大型企业网络案例

有线网络结构设计背景1.1总介绍中国平安网络，由一个总公司网络、一个分公司网络和一个对外服务区组成。其中总公司网络和分公司网络在不同的地区，总公司和分公司都有公司内部的访问的数据中心（DMZ区）；对外服务区被托管在中国电信。路由器ISP模拟运营商中国电信。2.1总公司1）Router1作为边界路由也是核心层路由器；sw1、sw2是核心层交换机；sw3、sw4是汇聚层交换机，其中SW3分别连接了总公司部门1，总公司部门2和总公司部门3；SW4分别连接了总公司部门4，总公司部门5，总公司部门6，总公司Server以及无线路由器1。2）总公司Server只能为公司内部提供服务，不对外提供服务。部门1,2,3,6均可访问内网Web，Ftp和DNS服务器，部门4只可以访问内网FTP其他的都不可以访问，部门5可以访问内网Web3.1分公司Router9是出口路由器，其中sw5、sw4是核心交换机，实现冗余架构；sw6、sw7是汇聚层交换机;其中SW6下面连接了部门1和部门2；SW7连接了部门3，部门4，Server2以及无线路由器2。内网ACL配置：部门1，2，4可以访问内网中的Web和Ftp服务器，部门3只可以访问内网的ftp服务器。4.1中国电信企业总公司网络的出口路由器router1和分公司网络的出口路由器都与ISP相连接，其中router1和ISP之间使用了ppp广域网协议，启用了chap的认真方式实现与互联网相连；R9使用帧中继技术与ISP相连。该企业的对外访问服务器托管到中国电信运营商。二、拓扑结构总体拓扑：总公司拓扑：分公司拓扑：尸ISP外网蚁即帧中继：三、知识点护1.春静态路由队2.RIP绪3.单阿区域OSP遥F4.猴EIGRP罢5.E幸IGRP非果等价负载均昆衡6工.ppp封塑装（cha头p）7.帧苏中继8宾.ACL访驶问控制影9.NAT奶地址转换果10.贩STP的配机置11匆.VLAN伟间的路由午12EI床GRP手动团汇总脊13.爸路由重分布缺14.辰默认路由侨15.日Telne衫t16默.双链路冗腿余的备份菜17.DH破CP的使用亮四、主要功武能斤部门1,2升,3,6均决可访问内网赢Web，F烤tp和DN烛S服务器。好部门4只可批以访问内网槐FTP其他毕的都不可以肿访问。车部门5可以伐访问内网W巴eb和Ft制p但不可以窗访问DNS电。蹄部门1，2秀,4可以访税问外网We葬b以及公司闲总部的We键b，Ftp马服务器。部比门3只可以亲访问公司总睛部的Ftp宴服务器。匆主要配置清言单厘分慌公司Swi风tch障7宴配置：禁(狮Switc以h#sho军wrun咽ning-挺confi驱g避Build阀ingc场onfig贞urati适on...掌Curre肯ntco握nfigu友ratio晌n:2旷096b阁ytes!替versi胸on12贱.2孩nose塔rvice楼time泼stamp逼slog芹date炕time啦msec程nose竖rvice退time符stamp惧sdeb慎ugda大tetim屯emse证c钉nose乒rvice断pass前word-爷encry凡ption!猪hostn麻ameS童witch!!!!窃ipdh渣cpex些clude秀d-add怒ress鼠192.1扒68.5.通254配ipdh彩cpex嚷clude处d-add删ress僻192.1业68.7.章254陈ipdh虽cpex愁clude重d-add倡ress磨192.1选68.8.焰254盲ipdh屿cpex既clude专d-add兰ress现192.1森68.6.恨254!爽ipdh宇cppo捷olvl火an7辨netwo弄rk19本2.168涉.7.0斯255.2旋55.25读5.0喂defau杂lt-ro截uter津192.1剑68.7.是254召dns-s缓erver绳192.拉168.8则.100档ipdh索cppo暂olvl更an8鼻netwo池rk19疫2.168猛.8.0内255.2显55.25已5.0锹defau厅lt-ro智uter定192.1抛68.8.泰254泛dns-s既erver幸192.第168.8乎.100!!千ipro谨uting!!!!!!!!!!!!!!局spann光ing-t龄reem士odep景vst!!!!!!慢inter既face胀FastE块thern睛et0/1!假inter叮face辽FastE废thern挖et0/2冠switc辉hport探acce或ssvl债an10局0斯switc帖hport竿mode拔acce察ss!耗inter闻face父FastE杠thern芹et0/3!义inter棚face莲FastE简thern播et0/4!篇inter烘face参FastE触thern哨et0/5波switc懂hport疗acce弓ssvl觉an7患switc宝hport供mode裤acce蔽ss!塘inter厚face辽FastE鸭thern运et0/6畜switc送hport辜acce佩ssvl掀an8俭switc货hport不mode枣acce镰ss!戚inter跃face社FastE浊thern狱et0/7!寸inter羡face升FastE璃thern斜et0/8!蓄inter樱face类FastE毛thern稳et0/9!轰inter旺face筐FastE胸thern幕et0/1贪0!出inter花face苦FastE貌thern对et0/1搅1!滩inter穗face防FastE慰thern下et0/1慎2!第inter请face祝FastE斧thern源et0/1临3!疑inter树face忘FastE给thern层et0/1霜4!百inter作face袜FastE羡thern缓et0/1瓶5!宜inter旋face网FastE夫thern走et0/1圈6!冈inter口face租FastE尝thern质et0/1垂7!凤inter认face匠FastE漆thern黑et0/1幕8!斗inter馋face境FastE导thern愤et0/1虾9!质inter授face籍FastE润thern牲et0/2棕0!搂inter钞face滋FastE淹thern辰et0/2弃1!沙inter交face膝FastE价thern抹et0/2锡2!润inter居face送FastE穷thern侄et0/2旷3!居inter汤face葛FastE辉thern狭et0/2镰4!足inter制face毅Gigab肥itEth跑ernet漂0/1!堤inter若face丛Gigab萍itEth刮ernet绪0/2!拢inter无face宏Vlan1着noip钉addr伪ess怨shutd遥own!课inter碧face涌Vlan7桃ipad名dress万192.三168.7去.254伸255.2绳55.25茫5.0!拖inter风face盾Vlan8剩ipad级dress慕192.蔬168.8聚.254肤255.2据55.25满5.0!阁inter仍face刚Vlan1逐00陪ipad催dress六123.秃123.2阔.125构5.255育.255.杨0!西route区reig替rp1绪dista亦ncee让igrp纪9015端0或redis葡tribu胳teos扩pf1燕metri偿c100蛮0100胖255庭1150岭0驱auto-赠summa殖ry!奖route表rosp隙f1窄log-a调djace木ncy-c否hange泳s架netwo督rk19怒2.168佩.6.0笋洒.255酷area冲0剖netwo龙rk19挤2.168拴.7.0章裙.255蛇area荐0身netwo模rk19风2.168跃.8.0系伴.255铸area贡0!榨ipcl图assle誓ss!电ipfl颜ow-ex姜port透versi崇on9!!!!!!!处line勉con0!鸭line池aux0!矿line抚vty0篮4login!!!end针总公司sw学4脑Switc择h#sho布wrun呈Build郑ingc概onfig还urati撒on...共Curre霉ntco备nfigu骑ratio驼n:2那816b暖ytes!匙versi谷on12工.2花nose续rvice剪time锻stamp察slog伏date病time勺msec桨nose夫rvice嫂time歪stamp与sdeb扇ugda哑tetim何emse态c奖nose泉rvice陷pass拔word-灿encry偏ption!茂hostn粒ameS临witch!!!!盆ipdh累cpex紧clude允d-add早ress纠192.1抽68.4.测254夕ipdh关cpex微clude炕d-add厌ress用192.1惹68.5.茄254季ipdh摘cpex薄clude守d-add戒ress超192.1师68.6.疮254基ipdh考cpex胜clude友d-add蕉ress第192.1沫68.7.押254!政ipdh戒cppo顾olvl妇an5朽netwo顺rk19踢2.168跨.5.0阴255.2她55.25记5.0存defau庙lt-ro拔uter鬼192.1管68.5.可254浊dns-s辆erver侧192.懒168.7窄.100深ipdh沾cppo绘olvl贞an6流netwo猾rk19界2.168婚.6.0锡255.2润55.25鲁5.0滨defau添lt-ro堵uter智192.1豪68.6.泄254菜dns-s别erver腿192.熊168.7拔.100堡ipdh挺cppo窗olvl谢an7蹈netwo婆rk19叛2.168垂.7.0傲255.2拍55.25四5.0货defau帖lt-ro日uter兼192.1荒68.7.祥254际dns-s马erver阵192.颤168.7突.100!!亲ipro定uting!!!!!!!!!!!!!!颈spann兔ing-t笨reem胞odep载vst!!!!!!荐inter冷face智FastE练thern诸et0/1陈nosw泰itchp敏ort视ipad嫁dress层192.司168.1熊1.22结55.25栽5.255山.0瓦duple畅xaut佛o恼speed略auto!剧inter订face慈FastE闸thern蜜et0/2!耻inter男face颗FastE孟thern觉et0/3!表inter蒸face钻FastE孟thern贼et0/4!临inter鲜face土FastE朋thern亦et0/5财switc贯hport嘴acce乖ssvl丑an5附switc闪hport胞mode寸acce碧ss!盘inter坟face捷FastE捷thern则et0/6冲switc葛hport把acce摧ssvl巨an6震switc燥hport婶mode斧acce划ss!坚inter础face封FastE追thern迹et0/7咽switc歼hport兰acce旺ssvl跟an7绳switc喘hport砖mode降acce捉ss!限inter翠face街FastE榜thern浑et0/8!汪inter夹face胀FastE淋thern蜘et0/9!难inter取face窑FastE把thern华et0/1返0!泰inter沾face庸FastE骂thern缴et0/1缺1!挡inter莲face喊FastE妹thern献et0/1榨2!己inter届face甚FastE啊thern岁et0/1着3!匹inter统face牌FastE绝thern壳et0/1效4!笨inter嘴face妖FastE尿thern圣et0/1揉5!赵inter躺face铸FastE静thern软et0/1权6!蝶inter霸face薪FastE味thern正et0/1糕7!穗inter兼face尾FastE奔thern脂et0/1弯8!让inter皮face远FastE率thern堡et0/1掩9!宋inter稻face茧FastE该thern辉et0/2皮0!克inter谁face圈FastE鼠thern敌et0/2佛1!昌inter背face份FastE污thern竭et0/2测2!辣inter局face唉FastE扭thern课et0/2宽3!乒inter徐face纺FastE背thern冒et0/2掏4更nosw需itchp镜ort晚ipad末dress讨192.炮168.1夫.225肌5.255萝.255.喉0帽duple本xaut股o边speed稿auto!爸inter轮face疫Gigab喂itEth铲ernet越0/1!贴inter怎face脉Gigab矮itEth挤ernet垦0/2!禽inter贴face搭Vlan1猫noip蹈addr醋ess梁shutd盗own!里inter馅face颤Vlan5活ipad渡dress黎192.毙168.5吹.254漫255.2划55.25弓5.0!盐inter醒face修Vlan6雁ipad侍dress烈192.锋168.6汉.254狮255.2祸55.25啄5.0!堵inter妄face酿Vlan7扒ipad画dress闸192.谋168.7盯.254倡255.2绸55.25洋5.0惑ipac点cess-内group刑100批out!泥route径rrip醋versi厌on2镰netwo赠rk19公2.168贱.1.0功netwo敬rk19尽2.168贸.5.0尘netwo嗽rk19键2.168赵.6.0书netwo税rk19巡2.168货.7.0脏netwo争rk19唤2.168枝.11.0!贯ipcl寿assle具ss!恳ipfl茶ow-ex颈port线versi访on9!!捞acces元s-lis探t100巡perm龄ittc陆pany视host威192.郊168.7盒.100斜eqww沙w联acces草s-lis沾t100块perm摘ittc愤pany锻host衬192.度168.7纹.100负eqft窜p踪acces描s-lis美t100伍perm袋itud葵p192必.168.淋2.00寄.0.0.骆255h棒ost1租92.16疗紧00eq泉doma更in置acces挖s-lis恢t100蜻perm叙itud欺p192榨.168.新3.00产.0.0.裂255h钳ost1莫92.16兼摇00eq赛doma粱in解acces忠s-lis烈t100饰perm毫itud猾p192肠.168.地4.00承.0.0.体255h云ost1惩92.16镇华00eq撤doma犹in级acces普s-lis认t100万perm梅itud念p192衬.168.圈7.00颂.0.0.异255h赔ost1陡92.16闲久00eq罪doma里in练acces排s-lis蜂t100列deny偏tcp岩anyh扶ost1挣92.16滚宵00仍acces佣s-lis键t100柔deny迟udp硬anyh心ost1植92.16纳施00男acces派s-lis惯t100战perm择itip伪any总any!!!!!疲line单con0!诞line统aux0!候line城vty0去4login!!!end怎总公司SW丙3洁Switc吗h#sho吃wrun扛Build鸭ingc压onfig添urati闻on...列Curre只ntco胸nfigu浮ratio屡n:1舅791b辛ytes!厨versi最on12老.2廊nose显rvice就time柳stamp篮slog捆date俩time难msec年nose诊rvice藏time份stamp零sdeb故ugda夕tetim刑emse歼c耕nose府rvice尿pass率word-虎encry泡ption!赖hostn汤ameS进witch!!!!!!!套ipro基uting!!!!!!!!!!!!!!条spann诉ing-t陕reem怒odep裁vst!!!!!!创inter歌face哲FastE骡thern海et0/1氏nosw常itchp萌ort谅ipad推dress女192.就168.1议0.22骂55.25触5.255乞.0象duple疑xaut范o户speed喜auto!殖inter贩face遮FastE应thern钞et0/2推switc稼hport锡acce夹ssvl烈an2抓switc坝hport衣mode犁acce菠ss!烧inter袋face激FastE爬thern泥et0/3鸟switc号hport待acce宏ssvl勒an3垮switc蜡hport万mode隙acce呼ss!行inter抓face类FastE救thern舱et0/4册switc金hport除acce凉ssvl诸an4厦switc戒hport分mode杀acce艳ss!何inter牵face喉FastE益thern京et0/5!钓inter扣face久FastE撤thern醉et0/6!驾inter彻face缘FastE期thern导et0/7!巴inter音face蝶FastE有thern液et0/8!院inter氏face篇FastE忙thern壤et0/9!帝inter央face倍FastE晌thern蛮et0/1堤0!介inter铲face眼FastE启thern初et0/1园1!浅inter探face预FastE骨thern朗et0/1恨2!飘inter沃face暂FastE躲thern劈et0/1瑞3!悲inter岁face姜FastE扶thern细et0/1肯4!耳inter拜face誓FastE宿thern授et0/1巡5!虽inter槽face谦FastE见thern胁et0/1轰6!良inter逐face辅FastE笛thern绕et0/1贺7!归inter出face森FastE纯thern命et0/1中8!消inter肝face烦FastE举thern膨et0/1诸9!历inter侮face侵FastE吓thern偶et0/2纹0!译inter取face鸣FastE各thern爹et0/2牢1!脚inter杨face泡FastE马thern口et0/2物2!提inter看face榴FastE愧thern烟et0/2豆3!狱inter困face娱FastE捆thern届et0/2咬4式nosw票itchp核ort注ipad据dress予192.火168.1枝.125杠5.255洞.255.贪0陪duple刑xaut熟o久speed凤auto!筑inter淹face乱Gigab巴itEth汉ernet怪0/1!的inter严face店Gigab筛itEth候ernet怖0/2!药inter东face叉Vlan1容noip爬addr借ess狸shutd握own!哑inter缴face交Vlan2遇ipad睬dress坚192.诵168.2扇.254产255.2龙55.25硬5.0!眨inter符face傲Vlan3促ipad弟dress裁192.趋168.3蹦.254笋255.2战55.25乞5.0!工inter死face赶Vlan4滥ipad栋dress根192.辉168.4材.254鞠255.2日55.25蝶5.0!道route该rrip胶versi练on2因netwo绞rk19充2.168肚.1.0紧netwo蜜rk19彼2.168概.2.0功netwo祝rk19宽2.168怖.3.0韵netwo肿rk19干2.168瞧.4.0怕netwo堵rk19垄2.168亏.5.0团netwo对rk19惠2.168析.6.0汪netwo挪rk19现2.168捧.10.0!识ipcl模assle画ss!程ipfl态ow-ex惰port壶versi凉on9!!!!!!!舰line级con0!刑line详aux0!配line恼vty0翁4login!!!end总公司R1歌R1#sh钟owru译n满Build络ingc妇onfig辈urati旷on...宜Curre打ntco炭nfigu启ratio也n:1回575b龙ytes!裹versi垦on12皆.4流nose吗rvice拜time福stamp岭slog贷date兵time浪msec焦nose阵rvice遇time棚stamp给sdeb稳ugda的tetim黄emse捡c董nose叫rvice涨pass本word-绳encry悔ption!怎hostn护ameR也1!!!!!!!!窃noip骄cef硬noip渔v6ce蒸f!!!仔usern辛ameI颠SPpa汤sswor睡d01传23!!!!!!!!!!灰spann句ing-t姑reem框odep瘦vst!!!!!!栗inter吸face音FastE睛thern舰et0/0迎ipad虹dress悬172.随16.11男.125沟5.255顺.255.杜0蚂ipna蚂tins起ide膊duple怕xaut贞o掌speed峰auto!侄inter方face投FastE滨thern普et0/1疤ipad嘴dress林172.北16.22辞.125汉5.255弯.255.等0竿ipna障tins要ide择duple滚xaut布o捐speed今auto!境inter变face带Seria车l0/3/修0怎ipad保dress合63.5辉.1.1租255.2喂55.25卷5.0改encap懂sulat最ionp卖pp闯pppa澡uthen话ticat抄ionc用hap佳ipna域tout帜side捆clock永rate谋2000盾000!绒inter晌face狱Seria功l0/3/缴1睡noip英addr投ess沸clock咸rate害2000堤000选shutd梨own!游inter叠face仪Vlan1袜noip庆addr哈ess寻shutd熔own!控route磨rrip末versi碧on2目netwo轮rk63而.0.0.鱼0芳netwo牢rk17伏2.16.腰0.0慈netwo浸rk19鸽2.168脆.1.0匆netwo厘rk19老2.168敲.2.0千netwo谋rk19奏2.168浊.3.0搂netwo狂rk19菌2.168谷.4.0拾netwo热rk19丰2.168染.5.0猾netwo禾rk19裂2.168高.6.0收netwo普rk19复2.168菌.7.0张netwo堤rk19著2.168阀.10.0制netwo槐rk19罚2.168刑.11.0!爽ipna喇tpoo溜labc膏63.5客.1.10宾63.5寒.1.50欢netm订ask2陡55.25滴5.255吧.0愉ipna套tins絮ides恶ource雹list冠10p捡oola禁bc躲ipna茶tins袖ides裤ource捐stat近ic19穷2.168玻.7.10驰063.曾准00群ipcl痛assle植ss朽ipro量ute0旱.0.0.音00.0临.0.0致63.5.帝1.2!再ipfl戚ow-ex裂port触versi语on9!!猎acces云s-lis触t10龟permi售t192源.168.吐2.00撞.0.0.杯255品acces遣s-lis傍t10返permi漆t192绵.168.边3.00毫.0.0.询255贿acces以s-lis育t10撤permi方t192踢.168.鉴4.00义.0.0.广255航acces膊s-lis份t10旋permi定t192滴.168.白5.00崖.0.0.喊255榆acces闪s-lis争t10赌permi愈t192值.168.馆6.00塔.0.0.副255授acces惹s-lis泼t10袍permi纳t192炼.168.阿7.00隆.0.0.果255!往nocd但prun!!!!!阵line新con0!宽line俭aux0!奉line甩vty0读4规passw咽ordc疾iscologin!!!end晃分公司SW货6店Switc惜h#sho出wrun吉ning-唐confi乞g兄Build槽ingc辜onfig功urati扩on...前Curre承ntco券nfigu妥ratio际n:1张429b父ytes!粱versi火on12疼.2看nose暑rvice飘time丙stamp希slog信date馅time昼msec娇nose兴rvice傻time补stamp休sdeb雕ugda祝tetim倦emse浑c熊nose监rvice论pass绕word-命encry宰ption!昂hostn故ameS奶witch!!!!!!!装ipro岩uting!!!!!!!!!!!!!!拆spann绢ing-t霉reem批odep截vst!!!!!!谣inter倡face静FastE查thern票et0/1取switc里hport恐acce其ssvl挡an10桑0径switc山hport当mode正acce津ss!种inter每face楼FastE雾thern找et0/2!等inter服face硬FastE飘thern崖et0/3!拘inter耻face遵FastE辱thern甜et0/4浸nosw雾itchp祥ort杆ipad滴dress藏192.崭168.4栽.225磨5.255慌.255.柿0秧duple旺xaut秘o股speed哲auto!厕inter爽face挤FastE果thern扯et0/5!须inter蹈face阔FastE询thern仗et0/6!摸inter躺face屯FastE杠thern扣et0/7!谁inter窄face愿FastE蠢thern呢et0/8!阅inter郑face爷FastE教thern泻et0/9!紧inter乐face住FastE拣thern蛾et0/1伍0!音inter更face俗FastE承thern策et0/1名1!是inter就face甚FastE挨thern凝et0/1嗓2!另inter开face理FastE松thern蒜et0/1英3!衡inter辟face樱FastE驼thern笔et0/1雾4!技inter州face为FastE父thern灯et0/1炸5!诚inter撑face嫌FastE腹thern素et0/1立6!寨inter动face寒FastE倚thern砌et0/1贿7!客inter慌face拒FastE真thern均et0/1央8!咽inter饲face村FastE搞thern虾et0/1劲9!风inter劈face拼FastE嫁thern志et0/2自0!佣inter顷face钓FastE晴thern鲁et0/2趴1!柔inter石face磁FastE墙thern承et0/2获2!控inter碎face种FastE竿thern尤et0/2背3!晚inter深face皇FastE轰thern规et0/2庙4!斜inter添face泳Gigab旬itEth雾ernet果0/1!评inter岭face盏Gigab香itEth伐ernet狭0/2!睛inter做face团Vlan1治noip狸addr拖ess股shutd皱own!凯inter琴face君Vlan1浅00器ipad堂dress涂123.匀123.1坟.125国5.255恳.255.鞠0!夕route四reig旧rp1江dista捷ncee创igrp丘9015虾0灭redis筋tribu吗teos妻pf1好metri扇c100滔0100未255摔1150泻0碗auto-竭summa教ry!户ipcl改assle忠ss!牧ipfl左ow-ex承port锐versi宁on9!!!!!!!必line怀con0!赖line愉aux0!队line折vty0服4login!!!end分公司R8材Route饲r#sho啦wrun牲Build膨ingc拼onfig猫urati要on...沫Curre弄ntco势nfigu棉ratio戚n:7榆53by李tes!超versi懂on12默.4特nose淘rvice冷time版stamp暴slog棕date悠time让msec挡nose泛rvice避time言stamp内sdeb却ugda链tetim扛emse储c舍nose建rvice纤pass声word-裤encry录ption!盯hostn释ameR鹅outer!!!!!!!!离ipce永f稠noip任v6ce梁f!!!!!!!!!!!!促spann辛ing-t句reem雹odep厌vst!!!!!!犁inter橡face乡FastE惊thern卵et0/0喂ipad录dress就192.乞168.4培.125勤5.255颂.255.寺0壁duple琴xaut见o渐speed有auto!在inter赠face枪FastE培thern耗et0/1它noip伞addr压ess束duple悟xaut楚o昆speed陵auto!卷inter菜face门FastE炭thern瓣et0/1漏.1阀encap赏sulat史iond勉ot1Q腥6溜ipad底dress崖192.愉168.6据.254怕255.2筒55.25圾5.0!君inter伤face顿FastE浇thern地et0/1霸.2估encap铅sulat棒iond像ot1Q倾7元ipad规dress限192.傻168.5涉.254广255.2臭55.25额5.0!呈inter晋face厉Vlan1解noip品addr更ess魂shutd筒own!响ipcl做assle拣ss!陶ipfl茅ow-ex佣port刚versi希on9!!!泪nocd苏prun!!!!!拘line育con0!石line移aux0!滔line记vty0急4login!!!end送2.RIP份配置（Sw尼itch滔1,2,3腊,4和Ro猴ute1）势在Swit据ch4上R帝ip配置伯步骤：遥#随ipro拐uting拼(conf妻ig)#雀route乌rrip写枣灵#伞versi尿on2镰不品#肃netwo丧rk19没2.168略.1.0茅#在netwo功rk19霸2.168驱.5.0伟#粗netwo聚rk19古2.168流.6.0熔#砌netwo混rk19抖2.168许.7.0妥篮救#昆netwo卧rk19模2.168门.11.0搜Switc秤h1,2发,3,4和悠Route绑1配置步骤剩和Swit矿ch配置类搁似李3.Rou从te1N粗AT配置帐(con垃fig)#爬intf炼0/0织留#i府pnat怒insi舱de占雕#n光oshu野t迎(conf揪ig)#i部ntf0柴/1已取#i扫pnat申insi届de顶盒#n劫oshu仁t改(conf题ig)#i歉nts0斯/0/0贡繁#i曲pnat宗outs懂ide宋绪#n租ossh央ut枪(conf码ig)#东箭acces麻s-lis凯t10脂permi绝t192冠.168.末2.00镇.0.0.棉255朝#际acces总s-lis处t10丧permi怨t192誉.168.弊3.00害.0.0.斩255伏#垒acces舍s-lis丘t10港permi脱t192竟.168.再4.00绣.0.0.树255栗#呼acces桌s-lis贵t10是permi近t192向.168.社5.00厌.0.0.饶255混#常acces央s-lis报t10敢permi俯t192德.168.造6.00蓄.0.0.等255洒#溜acces猴s-lis性t10肿permi侮t192丈.168.穗7.00材.0.0.蚀255糊(conf梨ig)#合泉ipna禁tpoo片labc疼63.5谜.1.10岭63.5攻.1.50腊netm灯ask2亮55.25恶5.255畜.0弃(conf畜ig)#策绢ipna丈tins钳ides薪ource对list行10p扑oola眠bc蜂为服务器静袜态映射一个宏静态的公网当地址：窄(conf指ig)#临饰ipna炉tins此ides孤ource矿stat杠ic19缩2.168童.7.10梅063.酒丑00么静态路由：键效(conf锹ig)#膊累ipro邮ute0押.0.0.源00.0见.0.0卵63.5.示1.2宫4.PPP宣（chap匙）誉配置厉ISP的P厉PP配置：或销(conf扶ig)#激hostn绩ameI代SP绒死耽#崇usern木ameR凉1pas秀sword盗012揭3程(绑confi搭g)#告输inter扮face狼Seria疑l0/0/己0拐#英眠i愁padd疲ress坡63.5.附1.22誉55.25搭5.255嫩.0部迟律盒#寿弱encap理sulat教ionp彼pp像#叶逼pppa肯uthen嚷ticat坊ionc验hap羽对应的总公势司出口路由缠器R1P搁PP配置：谷(conf肌ig)#妈hostn拘ame集R1体彼陕#敢usern借ame沿ISP耐pass春word仁0123巩(霉confi图g)#秋孟inter估face柜Seria歇l0/0/蛋0过#饮默i碑padd持ress声63.5.纠1.学1缩255.配255.2错55.0胞#cloc咬krat计e640侵00倚喷颗五#腿长encap没sulat行ionp沫pp普#咳饺pppa除uthen纪ticat历ionc仔hap楼5.ACL滋配置拖内网配置需好求:惕1.接入层额共有6个部步门：分别属拣于VLA舰N2,3抵,4,5,恶6,7吩2.接入层回ACL配置朝：纪部门1何,2,3,填6均可访问蛮内网Web忽，Ftp和虚DNS服务敢器掌部门4嘱只可以访问册内网FTP劝其他的都不拌可以访问些部门5毁可以访问内叉网Web和禾Ftp但不抵可以访问D招NS灾也就是垫不能访问外适网。额由于内网服宫务器在VL电AN7上因管此，在S仰witch搬4上配置病ACL幅(conf狭ig)#舰把acces宴s-lis欲t100筛perm招ittc柜pany牧host瓶192.贞168.7饭.100蜻eqww跑w幼#踏acces眼s-lis沟t100盲perm由ittc坑pany克host局192.壤168.7硬.100岸eqft半p黄#伤acces纪s-lis骑t100螺perm嘱itud因p192堡.168.番2.00邪.0.0.前255h豆ost1第92.16搜滥00eq严doma疏in抓#沸acces寨s-lis塌t100跳perm慨itud挨p192盖.168.步3.00叫.0.0.邪255h蜓ost1寇92.16渡森00eq御doma坐in蛇#颗acces己s-lis背t100玩perm牛itud效p192语.168.序4.00案.0.0.壁255h胁ost1胆92.16遥猾00eq桃doma品in喜#说acces麦s-lis躺t100撒perm层itud聪p192段.168.胃7.00培.0.0.续255h姐ost1丛92.16忘各00eq稠doma乡in侮#秃acces削s-lis杂t100遗deny细tcp颈anyh蛛ost1析92.16候辛00肢#竭acces丽s-lis户t100湿deny会udp歌anyh骆ost1龟92.16箩仓00枝#帜acces日s-lis解t100牙perm红itip示any乒any夜（conf池ig客）缸#int驶vlan晋7司侧茫#ip作acc缝100o校ut斧肿在汇聚层把，以及分公屋司的网络上病均配置有A低CL，配置朵原理和此类射似韵6.帧中湾继配置（配纷置在ISP刚与分公司的过出口路由器董上）狂ISP上帧厘中继配置娘(conf灰ig)#短inter款face恢Seria猜l0/2/致0捐#何ipa苗ddres舟s63.央爸255.垒255.2扑55.0咽#班enca喘psula藏tion绿frame鲁-rela楚yiet唤f序#fra草mapi贺p63.糕兼409谁b奉#豪cloc牢krat蛇e640刘00洪#nos纹hut改分公司上的缺帧中继配置聚：投(conf至ig)#会inter目face迅Seria俩l0/0/骨0界#西ipad久dress某63.5说.2.1贺255.2疯55.25风5.0惠扭莲#就encap母sulat督ionf困rame-巨relay竖ietf撑#fra刃mapi杨p63.紫陷904彼b冻#阀cloc帐krat著e640币00钱#nos钩hut午7.EIG馒RP配置和姑EIGRP首非等价负载奉均衡,以及贴手动汇总南任在外网和分票公司的核心猎层均配置有毫Eigrp韵协议闲外网的E辛igrp协裙议配置：牲外网R3配斤置：比（conf藏ig斩）种#袭inter泡face角FastE障thern冒et0/0语#槐ipad辫dress鼓151.钟151.2导.125鹊5.255蚀.255.埋0矿#nos竭hut敬（conf脑ig默）烟#方inter抬face宪Seria煎l0/0/黄0阶#贡ipa季ddres月s151骑.151.拳1.22婚55.25袜5.255争.0赴#cloc齐krat街e640惠00面#nos漠hut牵(conf妨igt)#抚route派reig盟rp10舍0骡凯#挨netwo喝rk15雪1.151转.1.0章辨.255谎辟#塘netwo寿rk15第1.151亮.2.0欠味.255绍R4配置扰：嚼（conf吵ig伪）发#隆inter扇face搁FastE哪thern封et0/0膊#导ipad纽dress拉131.替131.2圣55.6齐255.2撤55.25旧5.252撕#nos波hut束（conf歪ig张）章#裤inter免face上Seria省l0/0/稻0衡#武ipad萍dress番131.援131.2饥55.13宾255.航255.2柔55.25币2荷#cloc险krat洲e640杏00壤#nos汽hut希（conf矿ig篮）宴#酱inter狗face寄Seria辣l0/0/冲1广#雀ipad筐dress夫151.释151.1泉.125虾5.255糊.255.显0亭#cloc顶krat疯e640暴00镰#nos弓hut泪(conf泡ig)#亦樱route错reig候rp10俊0黑#拿redi享strib闲utes晋tatic金metr雨ic10古0010既0255喘115袖00饮偿//路由重腰分布恨#温netw该ork1影51.15适许0.0.厕0.255角#躲netw颈ork1酸31.13悦1.255陪.120趁.0.0.般3婚#业netw巧ork1勤31.13向1.25.五40.0朝.0.3#exit损(conf剥ig)#逢位route坟reig伟rp10劫0始优#v兴arica肥nce2托升//启用负漂载均衡随爆#ex服it骄(conf洲ig)#幼怒ipde晃fault世-netw决ork1殖51.15键巾晌//定义默樱认网络指向近151.1碗51.0.哲0洁#浑ipro浆ute1羡51.15凤零255.妈255.0乓.015鹿1.151析.1.2膛桥//默认路脖由#exitR5配置：筐（conf阴ig闲）泪#车inter忽face谣Seria猪l0/0/捎0裳#爸ipa融ddres晕s131茧.131.显255.1构0255屿.255.舰255.2锈52痛#nos校hut批（conf魔ig侄）鸭#伸inter文face厚Seria哲l0/0/威1唯#姜ipad远dress报131.草131.2扮55.14些255.览255.2熟55.25托2惹#cloc蔽krat岩e640针00江#nos卧hut甜（conf拼ig归）坐#rout悼eeig推rp10废0枕舍竹#net司131.1常31.0.樱0碧锄喜#exitR6配置：货（conf三ig利）霜#球inter悄face掏FastE晒thern如et0/0禁#感ipa老ddres景s131祝.131.耍255.5苗255.抚255.2摊55.25绿2息#nos榴hut谦（conf识ig礼）烦#迹inter岗face通Seria页l猛0/3/1泼#胆ipa排ddres白s131责.131.华255.2厕255.誉255.2祸55.25输2青#cloc腹krat惭e640姐00俊#nos配hut汪（conf遥ig叠）哄#估inter明face统Seria辰l0/俱3/0酱#洒ipa晨ddres因s131枪.131.任255.9法255.勺255.2砍55.25点2陆#cloc穗krat努e640闪00野#nos杠hut另（conf街ig割）盟#钩route巷reig易rp10垮0演#冠netwo沸rk13漠1.131惜.0.0R7配置：平（conf轰ig言）叮#瑞inter菠face引Seria门l0/隔3剂/核1英#辣ipad狸dress孙172.钞16.25肃5.12咐55.25从5.255应.0查#cloc孕krat傍e640浙00泼#nos郑hut我（conf便ig撒）斑#啊inter算face低Seria涨l0/蜘3阅/胸0沟#扰ips胃ummar希y-add险ress党eigrp净100虽172.1童远255.佩255.0凡.010仿//手动徐汇总Ei径grp中的特172.1膀穷的网段租#cloc周krat弃e640趋00示#nos拳hut怕（conf序ig能）因#叼route倡reig休rp10寿0厅#橡netw势ork1辆31.13慎1.255材.00.锻桐#农netw电ork1头72.16流.0.0头#垃noau吨to-su帆mmary#exit革8.OSP蹲F配置走osp亦f配置在分胃公司的汇聚狗层神判分公司Sw堵7OSP感F配置：舞窃（conf殃ig）#v负lan7巧诱测芬#ex烧（conf制ig）#v哄lan8佣伯网#班ex蔽（conf书ig询）劲#int庄vlan奶7唯豆黑#ipa闷dd19票2.168们.7.25将4255湖.255.靠255.0葛诚壳#exi钓t悔（conf鼓ig刘）辽#int结vlan葛8坝协诊#ipa始dd19南2.168蝶.8.25搁4255史.255.内255.0作柔午#exi打t炸（conf滑ig太）恋#扯route狼rosp坊f1响#侧netw因ork1陕92.16于绵0.0.普0.255淋area员0予歇#江netwo尊rk19支2.168续.7.0荡魔.255于area辆0曲导#篇netwo锋rk19陵2.168爷.8.0栗年.255郑area窄0垃同样在R0厕，Sw6,央Sw7上配稳置和此类似耗。穷9.路由重泻分布烦路由重分布蜻配置在分公这司汇聚层，历将OSPF踪的路由分布久到Eigr针p中去击Sw7配置饶：喂(conf导ig)#侮route宁reig气rp1句#朽dista旬ncee摩igrp婚9015不0朽浮#模redis欺tribu酷teos芳pf1醋metri厚c100农0100代255害1150丢0痒Sw6配置齿：金(conf互ig)#榜route冲reig热rp1常#恋dista宁ncee灭igrp待9015蚁0愿殊#夹redis纽tribu阵teos肌pf1母metri行c100浓0100奇255三1150厚0披10.三层珠交换机ST款P配置贪配置在分公屿司的汇聚层旋Sw4,猎5,6,7械交换机上吃Sw4配置赞：遍(conf骗ig)#声vlan研100烧辈#e辣x矮(conf醋ig)#露inter缸face标FastE姻thern旦et0/1原手#裹switc咳hport践mode缺acce金ss棉#方swit殃chpor则tacc秃essv壁lan1较00松#nos搅hut恒(conf责ig)#i领ntvl吩an10影0面升#孔ipa停ddres诱s123彼.123.羊1.12势55.25控5.255寺.0侨珠#e系xit碎(conf记ig)#s父pa滔nning肯-tree机mp轮//启用生剩成树协议焦Sw5,概6,7配置族和Sw4配鸦置一样，同萌样按照Sw殊4的配置就盯可晒11.DH清CP的配置绸DH怜CP配置在掀总公司和分绵公司的汇聚驰层透以总公灿司的Sw4械为例配置：溜（conf跨ig悲）凳#济ipdh抹cppo乳olvl汇an5斥嗓恳#驰域netwo到rk19罢2.168形.5.0孟255.2嘴55.25绣5.0垮#规defa粱ult-r掉outer站192.笼168.5饿.254浮#分dns-稿serve锡r192急.168.体7.100喉（conf词ig苹）辉#宴ipdh喇cppo盗olvl谢an6摇#攀netw派o