要求:
配置Telnet,要求所有网络设备均支持远程管理,密码为admin
配置Trunk,交换机之间的链路均为Trunk模式
配置VLAN,在SW2和SW3上创建相关VLAN,关联4台PC到对应的VLAN接口
配置MLS,通过SW1实现VLAN间路由
配置DHCP,使SW1可以为各个VLAN内主机分配地址信息
配置STP,使SW1成为所有VLAN的根桥,要求手动修改优先级为4096
配置OSPF,企业内网运行OSPF 1
配置缺省和NAT,在R1上配置静态缺省路由,SW1通过OSPF学习缺省路由
配置NAT,在R1上配置PAT(只需要转换四个VLAN网段)
配置PPP,R1和R2之间封装协议为PPP,使用CHAP双向认证,密码均为huawei
配置OSPF,R2、R3、R4之间运行OSPF 2
配置DNS,可以通过www.aaa.com访问HTTP服务器,通过www.bbb.com访问FTP服务器
配置ACL,在R1上配置ACL,拒绝VLAN20的主机通过浏览器访问HTTP服务器,其他流量不受影响
sys
sysn R1
int g0/0/0
ip add 192.168.12.1 24
int g0/0/1
ip add 1.0.0.2 30
int s2/0/0
ip add 12.0.0.1 24
ip route-static 0.0.0.0 0 12.0.0.2
ospf 1 router-id 1.1.1.1
default-route-advertise
a 0
network 192.168.12.1 0.0.0.0
network 1.0.0.2 0.0.0.0
acl 2000
rule 10 permit
int s2/0/0
nat outbound 2000
int s2/0/0
ppp chap user huawei
ppp chap password cipher admin
link-protocol ppp
aaa
local-user huawei password cipher admin
local-user huawei service-type ppp
int s2/0/0
ppp authentication-mode chap
user-interface vty 0 4
authentication-mode aaa
aaa
local-user zx password cipher admin
local-user zx privilege level 15
local-user zx service-type telnet terminal
sys
sysn SW1
vlan batch 10 20 30 40
int vlanif 10
ip add 192.168.10.254 24
int vlanif 20
ip add 192.168.20.254 24
int vlanif 30
ip add 192.168.30.254 24
int vlanif 40
ip add 192.168.40.254 24
int g0/0/1
port lin a
p d vlan 1
int g0/0/2
p l t
p t a vlan 10 20
int g0/0/3
p l t
p t a vlan 30 40
q
dhcp enable
int vlanif 10
dhcp select interface
dhcp server dns-list 3.0.0.1
int vlanif 20
dhcp select interface
dhcp server dns-list 3.0.0.1
int vlanif 30
dhcp select interface
dhcp server dns-list 3.0.0.1
int vlanif 40
dhcp select interface
dhcp server dns-list 3.0.0.1
ospf 1 router-id 2.2.2.2
a 0
network 192.168.10.0 0.0.0.255
network 192.168.20.0 0.0.0.255
network 192.168.30.0 0.0.0.255
network 192.168.40.0 0.0.0.255
network 192.168.12.2 0.0.0.0
stp mode stp
stp priority 4096
user-interface vty 0 4
authentication-mode aaa
aaa
local-user zx password cipher admin
local-user zx privilege level 15
local-user zx service-type telnet terminal
sys
sysn SW2
vlan batch 10 20 30 40
int g0/0/1
p l t
p t a vlan 10 20 30 40
int g0/0/2
p l t
p t a vlan 10 20 30 40
int g0/0/3
p l a
p d vlan 10
int g0/0/4
p l a
p d vlan 20
user-interface vty 0 4
authentication-mode aaa
aaa
local-user zx password cipher admin
local-user zx privilege level 15
local-user zx service-type telnet terminal
sys
sysn SW3
vlan batch 10 20 30 40
int g0/0/1
p l t
p t a vlan 10 20 30 40
int g0/0/2
p l t
p t a vlan 10 20 30 40
int g0/0/3
p l a
p d vlan 30
int g0/0/4
p l a
p d vlan 40
user-interface vty 0 4
authentication-mode aaa
aaa
local-user zx password cipher admin
local-user zx privilege level 15
local-user zx service-type telnet terminal
sys
sysna R2
int s2/0/0
ip add 12.0.0.2 24
int g0/0/0
ip add 23.0.0.1 24
int g0/0/1
ip add 24.0.0.1 24
int s2/0/0
link-protocol ppp
ppp chap user huawei
ppp chap password cipher admin
aaa
local-user huawei password cipher admin
local-user huawei service-type ppp
int s2/0/0
ppp authentication-mode chap
ospf 2
a 0
net 12.0.0.0 0.0.0.3
net 23.0.0.1 0.0.0.0
net 24.0.0.1 0.0.0.0
sys
sysn R3
vlan 100
int vlanif 100
ip add 3.0.0.254 24
int g0/0/1
ip add 23.0.0.2 24
int g0/0/0
ip add 34.0.0.1 24
int e0/0/0
p l a
p d vlan 100
ospf 2 router-id 3.3.3.3
a 0
net 3.0.0.0 0.0.0.255
net 34.0.0.0 0.0.0.255
net 23.0.0.0 0.0.0.255
sys
sysn R4
vlan 200
int vlanif 200
ip add 4.0.0.254 24
int g0/0/1
ip add 24.0.0.2 24
int g0/0/0
ip add 34.0.0.2 24
int e0/0/0
p l a
p d vlan 200
ospf 2 router-id 4.4.4.4
a 0
net 4.0.0.0 0.0.0.255
net 24.0.0.0 0.0.0.255
net 34.0.0.0 0.0.0.255
标签:g0,int,0.0,vlan,Experiment,user,ip
From: https://www.cnblogs.com/zx654042919/p/18108387