奥山ccna实验手册

1、奥山ccna试验手册目 录实验一、配置stp与vtp3实验二、静态路由11实验三、rip路由协议14实验四、ripv1与eigrp在不连续网络下的比较21实验五、访问列表与telnet访问控制27实验六、静态、动态nat与pat31实验七、帧中继链路上运行eigrp35实验八、背靠背帧中继40实验一、配置stp与vtp 环境：三台交换机，形成一个全互连结构，sw3为2950，sw1和sw2为2900xl；要求：设置sw3为vtp server,设置sw1和sw2为vtp client,域名为cisco，密码为：cisco，在server创建vlan 10(name:aa)和vlan20(nam

2、e:bb);设置sw3为vlan1的根桥，sw1为vlan10的根桥，sw2为vlan20的根桥； 初始化配置：sw#show vlan 查看vlan信息sw#delete vlan.dat 用此命令将vlan删除sw#show startup-config 查看一下nvram是否保存了配置sw#erase startup-config 清空配置文件sw#reload 重新启动交换机swenablesw#config terminalsw(config)#hostname sw1sw1(config)#no ip domain-lookup 关闭域名查找sw1(config)#line con

3、sole 0sw1(config-line)#logging synchronous 命令输入达到同步sw1(config-line)#exec-timeout 0 0 设置永不超时sw1(config-line)#exit步骤一、配置vtpsw3的配置：sw3(config)#vtp mode server 在sw3上启用vtp serverdevice mode already vtp server.sw3(config)#vtp domain cisco 设置域名changing vtp domain name from null to ciscosw3(config)#vtp pass

4、word cisco 设置密码setting device vlan database password to ciscosw1的配置:sw1#vlan database 进入vlan数据库sw1(vlan)#vtp client 启用vtp client模式setting device to vtp client mode.sw1(vlan)#vtp domain cisco 作用到cisco域中changing vtp domain name from null to ciscosw1(vlan)#vtp password cisco 设置密码与server端相同 setting devi

5、ce vlan database password to cisco.sw1(vlan)#exit 使配置生效in client state, no apply attempted.exiting.sw2的配置:sw2#vlan databasesw2(vlan)#vtp clientsetting device to vtp client mode.sw2(vlan)#vtp domain ciscochanging vtp domain name from null to ciscosw2(vlan)#vtp password ciscosetting device vlan databa

6、se password to cisco.sw2(vlan)#exitsw2#步骤二、启用干道端口sw3的配置：sw3(config)#interface fa0/23sw3(config-if)#switchport mode trunk 启用trunk端口sw3(config-if)#interface fa0/24sw3(config-if)#switchport mode trunk sw1的配置：sw1(config)#interface fa0/23sw1(config-if)#switchport trunk encapsulation dot1q 封装干道协议sw1(confi

7、g-if)#switchport mode trunk 启用trunk模式sw1(config-if)#sw1(config)#interface fa0/24sw1(config-if)#switchport trunk encapsulation dot1qsw1(config-if)#switchport mode trunksw2的配置：sw2(config)#interface fa0/23sw2(config-if)#switchport trunk encapsulation dot1qsw2(config-if)#switchport mode trunksw2(config)

8、#interface fa0/24sw2(config-if)#switchport trunk encapsulation dot1qsw2(config-if)#switchport mode trunk步骤三、测试vtp状态及创建vlansw3的状态：sw3#show vtp status 显示vtp状态vtp version : 2configuration revision : 0 配置修订号maximum vlans supported locally : 254number of existing vlans : 5 vtp operating mode : server vtp

9、模式vtp domain name : cisco vtp域名vtp pruning mode : disabledvtp v2 mode : disabledvtp traps generation : disabledmd5 digest : 0x3f 0x17 0xc8 0xb8 0x5a 0xe3 0x01 0x66 configuration last modified by 0.0.0.0 at 0-0-00 00:00:00创建vlan:sw3(config)#vlan 10 创建vlan10sw3(config-vlan)#name aa 命名为aasw3(config-vla

10、n)#exit 应用配置sw3(config)#vlan 20 创建vlan20sw3(config-vlan)#name bb 命名为bbsw3(config-vlan)#exitsw3(config)#sw3的状态：sw3#show vtp status 在sw3显示vtp的状态vtp version : 2configuration revision : 2 server的修订号maximum vlans supported locally : 254number of existing vlans : 7 vlan也已经增加vtp operating mode : servervtp

11、domain name : ciscovtp pruning mode : disabledvtp v2 mode : disabledvtp traps generation : disabledmd5 digest : 0x98 0x31 0xcf 0xa0 0xa7 0x17 0x73 0x66configuration last modified by 0.0.0.0 at 3-1-93 00:52:05sw2的状态：sw2#show vtp statusvtp version : 2configuration revision : 2 已经同步了servermaximum vlans

12、 supported locally : 254number of existing vlans : 7vtp operating mode : clientvtp domain name : ciscovtp pruning mode : disabledvtp v2 mode : disabledvtp traps generation : disabledmd5 digest : 0x98 0x31 0xcf 0xa0 0xa7 0x17 0x73 0x66configuration last modified by 0.0.0.0 at 3-1-93 00:52:05sw1的vlan信

13、息:sw1#show vlan 显示vlan信息vlan name status ports- - - -1 default active fa0/1, fa0/2, fa0/3, fa0/4, fa0/5, fa0/6, fa0/7, fa0/8, fa0/9, fa0/10, fa0/11, fa0/12, fa0/13, fa0/14, fa0/15, fa0/16, fa0/17, fa0/18, fa0/19, fa0/20, fa0/21, fa0/22, fa0/23, fa0/2410 aa active 已经同步了vlan的信息20 bb active步骤四、配置pvstsw

14、3(config)#spanning-tree vlan 1 root primary 设置为vlan1的根桥sw1(config)#spanning-tree vlan 10 priority 4096 设置为vlan10的根桥sw2(config)#spanning-tree vlan 20 priority 4096 设置为vlan20的根桥步骤五、显示stp的信息sw1的生成树信息:sw1#show spanning-tree brief 显示每vlan生成树信息vlan1 spanning tree enabled protocol ieee root id priority 245

15、77 address 0007.eb06.1740 非vlan1的根桥 hello time 2 sec max age 20 sec forward delay 15 sec bridge id priority 32768 address 0030.803d.f640 hello time 2 sec max age 20 sec forward delay 15 secvlan10 spanning tree enabled protocol ieee root id priority 4096 address 0030.803d.f641 为vlan10的根桥 this bridge

16、is the root hello time 2 sec max age 20 sec forward delay 15 sec bridge id priority 4096 address 0030.803d.f641 hello time 2 sec max age 20 sec forward delay 15 secvlan20 spanning tree enabled protocol ieee root id priority 4096 address 00b0.645f.34c2 非vlan20的根桥 hello time 2 sec max age 20 sec forwa

17、rd delay 15 sec bridge id priority 32768 address 0030.803d.f642 hello time 2 sec max age 20 sec forward delay 15 secsw2的生成树信息:sw2#show spanning-tree briefvlan1 spanning tree enabled protocol ieee 非vlan1的根桥 root id priority 24577 address 0007.eb06.1740 hello time 2 sec max age 20 sec forward delay 15

18、 sec bridge id priority 32768 address 00b0.645f.34c0 hello time 2 sec max age 20 sec forward delay 15 secvlan10 spanning tree enabled protocol ieee root id priority 4096 非vlan10的根桥 address 0030.803d.f641 hello time 2 sec max age 20 sec forward delay 15 sec bridge id priority 32768 address 00b0.645f.

19、34c1 hello time 2 sec max age 20 sec forward delay 15 secvlan20 spanning tree enabled protocol ieee root id priority 4096 为vlan20的根桥 address 00b0.645f.34c2 this bridge is the root hello time 2 sec max age 20 sec forward delay 15 sec bridge id priority 4096 address 00b0.645f.34c2 hello time 2 sec max

20、 age 20 sec forward delay 15 secsw3的生成树信息:sw3#show spanning-treevlan0001 spanning tree enabled protocol ieee root id priority 24577 为vlan1的根桥 address 0007.eb06.1740 this bridge is the root hello time 2 sec max age 20 sec forward delay 15 sec bridge id priority 24577 (priority 24576 sys-id-ext 1) add

21、ress 0007.eb06.1740 hello time 2 sec max age 20 sec forward delay 15 sec aging time 300vlan0010 spanning tree enabled protocol ieee root id priority 4096 非vlan10的根桥 address 0030.803d.f641 cost 19 port 24 (fastethernet0/24) hello time 2 sec max age 20 sec forward delay 15 sec bridge id priority 32779

22、 (priority 32768 sys-id-ext 11) address 0007.eb06.1740 hello time 2 sec max age 20 sec forward delay 15 sec aging time 300vlan0020 spanning tree enabled protocol ieee root id priority 4096 非vlan20的根桥 address 00b0.645f.34c2 cost 19 port 23 (fastethernet0/23) hello time 2 sec max age 20 sec forward de

23、lay 15 sec bridge id priority 32780 (priority 32768 sys-id-ext 12) address 0007.eb06.1740 hello time 2 sec max age 20 sec forward delay 15 sec aging time 300interface role sts cost prio.nbr type- - - - - -fa0/23 root fwd 19 128.23 p2pfa0/24 altn blk 19 128.24 p2p步骤六、显示当前配置结果sw1的配置结果：sw1#show running

24、-config!hostname sw1!spanning-tree vlan 10 priority 4096！no ip domain-lookup!interface fastethernet0/23 switchport trunk encapsulation dot1q switchport mode trunk!interface fastethernet0/24switchport trunk encapsulation dot1q switchport mode trunk!endsw2的配置结果：sw2#show running-confighostname sw2！span

25、ning-tree vlan 20 priority 4096!no ip domain-lookup!interface fastethernet0/23switchport trunk encapsulation dot1q switchport mode trunk!interface fastethernet0/24 switchport trunk encapsulation dot1q switchport mode trunk!endsw3的配置结果：sw3#show running-config!hostname sw3!no ip domain-lookup!spanning

26、-tree vlan 1 priority 24576!interface fastethernet0/23 switchport mode trunk!interface fastethernet0/24 switchport mode trunk!end实验二、静态路由 环境：两台2500系列路由器通过串口相连。 要求：在r1和r2上启用静态路由，使两端网络能够互通。步骤一、基本配置routerrouterenablerouter#config terminalrouter(config)#hostname r1r1(config)#no ip domain-lookup r1(confi

27、g)#line console 0r1(config-line)# logging synchronous r1(config-line)#exec-timeout 0 0 r1(config-line)#exit步骤二:接口配置r1的配置：r1(config)#interface s0r1(config-if)#ip address 30.1.1.1 255.255.255.0r1(config-if)#clock rate 64000 时钟速率端r1(config-if)#no shutdownr1(config-if)#interface loopback 0r1(config-if)#

28、ip address 10.1.1.1 255.255.255.0r1(config-if)#r2的配置：router(config)#hostname r2r2(config)#interface s1r2(config-if)#ip address 30.1.1.2 255.255.255.0r2(config-if)#no shutdownr2(config-if)#interface loopback 0r2(config-if)#ip address 20.1.1.1 255.255.255.0r2(config-if)#exitr2(config)#步骤三、指定静态路由r1(con

29、fig)#r1(config)#ip route 20.1.1.0 255.255.255.0 serial 0 指定静态路由r2(config)#r2(config)#ip route 10.1.1.0 255.255.255.0 30.1.1.1 指定静态路由步骤四、作ping 测试r1#pingprotocol ip:target ip address: 20.1.1.1 目的地址extended commands n: y 是否用扩展命令source address or interface: 10.1.1.1 源地址! 显示已通步骤五、显示静态路由条目r1#show ip route

30、codes: c - connected, s - static, i - igrp, r - rip, m - mobile, b - bgp d - eigrp, ex - eigrp external, o - ospf, ia - ospf inter area n1 - ospf nssa external type 1, n2 - ospf nssa external type 2 e1 - ospf external type 1, e2 - ospf external type 2, e - egp i - is-is, l1 - is-is level-1, l2 - is-

31、is level-2, ia - is-is inter area * - candidate default, u - per-user static route, o - odr p - periodic downloaded static routegateway of last resort is not set 20.0.0.0/24 is subnetted, 1 subnetss 20.1.1.0 is directly connected, serial0 静态路由条目 10.0.0.0/24 is subnetted, 1 subnetsc 10.1.1.0 is direc

32、tly connected, loopback0 30.0.0.0/24 is subnetted, 1 subnetsc 30.1.1.0 is directly connected, serial0步骤六、显示当前配置r1的配置结果：r1#show running-config!hostname r1!no ip domain-lookup!interface loopback0 ip address 10.1.1.1 255.255.255.0!interface serial0 ip address 30.1.1.1 255.255.255.0 clockrate 64000!ip r

33、oute 20.1.1.0 255.255.255.0 serial0!line con 0 exec-timeout 0 0 logging synchronous transport input noneendr2的配置结果：r2#show running-config!hostname r2!no ip domain-lookup!interface loopback0 ip address 20.1.1.1 255.255.255.0!interface serial1 ip address 30.1.1.2 255.255.255.0!ip route 10.1.1.0 255.25

34、5.255.0 30.1.1.1!line con 0 exec-timeout 0 0 logging synchronous!end实验三、rip路由协议 环境：两台2500系列路由器由串口相连。 要求：如下图所示，在r1和r2上运行ripv1,让两端能够学习到对端的路由以达到通信的目的。 步骤一、基本配置routerrouterenablerouter#config terminalrouter(config)#hostname r1r1(config)#no ip domain-lookup 关闭域名查找r1(config)#line console 0r1(config-line)#

35、 logging synchronous 命令输入达到同步r1(config-line)#exec-timeout 0 0 设置永不超时r1(config-line)#exit步骤二、接口ip配置r1的配置：r1(config)#interface s0r1(config-if)#ip address 30.1.1.1 255.255.255.0r1(config-if)#clock rate 64000 注意时钟速率端r1(config-if)#no shutdownr1(config-if)#interface loopback 0r1(config-if)#ip address 10.1

36、.1.1 255.255.255.0r1(config-if)#r2的配置：router(config)#hostname r2r2(config)#interface s1r2(config-if)#ip address 30.1.1.2 255.255.255.0r2(config-if)#no shutdownr2(config-if)#interface loopback 0r2(config-if)#ip address 20.1.1.1 255.255.255.0r2(config-if)#exitr2(config)#步骤三、启用rip路由选择协议r1的配置：r1(config)

37、#router rip 启用ripr1(config-router)#network 30.0.0.0 发布直连网段r1(config-router)#network 10.0.0.0r1(config-router)#exitr1(config)#r2的配置：r2(config)#router rip 启用ripr2(config-router)#network 20.0.0.0 发布直连网段r2(config-router)#network 30.0.0.0r2(config-router)#exitr2(config)#end步骤四、显示路由表，查看路由条目r1#show ip rout

38、ecodes: c - connected, s - static, i - igrp, r - rip, m - mobile, b - bgp d - eigrp, ex - eigrp external, o - ospf, ia - ospf inter area n1 - ospf nssa external type 1, n2 - ospf nssa external type 2 e1 - ospf external type 1, e2 - ospf external type 2, e - egp i - is-is, l1 - is-is level-1, l2 - is

39、-is level-2, ia - is-is inter area * - candidate default, u - per-user static route, o - odr p - periodic downloaded static routegateway of last resort is not setr 20.0.0.0/8 120/1 via 30.1.1.2, 00:00:03, serial0 学习来的路由条目 10.0.0.0/24 is subnetted, 1 subnetsc 10.1.1.0 is directly connected, loopback0

40、 30.0.0.0/24 is subnetted, 1 subnetsc 30.1.1.0 is directly connected, serial0步骤五、用扩展ping命令测试连通性r2#pingprotocol ip:target ip address: 10.1.1.1repeat count 5:datagram size 100:timeout in seconds 2:extended commands n: ysource address or interface: 20.1.1.1!步骤六、显示你当前路由协议r2#show ip protocols 显示你当前路由协议配置

41、情况和运行状态routing protocol is rip sending updates every 30 seconds, next due in 24 seconds invalid after 180 seconds, hold down 180, flushed after 240 outgoing update filter list for all interfaces is incoming update filter list for all interfaces is redistributing: rip default version control: send ve

42、rsion 1, receive any version interface send recv triggered rip key-chain loopback0 1 1 2 serial1 1 1 2 automatic network summarization is in effect routing for networks: 10.0.0.0 20.0.0.0 routing information sources: gateway distance last update 30.1.1.1 120 00:14:05 distance: (default is 120)步骤七、显示

43、当前配置r1的当前配置：r1#show running-config!hostname r1!no ip domain-lookup!interface loopback0 ip address 10.1.1.1 255.255.255.0!interface serial0 ip address 30.1.1.1 255.255.255.0 clockrate 64000!router rip network 30.0.0.0network 10.0.0.0!line con 0 exec-timeout 0 0 logging synchronous transport input non

44、eendr2的当前配置：r2#sh run!hostname r2!no ip domain-lookup!interface loopback0 ip address 20.1.1.1 255.255.255.0!interface serial1 ip address 30.1.1.2 255.255.255.0!router rip network 30.0.0.0network 20.0.0.0!line con 0 exec-timeout 0 0 logging synchronous!end实验四、ripv1与eigrp在不连续网络下的比较 环境：两台2500系列路由器，由串口相

45、连。要求：在ripv1和eigrp中将两个相同主类网络的不同子网由另一个主类网络分割，如何能学到对端网络。 rip配置：步骤一、基本配置routerrouterenablerouter#config terminalrouter(config)#hostname r1r1(config)#no ip domain-lookup r1(config)#line console 0r1(config-line)#logging synchronous r1(config-line)#exec-timeout 0 0 r1(config-line)#exit步骤二、接口配置r1的配置：r1(conf

46、ig)#interface s0r1(config-if)#ip address 172.16.1.1 255.255.255.0r1(config-if)#clock rate 64000 r1(config-if)#no shutdownr1(config-if)#interface loopback 0r1(config-if)#ip address 10.1.1.1 255.255.255.0r1(config-if)#r2的配置：r2(config)#interface s1r2(config-if)#ip add 172.16.1.2 255.255.255.0r2(config-

47、if)#no shutdownr2(config-if)#interface loopback 0r2(config-if)#ip address 10.1.2.1 255.255.255.0r2(config-if)#exitr2(config)#步骤三、启用rip路由选择协议r1的配置：r1(config)#router rip 启用rip r1(config-router)#network 10.0.0.0 发布直连网段r1(config-router)#network 172.16.0.0r1(config-router)#exitr1(config)#r2的配置：r2(config)#router rip 启用ripr2(config-router)#network 10.0.0.0 发布直连网段r2(config-router)#network 172.16.0.0r2(config-router)#exitr2(config)#