HCIA综合实验

一、实验要求

1、IP地址划分以及设备连接


2、配置路由
isp]interface g0/0/0
[isp-GigabitEthernet0/0/0]ip ad 12.1.1.2 24
Dec 30 2020 23:13:07-08:00 isp %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP
on the interface GigabitEthernet0/0/0 has entered the UP state.
[isp-GigabitEthernet0/0/0]int g0/0/1
[isp-GigabitEthernet0/0/1]ip ad 1.1.1.1 24
Dec 30 2020 23:13:20-08:00 isp %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP
on the interface GigabitEthernet0/0/1 has entered the UP state.

3、VLAN
[sw1]vlan batch 2 to 3
[sw1]port-group group-member Ethernet 0/0/3 to Ethernet 0/0/4
[sw1-port-group]port link-type access
[sw1-Ethernet0/0/3]port link-type access
[sw1-Ethernet0/0/4]port link-type access
[sw1-Ethernet0/0/4]port default vlan 2

Trunk干道

划分子接口
[r1]interface GigabitEthernet 0/0/0.1
[r1-GigabitEthernet0/0/0.1]dot1q termination vid 2
[r1-GigabitEthernet0/0/0.1]ip address 192.168.1.65 27
[r1-GigabitEthernet0/0/0.1]arp broadcast enable
[r1-GigabitEthernet0/0/0.1]q

OSPF协议
[r1]ospf 1 router-id 1.1.1.1
[r1-ospf-1]area 0
[r1-ospf-1-area-0.0.0.0]network 192.168.1.0 0.0.0.255

DHCP协议自动分配IP地址
[r1]dhcp enable
[r1]ip pool a
[r1-ip-pool-a]network 192.168.1.64 mask 27
[r1-ip-pool-a]gateway-list 192.168.1.65
[r1-ip-pool-a]dns-list 114.114.114.114 8.8.8.8
[r1-ip-pool-a]int g0/0/0.1
[r1-GigabitEthernet0/0/0.1]dhcp select global

[r2]ip route-static 0.0.0.0 0 12.1.1.2
[r2]ospf 1
[r2-ospf-1]default-route-advertise always
ACL协议
[r1-acl-adv-3000]rule deny tcp source 192.168.1.93 0 destination 192.168.1.65 0
destination-port eq 23
[r1-acl-adv-3000]rule deny tcp source 192.168.1.93 0 destination 192.168.1.97 0
destination-port eq 23

远程登陆
[r1]aaa
[r1-aaa]local-user feng privilege level 15 password cipher 123456
[r1-aaa]local-user feng service-type telnet

NAT协议
[r2]acl 2000
[r2-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255
[r2-acl-basic-2000]int g0/0/2
[r2-GigabitEthernet0/0/2]nat outbound 2000

端口映射
[r2]int g0/0/2
[r2-GigabitEthernet0/0/2]nat static protocol tcp global current-interface 80 i
nside 192.168.1.98 80
Warning:The port 80 is well-known port. If you continue it may cause function fa
ilure.
Are you sure to continue?[Y/N]:y

远程登陆检测