奥山ccna实验手册

1、奥山ccna试验手册目 录实验一、配置stp与vtp3实验二、静态路由11实验三、rip路由协议14实验四、ripv1与eigrp在不连续网络下的比较21实验五、访问列表与telnet访问控制27实验六、静态、动态nat与pat31实验七、帧中继链路上运行eigrp35实验八、背靠背帧中继40实验一、配置stp与vtp 环境：三台交换机，形成一个全互连结构，sw3为2950，sw1和sw2为2900xl；要求：设置sw3为vtp server,设置sw1和sw2为vtp client,域名为cisco，密码为：cisco，在server创建vlan 10(name:aa)和vlan20(nam

2、e:bb);设置sw3为vlan1的根桥，sw1为vlan10的根桥，sw2为vlan20的根桥； 初始化配置：sw#show vlan à查看vlan信息sw#delete vlan.dat à用此命令将vlan删除sw#show startup-config à查看一下nvram是否保存了配置sw#erase startup-config à清空配置文件sw#reload à重新启动交换机sw>enablesw#config terminalsw(config)#hostname sw1sw1(config)#no ip domain

3、-lookup à关闭域名查找sw1(config)#line console 0sw1(config-line)#logging synchronous à命令输入达到同步sw1(config-line)#exec-timeout 0 0 à设置永不超时sw1(config-line)#exit步骤一、配置vtpsw3的配置：sw3(config)#vtp mode server à在sw3上启用vtp serverdevice mode already vtp server.sw3(config)#vtp domain cisco à设置域

4、名changing vtp domain name from null to ciscosw3(config)#vtp password cisco à设置密码setting device vlan database password to ciscosw1的配置:sw1#vlan database à进入vlan数据库sw1(vlan)#vtp client à启用vtp client模式setting device to vtp client mode.sw1(vlan)#vtp domain cisco à作用到cisco域中changing vt

5、p domain name from null to ciscosw1(vlan)#vtp password cisco à设置密码与server端相同 setting device vlan database password to cisco.sw1(vlan)#exit à使配置生效in client state, no apply attempted.exiting.sw2的配置:sw2#vlan databasesw2(vlan)#vtp clientsetting device to vtp client mode.sw2(vlan)#vtp domain ci

6、scochanging vtp domain name from null to ciscosw2(vlan)#vtp password ciscosetting device vlan database password to cisco.sw2(vlan)#exitsw2#步骤二、启用干道端口sw3的配置：sw3(config)#interface fa0/23sw3(config-if)#switchport mode trunk à启用trunk端口sw3(config-if)#interface fa0/24sw3(config-if)#switchport mode tr

7、unk sw1的配置：sw1(config)#interface fa0/23sw1(config-if)#switchport trunk encapsulation dot1q à封装干道协议sw1(config-if)#switchport mode trunk à启用trunk模式sw1(config-if)#sw1(config)#interface fa0/24sw1(config-if)#switchport trunk encapsulation dot1qsw1(config-if)#switchport mode trunksw2的配置：sw2(conf

8、ig)#interface fa0/23sw2(config-if)#switchport trunk encapsulation dot1qsw2(config-if)#switchport mode trunksw2(config)#interface fa0/24sw2(config-if)#switchport trunk encapsulation dot1qsw2(config-if)#switchport mode trunk步骤三、测试vtp状态及创建vlansw3的状态：sw3#show vtp status à显示vtp状态vtp version : 2confi

9、guration revision : 0 à配置修订号maximum vlans supported locally : 254number of existing vlans : 5 vtp operating mode : server àvtp模式vtp domain name : cisco àvtp域名vtp pruning mode : disabledvtp v2 mode : disabledvtp traps generation : disabledmd5 digest : 0x3f 0x17 0xc8 0xb8 0x5a 0xe3 0x01

10、 0x66 configuration last modified by 0.0.0.0 at 0-0-00 00:00:00创建vlan:sw3(config)#vlan 10 à创建vlan10sw3(config-vlan)#name aa à命名为aasw3(config-vlan)#exit à应用配置sw3(config)#vlan 20 à创建vlan20sw3(config-vlan)#name bb à命名为bbsw3(config-vlan)#exitsw3(config)#sw3的状态：sw3#show vtp statu

11、s à在sw3显示vtp的状态vtp version : 2configuration revision : 2 àserver的修订号maximum vlans supported locally : 254number of existing vlans : 7 àvlan也已经增加vtp operating mode : servervtp domain name : ciscovtp pruning mode : disabledvtp v2 mode : disabledvtp traps generation : disabledmd5 digest

12、: 0x98 0x31 0xcf 0xa0 0xa7 0x17 0x73 0x66configuration last modified by 0.0.0.0 at 3-1-93 00:52:05sw2的状态：sw2#show vtp statusvtp version : 2configuration revision : 2 à已经同步了servermaximum vlans supported locally : 254number of existing vlans : 7vtp operating mode : clientvtp domain name : ciscovt

13、p pruning mode : disabledvtp v2 mode : disabledvtp traps generation : disabledmd5 digest : 0x98 0x31 0xcf 0xa0 0xa7 0x17 0x73 0x66configuration last modified by 0.0.0.0 at 3-1-93 00:52:05sw1的vlan信息:sw1#show vlan à显示vlan信息vlan name status ports- - - -1 default active fa0/1, fa0/2, fa0/3, fa0/4,

14、fa0/5, fa0/6, fa0/7, fa0/8, fa0/9, fa0/10, fa0/11, fa0/12, fa0/13, fa0/14, fa0/15, fa0/16, fa0/17, fa0/18, fa0/19, fa0/20, fa0/21, fa0/22, fa0/23, fa0/2410 aa active à已经同步了vlan的信息20 bb active步骤四、配置pvstsw3(config)#spanning-tree vlan 1 root primary à设置为vlan1的根桥sw1(config)#spanning-tree vlan

15、10 priority 4096 à设置为vlan10的根桥sw2(config)#spanning-tree vlan 20 priority 4096 à设置为vlan20的根桥步骤五、显示stp的信息sw1的生成树信息:sw1#show spanning-tree brief à显示每vlan生成树信息vlan1 spanning tree enabled protocol ieee root id priority 24577 address 0007.eb06.1740 à非vlan1的根桥 hello time 2 sec max age 2

16、0 sec forward delay 15 sec bridge id priority 32768 address 0030.803d.f640 hello time 2 sec max age 20 sec forward delay 15 secvlan10 spanning tree enabled protocol ieee root id priority 4096 address 0030.803d.f641 à为vlan10的根桥 this bridge is the root hello time 2 sec max age 20 sec forward dela

17、y 15 sec bridge id priority 4096 address 0030.803d.f641 hello time 2 sec max age 20 sec forward delay 15 secvlan20 spanning tree enabled protocol ieee root id priority 4096 address 00b0.645f.34c2 à非vlan20的根桥 hello time 2 sec max age 20 sec forward delay 15 sec bridge id priority 32768 address 0

18、030.803d.f642 hello time 2 sec max age 20 sec forward delay 15 secsw2的生成树信息:sw2#show spanning-tree briefvlan1 spanning tree enabled protocol ieee à非vlan1的根桥 root id priority 24577 address 0007.eb06.1740 hello time 2 sec max age 20 sec forward delay 15 sec bridge id priority 32768 address 00b0.6

19、45f.34c0 hello time 2 sec max age 20 sec forward delay 15 secvlan10 spanning tree enabled protocol ieee root id priority 4096 à非vlan10的根桥 address 0030.803d.f641 hello time 2 sec max age 20 sec forward delay 15 sec bridge id priority 32768 address 00b0.645f.34c1 hello time 2 sec max age 20 sec f

20、orward delay 15 secvlan20 spanning tree enabled protocol ieee root id priority 4096 à为vlan20的根桥 address 00b0.645f.34c2 this bridge is the root hello time 2 sec max age 20 sec forward delay 15 sec bridge id priority 4096 address 00b0.645f.34c2 hello time 2 sec max age 20 sec forward delay 15 sec

21、sw3的生成树信息:sw3#show spanning-treevlan0001 spanning tree enabled protocol ieee root id priority 24577 à为vlan1的根桥 address 0007.eb06.1740 this bridge is the root hello time 2 sec max age 20 sec forward delay 15 sec bridge id priority 24577 (priority 24576 sys-id-ext 1) address 0007.eb06.1740 hello

22、time 2 sec max age 20 sec forward delay 15 sec aging time 300vlan0010 spanning tree enabled protocol ieee root id priority 4096 à非vlan10的根桥 address 0030.803d.f641 cost 19 port 24 (fastethernet0/24) hello time 2 sec max age 20 sec forward delay 15 sec bridge id priority 32779 (priority 32768 sys

23、-id-ext 11) address 0007.eb06.1740 hello time 2 sec max age 20 sec forward delay 15 sec aging time 300vlan0020 spanning tree enabled protocol ieee root id priority 4096 à非vlan20的根桥 address 00b0.645f.34c2 cost 19 port 23 (fastethernet0/23) hello time 2 sec max age 20 sec forward delay 15 sec bri

24、dge id priority 32780 (priority 32768 sys-id-ext 12) address 0007.eb06.1740 hello time 2 sec max age 20 sec forward delay 15 sec aging time 300interface role sts cost prio.nbr type- - - - - -fa0/23 root fwd 19 128.23 p2pfa0/24 altn blk 19 128.24 p2p步骤六、显示当前配置结果sw1的配置结果：sw1#show running-config!hostna

25、me sw1!spanning-tree vlan 10 priority 4096！no ip domain-lookup!interface fastethernet0/23 switchport trunk encapsulation dot1q switchport mode trunk!interface fastethernet0/24switchport trunk encapsulation dot1q switchport mode trunk!endsw2的配置结果：sw2#show running-confighostname sw2！spanning-tree vlan

26、 20 priority 4096!no ip domain-lookup!interface fastethernet0/23switchport trunk encapsulation dot1q switchport mode trunk!interface fastethernet0/24 switchport trunk encapsulation dot1q switchport mode trunk!endsw3的配置结果：sw3#show running-config!hostname sw3!no ip domain-lookup!spanning-tree vlan 1 p

27、riority 24576!interface fastethernet0/23 switchport mode trunk!interface fastethernet0/24 switchport mode trunk!end实验二、静态路由 环境：两台2500系列路由器通过串口相连。 要求：在r1和r2上启用静态路由，使两端网络能够互通。步骤一、基本配置router>router>enablerouter#config terminalrouter(config)#hostname r1r1(config)#no ip domain-lookup r1(config)#lin

28、e console 0r1(config-line)# logging synchronous r1(config-line)#exec-timeout 0 0 r1(config-line)#exit步骤二:接口配置r1的配置：r1(config)#interface s0r1(config-if)#ip address 30.1.1.1 255.255.255.0r1(config-if)#clock rate 64000 à时钟速率端r1(config-if)#no shutdownr1(config-if)#interface loopback 0r1(config-if)#

29、ip address 10.1.1.1 255.255.255.0r1(config-if)#r2的配置：router(config)#hostname r2r2(config)#interface s1r2(config-if)#ip address 30.1.1.2 255.255.255.0r2(config-if)#no shutdownr2(config-if)#interface loopback 0r2(config-if)#ip address 20.1.1.1 255.255.255.0r2(config-if)#exitr2(config)#步骤三、指定静态路由r1(con

30、fig)#r1(config)#ip route 20.1.1.0 255.255.255.0 serial 0 à指定静态路由r2(config)#r2(config)#ip route 10.1.1.0 255.255.255.0 30.1.1.1 à指定静态路由步骤四、作ping 测试r1#pingprotocol ip:target ip address: 20.1.1.1 à目的地址extended commands n: y à是否用扩展命令source address or interface: 10.1.1.1 à源地址! &#

31、224;显示已通步骤五、显示静态路由条目r1#show ip routecodes: c - connected, s - static, i - igrp, r - rip, m - mobile, b - bgp d - eigrp, ex - eigrp external, o - ospf, ia - ospf inter area n1 - ospf nssa external type 1, n2 - ospf nssa external type 2 e1 - ospf external type 1, e2 - ospf external type 2, e - egp i -

32、 is-is, l1 - is-is level-1, l2 - is-is level-2, ia - is-is inter area * - candidate default, u - per-user static route, o - odr p - periodic downloaded static routegateway of last resort is not set 20.0.0.0/24 is subnetted, 1 subnetss 20.1.1.0 is directly connected, serial0 à静态路由条目 10.0.0.0/24

33、is subnetted, 1 subnetsc 10.1.1.0 is directly connected, loopback0 30.0.0.0/24 is subnetted, 1 subnetsc 30.1.1.0 is directly connected, serial0步骤六、显示当前配置r1的配置结果：r1#show running-config!hostname r1!no ip domain-lookup!interface loopback0 ip address 10.1.1.1 255.255.255.0!interface serial0 ip address 3

34、0.1.1.1 255.255.255.0 clockrate 64000!ip route 20.1.1.0 255.255.255.0 serial0!line con 0 exec-timeout 0 0 logging synchronous transport input noneendr2的配置结果：r2#show running-config!hostname r2!no ip domain-lookup!interface loopback0 ip address 20.1.1.1 255.255.255.0!interface serial1 ip address 30.1.

35、1.2 255.255.255.0!ip route 10.1.1.0 255.255.255.0 30.1.1.1!line con 0 exec-timeout 0 0 logging synchronous!end实验三、rip路由协议 环境：两台2500系列路由器由串口相连。 要求：如下图所示，在r1和r2上运行ripv1,让两端能够学习到对端的路由以达到通信的目的。 步骤一、基本配置router>router>enablerouter#config terminalrouter(config)#hostname r1r1(config)#no ip domain-look

36、up à关闭域名查找r1(config)#line console 0r1(config-line)# logging synchronous à命令输入达到同步r1(config-line)#exec-timeout 0 0 à设置永不超时r1(config-line)#exit步骤二、接口ip配置r1的配置：r1(config)#interface s0r1(config-if)#ip address 30.1.1.1 255.255.255.0r1(config-if)#clock rate 64000 à注意时钟速率端r1(config-if)#

37、no shutdownr1(config-if)#interface loopback 0r1(config-if)#ip address 10.1.1.1 255.255.255.0r1(config-if)#r2的配置：router(config)#hostname r2r2(config)#interface s1r2(config-if)#ip address 30.1.1.2 255.255.255.0r2(config-if)#no shutdownr2(config-if)#interface loopback 0r2(config-if)#ip address 20.1.1.1

38、 255.255.255.0r2(config-if)#exitr2(config)#步骤三、启用rip路由选择协议r1的配置：r1(config)#router rip à启用ripr1(config-router)#network 30.0.0.0 à发布直连网段r1(config-router)#network 10.0.0.0r1(config-router)#exitr1(config)#r2的配置：r2(config)#router rip à启用ripr2(config-router)#network 20.0.0.0 à发布直连网段r2(

39、config-router)#network 30.0.0.0r2(config-router)#exitr2(config)#end步骤四、显示路由表，查看路由条目r1#show ip routecodes: c - connected, s - static, i - igrp, r - rip, m - mobile, b - bgp d - eigrp, ex - eigrp external, o - ospf, ia - ospf inter area n1 - ospf nssa external type 1, n2 - ospf nssa external type 2 e1

40、 - ospf external type 1, e2 - ospf external type 2, e - egp i - is-is, l1 - is-is level-1, l2 - is-is level-2, ia - is-is inter area * - candidate default, u - per-user static route, o - odr p - periodic downloaded static routegateway of last resort is not setr 20.0.0.0/8 120/1 via 30.1.1.2, 00:00:0

41、3, serial0 à学习来的路由条目 10.0.0.0/24 is subnetted, 1 subnetsc 10.1.1.0 is directly connected, loopback0 30.0.0.0/24 is subnetted, 1 subnetsc 30.1.1.0 is directly connected, serial0步骤五、用扩展ping命令测试连通性r2#pingprotocol ip:target ip address: 10.1.1.1repeat count 5:datagram size 100:timeout in seconds 2:e

42、xtended commands n: ysource address or interface: 20.1.1.1!步骤六、显示你当前路由协议r2#show ip protocols à显示你当前路由协议配置情况和运行状态routing protocol is "rip" sending updates every 30 seconds, next due in 24 seconds invalid after 180 seconds, hold down 180, flushed after 240 outgoing update filter list fo

43、r all interfaces is incoming update filter list for all interfaces is redistributing: rip default version control: send version 1, receive any version interface send recv triggered rip key-chain loopback0 1 1 2 serial1 1 1 2 automatic network summarization is in effect routing for networks: 10.0.0.0

44、 20.0.0.0 routing information sources: gateway distance last update 30.1.1.1 120 00:14:05 distance: (default is 120)步骤七、显示当前配置r1的当前配置：r1#show running-config!hostname r1!no ip domain-lookup!interface loopback0 ip address 10.1.1.1 255.255.255.0!interface serial0 ip address 30.1.1.1 255.255.255.0 clock

45、rate 64000!router rip network 30.0.0.0network 10.0.0.0!line con 0 exec-timeout 0 0 logging synchronous transport input noneendr2的当前配置：r2#sh run!hostname r2!no ip domain-lookup!interface loopback0 ip address 20.1.1.1 255.255.255.0!interface serial1 ip address 30.1.1.2 255.255.255.0!router rip network

46、 30.0.0.0network 20.0.0.0!line con 0 exec-timeout 0 0 logging synchronous!end实验四、ripv1与eigrp在不连续网络下的比较 环境：两台2500系列路由器，由串口相连。要求：在ripv1和eigrp中将两个相同主类网络的不同子网由另一个主类网络分割，如何能学到对端网络。 rip配置：步骤一、基本配置router>router>enablerouter#config terminalrouter(config)#hostname r1r1(config)#no ip domain-lookup r1(co

47、nfig)#line console 0r1(config-line)#logging synchronous r1(config-line)#exec-timeout 0 0 r1(config-line)#exit步骤二、接口配置r1的配置：r1(config)#interface s0r1(config-if)#ip address 172.16.1.1 255.255.255.0r1(config-if)#clock rate 64000 r1(config-if)#no shutdownr1(config-if)#interface loopback 0r1(config-if)#i

48、p address 10.1.1.1 255.255.255.0r1(config-if)#r2的配置：r2(config)#interface s1r2(config-if)#ip add 172.16.1.2 255.255.255.0r2(config-if)#no shutdownr2(config-if)#interface loopback 0r2(config-if)#ip address 10.1.2.1 255.255.255.0r2(config-if)#exitr2(config)#步骤三、启用rip路由选择协议r1的配置：r1(config)#router rip à启用rip r1(config-router)#network 10.0.0.0 à发布直连网段r1(config-router)#network 172.16.0.0r1(config-router)#exitr1(config)#r2的配置：r2(config)#router rip à启用ripr2(config-router)#network 10.0.0.0 à发布直连网段r2(config-router)#network 172.16.0.0r2(config-rout