網(wǎng)絡(luò)配置綜合實(shí)驗(yàn)報(bào)告

綜合實(shí)驗(yàn)需求分析通過合理的三層網(wǎng)絡(luò)架構(gòu)，實(shí)現(xiàn)用戶接入網(wǎng)絡(luò)的安全、快捷，不允許VLAN10的用戶去訪問VLAN30的FTP服務(wù)，VLAN20不受限制；VLAN10的用戶接口需要配置端口安全，設(shè)置最大連接數(shù)為3，如果違規(guī)則采取shutdown措施，VLAN20的用戶接口需要配置端口安全，設(shè)置最大連接數(shù)為2，如果違規(guī)則采取shutdown措施；配置靜態(tài)路由使用全網(wǎng)互通；配置NAT功能，使用內(nèi)網(wǎng)用戶使用—這段地址去訪問互聯(lián)網(wǎng)；將內(nèi)網(wǎng)的FTP服務(wù)發(fā)不到互聯(lián)網(wǎng)上，使用內(nèi)網(wǎng)地址為54，公網(wǎng)地址為，并要求可以通過內(nèi)網(wǎng)地址訪問FTP服務(wù)器，使用ACL防止沖擊波病毒。實(shí)驗(yàn)拓?fù)鋱D實(shí)驗(yàn)設(shè)備二層交換機(jī)2臺(tái)（Switch0，Switch1）。三層交換機(jī)2臺(tái)（MultilayeSwitch1，MultilayeSwitch0）路由器2臺(tái)（router0，router1）。服務(wù)器一臺(tái)（Server0）。主機(jī)兩臺(tái)（PC0，PC1）。IP地址規(guī)劃三層SW0：VLAN10/24VLAN20/24VLAN30/24三層SW1VLAN10/24VLAN20/24VLAN30/24F0/11/30R0F0/0/30F0/1/28R1F0/1/28主要三層交換機(jī)，路由器的配置：Switch0ConftIntf0/1//SwitchportmodeaccessSwitchportport-securitySwitchportport-securitymaximum3Switchportport-securityviolationshutdownIntf0/2SwitchportmodeaccessSwitchportport-securitySwitchportport-securitymaximum2Switchportport-securityviolationshutdownIntvlan10IpaddNoshutIntvlan20IpaddNoshutIntvlan30IpaddNoshutIntrangef0/1//SwitchportmodeaccessSwitchportaccessvlan10Intrangef0/2SwitchportmodeaccessSwitchportaccessvlan20Intrangef0/3SwitchportmodetrunkSwithporttrunkallowedvlan1,10,20,30Switchporttrunkencapsulationdot1qIntvlan2Ipadd52NoshutIntrangef0/5Switchportaccessvlan2IproutingIproutef0/3Iproute52f0/3Iproute40f0/3EndRouterripNetworkNetworkEndSwitch1ConftIntvlan30IpaddNoshutIntrangef0/1Switchport accessvlan30Intrangef0/3SwitchportmodetrunkSwithporttrunkallowedvlan1,10,20,30Switchporttrunkencapsulationdot1qIproutingIntvlan2Ipadd52NoshutAccess-list1025555Intvlan30Ipaccess-group102inEndIntrangef0/2Switchportaccessvlan2Iproutef0/1Iproutef0/3Iproutef0/3Iproute52f0/2Iproute40f0/2EndRouterripNetworkNetworkEndRouter0ConftIntf0/0Ipadd52IpnatinsideNoshutIntf0/1Ipadd40IpnatoutsideNoshutAccess-list1permit55Ipnatpooltestnetmask40Ipnatinsidesourcelist1pooltestoverloadIpnatinsidesourcestatic54Iproutef0/0Iproute52f0/0Iproute40f0/1EndRouterripNetworkNetworkEndaccess-list120denytcpanyanyeq135

access-list120denytcpanyanyeq136

access-list120denytcpanyanyeq137

access-list120denytcpanyanyeq138

access-list120denytcpanyanyeq139

access-list120denytcpanyanyeq389

access-list120denytcpanyanyeq445

access-list120denytcpanyanyeq4444

access-list120denyudpanyanyeq69

access-list120denyudpanyanyeq135

access-list120denyudpanyanyeq136

access-list120denyudpanyanyeq137

access-list120denyudpanyanyeq138

access-list120denyudpanyanyeq139

access-list120denyudpanyanyeqsnmp

access-list120denyudpanyanyeq389

access-list120denyudpanyanyeq445

access-list120denyudpanyanyeq1434

access-list120denyudpanyanyeq1433

access-list120permitipanyanyintf0/0ipaccess-group120inend驗(yàn)證測(cè)試使用showvlan命令測(cè)試vlan的劃分：使用shipnattranslations：使用shaccess—lists查看：輸入ship