企业级网络ip地址规划与配置0001

1、企业级网络ip地址规划与配置企业级网络ip地址规划与配置以设计具有三层结构的大型企业级网络设计为例，完成IP地址的分配、NAT地址转换、三层网络拓扑结构等功能，并选择合适的设备实现该网络，用模拟器验证通连性。二、实验拓扑结构图与IP规划so.mTiar.eLid”R3T讥44PC-PTPC9TvL地演PC-PtPC-FTIFCIO屏心空楼4.（模利Peutfli'-OT吊珞工程机陆阳龙SjEh广PHRcU:-<l3err=r-PT七引4CHCPSERVER二1拓扑实现:ROUTER0为本园区网络的出口，并在出口处通过NAT转换来实现与外网的连接，出口网络地址为

2、1,三台路由器构成的主路由区域使用RIP动态路由协议，ROUTER1所连为园区网络服务器群，网段为/24;由于设备限制在此只设置WEB与FTP服务器模拟现实中的服务器群，ROUTER3所连网段为/24Switch。模拟现实中的新交换机，并与switch3做链路负载均衡，switch1与switch1之间使用PVLAN技术连接，做到本交换机上VLAN之间的隔离与整体的透传，Switch3模拟学生机房主交换机，与switch1之间使用两条普通链路,利用端口汇聚技术实现带宽的增加，并在交换机上连接一台DHCP服务器实现IP地址的自动分配，DHCP服务器使用w

3、indows2003server附带的DHCP组建实现，由于设备限制，本次试验采用架设在VM虚拟机中的windows2003第1页共15页server操作系统实现，虚拟机与现实网络通过桥接网络通信，wlan部分采用单AP布局，AP型号为NETGEAR,internet接口地址为：54,LAN地址段为/24三、实验器材：设备名称设备数量设备作用华为R2501路由器3路由、寻径华为s2008交换机4服务器2Web服务器/DHCP服务器无线AP(netgear)1构建无线网络PC机6笔记本（带无线网卡）2四、配置过程:配置命令：Router。：Quid

4、waysysnamerouter。/重新命名交路由器router0ints0/配置串行链路接口第2页共15页router0-Serial0ipaddPPP52/配置接口IP地址router0-Serial0link-protocol/链路层启用PPP协议router0-Serial0quitrouter0ints1router0-Serial1ipadd52router0-Serial1link-protocolppprouter0-Serial1quitrouter0rip/启用RIP协议allr

5、outer0-ripnetwork/发布直连网络router0-ripquit/设定nat地址池permitsource/设定ACL规permitsourcerouter0nataddress-group1pool1router0acl1router0-acl-2rule则router0-acl-2rule第3页共15页router0-acl-2quitrouter0inte0router0-Ethernet0natoutbound1address-grouppooll/增加访问控制列表和端口关联rout

6、er0-Ethernet0iproute-s/设置缺省路由router0-Ethernet0natserverglobalftptcp/设置内部FTP服务器router0-Ethernet0natserverglobalwwwtcp/设置内部WWW服务器router0-Ethernet0quitRouter1:<Quidway>syspassword:Quidwaysysnamerouter1router1ints0router1-Serial0ipadd255.255.255

7、.252router1-Serial0link-protocolppprouter1-Serial0clockdteclk1第4页共15页router1-Serial0intsirouter1-Serial1ipadd052router1-Serial1link-protocolppprouter1-Serial1inte0router1-Ethernet0ipaddrouter1-Ethernet0quitrouter1riprouter1-ripnetworkallrouter1iproute-s0

8、.0.0.0s0Router3:<Quidway>sysQuidwaysysnamerouter3router3ints0router3-Serial0ipadd52router3-Serial0link-protocolppprouter3-Serial0clockdteclk1router3-Serial0ints1router3-Serial1ipadd52第5页共15页router3-Serial1link-protocolppprouter3-Serial1clo

9、ckdteclklrouter3-Serial1inte0router3-Ethernet0ipaddrouter3-Ethernet0quitrouter3riprouter3-ripnetworkallrouter3-riprouter3iproute-ss1Switch0:<Quidway>syspassword:Quidwaysysnameswitch。switch0inte0/1/进入端口视图switch0-Ethernet0/1portlink-typetrunk/设置端口类型为TRUNKsw

10、itch0-Ethernet0/1porttrunkpermitvlanall/允许通过所有VLANswitch0-Ethernet0/1duplexfull第6页共15页/设置工作模式为全双工switch0-Ethernet0/1speed100/设置速率为100Mbpsswitch0inte0/2switch0-Ethernet0/2portlink-typetrunkswitch0-Ethernet0/2porttrunkpermitvlanallswitch0-Ethernet0/2duplexfull/设置工作模式为全双工switch0-Ethernet0/2speed100/设置速

11、率为100Mbpsswitch0-Ethernet0/2quitswitch0link-aggreationinte0/1tointe0/2both/设置汇聚连接switch0Switch1:<Quidway>sysQuidwaysysnameswitch1switch1vlan8/配置VLAN信息switch1-vlan8porteth0/1toeth0/4第7页共15页/加入端口switch1-vlan8vlan24switch1-vlan24porteth0/5toeth0/8switch1-vlan24quitswitch1vlan23/酉己置isovlanswitch1-

12、vlan23isolate-user-vlanenable/启用ISOswitch1-vlan23porteth0/9/加入端口switch1-vlan23isolate-user-vlan23secondary824/配置与二层vlan之间关联信息switch1-vlan23Switch2:<Quidway>sysQuidwaysysnameswitch2switch2vlan4switch1-vlan8porteth0/8switch2-vlan8porteth0/1toeth0/4switch2-vlan8vlan5switch2-vlan24porteth0/5toeth0

13、/8第8页共15页switch2-vlan24quitswitch2vlan23switch2-vlan23isolate-user-vlanenableswitch2-vlan23porteth0/9switch2-vlan23isolate-user-vlan23secondary45switch2-vlan23Switch3:<Quidway>syspassword:Quidwaysysnameswitch3switch3inte0/1switch3-Ethernet0/1portlink-typetrunkswitch3-Ethernet0/1porttrunkpermit

14、vlanallswitch3-Ethernet日1duplexfullswitch3-Ethernet0/1speed100switch3-Ethernet0/1inte0/2switch3-Ethernet0/2portlink-typetrunk第9页共15页switch3-Ethernet0/2porttrunkpermitvlanallswitch3-Ethernet0/2duplexfullswitch3-Ethernet0/2speed100switch3-Ethernet0/2quitswitch3link-aggreationinte0/1toe0/2bothswitch3in

15、te0/3switch3-Ethernet0/3quitswitch3monitere0/3switch3portmirrorinte0/4tointe0/8AP配置信息图:Wan信息：第10页共15页NETGEARSeiupWirrdH«sicSebmgWircltasSeltingxLopBlockSilesBlockServices1Schedukt-friBilMainierLanceRouterStatusAltothadDw*iE*flaLkupStillingSeipasswordRouterUpgiadeAdu*ict|V4k«lasSaninas.：Pof

16、IForwarding.PonTrlgqodngWANSetupLAMIPSetupCyramicDN£rovftrmajiagitr6Roflg®MiDx,wNEKTWifslonRouftrLan信息:»METGEARraut£-rmcinaer：RaflgeMa-MNEXTWiraileaiRauiiSfnC<nlLjWUIIIl|KVVirelMfSettingsConitnlFlltotknsLogsBlockSheaBlockSarvicoKSd)tdul«E41ndiIMainienancenauteiSi1Hll»

17、;AltaichedDevicMHockopSettingsSetPasswordRotileiUpcjradeAdvanncedWi*«l»wSvtlingwPdflIarwBfdihgFPq11TfiggmringWANSQiupLANIPSetupUynnmicDNSStaticRoute测试和验证:LANIPSetupILAHTCPrsellfl)iPMdnene,许二一一hP：iiniel叱k加丁，展5，2S5.2hipOteclon(RohisHIKvetoonDisabled二Pusehouimjsducfserwi注ID呵IP也M山领|.I，；-.REndi

18、ngIPAddress_|_.p34一IPfilldrbsisPeiiiceNLinieL1A.Mi南左w配d加DoutfApplyGencelAtHi百其RoscrvnriMi第11页共15页R0配置信息：interfaceEihernetflipaddress10.0.30,1255.255,255,0tinterfaceSerial0clockDTECLK1link-protocolpppipaddress172,16,32.252interfaceSeriallclockDTECLK1link-protocolppppppauthenticdtion-mode

19、chappppchapuserbipaddress17246.32,552interfaceSerial2flow-controlnoneasyncmodeprotocollink-protocolpppvquitripnetworkallHore(PressCTRL_Ctobreak)R1配置信息：interfaceEthernetOipaddress255.255.255,0natoutbound1address-grouppoolltinterfaceSerialOlink-protocolpppHDDpaplocal-userflybirdp

20、asswordsimplefhipaddress52interfaceSerialllink-protocol口ddipaddress052finterfaceSerial2flow-controlnoneasyncmodeprotocol1ink-protocolpppquitripnetworkallquit第12页共15页R3配置信息：IinterfaceEthernetsipaddress192.168,19.1255,255,255.0!interfaceSeridlBlink-proto

21、colpppipaddress255.255.255,252!interfaceSeriallclockDTECLK1link-proiocolpppipaddress255.255.255252interfaceSerial2flow-controlnone日syncmodeprotocollink-protocolppp!quitripnetworkallR0路由表：routeOJdisiproutRoutingTables:lestinaiion/NaskProto0.0.30/0StaticiklW2RIPWJ21A5072SDirectl©21tS.91/32Direct/8Direct127.0,0.1/32Direct/30Direct/32Direct172.16,32.2/32Direct/30Direct/32Direct/32Direct172,16,32.8/30RIP192.I68.10W21RIP000n0000000000r6u00DIJIP01000000000011Nexthop10.2,145,110.2.145,16811