H3C路由器与交换机的试验

本文格式为Word版，下载可任意编辑——H3C路由器与交换机的试验H3C路由器与交换机的试验

systempassword:

[Quidway]interfaceethernet0

[Quidway-Ethernet0]ipaddr10.65.1.2255.255.255.0[Quidway-Ethernet0]undoshutdown[Quidway-Ethernet0]inte1

[Quidway-Ethernet1]ipaddr10.66.1.2255.255.255.0[Quidway-Ethernet1]undoshutdown

[root@PCAroot]#ifconfigeth010.65.1.1netmask255.255.0.0[root@PCBroot]#ifconfigeth010.66.1.1netmask255.255.0.0[root@PCAroot]#ping10.65.1.2通

[root@PCAroot]#ping10.66.1.2不通，没设网关

[root@PCAroot]#routeadddefaultgw10.65.1.2[root@PCAroot]#ping10.66.1.2通

去掉HostB与Router的连线，再ping:

[root@PCAroot]#ping10.66.1.2不通(没有接线端口会自动down掉)再连接HostB与Router的连线，再ping:[root@PCAroot]#ping10.66.1.2通了

试验八单臂路由

设PCA:10.65.1.1PCB:10.66.1.1

1.一个接口两个IP的状况systempassword:

[Quidway]interfaceethernet0

[Quidway-Ethernet0]ipaddr10.65.1.2255.255.255.0

[Quidway-Ethernet1]ipaddr10.66.1.2255.255.255.0secondary[Quiway-Ethernet1]undoshutdown[root@PCAroot]#ping10.66.1.1通

2．划分两个子接口，对两个vlan的路由[SwitchA]vlan2[SwitchA-vlan2]porte0/3[SwitchA]vlan3

[SwitchA-vlan3]porte0/6[SwitchA]inee0/1

[SwitchA-Ethernet0/1]portlink-typetrunk

[SwitchA-Ethernet0/1]porttrunkpermitvlanall

[SwitchA-Ethernet0/1]porttrunkencapdot1q[SwitchA]discurr[Quidway]inte0

[SwitchA-Ethernet0]inte0.1

[SwitchA-Ethernet0.1]encapsulationdot1q2

[SwitchA-Ethernet0.1]ipaddr10.65.1.2255.255.255.0[SwitchA-Ethernet0.1]nudoshut

[SwitchA-Ethernet0.1]inte0.2

[SwitchA-Ethernet0.2]encapsulationdot1q2

[SwitchA-Ethernet0.2]ipaddr10.66.1.2255.255.255.0[SwitchA-Ethernet0.2]nudoshut[SwithA]discurr

[root@PCAroot]#ping10.66.1.1通

试验九静态路由试验

PCA:10.65.1.1PCB:10.66.1.1PCC:10.68.1.1PCD:10.69.1.1

[RouterA]interfaceethernet0

[RouterA-Ethernet0]ipaddrress10.65.1.2255.255.0.0[RouterA-Ethernet0]undoshutdown[RouterA-Ethernet0]inte1

[RouterA-Ethernet1]ipaddrress10.66.1.2255.255.0.0[RouterA-Ethernet1]undoshutdown

[RouterA-Ethernet1]ints1

[RouterA-Serial1]ipaddrress10.67.1.2255.255.0.0[RouterA-Serial1]undoshutdown[RouterA-Serial1]clockrate64000[RouterA-Serial1]quit[RouterA]iprouting[RouterA]discurr

[RouterB]interfaceethernet0

[RouterB-Ethernet0]ipaddrress10.68.1.2255.255.0.0[RouterB-Ethernet0]undoshutdown[RouterB-Ethernet0]inte1

[RouterB-Ethernet1]ipaddrress10.69.1.2255.255.0.0[RoterB-Ethernet1]undoshutdown[RouterB-Ethernet1]ints0

[RouterB-Serial0]ipaddrress10.67.1.1255.255.0.0[RouterB-Serial0]undoshutdown[RouterB-Serial0]quit[RouterB]iprouting

[RouterB]discurr

[root@PCAroot]#ifconfigeth010.65.1.1netmask255.255.0.0[root@PCAroot]#routeadddefaultgw10.65.1.2[root@PCAroot]#ping10.65.1.2通[root@PCAroot]#ping10.66.1.2通[root@PCAroot]#ping10.67.1.2通[root@PCAroot]#ping10.68.1.2不通[root@PCAroot]#ping10.69.1.2不通

[RouterA]iproute-static10.69.0.0255.255.0.010.67.1.1[root@PCAroot]#ping10.69.1.1通

下面再参与一个路由器RouterC:

[RouterB-Serial0]undoipaddrress10.67.1.1255.255.0.0[RouterB-Serial0]ipaddrress10.70.1.1255.255.0.0[RouterC]interfaceserial0

[RouterC-Serial0]ipaddrress10.67.1.1255.255.0.0[RouterC-Serial0]undoshutdown

[C-Serial0]clockrate64000[RouterC-Serial0]ints1

[RouterC-Serial1]ipaddrress10.70.1.1255.255.0.0[RouterC-Serial1]undoshutdown

[RouterC-Serial1]quit

[RouterC]iproute-static10.69.0.0255.255.0.010.70.1.1[RouterC]discurr

[root@PCAroot]#ping10.69.1.1通[root@PCAroot]#ping10.68.1.1不通

试验十动态路由试验

[RouterA]ripversion2multicast

[RouterA-rip]network10.0.0.0;可以allrA-rip]iprouting

[RouterB]ripversion2multicast[RouterB-rip]network10.0.0.0[RouterB-rip]iprouting

[RouterC]ripversion2multicast[RouterC-rip]network10.0.0.0[RouterC-rip]iprouting[RouterC]disiproute

[root@PCAroot]#ping10.68.1.1通[root@PCAroot]#ping10.69.1.1通

[RouterA-rip]peer10.67.1.1;指明交换点[RouterA-rip]summary;聚合[RouterA-Serial0]ripsplit-horizon;水平分隔[RouterA]ripwork[RouterA]ripinput[RouterA]ripoutput

[Quidway]routeridA.B.C.D;配置路由器的ID[Quidway]ospfenable;启动OSPF协议[Quidway-ospf]import-routedirect;引入直联路由[Quidway-Serial0]ospfenablearea0;配置OSPF区域[Quidway-Serial0]link-protocolppp

试验十一访问控制列表试验

1．基本访问列表

[RouterC]firewallenable

[RouterC]firewalldefaultpermit[RouterC]acl10

[RouterC-acl-10]rulenormaldenysource10.65.1.1[RouterC-acl-10]rulenormalpermitsourceany[C]ints0

[RouterC-Serial0]firewallpacket-filter10inbound[RouterC-Serial0]quit[RouterC]displayacl

[root@PCAroot]#ping10.68.1.1不通[root@PCBroot]#ping10.68.1.1通[RouterC]undoacl10[RouterC]displayacl

[root@PCAroot]#ping10.68.1.1通[root@PCBroot]#ping10.68.1.1通

[RouterC]acl11

[RouterC-acl-11]rulenormaldenysource10.65.1.10.0.0.255[RouterC-acl-11]rulenormalpermitsourceany[RouterC]ints0

[RouterC-Serial0]firewallpacket-filter11inbound[rC]displayacl

[root@PCAroot]#ping10.68.1.1不通[root@PCBroot]#ping10.68.1.1不通[RouterC]undoacl

2．扩展访问控制列表

[RouterC]firewallenable

[RouterC]firewalldefaultpermit[RouterC]acl101

[RouterC-acl-101]ruledenytcpsource10.65.1.10destination10.69.1.10[RouterC-acl-101]rulepermitipsourceanydestinationany[RouterC]ints1

[RouterC-Serial1]firewallpacket-filter101outbound[RouterC-Serial1]qu