2023年5月軟考網(wǎng)絡(luò)工程師下午真題（案例分析）真題

例分析/251-11-A8BCD2]（6PC-1、PC-2VLAN4]（42-1（ISP1ISP2）接入InternetNATInternetISP2]（6ServerISP1、ISP2，ServerTCP9980Server[USG]security-[USG-policy-security]rulename[USG-policy-security-rule-http]source-zoneISP1[USG-policy-security-rule-http]source-zone[USG-policy-security-rule-http]destination-zonetrust[USG-policy-security-rule-http]destination-address（1）[USG-policy-security-rule-http]serviceprotocol（2）destination-port[USG-policy-security-rule-http]action[USG-policy-security-rule-http]3]（4經(jīng)過一段時間運行，經(jīng)常有互聯(lián)網(wǎng)用戶反映訪問ServerISPServerServer，但內(nèi)網(wǎng)用戶無法通過公網(wǎng)地Server，經(jīng)過排查，安全策略配置都正確。請分析造成該現(xiàn)象的原因并提供解決方1]（23-1BGPOSPFBGPOSPF（RARBRCRDRARBBGP[RA]bgp[RA-bgp]router-id[RA-bgp]peeras-number[RA-bgp]ipv4-family[RA-bgp-af-ipv4]peer（2）enable[RA-bgp]quit[RB]bgp[RB-bgp]router-id[RB-bgp]peer（3）as-number100RARCRD的OSPF（RCOSPF[RC]ospf1router-id[RC-ospf-1]area[RC-ospf-1-area-]network（4）[RC-ospf-1-area-]authentication-modesimpleruankao[RC-ospf-1]quitauthentication-modesimpleruankaoauthentication-modesimpleplainruankao，則兩者之間有何差異？[RC-ospf-1]import-routebgppermit-ibgp RDBGP引入OSPFBGP[RD]aclnumber 2000ACL/24[RD-acl-basic-2000]ruledenysource（8）55[RD-acl-basic-2000]quit[RD]route-policy [RD-route-policy]if-matchacl[RD--route-policy]quit[RD]bgp100[RD-bgp]ipv4-family[RD-bgp-af-ipv4]import-routeospf1[RD-RABGP[RA]route（11）bgp4-1R1、R2、R3RIP，IP4-14-1IPIP<HUAWEI>[HUAWEI]sysname[R1]interface[R1-GigabitEthernet0/0/0]ipaddress5452[R1-GigabitEthernet0/0/0]interfaceGigabitEthernet0/0/1[R1-GigabitEthernet0/0/1]ipaddress（3）52[R1-GigabitEthernet0/0/2]interfaceGigabitEthernet0/0/2[R1-GigabitEthernet0/0/2]ipaddress[R1-GigabitEthernet0/0/2]quit[R1][R1-rip-1][R1-rip-2]undosummary[R1-rip-2]network[R1-rip-2]networkR2、R3RIP2]（3R2R3RIPBFDBFDecho當(dāng)鏈路出現(xiàn)故障時，BFDRIP[R2]interfacegigabitethernet[R2-GigabitEthernet0/0/1]undo（7）GE0/0/1[R2-GigabitEthernet0/0/1]ripbfd（8）GE0/0/1BFD3]（2R1internet，R1RIP[R1-rip-2]default-route/251-11-A8BCD（1)（2)2]（6PC-1、PC-2VLAN把接入交換機和核心交換機的鏈路配置成trunk，vlanPC-1pingPC-2，看是否能正常通信，arpaarpdisplayvlanbreifvlan，vlan4]（42-1（ISP1ISP2）接入InternetNATInternetISPISP2。主備線路（或浮動路由ISP1，ISP1ISP22]（6ServerISP1、ISP2，ServerTCP9980Server[USG]security-[USG-policy-security]rulename[USG-policy-security-rule-http]source-zoneISP1[USG-policy-security-rule-http]source-zone[USG-policy-security-rule-http]destination-zonetrust[USG-policy-security-rule-http]destination-address（1）[USG-policy-security-rule-http]serviceprotocol（2）destination-port[USG-policy-security-rule-http]action[USG-policy-security-rule-http]（1）03]（4ServerISP11USG2000&USG5000V300R001C10配置從 GigabitEthernet0/0/54 interfaceGigabitEthernet reverse-routenexthop interfaceGigabitEthernet ipaddress redirect-reversenext-hopreverse- ServerServer，但內(nèi)網(wǎng)用戶無法通過公網(wǎng)地Server，經(jīng)過排查，安全策略配置都正確。請分析造成該現(xiàn)象的原因并提供解決方NATNAT【summernatIP網(wǎng)，不會將報文發(fā)給自己的網(wǎng)關(guān)（防火墻PCPCIPIP，再發(fā)起訪問。RA、RB、RCRDiBGP，RCRD1]（23-1BGPOSPFBGPOSPF（RARBRCRDRARBBGP[RA]bgp[RA-bgp]router-id[RA-bgp]peeras-number[RA-bgp]ipv4-family[RA-bgp-af-ipv4]peer（2）enable[RA-bgp]quit[RB]bgp[RB-bgp]router-id[RB-bgp]peer（3）as-number100RARCRD的OSPF（RCOSPF[RC]ospf1router-id[RC-ospf-1]area[RC-ospf-1-area-]network（4）[RC-ospf-1-area-]authentication-modesimpleruankao[RC-ospf-1]quitauthentication-modesimpleruankaoauthentication-modesimpleplainruankao，則兩者之間有何差異？（4）authentication-modesimpleruankao，authentication-modesimpleplainruankao simpleplainruankao#plain areaauthentication-modesimpleplainruankao network55networknetwork simple areaauthentication-modesimplecipher密networknetworknetwork[RC-ospf-1]import-routebgppermit-ibgp RDBGP引入OSPFBGP[RD]aclnumber 2000ACL/24[RD-acl-basic-2000]ruledenysource（8）55[RD-acl-basic-2000]quit[RD]route-policy [RD-route-policy]if-matchacl[RD--route-policy]quit[RD]bgp100[RD-bgp]ipv4-family[RD-bgp-af-ipv4]import-routeospf1[RD-RABGP[RA]route（11）bgp(10)route-policyrp4-1R1、R2、R3RIP，IP4-14-1IPIP<HUAWEI>[HUAWEI]sysname[R1]interface[R1-GigabitEthernet0/0/0]ipaddress5452[R1-GigabitEthernet0/0/0]interfaceGigabitEthernet0/0/1[R1-GigabitEthernet0/0/1]ipaddress（3）52[R1-GigabitEthernet0/0/2]interfaceGigabitEthernet0/0/2[R1-GigabitEthernet0/0/2]ipaddress[R1-GigabitEthernet0/0/2]quit[R1][R1-rip-1][R1-rip-2]undosummary[R1-rip-2]network[R1-rip-2]networkR2、R3RIP（4）version2rip2RIPv1，不能關(guān)閉自動匯總，后面一條命令沒有任RIPv2]2]（3R2R3RIPBFDBFDecho當(dāng)鏈路出現(xiàn)故障時，BFDRIP[R2]interfacegigabitethernet[R2-GigabitEthernet0/0/1]undo（7）GE0/0/1[R2-GigabitEth