hcnp-rshcdpienp认证资深网络工程师路由交换方向提升企业级性能实验指导书

#^_^# 归原作者有本资料只供试归原作者所有本资料只供试读资源请攻城狮 攻城狮(技术+生活)群2258097CCNA|CCNP免费答疑题库1/归原作者所有本资料只供试 /ॾѪ䇔䇱㌫ࡇHCDP-傼ᨀॷԱъ㓗㖁㔌傼ॾѪᢰᵟᴹ䲀࣍࣍ޥےjԡН۪ ஔސѕږͫѸߓ߄۱߄ͫԢܔґߓՉ߄۱аיԢО߄а९ڷߓҍ߄۱ߓ࣍

Ѿы澝࣍୦澝৬ԭͫ߶࣍ӆ֌۪߶֌߄۱Ճङҿѕݕ࣍ކߎ.)*6/+4ܶԞѢযছ㓬 ઍચߐ܉ЋЏԗङؘ۫ۅ҈ݕؚۯ࣍ङ࣍ͫ࣍ਚԃйОكЉգߐ܉/):ث'۪

ऀऽજͺ࣍੧ৠङ۪

ͺ۪ߎङৠݻஞ࣍ஔͺԢО૨.ઍرચثޢشӬङдͫ էИشѣङৠ܉ߐͫٷӀוԣԉગઋИشѣЏৠљՃ҅ԢО૨сܶગޑؘוગઋङਈԃ.4؏ਈԃѣնवИ۞ͫ٤ઍङ

ݟৠߎ

ߎङધ࣍ޗিऀ澝к澝؍Ҷչ؂ҥத۪ৠФИͫࢠૡ՟य़ځऀثৠङ҅࣍࣍.46 .)*6+TZKXVXOYK

. сߑܶչ૨:6 ԢО૨. رثֺ ͫ ֺ ପ܉ͫٷӀࣞॹИѣৠљՃ҅Осܶગؘઋङਈ ԃ澞ଋ .46 TZKXXK .6 TKXXK ͫѣਈԃ؏ޅ؏ৠङڏݟͫرЏ۱ङધޗিऀ 澝к ؍Ҷչ؂ҥҶ֪தৠФͫٷЌਈ՟ځৠङ҅࣍ͫ࣍৲҈࣍؍ҶۅՕۅչՕۅ澞.+TZKXXYKઍચ

ѹй

זߒৠङڏߣ澝.+TZKXVXOYKߒזକݎ࣍ொङ

ځ࣍ݕސӐ܉҅

ݕ࣍ஔ澞ପଋ࣍ஞݻङৠߒזͺऀځҶܶݵչۅҶ؍ڠ澝Ԇ. љՃ҅ԢО૨ .к澝ޗ࣍ङધ࣍۱ѣЏИرͫڏݟङৠޅ؏؏ࣞॹத۪ӱৠФИͫٷЌਈࢠૡ՟य़ځऀثৠङ҅ՕԢОઍચԣԉڐ۸ۓ੧ЏФॶͫڐկݷՊФ࣍ͫ㇡ॹ):Ѝउङ归原作者所有本资料只供试 攻城狮(技术+生活)群2258097CCNA|CCNP免费答疑题库Яޯ૨

І

љљিऀѐؘߎ࣍࣍வէӕו.)*6۪֘ߑܶՖͫஅࢮ࣍Ֆ澞ؘ࣍࣍࣍࣍ଠ 8<8)8Y<8)8Y<8)8Y<8)8Y<8)99) <8)99) <8)99:6+/<8)99:6+/<8)<8)<8)HCDPIENPڢऀ▁࣍䍡࣍ࢤ㓬 9-࣍䍡࣍،ҵԙ־ՂҾєޯ۪Ԅ -࣍䍡࣍/69+) ࣍䍡࣍ݙз -࣍䍡࣍' -࣍䍡࣍Մ࣍䏣з

Ѕ

HCHCHUAWEIㅜ1 HCDPIENPㅜаㄐ䱢⚛້⢩ᙗ࣏࣍䍡࣍ࢤ㓬 ࣍ځݗऀ ֣ HCDPIENPㅜаㄐ䱢⚛້⢩ᙗ࣏ ޑֿͧ:X[YZͨ澝יୂֿͧ;TZ[Yͨչ߆ֿ֘ͧ3ͨ澞ؘ࣍ߛܶރثङݏЎͫ௲դԥஅݸӠͫऀґҸ՛ӄୂৠ؍Ҷ ޯ۪କ࣍Љ/6ІЗ૨Entersystemview,returnuserviewwithCtrl+Z.[Huawei]sysnameR1[R1]interfaceGigabitEthernet[R1GigabitEthernet0/0/1]ipaddress24[R1GigabitEthernet0/0/1]interfaceloopback0[R1LoopBack0]ipaddress24Entersystemview,returnuserviewwithCtrl+Z.[Huawei]sysnameR2[R2]interface[R2GigabitEthernet0/0/1]ipaddress24[R2GigabitEthernet0/0/1]interfaceloopback0[R2LoopBack0]ipaddress24Entersystemview,returnuserviewwithCtrl+Z.[Huawei]sysnameR3[R3]interfaceGigabitEthernet[R3GigabitEthernet0/0/1]ipaddress24[R3GigabitEthernet0/0/1]interfaceloopback0[R3LoopBack0]ipaddress24࣍࣍࣍/6֪֭澞ؘ࣍И۩ћ֨அࢮ࣍І࣍࣍<2'4۪֭ͫҁО/TYOJKԚֿङҼ HCDPIENPㅜаㄐ䱢⚛້⢩ᙗ࣏Entersystemview,returnuserviewwithCtrl+Z.[USG2100]sysnameFW[FW]vlan[FWvlan12]quit[FW]interfacevlanif12[FWVlanif12]ipaddress5424[FWVlanif12]quit[FWEthernet1/0/0]portaccessvlan[FWEthernet1/0/0]interfaceEthernet0/0/0[FWEthernet0/0/0]ipaddress5424[FWEthernet0/0/0]interfaceethernet2/0/0[FWEthernet2/0/0]ipaddress5424[FWEthernet2/0/0]quit[FWVlanif1]undoipсܶߑЇ۪࣍࣍ܶ࣍࣍࣍Ў<2'4[Quidway]sysnameS1[S1]vlanbatch11to13[S1]interfaceGigabitEthernet[S1GigabitEthernet0/0/1]portlinktypeaccess[S1GigabitEthernet0/0/1]portdefaultvlan[S1GigabitEthernet0/0/2]portlinktypeaccess[S1GigabitEthernet0/0/3]portlinktypeaccess[S1GigabitEthernet0/0/]portdefaultvlan[S1GigabitEthernet0/0/21]portlinktypeaccess[S1GigabitEthernet0/0/22]portlinktypeaccess[S1GigabitEthernet0/0/23]portlinktypeaccess߄

ֿͫӣӰ

ȔIGȔ澝[ZXZȔ澝ȕJS`Ȕؘ࣍И۩ћ҅ऀӱȔZX[YZȔ澝[ZȔչJȔЗֿͫӣӰ澞HCDPIENPㅜаㄐ䱢⚛້⢩ᙗ࣏ [FW]firewallzone[FWzonedmz]addinterfaceEthernet2/0/0[FWzonedmz]firewallzonetrust[FWzonetrust]addinterfaceVlanif12[FWzonetrust]firewallzoneuntrust[FWzoneuntrust]addinterfaceEthernetर௳ઍ ࣍ޯիՕљ࣍ପ࣍[FW]displayfirewallpacketfilterdefaultall10:28:182011/12/24Firewalldefaultpacketfilteractionis:packetfilterinpublic:local>trustinbound:default:permit;||IPv6acl:local>untrust:

permit;||IPv6acl:inbound:default:deny;||IPv6acl:local>dmz:

permit;||IPv6acl:inbound:default:deny;||IPv6acl:trust>untrust:

permit;||IPv6acl:inbound:default:deny;||IPv6acl:trust>dmz:

deny;||IPv6acl:inbound:default:deny;||IPv6acl:dmz>untrust:

deny;||IPv6acl:inbound:default:deny;||IPv6acl:outbound:defaultdeny;||IPv6acl:packetfilterbetweenऀљЇޯॐङӄरзͫ࣍मӑЈͫ2UIGRҶԚֿչ:X[YZސ߄۱էऀҪકކܕପଋͫ2UIGRҶԚֿչ;TZX[YZҶԚֿӟސէͫ2UIGRҶԚֿչ*3@ҶԚֿӟސէҪકކܕପଋͫҿѕԚֿ࣍ސ߄۱էऀЉҪકܕކପଋ澞࣍ચԚֿФ࣍ङକପ;XYZ:XYԚ -a:56databytes,pressCTRLCto HCDPIENPㅜаㄐ䱢⚛້⢩ᙗ࣏RequesttimeoutRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeout5packet(s)0packet(s)100.00%packet;XYZԚ3@<R1>-a:56databytes,pressCTRLCtobreakRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeout5packet(s)0packet(s)100.00%packet:[Y<R2>-a:56databytes,pressCTRLCtobreakRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeout 5packet(s)0packet(s)100.00%packet:XZֿ*Ԛֿ<R2>-a:56databytes,pressCTRLCtoHCDPIENPㅜаㄐ䱢⚛້⢩ᙗ࣏ RequesttimeoutRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeout5packet(s)0packet(s)100.00%packet3ԚXYԚ<R3>-a:56databytes,pressCTRLCtoRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeout5packet(s)0packet(s)100.00%packet*3@Ԛֿӱ:X[YZԚֿ<R3>-a10.0:56databytes,pressCTRLCtobreakRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeout10.0 5packet(s)0packet(s)100.00%packet֨,=ગוІ࣍ડӱ8ͫ8ͫ8ङକପ[FW] HCDPIENPㅜаㄐ䱢⚛້⢩ᙗ࣏PING:56databytes,pressCTRLCtobreakRequesttimeoutReplyfrom:bytes56Sequence2ttl255time1Replyfrom:bytes56Sequence3ttl255time1Replyfrom:bytes56Sequence4ttl255time1Replyfrom:bytes56Sequence5ttl255time1ping5packet(s)4packet(s)20.00%packetroundtrip 1/1/1[FW]pingPING:56databytes,pressCTRLCtobreakRequesttimeoutReplyfrom:bytes56Sequence2ttl255time1Replyfrom:bytes56Sequence3ttl255time1Replyfrom:bytes56Sequence4tt255time1Replyfrom:bytes56Sequence5ttl255time1ping5packet(s)4packet(s)20.00%packetroundtrip 1/1/1[FW]pingPING:56databytes,pressCTRLCtobreakRequesttimeoutReplyfrom:bytes56Sequence2ttl255time1Replyfrom:bytes56Sequence3ttl255time1Replyfrom:bytes56Sequence4ttl255time1Replyfrom10..30.1:bytes56Sequence5ttl255timeping5packet(s)4packet(s)20.00%packetroudtrip 1/1/1 澝 չ8ͫ֨࣍ङ࣍मԕଋࢡঌऋОҪક߄۱ؘͫІЗ2UUVHGIQHCDPIENPㅜаㄐ䱢⚛້⢩ᙗ࣏ лପ[R1]iproutestatic0[R2]iproutestatic0[R3]iproutestatic0[FW]iproutestatic24[FW]iproutestatic24[FW]iproutestatic24[FW]firewallpacketfilterdefaultpermitallեͫ࣍ડ՟૨֘2UHI[R1]a:56databytes,pressCTRLCtoReplyfrom:bytes56Sequence1ttl254time3Replyfrom:bytes56Sequence2ttl254time3Replyfrom:bytes56Sequence3ttl254time4Replyfrom:bytes56Sequence4ttl254time2Replyfrom:bytes56Sequence5ttl254time35packet(s)5packet(s)0.00%packetroundtrip 2/3/4[R1]a10.0:56databytes,pressCTRLCtoReplyfrom:bytes56Sequence1ttl254time4Replyfrom:bytes56Sequence2ttl254time4Replyfrom:bytes56Sequence3ttl254time3Replyfrom:bytes56Sequence4ttl254time4Replyfrom:bytes56Sequence5ttl254time4 5packet(s)5packet(s)000%packetroundtrip 3/3/4 HCDPIENPㅜаㄐ䱢⚛້⢩ᙗ࣏ ગԚֿФमԕଋঌͫю:YֿҿԚֿͫЉકҿѕԚֿФ࣍ङઘ࣍[FW]firewallpacketfilter eny[FW]firewallpacketfilterdefaultpermitinterzonetrustuntrustdirection[FW]firewallpacketfilterdefaultpermitinterzonetrustdmzdirectionoutbound[FW]firewallsessionlinkstatecheck࣍࣍ ࣍ङକପ;XYZ:XYԚ[R1]a:56databytes,pressCTRLCtobreakRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeout5packet(s)0packet(s)100.00%packet;XYZԚ3@[R1]-a:56databytes,pressCTRLCtobreakRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeout 5packet(s)0packet(s)HCDPIENPㅜаㄐ䱢⚛້⢩ᙗ࣏ 100.00%packet:[Y[R2]-a:56databytes,pressCTRLCtobreakReplyfrom:bytes56Sequence1ttl254timeReplyfrom:bytes56Sequence2ttl254timeReplyfrom:bytes56Sequence3ttl254timeReplyfrom:bytes56Sequence4ttl254timeReplyfrom:bytes56Sequence5ttl254time5packet(s)5packet(s)0.00%packetroundtrip 3/3/3:XZֿ*Ԛֿ[R2]-a:56databytes,pressCTRLCtoReplyfrom:bytes56Sequence1ttl254time5Replyfrom:bytes56Sequence2ttl254time3Replyfrom:bytes56Sequence3ttl254time3Replyfrom:bytes56Sequence4ttl254time4Replyfrom:bytes56Sequence5ttl254time35packet(s)5packet(s)0.00%packetroundtrip 3/3/53ԚXYԚ[R3]a10.03.31:56databytes,pressCTRLCtobreakRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeout HCDPIENPㅜаㄐ䱢⚛້⢩ᙗ࣏5packet(s)0packet(s)100.00%packet*3@Ԛֿӱ:X[YZԚֿ[R3]a:56databytes,pressCTRLCtobreakRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeout5packet(s)0packet(s)100.00%packetଋঌͫક;ZZԚઘ࣍@߆ԇ֘Y*3@Ԛֿ Ֆ6 ͫ [:߆ԇYգޞОд࣍ડৠͫ࣍࣍ݹ/)366Mડਈ[FW]policyinterzonedmzuntrust[FWpolicyinterzonedmzuntrustinbound]policy[FWpolicyinterzonedmzuntrustinbound1]policyserviceserviceseticmp[FWpolicyinterzonedmzuntrustinbound1]policydestination0[FWpolicyinterzonedmzuntrustinbound1]actionpermit[FWpolicyinterzonedmzuntrustinbound1]quit[FWpolicyinterzonedmzuntrustinbound]policy2[FWpolicyinterzonedmzuntrustinbound2]policyserviceserviceset [FWpolicyinterzonedmzuntrustinbound2]policydestination0[FWpolicyinterzonedmzuntrustinbound2]actionpermit[FWpolicyinterzonedmzuntrustinbound2]quit[FWpolicyinterzonedmzuntrustinbound]policy3[FWpolicyinteronedmzuntrustinbound3]actionд: Їկ:KRTKZԅਈ[R3]userinterfacevty0[R3uivty04]authenticationmode࣍ડৠକପ HCDPIENPㅜаㄐ䱢⚛້⢩ᙗ࣏ :56databytes,pressCTRLCtoReplyfrom:bytes56Sequence1ttl254time3Replyfrom:bytes56Sequence2ttl254time2Replyfrom:bytes56Sequence3ttl254time2Replyfrom:bytes56Sequence4ttl254time4Replyfrom:bytes56Sequence5ttl254time5packet(s)5packet(s)0.00%packetroundtrip 2/2/4<R1>:56databytes,pressCTRLCtobreakRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeout 5packet(s)0packet(s)100.00%packet netPressCTRL]toquit netmodeTrying...ConnectedtoConfigurationconsoleexit,pleaseretrytologTheconnectionwasclosedbytheremote net100PressCTRL]toquit netmodeTrying... HCDPIENPㅜаㄐ䱢⚛້⢩ᙗ࣏ ࣍௲դԥюث/6֪֭࣍੧જЎͫਈלљڮ࣍ङବؘچդԥͫҿՕޯ澞௲դԥۯङ֪֭/6۪࣍ࣔى֪ݼ߄ବڽљગוԈ֪ہ࣍੧࣍Ԇ۪ӭஔކܕङО/6ўݶוગڢԆҵ௲դԥͫФե֪֭ङ/6ۯથऀرՕͫҶङऩङ澞؍ৠܔͫђ৲ଇӱґڒҿѐљГر

Շߛङ࣍࣍

֨8І࣍ԆՍͫ࣍ݸܧӠ࣍[R1LoopBack1]ipaddress[FW]iproutestatic24ԥИ[FW]firewalldefendportscan

ݔବङ昹 VVY澞ୌऀङ ङ֪֭ङ/6ކܕИঀՍङՊԗବͫঀՍ߄۱ङ֪֭ऩङݔ۾[FW]firewalldefendportscanmaxrate࣍࣍௲դԥ࣍ޞޞ࣍О࣍ر࣍եੴӭஔ[FW]firewalldefendportscanblacklisttimeout ֛ל8֛࣍࣍କପۅ[R1]pingaPING:56databytes,pressCTRLCtoReplyfrom:bytes56Sequence1ttl254time4Replyfrom:bytes56Sequence2ttl254time3Replyfrom:bytes56Sequence3ttl254time3HCDPIENPㅜаㄐ䱢⚛້⢩ᙗ࣏ Replyfrom:bytes56Sequence4ttl254time3Replyfrom:bytes56Sequence5ttl254time3ping5packet(s)5packet(s)0.00%packetroundtrip 3/3/4

澞[FW]firewallblacklistenable[FW]firewallblacklistitem࣍ડକପۅ[R1]pingaPING:56databytes,pressCTRLCtobreakRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeoutping5packet(s)0packet(s)100.00%packet ͫ'96,

ङ࣍ԅ澞ପଋ࣍࣍'96,ԅਈͫՕؘӄହҲӄ֨ۯઘ࣍י=KH߆ԇޞ֘Ј࣍ԮகݏўҸ,:澝יݹڐङ=KHॻЇՕਈ֨؂ԮகङPG\Gݏў,:6ઑО۪࣍࣍Ўԣઑͫ JKLZVԯՕؘ,:6ކܕङ࣍ٯ࣍Շ澞:,࣍࣍߄࣍ү۪ЎͫՕљପଋਘ۪ЎङІҫ'96,ߛ࣍੧ԙ࣍ӫڏ')2 HCDPIENPㅜаㄐ䱢⚛້⢩ᙗ࣏

ߚ[FW]acl[FWacladv3001]rulepermitudpdestinationporteqtftp[FWacladv3001]quitJKLOTKؘͫ:,:6ކܕङ࣍ٯ࣍Շ[FW]firewallinterzonetrustdmz[FWinterzonetrustdmz]detectftp[FWinterzonetrustdmz]detectuserdefined3001outbound[FWinterzonetrustdmz]quitֿ֨࣍ځऀJKZKIZPG\GRIOͫஊԮகPݏўЈ[FWinterzonetrustuntrust]detectjavablocking[FWinterzonetrustuntrust]quitऀй'96,ԅਈӐ۪࣍ொऀޞͫՕљପଋײЈߛڔސ࣍੧࣍ொऀ۪ѹ15:42:112011/12/25interzonetrustdetectjavablockingdetectftpdetectuserdefined3001# 㓢 ֨ײઋ;Օљ࣍HCDPIENPㅜаㄐ䱢⚛້⢩ᙗ࣏ [R1]displaycurrent-sysnameR1interfaceipaddressinterfaceipaddressinterfaceipaddressiproutestatic54[R2]displaycurrent-sysnameR2interfaceipaddress255.255255.0interfaceipaddressiproutestatic54[R3]displaycurrent-sysnameR3interfaceipaddress HCDPIENPㅜаㄐ䱢⚛້⢩ᙗ࣏interfaceipaddressiproutestatic54[FW]displaycurrent-#sysnameFWfirewallpacketfilterdefaultpermitinterzonetrustuntrustdirectionoutboundfirewallpacketfilterdefaultpermitinterzonetrustdmzdirectionoutboundvlanbatch112firewalldefendportscanenablefirewalldefendportscanmaxrate5000firewalldefendportscanblacklisttimeout30firewallstatisticsystemenableaclnumberrule5permitudpdestinationporteqtftpinterfaceipaddress54interfaceipaddress54portlinktypeaccessportaccessvlan12#interfaceipaddress54firewalzonelocalsepriority100#firewallzoneHCDPIENPㅜаㄐ䱢⚛້⢩ᙗ࣏ setpriorityaddinterfaceEthernet1/0/0addinterfaceEthernet1/0/1addinterfaceEthernet1/0/2addinterfaceEthernet1/0/3addinterfaceEthernet1/0/4addinterfaceEthernet1/0/5addinterfaceEthernet1/0/6addinterfaceEthernet1/0/7addinterfaceVlanif1addinterfaceVlanif12firewallzoneuntrustsetpriority5firewallzonedmzsetpriority50firewallinterzonetrustuntrustdetectjavablocking#firewallinterzonetrustdmzdetectftpdetectuserdefined3001outboundiproutestaticiproutestaticiproutestaticiproutestaticfirewallblacklistenablefirewallblacklistitempolicyinterzonedmzuntrustinboundpolicy1actionpolicyserviceserviceseticmppolicydestination0policy2 HCDPIENPㅜаㄐ䱢⚛້⢩ᙗ࣏policyserviceserviceset policydestination0policy3actiondeny#[S1]displaycurrent-#sysnameS1#vlanbatch11to13interfaceGigabitEthernet0/0/1portlinktypeaccessportdefaultvlan11interfaceGigabitEthernet0/0/2portlinktypeaccessportdefaultvlan12interfaceGigabitEthernet0/0/3portlinktypeaccessportdefaultvlan13interfaceGigabitEthernet0/0/21portlinktypeaccessportdefaultvlan11interfaceGigabitEthernet0/0/22portlinktypeaccessportdefaultvlan12interfaceGigabitEthernet0/0/23portlinktypeaccessportdefaultvlan13HCDPIENPㅜаㄐ䱢⚛້⢩ᙗ࣏ ;9࣍䍡࣍69KI64࣍֨ݗ;9-அࢮ࣍І࣍࣍/69KI࣍֨ݗ;9-அࢮ࣍І࣍࣍-8+U\KX/69KI࣍֨ݗ૨֘І࣍࣍/69KI࣍֨ݗ૨֘І࣍࣍-8+U\KX/69KI֣ ޑ҂҂Ҹ

մ澞ֿӣୂৠչӣݵԄҸІЗऀୂӣӄ:[YZԚֿङ

ٷ࣍࣍ۈऀୂୂৠФ࣍ͫۈऀୂӣݵԄҸФ࣍Ѯ࣍ङܶރ࣍࣍Ԇإ版权归原作者所有本资料只供试读更多资源请访问攻城狮论坛 HCDPIENPㅜаㄐ䱢⚛້⢩ᙗ࣏ ޯ۪କ࣍Љ/699ؘؘͧङ࣍࣍ͫٷկ؉澞

ࢮ֘ͫͨޗৠऀ߄۱૨ऀ֘࣍࣍/6֪֭չݑ澞֮࣍ОѹEntersystemview,returnuserviewwithCtrl+Z.[Huawei]sysnameR1[R1]interfaceGigabitEthernet[R1GigabitEthernet0/0/1]ipaddress24[R1GigabitEthernet0/0/1]interfaceSerial1/0/0[R1Serial1/0/0]ipaddress24[R1Serial1/0/0]interfaceloopback0[R1LoopBack0]ipaddress24Entersystemview,returnuserviewwithCtrl+Z.[Huawei]sysnameR2[R2]interface[R2GigabitEthernet0/0/2]ipaddress24[R2GigabitEthernet0/0/2]interfaceSerial1/0/0[R2Serial1/0/0]ipaddress100.12.224[R2Serial1/0/0]interfaceSerial2/0/0[R2Serial2/0/0]ipaddress24[R2Serial2/0/0]interfaceloopback0[R2LoopBack0]ipaddress24Entersystemview,returnuserviewwithCtrl+Z.[Huawei]sysnameR3[R3]interface[R3Serial2/0/0]ipaddress24[R3Serial2/0/0]interfaceloopback0[R3LoopBack0]ipaddress24࣍࣍அࢮ࣍,=չ,=ङݎՍ֪֭HCDPIENPㅜаㄐ䱢⚛້⢩ᙗ࣏ Entersystemview,returnuserviewwithCtrl+Z.[USG2100]sysnameFW1[FW1Ethernet0/0/0]ipaddress24[FW1Ethernet0/0/0]interfaceEthernet2/0/0[FW1Ethernet2/0/0]ipaddress24[FW1Ethernet2/0/0]interfacevlanif1[FW1Vlanif1]unpEntersystemview,returnuserviewwithCtrl+Z.[USG2100]sysnameFW2[FW2Ethernet0/0/0]ipaddress24[FW2Ethernet0/0/0]interfaceEthernet2/0/0[FW2Ethernet2/0/0]ipaddress24[FW2Ethernet2/0/0]interfacevlanif1[FW2Vlanif1]unp࣍࣍ࢮ࣍,=չ,=؍ ֿ ࣍ ؍ֿ澞[FW1zoneuntrust]addinterfaceEthernet2/0/0[FW1zoneuntrust]undoaddinterfaceEthernet0/0/0[FW1zoneuntrust]quit[FW1zonetrust]addinterfaceEthernet[FW2zoneuntrust]addinterfaceEthernet2/0/0[FW2zoneuntrust]undoaddinterfaceEthernet0/0/0[FW2zoneuntrust]quit[FW2zonetrust]addinterfaceEthernet କ࣍ԙ־࣍֨அ࣍࣍࣍ђ:[YZ ֿՇ ;T[YZԚֿܶރݹͫ;T[YZ 2IGRԚֿܶރԕੴͫѕސܶރ࣍[FW1]firewallpacketfilterdefaultpermitinterzonetrustuntrust[FW1]firewallpacketfilterdefaultpermitinterzonelocal HCDPIENPㅜаㄐ䱢⚛້⢩ᙗ࣏[FW2]firewallpacketfilterdefaultpermitinterzonetrustuntrust[FW2]firewallpacketfilterdefaultpermitinterzonelocal କ࣍ષͧ࣍ؗࢻযছ 澝 澝 澝,= չ,=І࣍࣍ԥֿ596,ؘ ࣍Ф࣍Օљକପ澞[R1]ospf[R1ospf1]area[R1ospf1area]network[R1ospf1area]network[R2]ospf[R2ospf1]area[R2ospf1area]network[R2ospf1area]network[R2ospf1area]network[R3]ospf[R3ospf1]area[R3ospf1area]network[FW1]ospf[FW1ospf1]area[FW1ospf1area]network[FW2]ospf[FW2ospf1]area[FW2ospf1area0.0.00]network֨,=չ,=І࣍ડ࣍ङକପۅ[FW1]ping10PING10.0.202:56databytes,pressCTRLCtoReplyfrom:bytes56Sequence1ttl253time40Replyfrom:bytes56Sequence2ttl253time30Replyfrom:bytes56Sequence3ttl253time30Replyfrom:bytes56Sequence4ttl253time40Replyfrom:bytes56Sequence5ttl253time30ping5packet(s)5packet(s)HCDPIENPㅜаㄐ䱢⚛້⢩ᙗ࣏ 0.00%packetroundtripmin/avg/max 30/34/40ms[FW1]:56databytes,pressCTRLCtoReplyfrom:bytes56Sequence1ttl253time70Replyfrom:bytes56Sequence2ttl253time60Replyfrom:bytes56Sequence3ttl253time70Replyfrom:bytes56Sequence4ttl253time70Replyfrom:bytes56Sequence5ttl253time605packet(s)5packet(s)0.00%packetroundtrip [FW2]:56databytes,pressCTRLCtoReplyfrom:bytes56Sequence1ttl253time40Replyfrom:bytes56Sequence2tt253time30Replyfrom:bytes56Sequence3ttl253time40Replyfrom:bytes56Sequence4ttl253time30Replyfrom:bytes56Sequence5ttl253time305packet(s)5packet(s)0.00%packetroundtripmin/avg/max 30/34/40ms[FW2]:56databytespressCTRLCtoReplyfrom:bytes56Sequence1ttl254time30Replyfrom:bytes56Sequence2ttl254time30Replyfrom:bytes56Sequence3ttl254time30Replyfrom:bytes56Sequence4ttl254time30Replyfrom10..23.3:bytes56Sequence5ttl254time3010.0.23 5packet(s5packet(s)0.00%packetroundtrip 30/30/30 澝࣍Ф࣍Օљକପ HCDPIENPㅜаㄐ䱢⚛້⢩ᙗ࣏ କ࣍Ӣ࣍যছЉ㔀࣍࣍ԙ࣍ੴґܶރܔङ')2

[FW1]acl[FW1acladv3000]rulepermitipsource55[FW2]acl[FW2acladv3000]rulepermitipsource55࣍࣍ӣୂৠӱऀୂӄङல૨[FW1]iproutestatic24[FW2]iproutestatic24֨அࢮ࣍,=չ,=І࣍࣍/69KIҶݕઑ࣍࣍ޞ࣍࣍டଳ࣍

ܶރ࣍੧ґܔ96҅ङԆ࣍࣍О*+9澝ޅ࣍ચ࣍9ऀ҅࣍.'[FW1ipsecproposaltran1]encapsulationmodetunnel[FW1ipsecproposaltran1]transformesp[FW1ipsecproposaltran1]espauthenticationalgorithmsha1[FW1ipsecproposaltran1]espencryptionalgorithmdes[FW2ipsecproposaltran1]encapsulationmodetunnel[FW2ipsecproposaltran1]transformesp[FW2ipsecproposaltran1]espauthenticationalgorithmsha1[FW2ipsecproposaltran1]espencryptionalgorithmdes֨ࢮ,=չ,=1؏؏

҅[FW1]ikeproposal[FW1ikeproposal10]authenticationalgorithmsha1[FW1ikeproposal10]encryptionalgorithmdes[FW2]ikeproposal[FW2ikeproposal10]authenticationalgorithmHCDPIENPㅜаㄐ䱢⚛້⢩ᙗ࣏ [FW2ikeproposal10]encryptionalgorithm࣍࣍/1+ঈѽͫ/1+ঈѽ௳ઍ҅ऀ/1+ҶݕઑЎঀ/6֪֭չ࣍һцऀ[FW1]ikepeer[FW1ikepeerfw12]ikeproposal[FW1ikepeerfw12]remoteaddress[FW1ikepeerfw12]presharedkeyabcde[FW2]ikepeer[FW2ikepeerfw21]ikeproposal[FW2ikepeerfw21]remoteaddress[FW2ikepeerfw21]presharedkeyabcde֨அࢮ࣍,=չ,=І࣍࣍Ҷঌऋ؍ ֲ؍[FW1]ipsecpolicymap110[FW1ipsecpolicyisakmpmap110]securityacl3000[FW1ipsecpolicyisakmpmap110]proposaltran1[FW1ipsecpolicyisakmpmap110]ikepeerfw12[FW2]ipsecpolicymap110[FW2ipsecpolicyisakmpmap110]securityacl3000[FW2ipsecpolicyisakmpmap110]proposaltran1[FW2ipsecpolicyisakmpmap110]ikepeerfw21֨அࢮ࣍,=չ,=ݎՍЇҶঌऋ[FW1]interface[FW2]interface࣍ડӣୂৠӄӱऀୂӄङକପͫ࣍եर/69KIॹӑ a10.0200.1:56databytes,pressCTRLCtoReplyfrom:bytes56Sequence1ttl255time50Replyfrom:bytes56Sequence2ttl255time50Replyfrom:bytes56Sequence3ttl255time60Replyfrom:bytes56Sequence4ttl255time50 HCDPIENPㅜаㄐ䱢⚛້⢩ᙗ࣏Replyfrom:bytes56Sequence5ttl255time505packet(s)5packet(s)0.00%packetroundtripmin/avg/max 50/52/60ms[FW1]displayikesacurrentikesanumber:connv2:21v2:1flagRDREADY STSTAYALIVERLREPLACED FDFADINGTOTIMEOUTTDDELETINGNEGNEGOTIATINGDDPDpathMTU:1500IPsecpolicyname:"map1"sequencenumber:10mode:isakmp:connectionid:rulenumber:5encapsulationmode:tunnelholdingtime:0d0h1mtunnellocal: tunnelremote: sourc:550655350flowdestination:55065535[inboundESPspi:103447906:publicsaid:0cpuid:0x0000proposal:ESPENCRYPTDESESPAUTHSHA1saremainingkeyduration(bytes/sec):1887436464/3524maxreceivedsequencenumber:4udpencapsulationusedfornattraversal:HCDPIENPㅜаㄐ䱢⚛້⢩ᙗ࣏ [outboundESPspi:92831779vpn:publicsaid:1cpuid:0x0000proposal:ESPENCRYPTDESESPAUTHSHA1saremainingkeyduration(bytes/sec):1887436464/3524maxsentsequencenumber:5udpencapsulationusedfornattraversal:କݎङӄչକݎङӄՕљପ࣍ୂл କӢݖԃҷЉ㔀Ў/69KI <࣍࣍ӣݵԄҸӄઘ࣍ۈऀୂӄङ')2[R3]acl[FW2]acl[FW2acladv3001]rulepermitipsource55࣍࣍ӣݵԄҸӱۈऀୂӄङலہ૨ऀ[R3]iproutestatic10.0.200024[FW2]iproutestatic100.3.024֨8І࣍࣍/69KI؍Ҷݕઑ࣍࣍ޞͫد࣍࣍ڔ҅ऀடଳ࣍ڔͫ҅ऀ+96ԣઑܶރث࣍੧ґܔङԆإ࣍࣍О*+9澝ۅޅ؏࣍ચ࣍9ऀ҅࣍.'澞[R3ipsecproposaltran1]encapsulationmodetunnel[R3ipsecproposaltran1]transformesp[R3ipsecproposaltran1]espauthenticationalgorithmsha1[R3ipsecproposaltran1]espencryptionalgorithmdes֨,=չ8І࣍࣍/1+؍Ҷݕઑ HCDPIENPㅜаㄐ䱢⚛້⢩ᙗ࣏؏ ҅؏[R3]ikeproposal[R3ikeproposal10]authenticationalgorithmsha1[R3ikeproposal10]encryptionalgorithmdes࣍࣍/1+VKKX澞/1+ঈѽ҅/1+\ԣ֌ސ ঈѽͫ/1+Ҷݕઑ ঀ/6֪֭չ࣍һц[FW2]ikepeer[FW2ikepeerfw23]ikeproposal[FW2ikepeerfw23]remoteaddress[FW2ikepeerfw23]presharedkeyabcde[R3]ikepeerr32[R3ikepeerr32]ikeproposal[R3ikepeerr32]remoteaddress[R3ikepeerr32]presharedkeyabcde֨,=չ8І࣍࣍؍Ҷঌऋ؍ ֲ؍[FW2]ipsecpolicymap111[FW2ipsecpolicyisakmpmap111]securityacl3001[FW2ipsecpolicyisakmpmap111]proposaltran1[FW2ipsecpolicyisakmpmap111]ikepeerfw23[R3]ipsecpolicymap110[R3ipsecpolicyisakmpmap210]securityacl3000[R3ipsecpolicyisakmpmap210]proposaltran1[R3ipsecpolicyisakmpmap210]ikepeerr32֨,=չ8ЇݎՍЇҶঌऋ[FW2]interface[R3]interface࣍ડӣݵԄҸӄӱऀୂӄङକପեर/69KIॹӑर࣍ॹ࣍ߛङ/19'ޞͫ࣍࣍֨ոјИ҅Հ aHCDPIENPㅜаㄐ䱢⚛້⢩ᙗ࣏ :56databytes,pressCTRLCtoReplyfrom:bytes56Sequence1ttl255time50Replyfrom:bytes56Sequence2ttl255time48Replyfrom:bytes56Sequence3ttl255time48Replyfrom:bytes56Sequence4ttl255time48Replyfrom:bytes56Sequence5ttl255time485packet(s)5packet(s)0.00%packetroundtripmin/avg/max 48/48/50ms[R3]displayikesav2ConnID 202101FlagRDREADYSTSTAYALIVERLREPLACEDFDFADINGTOTIMEOUTHRTHEARTBEATLKGLASTKNOWNGOODSEQNO.BCKBACKEDUP[R3]displayipsecPathMTU:1500IPSecpolicyname:"map1"Sequencenumber:10 :ISAKMPConnectionID :2Encapsulationmode:TunnelTunnellocal :Tunnelremote :[OutboundESPAs]SPI:247406703Proposal:ESPENCRYPTDES64ESPAUTHSAremainingkeyduration(bytes/sec):1887436380/3534Maxsentsequencenumber:5UDPencapsulationusedforNATtraversal:N[InboundESPSAs]SPI:155207494Proposal:ESPENCRYPTDES64ESPAUTHSAremainingkeyduration(bytes/sec):版权归原作者所有本资料只供试读更多资源请访问攻城狮论坛 HCDPIENPㅜаㄐ䱢⚛້⢩ᙗ࣏Maxreceivedsequencenumber:UDPencapsulationusedforNATtraversal:କݎङӄչ8କݎङӄՕљପ࣍ କ࣍Ӣ࣍যছЉ㔀࣍Ў࣍-8+U\KX/69KIљЇ࣍࣍Иͫପଋ࣍࣍லہ૨ऀؘͫдІЗӄசवৠऀ࣍ङ࣍םͫ࣍࣍லہ૨ऀۅߒזڱѫ࣍םͫ࣍࣍҅ऀԈہ૨ऀઑؘৠФ࣍ङлପԈہ૨ऀԣઑЉܶݵ֨/69KIପଳЇ࣍੧Օљ҅-8+ 5KXIؘܶͫФ࣍ङङପ࣍,=-8+ԣઑر:[TTKRݎՍ࣍Ԇӱ,=ङTX[Ԛֿ[FW1Tunnel1]tunnelprotocolgre[FW1Tunnel1]ipaddress24[FW1Tunnel1]firewallzone[FW1zoneuntrust]addinterfaceTunnel,=-8+ԣઑر:[TTKRݎՍ࣍Ԇӱ,=ङTX[Ԛֿ[FW2Tunnel1]tunnelprotocolgre[FW2Tunnel1]ipaddress24[FW2Tunnel1]firewallzone[FW2zoneuntrust]addinterfaceTunnelФ࣍࣍࣍҅ԣઑ澞8/6ԣઑ҅࣍ߎHCDPIENPㅜаㄐ䱢⚛້⢩ᙗ࣏ proutestatic24[FW1rip1]version[FW1rip1]network[FW1rip1]network proutestatic24[FW2rip1]version[FW2rip1]network[FW2rip1]network࣍࣍')2Ў-8+࣍ФեङܶރО࣍࣍ੴ/69KIԆङܶރ࣍࣍࣍ҶঌऋͫৠऀޏЎङ')2[FW1]acl[FW1acladv3001]rulepermitgresource0destination0[FW1acladv3001]quit[FW1]ipsecpolicymap110[FW1ipsecpolicyisakmpmap110]securityacl[FW2]acl[FW2acladv3002]rulepermitgresource0destination0[FW2acladv3002]quit[FW2]ipsecpolicymap110[FW2ipsecpolicyisakmpmap110]securityaclҿѕ࣍࣍ґܶЉՊ࣍ડӣୂৠӄӱऀୂӄङକପͫर/69KIॹӑ[FW1]a:56databytes,pressCTRLCtoReplyfrom:bytes56Sequence1ttl255time50Replyfrom:bytes56Sequence2ttl255time50Replyfrom:bytes56Sequence3ttl255time60Replyfrom100.200.1:bytes56Sequence4ttl255time50Replyfrom:bytes56Sequence5ttl255time50 5packet(s)5packet(s)000%packetroundtripmin/avg/max 50/52/60ms[FW1]displayipsecsa HCDPIENPㅜаㄐ䱢⚛້⢩ᙗ࣏pathMTU:1500IPsecpolicyname:"map1"sequencenumber:10mode:isakmpvpn:connectionid:rulenumber:5encapsulationmode:tunnelholdingtime:0d0h5mtunnellocal: tunnelremote: source:550655350flowdestination:550655350[inboundESPSAs]spi:240396810vpn:0 said:34cpuid:0x0000proposal:ESPENCRYPTDESESPAUTHSHA1saremainingkeyduration(bytes/sec)1887436044/3279maxreceivedsequencenumber:9udpencapsulationusedfornattraversal:N[outboundESPSAs]spi:208723708vpn:0 said:35cpuid:0x0000proposal:ESPENCRYPTDESESPAUTHSHA1saremainingkeyduration(bytes/sec):1887436044/3279maxsentsequencenumber:10udpencapsulationusedfornattraversal:ୂৠӄӱۈऀୂӄՕљକପ,=չ,=۪࣍ڏॹ-8+U\KX/69KI<64ପଳ澞ؘୂৠչۈୂৠङѮଧ କ࣍Ӣݖԃҷ؛Љ㔀࣍Ў࣍-8U\KX69KI,=-8+ԣઑر:[TTKRݎՍ࣍Ԇӱ,=ङTX[ԚֿHCDPIENPㅜаㄐ䱢⚛້⢩ᙗ࣏ [FW2Tunnel2]tunnelprotocolgre[FW2Tunnel2]ipaddress24[FW2zoneuntrust]addinterfaceTunnel Їӫ:[TTKRݎՍͫடଳ࣍-8+ԣઑ[R3Tunnel0/0/1]tunnelprotocolgre[R3Tunnel0/0/1]ipaddress24[R3Tunnel0/0/1]destination૨Ф࣍࣍҅8/6૨/6ԣઑ҅ proutestatic24[FW2rip1]version[FW2rip1]network proutestatic24[R3rip1]version[R3rip1]network[R3rip1]network࣍࣍')2Ў-8+࣍ФեङܶރО࣍࣍ੴ/69KIԆङܶރ࣍[R3]acl[R3acladv3001]rulepermitgresource0destination0[R3acladv3001]quit[R3]ipsecpolicymap120[R3ipsecpolicyisakmpmap110]securityacl3001[R3ipsecpolicyisakmpmap120]proposaltran1[R3ipsecpolicyisakmpmap120]ikepeerr32[FW2]acl[FW2acladv3003]rulepermitgresource0destination0[FW2acladv3003]quit[FW2]ipsecpolicymap120 HCDPIENPㅜаㄐ䱢⚛້⢩ᙗ࣏5653545454[FW25653545454ҿѕ࣍࣍ґܶЉՊ࣍ડӣݵԄҸӄӱऀୂӄ

र/69KIॹӑ[R3]a:56databytes,pressCTRLCtobreakReplyfrom:bytes56Sequence1ttl255Replyfrom:bytes56Sequence2ttl255Replyfrom:bytes56Sequence3ttl255Replyfrom:bytes56Sequence4ttl255Replyfrom:bytes56Sequence5ttl255 5packet(s)5packet(s)0.00%packetroundtripmin/avg/max 53/54/56ms[R3]displayipsecsaPathMTU:1500IPSecpolicyname:"map1"Sequencenumber:10 :ISAKMPConnectionID :2Encapsulationmode:TunnelTunnellocal :Tunnel :[OutboundESPSPI:145201056Proposal:ESPENCRYPTDES64ESPAUTHSAremainingkeyduration(bytes/sec):1887436380/2849Maxsentsequencenumber:5UDPencapsulationusedforNATtraversal:N[InboundESPSAs]HCDPIENPㅜаㄐ䱢⚛້⢩ᙗ࣏ SPI:1040062082Proposal:ESPENCRYPTDES64ESPAUTHSAremainingkeyduration(bytes/sec):1887436380/2849Maxreceivedsequencenumber:5UDPencapsulationusedforNATtraversal:IPSecpolicyname:"map1"Sequencenumber:20 :ISAKMPConnectionID :5Encapsulationmode:TunnelTunnellocal :Tunnel :[OutboundESPSPI:97199512Proposal:ESPENCRYPTDES64ESPAUTHSAremainingkeyduration(bytes/sec):1887436200/3506Maxsentsequencenumber:6UDPencapsulationusedforNATtraversal:[InboundESPSPI:2570078602Proposal:ESPENCRYPTDES64ESPAUTHSAremainingkeyduration(bytes/sec):1887436176/3506Maxreceivedsequencenumber:5UDPencapsulationusedforNATtraversal:ӣݵԄҸৠӱۈऀୂӄՕљକପԄҸৠչۈୂৠङѮଧ 㓢,=֌ङઢͫ/1+ HCDPIENPㅜаㄐ䱢⚛້⢩ᙗ࣏#sysnameFW1aclnumber0aclnumber0rule5permitgresource0destinationikeproposal10ikepeerpresharedkeyabcdeikeproposal10remoteaddressipsecproposalespauthenticationalgorithmsha1ipsecpolicymap110isakmpsecurityacl3001ikepeerfw12proposaltran1interfaceipaddressinterfaceipaddress255255.255.0ipsecpolicymap1#interfaceipaddresstunnelprotocolgresourcedestination100.20.2firewallzonelocalsetpriority100#firwallzonetrustsetpriority85addinterfaceHCDPIENPㅜаㄐ䱢⚛້⢩ᙗ࣏ #firewallzoneuntrustsetpriority5addinterfaceTunnel1#ospfarea#ripversionnetworksysnameFW2aclnumberaclnumberrule5permitipsource55destination55aclnumberrule5permitgresource0destination0aclnumberrule5permitgresource0destination0ikeproposal10ikepeerpresharedkeyabcdeikeproposal10remoteaddressikepeerpresharedkeyabcdeikeproposal10 HCDPIENPㅜаㄐ䱢⚛້⢩ᙗ࣏remoteaddressipsecproposalespauthenticationalgorithmsha1ipsecpolicymap110isakmpsecurityacl3002ikepeerfw21proposaltran1ipsecpolicymap111isakmpsecurityacl3001ikepeercproposaltran1ipsecpolicymap120isakmpsecurityacl3003ikepeerfw23proposaltran1interfaceipaddressinterfaceipaddressipsecpolicymap1interfaceipaddresstu