网工入门-中小型网络系统综合实验

一、实验要求

　　1.网络中有3个不同部门，均可自动获取地址

　　2.各部门可互相访问，也可访问内网服务器172.16.100.1

　　3.PC1不允许访问互联网，PC2和PC3可以访问互联网

　　4.内网服务器对外发布的地址为64.1.1.3，互联网用户可以访问这台服务器

　　5.内网服务器的域名是www.aaa.com,各PC可以通过域名访问

二、实验拓扑图

三、配置步骤

LSW3交换机操作命令：

<Huawei>system-view

[Huawei]vlan batch 20 30

[Huawei]interface GigabitEthernet 0/0/1

[Huawei-GigabitEthernet0/0/1]port link-type trunk

[Huawei-GigabitEthernet0/0/1]port trunk allow-pass vlan all

[Huawei]interface GigabitEthernet 0/0/2

[Huawei-GigabitEthernet0/0/2]port link-type access

[Huawei-GigabitEthernet0/0/2]port default vlan 20

[Huawei]interface GigabitEthernet 0/0/3

[Huawei-GigabitEthernet0/0/3]port link-type access

[Huawei-GigabitEthernet0/0/3]port default vlan 30

LSW1交换机操作命令：

 <Huawei>system-view

[Huawei]vlan batch 10 20 30 40　　//创建vlan

[Huawei]interface Vlanif 10

[Huawei-Vlanif10]ip address 192.168.10.254 255.255.255.0　　//分配IP

[Huawei]interface Vlanif 20

[Huawei-Vlanif20]ip address 192.168.20.254 255.255.255.0

[Huawei]interface Vlanif 30

[Huawei-Vlanif30]ip address 192.168.30.254 255.255.255.0

[Huawei]interface Vlanif 40

[Huawei-Vlanif40]ip address 172.16.100.254 255.255.255.0

[Huawei]dhcp enable　　//开启dhcp

[Huawei]interface Vlanif 10

[Huawei-Vlanif10]dhcp select interface

[Huawei-Vlanif10]dhcp server dns-list 172.16.100.1

[Huawei]interface Vlanif 20

[Huawei-Vlanif10]dhcp select interface

[Huawei-Vlanif10]dhcp server dns-list 172.16.100.1

[Huawei]interface Vlanif 30

[Huawei-Vlanif10]dhcp select interface

[Huawei-Vlanif10]dhcp server dns-list 172.16.100.1

[Huawei]display ip interface brief    // 检查vlan网络配置

[Huawei]interface GigabitEthernet 0/0/2

[Huawei-GigabitEthernet0/0/2]port link-type access

[Huawei-GigabitEthernet0/0/2]port default vlan 10

[Huawei]interface GigabitEthernet 0/0/3

[Huawei-GigabitEthernet0/0/3]port link-type trunk 

[Huawei-GigabitEthernet0/0/3]port trunk allow-pass vlan all

[Huawei]interface GigabitEthernet 0/0/4

[Huawei-GigabitEthernet0/0/4]port link-type access

[Huawei-GigabitEthernet0/0/4]port default vlan 40

[Huawei]vlan 100

[Huawei]interface GigabitEthernet 0/0/1

[Huawei-GigabitEthernet0/0/1]port link-type access

[Huawei-GigabitEthernet0/0/1]port default vlan 100

[Huawei]interface Vlanif 100

[Huawei-Vlanif100]ip address 10.10.10.2 24

AR1路由器操作命令：

<Huawei>system-view

[Huawei]interface GigabitEthernet 0/0/0

[Huawei-GigabitEthernet0/0/0]ip address 10.10.10.1 24

[Huawei]interface GigabitEthernet 0/0/1

[Huawei-GigabitEthernet0/0/1]ip address 64.1.1.1 24

LSW1交换机操作命令：

[Huawei]ip route-static 0.0.0.0 0.0.0.0 10.10.10.1  // 出公网路由

AR1路由器操作命令：

[Huawei]ip route-static 0.0.0.0 0.0.0.0 64.1.1.10   // 出公网路由

[Huawei]ip route-static 192.168.0.0 255.255.0.0 10.10.10.2  // 回内网路由

 [Huawei]ip route-static 172.16.100.0 255.255.255.0 10.10.10.2  // 回内网服务器路由

AR1路由器NAT上网:

[Huawei]acl 2000

[Huawei-acl-basic-2000]rule permit source 192.168.0.0 0.0.255.255

[Huawei]nat address-group 1 64.1.1.5 64.1.1.5

[Huawei]interface GigabitEthernet 0/0/1

[Huawei-GigabitEthernet0/0/1]nat outbound 2000 address-group 1

限制192.168.10.0网段出公网：

[Huawei]acl 2001

[Huawei-acl-basic-2001]rule deny source 192.168.10.0 0.0.0.255

[Huawei-acl-basic-2001]rule permit source any 

[Huawei]interface GigabitEthernet 0/0/0

[Huawei-GigabitEthernet0/0/0]traffic-filter inbound acl 2001

内网服务器映射：

[Huawei]interface GigabitEthernet 0/0/1

[Huawei-GigabitEthernet0/0/1]nat server global 64.1.1.3 inside 172.16.100.1

AR2路由器配置：

[Huawei]interface GigabitEthernet 0/0/0

[Huawei-GigabitEthernet0/0/0]ip address 64.1.1.10 24

[Huawei]interface GigabitEthernet 0/0/1

[Huawei-GigabitEthernet0/0/1]ip address 8.8.8.254 24

[Huawei]interface GigabitEthernet 0/0/2

[Huawei-GigabitEthernet0/0/2]ip address 9.9.9.254 24