网络安全技术与应用实训报告-帧中继网络设计.doc

网络安全技术与应用综合实训报告题 目： 帧中继网络设计专 业： 计算机网络学生姓名： 学 号： 指导教师： 时 间：2014年11月23日 目录1前言.32总体设计（拓扑图）.33网络设计. .33.1 ACL配置.33.2 Frame-relay 配置.43.3 GRE隧道配置.84 实验测试.115 实训总结.121 前言 帧中继（FrameRelay，FR）是现在广域网的主干网最流行的连网协议，是一个面向连接的第二层传输协议，帧中继是典型的包交换技术。帧中继技术以X.25分组交换技术为基础改造了原有的帧结构，继承了X.25提供的统计复用功能和采用虚电路交换的优点，简化了可靠传输和差错控制机制，把流量控制和差错控制任务委托给了本地机完成，减少了网络时延，降低了通信成本，从而获得了良好的性能。帧中继中的虚电路是帧中继包交换网络为实现不同DTE之间的数据传输所建立的逻辑链路，这种虚电路可以在帧中继交换网络内跨越任意多个DCE设备或帧中继交换机。2 总体设计3、网络设计3.1 ACL配置禁止Server0与内部通信：R6enableR6#configure terminalR6(config)#access-list 1 deny host 192.168.2.10R6(config)#interface fastEthernet 0/1R6(config-if)#ip access-group 1 in3.2Frame-relay 配置R3：Routeren Router#conf terEnter configuration commands, one per line. End with CNTL/Z.Router(config)#hostname R3 R3(config)#int fa0/0 R3(config-if)#ip address 172.18.1.30 255.255.255.0R3(config-if)#no shut %LINK-5-CHANGED: Interface FastEthernet0/0, changed state to up%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to upR3(config-if)#int serial 0/0/0R3(config-if)#encapsulation frame-relayR3(config-if)#no shut%LINK-5-CHANGED: Interface Serial0/0/0, changed state to upR3(config-if)#%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0/0, changed state to upR3(config-if)#interface serial0/0/0.1 point-to-point %LINK-5-CHANGED: Interface Serial0/0/0.1, changed state to up%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0/0.1, changed state to upR3(config-subif)#ip address 192.16.1.1 255.255.255.0 R3(config-subif)#description Link Router6 DLCI 603R3(config-subif)#frame-relay interface-dlci 306 R3(config-subif)#interface serial0/0/0.2 point-to-point%LINK-5-CHANGED: Interface Serial0/0/0.2, changed state to up%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0/0.2, changed state to upR3(config-subif)#ip address 192.16.3.2 255.255.255.0R3(config-subif)#description link to Router9 DLCI 903R3(config-subif)#frame-relay interface-dlci 309R3(config-subif)#end%SYS-5-CONFIG_I: Configured from console by consoleR3#conf terEnter configuration commands, one per line. End with CNTL/Z.R3(config)#router eigrp 100 R3(config-router)#network 172.18.1.0R3(config-router)#network 192.16.1.0R3(config-router)#network 192.168.3.0R3(config-router)#endR6：Routeren Router#conf terEnter configuration commands, one per line. End with CNTL/Z.Router(config)#hostname R6 R6(config)#int fa0/0 R6(config-if)#ip address 172.16.1.1 255.255.255.0R6(config-if)#no shutR6(config)#int s0/0/1 R6(config-if)#ip address 10.0.2.1 255.255.255.0R6(config-if)#no shut %LINK-5-CHANGED: Interface FastEthernet0/0, changed state to up%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to upR6(config-if)#int serial 0/0/0R6(config-if)#encapsulation frame-relayR6(config-if)#no shut%LINK-5-CHANGED: Interface Serial0/0/0, changed state to upR6(config-if)#%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0/0, changed state to upR6(config-if)#interface serial0/0/0.1 point-to-point %LINK-5-CHANGED: Interface Serial0/0/0.1, changed state to up%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0/0.1, changed state to upR6(config-subif)#ip address 192.16.1.2 255.255.255.0 R6(config-subif)#description Link Router6 DLCI 306R6(config-subif)#frame-relay interface-dlci 603 R6(config-subif)#interface serial0/0/0.2 point-to-point%LINK-5-CHANGED: Interface Serial0/0/0.2, changed state to up%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0/0.2, changed state to upR6(config-subif)#ip address 192.16.2.1 255.255.255.0R6(config-subif)#description link to Router9 DLCI 906R6(config-subif)#frame-relay interface-dlci 609R6(config-subif)#end%SYS-5-CONFIG_I: Configured from console by consoleR6#conf terEnter configuration commands, one per line. End with CNTL/Z.R6(config)#router eigrp 100 R6(config-router)#network 172.16.1.0R6(config-router)#network 192.16.1.0R6(config-router)#network 10.0.2.0R6(config-router)#network 192.168.2.0R6(config-router)#endR9：Routeren Router#conf terEnter configuration commands, one per line. End with CNTL/Z.Router(config)#hostname R9 R9(config)#int fa0/0 R9(config-if)#ip address 172.17.1.1 255.255.255.0R9(config-if)#no shutR9(config)#int fa0/1 R9(config-if)#ip address 192.168.1.1 255.255.255.0R9(config-if)#no shut %LINK-5-CHANGED: Interface FastEthernet0/0, changed state to up%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to upR9(config-if)#int serial 0/0/0R9(config-if)#encapsulation frame-relayR9(config-if)#no shut%LINK-5-CHANGED: Interface Serial0/0/0, changed state to upR9(config-if)#%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0/0, changed state to upR9(config-if)#interface serial0/0/0.1 point-to-point %LINK-5-CHANGED: Interface Serial0/0/0.1, changed state to up%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0/0.1, changed state to upR9(config-subif)#ip address 192.16.2.2 255.255.255.0 R9(config-subif)#description Link Router6 DLCI 609R9(config-subif)#frame-relay interface-dlci 906 R9(config-subif)#interface serial0/0/0.2 point-to-point%LINK-5-CHANGED: Interface Serial0/0/0.2, changed state to up%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0/0.2, changed state to upR9(config-subif)#ip address 192.16.3.1 255.255.255.0R9(config-subif)#description link to Router9 DLCI 309R9(config-subif)#frame-relay interface-dlci 903R9(config-subif)#end%SYS-5-CONFIG_I: Configured from console by consoleR9#conf terEnter configuration commands, one per line. End with CNTL/Z.R9(config)#router eigrp 100 R9(config-router)#network 172.17.1.0R9(config-router)#network 192.16.2.0R9(config-router)#network 192.16.3.0R9(config-router)#network 192.168.1.0R9(config-router)#end帧中继配置：3.3 GRE隧道配置1、配置各台路由器的IP地址，并且使用Ping命令确认各路由器的直连口的互通。2、 在R9和R4上配置静态路由。确保Internet网络骨干可以相互通信。3、Router6(config)#ip route 0.0.0.0 0.0.0.0 192.168.50.2Router8(config)#ip route 0.0.0.0 0.0.0.0 192.168.60.1在Router9与Router4上配置静态默认路由，不仅仅是用于模拟接入路由器。同时还为了确保在创建隧道时，隧道源与隧道目标的IP地址相互可见。以便于实现隧道。3、在Route9路由器上配置GRE隧道。Router(config)#interface tunnel 0启用GRE隧道。Router(config-if)#ip address 10.1.1.1 255.255.255.0为隧道指定IP地址。Router(config-if)#tunnel source serial 1/1配置隧道的本地源端口。Router1(config-if)#tunnel destination 配置隧道的目标出口。目的端口的IP地址可达性，是通过本地配置的默认路由保证的。192.168.60.2Router(config-if)#exitRouter(config)#4、在Router4路由器上配置GRE隧道。Router(config)#interface tunnel 0Router(config-if)#ip address 10.1.1.2 255.255.255.0Router(config-if)#tunnel source serial 1/0Router(config-if)#tunnel destination 192.168.50.1Router(config-if)#exitRouter(config)#exit5、在Router9上查看隧道接口信息。6、查看Router9的路由表。7、 在Router9上PING路由器Router4的隧道接口。8、 在Router9和Router4分