思科模拟器搭建教程

1、思科ccnp交流群：69721386heres an example topology for cisco iou to help you get started:in this example, sf is an iou instance running on host “solaris”. ioulive is also running on this host, bridging sfs ethernet0/0 interface to my physical network (and to the world).sj1, sj2, and sj3 are iou instances r

2、unning on host “helium”.the ethernet1/0 interface on sf is connected to ethernet0/1 on sj1 are connected, even though they are on separate physical hosts.the ethernet0/0 interfaces on sj1, sj2, and sj3 are connected, sharing a common network segment.last, sj2 and sj3 are connected via their serial1/

3、0 interfaces.hopefully, this should be good enough to demonstrate the various options for connecting iou instances.the netmap filewhen connecting iou instances across physical hosts, the hosts should share a common netmap file. if it isnt possible to use nfs, youll need to duplicate the file on each

4、 host. im not running nfs at home, so ive simply copied the file over to both hosts.the iou instance ids are assigned as follows: sf : 100 sf : 199 (ioulive) sj1 : 151 sj2 : 152 sj3 : 153heres what my netmap file looks like: 100:0solaris 199:0solaris100:1solaris 151:16helium151:0helium 152:0helium 1

5、53:0helium152:1helium 153:1heliumconnect sf to the real worldill start by firing up the sf router on solaris:$ ./unix-js-m 100ios on unix - cisco systems confidential, internal use onlyport 0 is connected to: 199:0solarisport 16 is connected to: 151:16helium.output snipped.next, ill startup ioulive

6、so that sf is connected to my physical network:$ ./ioulive /dev/hme0 199port 0 is connected to: 100:0solaris/dev/hme0 is the nic on solaris that is connected to my network.ill bring up the ethernet0/0 interface on sf:sf# conf tenter configuration commands, one per line. end with cntl/z.sf(config)# i

7、nterface ethernet 0/0sf(config-if)# ip address sf(config-if)# no shutdownverify i can ping my (physical) router:sf(config-if)# do ping type escape sequence to abort.sending 5, 100-byte icmp echos to , timeout is 2 seconds:.!success rate is 80 percent (4

8、/5), round-trip min/avg/max = 20/33/40 msso sf, an iou instance, has connectivity with my physical router at home, a cisco 1811. just for good measure, lets add a default route and see if we can ping hosts on the internet:sf(config-if)# exitsf(config)# ip route sf(config)#

9、 do ping type escape sequence to abort.sending 5, 100-byte icmp echos to , timeout is 2 seconds:!success rate is 100 percent (5/5), round-trip min/avg/max = 40/50/72 mslooks like were all set!bring up sj1now lets bring up the sj1 iou instance on helium:$ ./i86bi_linux-ipbase-ms -e 1 -s

10、 0 151*ios on unix - cisco systems confidential, internal use onlyunder no circumstances is this software to be provided to anynon cisco staff or customers. to do so is likely to resultin disciplinary action. please refer to the iou usage policy atwwwin- for more information.*port 0/0 is connected t

11、o: 152:0helium 153:0heliumport 0/1 is connected to: 100:1solaris.output snipped.connect sj1 to sf now that sj1 is up, lets get it connected to the sf router:sf(config)# int e1/0sf(config-if)# ip addr sf(config-if)# no shutdownsj1# conf tenter configuration commands, one per lin

12、e. end with cntl/z.sj1(config)# int e0/1sj1(config-if)# ip address sj1(config-if)# no shutdownnote that sf is running on the physical host “solaris”, a solaris 8/sparc box, and sj1 is running on the physical host “helium”, an ubuntu 10.04/x86 box.lets verify we have connectivit

13、y:sj1(config-if)# do ping type escape sequence to abort.sending 5, 100-byte icmp echos to , timeout is 2 seconds:.!success rate is 80 percent (4/5), round-trip min/avg/max = 20/28/40 msnow well bring up the ethernet0/0 interface on sj1 that shares a segment with sj2 and sj3:sj1(confi

14、g-if)# int e0/0sj1(config-if)# ip addr sj1(config-if)# no shutdownbring up sj2lets bring up the sj2 instance:$ ./i86bi_linux-ipbase-ms -e 1 -s 1 152*ios on unix - cisco systems confidential, internal use onlyunder no circumstances is this software to be provided to anynon c

15、isco staff or customers. to do so is likely to resultin disciplinary action. please refer to the iou usage policy atwwwin- for more information.*port 0/0 is connected to: 151:0helium 153:0heliumport 1/0 is connected to: 153:1helium.output snipped.lets configure the ethernet0/0 and serial1/0 interfac

16、es:sj2# conf tenter configuration commands, one per line. end with cntl/z.sj2(config)# interface ethernet 0/0sj2(config-if)# ip address sj2(config-if)# no shutdownsj2(config-if)# interface serial 1/0sj2(config-if)# ip address sj2(config-if)# no shutd

17、ownverify we can ping sj1s ethernet0/0 interface:sj2(config-if)# do ping type escape sequence to abort.sending 5, 100-byte icmp echos to , timeout is 2 seconds.!success rate is 80 percent (4/5), round-trip min/avg/max = 4/6/8 msbring up sj3now well bring up the sj3 router:$ .

18、/i86bi_linux-ipbase-ms -e 1 -s 1 153*ios on unix - cisco systems confidential, internal use onlyunder no circumstances is this software to be provided to anynon cisco staff or customers. to do so is likely to resultin disciplinary action. please refer to the iou usage policy atwwwin- for more inform

19、ation.*port 0/0 is connected to: 151:0helium 152:0heliumport 1/0 is connected to: 152:1helium.output snipped.configure ethernet0/0 and serial1/0:sj3# conf tenter configuration commands, one per line. end with cntl/z.sj3(config)# interface ethernet 0/0sj3(config-if)# ip address 255.255.2

20、55.0sj3(config-if)# no shutdownsj3(config-if)# interface serial 1/0sj3(config-if)# ip address sj3(config-if)# no shutdownverify we can ping sj1 and sj2s ethernet0/0 interfaces:sj3(config-if)# do ping type escape sequence to abort.sending 5, 100-byte icmp echos to

21、, timeout is 2 seconds:.!success rate is 80 percent (4/5), round-trip min/avg/max = 1/1/1 mssj3(config-if)# do ping type escape sequence to abort.sending 5, 100-byte icmp echos to , timeout is 2 seconds:.!success rate is 80 percent (4/5), round-trip min/avg/max =

22、1/1/4 msverify we can ping sj2 over the serial1/0 interface:sj3(config-if)# do ping type escape sequence to abort.sending 5, 100-byte icmp echos to , timeout is 2 seconds:!success rate is 100 percent (5/5), round-trip min/avg/max = 12/12/12 msgreat, full connectivity so far! lets

23、 enable ospf on sf and sj1:sf(config-if)# router ospf 42sf(config-router)# network area 0sj1(config-if)# router ospf 42sj1(config-router)# network area 0sj1(config-router)# network area 0make sure the ospf adjacency between sf and sj1 came up:sf

24、(config-router)# do sh ip ospf neighneighbor id pri state dead time address interface 1 full/bdr 00:00:36 ethernet1/0lets look at the routing table on sf:sf(config-router)# do sh ip route | begin gatewaygateway of last resort is to network c /24 is

25、directly connected, ethernet0/0 /24 is subnetted, 2 subnetso 110/20 via , 00:00:50, ethernet1/0c is directly connected, ethernet1/0s* /0 1/0 via inject default route into ospfsince sf has a route to the world, lets inject a default route there

26、into ospf:sf(config-router)# default-information originatemake sure it shows up on sj1:sj1(config-router)# do sh ip route | begin gatewaygateway of last resort is to network o*e2 /0 110/1 via , 00:00:44, ethernet0/1 /8 is variably subnetted, 4 subnets, 2 masksc

27、 /24 is directly connected, ethernet0/1l /32 is directly connected, ethernet0/1c /24 is directly connected, ethernet0/0l /32 is directly connected, ethernet0/0configure default route on sj2 and sj3on sj2 and sj3, lets configure a default route towards sj1:sj2(

28、config-if)# ip route sj3(config-if)# ip route make sure sf can talk to sj2 and sj3:sf(config-router)# do ping type escape sequence to abort.sending 5, 100-byte icmp echos to , timeout is 2 seconds:!success rate is 100 pe

29、rcent (5/5), round-trip min/avg/max = 28/44/60 mssf(config-router)# do ping type escape sequence to abort.sending 5, 100-byte icmp echos to , timeout is 2 seconds:!success rate is 100 percent (5/5), round-trip min/avg/max = 28/52/88 msconfigure nat on sfnow that we have full

30、connectivity, lets configure nat on the sf router so that sj1, sj2, and sj3 can talk to the outside world:sf(config-router)# interface ethernet 0/0sf(config-if)# ip nat outsidesf(config-if)# interface ethernet 1/0sf(config-if)# ip nat insidewell need an acl matching the source addresses to match, of

31、 course:sf(config-if)# ip access-list standard natsf(config-std-nacl)# permit 55sf(config-std-nacl)# permit 55sf(config-std-nacl)# permit 55last, well use “ip nat ” to tell sf how to work its magic:sf(config-std-nacl)# ip nat inside source list n

32、at int e0/0 overloadverify connectivityat this point, all routers should have connectivity to the outside world. lets verify from sj2 and sj3 by pinging a couple of well-known public dns servers:sj2(config)# do ping type escape sequence to abort.sending 5, 100-byte icmp echos to , timeout is 2 seconds:!success rate is 100 percent (5/5), round-trip min/avg/max = 28/55/128 mssj3(config)# do ping type escape sequence to abort.sending 5, 100-byte icmp echos to , timeout is 2 seconds:!success rate is 100 percent (