無線ne實(shí)驗(yàn)手冊(cè)1網(wǎng)絡(luò)設(shè)備基本操作

1Console使 net終端登錄設(shè)使用FTP、TFTP上傳文1-1MSR路由器作為演示設(shè)備，使用交換機(jī)亦可ConsolePCConsoleConsoleRJ-45頭一端Console口；9RS-232接口一端連接計(jì)算機(jī)的串行口。COMCOM9600bps、8位數(shù)據(jù)位、1ConsoleH3C_SystemView:returntoUserViewwithCtrl+Z.quitH3CComware Hostname(1to30sysname使用disycurrent-configuration命令顯示系統(tǒng)當(dāng)前運(yùn)行的配置，由于使用的設(shè)備及模sysnameAHPTC命令，同時(shí)請(qǐng)查閱接口信息，并與設(shè)備的實(shí)際接口和模塊進(jìn)行比對(duì)。<AHPTC>disycurrent-configurationversion5.20,Release1509P01,##defaultenable#vlan1access-limitdisablestateactiveidle-cutself-service-url#interfaceAux0asyncmodeflowlink-protocol#interfaceSerial5/0Ctrl+CsaveThecurrentconfigurationwillbewrittentothedevice.Areyousure?選擇Y，確定將當(dāng)前運(yùn)行配置寫進(jìn)設(shè)備介質(zhì)中Pleaseinputthefile(Toleavetheexistingfilenameunchanged,presstheenterCFconfig.cfg，如果不更改系統(tǒng)默認(rèn)保存的文件Validatingfile.PleaseNowsavingcurrentconfigurationtotheSavingconfigurationcf:/config.cfg.Please.Configurationissavedtocfconfig.cfg保存配置文件，則顯示如Thecurrentconfigurationwillbewrittentothedevice.Areyousure?[Y/N]:yPleaseinputthefilename(*.cfg)[cf:/config.cfg](Toleavetheexistingfilenameunchanged,presstheenterkey):config.cfgcf:/config.cfgexists,overwrite?[Y/N]:yValidatingfile.PleaseNowsavingcurrentconfigurationtothedevice.Savingconfigurationcf:/config.cfg.Pleasewait....Configurationissavedtocf<AHPTC>disysaved-configurationversion5.20,Release1509P01,##defaultenablesystem#vlan1systemaccess-limitdisablestateactiveidle-cutself-service-url#interfaceAux0asyncmodeflowlink-protocol#interfaceSerial5/0link-protocol#interfaceSerial5/1link-protocol#interfacelink-protocol#interfaceSerial5/3link-protocol#interfaceNULL0interfaceGigabitEthernet0/0portlink-moderoute#interfaceGigabitEthernet0/1portlink-moderoute#user-interfaceconuser-interfaceauxuser-interfacevty04saveH3C。[AHPTC]undosysname<AHPTC>resetsaved-Thesavedconfigurationfilewillbeerased.Areyousure?[Y/N]:yConfigurationfileincfisbeingcleared.PleasewaitConfigurationfileincfisStarttocheckconfigurationwithnextstartupconfigurationfile,please Thiscommandwillrebootthedevice.Currentconfigurationmaybelostinnextstartupifyoucontinue.Continue?[Y/N]:YdirCFDirectoryofcf:/ Mar262008 Dec032007 252168KBtotal(238628 Filesystemtypeofcf:用save命令保存一個(gè)配置文件并命名 .cfg，再使用delete刪除該配置文件 Thecurrentconfigurationwillbesavedtocf:/ .cfg.Continue?[Y/N]:yNowsavingcurrentconfigurationtothedevice.Savingconfiguration .cfg.Please.ConfigurationissavedtocfDirectoryofcf:/0-Mar2620081Dec0320072Sep032009252168KBtotal(238626 Filesystemtypeofcf: Deletecf:/ %Deletefile 刪 .cfg配置文件后，再次查看文件列表，確認(rèn)該文件已經(jīng)刪除<AHPTC>dir/allDirectoryofcf:/0 Mar2620081Dec0320072 Sep032009private-3 Sep032009 252168KBtotal(238624KBFilesystemtypeofcf:間卻一直沒有改變？那是因?yàn)槭褂胐elete命令刪除文件時(shí)，被刪除的文件被保存在回收站中。如果要徹底刪除回收站中的某個(gè)廢棄文件，必須在文件的原歸屬下執(zhí)行resetrecycle-bin命令，才可以將回收站中的廢棄文件徹底刪除，以回收空間。<AHPTC>resetrecycle-Clear .cfg%Clearedfile <AHPTC>dir/allDirectoryofcf:/ Mar262008 Dec032007 Sep032009 private-252168KBtotal(238626 Filesystemtypeofcf:<AHPTC>delete Thecontentscannotberestored!!!Delete %Deletefile <AHPTC>dir/allDirectoryofcf:/0 Mar2620081Dec0320072 Sep032009private-252168KBtotal(238626KBFilesystemtypeofcf:步驟一：通過console口配置net用SystemView:returntoUserViewwithCtrl+Z.[AHPTC]local-usertestNewlocaluseradded.，為該用戶創(chuàng)建登入時(shí)的認(rèn)證為test。這里可以password命令指定顯示方式。有兩種顯示方式，simple指定以明文方式顯示，cipher則指定以密文方式顯，。[AHPTC-luser-test]passwordsimple為系統(tǒng)級(jí)、3為管理級(jí)，數(shù)值越小，用戶的優(yōu)先級(jí)越低 [AHPTC-luser-test]level0superSuper命令用來將用戶從當(dāng)前級(jí)別切換到指定級(jí)別。設(shè)置用戶切換到level3的H3C，明文顯示[AHPTC]superpasswordlevel3simple步驟三：配置對(duì)net用戶使用缺省的本地認(rèn)進(jìn)入VTY0~4用戶界面，系統(tǒng)支持5個(gè)VTY用戶同時(shí)。VTY口屬于邏輯終端線， net或SSH。[AHPTC]user-interfacevty0路由器可以采用本地或第服務(wù)器來對(duì)用戶進(jìn)行認(rèn)證，這里使用本地認(rèn)證方scheme[AHPTC-ui-vty0-4]authentication-modepcinterfaceipaddress[AHPTC]interfaceGigabitEthernet[AHPTC-GigabitEthernet0/1]ipaddpcIPGigabitEthernet0/1UP步驟五：打開net服 netserver% net步驟六：使用net登pcGigabitEthernet0/1pc命令窗口中，IP輸入net用戶名及口令，進(jìn)入配置界面，使用?查看此時(shí)該用戶權(quán)限下可使用令。由于此時(shí)登錄用戶級(jí)別處于級(jí)，所以只能看到并使用有限的幾個(gè)命令。supersuperlevel3level0能夠使用先使用save命令保存當(dāng)前配置到設(shè)備介質(zhì)中，再使用reboot命令重新啟動(dòng)系統(tǒng)實(shí)驗(yàn)任務(wù)四：使用FTP上傳系統(tǒng)文consoleFTP[ahptc]local-usertest_ftpNewlocaluseradded.[ahptc-luser-test_ftp]passwordsimpleFTPlevel3.[ahptc-luser-test_ftp]service-typeftp[ahptc-luser-test_ftp]levelFTP[ahptc]ftpserverFTPFTPFTP文件應(yīng)該存在于上傳者的本 中這里本 是 sand步驟五：使用FTP文使用FTP中的get命令配置文件到本 2掌握、tracert系統(tǒng)連通檢測(cè)的使用方debug2-1本實(shí)驗(yàn)任務(wù)供學(xué)員熟悉并掌握路由器、交換機(jī)、pcpc交換機(jī)；pc通過網(wǎng)線連接到交換機(jī)端口上。IPipaddressIPRta[H3C]sysname[rta]interfaceGigabitEthernet[rta-GigabitEthernet0/1]ipadd24[rta]interfaceSerial[rta-Serial5/0]ipaddress30Rtb的配置如下：[H3C]sysname[rtb]interfaceGigabitEthernet[rtb-GigabitEthernet0/1]ipadd24[rtb]interfaceSerial5/0[rtb-Serial5/0]ipadd30PcaIP地址設(shè)置如下：G0/1IP地址。步驟一：rta通過超級(jí)終端登入到rta后，rtb的串口S6/0,檢查路由器之間串口的連通性。[rta]:56databytes,pressCTRL_CtobreakReplyfrom:bytes=56Sequence=1ttl=255time=26msReplyfrom:bytes=56Sequence=2ttl=255time=26msReplyfrom:bytes=56Sequence=3ttl=255time=26msReplyfrom:bytes=56Sequence=4ttl=255time=25msReplyfrom:bytes=56Sequence=5ttl=255time=25---statistics--5packet(s)5packet(s)0.00%packetround-tripmin/avg/max=25/25/26結(jié)果顯示，rta收到ICMP的echoreply報(bào)文，rta可以通rtb。反之亦然查看路由器命令攜帶的參數(shù)：<rta> SelectsourceIP Specifythenumberofechorequeststobe Specifypacketsnottobe SpecifyTTLvalueforechorequeststobe Selecttheinterfacetosendthe Specifytheintervalinmillisecondstosend-nNumericoutputonly.Noattemptwillbemadetolookuphostaddressesforsymbolicnames-pNomorethan8"pad"hexadecimalcharacterstofilloutthe packet.Forexample,-pf2willfillthesentpacketwith fand2 Quietoutput.Nothingwillbedisyedexceptforthesummary Recordroute.IncludetheRECORD_ROUTEoptionintheECHO_REQUESTpacketsanddisytheroute Specifythenumberofdatabytestobe Specifythetimeinmillisecondstowaitforeach SpecifyTOSvalueforechorequeststobe DisythereceivedICMPpacketsotherthanECHO-RESPONSEpackets.STRING<1-20>IPaddressorhostnameofaremotesystem IPProtocol IPv6Protocol例如，可以使用參數(shù)-c來設(shè)定發(fā)送50個(gè)報(bào)文<rta>-c 可以使用-s參數(shù)來設(shè)定發(fā)送報(bào)文的字節(jié)為<rta>-s512:512databytes,pressCTRL_CtobreakReplyfrom:bytes=512Sequence=1ttl=255time=142msReplyfrom:bytes=512Sequence=2ttl=255time=142msReplyfrom:bytes=512Sequence=3ttl=255time=141msReplyfrom:bytes=512Sequence=4ttl=255time=141msReplyfrom:bytes=512Sequence=5ttl=255time=142---statistics---5packet(s)transmitted5packet(s)0.00%packetround-tripmin/avg/max=141/141/142也可以使用參數(shù)-a來設(shè)定報(bào)文的源地址，在網(wǎng)絡(luò)調(diào)試中常常使用加源地址檢查網(wǎng)絡(luò)的連通性。這里使用rta接口S5/0地址為源地址，rtbS5/0：<rta>-a:56databytes,pressCTRL_CtoReplyfrom:bytes=56Sequence=1ttl=255time=26msReplyfrom:bytes=56Sequence=2ttl=255time=26msReplyfrom:bytes=56Sequence=3ttl=255time=26msReplyfrom:bytes=56Sequence=4ttl=255time=25msReplyfrom:bytes=56Sequence=5ttl=255time=26---statistics---5packet(s)transmitted5packet(s)0.00%packetround-tripmin/avg/max=25/25/26加源地址時(shí)，只能使用設(shè)備自身的本地接口地址步驟二：pca進(jìn)入pca命令行窗口 rta的G0/1口和S5/0口地址步驟三：pca進(jìn)入pca命令行窗口，pcb的IP地址結(jié)果顯示，pca無法通pcb的IP地址。這是為什么呢讓我們一步一步來排查為什么不通首先，pcarta的G0/1和S5/0口，結(jié)果顯示可以通其次，pcartb的S5/0口，結(jié)果顯示無法通。pcapcbrequestreply在rta上使用disyiprouting-table命令查看一下rta的路由表[rta]disyiprouting-tableRoutingTables:PublicDestinations: Routes: Direct0Direct0Direct0Direct0Direct0Direct0Direct0destinationrtapca的報(bào)文后，不知道如何轉(zhuǎn)發(fā)，會(huì)丟棄該報(bào)文。結(jié)果就是pca無法通pcb因?yàn)閞tb的路由表項(xiàng)中沒有表項(xiàng)，所以雖然rta將pca請(qǐng)求報(bào)文發(fā)送給rtb，但是rtb不知道如何轉(zhuǎn)發(fā)的回應(yīng)報(bào)文給pca。所以，pca也無法通rtb的串口。iproute-staticrtartb上配置靜態(tài)路由，目的網(wǎng)段為對(duì)端路由pc的互連網(wǎng)段，并將路由下一跳指向?qū)Χ寺酚善鞯慕涌诘刂?；Rta[rta]iproute-staticRtb[rtb]iproute-static步驟六：pca可見，在rta和rtb上配置完靜態(tài)路由后，pca可以通pcbtracert命令，用戶可以查看報(bào)文從源設(shè)備傳送到目的設(shè)備所經(jīng)過的路由節(jié)點(diǎn)。rta上tracertrta上執(zhí)行tracertpcbIP[rta]tracerttracerouteto0(0)30hopsmax,40bytespacket,pressCTRL_Cto117 16 172018 19 18tracert命令攜帶的參數(shù)：<rta>tracert SelectsourceIP Firsttimeto umtimeto UDPport Numberofprobe Timeoutinmillisecondstowaitforeachreply addressorhostnameofaremotesystem IPv6rtarta上執(zhí)行terminalmonitorterminaldebugging用于開啟終端對(duì)調(diào)試信息的顯示功能。<rta>terminal%Currentterminalmonitoris<rta>terminal%CurrentterminaldebuggingisrtadebugipicmpICMP<rta>debuggingip步驟三：在rta上rtb，觀察調(diào)試信息輸在rta上rtb的串口地址，連續(xù)發(fā)送10個(gè)報(bào)文<rta>-c10undodebuggingall3VLANaccesstrunk3-1VLAN本實(shí)驗(yàn)任務(wù)通過在交換機(jī)上配置access鏈路端口而使pc間處于不同VLAN，間的，從而使學(xué)生加深對(duì)access鏈路端口的理解3-1進(jìn)行連接，并檢查設(shè)備的軟件版本及配置信息，確保各設(shè)備軟件版本符合要<swa>disy<swa>resetsaved-[swa]disyvlanTotal1VLANThefollowingVLANsexist:[swa]disyvlan1VLANID:1VLANType:RouteInterface:notconfiguredDescription:VLAN0001 Ports:noneUntaggedPorts:[swa]disyinterfaceEthernetPVID:Mditype:Portlink-type:access VLANID:noneUntaggedVLANID:1Portpriority:pvid1accessVLANswaswb上創(chuàng)建vlan2pca和pcc所連接的ethernet1/0/1端口添加到vlan2中。[swa]vlan[swa-vlan2]portethernet[swb]vlan[swb-vlan2]portethernetvlan2[swa]disyTotal2VLANThefollowingVLANsexist:1(default),2[swa]disyvlan2VLANID:2VLANType:RouteInterface:notconfiguredDescription:VLAN0002 Ports:noneUntaggedPorts:[swb]disyThefollowingVLANs1(default),[swb]disyvlan2VLANID:2VLANType:RouteInterface:notconfiguredDescription:VLAN0002Name:VLAN Ports:noneUntaggedPorts:VLAN間的我們?cè)趐c上配置IP地址，通過命令來測(cè)試處于不同VLAN間的pc能否互通3-1IPIP3-2pcIP不能互通，pccpcdVLAN之間不能互通，連接在同一交換機(jī)上的pc被了。trunkVLAN在上個(gè)實(shí)驗(yàn)中，pca和pcc都屬于vlan2。在pca上使用命令來測(cè)試于pcc能否C:\sandSettings\Administrator>ingwith32bytesofdata:Destinationhostunreachable.Destinationhostunreachable.Destinationhostunreachable.Destinationhoststatisticsfor:Packets:Sent=4,Received=0,Lost=4(100%vlan1vlan2的數(shù)據(jù)幀通過。vlan2Ethernet1/0/24trunktrunkswaswbEthernet1/0/24為trunk[swa]interfaceEthernet[swa-Ethernet1/0/24]portlink-type[swa-Ethernet1/0/24]porttrunkpermitvlan[swb]interfaceEthernet[swb-Ethernet1/0/24]portlink-type[swb-Ethernet1/0/24]porttrunkpermitvlanvlan2<swa>disyvlan2VLANID:2VLANType:RouteInterface:notconfiguredDescription:VLAN0002 UntaggedPorts:可以看到，vlan2中包含了端口Ethernet1/0/24，且數(shù)據(jù)幀是以帶有的形式通過端Ethernet1/0/24<swa>disyinterfaceEthernetPVID:1Mditype:Portlink-type:VLANpassing :1(defaultvlan),2VLANpermitted:1(defaultvlan),2-4094Trunkportencapsulation:IEEE802.1qVLAN在pca上用命令來測(cè)試于pcc能否互通。其結(jié)果應(yīng)該是能夠互通，如下所示 sandSettings\Administrator>ingwith32bytesofdata:Replyfrom:bytes=32time<1msTTL=128Replyfrom:bytes=32time<1msTTL=128Replyfrom:bytes=32time<1msTTL=128Replyfrom:bytes=32time<1msstatisticsfor:Packets:Sent=4,Received=4,Lost=0(0%loss),Approximateroundtriptimesinmilli-seconds:Minimum= um=0ms,Average=4STPSTP4-1STPMSTP協(xié)議的快速收斂4-1進(jìn)行連接，并檢查設(shè)備的軟件版本及配置信息，確保各設(shè)備軟件版本符合要<swa>disy<swa>resetsaved-0swapc的端口為邊緣端口。[swa]stpenable[swa]stppriority0[swa]interfaceEthernet[swa-Ethernet1/0/1]stpedged- [swb]stpenable[swb]stppriority4096[swb]interfaceEthernet[swb-Ethernet1/0/1]stpedged- STPswaswbSTP[swa]dis-------[CISTGlobalInfo][ModeMSTP]-------CISTBridge BridgeTimes o2sMaxAge20sFwDly15sMaxHop20CISTRoot/ERPC :0.000f-e275-85a0/0CIST :0.000f-e275-85a0/CIST [swa]disstp STP （DESI[swb]disCIST BridgeTimes o2sMaxAge20sFwDly15sMaxHop20CISTRoot/ERPC :0.000f-e275-85a0/200CIST :4096.000f-e281-88e8/[swb]disstp STP 換機(jī)之間轉(zhuǎn)發(fā)數(shù)據(jù)；端口Ethernet1/0/24是備份根端口，處于阻塞狀態(tài)；連接pc的端口Ethernet1/0/1是指定端口。步驟四：STP4-1IPIP4-2pcIPt， sandSettings\Administrator>-tingwith32bytesofdata:Replyfrom:bytes=32time<1msTTL=128Replyfrom:bytes=32time<1msTTL=128Replyfrom:bytes=32time<1msswbSTP端口狀態(tài)，確定交換機(jī)間哪個(gè)端口處于轉(zhuǎn)發(fā)狀態(tài)。將交換機(jī)之間處STPpcaICMP報(bào)文有無丟失。正常情況swbSTP[swb]disstp STP Ethernet1/0/24STPRSTP/MSTPSTP德out，需要檢查pcb是否開啟了或交換機(jī)配置是否有問題。Ethernet1/0/1:linkstatusis%Apr2612:12:29:1962000swaMSTP/2/PFWD:Instance0'sEthernet1/0/1hasbeensettoforwardingstate!pc的端Ethernet1/0/1上取消邊緣端口配置，如下：[swa]interfaceEthernet[swa-Ethernet1/0/1]undostpedged-配置完成后，斷開端口Ethernet1/0/1的電纜，再重新連接，并且在swaEthernet1/0/1[swa]disystp STP [swa]disystp STP [swa]disystp STP #Apr2612:14:53:3152000swaMSTP/1/PFWD:hwPortMstiStateForwarding:Instance0'sPort0. hasbeensettoforwardingstate! STP discardinglearningforwarding狀態(tài)。從以上實(shí)驗(yàn)可知，取消邊緣端口配置后，STP收斂速度變慢了。5802.1x掌握端口基本配5-1本實(shí)驗(yàn)通過在交換機(jī)上配置802.1x協(xié)議，使接入交換機(jī)的pc經(jīng)過認(rèn)證后才能網(wǎng)絡(luò)5-1進(jìn)行連接，并檢查設(shè)備的軟件版本及配置信息，確保各設(shè)備軟件版本符合要<swa>disy<swa>resetsaved-802.1x802.1x協(xié)議并創(chuàng)建本地用戶。swa：802.1xisenabledglobally.[swa]dot1xinterfacee1/0/1e1/0/2802.1xisenabledonport802.1xisenabledonportEthernet1/0/2.[swa]local-userabcdeNewlocaluser[swa-luser-abcde]service-typelan-access[swa-luser-abcde]passwordsimple12345步驟三：802.1x5-1IPIPpcapcbIP配置完成后，在pca上用命令來測(cè)試到pcb的互通性。因?yàn)榻粨Q機(jī)啟用了pca與pcb sandSettings\Administrator>ingwith32bytesofdata:RequesttimedRequesttimedPc802.1xwindowsIEEE802.1x按提示要求點(diǎn)擊，系統(tǒng)彈出框，要求輸入用戶名和，如下所示在框中輸入用戶名和后，系統(tǒng)提示通過驗(yàn)證C:\sandSettings\Administrator>ingwith32bytesofdata:Replyfrom:bytes=32time<1msTTL=128Replyfrom:bytes=32time<1msTTL=128Replyfrom:bytes=32time<1mswindows系統(tǒng)長(zhǎng)時(shí)間沒有自動(dòng)彈出要求認(rèn)證提示，或認(rèn)證失敗需要重新認(rèn)802.1x認(rèn)證過程本實(shí)驗(yàn)通過在交換機(jī)上配置端口，使處于組內(nèi)的兩臺(tái)pc不能互相，但能夠上行端口的pc。通過本實(shí)驗(yàn)，是學(xué)生能夠掌握端口的基本原理和配置5-1進(jìn)行連接，并檢查設(shè)備的軟件版本及配置信息，確保各設(shè)備軟件版本符合要<swa>disy<swa>resetsaved-步驟二：配置端口在交換機(jī)上啟用端口，設(shè)置Ethernet1/0/1、Ethernet1/0/2為組的普通端口，端口Ethernet1/0/24為組的上行端口。swa：[swa]interfacee1/0/1[swa-Ethernet1/0/1]port-isolateenable[swa-Ethernet1/0/1]interfacee1/0/2[swa-Ethernet1/0/2]port-isolateenable[swa-Ethernet1/0/2]interfacee1/0/24[swa-Ethernet1/0/24]port-isolateuplink-配置完成后，用以下命令顯示組的信息<swa>disyport-isolategroupPort-isolategroupUplinkportsupport:YESGroupID:1Uplinkport:Ethernet1/0/24 步驟三：端口驗(yàn)5-2IPIPpcapcbIP sandSettings\Administrator>ingwith32bytesofdata:RequesttimedRequesttimed然后將pcb從端口Ethernet1/0/2斷開，連接到組的上行端口Ethernet1/0/24上，再用命令測(cè)試，其結(jié)果應(yīng)該是能夠互通。如下所示： sandSettings\Administrator>ingwith32bytesofdata:Replyfrom:bytes=32time<1msTTL=128Replyfrom:bytes=32time<1msTTL=128Replyfrom:bytes=32time<1mspc只能接入交換機(jī)上的特定端口。通過本實(shí)5-1進(jìn)行連接，并檢查設(shè)備的軟件版本及配置信息，確保各設(shè)備軟件版本符合要<swa>disy<swa>resetsaved-5-3MACIPMAC001E-EC65-在交換機(jī)上啟用端口綁定。設(shè)置端口Ethernet1/0/1與pca的MACEthernet1/0/2pcbMAC地址綁定。swa：[swa]interface[swa-Ethernet1/0/1]user-bindip-addmac-address001E-EC65-C9E2[swa]interfacee1/0/2[swa-Ethernet1/0/2]user-bindip-addmac-address001E-90A2-[swa]disyuser-TheFollowingUseraddressbindhavebeen-------------2bindentriesqueried,2listed-----------在pca上用命令來測(cè)試pcb的互通性。其結(jié)果應(yīng)該是能夠互通。如下所示C:\sandSettings\Administrator>ingwith32bytesofdata:Replyfrom:bytes=32time<1msTTL=128Replyfrom:bytes=32time<1msReplyfrom:bytes=32time<1ms斷開pc與交換機(jī)間的連接，然后將pca連接到端口Ethernet1/0/2，pcb連接到端口 sandSettings\Administrator>ingwith32bytesofdata:RequesttimedRequesttimed66-16-1進(jìn)行連接，并檢查設(shè)備的軟件版本及配置信息，確保各設(shè)備軟件版本符合要<swa>disy<swa>resetsaved-[swa]link-aggregationgroup1modestatic[swa]interfacee1/0/23[swa-Ethernet1/0/23]portlink-aggregationgroup[swa]interface[swa-Ethernet1/0/24]portlink-aggregationgroup[swb]link-aggregationgroup1modestatic[swb]interfacee1/0/23[swb-Ethernet1/0/23]portlink-aggregationgroup1[swb]interfacee1/0/24[swb-Ethernet1/0/24]portlink-aggregationgroupswaswb[swa]disylink-aggregationAggregationGroupType:S--Static,M--LoadsharingType:Shar--Loadsharing,NonS--Non-LoadsharingActorID:0x8000,000f-e275-85a0PartnerSelectUnselectShare 0x8000,000f-e281-88e82 [swb]disylink-aggregationsummaryAggregationGroupType:D--Dynamic,S--Static,M--ManualLoadsharingType:Shar--Loadsharing,NonS--Non-LoadsharingActorID:0x8000,000f-e281-88e8 Partner SelectUnselectShare 0x8000,000f-e275-85a0 ID126-1IPIP sandSettings\Administrator> ingwith32bytesofReplyfrom:bytes=32time<1msTTL=128Replyfrom:bytes=32time<1mspcaICMP報(bào)文有無丟失。ARP掌握ARP的工作原理及配置方7-1ARPARPARP協(xié)議的基本工作原7-1進(jìn)行連接，并檢查設(shè)備的軟件版本及配置信息，確保各設(shè)備軟件版本符合要<rta>disy<rta>resetsaved-pcIP7-1IPIPpcIPpc的“命令提示符”窗口ipconfigpcIP地址是否配置正確。Pca的結(jié)果應(yīng)該如下所示：C:\sandSettings\Administrator>ipconfigWindowsIPConfigurationEthernetadapter本地連接:Connection-specificDNS .Description........... NetLink(TM)Fast .:00-1E-EC-65-C9-Dhcp IP :Subnet :DefaultGateway.........rtaIP[rta]interfaceGigabitEthernet[rta-GigabitEthernet0/0]ipaddress54[rta]interfaceGigabitEthernet[rta-GigabitEthernet0/1]ipaddress54ARPrta及pca、pcbipMAC地址。RtaMACIP[rta]disyinterfaceGigabitEthernet0/0GigabitEthernet0/0currentstate:UPLineprotocolcurrentstate:UPDescription:GigabitEthernet0/0InterfaceTheumTransmitUnitis1500,Holdtimeris10(sec)InternetAddressis54/24PrimaryIPPacketFrameType: HardwareAddress:000f-e289-[rta]disyinterfaceGigabitEthernet0/1GigabitEthernet0/1currentstate:UPLineprotocolcurrentstate:UPDescription:GigabitEthernet0/1InterfaceTheumTransmitUnitis1500,Holdtimeris10(sec)InternetAddressis54/24PrimaryIPPacketFrameType:PKTFMT_ETHNT_2, HardwareAddress:000f-e289-ad2fPcaMACIP地址如下： sandSettings\Administrator>ipconfig/allWindowsIPConfigurationEthernetadapter本地連接Connection-specificDNS .Description........... NetLink(TM)Fast .:00-1E-EC-65-C9-Dhcp IP :Subnet :DefaultGateway.........:PcbMACIP地址如下： sandSettings\lenovo>ipconfig/allWindowsIPConfigurationEthernetadapter本地連接ernet

Connection-specificDNS . RealtekRTL8139/810xFamilyFastPhysicalAddress.........:00-1E90-A2-29-Dhcp IP :Subnet :DefaultGateway.........pcrtaIPMAC地址對(duì)應(yīng)關(guān)系，7-2IPMACIPMAC000f-e289-000f-e289-然后，分別在pca和pcb的“命令提示符”窗口下用命令來測(cè)試pc到rta的可達(dá)pcrtaARPpca的測(cè)試如下： sandSettings\Administrator>54ing54with32bytesofdata:Replyfrom54:bytes=32time<1msTTL=255Replyfrom54:bytes=32time<1msTTL=255Replyfrom54:bytes=32time<1msTTL=255Replyfrom54:bytes=32time<1mspcb sandSettings\lenovo>54ing54with32bytesofdata:Replyfrom54:bytes=32time<1msTTL=255Replyfrom54:bytes=32time<1msTTL=255Replyfrom54:bytes=32time<1msTTL=255Replyfrom54:bytes=32time<1msstatisticsfor54:Packets:Sent=4,Received=4,Lost=0(0%loss),Approximateroundtriptimesinmilli-seconds:Minimum= um=0ms,Average=pca、pcbrtaARP表項(xiàng)信息。Pca sandSettings\Administrator>arp-Interface:---InternetAddress PhysicalAddress Pcb sandSettings\lenovo>arp-Interface:---InternetAddress PhysicalAddress Rta<rta>disyarp IP VLAN Aging ARPIPMAC地址。本實(shí)驗(yàn)通過在設(shè)備上配置ARP，是設(shè)備能夠?qū)Σ煌泳W(wǎng)間的ARP報(bào)文進(jìn)行轉(zhuǎn)發(fā)，是學(xué)生能夠了解ARP的基本工作原理，掌握ARP的配置方法。7-1進(jìn)行連接，并檢查設(shè)備的軟件版本及配置信息，確保各設(shè)備軟件版本符合要<rta>disy<rta>resetsaved-pcIP7-3IPIPpcIPpc的“命令提示符”窗口ipconfig來pcIP地址是否配置正確。Pca的結(jié)果應(yīng)該如下所示： sandSettings\Administrator>ipconfig/allWindowsIPConfigurationEthernetadapter本地連接Connection-specificDNS .Description........... NetLink(TM)Fast .:00-1E-EC-65-C9-Dhcp IP :Subnet :DefaultGatewayPcb的結(jié)果應(yīng)該如下所示：C:\sandSettings\lenovo>ipconfigWindowsIPConfigurationEthernetadapter本地連接:Connection-specificDNS . RealtekRTL8139/810xFamilyFasternet :00-1E-90-A2-29-Dhcp IP :Subnet :DefaultGateway.........rtaIP[rta]intGigabitEthernet[rta-GigabitEthernet0/0]ipadd5424[rta-GigabitEthernet0/0]intGigabitEthernet0/1[rta-GigabitEthernet0/1]ipadd54步驟三：ARP配 sandSettings\Administrator>ingwith32bytesofdata:RequesttimedRequesttimed/24在rta上配置ARP[rta]intGigabitEthernet -arp[rta-GigabitEthernet0/0]intGigabitEthernet0/1 -arpenable配置完成后，在pca上用命令測(cè)試pcb的可達(dá)性，此時(shí)應(yīng)該是可達(dá)的，如下C:\sandSettings\Administrator>ingwith32bytesofdata:Replyfrom:bytes=32time=1msTTL=127Replyfrom:bytes=32time<1msTTL=127Replyfrom:bytes=32time<1msTTL=127Replyfrom:bytes=32time<1msstatisticsfor:Packets:Sent=4,Received=4,Lost=0(0%loss),Approximateroundtriptimesinmilli-seconds:Minimum=0ms,um=1ms,Average=ARPpcaARP sandSettings\Administrator>arp-aInterface:---0x80002 ARPMACrtaG0/0MAC在pca看來，RTA接口G0/0就是pcb。實(shí)際上，是rta的接口G0/0執(zhí)行了ARP功能，為pca發(fā)出的ARP請(qǐng)求提供了應(yīng)答同理，pcbrtaG0/1pcartbARP sandSettings\lenovo>arp-aInterface:---0x30002rtaARP[rta]disyarp IP VLAN Aging D D8DHCPDHCPDHCP8-1DHCPDHCP服務(wù)器的配置。7-1進(jìn)行連接，并檢查設(shè)備的軟件版本及配置信息，確保各設(shè)備軟件版本符合要<rta>disy<rta>resetsaved-IP8-1IPIP[rta-GigabitEthernet0/0]ipaddrtaDHCPrta：[rta]dhcpenable[rta]dhcpserverforbidden-ip[rta]dhcpserverip-pool[rta-dhcp-pool-pool1]networkmask[rta-dhcp-pool-pool1]gateway-listrtaDHCP[rta]discurrent-sysnamedhcpserverip-poolnetworkmaskgateway-list#interfaceGigabitEthernet0/0portlink-moderouteipaddress#interfaceGigabitEthernet0/1portlink-moderoute#dhcpserverforbidden-ip#dhcp步驟四：pcaDHCPIPpcaDHCPpcaipconfig來驗(yàn)證pcaIP地址和網(wǎng)關(guān)C:\sandSettings\Administrator>ipconfigWindowsIPConfigurationEthernetadapter本地連接Connection-specificDNS .IP :Subnet :Default :/renewpcaDHCPDHCPrtadisdhcpserverstatisticsDHCP[rta]disdhcpserverstatisticsGlobalPool:Pool 100BOOTP3210000BOOTP21100Bad0在rta上用命令disydhcpserverforbidden-ip來查看DHCP服務(wù)器分配的IP地址：[rta]disydhcpserverforbidden-ipIPRangefrom 用disydhcp -ip來查看DHCP服務(wù)器可供分配的IP地址資源[rta]disydhcpserver-IPRangefrom IPRangefrom 可知，IP、IP被禁pca。DHCP的配置。7-1進(jìn)行連接，并檢查設(shè)備的軟件版本及配置信息，確保各設(shè)備軟件版本符合要<rta>disy<rta>resetsaved-IP8-2IPIPVLANswaVLANIP：[swa]vlan2[swa-vlan2]int[swa-Ethernet1/0/2]portaccessvlan2[swa]interfaceVlan-interface1[swa-Vlan-interface1]ipadd[swa]interfaceVlan-interface[swa-Vlan-interface2]ipaddswapcarta之間能夠互通。swarta：[swa]iproute-static24rtaIP及靜態(tài)路由：[rta]intGigabitEthernet0/0[rta-GigabitEthernet0/0]ipadd[rta]iproute-static24rtaDHCPswaDHCP[rta]dhcp[rta]dhcpserverforbidden-ip[rta]dhcpserverip-poolpool1[rta-dhcp-pool-pool1]networkmask[rta-dhcp-pool-pool1]gateway-list[swa]dhcprelay[swa]dhcprelayserver-group1ip[swa]intVlan-interface[swa-Vlan-interface1]dhcpselect[swa-Vlan-interface1]dhcprelayserver-select步驟四：pcaDHCPIPpcaswapcaDHCPpcaipconfigIP sandSettings\Administrator>ipconfigWindowsIPConfigurationEthernetadapter本地連接Connection-specificDNSSuffix .:IP :Subnet :Default :DHCPswaDHCP[swa]disydhcprelayserver-group1 GroupIP DHCP[swa]disydhcprelayinterfaceVlanInterface Server- DHCP[swa]disydhcprelaystatisticsserver-groupDHCPrelayserver-PacketPacket->110000Server- 11009IPV6掌握如何用IPV6命令進(jìn)行IPV6地址可達(dá)性檢IPV69-1IPV6IPV6IPV6鄰居表項(xiàng)，再9-1進(jìn)行連接，并檢查設(shè)備的軟件版本及配置信息，確保各設(shè)備軟件版本符合要<rta>disy<rta>resetsaved-#IPV6[H3C]sysnrta#G0/0[rta]interfaceGigabitEthernet[rta-GigabitEthernet0/0]ipv6addressautolink-#IPV6[H3C]sysn#G0/0[rtb]interfaceGigabitEthernet[rtb-GigabitEthernet0/0]ipv6addressautolink-[rta]disyipv6interfaceGigabitEthernet0/0GigabitEthernet0/0currentstate:UPLineprotocolcurrentstateIPv6isenabled,link-localaddressisFE80::20F:E2FF:FE89:AD2ENoglobalunicastaddressconfiguredJoinedgroupaddress(es):MTUis1500NDDADisenabled,numberofDADattempts:1NDreachabletimeis30000millisecondsNDretransmitintervalis1000millisecondsHostsuse essautoconfigfor[rtb]disyipv6interfaceGigabitEthernet0/0GigabitEthernet0/0currentstate:UPLineprotocolcurrentstateIPv6isenabled,link-localaddressisFE80::20F:E2FF:FE89:AE1ENoglobalunicastaddressconfiguredJoinedgroupaddress(es):MTUis1500NDDADisenabled,numberofDADattempts:1NDreachabletimeis30000millisecondsNDretransmitintervalis1000millisecondsHostsusestaessautoconfigfor[rta]ipv6FE80::20F:E2FF:FE89:AE1E-iGigabitEthernetFE80::20F:E2FF:FE89:AE1E:56 databytes,pressCTRL_CtobreakReplyfromFE80::20F:E2FF:FE89:AE1Ebytes=56Sequence=1hoplimit=64 time=1msReplyfromFE80::20F:E2FF:FE89:AE1Ebytes=56Sequence=2hoplimit=64 time=1msReplyfromFE80::20F:E2FF:FE89:AE1Ebytes=56Sequence=3hop time=1Replyfrombytes=56Sequence=4hoplimit=64 time=1msReplyfromFE80::20F:E2FF:FE89:AE1Ebytes=56Sequence=5hop time=15packet(s)5packet(s)0.00%packetround-tripmin/avg/max=1/1/1[rta]disyipv6neighbors IPv6Address StateTAgeFE80::20F:E2FF:FE89:AE1E000f-e289-ae1eN/A STALEDEUI-64#G0/0EUI-64[rta]interfaceGigabitEthernet[rta-GigabitEthernet0/0]ipv6address2001::/64eui-#G0/0EUI-64[rtb]interfaceGigabitEthernet[rtb-GigabitEthernet0/0]ipv6address2001::/64eui-EUI-64規(guī)范的全球單播地址。用命令來查看EUI-64地址，記錄下來并測(cè)試可達(dá)性。如下所示：[rta]disyipv6interfaceGigabitEthernet0/0GigabitEthernet0/0currentstate:UPLineprotocolcurrentstateIPv6isenabled,link-localaddressisFE80::20F:E2FF:FE89:AD2EGlobalunicastaddress(es):2001::20F:E2FF:FE89:AD2E,subnetisJoinedgroupaddress(es):MTUis1500NDDADisenabled,numberofDADattempts:1NDreachabletimeis30000millisecondsNDretransmitintervalis1000millisecondsHostsusestaessautoconfigfor[rtb]disyipv6interfaceGigabitEthernet0/0GigabitEthernet0/0currentstate:UPLineprotocolcurrentstateIPv6isenabled,link-localaddressisFE80::20F:E2FF:FE89:AE1EGlobalunicastaddress(es):2001::20F:E2FF:FE89:AE1E,subnetisJoinedgroupaddress(es):MTUis1500NDDADisenabled,numberofDADattempts:1NDreachabletimeis30000millisecondsNDretransmitintervalis1000millisecondsHostsuse essautoconfigfor[rta]ipv62001::20F:E2FF:FE89:AE1E:56 databytes,pressCTRL_CtobreakReplyfrom2001::20F:E2FF:FE89:AE1Ebytes=56Sequence=1hoplimit=64 time=2msReplyfrom2001::20F:E2FF:FE89:AE1Ebytes=56Sequence=2hoplimit=64 time=1msReplyfrom2001::20F:E2FF:FE89:AE1Ebytes=56Sequence=3hoplimit=64 time=1msReplyfrom2001::20F:E2FF:FE89:AE1Ebytes=56Sequence=4hoplimit=64 time=1msReplyfrom2001::20F:E2FF:FE89:AE1Ebytes=56Sequence=5hop time=15packet(s)5packet(s)0.00%packetround-tripmin/avg/max=1/1/2[rta]disyipv6neighborsType:S-StaticD-IPv6Address Link-layerVIDInterface StateTAgeFE80::20F:E2FF:FE89:AE1E000f-e289-ae1eN/AGE0/0 REACHD122001::20F:E2FF:FE89:AE1E000f-e289-ae1eN/AGE0/0 REACHD22#G0/03001::1。[rta]intg0/0[rta-GigabitEthernet0/0]ipv6address#G0/03001::2。[rtb]intg0/0[rtb-GigabitEthernet0/0]ipv6address[rta-GigabitEthernet0/0]disipv6intGigabitEthernet0/0GigabitEthernet0/0currentstate:UPLineprotocolcurrentstateIPv6isenabled,link-localaddressisFE80::20F:E2FF:FE89:AD2EGlobalunicastaddress(es):2001::20F:E2FF:FE89:AD2E,subnetis3001::1,subnetis3001::/64Joinedgroupaddress(es):MTUis1500NDDADisenabled,numberofDADattempts:1NDreachabletimeis30000millisecondsNDretransmitintervalis1000millisecondsHostsusestaessautoconfigfor[rtb]disipv6interfaceg0/0GigabitEthernet0/0currentstate:UPLineprotocolcurrentstate:UPIPv6isenabled,link-localaddressisFE80::20F:E2FF:FE89:AE1EGlobalunicastaddress(es):2001::20F:E2FF:FE89:AE1E,subnetis3001::2,subnetis3001::/64Joinedgroupaddress(es):MTUis1500NDDADisenabled,numberofDADattempts:1NDreachabletimeis30000millisecondsNDretransmitintervalis1000millisecondsHostsusestaessautoconfigfor[rta]ipv63001::2:56 databytes,pressCTRL_CtobreakReplyfrom3001::2bytes=56Sequence=1hoplimit=64 time=1msReplyfrom3001::2bytes=56Sequence=2hoplimit=64 time=1msReplyfrom3001::2bytes=56Sequence=3hoplimit=64 time=1msReplyfrom3001::2bytes=56Sequence=4hoplimit=64 time=1msReplyfrom3001::2bytes=56Sequence=5hop time=1---3001::2statistics---5packet(s)transmitted5packet(s)0.00%packetround-tripmin/avg/max=1/1/1[rta]disipv6neighborsIPv6 StateTFE80::20F:E2FF:FE89:AE1E000f-e289-ae1eN/AGE0/0 REACHD15 N/A REACHD2001::20F:E2FF:FE89:AE1E000f-e289-ae1eN/AGE0/0STALED10IP10-1按照?qǐng)D10-1進(jìn)行連接，并檢查設(shè)備的軟件版本及配置信息，確保各設(shè)備軟件版本符合<rta>disy<rta>resetsaved-[rta]disyiprouting-tableRoutingTables:PublicDestinations: Routes: Direct0Direct0的路由，這是路由器的還回地10-1IPIP[rta]int[rta-Serial6/0]ipadd24[rta-Serial6/0]intg0/0[rta-GigabitEthernet0/0]ipaddrtb：[rtb]ints6/0[rtb-Serial6/0]ipadd24[rtb-Serial6/0]intg0/0[rtb-GigabitEthernet0/0]ipaddrta[rta]disiprouting-tableRoutingTables:Destinations: Routes: Direct0Direct0Direct0Direct0Direct0Direct0Direct0IP/24，/32，/32，/32我們關(guān)閉鏈路層協(xié)議，則相關(guān)直連路由也。rta[rta-GigabitEthernet0/0]disiprouting-tableRoutingTables:PublicDestinations: Routes: Direct0Direct0Direct0Direct0Direct0可知，在接口shutdown后，所運(yùn)行的鏈路層協(xié)議關(guān)閉，直連路由也就自然了。[rta-G