2013高职院校技能大赛计算机网络应用end配置命令注释版

1、拓扑：(1)VLAN 配置及设备基本配置SW1enablevlan database vlan 2vlan 100vlan 200 exitconfigure terminal hostname SW1 enable password 1234line vty 0 15 loginpassword 1234 exiterface vlan 1/进入 VLAN 数据库/创建 VLAN2/创建 VLAN 100/创建 VLAN 200/定义设备名称，为 SW1/设置模式，为 1234/进入线路模式/开启登录认证/登录/进入 VLAN 1 SVI 接口ip address 172.16.0.5 25

2、5.255.255.252/配置 IP 地址no shutdownerface vlan 2ip address 172.16.0.9 255.255.255.252erface vlan 100ip address 172.16.1.1 255.255.255.0erface vlan 200ip address 172.16.2.1 255.255.255.0exitrface fast tno switchportrn t /24/关闭二层接口，启用三层接口ip address 172.16.0.2 255.255.255.252/配置 IP 地址/同时进入 fa0/1 和 fa0/2

3、接口/封装 802.1q 中继协议/将该接口启为中继接口erface range fa0/1 -2switchport trunk encapsulation dot1q switchport mode trunkSW2enablevlan database vlan 100exitconfigure terminal hostname SW2 enable password 1234line vty 0 15 loginpassword 1234 exiterface vlan 1ip address 172.16.0.6 255.255.255.252no shutdown exitip

4、default-gateway 172.16.0.5 erface fastethernet0/23/配置默认网关/接口模式为接入模式/划入 VLAN 100switchport mode acsswitchport acexits vlan 100SW3enablevlan database vlan 200exitconfigure terminalhostname SW3 enable password 1234line vty 0 15 loginpassword 1234 exitrface l n 2ip address 172.16.0.10 255.255.255.252exi

5、tip default-gateway 172.16.0.9 erface fastethernet0/23switchport mode acsswitchport acexits vlan 200Router1(总公司)enableconfigure terminal hostname R1enable password 1234line vty 0 15 loginpassword 1234 exiterfaerial0/0/0/定义 DCE 接口，配置时钟频率clock rate 64000ip address 202.1.100.2 255.255.255.240no shutdow

6、nerfaerial0/0/1ip address 202.2.100.2 255.255.255.240no shutdownerface fastethernet0/0ip address 172.16.0.1 255.255.255.252no shutdown exitRouter2()enableconfigure terminal hostname R2enable password 1234line vty 0 15loginpassword 1234 exiterfaerial0/0/0ip address 202.1.100.1 255.255.255.240no shutd

7、ownrface fast trn t /0ip address 192.168.0.1 255.255.255.128no shutdown exitRouter3(营运商)enableconfigure terminal hostname R3enable password 1234line vty 0 15 loginpassword 1234 exiterfaerial0/0/1clock rate 64000ip address 202.2.100.1 255.255.255.240no shutdownerface fastethernet0/0ip address 192.168

8、.0.129 255.255.255.128no shutdown exit(2)生成树配置、路由重分发SW3spanning-tree vlan 1,2,100,200 root primary/将该交换机配置为 VLAN1,2,100,200 的根桥/进入 OSPF 进程 1/激活路由协议邻接关系router ospf 1log-adjacency-changesnetwork 172.16.1.0 0.0.0.255 area 1network 172.16.2.0 0.0.0.255 area 1VLAN 100 进区域 1VLAN 200 进区域 1/直连网段进根区域network

9、172.16.0.0 0.0.0.3 area 0exitRouter1/配置缺省路由ip route 0.0.0.0 0.0.0.0 202.2.100.1router ospf 1log-adjacency-changesnetwork 172.16.0.0 0.0.0.3 area 0/激活路由协议邻接关系/直联网段进根区域/将静态路由重分发到 OSPF 进程中/允许重分发缺省路由redistribute sic subnetsdefault-information originateRouter3/静态路由，去往总公司内网ip route 172.16.0.0 255.255.252.

10、0 202.2.100.2ip route 202.1.100.0 255.255.255.240 202.2.100.2ip route 192.168.0.0 255.255.255.128 202.2.100.2(3)NAT、PPP 配置Router1/创建标准 ACL，允许下面地址进行 NATip acs-list st Nat_forpermit 172.16.1.0 0.0.0.255permit 172.16.2.0 0.0.0.255permit 192.168.0.0 0.0.0.255exitip nat inside source list Nat_for/网络地址端口转

11、换ip nat inside source list Nat_for/网络地址端口转换erfaerial0/0/0 overloaderfaerial0/0/1 overloadip nat inside sour/将 WEB 服务静态ip nat inside sour/将 WEB 服务静态ic tcp 172.16.1.2 80 202.1.100.2 80ic tcp 172.16.1.2 80 202.2.100.2 8080/配置用户名和/配置用户名和username R2 password 1234username R3 password 1234 erface fa0/0ip n

12、at insideerfaerial0/0/0/定义外部接口ip nat outside/封装 PPP 协议/PPP 认证为 chapencapsulation pppppp authentication chaperfaerial0/0/1ip nat outsideencapsulation pppppp authentication chap exitRouter2username R1 password 1234erfaerial0/0/0encapsulation pppppp authentication chapRouter3username R1 password 1234ip

13、 acs-list st Natpermit 192.168.0.128 0.0.0.255ip nat inside source list Naterface fa0/0 ip nat insideerfaerial0/0/1 overloaderfaerial0/0/1ip nat outsideencapsulation pppppp authentication chap(4)GRERouter1/进入隧道 0erface tunnel 0ip address 10.10.10.1 255.255.255.252/配置 IP/源地址/目标地址tunnel sourerial 0/0/

14、0tunnel destination 202.1.100.1exitip route 192.168.1.0 255.255.255.128 tunnel0 /目标，通过隧道由于 PT 模拟器没有静态路由 tunnel 接口只能使用：ip route 192.168.0.0 255.255.255.128 202.1.100.1Router2erface tunnel 0ip address 10.10.10.2 255.255.255.252tunnel sourerial0/0/0tunnel destination 202.1.100.2exitip route 172.16.0.0 255.255.252.0 tunnel 0i