2013软考网络工程师历年试题答案及详解27套网工练习题上

NAT“NetworkAddressTranslation它是一个IETF(InternetEngineeringTask,Internet工程任务组)标准，允许一是一种把内部私有网络地址（IP）IPInternetIP192.1.1.1~192.1.1.10，使用路由器NAT功能进行地址转换，具体配置如下：Currentconfiguration：version11.3noservicepassword-encryptionhostname2501ipnatpoolaaa192.1.1.2192.1.1.10netmask255.255.255.0ipnatinsidesourcelist1poolaaainterfaceipaddress10.1.1.1255.255.255.0ipnatinsideinterfaceipaddress192.1.1.1ipnatnoipmroute-cachebandwidth2000nofair-queueinterfaceSerial1noipaddressnoipiproute0.0.0.00.0.0.0access-list1permit10.1.1.0lineconlineauxlinevty04passwordciscoPPP(Point-to-PointProtocol)是SLIP(SerialLineIPprotocol)的继承者，它提供了跨过同步CHAP(ChallengeHandshakeAuthenticationProtocol)(-握手验证协议)和PAP(PasswordAuthenticationProtocol)(PAP)(口令验证协议)通常被用于在PPP封装的串行线提供安 的路由器Router1和Router2的S0口均封装PPP协议，采用CHAP做认证。hostnameusernamerouter1passwordxxxinterfaceSerial0ipaddress192.200.10.1encapsulationppppppauthentication!hostnameusernamerouter2passwordxxxinterfaceSerial0ipaddress192.200.10.2encapsulationpppauthentication格式。X.25的第一层定义了电气和物理端口特性。interfaceSerial0encapsulationx25ipaddress192.200.10.1x25addressx25htcx25nvcx25mapip192.200.10.2110102x25mapip192.200.10.3110103!interfaceSerial0encapsulationx25ipaddress192.200.10.2x25addressx25htcx25nvcx25mapip192.200.10.1110101x25mapip192.200.10.3110103!interfaceSerial0encapsulationx25ipaddress192.200.10.3x25addressx25htcx25nvcx25mapip192.200.10.1110101x25mapip192.200.10.2110102!E164K专线连接注:1.T1时,channel-group0-23,Timeslot1-24;E1时,channel-group0-30,Timeslot1-31.Current!versionnoserviceudp-small-serversnoservicetcp-small-servers!hostname!enablesecret5$1$XN08$Ttr8nfLoP9.2RgZhcBzkk/enablepasswordcisco!!ipsubnet-!controllerE1framingNO-CRC4channel-group0timeslotschannel-group1timeslotschannel-group2timeslots!interfaceipaddress133.118.40.1media-type!interfaceEthernet1noipaddress!interfaceipaddress202.119.96.1encapsulationhdlcnoipmroute-!interfaceipaddress202.119.96.5encapsulationhdlcnoipmroute-!interfaceipaddress202.119.96.9encapsulationhdlcnoipmroute-!noipiproute133.210.40.0255.255.255.0iproute133.210.41.0255.255.255.0iproute133.210.42.0255.255.255.0!lineconlineauxlinevty04passwordcicso!1】E1CE123现以一台服务器（RAS，RemoteAccessServer）Cisco2509、RJ45为例RAS---Cisco2509、RJ45线，RJ45转9针串口转换器、计算机。第二步，硬件连接，RJ45Cisco2509consoleRJ459·第三步，RASWINDOWS98Cisco设备的虚拟操作台。Cisco2509IOS1RASRJ45console”与“AUX”，请问这两个端口的用途是什么？（100）2Cisco（1003IOShostnameCisco enable ip- ip-name-server202.112.77.2【1（3async-bootpsubnet-maskasync-bootpgatewayasync-bootpdns-server★配置Ethenlei （略iplocalpoolpool2509202.112.79.1202.112.79.8iPAsynchronousRASmodem，interfaceGroup-Async1group-range1818encapsulationpap【2（2ansyncdynamicansyncdefaultaddresspoolpool2509//pool2509pppauthenticationpapppprouter【3（3routernetworknetwork★配置拨号服务器的缺省路 （略access-list1pormit202.112.77.0.0.0.255★配置Asynchronous （略★配置Iinevty04【4（3access-class1in//access-classpaswordIPSec【问题1】简述IPSec实 2】解释配置中画线部分含义。17221ipinternetipipipcryptoisakmp1authenticationpre-sharegroupcryptoisakmpkeytest123addresscryptoipsectransform-settagah-md5-hmacesp-descryptomapdemp10ipsec-isakmpsetpeersettransform-set matchaddress101!interfaceipaddress192.168.1.1noipdirected-broadcasttunnelsourcetunneldestination202.96.1.2cryptomapdemointerfaceserial0/0ipaddress202.96.1.1noipdirected-broadcastcryptomapdemo!interfaceipaddress168.1.1.1noipdirected-broadcastinterfaceEthernet0/0ipaddress172.22.1.100noipdirected-!ipiproute0.0.0.00.0.0.0iproute172.22.2.0255.255.0.0access-lost101permitgrehost202.96.1.1hostcryptoisakmp1authenticationpre-sharegroupcryptoisakmpkeytest123addresscryptoipsectransform- tagah-md5-hmacesp-!cryptomap demo10ipsec-isakmpsetpeer202.96.1.1settransform-settagmatchaddress101!interfaceipaddress192.168.1.2noipdirected-broadcasttunnrlsourceSerial0/0tunneldestination202.96.1.1cryptomapdemointerfaceipaddress202.96.1.2noipdirected-broadcastcryptomapdemo!interfaceipaddress167.1.1.1noipdirected-broadcastinterfaceEthernet0/0ipaddress172.22.2.100noipdirected-!HardwareHardwareisMTU1500bytes,BW1544Kbit,DLY1000usec,rely255/255,loadipiproute0.0.0.00.0.0.0iproute172.22.1.0255.255.0.0access-lost101permitgrehost202.96.1.2host【问题1】列表可以帮助我们控制网上IP包的传输，其主要应用在哪几个方面【问题2】标准的IP列表和扩展的IP列表主要区别是什么【问题3】下面是一台使用了标准列表的路由器的部分配置，请其中的错误并access-list1deny172.16.4.13interfaceserialipaccess-group1我们在日工作中常使用wnrae端口及]查看端的运行态。下面的例子是我们在不同情况下看到的端口状态行的内容，请分析其产生的原因及解决方法。1Router#show Serial0isup,lineprotocolisHardwareisMTU1500bytes,BW1544Kbit,DLY1000usec,rely255/255,load1/255EncapsulationHDLC,loopbacknotset,keepaliveset(10sec)Lastinput00:00:00,output00:00:00,outputhangneverLastclearingofshowinterfacecountersneverQueueingstrategy:fifoOutputqueue0/40,0drops;inputqueue0/75,0drops5minuteinputrate1000bits/sec,2packets/sec5minuteoutputrate1000bits/sec,20packetsinput,0bytes,0noReceived0broadcasts,0runts,0giants,00inputerrors,0CRC,0frame,0overrun,0ignored,0abort0inputpacketswithdribbleconditiondetected0packetsoutput,0bytes,00outputerrors,0collisions,0interface0babbles,0latecollision,00lostcarrier,0no0outputbufferfailures,0outputbuffersswapped2Router#show Serial0isdown,lineprotocolisEncapsulationHDLC,loopbacknotset,keepaliveset(10sec)Lastinput00:00:00,output00:00:00,outputhangneverLastclearingofshowinterfacecountersneverQueueingstrategy:fifoOutputqueue0/40,0drops;inputqueue0/75,0drops5minuteinputrate1000bits/sec,2packets/sec5minuteoutputrate1000bits/sec,20packetsinput,0bytes,0noReceived0broadcasts,0runts,0giants,00inputerrors,0CRC,0frame,0overrun,0ignored,0abort0inputpacketswithdribbleconditiondetected0packetsoutput,0bytes,00outputerrors,0collisions,0interface0babbles,0latecollision,00lostcarrier,0no0outputbufferfailures,0outputbuffersswapped3Router#show Serial0isup,lineprotocolisHardwareisMTU1500bytes,BW1544Kbit,DLY1000usec,rely255/255,load1/255EncapsulationHDLC,loopbacknotset,keepaliveset(10sec)Lastinput00:00:00,output00:00:00,outputhangneverLastclearingofshowinterfacecountersneverQueueingstrategy:fifoOutputqueue0/40,0drops;inputqueue0/75,0drops5minuteinputrate1000bits/sec,2packets/sec5minuteoutputrate1000bits/sec,20packetsinput,0bytes,0noReceived0broadcasts,0runts,0giants,00inputerrors,0CRC,0frame,0overrun,0ignored,0abort0inputpacketswithdribbleconditiondetected0packetsoutput,0bytes,00outputerrors,0collisions,0interface0babbles,0latecollis