組網(wǎng)課程設(shè)計(jì)-第一組

本課題的意組網(wǎng)、應(yīng)用及安全需求。本次課程設(shè)計(jì)用到DHCP、ACL控制等技術(shù)。設(shè)計(jì)規(guī)某高校準(zhǔn)備組建一個(gè)校園網(wǎng)絡(luò)，分為教學(xué)區(qū)、學(xué)生宿舍區(qū)和網(wǎng)絡(luò)中心。教納2000個(gè)學(xué)生學(xué)生在宿舍可以通過自動(dòng)獲取IP地址方式上網(wǎng)和教學(xué)心必須能夠?qū)λ芯W(wǎng)絡(luò)設(shè)備實(shí)現(xiàn)net管（除網(wǎng)絡(luò)中心外不允許其它用net），并向校園網(wǎng)各用戶提供應(yīng)用服務(wù)（Web、FTP、郵件）200，網(wǎng)段區(qū)由于要容納2000ACL控制來做相應(yīng)的限制并在路由器上開啟DHCP三層交換機(jī)上開啟DHCP中繼IP地址。DHCP IP設(shè)端234實(shí)現(xiàn)過程描路由#version5.20,Release1618P13,StandardsysnameR1#vlan1

defaultenableaccess-limitdisablestateactiveidle-cutself-service-urldisabledhcpserverip-poolnetworkmaskgateway-listdns-list1local-userpasswordcipher.]@USE=B,53Q=^Q`MAF4<1!!service-typenetlevel3interfaceAux0asyncmodeflowlink-protocolpppinterfaceEthernet0/0portlink-modeipaddressinterfaceEthernet0/1portlink-moderouteinterfaceSerial1/0link-protocolpppinterfaceSerial2/0link-protocolpppinterfaceNULL0iproute-staticdhcpserverforbidden-ipdhcpserverforbidden-ipdhcpenableuser-interfaceconuser-interfaceauxuser-interfacevty04三層交換機(jī)#sysnameSW1dhcp-server1ip radiusschemesystemsystemaclnumberrule1permittime-rangerule2denysource55time-rangerule3denysource55time-rangenight1aclnumberrule1denytcpdestination-porteqrule2permittcpsource55destination-porteqnetvlan1to5interfaceVlan-ipaddressinterfaceVlan-ipaddressinterfaceVlan-ipaddressdhcp-server1interfaceVlan-ipaddressinterfaceVlan-ipaddressinterfaceAux1/0/0interfaceEthernet1/0/1portaccessvlan5packet-filterinboundip-group3000rulepacket-filterinboundip-group3000rule2interfaceEthernet1/0/2portaccessvlan2packet-filterinboundip-group3000rulepacket-filterinboundip-group3000rule2interfaceEthernet1/0/3portaccessvlan3packet-filterinboundip-group2000rulepacket-filterinboundip-group2000rulepacket-filterinboundip-group2000rulepacket-filterinboundip-group3000rulepacket-filterinboundip-group3000rule2interfaceEthernet1/0/4portaccessvlan4packet-filterinboundip-group3000rulepacket-filterinboundip-group3000rule2interfaceEthernet1/0/5interfaceEthernet1/0/6interfaceEthernet1/0/7interfaceEthernet1/0/8interfaceEthernet1/0/9interfaceEthernet1/0/10interfaceEthernet1/0/11interfaceEthernet1/0/12interfaceEthernet1/0/13interfaceEthernet1/0/14interfaceEthernet1/0/15interfaceEthernet1/0/16interfaceEthernet1/0/17interfaceEthernet1/0/18interfaceEthernet1/0/19interfaceEthernet1/0/20interfaceEthernet1/0/21interfaceEthernet1/0/22interface#interfaceEthernet1/0/24interfaceGigabitEthernet1/1/1interfaceGigabitEthernet1/1/2interfaceGigabitEthernet1/1/3interfaceGigabitEthernet1/1/4unrf-fabricauthentication-modeinterfaceNULL0time-rangenight200:00to06:00time-rangenight123:00to23:59dailyvoicevlanmac-address0001-e300-0000maskffff-ff00-0000user-interfaceaux0user-interfacevty04userprivilegelevelsetauthenticationpasswordsimpleadminprotocolinbound #二層交換機(jī)#version5.20,Release2101sysnameSW2irfmac-addresspersistenttimerirfauto-updateenableunrflink-delaydefaultenablesystem#netserver#vlan#radiusschemesystemserver-type uthentication ccounting1646user-name-formatwithout-systemaccess-limitdisablestateactiveidle-cutself-service-urldisableuser-groupgroup-attributeallow-guestinterfaceNULL0interfaceVlan-ipaddressinterfaceEthernet2/0/1portlink-modebridgeinterfaceEthernet2/0/2portlink-modebridgeinterfaceEthernet2/0/3portlink-modebridgeinterfaceEthernet2/0/4portlink-modebridgeinterfaceEthernet2/0/5portlink-modebridgeinterfaceEthernet2/0/6portlink-modebridgeinterfaceEthernet2/0/7portlink-modebridgeinterfaceEthernet2/0/8portlink-mode#interfaceEthernet2/0/9portlink-modebridgeinterfaceEthernet2/0/10portlink-modebridge#interfaceEthernet2/0/11portlink-modebridge#interfaceEthernet2/0/12portlink-modebridge#interfaceEthernet2/0/13portlink-modebridge#interfaceEthernet2/0/14portlink-modebridge#interfaceEthernet2/0/15portlink-modebridge#interfaceEthernet2/0/16portlink-modebridge#interfaceEthernet2/0/17portlink-modebridge#interfaceEthernet2/0/18portlink-modebridge#interfaceEthernet2/0/19portlink-modebridge#interfaceEthernet2/0/20portlink-modebridge#interfaceEthernet2/0/21portlink-modebridge#interfaceEthernet2/0/22portlink-modebridge#interfaceportlink-modebridgeinterfaceEthernet2/0/24portlink-modebridge#interfaceGigabitEthernet2/0/25interfaceGigabitEthernet2/0/25interfaceGigabitEthernet2/0/26portlink-modebridge#interfaceGigabitEthernet2/0/27portlink-modebridge#interfaceGigabitEthernet2/0/28portlink-modebridge#loadxml-configurationloadtr069-configurationuser-interfaceauxuser-interfacevty04userprivilegelevelsetauthenticationpasswordsimpleadminprotocolinbound user-interfacevty515二層交換機(jī)#sysnameSW3radiusschemesystemsystemvlan1interfaceVlan-ipaddressinterfaceAux1/0/0interfaceEthernet1/0/1interfaceEthernet1/0/2interfaceEthernet1/0/3interfaceEthernet1/0/4interfaceEthernet1/0/5interfaceEthernet1/0/6interfaceEthernet1/0/7interfaceEthernet1/0/8interfaceEthernet1/0/9interfaceEthernet1/0/10interfaceEthernet1/0/11interfaceEthernet1/0/12interfaceEthernet1/0/13interfaceEthernet1/0/14interfaceEthernet1/0/15interfaceEthernet1/0/16interfaceNULL0user-interfaceauxuser-interfacevty04authentication-modeschemeuserprivilegelevel3setauthenticationpasswordsimpleadminprotocolinboundnet#二層交換機(jī)#sysnameSW4loopback-detectionenableradiusschemesystemsystemvlan1interfaceVlan-ipaddressinterfaceAux1/0/0interfaceEthernet1/0/1loopback-detectionenableinterfaceEthernet1/0/2loopback-detectionenableinterfaceEthernet1/0/3loopback-detectionenableinterfaceEthernet1/0/4loopback-detectionenableinterfaceEthernet1/0/5loopback-detectionenableinterfaceEthernet1/0/6loopback-detectionenableinterfaceEthernet1/0/7loopback-detectionenableinterfaceEthernet1/0/8loopback-detectionenableinterfaceEthernet1/0/9loopback-detectionenableinterfaceEthernet1/0/10loopback-detectionenableinterfaceEthernet1/0/11loopback-detectionenableinterfaceEthernet1/0/12loopback-