題目要求

1.IP分配/劃分

192.168.1.0/24
192.168.1.0/26
192.168.1.64/26
192.168.1.128/26
192.168.1.192/26 備用

路由器1 vlan 2 192.168.1.0/27 vlan 3 192.168.1.32/27

路由間 192.168.1.128/26
路由器2
vlan 2 192.168.1.64/27
vlan 3 192.168.1.96/27

配置交換機vlan
[sw1-GigabitEthernet0/0/1]port link-type trunk
[sw1-GigabitEthernet0/0/1]port trunk allow-pass vlan 2 to 3
上面可以直接寫下面的允許所有
[sw1-GigabitEthernet0/0/1]port trunk allow-pass vlan all

[sw1]vlan batch 2 to 3
[sw1]port-group group-member Ethernet 0/0/1 to Ethernet 0/0/2
[sw1-port-group]port link-type access
[sw1-port-group]port default vlan 2

[sw1-Ethernet0/0/2]port link-type access
[sw1-Ethernet0/0/2]port default vlan 3
配置各個IP
[r1]int g0/0/1.1
[r1-GigabitEthernet0/0/1.1]dot1q termination vid 2
[r1-GigabitEthernet0/0/1.1]ip ad 192.168.1.1 27
[r1-GigabitEthernet0/0/1.1]arp broadcast enable

[r1-GigabitEthernet0/0/0]ip ad 192.168.1.129 26
配置DHCP池塘
[r1]dhcp enable
[r1]ip pool v2
[r1-ip-pool-v2]network 192.168.1.0 mask 27
[r1-ip-pool-v2]gateway-list 192.168.1.1
[r1-ip-pool-v2]dns-list 1.1.1.10
[r1-GigabitEthernet0/0/1.1]dhcp select global
配置ospf
[r1]ospf 1 router-id 1.1.1.1
[r1-ospf-1]area 0
[r1-ospf-1-area-0.0.0.0]network 192.168.1.0 0.0.0.255

現在內網全網可達
按照要求pc1不能telnet r1

創建aaa服務
[r1-aaa]local-user chao privilege level 15 password cipher 123456
Info: Add a new user.
[r1-aaa]local-user chao service-type telnet
[r1]user-interface vty 0 4
[r1-ui-vty0-4]authentication-mode aaa
啟用ACL擴展配置
[r1-acl-adv-3000]rule deny tcp source 192.168.1.30 0.0.0.0 destination 192.168.1.1 0.0.0.0 destination-port eq 23
[r1-GigabitEthernet0/0/1.1]traffic-filter inbound acl 3000 寫入接口

r2 以及lsw2配置相似

r2邊界配置
[r2]ip route-static 0.0.0.0 0 12.1.1.2
[r2-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255
23Telnet以及80www接口映射
[r2-GigabitEthernet0/0/2]nat static protocol tcp global current-interface 80 inside 192.168.1.34 80
Warning:The port 80 is well-known port. If you continue it may cause function failure.
Are you sure to continue?[Y/N]:y
[r2-GigabitEthernet0/0/2]nat static protocol tcp global current-interface 23 inside 192.168.1.129 23
Warning:The port 23 is well-known port. If you continue it may cause function failure.
Are you sure to continue?[Y/N]:y
r1配置

r2配置

r3

lsw1

http服務器配置

dns配置

client設置

**

測試

**
pc1 不能telent ，ping通，及外網鏈接


client訪問

r3 telnet 12.1.1.1到r1

總結

以上是生活随笔為你收集整理的HCIA综合实验的全部內容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網站內容還不錯，歡迎將生活随笔推薦給好友。