路由交换课程设计实现方案(共11页).doc
精选优质文档-倾情为你奉上路由交换技术与远程访问技术课程设计 姓名：侯堂杰 学号： 班级：09级网络工程4班 指导老师：李相海一、需求分析 组建和管理一个完整的中小企业网络，完成以下网络需求，详图见实施方案：（1）路由器的基本配置，对路由器设置使能密码，加密使能密码，虚拟终端线密码，并且能够telnet登录；（2）使用标准访问控制列表ACL，进行控制，让左边的主机可以访问外网，右边的不能访问。（3）使用静态路由，为路由器增加静态路由命令，让路由器之间可以互相访问。（4）对路由器配置RIP协议或者OSPF协议，在路由器上面运行rip协议或者ospf协议。（5）对交换机进行配置（基本配置和路由器一样），划分VLAN，四个站点中选两个作为vlan1，另外两个是lan2。（6）远程访问技术的NAT技术（PAT），通过地址转换，节省IP地址，对内网和外网的IP进行转换。（7）使用的ping 命令和诊断命令show 和debug验证配置效果。二、网络拓扑图三、设备的属性值基本规划1.Router 0 (cisco 1841)IP端口描述200.10.0.2/24s0/1/0Internet端口2.Router 1( cisco 1841)IP端口描述200.10.0.1/24s0/1/0外网接口192.168.0.1/24F0/0内网接口3. Multilayer Switch0( cisco 3560)IP端口描述192.168.0.2/24F0/1Vlan2192.168.1.1/24F0/2Vlan3192.168.2.1/24F0/3Vlan44. pc IPPc0192.168.1.2/24Pc1192.168.1.3/24Pc2192.168.2.2/24Pc3192.168.2.3/24四、配置过程1.出口路由（Router1）- System Configuration Dialog -Continue with configuration dialog? yes/no: n Press RETURN to get started!Router >Router >en Router #config tRouter(config)#hostname ChukouChukou(config)#inter s0/1/0Chukou(config-if)#ip add 200.10.0.1 255.255.255.0 Chukou(config-if)#no shut Chukou(config-if)#inter f0/0Chukou(config-if)#ip add 192.168.0.1 255.255.255.0 Chukou(config-if)#no shut Chukou>Chukou>en Chukou#config tChukou(config)#router ospf 100Chukou(config-chukou)#network 192.168.0.0 0.0.0.255 area 0Chukou(config-chukou)#exit Chukou(config)#ip route 0.0.0.0 0.0.0.0 s0/1/0Chukou(config)#router ospf 100Chukou(config-chukou)#default-information originate Chukou(config-chukou)#exit Chukou(config)#inter f0/0Chukou(config-if)#ip nat inside Chukou(config-if)#inter s0/1/0Chukou(config-if)#ip nat outside Chukou(config-if)#exit Chukou(config)#access-list 1 permit 192.168.0.0 0.0.255.255 Chukou(config)#ip nat inside source list 1 interface s0/1/0 overload Chukou(config)#endChukou#debug ip natIP NAT debugging is onChukou#NAT: s=192.168.1.2->200.10.0.1, d=200.10.0.21NAT*: s=200.10.0.2, d=200.10.0.1->192.168.1.21NAT: s=192.168.1.2->200.10.0.1, d=200.10.0.22NAT*: s=200.10.0.2, d=200.10.0.1->192.168.1.22NAT: s=192.168.1.2->200.10.0.1, d=200.10.0.23NAT*: s=200.10.0.2, d=200.10.0.1->192.168.1.23NAT: s=192.168.1.2->200.10.0.1, d=200.10.0.24NAT*: s=200.10.0.2, d=200.10.0.1->192.168.1.24Chukou#no debug ip nat IP NAT debugging is offChukou#config tChukou(config)#enable password 123Chukou(config)#enable secret aaaChukou(config)#line vty 0 4 Chukou(config-line)#password 123Chukou(config-line)#login Chukou(config-line)#end Chukou#w Building configuration.OK2.核心交换机（Multilayer Switch0）Press RETURN to get started!Switch>en Switch#config tEnter configuration commands, one per line. End with CNTL/Z.Switch(config)#vlan 2Switch(config-vlan)#exit Switch(config)#vlan 3 Switch(config-vlan)#exit Switch(config)#vlan 4Switch(config-vlan)#exit Switch(config)#inter vlan 2Switch(config-if)#ip add 192.168.0.2 255.255.255.0Switch(config-if)#no shut Switch(config-if)#exit Switch(config)#inter vlan 3 Switch(config-if)#ip add 192.168.1.1 255.255.255.0Switch(config-if)#no shut Switch(config-if)#exit Switch(config)#inter vlan 4 Switch(config-if)#ip add 192.168.2.1 255.255.255.0 Switch(config-if)#no shut Switch(config-if)#exit Switch(config)#inter f0/1Switch(config-if)#switchport access vlan 2Switch(config-if)#inter f0/2Switch(config-if)#switchport access vlan 3Switch(config-if)#inter f0/3Switch(config-if)#switchport access vlan 4Switch(config-if)#end Switch#show vlan VLAN Name Status Ports- - - -1 default active Fa0/4, Fa0/5, Fa0/6, Fa0/7 Fa0/8, Fa0/9, Fa0/10, Fa0/11 Fa0/12, Fa0/13, Fa0/14, Fa0/15 Fa0/16, Fa0/17, Fa0/18, Fa0/19 Fa0/20, Fa0/21, Fa0/22, Fa0/23 Fa0/24, Gig0/1, Gig0/22 VLAN0002 active Fa0/13 VLAN0003 active Fa0/24 VLAN0004 active Fa0/31002 fddi-default active 1003 token-ring-default active 1004 fddinet-default active 1005 trnet-default active VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2- - - - - - - - - - -1 enet 1500 - - - - - 0 02 enet 1500 - - - - - 0 03 enet 1500 - - - - - 0 04 enet 1500 - - - - - 0 01002 enet 1500 - - - - - 0 01003 enet 1500 - - - - - 0 01004 enet 1500 - - - - - 0 01005 enet 1500 - - - - - 0 0Switch# config t Switch(config)#router ospf 100Switch(config-router)#network 192.168.0.0 0.0.0.255 area 0Switch(config-router)#network 192.168.1.0 0.0.0.255 area 0Switch(config-router)#network 192.168.2.0 0.0.0.255 area 0Switch(config-router)#end Switch#show ip rouSwitch#show ip route Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area * - candidate default, U - per-user static route, o - ODR P - periodic downloaded static routeGateway of last resort is 192.168.0.1 to network 0.0.0.0C 192.168.0.0/24 is directly connected, Vlan2C 192.168.1.0/24 is directly connected, Vlan3C 192.168.2.0/24 is directly connected, Vlan4O*E2 0.0.0.0/0 110/1 via 192.168.0.1, 00:00:15, Vlan2Switch#config t Switch(config)#access-list 1 permit 192.168.1.0 0.0.0.255Switch(config)#access-list 1 deny any Switch(config)#inter vlan 2 Switch(config-if)#ip access-group 1 out Switch(config-if)#exit Switch(config)#enable password 123Switch(config)#enable secret aaaSwitch(config)#line vty 0 4 Switch(config-line)#password 123Switch(config-line)#loginSwitch(config-line)#exit Switch(config)#exit Switch#exit Switch>Switch>en Password: Switch#config Configuring from terminal, memory, or network terminal? Switch(config)#Switch(config)#end Switch#w Building configuration.OK3.Internet路由器（Router 0）- System Configuration Dialog -Continue with configuration dialog? yes/no: n Router>Router>en Router#config tRouter(config)#inter s0/1/0Router(config-if)#ip add 200.10.0.2 255.255.255.0Router(config-if)#no shut Router(config-if)#clock rate 9600Router>en Router#config tRouter(config)#enable password 123Router(config)#enable secret aaaRouter(config)#line vty 0 4 Router(config-line)#password 123Router(config-line)#login Router(config-line)#end Router#w Building configuration.OK五验证结果1.验证ACLPC0 ：PC>ping 200.10.0.2Pinging 200.10.0.2 with 32 bytes of data:Reply from 200.10.0.2: bytes=32 time=406ms TTL=253Reply from 200.10.0.2: bytes=32 time=184ms TTL=253Reply from 200.10.0.2: bytes=32 time=203ms TTL=253Reply from 200.10.0.2: bytes=32 time=157ms TTL=253Ping statistics for 200.10.0.2: Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),Approximate round trip times in milli-seconds: Minimum = 157ms, Maximum = 406ms, Average = 237msPC>PC1：Packet Tracer PC Command Line 1.0PC>ping 200.10.0.2Pinging 200.10.0.2 with 32 bytes of data:Reply from 200.10.0.2: bytes=32 time=312ms TTL=253Reply from 200.10.0.2: bytes=32 time=250ms TTL=253Reply from 200.10.0.2: bytes=32 time=190ms TTL=253Reply from 200.10.0.2: bytes=32 time=187ms TTL=253Ping statistics for 200.10.0.2: Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),Approximate round trip times in milli-seconds: Minimum = 187ms, Maximum = 312ms, Average = 234msPC>PC2：Packet Tracer PC Command Line 1.0PC>ping 200.10.0.2Pinging 200.10.0.2 with 32 bytes of data:Request timed out.Request timed out.Request timed out.Request timed out.Ping statistics for 200.10.0.2: Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),PC>PC3：Packet Tracer PC Command Line 1.0PC>ping 200.10.0.2Pinging 200.10.0.2 with 32 bytes of data:Request timed out.Request timed out.Request timed out.Request timed out.Ping statistics for 200.10.0.2: Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),PC>2.验证vlan信息Switch#show vlan VLAN Name Status Ports- - - -1 default active Fa0/4, Fa0/5, Fa0/6, Fa0/7 Fa0/8, Fa0/9, Fa0/10, Fa0/11 Fa0/12, Fa0/13, Fa0/14, Fa0/15 Fa0/16, Fa0/17, Fa0/18, Fa0/19 Fa0/20, Fa0/21, Fa0/22, Fa0/23 Fa0/24, Gig0/1, Gig0/22 VLAN0002 active Fa0/13 VLAN0003 active Fa0/24 VLAN0004 active Fa0/31002 fddi-default active 1003 token-ring-default active 1004 fddinet-default active 1005 trnet-default active VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2- - - - - - - - - - -1 enet 1500 - - - - - 0 02 enet 1500 - - - - - 0 03 enet 1500 - - - - - 0 04 enet 1500 - - - - - 0 01002 enet 1500 - - - - - 0 01003 enet 1500 - - - - - 0 01004 enet 1500 - - - - - 0 01005 enet 1500 - - - - - 0 03.验证NATIP NAT debugging is onChukou#NAT: s=192.168.1.2->200.10.0.1, d=200.10.0.21NAT*: s=200.10.0.2, d=200.10.0.1->192.168.1.21NAT: s=192.168.1.2->200.10.0.1, d=200.10.0.22NAT*: s=200.10.0.2, d=200.10.0.1->192.168.1.22NAT: s=192.168.1.2->200.10.0.1, d=200.10.0.23NAT*: s=200.10.0.2, d=200.10.0.1->192.168.1.23NAT: s=192.168.1.2->200.10.0.1, d=200.10.0.24NAT*: s=200.10.0.2, d=200.10.0.1->192.168.1.24Chukou#no debug ip nat IP NAT debugging is off专心-专注-专业
