實訓(xùn)分解實驗

第5頁共5頁實訓(xùn)分解實驗1、VLAN及TRUNKSW1:vlan10!vlan20!intf0/2swmoacswacvl10!intf0/3swmoacswacvl20!intf0/1swtrendotswmotr====================2、靜態(tài)路由R1：hostnameR1!intf0/0ipadd10.1.1.1255.255.255.0nosh!intf0/1ipadd10.1.2.1255.255.255.0nosh!iproute10.1.4.0255.255.255.010.1.2.2R2hostnameR2!intf0/0ipadd10.1.2.2255.255.255.0nosh!intf0/1ipadd10.1.3.1255.255.255.0nosh!iproute10.1.1.0255.255.255.010.1.2.1iproute10.1.4.0255.255.255.010.1.3.2===================================R3hostnameR3!intf0/0ipadd10.1.3.2255.255.255.0nosh!intf0/1ipadd10.1.4.1255.255.255.0nosh!iproute10.1.1.0255.255.255.010.1.3.1======================3、ACL4、PPP驗證〔1〕PPP驗證之PAPhostnameR1!usernamexxxpassword0yyy!interfaceSerial0/0/0ipaddress10.1.1.1255.255.255.0encapsulationppppppauthenticationpapppppapsent-usernameabcpassword0xyzclockrate64000hostnameR2!usernameabcpassword0xyz!interfaceSerial0/0/0ipaddress10.1.1.2255.255.255.0encapsulationppppppauthenticationpapppppapsent-usernamexxxpassword0yyy〔2〕PPP驗證之CHAPhostnameR1!usernameR2password0cisco!interfaceSerial0/0/0ipaddress10.1.1.1255.255.255.0encapsulationppppppauthenticationchapclockrate64000==================================hostnameR2!usernameR1password0cisco!interfaceSerial0/0/0ipaddress10.1.1.2255.255.255.0encapsulationppppppauthenticationchap5、DHCPhostnameRouter!ipdhcpexcluded-address10.1.1.1!ipdhcppoolxxxwork10.1.1.0255.255.255.0default-router10.1.1.1dns-server218.2.135.1!interfaceFastEther0/0ipaddress10.1.1.1255.255.255.0========================================================================6、單臂路由需求：1、主機(jī)A在VLAN10內(nèi)，ip地址為10.1.1.2/24，網(wǎng)關(guān)10.1.1.12、主機(jī)B在vlan20內(nèi)，ip地址為10.1.2.2/24，網(wǎng)關(guān)10.1.2.13、在路由器R1上配置單臂路由，使主機(jī)A和主機(jī)B互相通信。路由器R1：hostnameR1!interfaceFastEther0/0noipaddressduplexautospeedauto!interfaceFastEther0/0.100encapsulationdot1Q10ipaddress10.1.1.1255.255.255.0!interfaceFastEther0/0.200encapsulationdot1Q20ipaddress10.1.2.1255.255.255.0=============================================交換機(jī)SW1hostnameSW1!!!interfaceFastEther0/1switchportmodetrunk!interfaceFastEther0/2switchportaccessvlan10switchportmodeaccess!interfaceFastEther0/3switchportaccessvlan20switchportmodeaccess!SW1#shvlanbVLANNameStatusPorts1defaultactiveFa0/4,Fa0/5,Fa0/6,Fa0/7Fa0/8,Fa0/9,Fa0/10,Fa0/11Fa0/12,Fa0/13,Fa0/14,Fa0/15Fa0/16,Fa0/17,Fa0/18,Fa0/19Fa0/20,Fa0/21,Fa0/22,Fa0/23Fa0/24,Gig1/1,Gig1/210VLAN0010activeFa0/220VLAN0020activeFa0/3主機(jī)A：主機(jī)B：NAT配置步驟：1、動態(tài)NAT〔1〕定義內(nèi)部地址access-list10permit10.1.1.00.0.0.255〔2〕定義外部地址ipnatpoolxxx61.1.1.161.1.1.254mask255.255.255.0〔3〕將內(nèi)部地址和外部地址關(guān)聯(lián)ipnatinsidesourcelist10poolxxx〔4〕定義內(nèi)部接口和外部接口router(config-if)#ipnatinsiderouter(config-if)#ipnatoutside2、端口地址翻譯〔PAT〕〔1〕定義內(nèi)部地址access-list10permit10.1.1.00.0.0.255〔2〕將內(nèi)部地址與外部接口關(guān)聯(lián)ipnatinsidesourcelist10interfaces0/0/0overload〔3〕定義內(nèi)部接口和外部接口router(config-if)#ipnatinsiderouter(config-if)#ipnatoutside