计算机网络课件packet tracer5.3综合实验下

OSPF(OpenShortestPathFirst(InteriorGatewayProtocolIGP)，用于在单一自治系统(autonomoussystem,AS)内决策路由。OSPFFversion2RFC2328224OSPFarea一、配置实例拓扑二、OSPF配置基本命Router(config)#routerospfRouter(config-router)#network55areaRouter(config-router)#router-id三、OSPF实例图二以Router1２、启动OSPF图 Router1的OSPF配图 Router２的OSPF配图 Router3的OSPF配图 Router4的OSPF配图 查看路由器中的路由３、校验、图 showipprotocol查看路由器中所启用的路由计算协图 showip图十一showipospf图十三showipospfneighbor图十四showipospf图十五debugipospfevents，nodebugipospfevents图十 pc2通所有网段内的计算机或路由OSPFCCNAVlan一、实验拓扑图 路由器：Cisco2811，交换机：Cisco二、创建Vlan2950#vlandatabae2950(vlan)#vlan10namemath2950(vlan)#vlan20name2950#conft2950(config)#intrangefa0/2-32950(config-if-range)#switchportmodeaccess2950(config-if-range)#switchportaccessvlan102950(config-if-range)#intrangefa0/4-52950(config-if-range)#switchportmodeaccess2950(config-if-range)#switchportaccessvlan20四、配置交换机trunk端2950(config)int2950(config-if)switchportmode五、配置路由器子接Router#confRouter(config)#intRouter(config-subif)#encapsulationdot1qRouter(config-subif)#ipaddressRouter(config-subif)#intRouter(config-subif)#encapsulationdot1qRouter(config-subif)#ipaddressRouter(config-subif)#intRouter(config-if)#no图 查看路由器中的路由六、配置计算机，测在本次实验中，pc0pc1vlan10；pc2Vlan20图 不同网段中的计算机完全可 十二、PPP(PointtoPointProtocol)数据链路层协议。两种认证方式：一种是PAP，CHAPPAPCHAPPAPpassword是明文的，而CHAP在传输过程中不传输，PAP认证是通过两次握CHAP3一、实验配置拓扑二、PPP基本配置命令Router(config-if)#encapsulationPPPRouter(config-if)#PPPmultilinkRouter(config-if)#PPPauthentication三、配置!!图二路由器Boson上配置PPPNewyorkNewyork令 启用RIP路由协议，两个路由器要配置RIPBoson路由器的配置：Boston#shrunning-configBuildingCurrentconfiguration:652versionnoservicepassword-!hostname!!!!!usernameNewyorkpassword0!ipsshversionnoip-!!interfaceFastEthernet0/0noipaddressduplexautospeedauto!interfaceipaddressduplexautospeedauto!interfacedescriptionLinktoRouterNewyorkipaddressencapsulationpppauthenticationchapclockrate56000!interfaceVlan1noipaddress!routerripversion2networknetwork!ip!!!!lineconlinevty04!!Newyork由器的配置：Newyork#shrunning-configBuildingCurrentconfiguration:606!versionnoservicepassword-!hostname!!!!!usernameBostonpassword0!ipsshversion!!interfaceFastEthernet0/0noipaddressduplexautospeedauto!interfaceipaddressduplexautospeedauto!interfaceSerial0/3/0descriptionlinktoBostonipaddressencapsulationpppauthentication!interfaceVlan1noipaddress!routerripversion2networknetwork!ip!!!!!lineconlinevty04!!图五IP图六在计算机PC0上使 命令检查网络的连通Frame从56Kbps到1．544Mbps的广域分组交换网的用户接口。帧中继是从综合业务数字网中发展起来的，并在1984年推荐为国际电报咨询 的一项标准，另外，由的TIS标准 数据链路连接标识符（DLCI）这个信息包含标识号，它标识多路复用到通道的逻辑连结。帧中继交换机将两端的DLCI关联起来，它是帧中继帧格式中地字段的一个重要部分之一，这是个6位标识，表示正在进行的客户和服务器之 M层。帧中继使用DLCI来标识DTE和服务商交换机之间的虚电路。DLCI字段的长度一般为10bit，但也可扩展为16bit，前者用二字节地址字段，后者是三字节地址字段。23bit用四字节地址字段。DLCI值用于标识永久虚电路（PVC），呼叫控制或管理信息。DLCI只具有本地意义。一、使用PacketTracer5.0建帧中继仿真2811图二2811图四2811图五IPDLCI二、配置Frame以Router2为例，其它两个路由器相似，＼＼后是人为添加的注释，在实际配 ＼＼进入配置模Router#conf ＼＼Enterconfigurationcommands,oneperline.EndwithCNTL/Z.Router(config)#noip-lookup＼＼取消名称解析Router(config)#hostnameRouter2 Router2(config)#intfa0/1 Router2(config-if)#ipaddress Router2(config-if)#no ＼＼%LINK-5-CHANGED:InterfaceFastEthernet0/1,changedstateto%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceFastEthernet0/1,changedstatetoupRouter2(config-if)#intRouter2(config-if)#encapsulationframe- ＼＼serial0/3/0frame-relayRouter2(config-if)#no%LINK-5-CHANGED:InterfaceSerial0/3/0,changedstatetoup%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceSerial0/3/0,changedstatetoupRouter2(config-if)#interfaceserial0/3/0.1point-to-point %LINK-5-CHANGED:InterfaceSerial0/3/0.1,changedstateto%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceSerial0/3/0.1,changedstatetoupRouter2(config-subif)#ipaddress IPRouter2(config-subif)#descriptionLinkRouter1DLCI30 Router2(config-subif)#frame-relayinterface-dlci ＼＼Router2(config-subif)#interfaceserial0/3/0.2point-to-%LINK-5-CHANGED:InterfaceSerial0/3/0.2,changedstateto%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceSerial0/3/0.2,changedstatetoupRouter2(config-subif)#ipaddressRouter2(config-subif)#descriptionlinktoRouter0DLCI20Router2(config-subif)#frame-relayinterface-dlci41%SYS-5-CONFIG_I:ConfiguredfromconsolebyconsoleRouter2#conftEnterconfigurationcommands,oneperline.EndwithCNTL/Z.Router2(config)#routereigrp100 Router2(config-Router2(config-Router2(config-Router2(config-Router2(config-%SYS-5-CONFIG_I:ConfiguredfromconsolebyconsoleRouter2#copyrunning-configstartup-config Destinationfilename[startup-config]?Buildingconfiguration...路由器Router0置Router0#shrunning-configBuildingCurrentconfiguration:830!versionnoservicepassword-!hostname!!!!!ipsshversionnoip-!!interfaceFastEthernet0/0noipaddressduplexautospeedauto!interfaceipaddressduplexautospeedauto!interfaceSerial0/3/0noipaddressencapsulationframe-!interfaceSerial0/3/0.1point-to-pointdescriptionLinktoRouter2ipaddressframe-relayinterface-dlci!interfaceSerial0/3/0.2point-to-pointdescriptionLinktoRouter1ipaddressframe-relayinterface-dlci!interfaceVlan1noipaddress!routereigrpnetworknetworknetwork!ip!!!!!lineconlinevty04!!路由器Router1Router1#shrunning-configBuildingCurrentconfiguration:843!versionnoservicepassword-!hostname!!!!!ipsshversionnoip-!!interfaceFastEthernet0/0noipaddressduplexautospeedauto!interfaceipaddressduplexautospeedauto!interfaceSerial0/3/0noipaddressencapsulationframe-!interfaceSerial0/3/0.1point-to-pointdescriptionlinktoRouter2DLCI40ipaddressframe-relayinterface-dlci!interfaceSerial0/3/0.2point-to-pointdescriptionlinktorouter0DLCI21ipaddressframe-relayinterface-dlci!interfacenoipaddress!routereigrpnetworknetworknetwork!ip!!!!!lineconlinevty04!!路由器Router2Router2#shrunning-configBuildingCurrentconfiguration:841!versionnoservicepassword-!hostname!!!!!ipsshversionnoip-!!interfaceFastEthernet0/0noipaddressduplexspeedauto!interfaceipaddressduplexautospeedauto!interfaceSerial0/3/0noipaddressencapsulationframe-!interfaceSerial0/3/0.1point-to-pointdescriptionLinkRouter1DLCI30ipaddressframe-relayinterface-dlci!interfaceSerial0/3/0.2point-to-pointdescriptionlinktoRouter0DLCI20ipaddressframe-relayinterface-dlci!interfaceVlan1noipaddress!routereigrpnetworknetworknetwork!ip!!!!!lineconlinevty04!!路由器配置完毕后，还需要配置Cloud0图六Cloud0serial0DLCILMI图七Cloud0serial1DLCILMI图八Cloud0serial2DLCILMI图九Cloud0Frame三、配置各个计算机，并使用命令校验网络的连通IPSubnetDefaultPC>ingwith32ofReplyfrom:bytes=32time=141msTTL=254Replyfrom:bytes=32time=110msTTL=254Replyfrom:bytes=32time=143msTTL=254Replyfrom:bytes=32time=110msstatisticsfor:Packets:Sent=4,Received=4,Lost=0(0%loss),Approximateroundtriptimesinmilli-seconds:Minimum=110ms,um=143ms,Average=126msPC>ingwith32bytesofReplyfrom:bytes=32time=62msTTL=255Replyfrom:bytes=32time=62msTTL=255Replyfrom:bytes=32time=47msTTL=255Replyfrom:bytes=32time=63msstatisticsfor:Packets:Sent=4,Received=4,Lost=0(0%loss),Approximateroundtriptimesinmilli-seconds:Minimum=47ms,um=63ms,Average=58msPC>ingwith32bytesofReplyfrom:bytes=32time=109msTTL=254Replyfrom:bytes=32time=125msTTL=254Replyfrom:bytes=32time=93msTTL=254Replyfrom:bytes=32time=94msTTL=254statisticsfor:Packets:Sent=4,Received=4,Lost=0(0%loss),Approximateroundtriptimesinmilli-seconds:Minimum=93ms,um=125ms,Average=PC>ingwith32bytesofReplyfrom:bytes=32time=110msTTL=254Replyfrom:bytes=32time=112msTTL=254Replyfrom:bytes=32time=123msTTL=254Replyfrom:bytes=32time=110msstatisticsfor:Packets:Sent=4,Received=4,Lost=0(0%loss),Approximateroundtriptimesinmilli-seconds:Minimum=110ms,um=123ms,Average=113msPC>ingwith32bytesofReplyfrom:bytes=32time=140msTTL=254Replyfrom:bytes=32time=109msTTL=254Replyfrom:bytes=32time=110msTTL=254Replyfrom:bytes=32time=125msstatisticsfor:Packets:Sent=4,Received=4,Lost=0(0%loss),Approximateroundtriptimesinmilli-seconds:Minimum=109ms,um=140ms,Average=!!网络地址转换(NAT,NetworkAddressTranslation)被广泛应用于各种类型InternetNATlP地址不足的问题，而且还能够有效地避免来自网络外部的，隐藏并保护网络内部的计算机。NATStaticNat、动态转DynamicNatOverLoad。转换(PAT，PortAddressTranslation).采用端口多路复用方式。内部网络的所有主机均可共个合法外部IP地址实现对Internet的，从而可以最大IPinternet的。因此，目前网络中应用最多的就是端口多路复用方式。一、实验配置拓扑图一私有网段/24通过路由器的PAT技术接入互连路由器ISP配置ISP#shstartup-configUsing582bytesversionservicepassword-!hostname!!enablesecret5$1$mERr$Q1EnFeXJ8Ibdhx2QffKaQ.enablepassword7083249401018!!!!ipsshversion!!interfaceFastEthernet0/0noipaddressduplexautospeedauto!interfaceipaddressduplexautospeedauto!interfaceipaddressclockrate!interfaceSerial0/3/1noipaddress!interfaceVlan1noipaddress!ip!!!!nocdp!line0line04!!路由器的配#shstartup-configUsing643bytes!versionservicepassword-!hostname!!enablepassword7!!!!ipsshversion!!interfaceFastEthernet0/0noipaddressduplexautospeedauto!interfaceipaddressipnatinsideduplexautospeedauto!interfaceipaddressipnat!interfacenoipaddress!ipnatinsidesourcelist1interfaceSerial0/3/0overloadipclasslessiproute!!access-list1permit!!!nocdp!lineconlinevty04!!在路由器上配置PAT(config)#iproute ＼＼由(config)#access-list1permit ＼＼置一个标准控制列(config)#ipnatinsidesourcelist1interfaceSerial0/3/0overload＼＼PATIPACL1，serial0/3/0上的公共IP地址进行转换，overload表示使用端进行转换(config)#intfa0/1(config-if)#ipnatinside(config-if)#intserial0/3/0(config-if)#ipnatoutside三、校验、查看PAT的配置及运行状#shipnatProInsideglobal Insidelocal Outsideglobal#shipnatTotaltranslations:11(0static,11dynamic,11extended)OutsideInterfaces:Serial0/3/0InsideInterfaces:FastEthernet0/1Hits:77Misses:11Expiredtranslations:0Dynamicmaps:IPNATdebuggingis#NAT:s=->,NAT*:s=,d=-NAT:s=->,NAT*:s=,d=-NAT:s=->,NAT*:s=,d=-NAT:s=->,NAT*:s=,d=-#nodebugipnatIPNATdebuggingis#十五、ACLACL(AccessControlList，控制列表)，简单说就是滤，根据数据包的报头中的ip地址、协议端等信息进行过滤。利用ACL可以实现安全控制。编号：1-99or1300-1999(standardIP)，100-199or2000-2699(ExtendedIP)。ACL一、实验配置拓扑图二DNS图三WWWLuoShan#shstartup-configUsing699bytes!versionnoservicepassword-!hostname!!enablepassword!!!!usernamesenyapassword0!ipsshversionnoip-!!interfaceFastEthernet0/0noipaddressduplexautospeedauto!interfaceipaddressduplexautospeedauto!interfaceipaddressclockrate!interfaceipaddress!interfaceVlan1noipaddress!routereigrpnetworknetworknetwork!ip!!!!!lineconlinevty04passwordcisco!!HuangChuang#shstartup-configUsing669bytes!versionnoservicepassword-!hostname!!enablepassword!!!!ipsshversionnoip-!!interfaceFastEthernet0/0noipaddressduplexautospeedauto!interfaceipaddressduplexautospeedauto!interfaceipaddress!interfaceipaddressclockrate!interfaceVlan1noipaddress!routereigrpnetworknetworknetwork!ip!!!!!lineconlinevty04passwordcisco!!xixian#shstartup-configUsing679bytes!versionservicepassword-!hostname!!enablepassword !!!!ipsshversionnoip-!!interfaceFastEthernet0/0noipaddressduplexautospeedauto!interfaceipaddressduplexautospeedauto!interfaceipaddressclockrate!interfaceipaddress!interfacenoip!routereigrpauto-!ip!!!!!lineconlinevty0password7 !!三、配置简单的１、配置ACL限制登录到路由器的主HuangChuang#confEnterconfigurationcommands,oneperline.EndwithCNTL/Z.HuangChuang(config)#access-list1permithost＼＼路由器HuangChuang登录 HuangChuang(config)#linevty0HuangChuang(config-line)#access-class1in２、配置ACL/24网段的icmp协议数据包通向/24网xixian(config)#access-list101denyicmpxixian(config)#access-list101permitipanyanyxixian(config)#intfa0/1xixian(config-if)#ipaccess-group101out３、配置ACL特点的协议端口通HuangChuang#confEnterconfigurationcommands,oneperline.EndwithCNTL/Z.HuangChuang(config)#ipaccess-listextendedACL1 ACLHuangChuang(config-ext-nacl)#denytcphost55eqHuangChuang(config-ext-nacl)#denyudphost55eqHuangChuang(config-ext-nacl)#permitipanyanyHuangChuang(config)#intfa0/1HuangChuang(config-if)#ipaccess-groupACL1in图四４。检验、查看ACLHuangChuang#shaccess-listStandardIPaccesslist1permithost(4ExtendedIPaccesslistdenyudphost55eqdenytcphost55eqwwwpermitipanyanyHuangChuang#showaccess-listStandardIPaccesslist1permithost(4ExtendedIPaccesslistdenyudphost55eqdenytcphost55eqwww(60permitipanyany(34match(es))HuangChuang#showaccess-listACL1ExtendedIPaccesslistACL1denyudphost55eqdenytcphost55eqwww(60permitipanyany(34match(es))HuangChuang#showaccess-list1StandardIPaccesslist1permithost(4四、配置ACL的路由器配置内HuangChuang#shstartup-configUsing914bytes!versionnoservicepassword-!hostname!!enablepassword!!!!ipsshversionnoip-!!interfaceFastEthernet0/0noipaddressduplexautospeedauto!interfaceipaddressipaccess-groupACL1induplexautospeed!interfaceipaddress!interface!!ipaddressclockrate!interfaceVlan1noipaddress!routereigrpnetworknetworknetwork!ip!!access-list1permithostipaccess-listextendedACL1denyudpdenytcppermitip!!!lineconlinevty0access-class1inpasswordcisco!!LuoShan#shstartup-configUsing756bytes!versionnoservicepassword-!hostname!!enablepassword!!!usernamesenyapassword0!ipsshversionnoip-!!interfaceFastEthernet0/0noipaddressduplexautospeedauto!interfaceipaddressduplexautospeedauto!interfaceipaddressclockrate!interfaceipaddress!interfacenoip!routereigrpauto-!ip!!access-list2permithost!!lineconlinevty0access-class2inpasswordcisco!!xixian#showstartup-configUsing808bytes!versionservicepassword-!hostname!!enablepassword !!!!ipsshversionnoip-!!interfaceFastEthernet0/0noipaddressduplexautospeedauto!interfaceipaddressipaccess-group101outduplexautospeed!interfaceipaddressclockrate!interfaceipaddress!interfaceVlan1noipaddress!routereigrpnetworknetworknetwork!ip!!access-list101denyicmp55access-list101permitipany!!!lineconlinevty0password7 !!十六、DHCPDHCPIP，DHCPServerDHCPRelay。DHCPDHCP：/24:/24:DNS。图二DHCP图三DNSRouter2#shstartup-configUsing580bytes!versionservicepassword-!hostname!!enablepassword !!!!ipsshversion!!interfaceFastEthernet0/0noipaddressduplexautospeedauto!ipaddressduplexipaddressduplexautospeedauto!interfaceipaddressclockrate!interfacenoip!routereigrpnetworknetworkauto-!ip＼＼EIGRP!!!!!lineconlinevty0password7 !!２、Router0配置Router0#shstartup-confUsing625bytes!versionservicepassword-!hostname!!!!!ipsshversion!!interfaceipaddressiphelper-address ＼＼配置DHCP中继，DHCP服duplexautospeedauto!interfaceipaddressiphelper-address 置DHCP中继，DHCP服务器是duplexautospeedauto!interfaceipaddress!interfaceVlan1noipaddress!routereigrp＼＼EIGRPnetworknetworknetwork!ip!!!!!lineconlinevty0password7 !!３、配置DHCPPCIP图六DHCP中 配置其实很简单。iphelper-address这个命令就搞定了PacketTracer5.0CCNA尝辄止，。模拟器毕竟是模拟，与真实的设备相关甚远。如果想考CCNA或者借助该模拟器熟悉命令，的内容还是靠自己认真练习。这17篇能够对诸位有一丁点儿的帮助，我就高兴至极。我也地希望能得到诸位朋一、端口映由于IP地址紧缺，或者小企业（单位）由于投入的原因，只能有一个IPNAT(网络地址转换）上网。如果此时还想对外提供服图一１、配置NAT（RouterRouter(config)#access-list1permit55Router(config)#ipnatinsidesourcelist1interfaceserial0/3/0Router(config)#intserial0/3/0Router(config-if)#ipnatoutsideRouter(config-if)#intfa0/1Router(config-if)#ipnatinsideRouter(config-Router(config)#iprouteRouter(config)#routereigrpRouter(config-router)#network２、配置端口映Router(config)#ipnatinsidesourcestatictcp8080上面令意思是：把内网ip为的80端口与的端口映射，当从互联网问时，其实就是，假设的域为 /，pc2路由器的配置#shrunning-configBuildingCurrentconfiguration:734!versionnoservicepassword-!hostname!!!!!ipsshversion!!interfaceFastEthernet0/0noipaddressduplexautospeedauto!interfaceipaddressipnatinsideduplexautospeedauto!interfaceipaddressipnat!interfaceVlan1noipaddress!routereigrpnetwork!ipnatinsidesourcelist1interfaceSerial0/3/0ipnatinsidesourcestatictcp8080ipclasslessiproute!!access-list1permit!!!nocdp!lineconlinevty04!!二、链路聚合((Link链路聚合主要是端口增加带宽及提供冗余备份图三Switch(config)#hostSW1SW1(config)#intgi0/1SW1(config-if)#channel-group1modedesirableSW1(config-if)#intgi0/2SW1(config-if)#channel-group1modeSW1(config-三、捕获PDU(ProtocolDataPacketTracer5.0图四simulation图 捕获数据图 查看数据内容与格图 查看数据的发至此，PacketTracer5.0CCNA十八、VTPVLAN自从今年10月4日《PacketTracer5.0建构CCNA实验攻略》系列文章在我 博客发布以来，已经有一万多的量，也被一些网友在博客、上 的，可以从网上IEEE802.1D、IEEE802.1Q及RFC文档作为参考，络maochunfei55PacketTracer5.0CCNA(3)——CiscoVTP图一Cisco3560，Cisco3560VTPServer，是局域网中的交换机。3560(config)#vtpChangingVTPnamefromNULLtosenya3560(config)#vtpserver3560(config)#vtpmodeserverDevicemodealreadyVTPSERVER.查看VTP3560#shvtpVTP :ConfigurationRevision :4umVLANssupportedlocally:1005Numberofexisting :VTPOperating :VTP :VTPPruning :VTPV2 :VTPTraps :MD5 :0x510x270xD30xC80x550xC1Configurationlastmodifiedbyat3-1-93LocalupdaterIDis54oninterfaceVl2(lowestnumberedVLANinterfacefound)两个作为接入\汇聚层的2950的配置VTP2950A(config)#vtpChangingVTPnamefromNULLtosenya2950A(config)#vtpmodeSettingdevicetoVTPmode.查看VTP2950A#shvtpVTP :ConfigurationRevision :4umVLANssupportedlocally:255Numberofexisting :VTPOperating :VTP :VTPPruning :VTPV2 :VTPTraps :MD5 :0x510x270xD30xC80x550xC1Configurationlastmodifiedbyat3-1-93２、配置trunk链两个Cisco2950交换机使用fastthernet0/24端口分别与交换机24、23trunk，trunk2950B(config)#interfacefa0/242950B(config-if)#switchportmodetrunk2950B(config-if)#switchporttrunkallowedvlan３、在交换机Cisco3560上创建两个Vlan:vlan2名称为math；vlan3名称为。3560(config)#vlan23560(config-vlan)#namemath3560(config-vlan)#vlan33560(config-vlan)#nameshvlanvlan2950A#sh Fa0/1,Fa0/2,Fa0/3,Fa0/11,Fa0/12Fa0/15,

Fa0/5,Fa0/6,Fa0/7,Fa0/9,Fa0/10,Fa0/13,Fa0/14,

Fa0/17,Fa0/18,Fa0/19,Fa0/21, act1002 token-ring-fddinet-trnet-VLANTypeSAID ParentRingNoBridgeNoStpBrdgModeTrans1Trans2 enet enet enet 1002enet 1003enet 1004enet 1005enet 2950A#conftEnterconfigurationcommands,oneperline.EndwithCNTL/Z.2950A(config)#interfacefa0/12950A(config-if)#switchportmodeaccess2950A(config-if)#switchportaccessvlan22950A(config-if)#interfacefa0/22950A(config-if)#switchportmodeaccess2950A(config-if)#switchportaccessvlan32950B#confEnterconfigurationcommands,oneperline.EndwithCNTL/Z.2950B(config)#interfacefa0/12950B(config-if)#switchportmodeaccess2950B(config-if)#switchportaccessvlan22950B(config-if)#interfacefa0/22950B(config-if)#switchportmodeaccess2950B(config-if)#switchportaccessvlan3５、配置IP地址信vlan2IP3560(config)#interfacevlan%LINK-5-CHANGED:InterfaceVlan2,changedstateto%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceVlan2,changedstatetoup3560(config-if)#ipaddress54vlan3IP3560(config-if)#interfacevlan%LINK-5-CHANGED:InterfaceVlan3,changedstateto%LINEPROTO-5-UPDOWN: