知识改变命运，技术就是要分享，有问题随时联系，免费答疑，欢迎联系！
微思成立于2002年，是一个诚信敬业、积极向上、充满活力、专注技术服务的企业。
微思获得了八大厂商的培训授权，成长为福建地区广受认可的IT认证培训机构，同时也是知名的IT服务提供商及系统集成商，业务主要包含国际IT认证培训及考试、IT维护服务、系统集成。微思从成立开始，就把技术服务作为开展业务的主要根基，视技术服务为企业发展的生存命脉。微思拥有一批由工程师和讲师组成的出色技术团队，拥有8名CCIE、8名HCIE、5名OCP、8名MCITP、6名RHCE、5名VMware VCP、6名EMC/IBM存储/小型机工程师。到目前为止，微思已经投资超过2000万元建立备件库和体验中心，为本地客户提供优质的IT维护服务和完整的系统集成解决方案。
微思自成立以来，培养了一万多名IT专业人才！厦门85%大中型企业的IT技术人员都参加过微思的培训，同时，微思积累了丰富的就业渠道，为学员的就业提供有力的保障。
凭借良好技术和服务能力，微思完成了众多的IT建设项目，如建发集团、国贸集团、厦门航空、厦门银行、厦门邮储银行、乾照光电、三安集团、嵩屿码头、海润码头、海通码头、联想移动、安踏、七匹狼、九牧王、柒牌、特步、361度、厦门边检、厦门海关、厦门国检、厦门国土局、厦门地震局、厦门国家会计学院、厦门大学、华侨大学等，这些客户对微思的技术和服务给予了充分的肯定和良好的评价。
微思网络肩负“智造财富”的企业使命，凭借出色的技术实力、齐全的实验环境、高效的服务体系，为社会创造价值、为企业实现价值、为员工提升价值！
微思22年国际IT认证培训经验
红帽RHCE
OracleOCP
VMware VCP
信息安全CISP
项目管理PMP
华为 HCIA/HCIP/HCIE
思科CCNA/CCNP/CCIE
网络实战、云计算实战企业IT技术定制培训
数据中心解决方案
网络架构解决方案
网络安全解决方案
视频会议解决方案
集成业务咨询容灾备份解决方案服务器代理:华为/H3C/联想/DELL网络产品代理:华为/H3C/思科/锐捷存储产品代理:华为/H3C/联想/DELL安全产品代理:深信服/奇安信/网御
合作厂商:
思科、华为、H3C、锐捷、联想、DELL、VMware深信服、奇安信、网御星云、绿盟、启明、IBM、EMC
微思软实力
【集成资质】
| 华为金牌代理商 | 思科金牌代理商 |
| EMC金牌代理商 | NetApp金牌代理商 |
| VMware企业级代理商 | 数存金牌代理商 |
| 深信服金牌代理商 | 绿盟金牌代理商 |
| 天融信金牌代理商 | 北塔金牌代理商 |
| 联软金牌代理商 | 盈高金牌代理商 |
| Radware金牌代理商 | Panabit金牌代理商 |
【培训资质】
| 思科授权培训中心 | Oralce授权培训中心 |
| 华为授权培训中心 | VMware授权培训中心 |
| 红帽授权培训中心 | 微软授权培训中心 |
| 普尔文授权考试中心 | VUE授权考试中心 |
【微思优势】
| 专业的技术专家团队 | 22年国际IT认证培训经验 |
| 设备齐全的备件库 | 拥有资深专家讲师团队 |
| 丰富的系统集成经验 | 拥有专业的机房和网络实验室 |
| 完美的产品体验中心 | 百家名企合作丰富的就业渠道 |
微思硬实力
【八大厂商授权】
【三大上课教师，可同时容纳100+人】
实验平台使用方法
步骤：
- 安装VMware Workstation
- 安装EVE-NG客户端
- 关联SecureCRT
- 解压“微思网络CCNA实验平台”虚拟机
步骤1：安装VMware Workstation
双击VMware-workstation-full-15.5.1-15018445安装程序。
点击“下一步”。
勾选“我接受许可协议中的条款”，点击“下一步”。
安装位置使用默认路径即可，点击“下一步”。
按默认，点击“下一步”。
按默认，点击“下一步”。
点击“安装”。
程序正在安装，耐心等待。
点击“许可证”输入许可。
输入VMware-workstation-full-15.5.1-15018445-KEY记事本中的序列号，点击“输入”。
点击“完成”。
步骤2：安装EVE-NG客户端
双击EVE-NG-Win-Client-Pack-2.0安装程序。
点击“运行”。
点击“下一步”。
点击“下一步”。
按默认即可，点击“下一步”
选中“I accept the agreement”，点击“Next”。
点击“Next”。
按默认即可，点击“Next”。
按默认即可，点击“Next”。
点击“Install”。
点击“Next”。
点击“Finish”。
安装Wireshark，点击“Next”
点击“I Agree”
按默认即可，点击“Next”。
按默认即可，点击“Next”
安装路径按默认即可，点击“Next”。
按默认即可，点击“Next”。
按默认即可，点击“Install”
点击“I Agree”
按默认即可，点击“Install”。
点击“Next”
点击“Finish”
点击“Next”
点击“Finish”
点击“Finish”
步骤3：关联SecureCRT
把“微思网络CCNA实验平台登录软件SecureCRT”压缩包解压到当前文件夹。
进入SecureCRT文件夹，找到“SecureCRT.exe”文件，鼠标右键“SecureCRT.exe”，点击发送到“桌面快捷方式”。
进入EVE-NG客户端的安装目录，默认在：C:\Program Files\EVE-NG，把注册表文件win10_64bit_sCRT.reg拷贝到其他盘，比如D盘。
鼠标右键D盘中的win10_64bit_sCRT.reg文件，单击“编辑”。
把SecureCRT的存放路径输入到箭头所指的地方（注意路径是双斜杠！！！），改完之后保存。
注意：SecureCRT的存放路径视具体情况而定，截图中的路径只是个例子！！！
保存后，双击注册表文件win10_64bit_sCRT.reg，选择“是”即可。
步骤4：解压“微思网络CCNA实验平台”虚拟机
把“微思网络CCNA实验平台”压缩包解压到当前文件夹。
解压之后，进入VM XMWS CCNA文件夹，找到“VMware虚拟机配置”文件，然后双击运行。
此时，VMware Workstation会打开虚拟机XMWS CCNA。单击“开启此虚拟机”，打开虚拟机的电源。
记录箭头所指的地方的IP地址。
在浏览器中输入上一步记录的IP地址，访问实验台；
用户名是：admin
密码是：www.xmws.cn
输入用户名和密码之后，点击“Sign In”登录实验台。
鼠标点击某个Lab之后，右边会有个“Open”按钮。
单击“Open”打开实验，鼠标移动到浏览器左侧，单击“More actions”，点击“Start all nodes”开启实验设备。
设备启动完成之后，图标颜色会变成蓝色，如下图所示。
鼠标点击设备图标会自动关联SecureCRT，连续敲几下回车即可进入设备控制界面。
实验做完之后，鼠标移动到浏览器左侧，单击“More actions”，点击“Stop all nodes”关闭实验设备。
关闭实验台设备之后，鼠标移动到浏览器左侧，单击“Close lab”即可回到主页。
实验做完之后，鼠标右键虚拟机XMWS CCNA，单击“电源”，点击“关闭客户机”即可关闭虚拟机。
熟悉CISCO IOS的各个模式
Router> //用户模式
Router# //特权模式
Router(config-if)# //接口模式
Router(config-router)# //路由配置模式
Router(config-line)# //线路模式
Router(config-subif)# //子接口模式
Router> //用户模式
Router>enable //在用户模式敲enable进入特权模式
Router#disable //在特权模式敲disable退出到用户模式
Router>enable //在用户模式敲enable进入特权模式
Router#configure terminal //在特权模式敲入configure terminal进入到配置模式
Router(config)#interface ethernet0/0 //在配置模式敲入“interface+接口类型+接口编号”进入接口模式
Router(config-if)#exit //敲exit退出接口模式
Router(config)#router rip //敲“router + 路由协议”进入路由配置模式
Router(config-router)#exit //退出路由配置模式
Router(config)#line console 0 //进入线路模式
Router(config-line)#end //从线路模式退出（任何时候敲入end会退出到特权模式）
Router#configure terminal
Router(config)#interface ethernet 0/0.1 //进入子接口模式
Router(config-subif)#end //任何时候敲入end会退出到特权模式
Router#
熟悉CISCO IOS的基本配置
CISCO IOS常用配置命令
Router>enable
Router#configure terminal
Router(config)#enable secret xmws //设置enable的密码为xmws
Router(config)#enable password wisdom //设置enable的密码为wisdom，不能和enable secret 设置的密码相同，如果都设置，secret生效
Router(config)#no ip domain-lookup //关掉域名查找功能
Router(config)#service password-encryption //对明文口令进行加密，比如加密Console口、VTY或enable password设置的密码，这样密码不再显示为明文
Router(config)#line console 0 //进入Cconsole口
Router(config-line)#password xmws //设置Console口密码为xmws
Router(config-line)#login //启用密码
Router(config-line)#exec-timeout 0 0 //设置操作会话不超时
Router(config-line)#logging synchronous //配置光标跟随, 阻止控制台信息打断你当前的输入，从而使输入信息显得更为简单易读
Router(config)#line vty 0 4 //进入VTY
Router(config-line)#password cisco
Router(config-line)#login
Router(config-line)#exec-timeout 0 0
Router(config-line)#logging synchronous
注：VTY (虚拟终端) 在网络操作系统（包括Cisco IOS）中是一个接受telent或ssh连接的逻辑端口。
配置一台路由器当作PC使用
做实验时可以将路由器当作PC使用，用来测试网络的连通性等。
步骤：（本例子中当作PC的路由器接口为Ethernet 0/0）
- 关闭路由器的路由功能
- 设置接口IP地址
- 配置默认网关
- 检查
Router>enable
Router#configure terminal
Router(config)#hostname PC1
PC1(config)#no ip routing //关闭路由器的路由功能
PC1(config)#interface ethernet 0/0
PC1(config-if)#ip address 192.168.10.1 255.255.255.0 //配置接口IP地址
PC1(config-if)#no shutdown //激活接口
PC1(config-if)#exit
PC1(config)#ip default-gateway 192.168.10.254 //配置默认网关
PC1(config)#end
PC1#show ip interface brief //查看接口IP地址和状态
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 10.1.1.1 YES manual up up
Ethernet0/1 unassigned YES unset administratively down down
Ethernet0/2 unassigned YES unset administratively down down
Ethernet0/3 unassigned YES unset administratively down down
PC1#show ip route //show ip route可以看到网关
Default gateway is 192.168.10.254
Host Gateway Last Use Total Uses Interface
ICMP redirect cache is empty
实验01：IOS基本配置
实验目的
- 熟悉CISCO IOS的常用模式
- 掌握CISCO IOS模式之间的切换
- 掌握CISCO IOS的基本配置命令
- 掌握如何把一台路由器配置成PC
实验拓扑
实验需求
- 根据实验拓扑图，完成设备的基本配置；
包括：主机名、Enable密码、关闭域名查找功能等；
- PC和Server使用路由器模拟，把路由器PC1、PC2、PC3、Server A、Server B配置成PC；
- 测试主机与网关，以及设备之间的网络连通性。
实验步骤
步骤1：路由器和交换机的基本配置
配置R1：
Router>enable
Router#configure terminal
Router(config)#hostname R1
R1(config)#enable password xmws
R1(config)#no ip domain-lookup
R1(config)#line console 0
R1(config-line)#password xmws
R1(config-line)#login
R1(config-line)#exec-timeout 0 0
R1(config-line)#logging synchronous
R1(config-line)#exit
R1(config)#line vty 0 4
R1(config-line)#password xmws
R1(config-line)#login
R1(config-line)#exec-timeout 0 0
R1(config-line)#logging synchronous
R1(config-line)#exit
R1(config)#interface serial1/0
R1(config-if)#ip address 10.1.12.1 255.255.255.0
R1(config-if)#no shutdown
R1(config-if)#exit
R1(config)#interface serial1/1
R1(config-if)#ip address 13.1.1.1 255.255.255.0
R1(config-if)#no shutdown
R1(config-if)#exit
R1(config)#interface ethernet0/0
R1(config-if)#ip address 192.168.10.254 255.255.255.0
R1(config-if)#no shutdown
R1(config-if)#exit
R1(config)#interface ethernet0/1
R1(config-if)#ip address 192.168.20.254 255.255.255.0
R1(config-if)#no shutdown
R1(config-if)#end
R1#
配置R2：
Router>enable
Router#configure terminal
Router(config)#hostname R2
R2(config)#enable password xmws
R2(config)#no ip domain-lookup
R2(config)#line console 0
R2(config-line)#password xmws
R2(config-line)#login
R2(config-line)#exec-timeout 0 0
R2(config-line)#logging synchronous
R2(config-line)#exit
R2(config)#line vty 0 4
R2(config-line)#password xmws
R2(config-line)#login
R2(config-line)#exec-timeout 0 0
R2(config-line)#logging synchronous
R2(config-line)#exit
R2(config)#interface serial1/0
R2(config-if)#ip address 10.1.12.2 255.255.255.0
R2(config-if)#no shutdown
R2(config-if)#exit
R2(config)#interface serial1/1
R2(config-if)#ip address 23.1.1.2 255.255.255.0
R2(config-if)#no shutdown
R2(config-if)#exit
R2(config)#interface ethernet0/0
R2(config-if)#ip address 172.16.1.254 255.255.255.0
R2(config-if)#no shutdown
R2(config-if)#end
R2#
配置R3：
Router>enable
Router#configure terminal
Router(config)#hostname R3conc
R3(config)#enable password xmws
R3(config)#no ip domain-lookup
R3(config)#line console 0
R3(config-line)#password xmws
R3(config-line)#login
R3(config-line)#exec-timeout 0 0
R3(config-line)#logging synchronous
R3(config-line)#exit
R3(config)#line vty 0 4
R3(config-line)#password xmws
R3(config-line)#login
R3(config-line)#exec-timeout 0 0
R3(config-line)#logging synchronous
R3(config-line)#exit
R3(config)#interface serial1/0
R3(config-if)#ip address 13.1.1.3 255.255.255.0
R3(config-if)#no shutdown
R3(config-if)#exit
R3(config)#interface serial1/1
R3(config-if)#ip address 23.1.1.3 255.255.255.0
R3(config-if)#no shutdown
R3(config-if)#exit
R3(config)#interface loopback0
R3(config-if)#ip address 9.2.6.7 255.255.255.255
R3(config-if)#end
R3#
配置SW1：
Switch>enable
Switch#configure terminal
Switch(config)#hostname SW1
SW1(config)#enable password xmws
SW1(config)#no ip domain-lookup
SW1(config)#line console 0
SW1(config-line)#password xmws
SW1(config-line)#login
SW1(config-line)#exec-timeout 0 0
SW1(config-line)#logging synchronous
SW1(config-line)#exit
SW1(config)#line vty 0 4
SW1(config-line)#password xmws
SW1(config-line)#login
SW1(config-line)#exec-timeout 0 0
SW1(config-line)#logging synchronous
SW1(config-line)#exit
SW1(config)#interface vlan 1
SW1(config-if)#ip address 192.168.10.11 255.255.255.0
SW1(config-if)#no shutdown
SW1(config-if)#exit
SW1(config)#ip default-gateway 192.168.10.254
SW1(config)#end
SW1#
配置SW2：
Switch>enable
Switch#configure terminal
Switch(config)#hostname SW2
SW2(config)#enable password xmws
SW2(config)#no ip domain-lookup
SW2(config)#line console 0
SW2(config-line)#password xmws
SW2(config-line)#login
SW2(config-line)#exec-timeout 0 0
SW2(config-line)#logging synchronous
SW2(config-line)#exit
SW2(config)#line vty 0 4
SW2(config-line)#password xmws
SW2(config-line)#login
SW2(config-line)#exec-timeout 0 0
SW2(config-line)#logging synchronous
SW2(config-line)#exit
SW2(config)#interface vlan 1
SW2(config-if)#ip address 192.168.10.12 255.255.255.0
SW2(config-if)#no shutdown
SW2(config-if)#exit
SW2(config)#ip default-gateway 192.168.10.254
SW2(config)#end
SW2#
配置SW3：
Switch>enable
Switch#configure terminal
Switch(config)#hostname SW3
SW3(config)#enable password xmws
SW3(config)#no ip domain-lookup
SW3(config)#line console 0
SW3(config-line)#password xmws
SW3(config-line)#login
SW3(config-line)#exec-timeout 0 0
SW3(config-line)#logging synchronous
SW3(config-line)#exit
SW3(config)#line vty 0 4
SW3(config-line)#password xmws
SW3(config-line)#login
SW3(config-line)#exec-timeout 0 0
SW3(config-line)#logging synchronous
SW3(config-line)#exit
SW3(config)#interface vlan 1
SW3(config-if)#ip address 192.168.10.13 255.255.255.0
SW3(config-if)#no shutdown
SW3(config-if)#exit
SW3(config)#ip default-gateway 192.168.10.254
SW3(config)#end
SW3#
步骤2：PC的基本配置
配置PC1：
Router>enable
Router#configure terminal
Router(config)#hostname PC1
PC1(config)#no ip routing
PC1(config)#ip default-gateway 192.168.10.254
PC1(config)#interface ethernet0/0
PC1(config-if)#ip address 192.168.10.1 255.255.255.0
PC1(config-if)#no shutdown
PC1(config-if)#end
PC1#
配置PC2：
Router>enable
Router#configure terminal
Router(config)#hostname PC2
PC2(config)#no ip routing
PC2(config)#ip default-gateway 192.168.10.254
PC2(config)#interface ethernet0/0
PC2(config-if)#ip address 192.168.10.2 255.255.255.0
PC2(config-if)#no shutdown
PC2(config-if)#end
PC2#
配置PC3：
Router>enable
Router#configure terminal
Router(config)#hostname PC3
PC3(config)#no ip routing
PC3(config)#ip default-gateway 172.16.1.254
PC3(config)#interface ethernet0/0
PC3(config-if)#ip address 172.16.1.1 255.255.255.0
PC3(config-if)#no shutdown
PC3(config-if)#end
PC3#
配置ServerA：
Router>enable
Router#configure terminal
Router(config)#hostname ServerA
ServerA(config)#no ip routing
ServerA(config)#ip default-gateway 192.168.10.254
ServerA(config)#interface ethernet0/0
ServerA(config-if)#ip address 192.168.10.3 255.255.255.0
ServerA(config-if)#no shutdown
ServerA(config-if)#end
ServerA#
配置PCB：
Router>enable
Router#configure terminal
Router(config)#hostname ServerB
ServerB(config)#no ip routing
ServerB(config)#ip default-gateway 192.168.10.254
ServerB(config)#interface ethernet0/0
ServerB(config-if)#ip address 192.168.10.4 255.255.255.0
ServerB(config-if)#no shutdown
ServerB(config-if)#end
ServerB#
实验检查
步骤1：检查路由器
检查R1：
R1#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 192.168.10.254 YES manual up up
Ethernet0/1 192.168.20.254 YES manual up up
Ethernet0/2 unassigned YES unset administratively down down
Ethernet0/3 unassigned YES unset administratively down down
Serial1/0 10.1.12.1 YES manual up up
Serial1/1 13.1.1.1 YES manual up up
Serial1/2 unassigned YES unset administratively down down
Serial1/3 unassigned YES unset administratively down down
R1使用到的接口已经配置好IP地址，并且是up up状态。
检查R2：
R2#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 172.16.1.254 YES manual up up
Ethernet0/1 unassigned YES unset administratively down down
Ethernet0/2 unassigned YES unset administratively down down
Ethernet0/3 unassigned YES unset administratively down down
Serial1/0 10.1.12.2 YES manual up up
Serial1/1 23.1.1.2 YES manual up up
Serial1/2 unassigned YES unset administratively down down
Serial1/3 unassigned YES unset administratively down down
R2使用到的接口已经配置好IP地址，并且是up up状态。
检查R3：
R3#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 unassigned YES unset administratively down down
Ethernet0/1 unassigned YES unset administratively down down
Ethernet0/2 unassigned YES unset administratively down down
Ethernet0/3 unassigned YES unset administratively down down
Serial1/0 13.1.1.3 YES manual up up
Serial1/1 23.1.1.3 YES manual up up
Serial1/2 unassigned YES unset administratively down down
Serial1/3 unassigned YES unset administratively down down
Loopback0 9.2.6.7 YES manual up up
R3使用到的接口已经配置好IP地址，并且是up up状态。
步骤2：检查交换机
检查SW1：
SW1#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 unassigned YES unset up up
Ethernet0/1 unassigned YES unset up up
Ethernet0/2 unassigned YES unset up up
Ethernet0/3 unassigned YES unset up up
Ethernet1/0 unassigned YES unset up up
Ethernet1/1 unassigned YES unset up up
Ethernet1/2 unassigned YES unset up up
Ethernet1/3 unassigned YES unset up up
Vlan1 192.168.10.11 YES manual up up
SW1的Vlan1接口已经配置好IP地址，并且是up up状态。
检查SW2：
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 unassigned YES unset up up
Ethernet0/1 unassigned YES unset up up
Ethernet0/2 unassigned YES unset up up
Ethernet0/3 unassigned YES unset up up
Ethernet1/0 unassigned YES unset up up
Ethernet1/1 unassigned YES unset up up
Ethernet1/2 unassigned YES unset up up
Ethernet1/3 unassigned YES unset up up
Vlan1 192.168.10.12 YES manual up up
SW2的Vlan1接口已经配置好IP地址，并且是up up状态。
检查SW3：
SW3#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 unassigned YES unset up up
Ethernet0/1 unassigned YES unset up up
Ethernet0/2 unassigned YES unset up up
Ethernet0/3 unassigned YES unset up up
Ethernet1/0 unassigned YES unset up up
Ethernet1/1 unassigned YES unset up up
Ethernet1/2 unassigned YES unset up up
Ethernet1/3 unassigned YES unset up up
Vlan1 192.168.10.13 YES manual up up
SW3的Vlan1接口已经配置好IP地址，并且是up up状态。
步骤3：检查PC
检查PC1：
PC1#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 192.168.10.1 YES manual up up
Ethernet0/1 unassigned YES unset administratively down down
Ethernet0/2 unassigned YES unset administratively down down
Ethernet0/3 unassigned YES unset administratively down down
PC1已经配置好IP地址，并且是up up状态。
PC1#show ip route
Default gateway is 192.168.10.254
Host Gateway Last Use Total Uses Interface
ICMP redirect cache is empty
PC1的网关是192.168.10.254。
检查PC2：
PC2#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 192.168.10.2 YES manual up up
Ethernet0/1 unassigned YES unset administratively down down
Ethernet0/2 unassigned YES unset administratively down down
Ethernet0/3 unassigned YES unset administratively down down
PC2已经配置好IP地址，并且是up up状态。
PC2#show ip route
Default gateway is 192.168.10.254
Host Gateway Last Use Total Uses Interface
ICMP redirect cache is empty
PC2的网关是192.168.10.254。
检查PC3：
PC3#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 172.16.1.1 YES manual up up
Ethernet0/1 unassigned YES unset administratively down down
Ethernet0/2 unassigned YES unset administratively down down
Ethernet0/3 unassigned YES unset administratively down down
PC3已经配置好IP地址，并且是up up状态。
PC3#show ip route
Default gateway is 172.16.1.254
Host Gateway Last Use Total Uses Interface
ICMP redirect cache is empty
PC3的网关是172.16.1.254。
检查ServerA：
ServerA#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 192.168.10.3 YES manual up up
Ethernet0/1 unassigned YES unset administratively down down
Ethernet0/2 unassigned YES unset administratively down down
Ethernet0/3 unassigned YES unset administratively down down
ServerA已经配置好IP地址，并且是up up状态。
ServerA#show ip route
Default gateway is 192.168.10.254
Host Gateway Last Use Total Uses Interface
ICMP redirect cache is empty
ServerA的网关是192.168.10.254。
检查ServerB：
ServerB#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 192.168.10.4 YES manual up up
Ethernet0/1 unassigned YES unset administratively down down
Ethernet0/2 unassigned YES unset administratively down down
Ethernet0/3 unassigned YES unset administratively down down
ServerB已经配置好IP地址，并且是up up状态。
ServerB#show ip route
Default gateway is 192.168.10.254
Host Gateway Last Use Total Uses Interface
ICMP redirect cache is empty
ServerB的网关是192.168.10.254。
连通性测试
步骤1：测试PC和网关的连通性
测试PC1：
PC1#ping 192.168.10.254
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.10.254, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/203/1012 ms
PC1跟网关的连通性正常。
测试PC2：
PC2#ping 192.168.10.254
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.10.254, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/203/1011 ms
PC2跟网关的连通性正常。
测试PC3：
PC3#ping 172.16.1.254
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.1.254, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/201/1002 ms
PC3跟网关的连通性正常。
测试ServerA：
ServerA#ping 192.168.10.254
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.10.254, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/202/1009 ms
ServerA跟网关的连通性正常。
测试ServerB：
ServerB#ping 192.168.10.254
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.10.254, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/202/1006 ms
ServerB跟网关的连通性正常。
步骤2：测试交换机和网关的连通性
测试SW1：
SW1#ping 192.168.10.254
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.10.254, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/2 ms
SW1跟网关的连通性正常。
测试SW2：
SW2#ping 192.168.10.254
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.10.254, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/2 ms
SW2跟网关的连通性正常。
测试SW3：
SW3#ping 192.168.10.254
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.10.254, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms
SW3跟网关的连通性正常。
步骤3：测试路由器之间链路的连通性
测试R1和R2之间链路：
R1#ping 10.1.12.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.1.12.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 5/9/10 ms
R1和R2之间的连通性正常。
测试R1和R3之间的链路：
R1#ping 13.1.1.3
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 13.1.1.3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 9/10/11 ms
R1和R3之间的连通性正常。
测试R2和R3之间的链路：
R2#ping 23.1.1.3
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 23.1.1.3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 8/9/11 ms
R2和R3之间的连通性正常。
实验02：配置Telnet与SSH
实验目的
- 理解Telnet与SSH的运行原理
- 掌握Telnet与SSH的配置方法
实验拓扑
实验需求
- 根据实验拓扑图，完成设备的基本配置；
- SW1允许R1通过Telnet远程管理，VTY密码为xmws；
- R2允许R1通过SSH version2远程管理，用户名为xmws，密码为wisdom，域名为xmws.cn。
实验步骤
步骤1：设备的基本配置
配置R1：
Router>enable
Router#configure terminal
Router(config)#hostname R1
R1(config)#no ip domain-lookup
R1(config)#line console 0
R1(config-line)#exec-timeout 0 0
R1(config-line)#logging synchronous
R1(config-line)#exit
R1(config)#enable password xmws
R1(config)#interface ethernet0/0
R1(config-if)#ip address 192.168.1.254 255.255.255.0
R1(config-if)#no shutdown
R1(config-if)#exit
R1(config)#interface ethernet0/1
R1(config-if)#ip address 192.168.12.1 255.255.255.0
R1(config-if)#no shutdown
R1(config-if)#end
R1#
配置R2：
Router>enable
Router#configure terminal
Router(config)#hostname R2
R2(config)#no ip domain-lookup
R2(config)#line console 0
R2(config-line)#exec-timeout 0 0
R2(config-line)#logging synchronous
R2(config-line)#exit
R2(config)#enable password xmws
R2(config)#interface ethernet0/0
R2(config-if)#ip address 192.168.12.2 255.255.255.0
R2(config-if)#no shutdown
R2(config-if)#end
R2#
配置SW1：
Switch>enable
Switch#configure terminal
Switch(config)#hostname SW1
SW1(config)#no ip domain-lookup
SW1(config)#line console 0
SW1(config-line)#exec-timeout 0 0
SW1(config-line)#logging synchronous
SW1(config-line)#exit
SW1(config)#enable password xmws //必须设置，否则Telnet上SW1后无法进入特权模式
SW1(config)#interface vlan 1
SW1(config-if)#ip address 192.168.1.1 255.255.255.0
SW1(config-if)#no shutdown
SW1(config-if)#exit
SW1(config)#ip default-gateway 192.168.1.254
SW1(config)#end
SW1#
步骤2：配置Telnet
配置SW1：
SW1>enable
SW1#configure terminal
SW1(config)#line vty 0 4 //进入VTY
SW1(config-line)#password xmws //设置Telnet登录的密码为xmws
SW1(config-line)#login //启用密码
SW1(config-line)#transport input telnet //允许通过Telnet远程登录
SW1(config-line)#end
SW1#
步骤3：配置SSH
配置R2：
R2>enable
R2#configure terminal
R2(config)#username xmws password wisdom //创建用户名和密码
R2(config)#ip ssh version 2 //启用SSH版本2
R2(config)#ip domain-name xmws.cn //定义域名
R2(config)#crypto key generate rsa //生成密钥
The name for the keys will be: R2.xmws.cn
Choose the size of the key modulus in the range of 360 to 4096 for your
General Purpose Keys. Choosing a key modulus greater than 512 may take
a few minutes.
How many bits in the modulus [512]: 1024 //SSHv2密钥长度至少768位
% Generating 1024 bit RSA keys, keys will be non-exportable...
[OK] (elapsed time was 0 seconds)
R2(config)#
R2(config)#line vty 0 4
R2(config-line)#login local //使用用户名和密码验证
R2(config-line)# transport input ssh //允许通过SSH远程登录
R2(config-line)#end
R2#
实验检查
步骤1：Telnet测试
R1#telnet 192.168.1.1
Trying 192.168.1.1 ... Open
User Access Verification
Password:
SW1> //成功登录SW1
注意，如果SW1没有设置Enable密码，R1登录到SW1后输Enable会出现如下提示：
R1#telnet 192.168.1.1
Trying 192.168.1.1 ... Open
User Access Verification
Password:
SW1>enable
% No password set
同时按<Ctrl+Shit+6>组合键，然后再按x把界面切回R1
R1#show sessions //查看R1打开的Telnet会话
Conn Host Address Byte Idle Conn Name
* 1 192.168.1.1 192.168.1.1 6 5 192.168.1.1
R1#resume 1 //重新连接到SW1
[Resuming connection 1 to 192.168.1.1 ... ]
SW1>
步骤2：检查Telnet
SW1#show users //SW1上查看谁登录到自己
Line User Host(s) Idle Location
* 0 con 0 idle 00:00:00
2 vty 0 idle 00:02:47 192.168.1.254
Interface User Mode Idle Peer Address
Location表示是谁登录到自己，192.168.1.254是R1。
SW1#clear line 2 //清除R1的Telnet连接
[confirm]
[OK]
SW1#show users
Line User Host(s) Idle Location
* 0 con 0 idle 00:00:00
Interface User Mode Idle Peer Address
R1已经被清除。
步骤3：SSH测试
R1#ssh -l xmws 192.168.12.2
Password:
R2>enable
Password:
R2# //成功登录到R2
步骤4：检查SSH
R2#show ssh
Connection Version Mode Encryption Hmac State Username
0 1.99 IN aes128-ctr hmac-sha2-256 Session started xmws
0 1.99 OUT aes128-ctr hmac-sha2-256 Session started xmws
实验03：配置CDP协议
实验目的
- 了解思科发现协议CDP的运行原理
- 掌握思科发现协议CDP的配置方法
实验拓扑
实验需求
- 根据实验拓扑图，完成设备的基本配置；
- 在R1上使用CDP查看SW1和R2的设备信息；
- 注意：CDP默认已经运行，不需要打开。
实验步骤
步骤1：设备的基本配置
配置R1：
Router>enable
Router#configure terminal
Router(config)#hostname R1
R1(config)#no ip domain-lookup
R1(config)#line console 0
R1(config-line)#exec-timeout 0 0
R1(config-line)#logging synchronous
R1(config-line)#exit
R1(config)#interface ethernet0/0
R1(config-if)#ip address 192.168.1.254 255.255.255.0
R1(config-if)#no shutdown
R1(config-if)#exit
R1(config)#interface ethernet0/1
R1(config-if)#ip address 192.168.12.1 255.255.255.0
R1(config-if)#no shutdown
R1(config-if)#end
R1#
配置R2：
Router>enable
Router#configure terminal
Router(config)#hostname R2
R2(config)#no ip domain-lookup
R2(config)#line console 0
R2(config-line)#exec-timeout 0 0
R2(config-line)#logging synchronous
R2(config-line)#exit
R2(config)#interface ethernet0/0
R2(config-if)#ip address 192.168.12.2 255.255.255.0
R2(config-if)#no shutdown
R2(config-if)#end
R2#
配置SW1：
Switch>enable
Switch#configure terminal
Switch(config)#hostname SW1
SW1(config)#no ip domain-lookup
SW1(config)#line console 0
SW1(config-line)#exec-timeout 0 0
SW1(config-line)#logging synchronous
SW1(config-line)#exit
SW1(config)#interface vlan 1
SW1(config-if)#ip address 192.168.1.1 255.255.255.0
SW1(config-if)#no shutdown
SW1(config-if)#exit
SW1(config)#ip default-gateway 192.168.1.254
SW1(config)#end
SW1#
实验检查
步骤1：检查设备的接口状态
检查R1：
R1#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 192.168.1.254 YES manual up up
Ethernet0/1 192.168.12.1 YES manual up up
Ethernet0/2 unassigned YES unset administratively down down
Ethernet0/3 unassigned YES unset administratively down down
R1使用到的接口已经配置好IP地址，并且是up up状态。
检查R2：
R2#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 192.168.12.2 YES manual up up
Ethernet0/1 unassigned YES TFTP administratively down down
Ethernet0/2 unassigned YES unset administratively down down
Ethernet0/3 unassigned YES unset administratively down down
R2使用到的接口已经配置好IP地址，并且是up up状态。
检查SW1：
SW1#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 unassigned YES unset up up
Ethernet0/1 unassigned YES unset up up
Ethernet0/2 unassigned YES unset up up
Ethernet0/3 unassigned YES unset up up
Vlan1 192.168.1.1 YES manual up up
SW1使用到的接口已经配置好IP地址，并且是up up状态。
步骤2：使用CDP查看物理相连的设备信息
检查R1上运行CDP的接口:
R1#show cdp interface
Ethernet0/0 is up, line protocol is up
Encapsulation ARPA
Sending CDP packets every 60 seconds //CDP报文每60秒发送一次
Holdtime is 180 seconds //CDP保持时间是180秒
Ethernet0/1 is up, line protocol is up
Encapsulation ARPA
Sending CDP packets every 60 seconds
Holdtime is 180 seconds
Ethernet0/2 is administratively down, line protocol is down
Encapsulation ARPA
Sending CDP packets every 60 seconds
Holdtime is 180 seconds
Ethernet0/3 is administratively down, line protocol is down
Encapsulation ARPA
Sending CDP packets every 60 seconds
Holdtime is 180 seconds
cdp enabled interfaces : 4
interfaces up : 2
interfaces down : 2
R1的E0/0和E0/1接口已经运行CDP。
检查R1上的CDP邻居:
R1#show cdp neighbors
Capability Codes: R - Router, T - Trans Bridge, B - Source Route Bridge
S - Switch, H - Host, I - IGMP, r - Repeater, P - Phone,
D - Remote, C - CVTA, M - Two-port Mac Relay
Device ID Local Intrfce Holdtme Capability Platform Port ID
SW1 Eth 0/0 169 R S I Linux Uni Eth 0/0
R2 Eth 0/1 163 R B Linux Uni Eth 0/0
Total cdp entries displayed : 2
R1上能够看到SW1和R2两个CDP邻居。
检查R1上的CDP条目:
R1#show cdp entry *
-------------------------
Device ID: SW1 //R1的CDP邻居SW1
Entry address(es):
IP address: 192.168.1.1 //SW1的IP地址
Platform: Linux Unix, Capabilities: Router Switch IGMP
Interface: Ethernet0/0, Port ID (outgoing port): Ethernet0/0 //R1的E0/0连接到了SW1的E0/0
Holdtime : 132 sec
Version :
Cisco IOS Software, Linux Software (I86BI_LINUXL2-ADVENTERPRISEK9-M), Version 15.2(CML_NIGHTLY_20190423)FLO_DSGS7, EARLY DEPLOYMENT DEVELOPMENT BUILD, synced to V152_6_0_81_E
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2019 by Cisco Systems, Inc.
Compiled Tue 23-Apr-19 02:38 by mmen
advertisement version: 2
VTP Management Domain: ''
Native VLAN: 1
Duplex: full
Management address(es):
IP address: 192.168.1.1
-------------------------
Device ID: R2 //R1的CDP邻居R2
Entry address(es):
IP address: 192.168.12.2 //R2的IP地址
Platform: Linux Unix, Capabilities: Router Source-Route-Bridge
Interface: Ethernet0/1, Port ID (outgoing port): Ethernet0/0 //R1的E0/1连接到了R2的E0/0
Holdtime : 124 sec
Version :
Cisco IOS Software, Linux Software (I86BI_LINUX-ADVENTERPRISEK9-M), Version 15.7(3)M2, DEVELOPMENT TEST SOFTWARE
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2018 by Cisco Systems, Inc.
Compiled Wed 28-Mar-18 11:18 by prod_rel_team
advertisement version: 2
Management address(es):
IP address: 192.168.12.2
R1有两个CDP邻居，分别是SW1和R2。
实验04：配置LLDP协议
实验目的
- 了解链路层发现协议LLDP的运行原理
- 掌握链路层发现协议LLDP的配置方法
实验拓扑
实验需求
- 根据实验拓扑图，完成设备的基本配置；
- 在R1上使用LLDP查看SW1和R2的设备信息；
- 注意：LLDP默认关闭，需要手工打开。
实验步骤
步骤1：设备的基本配置
配置R1：
Router>enable
Router#configure terminal
Router(config)#hostname R1
R1(config)#no ip domain-lookup
R1(config)#line console 0
R1(config-line)#exec-timeout 0 0
R1(config-line)#logging synchronous
R1(config-line)#exit
R1(config)#interface ethernet0/0
R1(config-if)#ip address 192.168.1.254 255.255.255.0
R1(config-if)#no shutdown
R1(config-if)#exit
R1(config)#interface ethernet0/1
R1(config-if)#ip address 192.168.12.1 255.255.255.0
R1(config-if)#no shutdown
R1(config-if)#end
R1#
配置R2：
Router>enable
Router#configure terminal
Router(config)#hostname R2
R2(config)#no ip domain-lookup
R2(config)#line console 0
R2(config-line)#exec-timeout 0 0
R2(config-line)#logging synchronous
R2(config-line)#exit
R2(config)#interface ethernet0/0
R2(config-if)#ip address 192.168.12.2 255.255.255.0
R2(config-if)#no shutdown
R2(config-if)#end
R2#
配置SW1：
Switch>enable
Switch#configure terminal
Switch(config)#hostname SW1
SW1(config)#no ip domain-lookup
SW1(config)#line console 0
SW1(config-line)#exec-timeout 0 0
SW1(config-line)#logging synchronous
SW1(config-line)#exit
SW1(config)#interface vlan 1
SW1(config-if)#ip address 192.168.1.1 255.255.255.0
SW1(config-if)#no shutdown
SW1(config-if)#exit
SW1(config)#ip default-gateway 192.168.1.254
SW1(config)#end
SW1#
步骤2：配置LLDP
配置R1：
R1>enable
R1#configure terminal
R1(config)#lldp run //运行LLDP
配置R2：
R2>enable
R2#configure terminal
R2(config)#lldp run
配置SW1：
SW1>enable
SW1#configure terminal
SW1(config)#lldp run
实验检查
步骤1：检查设备的接口状态
检查R1：
R1#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 192.168.1.254 YES manual up up
Ethernet0/1 192.168.12.1 YES manual up up
Ethernet0/2 unassigned YES unset administratively down down
Ethernet0/3 unassigned YES unset administratively down down
R1使用到的接口已经配置好IP地址，并且是up up状态。
检查R2：
R2#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 192.168.12.2 YES manual up up
Ethernet0/1 unassigned YES TFTP administratively down down
Ethernet0/2 unassigned YES unset administratively down down
Ethernet0/3 unassigned YES unset administratively down down
R2使用到的接口已经配置好IP地址，并且是up up状态。
检查SW1：
SW1#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 unassigned YES unset up up
Ethernet0/1 unassigned YES unset up up
Ethernet0/2 unassigned YES unset up up
Ethernet0/3 unassigned YES unset up up
Vlan1 192.168.1.1 YES manual up up
SW1使用到的接口已经配置好IP地址，并且是up up状态。
步骤2：使用LLDP查看物理相连的设备信息
检查R1上运行LLDP的接口:
R1#show lldp interface
Ethernet0/0:
Tx: enabled
Rx: enabled
Tx state: IDLE
Rx state: WAIT FOR FRAME
Ethernet0/1:
Tx: enabled
Rx: enabled
Tx state: IDLE
Rx state: WAIT FOR FRAME
Ethernet0/2:
Tx: enabled
Rx: enabled
Tx state: INIT
Rx state: WAIT PORT OPER
Ethernet0/3:
Tx: enabled
Rx: enabled
Tx state: INIT
--More--
R1的E0/0和E0/1接口已经运行LLDP。
检查R1上的LLDP邻居:
R1#show lldp neighbors
Capability codes:
(R) Router, (B) Bridge, (T) Telephone, (C) DOCSIS Cable Device
(W) WLAN Access Point, (P) Repeater, (S) Station, (O) Other
Device ID Local Intf Hold-time Capability Port ID
SW1 Et0/0 120 R Et0/0
R2 Et0/1 120 R Et0/0
Total entries displayed: 2
R1上能够看到SW1和R2两个LLDP邻居。
检查R1上的LLDP条目:
R1#show lldp entry *
Capability codes:
(R) Router, (B) Bridge, (T) Telephone, (C) DOCSIS Cable Device
(W) WLAN Access Point, (P) Repeater, (S) Station, (O) Other
------------------------------------------------
Local Intf: Et0/0 //R1本端的接口
Chassis id: aabb.cc00.3000
Port id: Et0/0 //对端的接口
Port Description: Ethernet0/0
System Name: SW1 //对端设备的主机名
System Description:
Cisco IOS Software, Linux Software (I86BI_LINUXL2-ADVENTERPRISEK9-M), Version 15.2(CML_NIGHTLY_20190423)FLO_DSGS7, EARLY DEPLOYMENT DEVELOPMENT BUILD, synced to V152_6_0_81_E
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2019 by
Time remaining: 103 seconds
System Capabilities: B,R
Enabled Capabilities: R
Management Addresses:
IP: 192.168.1.1 //SW1的IP地址
Auto Negotiation - not supported
Physical media capabilities - not advertised
Media Attachment Unit type - not advertised
Vlan ID: - not advertised
------------------------------------------------
Local Intf: Et0/1
Chassis id: aabb.cc00.2000
Port id: Et0/0
Port Description: Ethernet0/0
System Name: R2
System Description:
Cisco IOS Software, Linux Software (I86BI_LINUX-ADVENTERPRISEK9-M), Version 15.7(3)M2, DEVELOPMENT TEST SOFTWARE
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2018 by Cisco Systems, Inc.
Compiled Wed 28-Mar-18 11:18 by prod_rel_te
Time remaining: 98 seconds
System Capabilities: B,R
Enabled Capabilities: R
Management Addresses:
IP: 192.168.12.2
Auto Negotiation - not supported
Physical media capabilities - not advertised
Media Attachment Unit type - not advertised
Vlan ID: - not advertised
Total entries displayed: 2
R1有两个CDP邻居，分别是SW1和R2。
实验05：管理交换机MAC地址表
实验目的
- 理解交换机的工作原理
- 掌握交换机MAC地址表的管理方法
实验拓扑
实验需求
- 根据实验拓扑图，完成设备的基本配置；
- 测试主机之间以及主机和服务器之间的网络连通性；
- 把服务器的MAC地址绑定到SW2的MAC地址表。
实验步骤
步骤1：设备的基本配置
配置PC1：
VPCS> set pcname PC1 //设置主机名
PC1> ip 10.1.1.1/24 //设置IP地址
配置PC2：
VPCS> set pcname PC2
PC2> ip 10.1.1.2/24
配置PC3：
VPCS> set pcname PC3
PC3> ip 10.1.1.3/24
配置PC4：
VPCS> set pcname PC4
PC4> ip 10.1.1.4/24
配置Server：
VPCS> set pcname Server
Server> ip 10.1.1.5/24
配置SW1：
Switch>enable
Switch#configure terminal
Switch(config)#hostname SW1
SW1(config)#no ip domain-lookup
SW1(config)#line console 0
SW1(config-line)#exec-timeout 0 0
SW1(config-line)#logging synchronous
SW1(config-line)#end
SW1#
配置SW2：
Switch>enable
Switch#configure terminal
Switch(config)#hostname SW2
SW2(config)#no ip domain-lookup
SW2(config)#line console 0
SW2(config-line)#exec-timeout 0 0
SW2(config-line)#logging synchronous
SW2(config-line)#end
SW2#
步骤2：绑定服务器的MAC地址到SW2的MAC地址表
配置SW2：
SW2#configure terminal
SW2(config)# mac address-table static 0050.7966.6805 vlan 1 interface Ethernet0/3
实验检查
步骤1：网络连通性测试
PC1> ping 10.1.1.2
84 bytes from 10.1.1.2 icmp_seq=1 ttl=64 time=0.502 ms
84 bytes from 10.1.1.2 icmp_seq=2 ttl=64 time=0.738 ms
84 bytes from 10.1.1.2 icmp_seq=3 ttl=64 time=0.584 ms
84 bytes from 10.1.1.2 icmp_seq=4 ttl=64 time=0.646 ms
84 bytes from 10.1.1.2 icmp_seq=5 ttl=64 time=0.730 ms
PC1与PC2的连通性正常。
PC1> ping 10.1.1.3
84 bytes from 10.1.1.3 icmp_seq=1 ttl=64 time=0.968 ms
84 bytes from 10.1.1.3 icmp_seq=2 ttl=64 time=0.816 ms
84 bytes from 10.1.1.3 icmp_seq=3 ttl=64 time=1.265 ms
84 bytes from 10.1.1.3 icmp_seq=4 ttl=64 time=1.122 ms
84 bytes from 10.1.1.3 icmp_seq=5 ttl=64 time=1.242 ms
PC1与PC3的连通性正常。
PC1> ping 10.1.1.4
84 bytes from 10.1.1.4 icmp_seq=1 ttl=64 time=0.900 ms
84 bytes from 10.1.1.4 icmp_seq=2 ttl=64 time=1.303 ms
84 bytes from 10.1.1.4 icmp_seq=3 ttl=64 time=0.880 ms
84 bytes from 10.1.1.4 icmp_seq=4 ttl=64 time=1.086 ms
84 bytes from 10.1.1.4 icmp_seq=5 ttl=64 time=1.259 ms
PC1与PC4的连通性正常。
PC1> ping 10.1.1.5
84 bytes from 10.1.1.5 icmp_seq=1 ttl=64 time=0.875 ms
84 bytes from 10.1.1.5 icmp_seq=2 ttl=64 time=1.248 ms
84 bytes from 10.1.1.5 icmp_seq=3 ttl=64 time=1.145 ms
84 bytes from 10.1.1.5 icmp_seq=4 ttl=64 time=0.942 ms
84 bytes from 10.1.1.5 icmp_seq=5 ttl=64 time=1.317 ms
PC1与Server的连通性正常。
步骤2：管理交换机的MAC地址表
查看SW1的MAC地址表：
SW1#show mac address-table
Mac Address Table
-------------------------------------------
Vlan Mac Address Type Ports
---- ----------- -------- -----
1 0050.7966.6801 DYNAMIC Et0/1
1 0050.7966.6802 DYNAMIC Et0/2
1 0050.7966.6803 DYNAMIC Et0/0
1 0050.7966.6804 DYNAMIC Et0/0
1 0050.7966.6805 DYNAMIC Et0/0
1 aabb.cc00.7000 DYNAMIC Et0/0
Total Mac Addresses for this criterion: 6
SW1已经学习到PC1、PC2、PC3、PC4以及Server的MAC地址，学习方式是Dynamic。
清除SW1动态学习到的MAC地址条目：
SW1#clear mac address-table dynamic
SW1#show mac address-table
Mac Address Table
-------------------------------------------
Vlan Mac Address Type Ports
---- ----------- -------- -----
1 aabb.cc00.7000 DYNAMIC Et0/0
Total Mac Addresses for this criterion: 1
Clear mac address-table dynamic命令能够清除通过Dynamic方式学习到的MAC地址条目。
查看SW2的MAC地址表：
SW2#show mac address-table
Mac Address Table
-------------------------------------------
Vlan Mac Address Type Ports
---- ----------- -------- -----
1 0050.7966.6801 DYNAMIC Et0/0
1 0050.7966.6803 DYNAMIC Et0/1
1 0050.7966.6804 DYNAMIC Et0/2
1 0050.7966.6805 STATIC Et0/3
1 aabb.cc00.6000 DYNAMIC Et0/0
Total Mac Addresses for this criterion: 5
Server的MAC地址是静态绑定的，所以类型是STATIC。
清除SW2动态学习到的MAC地址条目：
SW2#clear mac address-table dynamic
SW2#show mac address-table
Mac Address Table
-------------------------------------------
Vlan Mac Address Type Ports
---- ----------- -------- -----
1 0050.7966.6805 STATIC Et0/3
1 aabb.cc00.6000 DYNAMIC Et0/0
Total Mac Addresses for this criterion: 2
Clear mac address-table dynamic命令无法清除静态绑定的MAC地址条目。
实验06：配置VLAN
实验目的
- 理解VLAN的运行原理
- 掌握VLAN的配置方法
实验拓扑
实验需求
- 根据实验拓扑图，完成设备的基本配置；
- 分别在SW1和SW2上创建VLAN 10，名字为IT；
- 分别在SW1和SW2上把接口E0/0、E0/1和E0/2划入VLAN10；
- 测试PC之间的网络连通性。
实验步骤
步骤1：设备的基本配置
配置PC1：
VPCS> set pcname PC1 //设置主机名
PC1> ip 10.1.1.1/24 //设置IP地址
配置PC2：
VPCS> set pcname PC2
PC2> ip 10.1.1.2/24
配置PC3：
VPCS> set pcname PC3
PC3> ip 10.1.1.3/24
配置PC4：
VPCS> set pcname PC4
PC4> ip 10.1.1.4/24
配置SW1：
Switch>enable
Switch#configure terminal
Switch(config)#hostname SW1
SW1(config)#no ip domain-lookup
SW1(config)#line console 0
SW1(config-line)#exec-timeout 0 0
SW1(config-line)#logging synchronous
SW1(config-line)#end
SW1#
配置SW2：
Switch>enable
Switch#configure terminal
Switch(config)#hostname SW2
SW2(config)#no ip domain-lookup
SW2(config)#line console 0
SW2(config-line)#exec-timeout 0 0
SW2(config-line)#logging synchronous
SW2(config-line)#end
SW2#
步骤2：VLAN的配置
配置SW1：
SW1(config)#vlan 10
SW1(config-vlan)#name IT
SW1(config-vlan)#exit
SW1(config)#interface Eth0/0
SW1(config-if)#switchport mode access
SW1(config-if)#switchport access vlan 10
SW1(config-if)#exit
SW1(config)#interface Eth0/1
SW1(config-if)#switchport mode access
SW1(config-if)#switchport access vlan 10
SW1(config-if)#exit
SW1(config)#interface Eth0/2
SW1(config-if)#switchport mode access
SW1(config-if)#switchport access vlan 10
SW1(config-if)#end
SW1#
配置SW2：
SW2(config)#vlan 10
SW2(config-vlan)#name IT
SW2(config-vlan)#exit
SW2(config)#interface range Eth0/0 - 2 //同时将多个端口划入VLAN 10
SW2(config-if-range)#switchport mode access
SW2(config-if-range)#switchport access vlan 10
SW2(config-if-range)#end
SW2#
实验检查
步骤1：检查SW1的VLAN信息
SW1#show vlan brief
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Et0/3
10 IT active Et0/0, Et0/1, Et0/2
1002 fddi-default act/unsup
1003 token-ring-default act/unsup
1004 fddinet-default act/unsup
1005 trnet-default act/unsup
VLAN10有三个接口，分别是Et0/0、Et0/1、Et0/2。
步骤2：检查SW1的接口配置
SW1#sh run int Eth0/0
Building configuration...
Current configuration : 80 bytes
!
interface Ethernet0/0
switchport access vlan 10
switchport mode access
end
SW1#sh run int Eth0/1
Building configuration...
Current configuration : 80 bytes
!
interface Ethernet0/1
switchport access vlan 10
switchport mode access
end
SW1#sh run int Eth0/2
Building configuration...
Current configuration : 80 bytes
!
interface Ethernet0/2
switchport access vlan 10
switchport mode access
end
步骤3：测试网络的连通性
PC1> ping 10.1.1.2
84 bytes from 10.1.1.2 icmp_seq=1 ttl=64 time=0.835 ms
84 bytes from 10.1.1.2 icmp_seq=2 ttl=64 time=0.765 ms
84 bytes from 10.1.1.2 icmp_seq=3 ttl=64 time=0.866 ms
84 bytes from 10.1.1.2 icmp_seq=4 ttl=64 time=0.824 ms
84 bytes from 10.1.1.2 icmp_seq=5 ttl=64 time=0.828 ms
PC1与PC2的连通性正常。
PC1> ping 10.1.1.3
84 bytes from 10.1.1.3 icmp_seq=1 ttl=64 time=1.105 ms
84 bytes from 10.1.1.3 icmp_seq=2 ttl=64 time=1.337 ms
84 bytes from 10.1.1.3 icmp_seq=3 ttl=64 time=1.235 ms
84 bytes from 10.1.1.3 icmp_seq=4 ttl=64 time=1.291 ms
84 bytes from 10.1.1.3 icmp_seq=5 ttl=64 time=1.059 ms
PC1与PC3的连通性正常。
PC1> ping 10.1.1.4
84 bytes from 10.1.1.4 icmp_seq=1 ttl=64 time=0.826 ms
84 bytes from 10.1.1.4 icmp_seq=2 ttl=64 time=0.957 ms
84 bytes from 10.1.1.4 icmp_seq=3 ttl=64 time=1.194 ms
84 bytes from 10.1.1.4 icmp_seq=4 ttl=64 time=1.214 ms
84 bytes from 10.1.1.4 icmp_seq=5 ttl=64 time=1.184 ms
PC1与PC4的连通性正常。
实验07：配置Trunk
实验目的
- 理解Trunk的运行原理
- 掌握Trunk的配置方法
实验拓扑
实验需求
- 根据实验拓扑图，完成设备的基本配置；
- 分别在SW1和SW2创建VLAN10和VLAN20，名字为IT和HR；
- 分别在SW1和SW2上把相应的接口划入VLAN10和VLAN20；
- 把SW1和SW2互连的链路配置成Trunk，采用Dot1q封装；
- 测试PC之间的网络连通性。
- 实验步骤
步骤1：设备的基本配置
配置PC1：
VPCS> set pcname PC1 //设置主机名
PC1> ip 10.1.1.1/24 //设置IP地址
配置PC2：
VPCS> set pcname PC2
PC2> ip 10.1.2.1/24
配置PC3：
VPCS> set pcname PC3
PC3> ip 10.1.1.2/24
配置PC4：
VPCS> set pcname PC4
PC4> ip 10.1.2.2/24
配置SW1：
Switch>enable
Switch#configure terminal
Switch(config)#hostname SW1
SW1(config)#no ip domain-lookup
SW1(config)#line console 0
SW1(config-line)#exec-timeout 0 0
SW1(config-line)#logging synchronous
SW1(config-line)#end
SW1#
配置SW2：
Switch>enable
Switch#configure terminal
Switch(config)#hostname SW2
SW2(config)#no ip domain-lookup
SW2(config)#line console 0
SW2(config-line)#exec-timeout 0 0
SW2(config-line)#logging synchronous
SW2(config-line)#end
SW2#
步骤2：VLAN的配置
配置SW1：
SW1(config)#vlan 10
SW1(config-vlan)#name IT
SW1(config-vlan)#exit
SW1(config)#vlan 20
SW1(config-vlan)#name HR
SW1(config-vlan)#exit
SW1(config)#interface Eth0/1
SW1(config-if)#switchport mode access
SW1(config-if)#switchport access vlan 10
SW1(config-if)#exit
SW1(config)#interface Eth0/2
SW1(config-if)#switchport mode access
SW1(config-if)#switchport access vlan 20
SW1(config-if)#end
SW1#
配置SW2：
SW2(config)#vlan 10
SW2(config-vlan)#name IT
SW2(config-vlan)#exit
SW2(config)#vlan 20
SW2(config-vlan)#name HR
SW2(config-vlan)#exit
SW2(config)#interface Eth0/1
SW2(config-if)#switchport mode access
SW2(config-if)#switchport access vlan 10
SW2(config-if)#exit
SW2(config)#interface Eth0/2
SW2(config-if)#switchport mode access
SW2(config-if)#switchport access vlan 20
SW2(config-if)#end
SW2#
步骤3：Trunk的配置
配置SW1：
SW1(config)#interface Eth0/0
SW1(config-if)#switchport trunk encapsulation dot1q
SW1(config-if)#switchport mode trunk
SW1(config-if)#end
SW1#
配置SW2：
SW2(config)#interface Eth0/0
SW2(config-if)#switchport trunk encapsulation dot1q
SW2(config-if)#switchport mode trunk
SW2(config-if)#end
SW2#
实验检查
步骤1：检查VLAN
检查SW1：
SW1#show vlan brief
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Et0/3
10 IT active Et0/1
20 HR active Et0/2
1002 fddi-default act/unsup
1003 token-ring-default act/unsup
1004 fddinet-default act/unsup
1005 trnet-default act/unsup
SW1已经创建好VLAN10和VLAN20，并已将对应接口划入。
检查SW2：
SW2#show vlan brief
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Et0/3
10 IT active Et0/1
20 HR active Et0/2
1002 fddi-default act/unsup
1003 token-ring-default act/unsup
1004 fddinet-default act/unsup
1005 trnet-default act/unsup
SW2已经创建好VLAN10和VLAN20，并已将对应接口划入。
步骤2：检查Trunk
检查SW1：
SW1#show interfaces Eth0/0 switchport
Name: Et0/0
Switchport: Enabled
Administrative Mode: trunk
Operational Mode: trunk
Administrative Trunking Encapsulation: dot1q
Operational Trunking Encapsulation: dot1q
Negotiation of Trunking: On
Access Mode VLAN: 1 (default)
Trunking Native Mode VLAN: 1 (default)
Administrative Native VLAN tagging: enabled
Voice VLAN: none
Administrative private-vlan host-association: none
Administrative private-vlan mapping: none
Administrative private-vlan trunk native VLAN: none
Administrative private-vlan trunk Native VLAN tagging: enabled
Administrative private-vlan trunk encapsulation: dot1q
Administrative private-vlan trunk normal VLANs: none
Administrative private-vlan trunk associations: none
Administrative private-vlan trunk mappings: none
Operational private-vlan: none
Trunking VLANs Enabled: ALL
Pruning VLANs Enabled: 2-1001
Capture Mode Disabled
Capture VLANs Allowed: ALL
Protected: false
Appliance trust: none
E0/0接口当前是Trunk，封装的协议是dot1q。
SW1#show interfaces trunk
Port Mode Encapsulation Status Native vlan
Et0/0 on 802.1q trunking 1
Port Vlans allowed on trunk
Et0/0 1-4094
Port Vlans allowed and active in management domain
Et0/0 1,10,20
Port Vlans in spanning tree forwarding state and not pruned
Et0/0 1,10,20
E0/0封装的Trunk协议是dot1q，当前的状态是trunking。
SW1#sh run int Eth0/0
Building configuration...
Current configuration : 90 bytes
!
interface Ethernet0/0
switchport trunk encapsulation dot1q
switchport mode trunk
end
E0/0接口的Trunk封装协议是dot1q，模式是trunk。
检查SW2：
SW2#show interfaces trunk
Port Mode Encapsulation Status Native vlan
Et0/0 on 802.1q trunking 1
Port Vlans allowed on trunk
Et0/0 1-4094
Port Vlans allowed and active in management domain
Et0/0 1,10,20
Port Vlans in spanning tree forwarding state and not pruned
Et0/0 1,10,20
E0/0封装的Trunk协议是dot1q，当前的状态是trunking。
步骤4：网络连通性测试
测试PC1和PC3的连通性：
PC1> ping 10.1.1.2
84 bytes from 10.1.1.2 icmp_seq=1 ttl=64 time=1.603 ms
84 bytes from 10.1.1.2 icmp_seq=2 ttl=64 time=1.234 ms
84 bytes from 10.1.1.2 icmp_seq=3 ttl=64 time=1.027 ms
84 bytes from 10.1.1.2 icmp_seq=4 ttl=64 time=2.372 ms
84 bytes from 10.1.1.2 icmp_seq=5 ttl=64 time=1.200 ms
PC1和PC3的网络连通性正常。
测试PC2和PC4的连通性：
PC2> ping 10.1.2.2
84 bytes from 10.1.2.2 icmp_seq=1 ttl=64 time=0.887 ms
84 bytes from 10.1.2.2 icmp_seq=2 ttl=64 time=0.932 ms
84 bytes from 10.1.2.2 icmp_seq=3 ttl=64 time=1.295 ms
84 bytes from 10.1.2.2 icmp_seq=4 ttl=64 time=0.926 ms
84 bytes from 10.1.2.2 icmp_seq=5 ttl=64 time=1.011 ms
PC2和PC4的网络连通性正常。
实验08：配置VTP
实验目的
- 了解VTP的运行原理
- 掌握VTP的配置方法
实验拓扑
实验需求
- 根据实验拓扑图，完成设备的基本配置；
- 把交换机互连的链路配置成Trunk，采用Dot1q封装；
- SW1是VTP服务器，SW2和SW3是VTP客户端，VTP域名为xmws，VTP密码为wisdom，开启VTP裁剪；
- 在SW1上创建VLAN10和VLAN20，名字为IT和HR；
- 分别在SW1、SW2和SW3上把相应的接口划入VLAN10和VLAN20；
实验步骤
步骤1：设备的基本配置
配置PC1：
VPCS> set pcname PC1 //设置主机名
PC1> ip 10.1.1.1/24 //设置IP地址
配置PC2：
VPCS> set pcname PC2
PC2> ip 10.1.2.1/24
配置PC3：
VPCS> set pcname PC3
PC3> ip 10.1.1.2/24
配置PC4：
VPCS> set pcname PC4
PC4> ip 10.1.2.2/24
配置PC5：
VPCS> set pcname PC5
PC5> ip 10.1.1.3/24
配置PC6：
VPCS> set pcname PC6
PC6> ip 10.1.2.3/24
配置SW1：
Switch>enable
Switch#configure terminal
Switch(config)#hostname SW1
SW1(config)#no ip domain-lookup
SW1(config)#line console 0
SW1(config-line)#exec-timeout 0 0
SW1(config-line)#logging synchronous
SW1(config-line)#end
SW1#
配置SW2：
Switch>enable
Switch#configure terminal
Switch(config)#hostname SW2
SW2(config)#no ip domain-lookup
SW2(config)#line console 0
SW2(config-line)#exec-timeout 0 0
SW2(config-line)#logging synchronous
SW2(config-line)#end
SW2#
配置SW3：
Switch>enable
Switch#configure terminal
Switch(config)#hostname SW3
SW3(config)#no ip domain-lookup
SW3(config)#line console 0
SW3(config-line)#exec-timeout 0 0
SW3(config-line)#logging synchronous
SW3(config-line)#end
SW3#
步骤2：配置Trunk
配置SW1：
SW1(config)#interface Eth0/0
SW1(config-if)#switchport trunk encapsulation dot1q
SW1(config-if)#switchport mode trunk
SW1(config-if)#end
SW1#
配置SW2：
SW2(config)#interface range Eth0/0 , Eth0/3
SW2(config-if-range)#switchport trunk encapsulation dot1q
SW2(config-if-range)#switchport mode trunk
SW2(config-if-range)#end
SW2#
配置SW3：
SW3(config)#interface Eth0/0
SW3(config-if)#switchport trunk encapsulation dot1q
SW3(config-if)#switchport mode trunk
SW3(config-if)#end
SW3#
步骤3：配置VTP
配置SW1：
SW1(config)#vtp mode server
SW1(config)#vtp domain xmws
SW1(config)#vtp password wisdom
SW1(config)#vtp pruning
配置SW2：
SW2(config)#vtp mode client
SW2(config)#vtp domain xmws
SW2(config)#vtp password wisdom
配置SW3：
SW3(config)#vtp mode client
SW3(config)#vtp domain xmws
SW3(config)#vtp password wisdom
步骤4：配置VLAN
配置SW1：
SW1(config)#vlan 10
SW1(config-vlan)#name IT
SW1(config-vlan)#exit
SW1(config)#vlan 20
SW1(config-vlan)#name HR
SW1(config-vlan)#exit
SW1(config)#interface Eth0/1
SW1(config-if)#switchport mode access
SW1(config-if)#switchport access vlan 10
SW1(config-if)#exit
SW1(config)#interface Eth0/2
SW1(config-if)#switchport mode access
SW1(config-if)#switchport access vlan 20
SW1(config-if)#end
SW1#
配置SW2：
SW2(config)#interface Eth0/1
SW2(config-if)#switchport mode access
SW2(config-if)#switchport access vlan 10
SW2(config-if)#exit
SW2(config)#interface Eth0/2
SW2(config-if)#switchport mode access
SW2(config-if)#switchport access vlan 20
SW2(config-if)#end
SW2#
配置SW3：
SW3(config)#interface Eth0/1
SW3(config-if)#switchport mode access
SW3(config-if)#switchport access vlan 10
SW3(config-if)#exit
SW3(config)#interface Eth0/2
SW3(config-if)#switchport mode access
SW3(config-if)#switchport access vlan 20
SW3(config-if)#end
SW3#
实验检查
步骤1：检查VTP
检查SW1：
SW1#show vtp status
VTP Version capable : 1 to 3
VTP version running : 1
VTP Domain Name : xmws
VTP Pruning Mode : Enabled
VTP Traps Generation : Disabled
Device ID : aabb.cc80.7000
Configuration last modified by 0.0.0.0 at 4-23-20 17:18:33
Local updater ID is 0.0.0.0 (no valid interface found)
Feature VLAN:
--------------
VTP Operating Mode : Server
Maximum VLANs supported locally : 1005
Number of existing VLANs : 7
Configuration Revision : 3
MD5 digest : 0x85 0x2D 0x06 0xA3 0x42 0x1B 0x93 0xEE
0x90 0x66 0x1F 0x3C 0xA9 0x52 0xD5 0x38
SW1是VTP服务器，域名是xmws，裁剪已经启用。
SW1#show vtp password
VTP Password: wisdom
VTP密码是wisdom。
检查SW2：
SW2#show vtp status
VTP Version capable : 1 to 3
VTP version running : 1
VTP Domain Name : xmws
VTP Pruning Mode : Enabled
VTP Traps Generation : Disabled
Device ID : aabb.cc80.8000
Configuration last modified by 0.0.0.0 at 4-23-20 17:18:33
Feature VLAN:
--------------
VTP Operating Mode : Client
Maximum VLANs supported locally : 1005
Number of existing VLANs : 7
Configuration Revision : 3
MD5 digest : 0x85 0x2D 0x06 0xA3 0x42 0x1B 0x93 0xEE
0x90 0x66 0x1F 0x3C 0xA9 0x52 0xD5 0x38
SW2是VTP客户端，域名是xmws，裁剪已经启用。
SW2#show vtp password
VTP Password: wisdom
VTP密码是wisdom。
步骤2：检查VLAN信息
检查SW1：
SW1#show vlan brief
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Et0/3
10 IT active Et0/1
20 HR active Et0/2
1002 fddi-default act/unsup
1003 token-ring-default act/unsup
1004 fddinet-default act/unsup
1005 trnet-default act/unsup
SW1作为VTP服务器，已经创建好VLAN10和VLAN20。
检查SW2：
SW2#show vlan brief
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active
10 IT active Et0/1
20 HR active Et0/2
1002 fddi-default act/unsup
1003 token-ring-default act/unsup
1004 fddinet-default act/unsup
1005 trnet-default act/unsup
SW2作为VTP客户端，已经同步VTP服务器的VLAN信息。
检查SW3：
SW3#show vlan brief
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Et0/3
10 IT active Et0/1
20 HR active Et0/2
1002 fddi-default act/unsup
1003 token-ring-default act/unsup
1004 fddinet-default act/unsup
1005 trnet-default act/unsup
SW3作为VTP客户端，已经同步VTP服务器的VLAN信息。
实验09：配置生成树
实验目的
- 理解生成树的运行原理
- 掌握生成树的配置方法
实验拓扑
实验需求
- 根据实验拓扑图，完成设备的基本配置；
- 把交换机互连的链路配置成Trunk，采用Dot1q封装；
- 分别在SW1、SW2和SW3上创建VLAN10和VLAN20，并将相应的接口划到对应的VLAN；
- SW1要作为VLAN10的根，VLAN20的备份根，使PC1访问Server1的路径通过：PC1->SW3->SW1->Server1；
- SW2要作为VLAN20的根，VLAN10的备份根，使PC2访问Server2的路径通过：PC2->SW3->SW2->Server2；
实验步骤
步骤1：设备的基本配置
配置PC1：
VPCS> set pcname PC1 //设置主机名
PC1> ip 192.168.1.1/24 //设置IP地址
配置PC2：
VPCS> set pcname PC2
PC2> ip 172.16.1.1/24
配置Server1：
VPCS> set pcname Server1
Server1> ip 192.168.1.88/24
配置Server2：
VPCS> set pcname Server2
Server2> ip 172.16.1.88/24
配置SW1：
Switch>enable
Switch#configure terminal
Switch(config)#hostname SW1
SW1(config)#no ip domain-lookup
SW1(config)#line console 0
SW1(config-line)#exec-timeout 0 0
SW1(config-line)#logging synchronous
SW1(config-line)#end
SW1#
配置SW2：
Switch>enable
Switch#configure terminal
Switch(config)#hostname SW2
SW2(config)#no ip domain-lookup
SW2(config)#line console 0
SW2(config-line)#exec-timeout 0 0
SW2(config-line)#logging synchronous
SW2(config-line)#end
SW2#
配置SW3：
Switch>enable
Switch#configure terminal
Switch(config)#hostname SW3
SW3(config)#no ip domain-lookup
SW3(config)#line console 0
SW3(config-line)#exec-timeout 0 0
SW3(config-line)#logging synchronous
SW3(config-line)#end
SW3#
步骤2：配置Trunk与VLAN
配置SW1：
SW1(config)#interface range Eth0/0 - 1
SW1(config-if-range)#switchport trunk encapsulation dot1q
SW1(config-if-range)#switchport mode trunk
SW1(config-if-range)#exit
SW1(config)#vlan 10
SW1(config-vlan)#name IT
SW1(config-vlan)#exit
SW1(config)#vlan 20
SW1(config-vlan)#name HR
SW1(config-vlan)#exit
SW1(config)#interface Eth0/2
SW1(config-if)#switchport mode access
SW1(config-if)#switchport access vlan 10
SW1(config-if)#exit
SW1(config)#end
SW1#
配置SW2：
SW2(config)#interface range Eth0/1 , Eth0/3
SW2(config-if-range)#switchport trunk encapsulation dot1q
SW2(config-if-range)#switchport mode trunk
SW2(config-if-range)#exit
SW2(config)#vlan 10
SW2(config-vlan)#name IT
SW2(config-vlan)#exit
SW2(config)#vlan 20
SW2(config-vlan)#name HR
SW2(config-vlan)#exit
SW2(config)#interface Eth0/2
SW2(config-if)#switchport mode access
SW2(config-if)#switchport access vlan 20
SW2(config-if)#exit
SW2(config)#end
SW2#
配置SW3：
SW3(config)#interface range Eth0/0 , Eth0/3
SW3(config-if-range)#switchport trunk encapsulation dot1q
SW3(config-if-range)#switchport mode trunk
SW3(config-if-range)#exit
SW3(config)#vlan 10
SW3(config-vlan)#name IT
SW3(config-vlan)#exit
SW3(config)#vlan 20
SW3(config-vlan)#name HR
SW3(config-vlan)#exit
SW3(config)#interface Eth0/1
SW3(config-if)#switchport mode access
SW3(config-if)#switchport access vlan 10
SW3(config-if)#exit
SW3(config)#interface Eth0/2
SW3(config-if)#switchport mode access
SW3(config-if)#switchport access vlan 20
SW2(config-if)#exit
SW3(config)#end
SW3#
步骤3：配置生成树
配置SW1：
SW1(config)#spanning-tree vlan 10 root primary
SW1(config)#spanning-tree vlan 20 root secondary
配置SW2：
SW2(config)#spanning-tree vlan 20 root primary
SW2(config)#spanning-tree vlan 10 root secondary
实验检查
步骤1：检查VLAN10的生成树
检查SW1：
SW1#show spanning-tree vlan 10
VLAN0010
Spanning tree enabled protocol ieee
Root ID Priority 24586
Address aabb.cc00.1000
This bridge is the root
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Bridge ID Priority 24586 (priority 24576 sys-id-ext 10)
Address aabb.cc00.1000
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Aging Time 15 sec
Interface Role Sts Cost Prio.Nbr Type
------------------- ---- --- --------- -------- --------------------------------
Et0/0 Desg FWD 100 128.1 P2p
Et0/1 Desg FWD 100 128.2 P2p
Et0/2 Desg FWD 100 128.3 P2p
SW1是VLAN10的根网桥，因为SW2是VLAN10的备份根网桥，所以SW3的E0/3针对VLAN10肯定是阻塞状态。
检查SW3：
SW3#show spanning-tree vlan 10
VLAN0010
Spanning tree enabled protocol ieee
Root ID Priority 24586
Address aabb.cc00.1000
Cost 100
Port 1 (Ethernet0/0)
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Bridge ID Priority 32778 (priority 32768 sys-id-ext 10)
Address aabb.cc00.3000
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Aging Time 300 sec
Interface Role Sts Cost Prio.Nbr Type
------------------- ---- --- --------- -------- --------------------------------
Et0/0 Root FWD 100 128.1 P2p
Et0/1 Desg FWD 100 128.2 P2p
Et0/3 Altn BLK 100 128.4 P2p
针对VLAN10，SW3的E0/3是阻塞的，E0/0是转发的，这样PC1访问Server1的路径就是：PC1->SW3->SW1->Server1。
步骤2：检查VLAN20的生成树
检查SW2：
SW2#show spanning-tree vlan 20
VLAN0020
Spanning tree enabled protocol ieee
Root ID Priority 24596
Address aabb.cc00.2000
This bridge is the root
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Bridge ID Priority 24596 (priority 24576 sys-id-ext 20)
Address aabb.cc00.2000
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Aging Time 300 sec
Interface Role Sts Cost Prio.Nbr Type
------------------- ---- --- --------- -------- --------------------------------
Et0/1 Desg FWD 100 128.2 P2p
Et0/2 Desg FWD 100 128.3 P2p
Et0/3 Desg FWD 100 128.4 P2p
SW2是VLAN20的根网桥，因为SW1是VLAN10的备份根网桥，所以SW3的E0/0针对VLAN20肯定是阻塞状态。
检查SW3：
SW3#show spanning-tree vlan 20
VLAN0020
Spanning tree enabled protocol ieee
Root ID Priority 24596
Address aabb.cc00.2000
Cost 100
Port 4 (Ethernet0/3)
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Bridge ID Priority 32788 (priority 32768 sys-id-ext 20)
Address aabb.cc00.3000
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Aging Time 300 sec
Interface Role Sts Cost Prio.Nbr Type
------------------- ---- --- --------- -------- --------------------------------
Et0/0 Altn BLK 100 128.1 P2p
Et0/2 Desg FWD 100 128.3 P2p
Et0/3 Root FWD 100 128.4 P2p
针对VLAN20，SW3的E0/0是阻塞的，E0/3是转发的，这样PC2访问Server2的路径就是：PC2->SW3->SW2->Server2。
实验10：配置VLAN间路由_01
实验目的
- 理解VLAN间路由的原理
- 掌握VLAN间路由的配置
实验拓扑
实验需求
- 根据实验拓扑图，完成设备的基本配置；
- 配置单臂路由实现VLAN10和VLAN20之间的互访。
实验步骤
步骤1：设备的基本配置
配置PC1：
VPCS> set pcname PC1 //设置主机名
PC1> ip 192.168.1.1/24 192.168.1.254 //设置IP地址与网关
配置PC2：
VPCS> set pcname PC2
PC2> ip 172.16.1.1/24 172.16.1.254
配置R1：
Router>enable
Router#configure terminal
Router(config)#hostname R1
R1(config)#no ip domain-lookup
R1(config)#line console 0
R1(config-line)#exec-timeout 0 0
R1(config-line)#logging synchronous
R1(config-line)#end
R1#
配置SW1：
Switch>enable
Switch#configure terminal
Switch(config)#hostname SW1
SW1(config)#no ip domain-lookup
SW1(config)#line console 0
SW1(config-line)#exec-timeout 0 0
SW1(config-line)#logging synchronous
SW1(config-line)#end
SW1#
步骤2：单臂路由的配置
配置R1：
R1(config)#interface Ethernet0/0
R1(config-if)#no shutdown
R1(config-if)#exit
R1(config)#interface Ethernet0/0.10
R1(config-if)#encapsulation dot1Q 10
R1(config-if)#ip address 192.168.1.254 255.255.255.0
R1(config-if)#exit
R1(config)#interface Ethernet0/0.20
R1(config-if)#encapsulation dot1Q 20
R1(config-if)#ip address 172.16.1.254 255.255.255.0
R1(config-if)#end
R1#
配置SW1：
SW1(config)#vlan 10
SW1(config-vlan)#name IT
SW1(config-vlan)#exit
SW1(config)#vlan 20
SW1(config-vlan)#name HR
SW1(config-vlan)#exit
SW1(config)#interface Ethernet0/0
SW1(config-if)#switchport trunk encapsulation dot1q
SW1(config-if)#switchport mode trunk
SW1(config)#interface Ethernet0/1
SW1(config-if)#switchport mode access
SW1(config-if)#switchport access vlan 10
SW1(config)#interface Ethernet0/2
SW1(config-if)#switchport mode access
SW1(config-if)#switchport access vlan 20
实验检查
步骤1：检查R1
检查R1的接口状态：
R1#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 unassigned YES unset up up
Ethernet0/0.10 192.168.1.254 YES manual up up
Ethernet0/0.20 172.16.1.254 YES manual up up
Ethernet0/1 unassigned YES unset administratively down down
Ethernet0/2 unassigned YES unset administratively down down
Ethernet0/3 unassigned YES unset administratively down down
检查R1的子接口信息：
R1#show vlans
Virtual LAN ID: 1 (IEEE 802.1Q Encapsulation)
vLAN Trunk Interface: Ethernet0/0
This is configured as native Vlan for the following interface(s) :
Ethernet0/0
Protocols Configured: Address: Received: Transmitted:
Ethernet0/0 (1)
Other 0 20
0 packets, 0 bytes input
20 packets, 1440 bytes output
Virtual LAN ID: 10 (IEEE 802.1Q Encapsulation)
vLAN Trunk Interface: Ethernet0/0.10
Protocols Configured: Address: Received: Transmitted:
Ethernet0/0.10 (10)
IP 192.168.1.254 14 9
Other 0 3
72 packets, 5232 bytes input
12 packets, 1056 bytes output
Virtual LAN ID: 20 (IEEE 802.1Q Encapsulation)
vLAN Trunk Interface: Ethernet0/0.20
Protocols Configured: Address: Received: Transmitted:
Ethernet0/0.20 (20)
IP 172.16.1.254 14 9
Other 0 3
72 packets, 5232 bytes input
12 packets, 1056 bytes output
子接口E0/0.10的VLAN ID是10，IP地址是192.168.1.254；
子接口E0/0.20的VLAN ID是20，IP地址是172.16.1.254。
步骤2：检查SW1
检查SW1的VLAN信息：
SW1#show vlan brief
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Et0/3
10 VLAN0010 active Et0/1
20 VLAN0020 active Et0/2
1002 fddi-default act/unsup
1003 token-ring-default act/unsup
1004 fddinet-default act/unsup
1005 trnet-default act/unsup
检查SW1的Trunk状态：
SW1#show interfaces trunk
Port Mode Encapsulation Status Native vlan
Et0/0 on 802.1q trunking 1
Port Vlans allowed on trunk
Et0/0 1-4094
Port Vlans allowed and active in management domain
Et0/0 1,10,20
Port Vlans in spanning tree forwarding state and not pruned
Et0/0 1,10,20
步骤3：测试网络连通性
PC1访问PC2：
PC1> ping 172.16.1.1
84 bytes from 172.16.1.1 icmp_seq=1 ttl=63 time=1.597 ms
84 bytes from 172.16.1.1 icmp_seq=2 ttl=63 time=1.237 ms
84 bytes from 172.16.1.1 icmp_seq=3 ttl=63 time=1.975 ms
84 bytes from 172.16.1.1 icmp_seq=4 ttl=63 time=1.274 ms
84 bytes from 172.16.1.1 icmp_seq=5 ttl=63 time=1.243 ms
PC1> trace 172.16.1.1
trace to 172.16.1.1, 8 hops max, press Ctrl+C to stop
1 192.168.1.254 0.443 ms 0.400 ms 0.715 ms
2 *172.16.1.1 1.938 ms (ICMP type:3, code:3, Destination port unreachable)
通过Trace看到，数据包先到网关（R1），再到PC2。
实验11：配置VLAN间路由_02
实验目的
- 理解VLAN间路由的原理
- 掌握VLAN间路由的配置
实验拓扑
实验需求
- 根据实验拓扑图，完成设备的基本配置；
- 通过三层交换机的SVI实现VLAN10和VLAN20的互访。
实验步骤
步骤1：设备的基本配置
配置PC1：
VPCS> set pcname PC1 //设置主机名
PC1> ip 192.168.1.1/24 192.168.1.254 //设置IP地址与网关
配置PC2：
VPCS> set pcname PC2
PC2> ip 172.16.1.1/24 172.16.1.254
配置SW1：
Switch>enable
Switch#configure terminal
Switch(config)#hostname SW1
SW1(config)#no ip domain-lookup
SW1(config)#line console 0
SW1(config-line)#exec-timeout 0 0
SW1(config-line)#logging synchronous
SW1(config-line)#end
SW1#
步骤2：VLAN间路由的配置
配置SW1：
SW1(config)#vlan 10
SW1(config-vlan)#name IT
SW1(config-vlan)#exit
SW1(config)#vlan 20
SW1(config-vlan)#name HR
SW1(config-vlan)#exit
SW1(config)#interface Ethernet0/1
SW1(config-if)#switchport mode access
SW1(config-if)#switchport access vlan 10
SW1(config)#interface Ethernet0/2
SW1(config-if)#switchport mode access
SW1(config-if)#switchport access vlan 20
SW1(config-if)#exit
SW1(config)#interface vlan 10
SW1(config-if)#ip address 192.168.1.254 255.255.255.0
SW1(config-if)#no shutdown
SW1(config)#interface vlan 20
SW1(config-if)#ip address 172.16.1.254 255.255.255.0
SW1(config-if)#no shutdown
SW1(config)#ip routing
实验检查
检查SW1的接口状态：
SW1#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 unassigned YES unset administratively down down
Ethernet0/1 unassigned YES unset up up
Ethernet0/2 unassigned YES unset up up
Ethernet0/3 unassigned YES unset up up
Vlan10 192.168.1.254 YES manual up up
Vlan20 172.16.1.254 YES manual up up
SVI10和SVI20状态正常。
测试网络的连通性：
PC1> ping 172.16.1.1
84 bytes from 172.16.1.1 icmp_seq=1 ttl=63 time=2.123 ms
84 bytes from 172.16.1.1 icmp_seq=2 ttl=63 time=0.626 ms
84 bytes from 172.16.1.1 icmp_seq=3 ttl=63 time=0.533 ms
84 bytes from 172.16.1.1 icmp_seq=4 ttl=63 time=0.466 ms
84 bytes from 172.16.1.1 icmp_seq=5 ttl=63 time=0.505 ms
PC1> trace 172.16.1.1
trace to 172.16.1.1, 8 hops max, press Ctrl+C to stop
1 192.168.1.254 0.758 ms 0.285 ms 0.736 ms
2 *172.16.1.1 0.636 ms (ICMP type:3, code:3, Destination port unreachable)
实验12：配置静态路由
实验目的
- 了解静态路由的原理
- 掌握静态路由的配置
实验任务
- 任务1
- 任务2
任务1：实验拓扑
任务1：实验需求
- 根据实验拓扑图，完成设备的基本配置；
- 在路由器R1、R2、R3上配置静态路由，保证全网路由可达；
任务1：实验步骤
步骤1：设备的基本配置
配置PC1：
VPCS> set pcname PC1 //设置主机名
PC1> ip 192.168.1.1/24 192.168.1.254 //设置IP地址与网关
配置PC2：
VPCS> set pcname PC2
PC2> ip 192.168.2.1/24 192.168.2.254
配置R1：
Router>enable
Router#configure terminal
Router(config)#hostname R1
R1(config)#no ip domain-lookup
R1(config)#line console 0
R1(config-line)#exec-timeout 0 0
R1(config-line)#logging synchronous
R1(config-line)#exit
R1(config)#interface ethernet0/0
R1(config-if)#ip address 192.168.1.254 255.255.255.0
R1(config-if)#no shutdown
R1(config-if)#exit
R1(config)#interface serial1/0
R1(config-if)#ip address 192.168.12.1 255.255.255.0
R1(config-if)#no shutdown
R1(config-if)#end
R1#
配置R2：
Router>enable
Router#configure terminal
Router(config)#hostname R2
R2(config)#no ip domain-lookup
R2(config)#line console 0
R2(config-line)#exec-timeout 0 0
R2(config-line)#logging synchronous
R2(config-line)#exit
R2(config)#interface serial1/0
R2(config-if)#ip address 192.168.12.2 255.255.255.0
R2(config-if)#no shutdown
R2(config-if)#exit
R2(config)#interface serial1/1
R2(config-if)#ip address 192.168.23.2 255.255.255.0
R2(config-if)#no shutdown
R2(config-if)#end
R2#
配置R3：
Router>enable
Router#configure terminal
Router(config)#hostname R3
R3(config)#no ip domain-lookup
R3(config)#line console 0
R3(config-line)#exec-timeout 0 0
R3(config-line)#logging synchronous
R3(config-line)#exit
R3(config)#interface ethernet0/0
R3(config-if)#ip address 192.168.2.254 255.255.255.0
R3(config-if)#no shutdown
R3(config-if)#exit
R3(config)#interface serial1/0
R3(config-if)#ip address 192.168.23.3 255.255.255.0
R3(config-if)#no shutdown
R3(config-if)#end
R3#
步骤2：检查设备接口状态
检查PC1：
PC1> show ip
NAME : PC1[1]
IP/MASK : 192.168.1.1/24
GATEWAY : 192.168.1.254
DNS :
MAC : 00:50:79:66:68:04
LPORT : 20000
RHOST:PORT : 127.0.0.1:30000
MTU : 1500
检查R1：
R1#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 192.168.1.254 YES manual up up
Ethernet0/1 unassigned YES unset administratively down down
Ethernet0/2 unassigned YES unset administratively down down
Ethernet0/3 unassigned YES unset administratively down down
Serial1/0 192.168.12.1 YES manual up up
Serial1/1 unassigned YES unset administratively down down
Serial1/2 unassigned YES unset administratively down down
Serial1/3 unassigned YES unset administratively down down
检查R2：
R2#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 unassigned YES unset administratively down down
Ethernet0/1 unassigned YES unset administratively down down
Ethernet0/2 unassigned YES unset administratively down down
Ethernet0/3 unassigned YES unset administratively down down
Serial1/0 192.168.12.2 YES manual up up
Serial1/1 192.168.23.2 YES manual up up
Serial1/2 unassigned YES unset administratively down down
Serial1/3 unassigned YES unset administratively down down
检查R3：
R3#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 192.168.2.254 YES manual up up
Ethernet0/1 unassigned YES unset administratively down down
Ethernet0/2 unassigned YES unset administratively down down
Ethernet0/3 unassigned YES unset administratively down down
Serial1/0 192.168.23.3 YES manual up up
Serial1/1 unassigned YES unset administratively down down
Serial1/2 unassigned YES unset administratively down down
Serial1/3 unassigned YES unset administratively down down
检查PC2：
PC2> show ip
NAME : PC2[1]
IP/MASK : 192.168.2.1/24
GATEWAY : 192.168.2.254
DNS :
MAC : 00:50:79:66:68:05
LPORT : 20000
RHOST:PORT : 127.0.0.1:30000
MTU : 1500
步骤3：测试直连网络的连通性
测试PC1跟网关的网络连通性：
PC1> ping 192.168.1.254
84 bytes from 192.168.1.254 icmp_seq=1 ttl=255 time=0.359 ms
84 bytes from 192.168.1.254 icmp_seq=2 ttl=255 time=0.459 ms
84 bytes from 192.168.1.254 icmp_seq=3 ttl=255 time=0.463 ms
84 bytes from 192.168.1.254 icmp_seq=4 ttl=255 time=0.403 ms
84 bytes from 192.168.1.254 icmp_seq=5 ttl=255 time=0.417 ms
测试R1跟R2之间的网络连通性：
R1#ping 192.168.12.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.12.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 8/9/10 ms
测试R2跟R3之间的网络连通性：
R2#ping 192.168.23.3
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.23.3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 9/9/11 ms
测试PC2跟网关的网络连通性：
PC2> ping 192.168.2.254
84 bytes from 192.168.2.254 icmp_seq=1 ttl=255 time=0.469 ms
84 bytes from 192.168.2.254 icmp_seq=2 ttl=255 time=0.484 ms
84 bytes from 192.168.2.254 icmp_seq=3 ttl=255 time=0.518 ms
84 bytes from 192.168.2.254 icmp_seq=4 ttl=255 time=0.400 ms
84 bytes from 192.168.2.254 icmp_seq=5 ttl=255 time=0.405 ms
注意，虽然设备之间的网络连通性正常了，但是PC1和PC2之间的网络是不可达的：
PC1> ping 192.168.2.1
*192.168.1.254 icmp_seq=1 ttl=255 time=0.345 ms (ICMP type:3, code:1, Destination host unreachable)
*192.168.1.254 icmp_seq=2 ttl=255 time=0.462 ms (ICMP type:3, code:1, Destination host unreachable)
*192.168.1.254 icmp_seq=3 ttl=255 time=0.543 ms (ICMP type:3, code:1, Destination host unreachable)
*192.168.1.254 icmp_seq=4 ttl=255 time=0.494 ms (ICMP type:3, code:1, Destination host unreachable)
*192.168.1.254 icmp_seq=5 ttl=255 time=0.467 ms (ICMP type:3, code:1, Destination host unreachable)
因为PC1把数据包发送给R1后，R1没有到达网络192.168.2.0/24的路由，所以R1无法转发数据包。
检查R1的路由表：
R1#show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
a - application route
+ - replicated route, % - next hop override, p - overrides from PfR
Gateway of last resort is not set
192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.1.0/24 is directly connected, Ethernet0/0
L 192.168.1.254/32 is directly connected, Ethernet0/0
192.168.12.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.12.0/24 is directly connected, Serial1/0
L 192.168.12.1/32 is directly connected, Serial1/0
R1只有两条直连路由，分别是192.168.1.0/24和192.168.12.0/24。
因此，我们需要在R1上配置去往192.168.2.0/24的静态路由。
步骤4：配置静态路由
配置R1：
R1(config)#ip route 192.168.2.0 255.255.255.0 192.168.12.2
//当然也可以跟出接口
路由要有去有回网络才能通，所以R3上要配置回程路由。
配置R3：
R3(config)#ip route 192.168.1.0 255.255.255.0 serial 1/0
//当然也可以跟下一跳
另外，沿途的路由器也要有去往源和目标网络的路由。
配置R2：
R2(config)#ip route 192.168.1.0 255.255.255.0 192.168.12.1
//当然也可以跟出接口
R2(config)#ip route 192.168.2.0 255.255.255.0 192.168.23.3
//当然也可以跟出接口
这样当PC1把数据包发送给R1时，R1查路由表：
R1#show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
a - application route
+ - replicated route, % - next hop override, p - overrides from PfR
Gateway of last resort is not set
192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.1.0/24 is directly connected, Ethernet0/0
L 192.168.1.254/32 is directly connected, Ethernet0/0
S 192.168.2.0/24 [1/0] via 192.168.12.2
192.168.12.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.12.0/24 is directly connected, Serial1/0
L 192.168.12.1/32 is directly connected, Serial1/0
R1有到达网络192.168.2.0/24的路由，所以R1把数据包发送给下一跳R2，R2检查路由表：
R2#show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
a - application route
+ - replicated route, % - next hop override, p - overrides from PfR
Gateway of last resort is not set
S 192.168.1.0/24 [1/0] via 192.168.12.1
S 192.168.2.0/24 [1/0] via 192.168.23.3
192.168.12.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.12.0/24 is directly connected, Serial1/0
L 192.168.12.2/32 is directly connected, Serial1/0
192.168.23.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.23.0/24 is directly connected, Serial1/1
L 192.168.23.2/32 is directly connected, Serial1/1
R2有到达网络192.168.2.0/24的路由，所以R2把数据包发送给下一跳R3，R3检查路由表：
R3#show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
a - application route
+ - replicated route, % - next hop override, p - overrides from PfR
Gateway of last resort is not set
S 192.168.1.0/24 is directly connected, Serial1/0
192.168.2.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.2.0/24 is directly connected, Ethernet0/0
L 192.168.2.254/32 is directly connected, Ethernet0/0
192.168.23.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.23.0/24 is directly connected, Serial1/0
L 192.168.23.3/32 is directly connected, Serial1/0
R3上192.168.2.0/24是自己的直连网络，所以R3把数据包直接发给PC2。
回程数据包的转发原理一样，这里不再撰述。
步骤5：测试PC1跟PC2的网络连通性
PC1> ping 192.168.2.1
84 bytes from 192.168.2.1 icmp_seq=1 ttl=61 time=22.503 ms
84 bytes from 192.168.2.1 icmp_seq=2 ttl=61 time=18.859 ms
84 bytes from 192.168.2.1 icmp_seq=3 ttl=61 time=19.251 ms
84 bytes from 192.168.2.1 icmp_seq=4 ttl=61 time=19.350 ms
84 bytes from 192.168.2.1 icmp_seq=5 ttl=61 time=17.856 ms
因为需求要求全网路由可达；
如果这个时候在R1上Ping PC2，能不能通呢？不能！
在R1上Ping PC2，数据包源地址是192.168.12.1，数据包能到达PC2，但是回不来，因为R3上没有到达192.168.12.0/24的路由；
同理，R3上Ping PC1也不通，因为R1没有到达192.168.23.0/24的路由。
检查R3的路由表：
R3#show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
a - application route
+ - replicated route, % - next hop override, p - overrides from PfR
Gateway of last resort is not set
S 192.168.1.0/24 is directly connected, Serial1/0
192.168.2.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.2.0/24 is directly connected, Ethernet0/0
L 192.168.2.254/32 is directly connected, Ethernet0/0
192.168.23.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.23.0/24 is directly connected, Serial1/0
L 192.168.23.3/32 is directly connected, Serial1/0
R3没有到达网络192.168.12.0/24的路由。
配置R3：
R3(config)#ip route 192.168.12.0 255.255.255.0 192.168.23.2
//当然也可以跟出接口
同理，配置R1：
R1(config)#ip route 192.168.23.0 255.255.255.0 serial 1/0
//当然也可以跟下一跳
检查R1的路由表：
R1#show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
a - application route
+ - replicated route, % - next hop override, p - overrides from PfR
Gateway of last resort is not set
192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.1.0/24 is directly connected, Ethernet0/0
L 192.168.1.254/32 is directly connected, Ethernet0/0
S 192.168.2.0/24 [1/0] via 192.168.12.2
192.168.12.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.12.0/24 is directly connected, Serial1/0
L 192.168.12.1/32 is directly connected, Serial1/0
S 192.168.23.0/24 is directly connected, Serial1/0
R1有到达192.168.2.0/24和192.168.23.0/24的路由。
检查R3的路由表：
R3#show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
a - application route
+ - replicated route, % - next hop override, p - overrides from PfR
Gateway of last resort is not set
S 192.168.1.0/24 is directly connected, Serial1/0
192.168.2.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.2.0/24 is directly connected, Ethernet0/0
L 192.168.2.254/32 is directly connected, Ethernet0/0
S 192.168.12.0/24 [1/0] via 192.168.23.2
192.168.23.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.23.0/24 is directly connected, Serial1/0
L 192.168.23.3/32 is directly connected, Serial1/0
R3有到达192.168.1.0/24和192.168.12.0/24的路由。
步骤6：测试网络连通性
在PC1上测试：
PC1> ping 192.168.2.1
84 bytes from 192.168.2.1 icmp_seq=1 ttl=61 time=21.429 ms
84 bytes from 192.168.2.1 icmp_seq=2 ttl=61 time=18.079 ms
84 bytes from 192.168.2.1 icmp_seq=3 ttl=61 time=19.108 ms
84 bytes from 192.168.2.1 icmp_seq=4 ttl=61 time=19.006 ms
84 bytes from 192.168.2.1 icmp_seq=5 ttl=61 time=18.163 ms
PC1> ping 192.168.23.3
84 bytes from 192.168.23.3 icmp_seq=1 ttl=253 time=18.265 ms
84 bytes from 192.168.23.3 icmp_seq=2 ttl=253 time=18.186 ms
84 bytes from 192.168.23.3 icmp_seq=3 ttl=253 time=18.184 ms
84 bytes from 192.168.23.3 icmp_seq=4 ttl=253 time=18.257 ms
84 bytes from 192.168.23.3 icmp_seq=5 ttl=253 time=18.240 ms
PC1> ping 192.168.12.2
84 bytes from 192.168.12.2 icmp_seq=1 ttl=254 time=9.899 ms
84 bytes from 192.168.12.2 icmp_seq=2 ttl=254 time=9.380 ms
84 bytes from 192.168.12.2 icmp_seq=3 ttl=254 time=9.159 ms
84 bytes from 192.168.12.2 icmp_seq=4 ttl=254 time=9.300 ms
84 bytes from 192.168.12.2 icmp_seq=5 ttl=254 time=9.268 ms
任务2：实验拓扑
任务2：实验需求
- 在R1和R3上删除任务1的静态路由；
- 在路由器R1、R3上配置默认路由，使得全网路由可达。
任务2：实验步骤
步骤1：删除R1和R3上的静态路由并配置默认路由
配置R1：
R1(config)#no ip route 192.168.2.0 255.255.255.0 192.168.12.2
R1(config)#no ip route 192.168.23.0 255.255.255.0 Serial1/0
R1(config)#ip route 0.0.0.0 0.0.0.0 192.168.12.2
配置R3：
R3(config)#no ip route 192.168.1.0 255.255.255.0 Serial1/0
R3(config)#no ip route 192.168.12.0 255.255.255.0 192.168.23.2
R3(config)#ip route 0.0.0.0 0.0.0.0 192.168.23.2
步骤2：检查默认路由
检查R1：
R1#show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
a - application route
+ - replicated route, % - next hop override, p - overrides from PfR
Gateway of last resort is 192.168.12.2 to network 0.0.0.0
S* 0.0.0.0/0 [1/0] via 192.168.12.2
192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.1.0/24 is directly connected, Ethernet0/0
L 192.168.1.254/32 is directly connected, Ethernet0/0
192.168.12.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.12.0/24 is directly connected, Serial1/0
L 192.168.12.1/32 is directly connected, Serial1/0
检查R3：
R3#show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
a - application route
+ - replicated route, % - next hop override, p - overrides from PfR
Gateway of last resort is 192.168.23.2 to network 0.0.0.0
S* 0.0.0.0/0 [1/0] via 192.168.23.2
192.168.2.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.2.0/24 is directly connected, Ethernet0/0
L 192.168.2.254/32 is directly connected, Ethernet0/0
192.168.23.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.23.0/24 is directly connected, Serial1/0
L 192.168.23.3/32 is directly connected, Serial1/0
步骤3：网络连通性测试
PC1> ping 192.168.2.1
84 bytes from 192.168.2.1 icmp_seq=1 ttl=61 time=20.698 ms
84 bytes from 192.168.2.1 icmp_seq=2 ttl=61 time=19.478 ms
84 bytes from 192.168.2.1 icmp_seq=3 ttl=61 time=18.593 ms
84 bytes from 192.168.2.1 icmp_seq=4 ttl=61 time=19.404 ms
84 bytes from 192.168.2.1 icmp_seq=5 ttl=61 time=19.616 ms
PC1> ping 192.168.23.3
84 bytes from 192.168.23.3 icmp_seq=1 ttl=253 time=22.048 ms
84 bytes from 192.168.23.3 icmp_seq=2 ttl=253 time=20.271 ms
84 bytes from 192.168.23.3 icmp_seq=3 ttl=253 time=19.362 ms
84 bytes from 192.168.23.3 icmp_seq=4 ttl=253 time=20.110 ms
84 bytes from 192.168.23.3 icmp_seq=5 ttl=253 time=21.321 ms
PC1> ping 192.168.12.2
84 bytes from 192.168.12.2 icmp_seq=1 ttl=254 time=10.201 ms
84 bytes from 192.168.12.2 icmp_seq=2 ttl=254 time=10.220 ms
84 bytes from 192.168.12.2 icmp_seq=3 ttl=254 time=8.304 ms
84 bytes from 192.168.12.2 icmp_seq=4 ttl=254 time=9.170 ms
84 bytes from 192.168.12.2 icmp_seq=5 ttl=254 time=10.084 ms
实验13：配置EIGRP
实验目的
- 了解EIGRP的运行原理
- 了解EIGRP自动汇总的原理
- 掌握EIGRP基本的配置方法
- 掌握EIGRP手工汇总的配置方法
实验任务
- 任务1
- 任务2
- 任务3
任务1：实验拓扑
任务1：实验需求
- 根据实验拓扑图，完成设备的基本配置；
- 在R1、R2、R3上配置EIGRP，使得全网路由可达；
- 测试网络的连通性。
任务1：实验步骤
步骤1：设备的基本配置
配置PC1：
VPCS> set pcname PC1 //设置主机名
PC1> ip 192.168.1.1/24 192.168.1.254 //设置IP地址与网关
配置PC2：
VPCS> set pcname PC2
PC2> ip 192.168.2.1/24 192.168.2.254
配置R1：
Router>enable
Router#configure terminal
Router(config)#hostname R1
R1(config)#no ip domain-lookup
R1(config)#line console 0
R1(config-line)#exec-timeout 0 0
R1(config-line)#logging synchronous
R1(config-line)#exit
R1(config)#interface ethernet0/0
R1(config-if)#ip address 192.168.1.254 255.255.255.0
R1(config-if)#no shutdown
R1(config-if)#exit
R1(config)#interface serial1/0
R1(config-if)#ip address 192.168.12.1 255.255.255.0
R1(config-if)#no shutdown
R1(config-if)#end
R1#
配置R2：
Router>enable
Router#configure terminal
Router(config)#hostname R2
R2(config)#no ip domain-lookup
R2(config)#line console 0
R2(config-line)#exec-timeout 0 0
R2(config-line)#logging synchronous
R2(config-line)#exit
R2(config)#interface serial1/0
R2(config-if)#ip address 192.168.12.2 255.255.255.0
R2(config-if)#no shutdown
R2(config-if)#exit
R2(config)#interface serial1/1
R2(config-if)#ip address 192.168.23.2 255.255.255.0
R2(config-if)#no shutdown
R2(config-if)#end
R2#
配置R3：
Router>enable
Router#configure terminal
Router(config)#hostname R3
R3(config)#no ip domain-lookup
R3(config)#line console 0
R3(config-line)#exec-timeout 0 0
R3(config-line)#logging synchronous
R3(config-line)#exit
R3(config)#interface ethernet0/0
R3(config-if)#ip address 192.168.2.254 255.255.255.0
R3(config-if)#no shutdown
R3(config-if)#exit
R3(config)#interface serial1/0
R3(config-if)#ip address 192.168.23.3 255.255.255.0
R3(config-if)#no shutdown
R3(config-if)#end
R3#
步骤2：检查设备接口状态
检查PC1：
PC1> show ip
NAME : PC1[1]
IP/MASK : 192.168.1.1/24
GATEWAY : 192.168.1.254
DNS :
MAC : 00:50:79:66:68:04
LPORT : 20000
RHOST:PORT : 127.0.0.1:30000
MTU : 1500
检查R1：
R1#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 192.168.1.254 YES manual up up
Ethernet0/1 unassigned YES unset administratively down down
Ethernet0/2 unassigned YES unset administratively down down
Ethernet0/3 unassigned YES unset administratively down down
Serial1/0 192.168.12.1 YES manual up up
Serial1/1 unassigned YES unset administratively down down
Serial1/2 unassigned YES unset administratively down down
Serial1/3 unassigned YES unset administratively down down
检查R2：
R2#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 unassigned YES unset administratively down down
Ethernet0/1 unassigned YES unset administratively down down
Ethernet0/2 unassigned YES unset administratively down down
Ethernet0/3 unassigned YES unset administratively down down
Serial1/0 192.168.12.2 YES manual up up
Serial1/1 192.168.23.2 YES manual up up
Serial1/2 unassigned YES unset administratively down down
Serial1/3 unassigned YES unset administratively down down
检查R3：
R3#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 192.168.2.254 YES manual up up
Ethernet0/1 unassigned YES unset administratively down down
Ethernet0/2 unassigned YES unset administratively down down
Ethernet0/3 unassigned YES unset administratively down down
Serial1/0 192.168.23.3 YES manual up up
Serial1/1 unassigned YES unset administratively down down
Serial1/2 unassigned YES unset administratively down down
Serial1/3 unassigned YES unset administratively down down
检查PC2：
PC2> show ip
NAME : PC2[1]
IP/MASK : 192.168.2.1/24
GATEWAY : 192.168.2.254
DNS :
MAC : 00:50:79:66:68:05
LPORT : 20000
RHOST:PORT : 127.0.0.1:30000
MTU : 1500
步骤3：测试直连网络的连通性
测试PC1跟网关的网络连通性：
PC1> ping 192.168.1.254
84 bytes from 192.168.1.254 icmp_seq=1 ttl=255 time=0.359 ms
84 bytes from 192.168.1.254 icmp_seq=2 ttl=255 time=0.459 ms
84 bytes from 192.168.1.254 icmp_seq=3 ttl=255 time=0.463 ms
84 bytes from 192.168.1.254 icmp_seq=4 ttl=255 time=0.403 ms
84 bytes from 192.168.1.254 icmp_seq=5 ttl=255 time=0.417 ms
测试R1跟R2之间的网络连通性：
R1#ping 192.168.12.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.12.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 8/9/10 ms
测试R2跟R3之间的网络连通性：
R2#ping 192.168.23.3
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.23.3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 9/9/11 ms
测试PC2跟网关的网络连通性：
PC2> ping 192.168.2.254
84 bytes from 192.168.2.254 icmp_seq=1 ttl=255 time=0.469 ms
84 bytes from 192.168.2.254 icmp_seq=2 ttl=255 time=0.484 ms
84 bytes from 192.168.2.254 icmp_seq=3 ttl=255 time=0.518 ms
84 bytes from 192.168.2.254 icmp_seq=4 ttl=255 time=0.400 ms
84 bytes from 192.168.2.254 icmp_seq=5 ttl=255 time=0.405 ms
步骤4：配置EIGRP
配置R1：
R1(config)#router eigrp 100
R1(config-router)#network 192.168.1.0 0.0.0.255
R1(config-router)#network 192.168.12.0 0.0.0.255
R1(config-router)#end
R1#
配置R2：
R2(config)#router eigrp 100
R2(config-router)#network 192.168.12.0 0.0.0.255
R2(config-router)#network 192.168.23.0 0.0.0.255
R2(config-router)#end
R2#
配置R3：
R3(config)#router eigrp 100
R3(config-router)#network 192.168.23.0 0.0.0.255
R3(config-router)#network 192.168.2.0 0.0.0.255
R3(config-router)#end
R3#
步骤5：检查EIGRP路由
检查R1：
R1#show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
a - application route
+ - replicated route, % - next hop override, p - overrides from PfR
Gateway of last resort is not set
192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.1.0/24 is directly connected, Ethernet0/0
L 192.168.1.254/32 is directly connected, Ethernet0/0
D 192.168.2.0/24 [90/2707456] via 192.168.12.2, 00:00:55, Serial1/0
192.168.12.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.12.0/24 is directly connected, Serial1/0
L 192.168.12.1/32 is directly connected, Serial1/0
D 192.168.23.0/24 [90/2681856] via 192.168.12.2, 00:01:34, Serial1/0
检查R2：
R2#show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
a - application route
+ - replicated route, % - next hop override, p - overrides from PfR
Gateway of last resort is not set
D 192.168.1.0/24 [90/2195456] via 192.168.12.1, 00:02:26, Serial1/0
D 192.168.2.0/24 [90/2195456] via 192.168.23.3, 00:01:24, Serial1/1
192.168.12.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.12.0/24 is directly connected, Serial1/0
L 192.168.12.2/32 is directly connected, Serial1/0
192.168.23.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.23.0/24 is directly connected, Serial1/1
L 192.168.23.2/32 is directly connected, Serial1/1
检查R3：
R3#show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
a - application route
+ - replicated route, % - next hop override, p - overrides from PfR
Gateway of last resort is not set
D 192.168.1.0/24 [90/2707456] via 192.168.23.2, 00:01:55, Serial1/0
192.168.2.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.2.0/24 is directly connected, Ethernet0/0
L 192.168.2.254/32 is directly connected, Ethernet0/0
D 192.168.12.0/24 [90/2681856] via 192.168.23.2, 00:01:55, Serial1/0
192.168.23.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.23.0/24 is directly connected, Serial1/0
L 192.168.23.3/32 is directly connected, Serial1/0
步骤6：测试网络的连通性
测试PC1：
PC1> ping 192.168.2.1
84 bytes from 192.168.2.1 icmp_seq=1 ttl=61 time=21.438 ms
84 bytes from 192.168.2.1 icmp_seq=2 ttl=61 time=14.345 ms
84 bytes from 192.168.2.1 icmp_seq=3 ttl=61 time=19.706 ms
84 bytes from 192.168.2.1 icmp_seq=4 ttl=61 time=18.968 ms
84 bytes from 192.168.2.1 icmp_seq=5 ttl=61 time=19.006 ms
PC1> ping 192.168.23.3
84 bytes from 192.168.23.3 icmp_seq=1 ttl=253 time=18.992 ms
84 bytes from 192.168.23.3 icmp_seq=2 ttl=253 time=18.513 ms
84 bytes from 192.168.23.3 icmp_seq=3 ttl=253 time=18.559 ms
84 bytes from 192.168.23.3 icmp_seq=4 ttl=253 time=18.514 ms
84 bytes from 192.168.23.3 icmp_seq=5 ttl=253 time=15.974 ms
PC1> ping 192.168.12.2
84 bytes from 192.168.12.2 icmp_seq=1 ttl=254 time=9.668 ms
84 bytes from 192.168.12.2 icmp_seq=2 ttl=254 time=9.340 ms
84 bytes from 192.168.12.2 icmp_seq=3 ttl=254 time=9.307 ms
84 bytes from 192.168.12.2 icmp_seq=4 ttl=254 time=9.189 ms
84 bytes from 192.168.12.2 icmp_seq=5 ttl=254 time=9.086 ms
任务2：实验拓扑
任务2：实验需求
- 根据实验拓扑图，完成设备的基本配置；
- 在R1和R3上分别创建Lo1、Lo2、Lo3，IP地址如图所示，并宣告进EIGRP；
- 在R1、R2、R3上配置EIGRP，打开自动汇总，保证全网路由可达。
任务2：实验步骤
步骤1：设备的基本配置
配置PC1：
VPCS> set pcname PC1 //设置主机名
PC1> ip 192.168.1.1/24 192.168.1.254 //设置IP地址与网关
配置PC2：
VPCS> set pcname PC2
PC2> ip 192.168.2.1/24 192.168.2.254
配置R1：
Router>enable
Router#configure terminal
Router(config)#hostname R1
R1(config)#no ip domain-lookup
R1(config)#line console 0
R1(config-line)#exec-timeout 0 0
R1(config-line)#logging synchronous
R1(config-line)#exit
R1(config)#interface loopback 1
R1(config-if)#ip address 172.16.1.1 255.255.255.0
R1(config-if)#exit
R1(config)#interface loopback 2
R1(config-if)#ip address 172.16.2.1 255.255.255.0
R1(config-if)#exit
R1(config)#interface loopback 3
R1(config-if)#ip address 172.16.3.1 255.255.255.0
R1(config-if)#exit
R1(config)#interface ethernet0/0
R1(config-if)#ip address 192.168.1.254 255.255.255.0
R1(config-if)#no shutdown
R1(config-if)#exit
R1(config)#interface serial1/0
R1(config-if)#ip address 192.168.12.1 255.255.255.0
R1(config-if)#no shutdown
R1(config-if)#end
R1#
配置R2：
Router>enable
Router#configure terminal
Router(config)#hostname R2
R2(config)#no ip domain-lookup
R2(config)#line console 0
R2(config-line)#exec-timeout 0 0
R2(config-line)#logging synchronous
R2(config-line)#exit
R2(config)#interface serial1/0
R2(config-if)#ip address 192.168.12.2 255.255.255.0
R2(config-if)#no shutdown
R2(config-if)#exit
R2(config)#interface serial1/1
R2(config-if)#ip address 192.168.23.2 255.255.255.0
R2(config-if)#no shutdown
R2(config-if)#end
R2#
配置R3：
Router>enable
Router#configure terminal
Router(config)#hostname R3
R3(config)#no ip domain-lookup
R3(config)#line console 0
R3(config-line)#exec-timeout 0 0
R3(config-line)#logging synchronous
R3(config-line)#exit
R3(config)#interface loopback 1
R3(config-if)#ip address 172.16.10.1 255.255.255.0
R3(config-if)#exit
R3(config)#interface loopback 2
R3(config-if)#ip address 172.16.20.1 255.255.255.0
R3(config-if)#exit
R3(config)#interface loopback 3
R3(config-if)#ip address 172.16.30.1 255.255.255.0
R3(config-if)#exit
R3(config)#interface ethernet0/0
R3(config-if)#ip address 192.168.2.254 255.255.255.0
R3(config-if)#no shutdown
R3(config-if)#exit
R3(config)#interface serial1/0
R3(config-if)#ip address 192.168.23.3 255.255.255.0
R3(config-if)#no shutdown
R3(config-if)#end
R3#
步骤2：检查设备接口状态
检查PC1：
PC1> show ip
NAME : PC1[1]
IP/MASK : 192.168.1.1/24
GATEWAY : 192.168.1.254
DNS :
MAC : 00:50:79:66:68:04
LPORT : 20000
RHOST:PORT : 127.0.0.1:30000
MTU : 1500
检查R1：
R1#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 192.168.1.254 YES manual up up
Ethernet0/1 unassigned YES unset administratively down down
Ethernet0/2 unassigned YES unset administratively down down
Ethernet0/3 unassigned YES unset administratively down down
Serial1/0 192.168.12.1 YES manual up up
Serial1/1 unassigned YES unset administratively down down
Serial1/2 unassigned YES unset administratively down down
Serial1/3 unassigned YES unset administratively down down
检查R2：
R2#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 unassigned YES unset administratively down down
Ethernet0/1 unassigned YES unset administratively down down
Ethernet0/2 unassigned YES unset administratively down down
Ethernet0/3 unassigned YES unset administratively down down
Serial1/0 192.168.12.2 YES manual up up
Serial1/1 192.168.23.2 YES manual up up
Serial1/2 unassigned YES unset administratively down down
Serial1/3 unassigned YES unset administratively down down
检查R3：
R3#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 192.168.2.254 YES manual up up
Ethernet0/1 unassigned YES unset administratively down down
Ethernet0/2 unassigned YES unset administratively down down
Ethernet0/3 unassigned YES unset administratively down down
Serial1/0 192.168.23.3 YES manual up up
Serial1/1 unassigned YES unset administratively down down
Serial1/2 unassigned YES unset administratively down down
Serial1/3 unassigned YES unset administratively down down
检查PC2：
PC2> show ip
NAME : PC2[1]
IP/MASK : 192.168.2.1/24
GATEWAY : 192.168.2.254
DNS :
MAC : 00:50:79:66:68:05
LPORT : 20000
RHOST:PORT : 127.0.0.1:30000
MTU : 1500
步骤3：测试直连网络的连通性
测试PC1跟网关的网络连通性：
PC1> ping 192.168.1.254
84 bytes from 192.168.1.254 icmp_seq=1 ttl=255 time=0.359 ms
84 bytes from 192.168.1.254 icmp_seq=2 ttl=255 time=0.459 ms
84 bytes from 192.168.1.254 icmp_seq=3 ttl=255 time=0.463 ms
84 bytes from 192.168.1.254 icmp_seq=4 ttl=255 time=0.403 ms
84 bytes from 192.168.1.254 icmp_seq=5 ttl=255 time=0.417 ms
测试R1跟R2之间的网络连通性：
R1#ping 192.168.12.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.12.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 8/9/10 ms
测试R2跟R3之间的网络连通性：
R2#ping 192.168.23.3
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.23.3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 9/9/11 ms
测试PC2跟网关的网络连通性：
PC2> ping 192.168.2.254
84 bytes from 192.168.2.254 icmp_seq=1 ttl=255 time=0.469 ms
84 bytes from 192.168.2.254 icmp_seq=2 ttl=255 time=0.484 ms
84 bytes from 192.168.2.254 icmp_seq=3 ttl=255 time=0.518 ms
84 bytes from 192.168.2.254 icmp_seq=4 ttl=255 time=0.400 ms
84 bytes from 192.168.2.254 icmp_seq=5 ttl=255 time=0.405 ms
步骤4：打开EIGRP自动汇总
配置R1：
R1(config)#router eigrp 100
R1(config-router)#auto-summary
R1(config-router)#network 172.16.1.0 0.0.0.255
R1(config-router)#network 172.16.2.0 0.0.0.255
R1(config-router)#network 172.16.3.0 0.0.0.255
R1(config-router)#network 192.168.1.0 0.0.0.255
R1(config-router)#network 192.168.12.0 0.0.0.255
R1(config-router)#end
R1#
配置R2：
R2(config)#router eigrp 100
R2(config-router)#auto-summary
R2(config-router)#network 192.168.12.0 0.0.0.255
R2(config-router)#network 192.168.23.0 0.0.0.255
R2(config-router)#end
R2#
配置R3：
R3(config)#router eigrp 100
R3(config-router)#auto-summary
R3(config-router)#network 172.16.10.0 0.0.0.255
R3(config-router)#network 172.16.20.0 0.0.0.255
R3(config-router)#network 172.16.30.0 0.0.0.255
R3(config-router)#network 192.168.23.0 0.0.0.255
R3(config-router)#network 192.168.2.0 0.0.0.255
R3(config-router)#end
R3#
步骤5：检查EIGRP路由
检查R2：
R2#show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
a - application route
+ - replicated route, % - next hop override, p - overrides from PfR
Gateway of last resort is not set
D 172.16.0.0/16 [90/2297856] via 192.168.23.3, 00:02:53, Serial1/1
[90/2297856] via 192.168.12.1, 00:02:53, Serial1/0
D 192.168.1.0/24 [90/2195456] via 192.168.12.1, 00:19:55, Serial1/0
D 192.168.2.0/24 [90/2195456] via 192.168.23.3, 00:18:53, Serial1/1
192.168.12.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.12.0/24 is directly connected, Serial1/0
L 192.168.12.2/32 is directly connected, Serial1/0
192.168.23.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.23.0/24 is directly connected, Serial1/1
L 192.168.23.2/32 is directly connected, Serial1/1
R2的路由表去往172.16.0.0/16是等价负载的，为什么？
EIGRP在自动汇总打开的情况下，在主类网络边界会执行自动汇总，将路由汇总成主类网络；
R1和R3的Lo1、Lo2、Lo3接口地址都是B类地址，所以R1和R3把它们汇总了B类网络，即，172.16.0.0/16。
假设这个时候R2有数据包要去往172.16.1.0/24或其它网络，那么有可能会出现以下情况：
R2#ping 172.16.1.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.1.1, timeout is 2 seconds:
U.U.U
Success rate is 0 percent (0/5)
R2#ping 172.16.2.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.2.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 7/9/11 ms
因为路由是负载的，所以有可能有的网络通，有的网络不通。
怎么解决？关闭自动汇总！
步骤6：关闭EIGRP自动汇总
注意，12.X版本的IOS自动汇总默认打开，15.X版本的IOS自动汇总默认关闭。
配置R1：
R1(config)#router eigrp 100
R1(config-router)#no auto-summary
R1(config-router)#end
R1#
配置R2：
R2(config)#router eigrp 100
R2(config-router)#no auto-summary
R2(config-router)#end
R2#
配置R3：
R3(config)#router eigrp 100
R3(config-router)#no auto-summary
R3(config-router)#end
R3#
关闭自动汇总之后，R2的路由表看到的就是Loopback口的明细路由而不是汇总路由了。
检查R2：
R2#show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
a - application route
+ - replicated route, % - next hop override, p - overrides from PfR
Gateway of last resort is not set
172.16.0.0/24 is subnetted, 6 subnets
D 172.16.1.0 [90/2297856] via 192.168.12.1, 00:01:01, Serial1/0
D 172.16.2.0 [90/2297856] via 192.168.12.1, 00:01:01, Serial1/0
D 172.16.3.0 [90/2297856] via 192.168.12.1, 00:01:01, Serial1/0
D 172.16.10.0 [90/2297856] via 192.168.23.3, 00:00:07, Serial1/1
D 172.16.20.0 [90/2297856] via 192.168.23.3, 00:00:07, Serial1/1
D 172.16.30.0 [90/2297856] via 192.168.23.3, 00:00:07, Serial1/1
D 192.168.1.0/24 [90/2195456] via 192.168.12.1, 00:34:55, Serial1/0
D 192.168.2.0/24 [90/2195456] via 192.168.23.3, 00:33:53, Serial1/1
192.168.12.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.12.0/24 is directly connected, Serial1/0
L 192.168.12.2/32 is directly connected, Serial1/0
192.168.23.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.23.0/24 is directly connected, Serial1/1
L 192.168.23.2/32 is directly connected, Serial1/1
当然，也不会出现有的网络通，有的网络不通的情况了。
R2#ping 172.16.1.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.1.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 9/9/10 ms
R2#ping 172.16.2.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.2.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 9/9/10 ms
R2#ping 172.16.3.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.3.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 10/10/10 ms
R2#ping 172.16.10.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.10.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 10/10/10 ms
R2#ping 172.16.20.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.20.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 10/10/10 ms
R2#ping 172.16.30.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.30.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 9/9/10 ms
任务3：需求拓扑
任务3：实验需求
- 根据实验拓扑图，完成设备的基本配置；
- 在R1、R2、R3上配置EIGRP，保证全网路由可达；
- 在R1上创建Lo1、Lo2、Lo3，IP地址如图所示，并宣告进EIGRP；
- 在R1上对Loopback口路由进行汇总，确保R2和R3能收到汇总路由；
任务3：实验步骤
步骤1：设备的基本配置
配置PC1：
VPCS> set pcname PC1 //设置主机名
PC1> ip 192.168.1.1/24 192.168.1.254 //设置IP地址与网关
配置PC2：
VPCS> set pcname PC2
PC2> ip 192.168.2.1/24 192.168.2.254
配置R1：
Router>enable
Router#configure terminal
Router(config)#hostname R1
R1(config)#no ip domain-lookup
R1(config)#line console 0
R1(config-line)#exec-timeout 0 0
R1(config-line)#logging synchronous
R1(config-line)#exit
R1(config)#interface loopback 1
R1(config-if)#ip address 172.16.1.1 255.255.255.0
R1(config-if)#exit
R1(config)#interface loopback 2
R1(config-if)#ip address 172.16.2.1 255.255.255.0
R1(config-if)#exit
R1(config)#interface loopback 3
R1(config-if)#ip address 172.16.3.1 255.255.255.0
R1(config-if)#exit
R1(config)#interface ethernet0/0
R1(config-if)#ip address 192.168.1.254 255.255.255.0
R1(config-if)#no shutdown
R1(config-if)#exit
R1(config)#interface serial1/0
R1(config-if)#ip address 192.168.12.1 255.255.255.0
R1(config-if)#no shutdown
R1(config-if)#end
R1#
配置R2：
Router>enable
Router#configure terminal
Router(config)#hostname R2
R2(config)#no ip domain-lookup
R2(config)#line console 0
R2(config-line)#exec-timeout 0 0
R2(config-line)#logging synchronous
R2(config-line)#exit
R2(config)#interface serial1/0
R2(config-if)#ip address 192.168.12.2 255.255.255.0
R2(config-if)#no shutdown
R2(config-if)#exit
R2(config)#interface serial1/1
R2(config-if)#ip address 192.168.23.2 255.255.255.0
R2(config-if)#no shutdown
R2(config-if)#end
R2#
配置R3：
Router>enable
Router#configure terminal
Router(config)#hostname R3
R3(config)#no ip domain-lookup
R3(config)#line console 0
R3(config-line)#exec-timeout 0 0
R3(config-line)#logging synchronous
R3(config-line)#exit
R3(config)#interface ethernet0/0
R3(config-if)#ip address 192.168.2.254 255.255.255.0
R3(config-if)#no shutdown
R3(config-if)#exit
R3(config)#interface serial1/0
R3(config-if)#ip address 192.168.23.3 255.255.255.0
R3(config-if)#no shutdown
R3(config-if)#end
R3#
步骤2：检查设备接口状态
检查PC1：
PC1> show ip
NAME : PC1[1]
IP/MASK : 192.168.1.1/24
GATEWAY : 192.168.1.254
DNS :
MAC : 00:50:79:66:68:04
LPORT : 20000
RHOST:PORT : 127.0.0.1:30000
MTU : 1500
检查R1：
R1#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 192.168.1.254 YES manual up up
Ethernet0/1 unassigned YES unset administratively down down
Ethernet0/2 unassigned YES unset administratively down down
Ethernet0/3 unassigned YES unset administratively down down
Serial1/0 192.168.12.1 YES manual up up
Serial1/1 unassigned YES unset administratively down down
Serial1/2 unassigned YES unset administratively down down
Serial1/3 unassigned YES unset administratively down down
检查R2：
R2#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 unassigned YES unset administratively down down
Ethernet0/1 unassigned YES unset administratively down down
Ethernet0/2 unassigned YES unset administratively down down
Ethernet0/3 unassigned YES unset administratively down down
Serial1/0 192.168.12.2 YES manual up up
Serial1/1 192.168.23.2 YES manual up up
Serial1/2 unassigned YES unset administratively down down
Serial1/3 unassigned YES unset administratively down down
检查R3：
R3#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 192.168.2.254 YES manual up up
Ethernet0/1 unassigned YES unset administratively down down
Ethernet0/2 unassigned YES unset administratively down down
Ethernet0/3 unassigned YES unset administratively down down
Serial1/0 192.168.23.3 YES manual up up
Serial1/1 unassigned YES unset administratively down down
Serial1/2 unassigned YES unset administratively down down
Serial1/3 unassigned YES unset administratively down down
检查PC2：
PC2> show ip
NAME : PC2[1]
IP/MASK : 192.168.2.1/24
GATEWAY : 192.168.2.254
DNS :
MAC : 00:50:79:66:68:05
LPORT : 20000
RHOST:PORT : 127.0.0.1:30000
MTU : 1500
步骤3：测试直连网络的连通性
测试PC1跟网关的网络连通性：
PC1> ping 192.168.1.254
84 bytes from 192.168.1.254 icmp_seq=1 ttl=255 time=0.359 ms
84 bytes from 192.168.1.254 icmp_seq=2 ttl=255 time=0.459 ms
84 bytes from 192.168.1.254 icmp_seq=3 ttl=255 time=0.463 ms
84 bytes from 192.168.1.254 icmp_seq=4 ttl=255 time=0.403 ms
84 bytes from 192.168.1.254 icmp_seq=5 ttl=255 time=0.417 ms
测试R1跟R2之间的网络连通性：
R1#ping 192.168.12.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.12.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 8/9/10 ms
测试R2跟R3之间的网络连通性：
R2#ping 192.168.23.3
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.23.3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 9/9/11 ms
测试PC2跟网关的网络连通性：
PC2> ping 192.168.2.254
84 bytes from 192.168.2.254 icmp_seq=1 ttl=255 time=0.469 ms
84 bytes from 192.168.2.254 icmp_seq=2 ttl=255 time=0.484 ms
84 bytes from 192.168.2.254 icmp_seq=3 ttl=255 time=0.518 ms
84 bytes from 192.168.2.254 icmp_seq=4 ttl=255 time=0.400 ms
84 bytes from 192.168.2.254 icmp_seq=5 ttl=255 time=0.405 ms
步骤4：配置EIGRP
配置R1：
R1(config)#router eigrp 100
R1(config-router)#network 172.16.1.0 0.0.0.255
R1(config-router)#network 172.16.2.0 0.0.0.255
R1(config-router)#network 172.16.3.0 0.0.0.255
R1(config-router)#network 192.168.1.0 0.0.0.255
R1(config-router)#network 192.168.12.0 0.0.0.255
R1(config-router)#end
R1#
配置R2：
R2(config)#router eigrp 100
R2(config-router)#network 192.168.12.0 0.0.0.255
R2(config-router)#network 192.168.23.0 0.0.0.255
R2(config-router)#end
R2#
配置R3：
R3(config)#router eigrp 100
R3(config-router)#network 192.168.23.0 0.0.0.255
R3(config-router)#network 192.168.2.0 0.0.0.255
R3(config-router)#end
R3#
步骤5：配置EIGRP手工汇总
配置R1：
R1(config)#interface serial 1/0
R1(config-if)#ip summary-address eigrp 100 172.16.0.0 255.255.0.0
R1(config-if)#end
R1#
步骤6：检查EIGRP手工汇总
检查R1：
R1#show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
a - application route
+ - replicated route, % - next hop override, p - overrides from PfR
Gateway of last resort is not set
172.16.0.0/16 is variably subnetted, 7 subnets, 3 masks
D 172.16.0.0/16 is a summary, 00:01:38, Null0
C 172.16.1.0/24 is directly connected, Loopback1
L 172.16.1.1/32 is directly connected, Loopback1
C 172.16.2.0/24 is directly connected, Loopback2
L 172.16.2.1/32 is directly connected, Loopback2
C 172.16.3.0/24 is directly connected, Loopback3
L 172.16.3.1/32 is directly connected, Loopback3
192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.1.0/24 is directly connected, Ethernet0/0
L 192.168.1.254/32 is directly connected, Ethernet0/0
D 192.168.2.0/24 [90/2707456] via 192.168.12.2, 00:49:54, Serial1/0
192.168.12.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.12.0/24 is directly connected, Serial1/0
L 192.168.12.1/32 is directly connected, Serial1/0
D 192.168.23.0/24 [90/2681856] via 192.168.12.2, 00:50:33, Serial1/0
R1做完EIGRP手工汇总之后，本地会产生一条指向Null0的汇总路由，目的是防止环路。
检查R2：
R2#show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
a - application route
+ - replicated route, % - next hop override, p - overrides from PfR
Gateway of last resort is not set
D 172.16.0.0/16 [90/2297856] via 192.168.12.1, 00:02:57, Serial1/0
D 192.168.1.0/24 [90/2195456] via 192.168.12.1, 00:52:14, Serial1/0
D 192.168.2.0/24 [90/2195456] via 192.168.23.3, 00:51:12, Serial1/1
192.168.12.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.12.0/24 is directly connected, Serial1/0
L 192.168.12.2/32 is directly connected, Serial1/0
192.168.23.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.23.0/24 is directly connected, Serial1/1
L 192.168.23.2/32 is directly connected, Serial1/1
R1收到了汇总路由。
检查R3：
R3#show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
a - application route
+ - replicated route, % - next hop override, p - overrides from PfR
Gateway of last resort is not set
172.16.0.0/16 is subnetted, 1 subnets
D 172.16.0.0 [90/2809856] via 192.168.23.2, 00:03:26, Serial1/0
D 192.168.1.0/24 [90/2707456] via 192.168.23.2, 00:51:49, Serial1/0
192.168.2.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.2.0/24 is directly connected, Ethernet0/0
L 192.168.2.254/32 is directly connected, Ethernet0/0
D 192.168.12.0/24 [90/2681856] via 192.168.23.2, 00:51:49, Serial1/0
192.168.23.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.23.0/24 is directly connected, Serial1/0
L 192.168.23.3/32 is directly connected, Serial1/0
R3也收到了汇总路由。
实验14：配置OSPF
实验目的
- 了解OSPF的运行原理
- 掌握OSPF的配置方法
实验拓扑
实验需求
- 根据实验拓扑图，完成设备的基本配置；
- 分别在R1、R2、R3上创建Loopback0接口，IP地址分别是1.1.1.1/32、2.2.2/32、3.3.3.3/32，Loopback0地址作为OSPF的Router-ID；
- 根据实验拓扑图的区域划分，在R1、R2、R3上配置OSPF，使得全网路由可达。
实验步骤
步骤1：设备的基本配置
配置PC1：
VPCS> set pcname PC1 //设置主机名
PC1> ip 192.168.1.1/24 192.168.1.254 //设置IP地址与网关
配置PC2：
VPCS> set pcname PC2
PC2> ip 192.168.2.1/24 192.168.2.254
配置R1：
Router>enable
Router#configure terminal
Router(config)#hostname R1
R1(config)#no ip domain-lookup
R1(config)#line console 0
R1(config-line)#exec-timeout 0 0
R1(config-line)#logging synchronous
R1(config-line)#exit
R1(config)#interface loopback0
R1(config-if)#ip address 1.1.1.1 255.255.255.255
R1(config-if)#exit
R1(config)#interface ethernet0/0
R1(config-if)#ip address 192.168.1.254 255.255.255.0
R1(config-if)#no shutdown
R1(config-if)#exit
R1(config)#interface serial1/0
R1(config-if)#ip address 192.168.12.1 255.255.255.0
R1(config-if)#no shutdown
R1(config-if)#end
R1#
配置R2：
Router>enable
Router#configure terminal
Router(config)#hostname R2
R2(config)#no ip domain-lookup
R2(config)#line console 0
R2(config-line)#exec-timeout 0 0
R2(config-line)#logging synchronous
R2(config-line)#exit
R2(config)#interface loopback0
R2(config-if)#ip address 2.2.2.2 255.255.255.255
R2(config-if)#exit
R2(config)#interface serial1/0
R2(config-if)#ip address 192.168.12.2 255.255.255.0
R2(config-if)#no shutdown
R2(config-if)#exit
R2(config)#interface serial1/1
R2(config-if)#ip address 192.168.23.2 255.255.255.0
R2(config-if)#no shutdown
R2(config-if)#end
R2#
配置R3：
Router>enable
Router#configure terminal
Router(config)#hostname R3
R3(config)#no ip domain-lookup
R3(config)#line console 0
R3(config-line)#exec-timeout 0 0
R3(config-line)#logging synchronous
R3(config-line)#exit
R3(config)#interface loopback0
R3(config-if)#ip address 3.3.3.3 255.255.255.255
R3(config-if)#exit
R3(config)#interface ethernet0/0
R3(config-if)#ip address 192.168.2.254 255.255.255.0
R3(config-if)#no shutdown
R3(config-if)#exit
R3(config)#interface serial1/0
R3(config-if)#ip address 192.168.23.3 255.255.255.0
R3(config-if)#no shutdown
R3(config-if)#end
R3#
步骤2：检查设备接口状态
检查PC1：
PC1> show ip
NAME : PC1[1]
IP/MASK : 192.168.1.1/24
GATEWAY : 192.168.1.254
DNS :
MAC : 00:50:79:66:68:04
LPORT : 20000
RHOST:PORT : 127.0.0.1:30000
MTU : 1500
检查R1：
R1#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 192.168.1.254 YES manual up up
Ethernet0/1 unassigned YES unset administratively down down
Ethernet0/2 unassigned YES unset administratively down down
Ethernet0/3 unassigned YES unset administratively down down
Serial1/0 192.168.12.1 YES manual up up
Serial1/1 unassigned YES unset administratively down down
Serial1/2 unassigned YES unset administratively down down
Serial1/3 unassigned YES unset administratively down down
Loopback0 1.1.1.1 YES manual up up
检查R2：
R2#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 unassigned YES unset administratively down down
Ethernet0/1 unassigned YES unset administratively down down
Ethernet0/2 unassigned YES unset administratively down down
Ethernet0/3 unassigned YES unset administratively down down
Serial1/0 192.168.12.2 YES manual up up
Serial1/1 192.168.23.2 YES manual up up
Serial1/2 unassigned YES unset administratively down down
Serial1/3 unassigned YES unset administratively down down
Loopback0 2.2.2.2 YES manual up up
检查R3：
R3#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 192.168.2.254 YES manual up up
Ethernet0/1 unassigned YES unset administratively down down
Ethernet0/2 unassigned YES unset administratively down down
Ethernet0/3 unassigned YES unset administratively down down
Serial1/0 192.168.23.3 YES manual up up
Serial1/1 unassigned YES unset administratively down down
Serial1/2 unassigned YES unset administratively down down
Serial1/3 unassigned YES unset administratively down down
Loopback0 3.3.3.3 YES manual up up
检查PC2：
PC2> show ip
NAME : PC2[1]
IP/MASK : 192.168.2.1/24
GATEWAY : 192.168.2.254
DNS :
MAC : 00:50:79:66:68:05
LPORT : 20000
RHOST:PORT : 127.0.0.1:30000
MTU : 1500
步骤3：测试直连网络的连通性
测试PC1跟网关的网络连通性：
PC1> ping 192.168.1.254
84 bytes from 192.168.1.254 icmp_seq=1 ttl=255 time=0.359 ms
84 bytes from 192.168.1.254 icmp_seq=2 ttl=255 time=0.459 ms
84 bytes from 192.168.1.254 icmp_seq=3 ttl=255 time=0.463 ms
84 bytes from 192.168.1.254 icmp_seq=4 ttl=255 time=0.403 ms
84 bytes from 192.168.1.254 icmp_seq=5 ttl=255 time=0.417 ms
测试R1跟R2之间的网络连通性：
R1#ping 192.168.12.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.12.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 8/9/10 ms
测试R2跟R3之间的网络连通性：
R2#ping 192.168.23.3
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.23.3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 9/9/11 ms
测试PC2跟网关的网络连通性：
PC2> ping 192.168.2.254
84 bytes from 192.168.2.254 icmp_seq=1 ttl=255 time=0.469 ms
84 bytes from 192.168.2.254 icmp_seq=2 ttl=255 time=0.484 ms
84 bytes from 192.168.2.254 icmp_seq=3 ttl=255 time=0.518 ms
84 bytes from 192.168.2.254 icmp_seq=4 ttl=255 time=0.400 ms
- ytes from 192.168.2.254 icmp_seq=5 ttl=255 time=0.405 ms
步骤4：配置OSPF
配置R1：
R1(config)#router ospf 1
R1(config-router)#router-id 1.1.1.1
R1(config-router)#network 192.168.1.0 0.0.0.255 area 0
R1(config-router)#network 192.168.12.0 0.0.0.255 area 0
R1(config-router)#end
R1#
配置R2：
R2(config)#router ospf 1
R2(config-router)#router-id 2.2.2.2
R2(config-router)#network 192.168.12.0 0.0.0.255 area 0
R2(config-router)#network 192.168.23.0 0.0.0.255 area 1
R2(config-router)#end
R2#
配置R3：
R3(config)#router ospf 1
R3(config-router)#router-id 3.3.3.3
R3(config-router)#network 192.168.23.0 0.0.0.255 area 1
R3(config-router)#network 192.168.2.0 0.0.0.255 area 1
R3(config-router)#end
R3#
实验检查
步骤1：检查OSPF邻居
检查R1：
R1#show ip ospf neighbor
Neighbor ID Pri State Dead Time Address Interface
2.2.2.2 0 FULL/ - 00:00:31 192.168.12.2 Serial1/0
Full是完全邻接状态，是正常的状态。
检查R2：
R2#show ip ospf neighbor
Neighbor ID Pri State Dead Time Address Interface
1.1.1.1 0 FULL/ - 00:00:31 192.168.12.1 Serial1/0
3.3.3.3 0 FULL/ - 00:00:39 192.168.23.3 Serial1/1
检查R3：
R3#show ip ospf neighbor
Neighbor ID Pri State Dead Time Address Interface
-
-
-
- 0 FULL/ - 00:00:33 192.168.23.2 Serial1/0
-
-
步骤2：检查OSPF路由
检查R1：
R1#show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
a - application route
+ - replicated route, % - next hop override, p - overrides from PfR
Gateway of last resort is not set
1.0.0.0/32 is subnetted, 1 subnets
C 1.1.1.1 is directly connected, Loopback0
192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.1.0/24 is directly connected, Ethernet0/0
L 192.168.1.254/32 is directly connected, Ethernet0/0
O IA 192.168.2.0/24 [110/138] via 192.168.12.2, 00:04:48, Serial1/0
192.168.12.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.12.0/24 is directly connected, Serial1/0
L 192.168.12.1/32 is directly connected, Serial1/0
O IA 192.168.23.0/24 [110/128] via 192.168.12.2, 00:06:10, Serial1/0
R1有两条O IA的路由，O IA表示OSPF区域间的路由；
因为R1所有接口都是属于Area 0，192.168.2.0/24和192.168.23.0/24都是属于Area 1，所以通过R2跨区域传递给R1之后，就形成了O IA路由。
检查R2：
R2#show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
a - application route
+ - replicated route, % - next hop override, p - overrides from PfR
Gateway of last resort is not set
2.0.0.0/32 is subnetted, 1 subnets
C 2.2.2.2 is directly connected, Loopback0
O 192.168.1.0/24 [110/74] via 192.168.12.1, 00:09:55, Serial1/0
O 192.168.2.0/24 [110/74] via 192.168.23.3, 00:08:24, Serial1/1
192.168.12.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.12.0/24 is directly connected, Serial1/0
L 192.168.12.2/32 is directly connected, Serial1/0
192.168.23.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.23.0/24 is directly connected, Serial1/1
L 192.168.23.2/32 is directly connected, Serial1/1
因为R1既有接口属于Area 0，也有接口属于Area 1；
所以R1的路由表看到的都是O路由，O表示OSPF区域内的路由。
实验15：配置标准ACL
实验目的
-
- 理解标准ACL的应用
- 掌握标准ACL的配置
实验拓扑
实验需求
- 根据实验拓扑图，完成设备的基本配置；
- 配置静态路由，使得全网路由可达；
- 在R3上部署ACL，只允许192.168.1.0/24和192.168.2.0/24网段的用户访问PC3。
实验步骤
步骤1：设备的基本配置
配置PC1：
Router>enable
Router#configure terminal
Router(config)#hostname PC1
PC1(config)#no ip routing
PC1(config)#ip default-gateway 192.168.1.254
PC1(config)#interface ethernet0/0
PC1(config-if)#ip address 192.168.1.1 255.255.255.0
PC1(config-if)#no shutdown
PC1(config-if)#end
PC1#
配置PC2：
Router>enable
Router#configure terminal
Router(config)#hostname PC2
PC2(config)#no ip routing
PC2(config)#ip default-gateway 192.168.2.254
PC2(config)#interface ethernet0/0
PC2(config-if)#ip address 192.168.2.1 255.255.255.0
PC2(config-if)#no shutdown
PC2(config-if)#end
PC2#
配置PC3：
Router>enable
Router#configure terminal
Router(config)#hostname PC3
PC3(config)#no ip routing
PC3(config)#ip default-gateway 192.168.3.254
PC3(config)#interface ethernet0/0
PC3(config-if)#ip address 192.168.3.1 255.255.255.0
PC3(config-if)#no shutdown
PC3(config-if)#end
PC3#
配置R1：
Router>enable
Router#configure terminal
Router(config)#hostname R1
R1(config)#no ip domain-lookup
R1(config)#line console 0
R1(config-line)#exec-timeout 0 0
R1(config-line)#logging synchronous
R1(config-line)#exit
R1(config)#interface ethernet0/0
R1(config-if)#ip address 192.168.1.254 255.255.255.0
R1(config-if)#no shutdown
R1(config-if)#exit
R1(config)#interface serial1/0
R1(config-if)#ip address 192.168.12.1 255.255.255.0
R1(config-if)#no shutdown
R1(config-if)#end
R1#
配置R2：
Router>enable
Router#configure terminal
Router(config)#hostname R2
R2(config)#no ip domain-lookup
R2(config)#line console 0
R2(config-line)#exec-timeout 0 0
R2(config-line)#logging synchronous
R2(config-line)#exit
R2(config)#interface serial1/0
R2(config-if)#ip address 192.168.12.2 255.255.255.0
R2(config-if)#no shutdown
R2(config-if)#exit
R2(config)#interface serial1/1
R2(config-if)#ip address 192.168.23.2 255.255.255.0
R2(config-if)#no shutdown
R2(config-if)#exit
R2(config)#interface ethernet0/0
R2(config-if)#ip address 192.168.2.254 255.255.255.0
R2(config-if)#no shutdown
R2(config-if)#end
R2#
配置R3：
Router>enable
Router#configure terminal
Router(config)#hostname R3
R3(config)#no ip domain-lookup
R3(config)#line console 0
R3(config-line)#exec-timeout 0 0
R3(config-line)#logging synchronous
R3(config-line)#exit
R3(config)#interface ethernet0/0
R3(config-if)#ip address 192.168.3.254 255.255.255.0
R3(config-if)#no shutdown
R3(config-if)#exit
R3(config)#interface serial1/0
R3(config-if)#ip address 192.168.23.3 255.255.255.0
R3(config-if)#no shutdown
R3(config-if)#end
R3#
步骤2：配置静态路由
配置R1：
R1(config)#ip route 192.168.2.0 255.255.255.0 192.168.12.2
R1(config)#ip route 192.168.3.0 255.255.255.0 192.168.12.2
R1(config)#ip route 192.168.23.0 255.255.255.0 192.168.12.2
配置R2：
R2(config)#ip route 192.168.1.0 255.255.255.0 serial1/0
R2(config)#ip route 192.168.3.0 255.255.255.0 serial1/1
配置R3：
R3(config)#ip route 192.168.1.0 255.255.255.0 192.168.23.2
R3(config)#ip route 192.168.2.0 255.255.255.0 192.168.23.2
R3(config)#ip route 192.168.12.0 255.255.255.0 192.168.23.2
这个时候任何一个网段都能访问PC3。
测试PC1访问PC3：
PC1#ping 192.168.3.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.3.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 19/20/22 ms
测试PC2访问PC3：
PC2#ping 192.168.3.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.3.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 10/10/11 ms
测试R1访问PC3：
R1#ping 192.168.3.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.3.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 16/19/22 ms
步骤3：配置标准ACL
配置R3
R3(config)#access-list 1 permit 192.168.1.0 0.0.0.255
R3(config)#access-list 1 permit 192.168.2.0 0.0.0.255
R3(config)#interface serial1/0
R3(config-if)#ip access-group 1 in
R3(config-if)#end
R3#
这个时候除了192.168.1.0/24和192.168.2.0/24网段，其他网段就访问不了了。
测试PC1访问PC3：
PC1#ping 192.168.3.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.3.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 19/20/22 ms
测试PC2访问PC3：
PC2#ping 192.168.3.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.3.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 10/10/11 ms
测试R1访问PC3：
R1#ping 192.168.3.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.3.1, timeout is 2 seconds:
U.U.U
Success rate is 0 percent (0/5)
被ACL拒绝了。
实验16：配置扩展ACL
实验目的
- 理解扩展ACL的应用
- 掌握扩展ACL的配置
实验拓扑
实验需求
- 根据实验拓扑图，完成设备的基本配置；
- 配置EIGRP，使得全网路由可达；
- 在R3上部署ACL，只允许192.168.1.0/24网段的用户Ping PC3；
- 在R3上部署ACL，只允许192.168.2.0/24网段的用户Telnet PC3。
实验步骤
步骤1：设备的基本配置
配置PC1：
Router>enable
Router#configure terminal
Router(config)#hostname PC1
PC1(config)#no ip routing
PC1(config)#ip default-gateway 192.168.1.254
PC1(config)#interface ethernet0/0
PC1(config-if)#ip address 192.168.1.1 255.255.255.0
PC1(config-if)#no shutdown
PC1(config-if)#end
PC1#
配置PC2：
Router>enable
Router#configure terminal
Router(config)#hostname PC2
PC2(config)#no ip routing
PC2(config)#ip default-gateway 192.168.2.254
PC2(config)#interface ethernet0/0
PC2(config-if)#ip address 192.168.2.1 255.255.255.0
PC2(config-if)#no shutdown
PC2(config-if)#end
PC2#
配置PC3：
Router>enable
Router#configure terminal
Router(config)#hostname PC3
PC3(config)#no ip routing
PC3(config)#line vty 0 4
PC3(config-line)#password xmws
PC3(config-line)#login
PC3(config-line)#transport input telnet
PC3(config-line)#exit
PC3(config)#ip default-gateway 192.168.3.254
PC3(config)#interface ethernet0/0
PC3(config-if)#ip address 192.168.3.1 255.255.255.0
PC3(config-if)#no shutdown
PC3(config-if)#end
PC3#
配置R1：
Router>enable
Router#configure terminal
Router(config)#hostname R1
R1(config)#no ip domain-lookup
R1(config)#line console 0
R1(config-line)#exec-timeout 0 0
R1(config-line)#logging synchronous
R1(config-line)#exit
R1(config)#interface ethernet0/0
R1(config-if)#ip address 192.168.1.254 255.255.255.0
R1(config-if)#no shutdown
R1(config-if)#exit
R1(config)#interface serial1/0
R1(config-if)#ip address 192.168.12.1 255.255.255.0
R1(config-if)#no shutdown
R1(config-if)#end
R1#
配置R2：
Router>enable
Router#configure terminal
Router(config)#hostname R2
R2(config)#no ip domain-lookup
R2(config)#line console 0
R2(config-line)#exec-timeout 0 0
R2(config-line)#logging synchronous
R2(config-line)#exit
R2(config)#interface serial1/0
R2(config-if)#ip address 192.168.12.2 255.255.255.0
R2(config-if)#no shutdown
R2(config-if)#exit
R2(config)#interface serial1/1
R2(config-if)#ip address 192.168.23.2 255.255.255.0
R2(config-if)#no shutdown
R2(config-if)#exit
R2(config)#interface ethernet0/0
R2(config-if)#ip address 192.168.2.254 255.255.255.0
R2(config-if)#no shutdown
R2(config-if)#end
R2#
配置R3：
Router>enable
Router#configure terminal
Router(config)#hostname R3
R3(config)#no ip domain-lookup
R3(config)#line console 0
R3(config-line)#exec-timeout 0 0
R3(config-line)#logging synchronous
R3(config-line)#exit
R3(config)#interface ethernet0/0
R3(config-if)#ip address 192.168.3.254 255.255.255.0
R3(config-if)#no shutdown
R3(config-if)#exit
R3(config)#interface serial1/0
R3(config-if)#ip address 192.168.23.3 255.255.255.0
R3(config-if)#no shutdown
R3(config-if)#end
R3#
步骤2：配置静态路由
配置R1：
R1(config)#ip route 192.168.2.0 255.255.255.0 192.168.12.2
R1(config)#ip route 192.168.3.0 255.255.255.0 192.168.12.2
R1(config)#ip route 192.168.23.0 255.255.255.0 192.168.12.2
配置R2：
R2(config)#ip route 192.168.1.0 255.255.255.0 serial1/0
R2(config)#ip route 192.168.3.0 255.255.255.0 serial1/1
配置R3：
R3(config)#ip route 192.168.1.0 255.255.255.0 192.168.23.2
R3(config)#ip route 192.168.2.0 255.255.255.0 192.168.23.2
R3(config)#ip route 192.168.12.0 255.255.255.0 192.168.23.2
这个时候任何一个网段都能访问PC3。
测试PC1 ping PC3：
PC1#ping 192.168.3.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.3.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 19/20/22 ms
测试PC1 telnet PC3：
PC1#telnet 192.168.3.1
Trying 192.168.3.1 ... Open
User Access Verification
Password:
PC3>
测试PC2 ping PC3：
PC2#ping 192.168.3.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.3.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 10/10/11 ms
测试PC2 telnet PC3：
PC1#telnet 192.168.3.1
Trying 192.168.3.1 ... Open
User Access Verification
Password:
PC3>
步骤3：配置扩展ACL
配置R3：
R3(config)#access-list 101 permit icmp 192.168.1.0 0.0.0.255 host 192.168.3.1
R3(config)#access-list 101 permit tcp 192.168.2.0 0.0.0.255 host 192.168.3.1 eq 23
R3(config)#interface serial 1/0
R3(config-if)#ip access-group 101 in
R3(config-if)#end
R3#
这个时候只有PC1能Ping PC3，PC2能Telnet PC3。
测试PC1 ping PC3：
PC1#ping 192.168.3.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.3.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 19/20/22 ms
测试PC1 telnet PC3：
PC1#telnet 192.168.3.1
Trying 192.168.3.1 ...
% Destination unreachable; gateway or host down
PC1#
测试PC2 ping PC3：
PC2#ping 192.168.3.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.3.1, timeout is 2 seconds:
U.U.U
Success rate is 0 percent (0/5)
测试PC2 telnet PC3：
PC1#telnet 192.168.3.1
Trying 192.168.3.1 ... Open
User Access Verification
Password:
PC3>
实验17：配置静态NAT
实验目的
- 理解静态NAT的转换原理
- 掌握静态NAT的配置方法
实验拓扑
实验需求
- 根据实验拓扑图，完成设备的基本配置；
- 在R2上创建Loopback0接口，IP地址是9.6.7/32，模拟公网上的一台服务器；
- 在R1上配置静态NAT，PC1访问服务器使用12.1.1.11转换源地址；
- 在R1上配置静态NAT，PC2访问服务器使用12.1.1.12转换源地址。
实验步骤
步骤1：设备的基本配置
配置PC1：
Router>enable
Router#configure terminal
Router(config)#hostname PC1
PC1(config)#no ip routing
PC1(config)#ip default-gateway 192.168.1.254
PC1(config)#interface ethernet0/0
PC1(config-if)#ip address 192.168.1.1 255.255.255.0
PC1(config-if)#no shutdown
PC1(config-if)#end
PC1#
配置PC2：
Router>enable
Router#configure terminal
Router(config)#hostname PC2
PC2(config)#no ip routing
PC2(config)#ip default-gateway 192.168.1.254
PC2(config)#interface ethernet0/0
PC2(config-if)#ip address 192.168.1.2 255.255.255.0
PC2(config-if)#no shutdown
PC2(config-if)#end
PC2#
配置SW1：
Switch>ena
Switch#conf t
Switch(config)#no ip domain-lookup
Switch(config)#line console 0
Switch(config-line)# logging s
Switch(config-line)# exec-t 0 0
Switch(config-line)# exit
Switch(config)#hostname SW1
SW1(config)#end
SW1#
配置R1：
Router>enable
Router#configure terminal
Router(config)#hostname R1
R1(config)#no ip domain-lookup
R1(config)#line console 0
R1(config-line)#exec-timeout 0 0
R1(config-line)#logging synchronous
R1(config-line)#exit
R1(config)#interface ethernet0/0
R1(config-if)#ip address 192.168.1.254 255.255.255.0
R1(config-if)#no shutdown
R1(config-if)#exit
R1(config)#interface ethernet0/1
R1(config-if)#ip address 12.1.1.1 255.255.255.0
R1(config-if)#no shutdown
R1(config-if)#end
R1#
配置R2：
Router>enable
Router#configure terminal
Router(config)#hostname R2
R2(config)#no ip domain-lookup
R2(config)#line console 0
R2(config-line)#exec-timeout 0 0
R2(config-line)#logging synchronous
R2(config-line)#exit
R2(config)#interface loopback0
R2(config-if)#ip address 9.2.6.7 255.255.255.255
R2(config-if)#exit
R2(config)#interface ethernet0/0
R2(config-if)#ip address 12.1.1.2 255.255.255.0
R2(config-if)#no shutdown
R2(config-if)#end
R2#
步骤2：配置静态NAT
配置R1：
R1(config)#ip nat inside source static 192.168.1.1 12.1.1.11 //配置静态转换
R1(config)#ip nat inside source static 192.168.1.2 12.1.1.12 //配置静态转换
R1(config)#interface ethernet 0/0
R1(config-if)#ip nat inside //指定inside接口
R1(config-if)#exit
R1(config)#interface ethernet 0/1
R1(config-if)#ip nat outside //指定outside接口
R1(config-if)#exit
R1(config)#ip route 0.0.0.0 0.0.0.0 12.1.1.2 //配置到达公网的默认路由
R1(config)#end
R1#
检查R1的NAT表项：
R1#show ip nat translations
Pro Inside global Inside local Outside local Outside global
--- 12.1.1.11 192.168.1.1 --- ---
--- 12.1.1.12 192.168.1.2 --- ---
R1的NAT映射表创建了两个静态NAT条目。
测试PC1访问服务器：
PC1#ping 9.2.6.7
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 9.2.6.7, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms
测试PC2访问服务器：
PC2#ping 9.2.6.7
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 9.2.6.7, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms
检查R1的NAT表项：
R1#sh ip nat translations
Pro Inside global Inside local Outside local Outside global
icmp 12.1.1.11:4 192.168.1.1:4 9.2.6.7:4 9.2.6.7:4
--- 12.1.1.11 192.168.1.1 --- ---
icmp 12.1.1.12:2 192.168.1.2:2 9.2.6.7:2 9.2.6.7:2
--- 12.1.1.12 192.168.1.2 --- ---
实验18：配置动态NAT
实验目的
- 理解动态NAT的转换原理
- 掌握动态NAT的配置方法
实验拓扑
实验需求
- 根据实验拓扑图，完成设备的基本配置；
- 在R2上创建Loopback0接口，IP地址是9.6.7/32，模拟公网上的一台服务器；
- 在R1上配置动态NAT，地址池范围为12.1.1.11~12.1.1.20，使得PC1和PC2能够访问公网服务器。
实验步骤
步骤1：设备的基本配置
配置PC1：
Router>enable
Router#configure terminal
Router(config)#hostname PC1
PC1(config)#no ip routing
PC1(config)#ip default-gateway 192.168.1.254
PC1(config)#interface ethernet0/0
PC1(config-if)#ip address 192.168.1.1 255.255.255.0
PC1(config-if)#no shutdown
PC1(config-if)#end
PC1#
配置PC2：
Router>enable
Router#configure terminal
Router(config)#hostname PC2
PC2(config)#no ip routing
PC2(config)#ip default-gateway 192.168.1.254
PC2(config)#interface ethernet0/0
PC2(config-if)#ip address 192.168.1.2 255.255.255.0
PC2(config-if)#no shutdown
PC2(config-if)#end
PC2#
配置SW1：
Switch>ena
Switch#conf t
Switch(config)#no ip domain-lookup
Switch(config)#line console 0
Switch(config-line)# logging s
Switch(config-line)# exec-t 0 0
Switch(config-line)# exit
Switch(config)#hostname SW1
SW1(config)#end
SW1#
配置R1：
Router>enable
Router#configure terminal
Router(config)#hostname R1
R1(config)#no ip domain-lookup
R1(config)#line console 0
R1(config-line)#exec-timeout 0 0
R1(config-line)#logging synchronous
R1(config-line)#exit
R1(config)#interface ethernet0/0
R1(config-if)#ip address 192.168.1.254 255.255.255.0
R1(config-if)#no shutdown
R1(config-if)#exit
R1(config)#interface ethernet0/1
R1(config-if)#ip address 12.1.1.1 255.255.255.0
R1(config-if)#no shutdown
R1(config-if)#end
R1#
配置R2：
Router>enable
Router#configure terminal
Router(config)#hostname R2
R2(config)#no ip domain-lookup
R2(config)#line console 0
R2(config-line)#exec-timeout 0 0
R2(config-line)#logging synchronous
R2(config-line)#exit
R2(config)#interface loopback0
R2(config-if)#ip address 9.2.6.7 255.255.255.255
R2(config-if)#exit
R2(config)#interface ethernet0/0
R2(config-if)#ip address 12.1.1.2 255.255.255.0
R2(config-if)#no shutdown
R2(config-if)#end
R2#
步骤2：配置动态NAT
配置R1：
R1(config)#ip nat pool xmws 12.1.1.11 12.1.1.20 netmask 255.255.255.0 //创建地址池
R1(config)#access-list 1 permit 192.168.1.0 0.0.0.255 //通过ACL定义哪些子网能做NAT
R1(config)#ip nat inside source list 1 pool xmws //关联ALC和地址池
R1(config)#interface ethernet 0/0
R1(config-if)#ip nat inside //指定inside接口
R1(config-if)#exit
R1(config)#interface ethernet 0/1
R1(config-if)#ip nat outside //指定outside接口
R1(config-if)#exit
R1(config)#ip route 0.0.0.0 0.0.0.0 12.1.1.2 //配置到达公网的默认路由
测试PC1访问服务器：
PC1#ping 9.2.6.7
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 9.2.6.7, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms
测试PC2访问服务器：
PC2#ping 9.2.6.7
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 9.2.6.7, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms
检查R1的NAT表项：
R1#show ip nat translations
Pro Inside global Inside local Outside local Outside global
icmp 12.1.1.12:6 192.168.1.1:6 9.2.6.7:6 9.2.6.7:6
--- 12.1.1.12 192.168.1.1 --- ---
icmp 12.1.1.13:4 192.168.1.2:4 9.2.6.7:4 9.2.6.7:4
--- 12.1.1.13 192.168.1.2 --- ---
实验19：配置PAT
实验目的
- 理解PAT的转换原理
- 掌握PAT的配置方法
实验拓扑
实验需求
- 根据实验拓扑图，完成设备的基本配置；
- 在R2上创建Loopback0接口，IP地址是9.6.7/32，模拟公网上的一台服务器；
- 在R1上配置PAT，使得PC1和PC2能够复用E0/1接口地址访问公网服务器。
实验步骤
步骤1：设备的基本配置
配置PC1：
Router>enable
Router#configure terminal
Router(config)#hostname PC1
PC1(config)#no ip routing
PC1(config)#ip default-gateway 192.168.1.254
PC1(config)#interface ethernet0/0
PC1(config-if)#ip address 192.168.1.1 255.255.255.0
PC1(config-if)#no shutdown
PC1(config-if)#end
PC1#
配置PC2：
Router>enable
Router#configure terminal
Router(config)#hostname PC2
PC2(config)#no ip routing
PC2(config)#ip default-gateway 192.168.1.254
PC2(config)#interface ethernet0/0
PC2(config-if)#ip address 192.168.1.2 255.255.255.0
PC2(config-if)#no shutdown
PC2(config-if)#end
PC2#
配置SW1：
Switch>ena
Switch#conf t
Switch(config)#no ip domain-lookup
Switch(config)#line console 0
Switch(config-line)# logging s
Switch(config-line)# exec-t 0 0
Switch(config-line)# exit
Switch(config)#hostname SW1
SW1(config)#end
SW1#
配置R1：
Router>enable
Router#configure terminal
Router(config)#hostname R1
R1(config)#no ip domain-lookup
R1(config)#line console 0
R1(config-line)#exec-timeout 0 0
R1(config-line)#logging synchronous
R1(config-line)#exit
R1(config)#interface ethernet0/0
R1(config-if)#ip address 192.168.1.254 255.255.255.0
R1(config-if)#no shutdown
R1(config-if)#exit
R1(config)#interface ethernet0/1
R1(config-if)#ip address 12.1.1.1 255.255.255.0
R1(config-if)#no shutdown
R1(config-if)#end
R1#
配置R2：
Router>enable
Router#configure terminal
Router(config)#hostname R2
R2(config)#no ip domain-lookup
R2(config)#line console 0
R2(config-line)#exec-timeout 0 0
R2(config-line)#logging synchronous
R2(config-line)#exit
R2(config)#interface loopback0
R2(config-if)#ip address 9.2.6.7 255.255.255.255
R2(config-if)#exit
R2(config)#interface ethernet0/0
R2(config-if)#ip address 12.1.1.2 255.255.255.0
R2(config-if)#no shutdown
R2(config-if)#end
R2#
步骤2：配置PAT
配置R1：
R1(config)#access-list 1 permit 192.168.1.0 0.0.0.255 //定义ACL
R1(config)#ip nat inside source list 1 interface ethernet 0/1 overload //关联ACL和outside接口
R1(config)#interface ethernet 0/0
R1(config-if)#ip nat inside //指定inside接口
R1(config-if)#exit
R1(config)#interface ethernet 0/1
R1(config-if)#ip nat outside //指定outside接口
R1(config-if)#exit
R1(config)#ip route 0.0.0.0 0.0.0.0 12.1.1.2 //配置到达公网的默认路由
测试PC1访问服务器：
PC1#ping 9.2.6.7
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 9.2.6.7, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms
测试PC2访问服务器：
PC2#ping 9.2.6.7
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 9.2.6.7, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms
检查R1的NAT表项：
R1#show ip nat translations
Pro Inside global Inside local Outside local Outside global
icmp 12.1.1.1:7 192.168.1.1:7 9.2.6.7:7 9.2.6.7:7
icmp 12.1.1.1:5 192.168.1.2:5 9.2.6.7:5 9.2.6.7:5
Inside global都是12.1.1.1，通过端口号区分不同的主机。
实验20：配置静态PAT
实验目的
- 理解静态PAT的转换原理
- 掌握静态PAT的配置方法
实验拓扑
实验需求
- 根据实验拓扑图，完成设备的基本配置；
- 在R2上创建Loopback0接口，IP地址是9.6.7/32，模拟公网上的一台服务器；
- 在R1上配置静态PAT，使得Internet用户能够访问PC1的Telnet服务；
- 在R1上配置静态PAT，使得Internet用户能够访问PC2的Web服务。
实验步骤
步骤1：设备的基本配置
配置PC1：
Router>enable
Router#configure terminal
Router(config)#hostname PC1
PC1(config)#line vty 0 4 //进入VTY
PC1(config-line)#password xmws //设置VTY密码
PC1(config-line)#login //启用密码
PC1(config-line)#transport input telnet //允许Telnet远程登录
PC1(config-line)#exit
PC1(config)#no ip routing
PC1(config)#ip default-gateway 192.168.1.254
PC1(config)#interface ethernet0/0
PC1(config-if)#ip address 192.168.1.1 255.255.255.0
PC1(config-if)#no shutdown
PC1(config-if)#end
PC1#
配置PC2：
Router>enable
Router#configure terminal
Router(config)#hostname PC2
PC2(config)#no ip routing
PC2(config)#ip http server //开启HTTP服务
PC2(config)#ip default-gateway 192.168.1.254
PC2(config)#interface ethernet0/0
PC2(config-if)#ip address 192.168.1.2 255.255.255.0
PC2(config-if)#no shutdown
PC2(config-if)#end
PC2#
配置SW1：
Switch>ena
Switch#conf t
Switch(config)#no ip domain-lookup
Switch(config)#line console 0
Switch(config-line)# logging s
Switch(config-line)# exec-t 0 0
Switch(config-line)# exit
Switch(config)#hostname SW1
SW1(config)#end
SW1#
配置R1：
Router>enable
Router#configure terminal
Router(config)#hostname R1
R1(config)#no ip domain-lookup
R1(config)#line console 0
R1(config-line)#exec-timeout 0 0
R1(config-line)#logging synchronous
R1(config-line)#exit
R1(config)#interface ethernet0/0
R1(config-if)#ip address 192.168.1.254 255.255.255.0
R1(config-if)#no shutdown
R1(config-if)#exit
R1(config)#interface ethernet0/1
R1(config-if)#ip address 12.1.1.1 255.255.255.0
R1(config-if)#no shutdown
R1(config-if)#end
R1#
配置R2：
Router>enable
Router#configure terminal
Router(config)#hostname R2
R2(config)#no ip domain-lookup
R2(config)#line console 0
R2(config-line)#exec-timeout 0 0
R2(config-line)#logging synchronous
R2(config-line)#exit
R2(config)#interface loopback0
R2(config-if)#ip address 9.2.6.7 255.255.255.255
R2(config-if)#exit
R2(config)#interface ethernet0/0
R2(config-if)#ip address 12.1.1.2 255.255.255.0
R2(config-if)#no shutdown
R2(config-if)#end
R2#
步骤2：配置动态NAT
配置R1：
R1(config)#ip nat inside source static tcp 192.168.1.1 23 12.1.1.1 23 //创建静态映射
R1(config)#ip nat inside source static tcp 192.168.1.2 80 12.1.1.1 80 //创建静态映射
R1(config)#interface ethernet 0/0
R1(config-if)#ip nat inside //指定inside接口
R1(config-if)#exit
R1(config)#interface ethernet 0/1
R1(config-if)#ip nat outside //指定outside接口
R1(config-if)#exit
R1(config)#ip route 0.0.0.0 0.0.0.0 12.1.1.2 //定义到达公网的默认路由
检查R1的NAT表项：
R1#show ip nat translations
Pro Inside global Inside local Outside local Outside global
tcp 12.1.1.1:23 192.168.1.1:23 --- ---
tcp 12.1.1.1:80 192.168.1.2:80 --- ---
因为是静态PAT，所以即使没有流量，NAT转换表也有条目。
在R2上测试Telnet服务：
R2#telnet 12.1.1.1
Trying 12.1.1.1 ... Open
User Access Verification
Password:
PC1>
PC1的Telnet服务发布成功。
在R2上测试Web服务：
R2#telnet 12.1.1.1 80
Trying 12.1.1.1, 80 ... Open
PC2的Web服务发布成功。
检查R1的NAT表项：
R1#show ip nat translations
Pro Inside global Inside local Outside local Outside global
tcp 12.1.1.1:23 192.168.1.1:23 12.1.1.2:64490 12.1.1.2:64490
tcp 12.1.1.1:23 192.168.1.1:23 --- ---
tcp 12.1.1.1:80 192.168.1.2:80 12.1.1.2:36455 12.1.1.2:36455
tcp 12.1.1.1:80 192.168.1.2:80 --- ---
有流量触发之后，NAT转换表多出两个动态条目。
实验21：配置PAP单向认证
实验目的
- 理解PAP认证的原理
- 掌握PAP认证的配置
实验拓扑
实验需求
- 根据实验拓扑图，完成设备的基本配置；
- 在R1和R2之间做PAP单向认证，R1是认证方，R2是被认证方。
实验步骤
步骤1：设备的基本配置
配置R1：
Router>enable
Router#configure terminal
Router(config)#hostname R1
R1(config)#no ip domain-lookup
R1(config)#line console 0
R1(config-line)#exec-timeout 0 0
R1(config-line)#logging synchronous
R1(config-line)#exit
R1(config)#interface serial1/0
R1(config-if)#ip address 12.1.1.1 255.255.255.0
R1(config-if)#no shutdown
R1(config-if)#end
R1#
配置R2：
Router>enable
Router#configure terminal
Router(config)#hostname R2
R2(config)#no ip domain-lookup
R2(config)#line console 0
R2(config-line)#exec-timeout 0 0
R2(config-line)#logging synchronous
R2(config-line)#exit
R2(config)#interface serial1/0
R2(config-if)#ip address 12.1.1.2 255.255.255.0
R2(config-if)#no shutdown
R2(config-if)#end
R2#
步骤2：配置PAP认证
配置R1：
R1(config)#interface serial 1/0
R1(config-if)#encapsulation ppp //封装PPP
R1(config-if)#ppp authentication pap //启用PAP认证
R1(config-if)#exit
R1(config)#username xmws password wisdom //创建用户名和密码
R1(config)#end
R1#
配置R2：
R2(config)#interface serial 1/0
R2(config-if)#encapsulation ppp //封装PPP
R2(config-if)#ppp pap sent-username xmws password wisdom //PAP发送的用户名和密码
R2(config-if)#end
R2#
步骤3：检查PAP认证
检查R1：
R1#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 unassigned YES unset administratively down down
Ethernet0/1 unassigned YES unset administratively down down
Ethernet0/2 unassigned YES unset administratively down down
Ethernet0/3 unassigned YES unset administratively down down
Serial1/0 12.1.1.1 YES manual up up
Serial1/1 unassigned YES unset administratively down down
Serial1/2 unassigned YES unset administratively down down
Serial1/3 unassigned YES unset administratively down down
检查R2：
R2#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 unassigned YES unset administratively down down
Ethernet0/1 unassigned YES unset administratively down down
Ethernet0/2 unassigned YES unset administratively down down
Ethernet0/3 unassigned YES unset administratively down down
Serial1/0 12.1.1.2 YES manual up up
Serial1/1 unassigned YES unset administratively down down
Serial1/2 unassigned YES unset administratively down down
Serial1/3 unassigned YES unset administratively down down
实验22：配置PAP双向认证
实验目的
- 理解PAP认证的原理
- 掌握PAP认证的配置
实验拓扑
实验需求
- 根据实验拓扑图，完成设备的基本配置；
- 在R1和R2之间做PAP的双向认证。
实验步骤
步骤1：设备的基本配置
配置R1：
Router>enable
Router#configure terminal
Router(config)#hostname R1
R1(config)#no ip domain-lookup
R1(config)#line console 0
R1(config-line)#exec-timeout 0 0
R1(config-line)#logging synchronous
R1(config-line)#exit
R1(config)#interface serial1/0
R1(config-if)#ip address 12.1.1.1 255.255.255.0
R1(config-if)#no shutdown
R1(config-if)#end
R1#
配置R2：
Router>enable
Router#configure terminal
Router(config)#hostname R2
R2(config)#no ip domain-lookup
R2(config)#line console 0
R2(config-line)#exec-timeout 0 0
R2(config-line)#logging synchronous
R2(config-line)#exit
R2(config)#interface serial1/0
R2(config-if)#ip address 12.1.1.2 255.255.255.0
R2(config-if)#no shutdown
R2(config-if)#end
R2#
步骤2：配置PAP认证
配置R1：
R1(config)#interface serial 1/0
R1(config-if)#encapsulation ppp //封装PPP
R1(config-if)#ppp authentication pap //启用PAP认证
R1(config-if)#ppp pap sent-username R1 password xmws //PAP发送的用户名和密码
R1(config-if)#exit
R1(config)#username R2 password xmws //创建用户名和密码
R1(config)#end
R1#
配置R2：
R2(config)#interface serial 1/0
R2(config-if)#encapsulation ppp //封装PPP
R2(config-if)#ppp authentication pap //启用PAP认证
R2(config-if)#ppp pap sent-username R2 password xmws //PAP发送的用户名和密码
R2(config-if)#exit
R2(config)#username R1 password xmws //创建用户名和密码
R2(config)#end
R2#
步骤3：检查PAP认证
检查R1：
R1#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 unassigned YES unset administratively down down
Ethernet0/1 unassigned YES unset administratively down down
Ethernet0/2 unassigned YES unset administratively down down
Ethernet0/3 unassigned YES unset administratively down down
Serial1/0 12.1.1.1 YES manual up up
Serial1/1 unassigned YES unset administratively down down
Serial1/2 unassigned YES unset administratively down down
Serial1/3 unassigned YES unset administratively down down
检查R2：
R2#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 unassigned YES unset administratively down down
Ethernet0/1 unassigned YES unset administratively down down
Ethernet0/2 unassigned YES unset administratively down down
Ethernet0/3 unassigned YES unset administratively down down
Serial1/0 12.1.1.2 YES manual up up
Serial1/1 unassigned YES unset administratively down down
Serial1/2 unassigned YES unset administratively down down
Serial1/3 unassigned YES unset administratively down down
实验23：配置CHAP单向认证
实验目的
- 理解CHAP认证的原理
- 掌握CHAP认证的配置
实验拓扑
实验需求
- 根据实验拓扑图，完成设备的基本配置；
- 在R1和R2之间做CHAP单向认证，R1是认证方，R2是被认证方。
实验步骤
步骤1：设备的基本配置
配置R1：
Router>enable
Router#configure terminal
Router(config)#hostname R1
R1(config)#no ip domain-lookup
R1(config)#line console 0
R1(config-line)#exec-timeout 0 0
R1(config-line)#logging synchronous
R1(config-line)#exit
R1(config)#interface serial1/0
R1(config-if)#ip address 12.1.1.1 255.255.255.0
R1(config-if)#no shutdown
R1(config-if)#end
R1#
配置R2：
Router>enable
Router#configure terminal
Router(config)#hostname R2
R2(config)#no ip domain-lookup
R2(config)#line console 0
R2(config-line)#exec-timeout 0 0
R2(config-line)#logging synchronous
R2(config-line)#exit
R2(config)#interface serial1/0
R2(config-if)#ip address 12.1.1.2 255.255.255.0
R2(config-if)#no shutdown
R2(config-if)#end
R2#
步骤2：配置CHAP认证
配置R1：
R1(config)#interface serial 1/0
R1(config-if)#encapsulation ppp //封装PPP
R1(config-if)#ppp authentication chap //启用CHAP认证
R1(config-if)#exit
R1(config)#username xmws password wisdom //创建用户名和密码
R1(config)#end
R1#
配置R2：
R2(config)#interface serial 1/0
R2(config-if)#encapsulation ppp //封装PPP
R2(config-if)#ppp chap hostname xmws //CHAP认证的用户名
R2(config-if)#ppp chap password wisdom //CHAP认证的密码
R2(config-if)#end
R2#
步骤3：检查:CHAP认证
检查R1：
R1#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 unassigned YES unset administratively down down
Ethernet0/1 unassigned YES unset administratively down down
Ethernet0/2 unassigned YES unset administratively down down
Ethernet0/3 unassigned YES unset administratively down down
Serial1/0 12.1.1.1 YES manual up up
Serial1/1 unassigned YES unset administratively down down
Serial1/2 unassigned YES unset administratively down down
Serial1/3 unassigned YES unset administratively down down
检查R2：
R2#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 unassigned YES unset administratively down down
Ethernet0/1 unassigned YES unset administratively down down
Ethernet0/2 unassigned YES unset administratively down down
Ethernet0/3 unassigned YES unset administratively down down
Serial1/0 12.1.1.2 YES manual up up
Serial1/1 unassigned YES unset administratively down down
Serial1/2 unassigned YES unset administratively down down
Serial1/3 unassigned YES unset administratively down down
实验24：配置CHAP双向认证
实验目的
- 理解CHAP认证的原理
- 掌握CHAP认证的配置
实验拓扑
实验需求
- 根据实验拓扑图，完成设备的基本配置；
- 在R1和R2之间做CHAP的双向认证。
实验步骤
步骤1：设备的基本配置
配置R1：
Router>enable
Router#configure terminal
Router(config)#hostname R1
R1(config)#no ip domain-lookup
R1(config)#line console 0
R1(config-line)#exec-timeout 0 0
R1(config-line)#logging synchronous
R1(config-line)#exit
R1(config)#interface serial1/0
R1(config-if)#ip address 12.1.1.1 255.255.255.0
R1(config-if)#no shutdown
R1(config-if)#end
R1#
配置R2：
Router>enable
Router#configure terminal
Router(config)#hostname R2
R2(config)#no ip domain-lookup
R2(config)#line console 0
R2(config-line)#exec-timeout 0 0
R2(config-line)#logging synchronous
R2(config-line)#exit
R2(config)#interface serial1/0
R2(config-if)#ip address 12.1.1.2 255.255.255.0
R2(config-if)#no shutdown
R2(config-if)#end
R2#
步骤2：配置CHAP认证
配置R1：
R1(config)#interface serial 1/0
R1(config-if)#encapsulation ppp //封装PPP
R1(config-if)#ppp authentication chap //启用CHAP认证
R1(config-if)#exit
R1(config)#username R2 password xmws //创建用户名和密码
R1(config)#end
R1#
配置R2：
R2(config)#interface serial 1/0
R2(config-if)#encapsulation ppp //封装PPP
R2(config-if)#ppp authentication chap //启用CHAP认证
R2(config-if)#exit
R2(config)#username R1 password xmws //创建用户名和密码
R2(config-if)#end
R2#
步骤3：检查CHAP认证
检查R1：
R1#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 unassigned YES unset administratively down down
Ethernet0/1 unassigned YES unset administratively down down
Ethernet0/2 unassigned YES unset administratively down down
Ethernet0/3 unassigned YES unset administratively down down
Serial1/0 12.1.1.1 YES manual up up
Serial1/1 unassigned YES unset administratively down down
Serial1/2 unassigned YES unset administratively down down
Serial1/3 unassigned YES unset administratively down down
检查R2：
R2#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 unassigned YES unset administratively down down
Ethernet0/1 unassigned YES unset administratively down down
Ethernet0/2 unassigned YES unset administratively down down
Ethernet0/3 unassigned YES unset administratively down down
Serial1/0 12.1.1.2 YES manual up up
Serial1/1 unassigned YES unset administratively down down
Serial1/2 unassigned YES unset administratively down down
Serial1/3 unassigned YES unset administratively down down
实验25：配置PPPoE
实验目的
- 理解PPPoE的原理
- 掌握PPPoE的配置
实验拓扑
实验需求
- 根据实验拓扑图，完成设备的基本配置；
- R1是PPPoE服务器，R2是PPPoE客户端，R2去R1认证并获得IP地址。
实验步骤
步骤1：设备的基本配置
配置PC1：
VPCS> set pcname PC1 //设置主机名
PC1> ip 192.168.1.1/24 192.168.1.254 //设置IP地址与默认网关
配置PC2：
VPCS> set pcname PC2 //设置主机名
PC2> ip 192.168.2.1/24 192.168.2.254 //设置IP地址与默认网关
配置R1：
Router>enable
Router#configure terminal
Router(config)#hostname R1
R1(config)#no ip domain-lookup
R1(config)#line console 0
R1(config-line)#exec-timeout 0 0
R1(config-line)#logging synchronous
R1(config-line)#end
R1#
配置R2：
Router>enable
Router#configure terminal
Router(config)#hostname R2
R2(config)#no ip domain-lookup
R2(config)#line console 0
R2(config-line)#exec-timeout 0 0
R2(config-line)#logging synchronous
R2(config-line)#exit
R2(config)#interface Eth0/1
R2(config-if)#ip address 192.168.1.254 255.255.255.0
R2(config-if)#no shutdown
R2(config-if)#exit
R2(config)#interface Eth0/2
R2(config-if)#ip address 192.168.2.254 255.255.255.0
R2(config-if)#no shutdown
R2(config-if)#end
R2#
步骤2：配置PPPoE
配置R1：
R1(config)#username xmws password wisdom
R1(config)#bba-group pppoe ToR2
R1(config-bba-group)#virtual-template 1
R1(config-bba-group)#exit
R1(config)#interface ethernet0/0
R1(config-if)#pppoe enable group ToR2
R1(config-if)#no shutdown
R1(config-if)#exit
R1(config)#interface virtual-template 1
R1(config-if)#ip address 12.1.1.1 255.255.255.252
R1(config-if)#ip mtu 1492
R1(config-if)#peer default ip address pool PoR2
R1(config-if)#ppp authentication chap
R1(config-if)#exit
R1(config)#ip local pool PoR2 12.1.1.2
R1(config)#end
R1#
配置R2：
R2(config)#interface ethernet0/0
R2(config-if)#pppoe enable
R2(config-if)#pppoe-client dial-pool-number 1
R2(config-if)#no shutdown
R2(config-if)#exit
R2(config)#interface dialer 1
R2(config-if)#ip mtu 1492
R2(config-if)#dialer pool 1
R2(config-if)#ip address negotiated
R2(config-if)#encapsulation ppp
R2(config-if)#ppp ipcp route default
R2(config-if)#ppp chap hostname xmws
R2(config-if)#ppp chap password wisdom
R2(config-if)#end
R2#
步骤3：检查PPPoE
检查R2：
R2#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 unassigned YES unset up up
Ethernet0/1 192.168.1.254 YES manual up up
Ethernet0/2 192.168.2.254 YES manual up up
Ethernet0/3 unassigned YES unset administratively down down
Serial1/0 unassigned YES unset administratively down down
Serial1/1 unassigned YES unset administratively down down
Serial1/2 unassigned YES unset administratively down down
Serial1/3 unassigned YES unset administratively down down
Dialer1 12.1.1.2 YES IPCP up up
Virtual-Access1 unassigned YES unset up up
Virtual-Access2 unassigned YES unset up up
R2#show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
a - application route
+ - replicated route, % - next hop override, p - overrides from PfR
Gateway of last resort is 12.1.1.1 to network 0.0.0.0
S* 0.0.0.0/0 [1/0] via 12.1.1.1
12.0.0.0/32 is subnetted, 2 subnets
C 12.1.1.1 is directly connected, Dialer1
C 12.1.1.2 is directly connected, Dialer1
192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.1.0/24 is directly connected, Ethernet0/1
L 192.168.1.254/32 is directly connected, Ethernet0/1
192.168.2.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.2.0/24 is directly connected, Ethernet0/2
L 192.168.2.254/32 is directly connected, Ethernet0/2
R2#show interfaces dialer 1
Dialer1 is up, line protocol is up (spoofing)
Hardware is Unknown
Internet address is 12.1.1.2/32
MTU 1492 bytes, BW 56 Kbit/sec, DLY 20000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation PPP, LCP Closed, loopback not set
Keepalive set (10 sec)
DTR is pulsed for 1 seconds on reset
Interface is bound to Vi2
Last input never, output never, output hang never
Last clearing of "show interface" counters 00:20:57
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
6 packets input, 84 bytes
250 packets output, 3500 bytes
Bound to:
Virtual-Access2 is up, line protocol is up
Hardware is Virtual Access interface
MTU 1492 bytes, BW 56 Kbit/sec, DLY 20000 usec,
reliability 255/255, txload 1/255, rxload 1/255
--More--
实验26：配置IPv6地址与路由
实验目的
- 掌握IPv6地址的配置方法
- 掌握IPv6静态路由的配置方法
- 掌握IPv6默认路由的配置方法
实验拓扑
实验需求
- 根据实验拓扑图，完成设备的基本配置；
- 在R2上配置IPv6静态路由，使得R2能够访问R1的Loopback0；
- 在R1上配置IPv6默认路由，使得R1能够访问R2的Loopback0。
实验步骤
步骤1：设备的基本配置
配置R1：
Router>enable
Router#configure terminal
Router(config)#hostname R1
R1(config)#no ip domain-lookup
R1(config)#line console 0
R1(config-line)#exec-timeout 0 0
R1(config-line)#logging synchronous
R1(config-line)#exit
R1(config)#interface loopback 0
R1(config-if)#ipv6 address 2001:9267:1:1::1/64
R1(config-if)#exit
R1(config)#interface ethernet0/0
R1(config-if)#ipv6 address 2001:9267:12::1/64
R1(config-if)#no shutdown
R1(config-if)#end
R1#
配置R2：
Router>enable
Router#configure terminal
Router(config)#hostname R2
R2(config)#no ip domain-lookup
R2(config)#line console 0
R2(config-line)#exec-timeout 0 0
R2(config-line)#logging synchronous
R2(config-line)#exit
R2(config)#interface loopback 0
R2(config-if)#ipv6 address 2001:9267:2:2::2/64
R2(config-if)#exit
R2(config)#interface ethernet0/0
R2(config-if)#ipv6 address 2001:9267:12::2/64
R2(config-if)#no shutdown
R2(config-if)#end
R2#
步骤2：配置IPv6静态路由
配置R1：
R1(config)#ipv6 route ::/0 2001:9267:12::2
R1(config)#end
R1#
配置R2：
R2(config)#ipv6 route 2001:9267:1:1::/64 2001:9267:12::1
R2(config)#end
R2#
步骤3：检查IPv6静态路由
检查R1：
R1#show ipv6 route
IPv6 Routing Table - default - 6 entries
Codes: C - Connected, L - Local, S - Static, U - Per-user Static route
B - BGP, HA - Home Agent, MR - Mobile Router, R - RIP
H - NHRP, I1 - ISIS L1, I2 - ISIS L2, IA - ISIS interarea
IS - ISIS summary, D - EIGRP, EX - EIGRP external, NM - NEMO
ND - ND Default, NDp - ND Prefix, DCE - Destination, NDr - Redirect
RL - RPL, O - OSPF Intra, OI - OSPF Inter, OE1 - OSPF ext 1
OE2 - OSPF ext 2, ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2
la - LISP alt, lr - LISP site-registrations, ld - LISP dyn-eid
lA - LISP away, a - Application
S ::/0 [1/0]
via 2001:9267:12::2
C 2001:9267:1:1::/64 [0/0]
via Loopback0, directly connected
L 2001:9267:1:1::1/128 [0/0]
via Loopback0, receive
C 2001:9267:12::/64 [0/0]
via Ethernet0/0, directly connected
L 2001:9267:12::1/128 [0/0]
via Ethernet0/0, receive
L FF00::/8 [0/0]
via Null0, receive
检查R2：
R2#show ipv6 route
IPv6 Routing Table - default - 6 entries
Codes: C - Connected, L - Local, S - Static, U - Per-user Static route
B - BGP, HA - Home Agent, MR - Mobile Router, R - RIP
H - NHRP, I1 - ISIS L1, I2 - ISIS L2, IA - ISIS interarea
IS - ISIS summary, D - EIGRP, EX - EIGRP external, NM - NEMO
ND - ND Default, NDp - ND Prefix, DCE - Destination, NDr - Redirect
RL - RPL, O - OSPF Intra, OI - OSPF Inter, OE1 - OSPF ext 1
OE2 - OSPF ext 2, ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2
la - LISP alt, lr - LISP site-registrations, ld - LISP dyn-eid
lA - LISP away, a - Application
S 2001:9267:1:1::/64 [1/0]
via 2001:9267:12::1
C 2001:9267:2:2::/64 [0/0]
via Loopback0, directly connected
L 2001:9267:2:2::2/128 [0/0]
via Loopback0, receive
C 2001:9267:12::/64 [0/0]
via Ethernet0/0, directly connected
L 2001:9267:12::2/128 [0/0]
via Ethernet0/0, receive
L FF00::/8 [0/0]
via Null0, receive
步骤3：测试IPv6网络的连通性
测试R1：
R1#ping 2001:9267:2:2::2 source loopback 0
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2001:9267:2:2::2, timeout is 2 seconds:
Packet sent with a source address of 2001:9267:1:1::1
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms
联系我们
