网络安全笔记.doc

第一节 察看当前正确的配置信息 show running-config 查看交换机线路 Show ip interface brief 查看路由表 Show ip route 显示vlan信息 show vlanno switchport 不是交换端口switchport 二层交换端口 no switchport 三层交换端口删除vlan ： no interface vlan _删除vlan ip：no vlan_?帮助 1. 用户模式 下 输入enable 14 进入特权模式 密码stu 不显示2. # 特权模式 3. configure terminal 全局配置exit 回到上一级命令特权模式下输入 show ？ (显示借口名称)4. 接口模式 #$ show interfacs 进入接口模式 show interface 接口名称 0/0 .(FastEthernet)0/1）第二节 使用二层交换机完成相同vlan的通信RG-S2026G-1PC1PC2PC3PC40/10/20/4Vlan10Vlan10Vlan20Vlan200/1192.168.3.1 在二层交换机RG-S2026G-1 telnet下输入以下命令1.端口类型 access trunk (802.1q) access只能属于一个vlan trunk可以使用多个vlan2.全局配置 configure terminal 输入vlan 10 数字（1-4094） name stu exit 输入vlan 20 数字（1-4094） name stud exit3.将物理端口进入vlan 全局配置下输入 interface fastethernet 模块号/端口号 0/1 switchport mode access switchport access vlan 10 exit interface fastethernet 模块号/端口号 0/2 switchport mode access switchport access vlan 10 exit interface fastethernet 模块号/端口号 0/3 switchport mode access switchport access vlan 20 exit interface fastethernet 模块号/端口号 0/4 switchport mode access switchport access vlan 20 exit 针对两个端口进行操作 interface range fastethernet 0/1-2,0/3-4 (连续用-不连续用, 但是不连续必须加上模块号) 然后机柜连线：六根网线最后测试 ping第三节实验1：Ip:设置为:192.168.1.1-6 跨交换机加相同vlan的通信RG-S2026G-1PC1PC2PC30/10/20/3RG-S2026G-2PC4PC5PC60/10/20/3Vlan10Vlan10Vlan20Vlan20Vlan20Vlan100/40/4第一个交换机下输入(RG-S2026G-1)全局配置下： configure terminal 输入vlan 10 数字（1-4094） name stu exit 输入vlan 20 数字（1-4094） name stud exit将物理端口进入vlan 全局配置下输入 interface fastethernet 模块号/端口号 0/1 switchport mode access switchport access vlan 10 exit interface fastethernet 模块号/端口号 0/2 switchport mode access switchport access vlan 10 exit interface fastethernet 模块号/端口号 0/3 switchport mode access switchport access vlan 20 exit interface fastethernet 0/4 switchport mode trunk（no switchport mode 删除） exit第二个交换机下输入(RG-S2026G-2) 全局配置： configure terminal 输入vlan 10 数字（1-4094） name stu exit 输入vlan 20 数字（1-4094） name stud exit将物理端口进入vlan 全局配置下输入 interface fastethernet 模块号/端口号 0/1 switchport mode access switchport access vlan 20 （ no switchport access vlan 删除原有的vlan） exit interface fastethernet 模块号/端口号 0/2 switchport mode access switchport access vlan 20 exit interface fastethernet 模块号/端口号 0/3 switchport mode access switchport access vlan 10 exit interface fastethernet 0/4 switchport mode trunk exit然后机柜连线：七根网线最后测试 ping 实验2： 借助一个三层交换机连通两个二层交换机RG-S2026G-1PC1PC2PC30/10/20/3RG-S2026G-2PC4PC5PC60/10/20/3RG-S3750G-10/10/20/40/4Vlan10Vlan10Vlan20Vlan20Vlan20Vlan10第一个交换机下 (RG-S2026G-1)输入全局配置下： configure terminal 输入vlan 10 数字（1-4094） name stu exit 输入vlan 20 数字（1-4094） name stud exit将物理端口进入vlan 全局配置下输入 interface fastethernet 模块号/端口号 0/1 switchport mode access switchport access vlan 10 exit interface fastethernet 模块号/端口号 0/2 switchport mode access switchport access vlan 10 exit interface fastethernet 模块号/端口号 0/3 switchport mode access switchport access vlan 20 exit interface fastethernet 0/4 switchport mode trunk（no switchport mode 删除） exit第二个交换机下 (RG-S2026G-2)输入 全局配置： configure terminal 输入vlan 10 数字（1-4094） name stu exit 输入vlan 20 数字（1-4094） name stud exit将物理端口进入vlan 全局配置下输入 interface fastethernet 模块号/端口号 0/1 switchport mode access switchport access vlan 20 （ no switchport access vlan 删除原有的vlan） exit interface fastethernet 模块号/端口号 0/2 switchport mode access switchport access vlan 20 exit interface fastethernet 模块号/端口号 0/3 switchport mode access switchport access vlan 10 exit interface fastethernet 0/4 switchport mode trunk exit第三个交换机(RG-S3750G-1)下输入全局配置：Enable 14Password:stu Configure terminal 全局配置下输入： vlan 10 数字（1-4094） name stu exit vlan 20 数字（1-4094） name stud exit interface range fastethernet 0/1-2 swicthport mode trunk 后期用到: switchport trunk allowed vlan 例： switchport trunk allowed vlan remove 1-9,15-4094 规划管理vlan需求是什么端口ID：switchport trunk native vlan （id）第四节 管理交换网络中的冗余链路RG-S2026G-1PC1PC20/10/2RG-S2026G-2PC3PC40/10/2Vlan10Vlan20Vlan20Vlan100/40/40/30/3Spanning-treeSpanning-tree mode stp/rstp修改交换机优先级： Spanning-tree priority 优先级 修改端口优先级 Spanning-tree port-priority 优先级 BPDU（root id ; port id ; cost of path ）二层交换机下RG-S2026G-1输入 全局配置: Enable 14Password: stuConfigure terminal 全局配置下输入Vlan 10Name stExitVlan 20Name sttExitinterface fastethernet 模块号/端口号 0/1 switchport mode access switchport access vlan 10 exit interface fastethernet 模块号/端口号 0/2 switchport mode access switchport access vlan 20 exit interface fastethernet 0/3 switchport mode trunk exitinterface fastethernet 0/4 switchport mode trunk exit启用树： Spanning-treeSpanning-tree mode stp/rstpExit二层交换机下RG-S2026G-2输入 全局配置：Enable 14Password: stuConfigure terminal全局配置下输入Vlan 10Name stExitVlan 20Name sttExitinterface fastethernet 模块号/端口号 0/1 switchport mode access switchport access vlan 20 exit interface fastethernet 模块号/端口号 0/2 switchport mode access switchport access vlan 10 exit interface fastethernet 0/3 switchport mode trunk exitinterface fastethernet 0/4 switchport mode trunk exit启用树： Spanning-treeSpanning-tree mode stp/rstpExit第五节 交换机聚合端口的建立RG-S2026G-1PC1PC20/10/2RG-S2026G-2PC3PC40/10/2Vlan10Vlan20Vlan20Vlan100/40/40/30/31. 创建 Interface aggregateport 1Switchport mode trunkExit2. 将物理端口加入到聚合端口 Interface range fastethernet 0/3-4Port-group 1Exit二层交换机下RG-S2026G-1输入 全局配置: Enable 14Password: stuConfigure terminal 全局配置下输入Vlan 10Name stExitVlan 20Name sttExitinterface fastethernet 模块号/端口号 0/1 switchport mode access switchport access vlan 10 exit interface fastethernet 模块号/端口号 0/2 switchport mode access switchport access vlan 20 exit interface fastethernet 0/3 switchport mode trunk exitinterface fastethernet 0/4 switchport mode trunk exit Interface aggregate port 1 （1-8）Switchport mode trunkExitInterface range fastethernet 0/3-4Port-group 1 （1-8）Exit二层交换机下RG-S2026G-2输入 全局配置：Enable 14Password: stuConfigure terminal全局配置下输入Vlan 10Name stExitVlan 20Name sttExitinterface fastethernet 模块号/端口号 0/1 switchport mode access switchport access vlan 20 exit interface fastethernet 模块号/端口号 0/2 switchport mode access switchport access vlan 10 exit interface fastethernet 0/3 switchport mode trunk exitinterface fastethernet 0/4 switchport mode trunk exit Interface aggregateport 1 （1-8）Switchport mode trunkExitInterface range fastethernet 0/3-4Port-group 1 （1-8）Exit第六节192.168.2.1/30 路由器192.168.2.2/300/0PC1R10/00/1R2PC20/1192.168.1.254192.168.3.254192.168.3.1192.168.1.1查看路由表： Show ip routeIp route 目标网络 子网掩码 （端口/下一个IP地址；permanent /distance）路由器下RG-RSR20G-1输入全局配置: Enable 14Password: stuConfigure terminalInterface fastethernet 0/0Ip address 192.168.1.254 255.255.255.0No shutdownexitinterface fastethernet 0/1ip address 192.168.2.1 255.255.255.252No shutdownExit Ip route 192.168.3.0 255.255.255.0 0/0路由器下RG-RSR20G-2输入全局配置: Enable 14Password: stuConfigure terminalInterface fastethernet 0/1ip address 192.168.3.254 255.255.255.0No shutdownexitinterface fastethernet 0/0ip address 192.168.2.2 255.255.255.252No shutdownExitIp route 192.168.1.0 255.255.255.0 0/1动态路由 RIP0/1192.168.3.1PC20/00/1R20/0PC1R1192.168.1.254192.168.3.254192.168.2.1/30192.168.2.2/300/1删除IP地址： no ip route (ip地址 子网掩码)路由器下RG-RSR20G-1输入全局配置: Enable 14Password: stuConfigure terminalInterface fastethernet 0/0Ip address 192.168.1.254 255.255.255.0No shutdownexitinterface fastethernet 0/1ip address 192.168.2.1 255.255.255.252No shutdownExitRouter ospf 1234Network 本机直连IP地址段（192.68.1.254 自动分配） area 0、Version 1或2 (版本)路由器下RG-RSR20G-2输入全局配置: Enable 14Password: stuConfigure terminalInterface fastethernet 0/1ip address 192.168.3.254 255.255.255.0No shutdownexitinterface fastethernet 0/0ip address 192.168.2.2 255.255.255.252No shutdownExitRoute RIPNetwork 本机直连IP地址段（192.68.1.254 自动分配） area 0、Version 1或2 (版本)第八节 Vlan间通信（三层交换机）Show ip route RG-S3750G-1PC10/4RG-S2026G-1PC2PC30/1Vlan10Vlan20Vlan300/40/20/3默认网关；192.168.1.1192.168.2.1192.168.3.1Vlan10：192.168.1.254Vlan20：192.168.2.254Vlan30：192.168.3.254三层交换机： Interface vlan10 Ip address 192.168.1.254 255.255.255.0No shutdown exit; Interface vlan 30二层交换机：RG-S2026G-1Enable 14Password: stuConfigure terminalVlan 10Name stExitVlan 20Name sttExitVlan 30Name stExitinterface fastethernet 模块号/端口号 0/1 switchport mode access switchport access vlan 10 exit interface fastethernet 模块号/端口号 0/2 switchport mode access switchport access vlan 20 exitinterface fastethernet 模块号/端口号 0/3 switchport mode access switchport access vlan 30 exitinterface fastethernet 0/4 switchport mode trunk exitSpanning-treeSpanning-tree mode stp/rstpExit三层交换机：RG-S3750G-1Enable 14Password: stuConfigure terminalVlan 10Name stExitVlan 20Name sttExitVlan 30Name stExit Interface vlan 10 Ip address 192.168.1.254 255.255.255.0No shutdown exit Interface vlan 20 Ip address 192.168.2.254 255.255.255.0No shutdown exitInterface vlan 30 Ip address 192.168.3.254 255.255.255.0No shutdown Exitinterface fastethernet 0/4 switchport mode trunk exitSpanning-treeSpanning-tree mode stp/rstpExit实验二：0/1 RG-S3750G-1PC10/4RG-S2026G-1PC20/1Vlan10Vlan20Vlan1000/40/2默认网关；192.168.1.1192.168.2.10/0192.168.5.1PC3192.168.4.2192.168.4.1192.168.5.254R10/1 Vlan10：192.168.1.254/24Vlan20：192.168.2.254/24Vlan100: 192.168.4.1二层交换机：RG-S2026G-1Enable 14Password: stuConfigure terminalVlan 10Name stExitVlan 20Name sttExitinterface fastethernet 模块号/端口号 0/1 switchport mode access switchport access vlan 10 exit interface fastethernet 模块号/端口号 0/2 switchport mode access switchport access vlan 20 exitinterface fastethernet 0/4 switchport mode trunk exitSpanning-treeSpanning-tree mode stp/rstpIp default-gateway 192.168.4.2三层交换机：RG-S3750G-1Enable 14Password: stuConfigure terminalVlan 10Name stExitVlan 20Name sttExit Interface vlan 10 Ip address 192.168.1.254 255.255.255.0No shutdown exit Interface vlan 20 Ip address 192.168.2.254 255.255.255.0No shutdown Exitinterface fastethernet 0/4 switchport mode trunk exitSpanning-treeSpanning-tree mode stp/rstpExitVlan 100Name ssExitInterface vlan 100Ip address 192.168.1.254 255.255.255.0No shutdownexitinterface fastethernet 0/1switchport mode accessswitchport access vlan 100路由器下RG-RSR20G-1输入全局配置: Enable 14Password: stuConfigure terminalInterface fastethernet 0/0ip address 192.168.4.1 255.255.255.0No shutdownexitInterface fastethernet 0/1ip address 192.168.5.254 255.255.255.0No shutdown第九节三层交换机聚合端口Port to portInterface fastethernet 0/4No switchportIp address _ip地址_RG-S3750G-1PC10/1RG-S2026G-1PC3Vlan10Vlan200/40/0F0/4:172.32.0.6/30F0/4:172.31.0.2/30172.31.0.1/30172.32.0.5/30R10/40/1RG-S3750G-2RG-S2026G-20/40/40/1PC4PC2Vlan40Vlan300/10/20/10/2Vlan100Vlan100Vlan10:192.168.1.254/24Vlan20:192.168.2.254/24Vlan30:192.168.3.254/24Vlan40:192.168.4.254/24二层交换机：RG-S2026G-1Enable 14Password: stuConfigure terminalVlan 10Name stExitVlan 20Name sttExitinterface fastethernet 模块号/端口号 0/1 switchport mode access switchport access vlan 10 exit interface fastethernet 模块号/端口号 0/2 switchport mode access switchport access vlan 20 exit二层交换机：RG-S2026G-2Enable 14Password: stuConfigure terminalVlan 30Name stExitVlan 40Name sttExitinterface fastethernet 模块号/端口号 0/1 switchport mode acce