企业级网络ip地址规划与配置0001

1、F?Q 血 2T、IQ 2. H5 1IO； id J. 14S HRctterLfl： 172./soSnjer-PT企业级网络ip地址规划与配置以设计具有三层结构的大型企业级网络设计为例，完成IP地址的分配、NAT地址转换、三层网络拓扑结构等功能，并选择合适的设备实现该网络，用模拟器 验证通连性。二、实验拓扑结构图与IP规划PC-iT/PC7IPCTPC65 err er-FT。心洒皿pPCPTPC-FTPC 10V14ILPC2PC-FTvLsn*M: L7S.1&.95.&S01T2 IS 32 勺 30t1 &J-.S血 1/0 19?. L&Q 10 1 /24irtsmst-12

2、.168.10ROUTERO为本园区网络的出口,并在出口处通过NAT转换来实现与外网的拓扑实现:连接，出口网络地址为102145.91,三台路由器构成的主路由区域使用RIP动态路由协议，ROUTER1所连为园区网络服务器群，网段为 /24 ;由于设 备限制在此只设置 WEB与FTP服务器模拟现实中的服务器群，ROUTER3所连网段为 /24。Switch。模拟现实中的新交换机，并与 switch3做链路负载均衡，switch1与 switch1之间使用PVLAN技术连接，做到本交换机上VLAN之间的隔离与整体的透传，Switch3模拟学生机房主交换机

3、，与 switchl之间使用两条普通链路，利用端口汇聚技术实现带宽的增加，并在交换机上连接一台 DHCP服务器实现IP 地址的自动分配，DHCP服务器使用 windows 2003 server附带的DHCP组建实 现，由于设备限制，本次试验采用架设在 VM虚拟机中的windows 2003 server 操作系统实现，虚拟机与现实网络通过桥接网络通信，wlan部分采用单AP布局，AP 型号为 NETGEA，in ternet 接口地址为：54, LAN 地址段为 /24。三、实验器材:设备名称设备数量设备作用华为R2501路由器3路由、寻径华

4、为S2008交换机4服务器2Web服务器/DHCP服务器无线 AP(netgear)1构建无线网络PC机6笔记本（带无线网卡）2四、配置过程:配置命令：RouterO :Quidwaysys name router0/重新命名交路由器routerO int s0/配置串行链路接口routerO-SerialOip add 52/配置接口 IP地址router0-Serial0l in k-protocol ppp/链路层启用PPP协议routerO-SerialOquitrouterO int s1routerO-Serial1ip add 1

5、 52 routerO-Serial1li nk-protocol ppprouterO-Serial1quit routerOriprouterO-rip n etwork allrouterO-ripquitrouterO nat address-group 1 1 pool 1池router0acl 1router0-acl-2rule permit source router0-acl-2rule permit source router0-acl-2q

6、uitrouter0i nt e0router0-Ether net0 nat outbo und 1 address-group pool1 表和端口关联router0-Ethernet0ip route-s router0-Ethernet0 nat server global ftp tcprouter0-Ethernet0 nat server global tcp router0-Ethernet0quit/启用RIP协议/发布直连网络/设定n at地址/设定ACL规则/增加访问控制列/设置缺

7、省路由/设置部FTP服务器/设置部WWW服务器Router1 :syspassword:Quidwaysys name router1router1i nt s0router1-Serial0ip add 52router1-Serial0l in k-protocol ppprouter1-Serial0clock dteclk1router1-Serial0i nt s1router1-Serial1ip add 0 52router1-Serial1li nk-protocol ppprou

8、ter1-Serial1i nt e0 router1-Ethernet0ip add router1-EthernetOquitrouter1riprouterl-rip network allrouter1ip route-s s0Router 3 :sysQuidwaysys name router3router3 int s0router3-SerialOip add 52router3-SerialOl in k-protocol ppprouter3-Se

9、rialOclock dteclk1router3-SerialOi nt s1router3-Serial1ip add 52router3-Serial1li nk-protocol ppprouter3-Serial1clock dteclk1router3-Serial1i nt e0router3-EthernetOip add router3-EthernetOquitrouter3riprouter3-rip n etwork allrouter3-riprouter3ip ro

10、ute-s s1Switch0:syspassword:Quidwaysys name switch0/设置端口类型为 TRUNKswitchO-EthernetO/1port lin k-type trunkswitchOi nt e 0/1/进入端口视图switchO-EthernetO/1port trunk permit via n all/允许通过所有VLAN联信息switchO-EthernetO/1duplex fullswitchO-EthernetO/1speed 100switchOi nt e 0/2switchO-EthernetO/2p

11、ort lin k-type trunkswitchO-EthernetO/2port trunk permit vla n allswitchO-EthernetO/2duplex fullswitchO-EthernetO/2speed 100switchO-EthernetO/2quitswitchOlink-aggreation int e0/1 to int e0/2 both switch。Switch1:sysQuidwaysys name switch1switch1vlan 8switch1-vla n8port eth 0/1 to eth 0/4switch1-vla n

12、8vlan 24switch1-vla n24port eth 0/5 to eth 0/8switch1-vla n24quitswitch1vlan 23switch1-vlan23isolate-user-vlan enableswitch1-vla n23port eth 0/9switch1-vla n23isolate-user-vlan 23 seco ndary 8 24/设置工作模式为全双工/设置速率为100Mbps/设置工作模式为全双工/设置速率为100Mbps/设置汇聚连接/配置VLAN信息/加入端口/配己置isovlan/启用ISO/加入端口/配置与二层vlan之间关Q

13、uidwaysys name switch2switch2vlan 4switch1-vla n23Switch2:sysswitchl-vla n8port eth 0/8switch2-vla n8port eth 0/1 to eth 0/4switch2-vla n8vlan 5switch2-vla n24port eth 0/5 to eth 0/8switch2-vla n24quitswitch2vlan 23switch2-vla n23isolate-user-vla n en ableswitch2-vla n23port eth 0/9switch2-vla n23is

14、olate-user-vla n 23 sec on dary 4 5switch2-vla n23Switch3:syspassword:Quidwaysys name switch3switch3i nt e 0/1switch3-Ethernet0/1port lin k-type trunkswitch3-Ethernet0/1port trunk permit vla n allswitch3-Ethernet0/1duplex fullswitch3-Ethernet0/1speed 100switch3-Ethernet0/1i nt e 0/2switch3-Ethernet0

15、/2port lin k-type trunkswitch3-Ethernet0/2port trunk permit vla n allswitch3-Ethernet0/2duplex fullswitch3-Ethernet0/2speed 100switch3-Ethernet0/2quitswitch3link-aggreation int e 0/1 to e 0/2 both switch3i nt e 0/3switch3mo niter e 0/3switch3-Ethernet0/3quit-皿、sue-|IONnjsEml 口Mll-Iwl-lW1旦-EBI hGElot

16、r Ejj -眉一0? sko ww 5-1 DtppllQ 芯G帥?Air.5m旳N 口 口址s口号建 dm一 ElllliM 吕-B.2=二巻 V shrQ 一！-IplarFIIUJN IdlAJllz为=暗！1- lil-GQJPFQ-吉茎 aeoSIIMIW n=si % dCJJ-Erdte-FCELIEOg.ll-d-.* 二s 二sz口 *u 占 -as.一 53 艮总沖59 01WET1詈 Im f HEPMIE mu 口 丄xod萬連IM upa&dn Hlnoa: fu 5 MUEavldJa pg 场lulTeo-tfm =1FIQC_5np*5 UO_E wQ-葫 t

17、poeT二-rm* M-B -KH10=g av-s 番Etv护usrIEH p 葺.tKdm*#_=a =-*&3M -pxsifcs- Yl*9veoe sss d m JU! Hw (IQgVTDlmSUBAAd220 0 -u 一 01 寸、o 0 -u 一o-lu 七 od-glp 七 ms 一PAAfT - qvvi bA-LUAIL JUILIliyiLWire lew SettingiLogsBlack SitiesBlock SawicesSdiodulvEjmiailIRuutei SlalmAttuched RtvireH lockup Settings Scl P ar

18、aword Aotilei Upf)iadcWiielvw Sttiingv Part F arwafddng tPori Trigg eiingWAN SoiupLAN IP Setup Dyinannic DNS Siafic RoulrsiLAN IP SetupLAN ICP * Sell!)回.一F SubflEt Mask|2 55 .懺5 *255. |t)hip Dtvcldnhip veto onHonei |d岭 atoledl 工 iP use,is DHCP serwiEtsrtiriQ IP AddressL.厂Endlr y IP AdKlrBss厂.1 ”A.db

19、 呂 Rsseivatiain冃 |IP Aikfir&ssPwice ILiiifepAdd | Ej | Dalsla |Apply GertcelNETGEARraster mtac_M NEXT W|ralesi Rcutepr测试和验证:RO配置信息：interface EthernetBip address 10.0.30,1 tinterface Serial0clock DTECLK1 link-protocol ppp ip address 172,16,32.2 255.255.255,252 finterface Seriallclock DTE

20、CLK1 link-protocol ppp ppp authentication-mode chap ppp chap user bip address 17246,32.5 255.255,255.2521interface Serial2flowcontrol none async mode protocol link-protocol pppvquitripnetwork all More Press CTRL_C to break) R1配置信息:irterface EthernetOip address 18.0.10,1 255*255,255.0nat outbound 1 a

21、ddress-group pooll tinterface Serial0link-protocol pppppp pap local-user flybird password simple fh ip address 52!interfd匚巳 Serialllink-protocol pppip address 0 52 !interfdere Serial2flow-conirol noneasync mode protocollink-protocol pppquitripnetwork

22、allquitR3配置信息:interface Ethernetip address Iinterface SeridlB link-proiocol ppp ip address 172,16.32.6 255,255.255.252interface Seriallclock DTECLK1 link-proioGol ppp ip address 172_ 16；32；9 52interface SeriaL2 flow-control none asnc mode protocol linkproiocol

23、pppquitrip network allRO路由表：routeOJdis ip routRout irtg Tables: lestinalion/Nask Proto 0.0.30/0 Static 1(1.1, l .U/2i RIP /24 Direct10.2.115481/32 Direct/8 Direct 127,0.1/3? Direct /30 Direct /32 Direct /32 Direct 172,16,32.4/30 Direct /92 Direct 172 16,92 6/32 Direct 172,16.32.8/30RIP192.160,10.0/24RIPef00 广6 a pl00000000000090JI iI 1r0X00000000001111eMNexthop 68 1 127.0