IP交換與路由技術(shù)實(shí)驗(yàn)講義(1-10).doc

IP交換與路由技術(shù)實(shí)驗(yàn)講義目 錄實(shí)驗(yàn)一口令和主機(jī)名設(shè)置1實(shí)驗(yàn)二利用交換機(jī)實(shí)現(xiàn)不同VLAN通信4實(shí)驗(yàn)三不同VLAN跨交換機(jī)通信7實(shí)驗(yàn)四不同VLAN跨交換機(jī)通信和VTP協(xié)議12實(shí)驗(yàn)五RIPv2的配置及其對(duì)變長子網(wǎng)的支持19實(shí)驗(yàn)六將直連路由和靜態(tài)路由引入到動(dòng)態(tài)路由24實(shí)驗(yàn)七 RIPV2水平分割和定時(shí)器配置26實(shí)驗(yàn)八 RIP的被動(dòng)接口與單播更新30實(shí)驗(yàn)九 路由器廣域網(wǎng)PPP協(xié)議的封裝33實(shí)驗(yàn)十 配置和校驗(yàn)PAP身份驗(yàn)證和CHAP身份驗(yàn)證35IP交換與路由技術(shù)實(shí)驗(yàn)手冊(cè)實(shí)驗(yàn)一口令和主機(jī)名設(shè)置實(shí)驗(yàn)?zāi)康耐ㄟ^本實(shí)驗(yàn)，讀者可掌握以下技能：1. 配置交換機(jī)的口令和主機(jī)名；2. 配置遠(yuǎn)程登錄交換機(jī)。設(shè)備需求1. 思科C3640交換機(jī)一臺(tái)；2. 一根直通網(wǎng)線；3. 一臺(tái)帶有超級(jí)終端程序的PC機(jī)一臺(tái)。實(shí)驗(yàn)拓?fù)鋵?shí)驗(yàn)步驟1. 登陸交換機(jī)，進(jìn)行如下設(shè)置：switchenpassword:；初始密碼為空，直接回車switch#conf t；進(jìn)入全局配置模式switch(config)#hostname swa；設(shè)置交換機(jī)名swa(config)#enable secret aaa；設(shè)置特權(quán)加密口令為 aaaswa(config)#enable password aax；設(shè)置特權(quán)非密口令為 aaxswa(config)#line console 0；進(jìn)入控制臺(tái)口(Rs232)狀態(tài)swa(config-line)#login；允許登錄swa(config-line)#password aa；設(shè)置登錄口令aaswa(config-line)#line vty 0 4；進(jìn)入虛擬終端virtual ttyswa(config-line)#login；允許登錄swa(config-line)#password a；設(shè)置登錄口令aswa(config-line)#exit；返回上一層swa(config)#exit；返回上一層2. 查看配置信息Building configuration.Current configuration : 957 bytes!version 12.4service timestamps debug datetime msecservice timestamps log datetime msecno service password-encryption!hostname swa!boot-start-markerboot-end-marker!enable secret 5 $1$j3r1$PSHfI1hhF2Xms7tiU64Qq1；這里可以查看我們所做的配置enable password aaa!no aaa new-modelmemory-size iomem 5!ip cef!interface FastEthernet1/0.interface FastEthernet1/15!interface Vlan1 no ip address!ip http server!control-plane!line con 0 ；這里可以查看到我們所作的配置 password aa loginline aux 0line vty 0 4 password a login!endswa#show running-config ；查看配置信息 swa#exit；返回命令3. 驗(yàn)證重新登陸交換機(jī)，看看哪一個(gè)口令可以登陸交換機(jī)？swaenpassword: ；輸入口令4. 配置交換機(jī)和PC機(jī)IP地址。1）配置交換機(jī)IP地址。swa(config)#int vlan 1 ；進(jìn)入管理vlan1的配置模式swa(config-if)#ip address ；配置vlan1的IP地址swa(config-if)#no shutdown ；啟用端口2）配置PC機(jī)的IP地址RouterenRouter#conf tRouter(config)#no ip routing ；關(guān)閉路由功能Router(config)#int f 0/0 ；進(jìn)入接口配置模式Router(config-if)#ip address 0 ；配置IP地址Router(config-if)#no shutdown ；開啟端口Router(config-if)#end5. 驗(yàn)證遠(yuǎn)程登陸交換機(jī)。Router#telnet ；遠(yuǎn)程登錄交換機(jī)Trying . OpenUser Access VerificationPassword: ；提示輸入密碼aswa ；登陸到交換機(jī)實(shí)驗(yàn)要點(diǎn)1.保證PC機(jī)和交換機(jī)的IP地址在同一網(wǎng)段。2.通常交換機(jī)的vlan1為管理vlan，為交換機(jī)分配管理IP即為vlan1分配管理IP。3.路由器端口默認(rèn)是關(guān)閉狀態(tài)，端口配置完成后要用no shutdown手動(dòng)啟用。實(shí)驗(yàn)二利用交換機(jī)實(shí)現(xiàn)不同VLAN通信實(shí)驗(yàn)?zāi)康耐ㄟ^本實(shí)驗(yàn)，讀者可以掌握以下技能：1. 掌握交換機(jī)虛接口的配置方法；2. 配置利用交換機(jī)虛接口實(shí)現(xiàn)不同VLAN的通信。實(shí)驗(yàn)拓?fù)鋵?shí)驗(yàn)步驟1. 配置交換機(jī)Router#Router#conf tRouter(config)#hostname sw1 ；交換機(jī)命名SW1sw1(config)#exitsw1#vlan database ；進(jìn)入VLAN配置模式sw1(vlan)#vlan 10 ；創(chuàng)建VLAN10sw1(vlan)#vlan 20 ；創(chuàng)建VLAN20sw1(vlan)#exitsw1#conf tsw1(config)#int vlan 10 ；進(jìn)入VLAN10虛接口sw1(config-if)#ip address 54 ；配置VLAN10的IPsw1(config-if)#exitsw1(config)#int vlan 20 ；進(jìn)入VLAN10虛接口sw1(config-if)#ip address 54 ；配置VLAN10的IPsw1(config-if)#exitsw1(config)#int f 1/11sw1(config-if)#switchport access vlan 10 ；將端口加入VLAN10sw1(config-if)#exitsw1(config)#int f 1/12sw1(config-if)#switchport access vlan 20 ；將端口加入VLAN20sw1(config-if)#exitsw1(config)#exitsw1#show vlan-s VLAN Name Status Ports- - - -1 default active Fa1/0, Fa1/1, Fa1/2, Fa1/3 Fa1/4, Fa1/5, Fa1/6, Fa1/7 Fa1/8, Fa1/9, Fa1/10, Fa1/13 Fa1/14, Fa1/1510 VLAN0010 active Fa1/1120 VLAN0020 active Fa1/121002 fddi-default active1003 token-ring-default active1004 fddinet-default active1005 trnet-default activeVLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2- - - - - - - - - - -1 enet 100001 1500 - - - - - 1002 100310 enet 100010 1500 - - - - - 0 020 enet 100020 1500 - - - - - 0 01002 fddi 101002 1500 - - - - - 1 10031003 tr 101003 1500 1005 0 - - srb 1 10021004 fdnet 101004 1500 - - 1 ibm - 0 01005 trnet 101005 1500 - - 1 ibm - 0 02. 配置PC機(jī)PC1(config)#int f 0/0PC1(config-if)#ip address 0 ；配置IPPC1(config-if)#no shut ；開啟接口PC1(config-if)#endPC1(config)#ip default-gateway ；配置默認(rèn)網(wǎng)關(guān)PC1(config)#no ip routing ；關(guān)閉路由功能PC2(config)#int f 0/0PC2(config-if)#ip address 0 ；配置IPPC2(config-if)#no shut ；開啟接口PC2(config-if)#endPC2(config)#ip default-gateway ；配置默認(rèn)網(wǎng)關(guān)PC2(config)#no ip routing ；關(guān)閉路由功能3. 驗(yàn)證PC1#ping Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to , timeout is 2 seconds:!Success rate is 100 percent (5/5), round-trip min/avg/max = 16/232/1040 msPC2#ping Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to , timeout is 2 seconds:!Success rate is 100 percent (5/5), round-trip min/avg/max = 4/223/1012 ms實(shí)驗(yàn)要點(diǎn)1. 本實(shí)驗(yàn)是通過交換機(jī)虛接口實(shí)現(xiàn)不同vlan通信，因此，在配置ip時(shí)，是為vlan配置，而不是為物理端口分配ip。2. 如果沒有驗(yàn)證成功，可嘗試逐段驗(yàn)證，或者采用showo vlan-switch，show ip route等命令查看相應(yīng)信息，以確定問題出現(xiàn)在何處。實(shí)驗(yàn)三不同VLAN跨交換機(jī)通信實(shí)驗(yàn)?zāi)康耐ㄟ^本實(shí)驗(yàn)，讀者可以掌握以下技能：1. 掌握vlan的配置方法；2. 掌握vlan間路由配置方法以及子接口的配置。實(shí)驗(yàn)拓?fù)鋵?shí)驗(yàn)步驟1. 配置交換機(jī)SW1#vlan databaseSW1(config-vlan)#vlan 10 ；創(chuàng)建vlan10SW1(config-vlan)#vlan 20 ；創(chuàng)建vlan20SW1(config)#int f1/11SW1(config-if)#switchport access vlan 10 ；將f1/11端口加入vlan10SW1(config-if)#no shut ；啟用端口SW1(config-if)#endSW1(config)#int f1/12SW1(config-if)#switchport access vlan 20 ；將f1/11端口加入vlan10SW1(config-if)#no shut ；啟用端口SW1(config-if)#endSW1(config)#int f1/3SW1(config-if)#switchport mode trunk ；配置端口為trunk模式SW1(config-if)#switchport trunk enc dot1q ；端口封裝802.1q協(xié)議SW1(config-if)#no shutSW1(config-if)#endSW1(config)#int f1/5SW1(config-if)#switchport mode trunk ；配置端口為trunk模式SW1(config-if)#switchport trunk enc dot1q ；端口封裝802.1q協(xié)議SW1(config-if)#no shutSW1(config-if)#endSW1#show vlan-s brief ；查看vlan配置摘要信息VLAN Name Status Ports- - - -1 default active Fa1/0, Fa1/1, Fa1/2, Fa1/4, Fa1/6, Fa1/7, Fa1/8, Fa1/9, Fa1/10,Fa1/13,Fa1/14,Fa1/1510 VLAN0010 active Fa1/11 ；端口已經(jīng)被加入相應(yīng)的vlan20 VLAN0020 active Fa1/121002 fddi-default active1003 token-ring-default active1004 fddinet-default active1005 trnet-default activeSW1#show int trunk ；查看trunk端口信息Port Mode Encapsulation Status Native vlanFa1/3 on 802.1q trunking 1 ；端口已經(jīng)被配置成trunk，并封裝802.1q協(xié)議Fa1/5 on 802.1q trunking 1Port Vlans allowed on trunkFa1/3 1-1005Fa1/5 1-1005Port Vlans allowed and active in management domainFa1/3 1Fa1/5 1Port Vlans in spanning tree forwarding state and not prunedFa1/3 1Fa1/5 1SW3#vlan databaseSW3(config-vlan)#vlan 20 ；創(chuàng)建vlan20SW3(config)#int f1/1SW3(config-if)#switchport mode trunk ；配置端口為trunk模式SW3(config-if)#switchport trunk enc dot1q ；端口封裝802.1q協(xié)議SW3(config-if)#no shutSW3(config-if)#endSW3(config)#int f1/11SW3(config-if)#switchport access vlan 20 ；將端口加入vlan20SW3(config-if)#no shutSW3(config-if)#endSW3#show vlan-s ；查看vlan配置信息SW3#show int trunk ；查看trunk端口信息2. 配置路由器R1(config)#int f 0/0.10 ；進(jìn)入子接口配置模式R1(config-subif)#encapsulation dot1q 10 ；為子接口封裝802.1q協(xié)議R1(config-subif)#ip address ；配置子接口的IPR1(config-subif)#exitR1(config)#int f 0/0.20 ；進(jìn)入子接口配置模式R1(config-subif)#encapsulation dot1q 20 ；為子接口封裝802.1q協(xié)議R1(config-subif)#ip address ；配置子接口的IPR1(config-subif)#exitR1(config)#endR1(config)#int f 0/0R1(config-if)#no ip add ；去物理接口IPR1(config-if)#no shut ；開啟接口R1(config-if)#endR1#show ip route ；查看路由表信息Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static routeGateway of last resort is not setC /24 is directly connected, FastEthernet0/0.10 ;直連網(wǎng)段的信息C /24 is directly connected, FastEthernet0/0.20 ;直連網(wǎng)段的信息3. 配置PC機(jī)PC1(config)#int f 0/0PC1(config-if)#no ip route ；關(guān)閉路由功能PC1(config-if)#exitPC1(config)#int f 0/0PC1(config-if)#ip address 0 ；配置IPPC1(config-if)#no shut ；開啟接口PC1(config-if)#endPC1(config)#ip default-gateway ；配置默認(rèn)網(wǎng)關(guān)PC2(config)#int f 0/0PC2(config-if)#no ip route ；關(guān)閉路由功能PC1(config-if)#exitPC1(config)#int f 0/0PC2(config-if)#ip address 0 ；配置IPPC2(config-if)#no shut ；開啟接口PC2(config-if)#endPC2(config)#ip default-gateway ；配置默認(rèn)網(wǎng)關(guān)PC2(config)#int f 0/0PC2(config-if)#no ip route ；關(guān)閉路由功能PC1(config-if)#exitPC1(config)#int f 0/0PC2(config-if)#ip address 0 ；配置IPPC2(config-if)#no shut ；開啟接口PC2(config-if)#endPC2(config)#ip default-gateway ；配置默認(rèn)網(wǎng)關(guān)4. 驗(yàn)證在PC1上利用ping命令分別測(cè)試與vlan10、vlan20網(wǎng)關(guān)和PC2、PC4的連通性。PC1#ping Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to , timeout is 2 seconds:!Success rate is 100 percent (5/5), round-trip min/avg/max = 16/232/1040 msPC1#ping Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to , timeout is 2 seconds:!Success rate is 100 percent (5/5), round-trip min/avg/max = 4/223/1012 msPC1#ping 0Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 0, timeout is 2 seconds:.!Success rate is 60 percent (3/5), round-trip min/avg/max = 12/48/92 msPC1#ping 0Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 0, timeout is 2 seconds:.!Success rate is 60 percent (3/5), round-trip min/avg/max = 20/52/96 ms實(shí)驗(yàn)要點(diǎn)1. 配置路由器子接口，要去除其對(duì)應(yīng)物理接口的IP地址。2. PC機(jī)上配置IP地址，要關(guān)閉其路由功能。實(shí)驗(yàn)四不同VLAN跨交換機(jī)通信和VTP協(xié)議實(shí)驗(yàn)?zāi)康耐ㄟ^本實(shí)驗(yàn)，讀者可以掌握以下技能：1. 掌握vlan的配置方法；2. 掌握vlan間路由配置方法以及子接口的配置；3. 掌握vtp配置方法。實(shí)驗(yàn)拓?fù)鋵?shí)驗(yàn)步驟：1. 配置交換機(jī)SW1#vlan database SW1(vlan)#vtp domain ccna ；配置vtp域名為ccnaSW1(vlan)#vtp server ；配置該交換機(jī)為vtp serverSW1(vlan)#vtp password cisco ；配置vtp密碼為ciscoSW1(vlan)#vlan 10 ；創(chuàng)建vlan10SW1(vlan)#vlan 20 ；創(chuàng)建vlan20SW1(vlan)#vtp pruning ；開啟vtp修剪SW1(vlan)#exitVTP Version : 2Configuration Revision : 1Maximum VLANs supported locally : 256Number of existing VLANs : 7VTP Operating Mode : Server ;該交換機(jī)為VTP服務(wù)器VTP Domain Name : ccna ;VTP域名為ccnaVTP Pruning Mode : Enabled ;VTP修剪功能已開啟VTP V2 Mode : DisabledVTP Traps Generation : DisabledMD5 digest : 0xA6 0x99 0x07 0x92 0xB8 0x1E 0x65 0xF1Configuration last modified by at 3-1-02 00:05:01Local updater ID is (no valid interface found)SW1#show vtp status ；查看vtp 狀態(tài)信息SW1#show vlan-switch brief ；查看vlan摘要信息VLAN Name Status Ports- - - -1 default active Fa1/0, Fa1/1, Fa1/2, Fa1/3 Fa1/4, Fa1/5, Fa1/6, Fa1/7 Fa1/8, Fa1/9, Fa1/10, Fa1/11 Fa1/12, Fa1/13, Fa1/14, Fa1/1510 VLAN0010 active20 VLAN0020 active1002 fddi-default active1003 token-ring-default active1004 fddinet-default active1005 trnet-default activeSW1(config)#int f 1/3SW1(config-if)#switchport mode trunkSW1(config-if)#endSW1(config)#int f 1/5SW1(config-if)#switchport mode trunkSW1(config-if)#endSW1#show interface trunk ；查看trunk接口信息Port Mode Encapsulation Status Native vlanFa1/3 on 802.1q trunking 1Fa1/5 on 802.1q trunking 1Port Vlans allowed on trunkFa1/3 1-1005Fa1/5 1-1005Port Vlans allowed and active in management domainFa1/3 1,10,20Fa1/5 1,10,20Port Vlans in spanning tree forwarding state and not prunedFa1/3 noneFa1/5 noneSW1(config)#int f1/11SW1(config-if)#switchport access vlan 20 ；將端口加入vlan20SW1(config-if)#no shutSW1(config-if)#endSW1(config)#int f1/12SW1(config-if)#switchport access vlan 10 ；將端口加入vlan20SW1(config-if)#no shutSW1(config-if)#endSW1#show vlan-sVLAN Name Status Ports- - - -1 default active Fa1/0, Fa1/1, Fa1/2, Fa1/4, Fa1/6, Fa1/7, Fa1/8, Fa1/9, Fa1/10,Fa1/13,Fa1/14,Fa1/1510 VLAN0010 active Fa1/11 ；端口已經(jīng)被加入相應(yīng)的vlan20 VLAN0020 active Fa1/121002 fddi-default active1003 token-ring-default active1004 fddinet-default active1005 trnet-default activeSW3(config)#int f1/1SW3(config-if)#switchport mode trunk SW3(config-if)#no shutSW3(config-if)#endSW3#vlan databaseSW3(vlan)#vtp pruning ；開啟vtp修剪功能SW3(vlan)#vtp client ；配置該交換機(jī)為vtp clientSW3(vlan)#vtp domain ccna ；配置域名為ccnaSW3(vlan)#vtp password cisco ；配置vtp密碼為ciscoSW3(vlan)#exitVLAN Name Status Ports- - - -1 default active Fa1/0, Fa1/2, Fa1/3, Fa1/4 Fa1/5, Fa1/6, Fa1/7, Fa1/8 Fa1/9, Fa1/10, Fa1/11, Fa1/12 Fa1/13, Fa1/14, Fa1/1510 VLAN0010 active20 VLAN0020 active1002 fddi-default active1003 token-ring-default active1004 fddinet-default active1005 trnet-default activeSW3#show vlan-switchport brief ；查看vlan摘要信息SW3#show interface trunk ；查看trunk端口信息VTP Version : 2Configuration Revision : 1Maximum VLANs supported locally : 256Number of existing VLANs : 7VTP Operating Mode : Client ；該交換機(jī)為客戶端VTP Domain Name : ccna ； vtp域名為ccnaVTP Pruning Mode : Enabled ；vtp修剪功能已開啟VTP V2 Mode : DisabledVTP Traps Generation : DisabledMD5 digest : 0xA6 0x99 0x07 0x92 0xB8 0x1E 0x65 0xF1Configuration last modified by at 3-1-02 00:05:01Port Mode Encapsulation Status Native vlanFa1/1 on 802.1q trunking 1Port Vlans allowed on trunkFa1/1 1-1005Port Vlans allowed and active in management domainFa1/1 1Port Vlans in spanning tree forwarding state and not prunedFa1/1 1SW3#show vtp statusSW3(config)#int f1/11SW3(config-if)#switchport access vlan 10 ；將端口加入vlan20SW3(config-if)#no shutSW3(config-if)#end2. 配置路由器R1(config)#int f 0/0.20 ；進(jìn)入子接口配置模式R1(config-subif)#encapsulation dot1q 20 ；為子接口封裝802.1q協(xié)議R1(config-subif)#ip address ；配置子接口的IPR1(config-subif)#exitR1(config)#int f 0/0.10 ；進(jìn)入子接口配置模式R1(config-subif)#encapsulation dot1q 10 ；為子接口封裝802.1q協(xié)議R1(config-subif)#ip address ；配置子接口的IPR1(config-subif)#exitR1(config)#endR1(config)#int f 0/0R1(config-if)#no ip add ；去物理接口IPR1(config-if)#no shut ；開啟接口R1(config-if)#endCodes: C - connected, S - static,