企业级网络ip地址规划与配置

1、1、R&Uter-PT网格工程机腐用关10. Z 145.1EO: 1CL 2. 145lg1SO L72 15 第 2 】Routerl R outer . SO: 172. 16. 12.1 /30/aru e| y/tciXer-l11"io. dl 10.2 /asServer-PTw叱服势就3fzPC-PT ，PC5SI: /3Q.产Rojtr-PTRmstS电 1/0 1支.16电一1。1 /34intermt: 132.16®.10. 254Links-WRT3 OONPG-PT 0 PC6 uUn： m. ISS 20 Qvl

2、tn triElk：PC-PTPC7DHCP SERVERPC-PTPC8PC-PTPC9PC-PTPC1O2950-24 SwitchlPC-PT C3PC-PTPC4企业级网络ip地址规划与配置以设计具有三层结构的大型企业级网络设计为例，完成IP地址的分配、NAT地址转换、三层网络拓扑结构等功能，并选择合适的设备实现该网络，用模拟器 验证通连性。二、实验拓扑结构图与IP规划ROUTER0本园区网络的出口 ,并在出口处通过NATW换来实现与外网的连拓扑实现:RIP动态接，出口网络地址为1 ,三台路由器构成的主路由区域使用 路由协议，ROUTER1连为园区网络服务器群，网段

3、为 /24 ;由于设 备限制在此只设置 WEEBf FTP服务器模拟现实中的服务器群，ROUTER3连网段 为 /24 。Switch。模拟现实中的新交换机，并与 switch3做链路负载均衡，switch1 与switch1之间使用PVLANg术连接，做到本交换机上 VLANfc间的隔离与整体 的透传，Switch3模拟学生机房主交换机，与 switch1之间使用两条普通链路， 利用端口汇聚技术实现带宽的增加， 并在交换机上连接一台DHCP艮务器实现IP 地址的自动分配，DHCP艮务器使用windows 2003 server附带的DHCPA建实现

4、，由于设备限制，本次试验采用架设在 VM虚拟机中的windows 2003 server操作系统实现，虚拟机与现实网络通过桥接网络通信， wlan部分采用单AP布局，AP 型号为 NETGEAR, internet 接口地址为：54 , LAN地址段为 /24 。三、实验器材:设备名称设备数量设备作用华为R2501路由器3路由、寻径华为S2008交换机4服务器2Web服务器/DHCP服务器无线 AP(netgear)1构建无线网络PC机6笔记本（带无线网卡）2四、配置过程:配置命令：Router。：Quidwaysysname routerOr

5、outer0int sOrouter0-Serial0ip add 52址router0-Serial0link-protocolppp议router0-Serial0quitrouter0int s1router0-Serial1ip add 52router0-Serial1link-protocol ppprouter0-Serial1quitrouter0riprouter0-ripnetwork allrouter0-ripquit/重新命名交路由器/配置串行链路接口/配置接口 IP地

6、/链路层启用PPP协/启用RIP协议/发布直连网络/设定router0nat address-group 1 1 pool 1/设定ACL/增加访问控/设置缺省/设置内部FTP/设置内部WWWnat地址池router0acl 1router0-acl-2rule permit source 规则router0-acl-2rule permit source router0-acl-2quitrouter0int e0router0-Ethernet0nat outbound 1 address-group

7、pool1制列表和端口关联router0-Ethernet0ip route-s 路由router0-Ethernet0nat server global ftp tcp服务器router0-Ethernet0nat server global www tcp服务器router0-Ethernet0quitRouter1 :<Quidway>syspassword:Quidwaysysname router1router1int s0router1-Serial0ip add 172.16.

8、32.1 52router1-Serial0link-protocol ppprouter1-Serial0clock dteclk1router1-Serial0int s1router1-Serial1ip add 0 52router1-Serial1link-protocol ppprouter1-Serial1int e0router1-Ethernet0ip add router1riprouter1-ripnetwork allrouter1ip route-s

9、 s0Router 3 :<Quidway>sysQuidwaysysname router3router3int s0router3-Serial0ip add 52router3-Serial0link-protocol ppprouter3-Serial0clock dteclk1router3-Serial0int s1router3-Serial1ip add 52router3-Serial1link-protocol ppprouter3

10、-Serial1clock dteclk1router3-Serial1int e0router3-Ethernet0ip add router3-Ethernet0quitrouter3riprouter3-ripnetwork allrouter3-riprouter3ip route-s s1Switch。：<Quidway>syspassword:Quidwaysysname switchOswitchOint e 0/1/ 进入端 口视图switchO-Ethernet0/1port li

11、nk-type trunk/设置端口 类型为 TRUNKswitchO-Ethernet0/1port trunk permit vlan all/允许通过所有VLANswitch0-Ethernet0/1duplex fullswitch0-Ethernet0/1speed 100switch0int e 0/2switch0-Ethernet0/2port link-type trunkswitch0-Ethernet0/2port trunk permit vlan allswitch0-Ethernet0/2duplex fullswitch0-Ethernet0/2speed 100

12、switch0-Ethernet0/2quitswitch0link-aggreation int e0/1 to int e0/2 bothswitch。/设置工作模式为全双工/设置速率为100Mbps/设置工作模式为全双工/设置速率为100Mbps/设置汇聚连接Switch1:<Quidway>sysQuidwaysysname switch1switch1vlan 8switch1-vlan8port eth 0/1 to eth 0/4switch1-vlan8vlan 24switch1-vlan24port eth 0/5 to eth 0/8switch1-vlan2

13、4quitswitch1vlan 23switch1-vlan23isolate-user-vlan enableswitch1-vlan23port eth 0/9switch1-vlan23isolate-user-vlan 23 secondary 8 24之间关联信息/配置VLAN信息/加入端口/配置 isovlan/启用ISO/加入端口/配置与二层vlanswitch1-vlan23Switch2:<Quidway>sysQuidwaysysname switch2switch2vlan 4switch1-vlan8port eth 0/8switch2-vlan8por

14、t eth 0/1 to eth 0/4switch2-vlan8vlan 5switch2-vlan24port eth 0/5 to eth 0/8switch2-vlan24quitswitch2vlan 23switch2-vlan23isolate-user-vlan enableswitch2-vlan23port eth 0/9switch2-vlan23isolate-user-vlan 23 secondary 4 5switch2-vlan23Switch3:<Quidway>syspassword:Quidwaysysname switch3switch3in

15、t e 0/1switch3-Ethernet0/1port link-type trunkswitch3-Ethernet0/1port trunk permit vlan allswitch3-Ethernet0/1duplex fullswitch3-Ethernet0/1speed 100switch3-Ethernet0/1int e 0/2switch3-Ethernet0/2port link-type trunkswitch3-Ethernet0/2port trunk permit vlan allswitch3-Ethernet0/2duplex fullswitch3-E

16、thernet0/2speed 100switch3-Ethernet0/2quitswitch3link-aggreation int e 0/1 to e 0/2 bothswitch3int e 0/3switch3-Ethernet0/3quitswitch3moniter e 0/3switch3port mirror int e 0/4 to int e 0/8AP配置信息图:Wan信息:NETGEARrduter managerb RangeMax NEXT Wiraless Roul'erSetup WizardBasit Sellings Wicl匕施 Setting

17、sLogsBlock SitesBlack ServicesScheduleE-milIwlnl 启 nmnceRouler StainsAtlachedl Devices Backup Setlings S虱 PaswordRouler UpgradeWire I Settings Port Forwarding / Port Triggering WAN SMup LAN IP Setup DyinamiE DNSF Basic SettingsDO&&YOHI kiftliel ClMH晅日Mh R心中A L。帆？Yes；NQlirflli«l IP AiliK

18、广 Got Dynamically From IBP；Use Slatic if Addr&ssIP闻出0白白IP Subnet M9skGateway IP AddressDoriMiibName Stiver iDNSr AthlieffoetAutomatically Frcin 旧 Pr* Use Thase DNS SeiversPrirnaivDNSSetondarv dns卜.MAC2号S* Use Default Address Use Compuler MAC AddressLan信息:NETGEARrouter rnanag0rI? RangcJax1*1 NEXT

19、 Wiirelois RouierWireless SettingsLogsBlock Sit«Block Services ScheduleE-mailMaintenance Router Status Attached Devic» Backup Satlinfs Set PasswordRouler Upgrade AdvancedWireless SetlingiPort Farwarding / Part TriggeringWAN SetupLAN IP Setup Dynamiic DNS Stalk FtoiftMLAN IP SetupLAN TCPB1

20、SetupIP AddressIP Subnet MaskRIP DirectionRIP Vareian us-e Rirtei .15 DHCP serveiStarting IP AddressEnding IP Addressk k 国-L|2S5 %S : 2SS e JoI None 二IDisabled 回岑IP Mlr«ss口例忙史虺MAC A体研5$Arlrli ess ReservHioiiAdd Edit DaletsApply I Cane日I I测试和验证:R0配置信息:interface Ethernet。ip address 10,0.30.1 255.

21、255,255.0 t interface Serial0clock DTECLK1link-protocol pppip address 172.16,32.2 52 !interface Seriallclock DTECLK1link-protocol pppppp authentication-mode chapppp chap user bip address 52 tinterface Seri日12flow-control noneasync mode protocol link-protocol ppp

22、»quitripnetwork all More (Press CTRL_C to break) R1配置信息:interface EihernetOip address 10.0404 255.255,255.0 nat outbound 1 dddressgroup pool!interface SerialO link-protocol ppp ppp pap locdl-user flybird password simple fl1 ip address 52!interface Seriall linkprotocol p

23、pp ip address 0 52 !interface Serial2 flow'control none async mode protocol 1 ink-protocol ppp !quitripnetwork al1!quitR3配置信息:interface Ethernetsip address t * interface Serialfl link-protocol pppip address 172.16.32,6 52 t * interf

24、ace Seriallclock DTECLK1 link-protocol ppp ip address 172.16.32,9 52 tinterface Seri日12 flow-control none async mode protocol link-protocol ppp quit rip network allR0路由表：routeOldis ip rout Routing Tables:Destination/Mask/010.1 A.0/2410,2.145.0/241/32127.0,0,0/8/32/30172,16321/32/32172.16.324/30172.16.32/5/32/32/30/24Proto StaticRIP )irect direct Direct Direct Direct hrect direct Direct Direct DirectppIIRRer 6 0 00p 1 11P010000000000HNexth