HCIA综合实验

题目要求

1.IP分配/划分

192.168.1.0/24
192.168.1.0/26
192.168.1.64/26
192.168.1.128/26
192.168.1.192/26 备用

路由器1 vlan 2 192.168.1.0/27 vlan 3 192.168.1.32/27

路由间 192.168.1.128/26
路由器2
vlan 2 192.168.1.64/27
vlan 3 192.168.1.96/27

配置交换机vlan
[sw1-GigabitEthernet0/0/1]port link-type trunk
[sw1-GigabitEthernet0/0/1]port trunk allow-pass vlan 2 to 3
上面可以直接写下面的允许所有
[sw1-GigabitEthernet0/0/1]port trunk allow-pass vlan all

[sw1]vlan batch 2 to 3
[sw1]port-group group-member Ethernet 0/0/1 to Ethernet 0/0/2
[sw1-port-group]port link-type access
[sw1-port-group]port default vlan 2

[sw1-Ethernet0/0/2]port link-type access
[sw1-Ethernet0/0/2]port default vlan 3
配置各个IP
[r1]int g0/0/1.1
[r1-GigabitEthernet0/0/1.1]dot1q termination vid 2
[r1-GigabitEthernet0/0/1.1]ip ad 192.168.1.1 27
[r1-GigabitEthernet0/0/1.1]arp broadcast enable

[r1-GigabitEthernet0/0/0]ip ad 192.168.1.129 26
配置DHCP池塘
[r1]dhcp enable
[r1]ip pool v2
[r1-ip-pool-v2]network 192.168.1.0 mask 27
[r1-ip-pool-v2]gateway-list 192.168.1.1
[r1-ip-pool-v2]dns-list 1.1.1.10
[r1-GigabitEthernet0/0/1.1]dhcp select global
配置ospf
[r1]ospf 1 router-id 1.1.1.1
[r1-ospf-1]area 0
[r1-ospf-1-area-0.0.0.0]network 192.168.1.0 0.0.0.255

现在内网全网可达
按照要求pc1不能telnet r1

创建aaa服务
[r1-aaa]local-user chao privilege level 15 password cipher 123456
Info: Add a new user.
[r1-aaa]local-user chao service-type telnet
[r1]user-interface vty 0 4
[r1-ui-vty0-4]authentication-mode aaa
启用ACL扩展配置
[r1-acl-adv-3000]rule deny tcp source 192.168.1.30 0.0.0.0 destination 192.168.1.1 0.0.0.0 destination-port eq 23
[r1-GigabitEthernet0/0/1.1]traffic-filter inbound acl 3000 写入接口

r2 以及lsw2配置相似

r2边界配置
[r2]ip route-static 0.0.0.0 0 12.1.1.2
[r2-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255
23Telnet以及80www接口映射
[r2-GigabitEthernet0/0/2]nat static protocol tcp global current-interface 80 inside 192.168.1.34 80
Warning:The port 80 is well-known port. If you continue it may cause function failure.
Are you sure to continue?[Y/N]:y
[r2-GigabitEthernet0/0/2]nat static protocol tcp global current-interface 23 inside 192.168.1.129 23
Warning:The port 23 is well-known port. If you continue it may cause function failure.
Are you sure to continue?[Y/N]:y
r1配置

r2配置

r3

lsw1

http服务器配置

dns配置

client设置

**

测试

**
pc1 不能telent ，ping通，及外网链接


client访问

r3 telnet 12.1.1.1到r1

总结

以上是生活随笔为你收集整理的HCIA综合实验的全部内容，希望文章能够帮你解决所遇到的问题。

如果觉得生活随笔网站内容还不错，欢迎将生活随笔推荐给好友。