add 10.10.10.1 24
q
ip route-static 1.1.1.1 32 10.10.10.254
q

L3-SW2

vlan bat 10 20 200
int g0/0/1
port link-type trunk
port trunk allow-pass vlan all
q
int g0/0/2
port link-type access
port default vlan 200
q
int vlan 10
ip add 192.168.10.11 24
vrrp vrid 1 virtual-ip 192.168.10.1
#此处不需要设优先级
vrrp vrid 1 track interface g0/0/2
q
int vlan 20
ip add 192.168.20.11 24
vrrp vrid 2 virtual-ip 192.168.20.1
vrrp vrid 2 priority 105
vrrp vrid 2 track interface g0/0/2
q
int vlan 200
ip add 20.20.20.2 24
q
ip route-static 1.1.1.1 32 20.20.20.254
q

(4)路由器配置

int g0/0/0
ip add 10.10.10.254 24
q
int g0/0/1
ip add 20.20.20.254 24
q
int loop 0
ip add 1.1.1.1 32
q
ip route-static 192.168.10.0 24 10.10.10.1
ip route-static 192.168.10.0 24 20.20.20.2 preference 65
ip route-static 192.168.20.0 24 20.20.20.2
ip route-static 192.168.20.0 24 10.10.10.1 preference 65
q

(5)PC配置

PC1

192.168.10.100
255.255.255.0
192.168.10.1

PC2

192.168.20.100
255.255.255.0
192.168.20.1

(6)验证

PC1 ping/tracert PC2

断开修复上行链路查看路由表

dis ip routing-table

dis vrrp 1/2

19.ACL实验

实验配置：一台服务器，四台客户机，两台AR路由器，一台二层交换机

(1)初始化配置

undo terminal monitor
system-view
sysname xxx
user-interface console 0
idle-timeout 0 0
q

(2)二层交换机配置

vlan bat 10 20
int e0/0/1
port link-type access
port default vlan 10
q
int e0/0/2
port link-type access
port default vlan 20
q
int e0/0/3
port link-type access
port default vlan 10
q
int e0/0/4
port link-type access
port default vlan 20
q
int g0/0/1
port link-type trunk
port trunk allow-pass vlan all
q

(3)AR路由器配置

AR1

int g0/0/0
undo shutdown
int g0/0/0.10
dot1q termination vid 10
ip add 192.168.10.1 24
traffic-filter inbound acl 3000
arp broadcast enable
q
int g0/0/0.20
dot1q termination vid 20
ip add 192.168.20.1 24
traffic-filter outbound acl 2000
arp broadcast enable
q
acl 2000
rule 5 deny source 192.168.10.0 0.0.0.255
q
int g0/0/1
ip add 12.1.1.1 24
q
ip route-static 202.10.100.0 24 12.1.1.2
acl 3000
rule deny tcp source 192.168.10.10 0.0.0.0 destination 202.10.100.100 destination-port 0.0.0.0 eq 21
rule permit ip source any destination any
rule 6 per tcp source any destination any destination-port eq ftp

AR2

int g0/0/0
ip add 12.1.1.2 24
q
int g0/0/1
ip add 202.10.100.2 24
q
ip route-static 192.168.10.0 24 12.1.1.1
ip route-static 192.168.20.0 24 12.1.1.1

(4)测试

PC1无法ping通vlan20中的机器

服务器开启ftp服务

PC1无法登录ftp服务器但是可以ping通，禁用了21端口，网络是连通的

20.静态NAT和动态NAT（PAT）

静态NAT：一个内网地址对应一个公网地址

动态NAT：多个内网地址对应多个公网地址

实验配置：一台PC，一台Client，一台二层交换机，两台AR路由器，一台服务器

---静态NAT

(1) 初始化配置

undo terminal monitor
system-view
sysname XXX
user-interface console 0
idle-timeout 0 0
q

(2)用户端配置

---Client1

192.168.100.10 
192.168.100.1

---PC1

192.168.100.20
255.255.255.0
192.168.100.1

(3)出口网关配置

int g0/0/0
ip add 192.168.100.1  24
q
int g0/0/1
ip add 12.1.1.1 24
q
ip route-static 0.0.0.0 0 12.1.1.2
int g0/0/1
nat static global 100.10.10.105 inside 192.168.100.10 netmask 255.255.255.255
q

(4)ISP配置

int g0/0/0
ip add 12.1.1.2 24
q
int g0/0/1
ip add 110.10.20.2 24
ip route-static 100.10.10.105 32 12.1.1.1 

(5)WEB服务器配置

110.10.20.100
110.10.20.2

(6)验证静态NAT

client可以和服务器通信

PC不能和服务器通信

---动态NAT配置（在静态NAT基础上）

(7)清除静态NAT配置

#出口网关删除静态NAT命令
int g0/0/1
undo nat static global 100.10.10.105 inside 192.168.100.10 netmask 255.255.255.255
q

#ISP删除回执路由
undo ip route-static 100.10.10.105 32 12.1.1.1

(8)出口网关配置

nat address-group 1 100.100.100.10 100.100.100.12
acl 2000
rule permit source 192.168.100.0 0.0.0.255
q
int g0/0/1
nat outbound 2000 address-group 1
q

(9)ISP配置

ip route-static 100.100.100.0 24 12.1.1.1

(10)WEB启动http服务

client客户端信息验证是否能连接server
http://110.10.20.100/default.htm

21.Easyip实验

Easyip：多个内网地址对一个接口

实验配置：两个PC，一个二层交换机，两个AR路由器，一个

(1)初始化配置

undo terminal monitor
system-view
sysname XXX
user-interface console 0
idle-timeout 0 0
q

(2)二层交换机配置

vlan bat 100 200
int e0/0/1
port link-type access
port default vlan 100
q
int e0/0/2
port link-type access
port default vlan 200
q
int g0/0/1
port link-type trunk
port trunk allow-pass vlan all
q

(3)AR1配置

int g0/0/0
undo shutdown
int g0/0/0.10
dot1q termination vid 100
ip add 192.168.100.1 24
arp broadcast enable
q
int g0/0/0.20
dot1q termination vid 200
ip add 192.168.200.1 24
arp broadcast enable
q
int g0/0/1
ip add 12.1.1.1 24
q
ip route-static 0.0.0.0 0 12.1.1.2
acl 2000
rule permit source 192.168.0.0 0.0.255.255
q
int g0/0/1
nat outbound 2000
q

(4)AR2配置

int g0/0/1
ip add 202.10.100.2 24
q
int g0/0/0
ip add 12.1.1.2 24
q

(5)PC配置

PC1
192.168.100.10
255.255.255.0
192.168.100.1
PC2
192.168.200.10
255.255.255.0
192.168.200.1

(6)Server配置

202.10.100.100
202.10.100.2

(7)验证

PC1/2都可以ping通服务器