网络配置设计说明书全解

第第页r1(config-if)#exitRA:ra(config)#ints0/0/0ra(config-if)#encapsulationpppra(config-if)#ppppapsent-usernamegs1password2013ra(config-if)#exitRB：rb(config)#ints0/0/1rb(config-if)#encapsulationpppra(config-if)#ppppapsent-usernamegs2password2014ra(config-if)#exit第五步：利用NAT地址转换，使内网地址转换成公网址址访问服务器。rb(config)#ints0/0/1rb(config-if)#ipnatoutsiderb(config-if)#exitrb(config)#intf0/0rb(config-if)#ipnatinside四）：各部门访问权限设置在交换机S1上通过ACL控制不允许财务部访问互联网，业务部只能访问WWW和FTP服务，而综合部只能访问WWW服务，其余访问不受控制rb(config)#access-list100denytcphosthosteq80rb(config)#access-list100permitiphostanyrb(config)#access-list100permitipanyanyrb(config)#intf0/0rb(config-if)#ipaccess-group100inrb(config-if)#exit(五)：各硬件的相关配置文件附录R1:r1#shrunning-configBuildingconfiguration...Currentconfiguration:875bytes!version12.4noservicetimestampslogdatetimemsecnoservicetimestampsdebugdatetimemsecnoservicepassword-encryption!hostnamer1usernamegs1password02013usernamegs2password02014spanning-treemodepvstinterfaceFastEthernet0/0ipaddress54duplexautospeedauto!interfaceFastEthernet0/1noipaddressduplexautospeedautoshutdown!interfaceSerial0/0/0ipaddress54encapsulationppppppauthenticationpap!interfaceSerial0/0/1ipaddress54encapsulationppppppauthenticationpap!interfaceVlan1noipaddressshutdown!routerripversion2networknetworknetworknoauto-summary!ipclasslessnocdprunlinecon0lineaux0!linevty04loginendRA:ra#shrunning-configBuildingconfiguration...Currentconfiguration:855bytes!version12.4noservicetimestampslogdatetimemsecnoservicetimestampsdebugdatetimemsecnoservicepassword-encryption!hostnameraspanning-treemodepvstinterfaceFastEthernet0/0ipaddress54duplexautospeedauto!interfaceFastEthernet0/1ipaddress54duplexautospeedauto!interfaceSerial0/0/0ipaddressencapsulationpppppppapsent-usernamegs1password02013clockrate64000!interfaceSerial0/0/1noipaddressshutdown!interfaceVlan1noipaddressshutdown!routerripversion2networknetworknetworknoauto-summary!ipclasslessiprouteSerial0/0/0nocdprunlinecon0lineaux0linevty04login!!!endRB:rb#shrunning-configBuildingconfiguration...Currentconfiguration:1284bytes!version12.4noservicetimestampslogdatetimemsecnoservicetimestampsdebugdatetimemsecnoservicepassword-encryption!hostnamerbspanning-treemodepvstinterfaceFastEthernet0/0ipaddress54ipaccess-group100inipnatinsideduplexautospeedauto!interfaceFastEthernet0/1noipaddressduplexautospeedauto!interfaceSerial0/0/0noipaddressipaccess-group101outshutdown!interfaceSerial0/0/1ipaddressencapsulationpppppppapsent-usernamegs2password02014ipnatoutsideclockrate64000!interfaceVlan1noipaddressshutdown!routerripversion2networknetworknetworknoauto-summary!ipnatinsidesourcelist1interfaceSerial0/0/1overloadipclasslessiprouteSerial0/0/1!!access-list1permitanyaccess-list100denytcphosthosteqwwwaccess-list100permitiphostanyaccess-list100permitipanyanyaccess-list101denytcphosthosteqftpaccess-list101permitiphostanyaccess-list101permitipanyanynocdprunlinecon0!lineaux0!linevty04login!!!endS1s1#shrunning-configBuildingconfiguration...Currentconfiguration:1829bytes!version12.2noservicetimestampslogdatetimemsecnoservicetimestampsdebugdatetimemsecnoservicepassword-encryption!hostnames1iproutingspanning-treemodepvstinterfaceFastEthernet0/1switchportaccessvlan10switchportmodeaccess!interfaceFastEthernet0/2switchportaccessvlan10switchportmodeaccess!interfaceFastEthernet0/3switchportaccessvlan20switchportmodeaccess!interfaceFastEthernet0/4switchportaccessvlan20switchportmodeaccess!interfaceFastEthernet0/5switchportaccessvlan30switchportmodeaccess!interfaceFastEthernet0/6switchportaccessvlan30switchportmodeaccess!interfaceFastEthernet0/7!interfaceFastEthernet0/8!interfaceFastEthernet0/9!interfaceFastEthernet0/10!interfaceFastEthernet0/11!interfaceFastEthernet0/12!interfaceFastEthernet0/13interfaceFastEthernet0/14interfaceFastEthernet0/15!interfaceFastEthernet0/16!interfaceFastEthernet0/17!interfaceFastEthernet0/18!interfaceFastEthernet0/19!interfaceFastEthernet0/20!interfaceFastEthernet0/21!interfaceFastEthernet0/22switchportmodetrunk!interfaceFastEthernet0/23switchportmodetrunk!interfaceFastEthernet0/24noswitchportipaddressduplexautospeedauto!interfaceGigabitEthernet0/1!interfaceGigabitEthernet0/2!interfaceVlan1noipaddressshutdown!interfaceVlan10ipaddress54!interfaceVlan20ipaddress54interfaceVlan30ipaddress54!routerripversion2networknetworknetworknetworknoauto-summary!ipclasslesslinecon0!lineaux0!linevty04loginEndS2s2#shrunning-configBuildingconfiguration...Currentconfiguration:1783bytesversion12.2noservicetimestampslogdatetimemsecnoservicetimestampsdebugdatetimemsecnoservicepassword-encryptionhostnames2iproutingspanning-treemodepvstinterfaceFastEthernet0/1switchportaccessvlan10switchportmodeaccess!interfaceFastEthernet0/2switchportaccessvlan10switchportmodeaccess!interfaceFastEthernet0/3switchportaccessvlan20switchportmodeaccess!interfaceFastEthernet0/4switchportaccessvlan20switchportmodeaccess!interfaceFastEthernet0/5switchportaccessvlan30switchportmodeaccessinterfaceFastEthernet0/6switchportaccessvlan30switchportmodeaccess!interfaceFastEthernet0/7!interfaceFastEthernet0/8!interfaceFastEthernet0/9!interfaceFastEthernet0/10!interfaceFastEthernet0/11!interfaceFastEthernet0/12!interfaceFastEthernet0/13!interfaceFastEthernet0/14!interfaceFastEthernet0/15interfaceFastEthernet0/16interfaceFastEthernet0/17!interfaceFastEthernet0/18!interfaceFastEthernet0/19!interfaceFastEthernet0/20!interfaceFastEthernet0/21!interfaceFastEthernet0/22!interfaceFastEthernet0/23!interfaceFastEthernet0/24noswitchportipaddressduplexautospeedautointerfaceGigabitEthernet0/1interfaceGigabitEthernet0/2!interfaceVlan1noipaddressshutdown!interfaceVlan10ipaddress54!interfaceVlan20ipaddress54!interfaceVlan30ipaddress54!routerripversion2networknetworknetworknetworknoauto-summary!ipclasslesslinecon0!lineaux0!linevty04loginend

六）：基于linux环境下的服务器配置（一）Linux系统的安装（以CentOS6.4企业版为例）。VirtualBox—款开源虚拟机软件，VirtualBox号称是最强的免费虚拟机软件，它不仅具有丰富的特色，而且性能也很优异！它简单易用，可虚拟的系统包括Windows，MacOSX、Linux、OpenBSD、Solaris、IBMOS2甚至Android4.0系统等操作系统!使用者可以在VirtualBox上安装并且运行上述的这些操作系统！CentOS（CommunityEnterpriseOperatingSystem）是Linux发行版之一，它是来自于RedHatEnterpriseLinux依照开放源代码规定释出的源代码所编译而成。由于出自同样的源代码，因此有些要求高度稳定性的服务器以CentOS替代商业版的RedHatEnterpriseLinux使用。两者的不同，在于CentOS并不包含封闭源代码软件。（二）DNS服务器的配置与管理。在DNS服务器主配置文件named.conf中，配置方案如下options{zone""IN{typemaster;file".zone";allow-update{none;};};zone"84.20.10."IN{typemaster;file"(84.20.10).arpa";allow-update{none;};};在正向解析文件.zone中，配置方案如下$TTL1D@INNS@INSOA@.@INNS0;serial1D;refresh1H;retry1W;expire3H);.dnsINA5cwINA36xsINA36ftpINA3在反向解析文件10.20.84.arpa中，配置方案如下:$TTL1D@INSOA@sxxycom.(0;serial1D;refresh1H;retry1W;expire3H);minimum@INNS.本机ip地址INPTR36INPTR.36INPTR.3INPTRHYPERLINK.Web服务器的配置与管理。在Web服务器主配置文件httpd.conf中，配置方案如下：NameVirtualHost(36)<VirtualHost(36)>ServerAdminroot@DocumentRoot/var/www/html/cwDirectoryIndexindex.htmlServerNErrorLoglogs/-error_logCustomLoglogs/-access_logcommon</VirtualHost><VirtualHost(36)>ServerAdminHYPE