路由与交换实习实验报告参考_交换路由实验报告

2020-02-26 实习报告下载本文

路由与交换实习实验报告参考由刀豆文库小编整理，希望给你工作、学习、生活带来方便，猜你可能喜欢“交换路由实验报告”。

实验报告

【实验网络拓扑结构】

【实验目的】

1.实现校园网网络连通

1)利用静态路由实现汇聚交换机和路由器与核心路由器间连通

2)利用rip实现内部汇聚交换机与核心路由器间连通

3)利用ospf实现汇聚路由器与核心路由器连通

4)通过设置单臂路由使教学楼1和教学楼2能互相连通

5)对学生宿舍楼和教学楼分别划分vlan 2.在核心路由器上实现nat转换，使内部网络能访问internet 3.设置标准acl规则：禁止外部用户访问内部网络

4.设置扩展acl规则：仅允许内部用户访问数据中心的80,21端口 6.在核心路由与出口路由间运用ppp协议配置

最后要求将检测结果放入一个WORD文档中，文件名为：学号-大作业.DOC中

给出网络互通的效果，将PING截图

在各网络设备上，用SHOW RUN命令

对交换机，还要求SHOW VLAN，show int ip switchport 对路由器，还要求SHOW IP ROUTE

对NAT，要求用PING –T，及DEBUG IP NAT 对ACL，要求检测相关口或VLAN的ACL表，SHOW IP INT 端口号

【实验中运用的知识点】

1）静态路由 2）Rip 3）Ospf 4）nat转换

5）标准访问控制列表规则 6）扩展访问控制列表规则 7）划分vlan 8）单臂路由

9）广域网协议ppp 【实验配置步骤】

第一部分配置内部网络连通

注意：配置中省略了各端口的ip配置，相信端口ip可以从拓扑图中反应 1）接入交换机1配置划分vlan Switch(config)#int fa0/2 Switch(config-if)#switchport acce vlan Switch(config-if)#switchport acce vlan 2 Switch(config)#int fa0/3 Switch(config-if)#switchport acce vlan 3 Switch(config)#int fa0/1 Switch(config-if)#switchport trunk encapsulation dot1q（2960等交换机只支持802.1q协议，这里忽略）

Switch(config-if)#switchport mode trunk

Switch(config-if)#switchport trunk allowed vlan all

Switch(config-if)#exit 2）汇聚路由器配置设置单臂路由

Router(config)#interface fa0/0.1配置子接口这是配置单臂路由的关键，这个接口是个逻辑接口，并不是实际存在的物理接口，但是功能却和物理接口是一样的。

Router(config-subif)#encapsulation dot1q 2 为这个接口配置802.1Q协议，最后面的 2 是vlan 号，这也是关键部分

Router(config-subif)#ip addre 192.168.2.254 255.255.255.0 为该接口划分ip地址。

Router(config-subif)#exit

Router(config)#interface fa0/0.2

Router(config-subif)#encapsulation dot1q 3.Router(config-subif)#ip addre 192.168.3.254 255.255.255.0 Router(config-subif)#end 设置ospf Router(config)#router ospf 100 Router(config-router)#network 192.168.3.0 0.0.0.255 area 0 Router(config-router)#network 192.168.4.0 0.0.0.255 area 0 设置静态路由

Router(config)#ip route 0.0.0.0 0.0.0.0 192.168.4.101 3）接入交换机2配置创建vlan4 vlan5 Switch(config)#int vlan4 Switch(config)#int vlan5 Switch(config)#int fa0/2 Switch(config-if)#switchport acce vlan 4 Switch(config)#int fa0/3 Switch(config-if)#switchport acce vlan 5 4）汇聚交换机配置

为vlan4和vlan5设置svi Switch(config)#int vlan 4 Switch(config-if)#ip addre 172.16.2.254 Switch(config)#int vlan 5 Switch(config-if)#ip addre 172.16.3.254 设置trunk Switch(config)#int fa0/1 Switch(config-if)#switchport mode trunk 设置rip Switch(config)#router rip Switch(config-router)#network 172.16.0.0 设置静态路由

Router(config)#ip route 0.0.0.0 0.0.0.0 172.16.4.101 5）核心路由器配置设置静态路由

Router(config)#ip route 0.0.0.0 0.0.0.0 192.168.4.100 Router(config)#ip route 0.0.0.0 0.0.0.0 172.16.4.100 设置rip Router(config)#router rip Router(config-router)#network 192.168.4.0 Router(config-router)#network 172.16.0.0 设置ospf Router(config)#router ospf 100 Router(config-router)#network 192.168.4.0 0.0.0.255 area 0

6）汇聚交换机2配置设置静态路由

Switch(config)#ip route 0.0.0.0 0.0.0.0 10.1.2.101 至此，内部网络均能互相连通，接下来我们先配置nat使内网可以连通外网

第二部分设置nat转换，使内部用户能访问外部网络

核心路由器（nat）配置 Router(config)#int fa0/0 Router(config-if)#ip nat inside //将该接口标记为内部接口 Router(config)#int fa1/0 Router(config-if)#ip nat inside //将该接口标记为内部接口 Router(config)#int fa7/0

//将该接口标记为内部接口 Router(config-if)#ip nat inside Router(config)#int se2/0 Router(config-if)#ip nat outside //将该接口标记为外部接口 Router(config)#acce-list 10 permit 192.168.4.0 0.0.0.255 Router(config)#acce-list 10 permit 192.168.2.0 0.0.0.255 Router(config)#acce-list 10 permit 192.168.3.0 0.0.0.255 Router(config)#acce-list 10 permit 172.16.0.0 0.0.255.255 Router(config)#acce-list 10 permit 172.16.0.0 0.0.255.255 Router(config)#acce-list 10 permit 10.1.2.0 0.0.0.255 Router(config)#acce-list 10 permit 10.1.1.0 0.0.0.255 //定义标准访问控制列表10只允许定义的地址能够被转换

Router(config)#ip nat pool out 202.121.241.10 202.121.241.20 netmask 255.255.255.0 //定义名称为out的地址池。

Router(config)#ip nat inside source list 10 pool out //将访问控制列表定义的地址和地址池关联这样就有前内部主机能够得到公网地址。

第三部分设置acl规则

首先设置出口路由器和核心路由器使外部网络与内部网络连通出口路由器配置设置静态路由

Router(config)#ip route 0.0.0.0 0.0.0.0 202.121.241.8 核心路由器配置设置静态路由

Router(config)#ip route 0.0.0.0 0.0.0.0 202.121.241.100 在出口路由器上做如下配置

设置标准访问控制列表规则如下： 1)禁止外部用户访问内部网络 Router(config)#acce-list 11 deny any Router(config)#int fa0/0 Router(config-if)#ip acce-group 11 in 在核心路由器上做如下配置

设置扩展访问控制列表规则如下

2)仅允许内部用户访问数据中心的80,21端口 Router(config)#ip acce-list extended test Router(config-ext-nacl)#permit tcp any any eq 80 Router(config-ext-nacl)#permit tcp any any eq 21 Router(config-ext-nacl)#deny ip any any Router(config)#int fa7/0 Router(config-if)#ip acce-group test out 第四部分广域网协议ppp设置

出口路由器配置

Router(config)#hostname R1 R1(config)#username R2 paword zgl R1(config)#int se2/0 R1(config-if)#en ppp

R1(config-if)#ppp authentication chap 核心路由器配置

Router(config)#hostname R2 R2(config)#username R1 paword zgl R2(config)#interface se2/0 R2(config-if)#en ppp

【实验检测】

网络互通测试截图如下：

教学楼到汇聚路由器

教学楼到核心路由器

教学楼到宿舍楼

教学楼到数据中心

教学楼到外部网络

宿舍楼到教学楼

宿舍楼到数据中心

宿舍楼到外部网络

外部网络到教学楼

外部网络到宿舍楼

外部网络到数据中心

Nat转换测试：

在核心路由器上debug ip nat截图如下：

Acl规则测试

在核心路由器Show ip 端口、Router#show ip interface fa7/0 FastEthernet7/0 is up, line protocol is up(connected)

Internet addre is 10.1.2.101/8

Broadcast addre is 255.255.255.255

Addre determined by setup command

MTU is 1500

Helper addre is not set

Directed broadcast forwarding is disabled

Outgoing acce list is test

Inbound acce list is not set

Proxy ARP is enabled

Security level is default

Split horizon is enabled

ICMP redirects are always sent

ICMP unreachables are always sent

ICMP mask replies are never sent

IP fast switching is disabled

IP fast switching on the same interface is disabled

IP Flow switching is disabled

IP Fast switching turbo vector

IP multicast fast switching is disabled

IP multicast distributed fast switching is disabled

Router Discovery is disabled

IP output packet accounting is disabled

IP acce violation accounting is disabled

TCP/IP header compreion is disabled

RTP/IP header compreion is disabled

Probe proxy name replies are disabled

Policy routing is disabled

Network addre translation is disabled

WCCP Redirect outbound is disabled

WCCP Redirect exclude is disabled

BGP Policy Mapping is disabled 在出口路由器Show ip 端口

Router#show ip interface fa0/0 FastEthernet0/0 is up, line protocol is up(connected)

Internet addre is 219.220.240.100/24

Broadcast addre is 255.255.255.255

Addre determined by setup command

MTU is 1500

Helper addre is not set

Directed broadcast forwarding is disabled

Outgoing acce list is not set

Inbound acce list is 11

Proxy ARP is enabled

Security level is default

Split horizon is enabled

ICMP redirects are always sent

ICMP unreachables are always sent

ICMP mask replies are never sent

IP fast switching is disabled

IP fast switching on the same interface is disabled

IP Flow switching is disabled

IP Fast switching turbo vector

IP multicast fast switching is disabled

IP multicast distributed fast switching is disabled

Router Discovery is disabled

IP output packet accounting is disabled

IP acce violation accounting is disabled

TCP/IP header compreion is disabled

RTP/IP header compreion is disabled

Probe proxy name replies are disabled

Policy routing is disabled

Network addre translation is disabled

WCCP Redirect outbound is disabled

WCCP Redirect exclude is disabled

BGP Policy Mapping is disabled 在汇聚路由及核心路由上show ospf neighbor

核心路由器上show run,show ip router R2#show run Building configuration...Current configuration : 1724 bytes!version 12.2 no service timestamps log datetime msec no service timestamps debug datetime msec no service paword-encryption!hostname R2!username R1 paword 0 zgl!interface FastEthernet0/0 ip addre 192.168.4.101 255.255.255.0 ip nat inside duplex auto speed auto!interface FastEthernet1/0 ip addre 172.16.4.101 255.255.255.0 ip nat inside duplex auto speed auto!interface Serial2/0 ip addre 202.121.241.8 255.255.255.0 encapsulation ppp ppp authentication chap ip nat outside clock rate 64000!interface Serial3/0 no ip addre shutdown!interface FastEthernet4/0 no ip addre shutdown!interface FastEthernet5/0 no ip addre shutdown!interface GigabitEthernet6/0 no ip addre duplex auto speed auto shutdown!interface FastEthernet7/0 ip addre 10.1.2.101 255.0.0.0 ip acce-group test out ip nat inside duplex auto speed auto!router ospf 100 log-adjacency-changes network 192.168.4.0 0.0.0.255 area 0!router rip network 172.16.0.0 network 192.168.4.0!ip nat pool out 202.121.241.10 202.121.241.20 netmask 255.255.255.0 ip nat inside source list 10 pool out ip clale ip route 0.0.0.0 0.0.0.0 192.168.4.100 ip route 0.0.0.0 0.0.0.0 172.16.4.100 ip route 0.0.0.0 0.0.0.0 202.121.241.100！acce-list 10 permit 192.168.4.0 0.0.0.255 acce-list 10 permit 192.168.2.0 0.0.0.255 acce-list 10 permit 192.168.3.0 0.0.0.255 acce-list 10 permit 172.16.0.0 0.0.255.255 acce-list 10 permit 10.1.2.0 0.0.0.255 acce-list 10 permit 10.1.1.0 0.0.0.255 ip acce-list extended test permit tcp any any eq www permit tcp any any eq ftp deny ip any any!no cdp run！line con 0 line vty 0 4 login End

R2#show ip route

Codes: Cstatic, IRIP, MBGP

DEIGRP external, OOSPF inter area

N1OSPF NSSA external type 2

E1OSPF external type 2, EIS-IS, L1IS-IS level-2, iacandidate default, UODR

P---------1

default

active

Fa0/3, Fa0/5, Fa0/6, Fa0/7

Fa0/8, Fa0/9, Fa0/10, Fa0/11

Fa0/12, Fa0/13, Fa0/14, Fa0/15

Fa0/16, Fa0/17, Fa0/18, Fa0/19

Fa0/20, Fa0/21, Fa0/22, Fa0/23

Fa0/24, Gig0/1, Gig0/2 4

VLAN0004

active

Fa0/4 5

active

VLAN0006

active

Fa0/2 1002 fddi-default

act/unsup 1003 token-ring-default

act/unsup 1004 fddinet-default

act/unsup 1005 trnet-default

act/unsup

VLAN Type SAID

MTU

Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2--------------------------------------------------------------------1

enet 100001

1500

0 5

enet 100005

1500

0 1002 fddi 101002

1500

1004 fdnet 101004

1500

1005 trnet 101005

1500

Remote SPAN VLANs----------------

Primary Secondary Type

Ports--------------------------------------------

在汇聚路由器上show ip router Router#show ip route

Codes: Cstatic, IRIP, MBGP

DEIGRP external, OOSPF inter area

N1OSPF NSSA external type 2

E1OSPF external type 2, EIS-IS, L1IS-IS level-2, iacandidate default, UODR

P---------1

default

active

Fa0/3, Fa0/4, Fa0/5, Fa0/6

Fa0/7, Fa0/8, Fa0/9, Fa0/10

Fa0/11, Fa0/12, Fa0/13, Fa0/14

Fa0/15, Fa0/16, Fa0/17, Fa0/18

Fa0/19, Fa0/20, Fa0/21, Fa0/22

Fa0/23, Fa0/24, Gig0/1, Gig0/2 2

VLAN0002

active

Fa0/2 3

VLAN0003

active

Fa0/1 1002 fddi-default

act/unsup 1003 token-ring-default

act/unsup 1004 fddinet-default

act/unsup 1005 trnet-default

act/unsup

VLAN Type SAID

MTU

Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2--------------------------------------------------------------------1

enet 100001

1500

0 3

enet 100003

1500

1003 tr

101003

1500

ieee

ibm connected, SIGRP, Rmobile, BEIGRP, EXOSPF, IAOSPF NSSA external type 1, N2OSPF external type 1, E2EGP

iIS-IS level-1, L2IS-IS inter area

*per-user static route, operiodic downloaded static route

Gateway of last resort is 202.121.241.8 to network 0.0.0.0

202.121.241.0/24 is directly connected, Serial2/0 C

219.220.240.0/24 is directly connected, FastEthernet0/0 S*

0.0.0.0/0 [1/0] via 202.121.241.8

相关专题交换路由实验报告实验报告路由交换路由实验报告实验报告路由

[实习报告]相关推荐

[实习报告]热门文章