四、ccna实验2010版试验认识设备端口及连接

CCNA实验 实验一认识设备端口及连 实验二修改路由器的名称及操 实验三基本的操作命 实验四CDP命令操 实验五备份路由器的 实验六路由器的恢 实验七配 NET登 实验八静态路 实验九RIP动态路由的配 实验十EIGRP路由协 实验十一EIGRP非等价带宽的负载均 实验十二配置单区域的OSPF协 实验十三使用扩展的 命 实验十四使用ACLNET应 实验十五NAT网络地址转 实验十六交换机的基础配 实验十七交换码恢 实验十八交换机端口安 实验十九单臂路 实验二十PAP认证实 实验二十一CHAP认证实 实验二十二帧中继实 实验二十三用SDM管理路由 实验一认识设备端口及连接路由器接AUI端口它就是用来与粗同轴电缆连接的接口，它是一种“D”15针接口，这在令牌环网或总线型网络中是一种比较常见的端口之一。路由器可通过粗同轴电缆收发器实现与10Base-5网络的连接。但的则是借助于外接的收发转发器（AUI-to-RJ-45，实现与10Base-T（10Base-2）或光缆（10Base-F）的连接网中也主要采绞线作为传输介质，所以根据端口的通信速率不同RJ-45端口又可分为路由器中通常是标识为“ETH”100Base-TXRJ-45端口则通常标识为“10/100bTX”。种端口一般在高档路由器才具有，都以“100bFX”标注，如图4所示。广域网接RJ-45端利用RJ-45端口也可以建立广域网与局域网VLAN（虚拟局域网）之间，以及与网络或Internet的连接。如果使用路由器为不同VLAN提供路由时，可以直接利绞线连接5所示为快速以太网（FastEthernet）端口。Cisco2600系AUIRJ-45两个广域网连接端口（6所示，用户可以根据自己Relay拟线路）等网络连接模式。在企业网之间有时也通过DDN或X.25等广域网连接技术进行异步串口（SNC）主要是应用于odem或odem池的连接，如图8所示。它主要用于实现计算机通过公用网拨入网络。这种异步端口相对于上面介绍的同步端口来说ISDNBRIISDNISDN刚兴起时与Internet或其他网络的连接，可实现128Kbps的通信速率ISDN有两种速率连接端口，一用RJ-45标准，与ISDNNT1的连接使用RJ-45-to-RJ-45直通线。如图9所示的BRI为ISDNBRI端口。路由器配置接Console端口使用配置连线直接连接至计算机的串口，利用终端仿真程序（如下图10所示就包含了一个Console配置端口。AUX端口为异步端口，主要用于配置，也可用于拔号连接，还可通过收发器与接口图示仍参见上述图10。路由器的硬件连局域网设备主要是指集线器与交换机，交换机通常使用的端口只有RJ-45和SC，而集线器使用的端口则通常为AUI、BNCRJ-45。下面，我们简单介绍一下路由器和集线设备各（1）RJ-45-to-RJ-RJ-45接口的，如果路由器和集线设备均提供RJ-45端口，那么，可以使绞线将集线设备和路由器的两个端口连接在一起。需要注要采用一一对应法。再一个要注意的是集线器设备之间的级常是通过级联端口进行的，络。除此之外，也可用于连接其他终端。当路由器通过电缆与Modem连接时，必须使用AYSNC-to-DB25AYSNC-to-DB9Modem12Cisco5种不同类型的同步串行端口，分别是：EIA/TIA-232接口、EIA/TIA-449接口、V.35接口、X.21串行电缆总成EIA-530接口，所对应的适配器图示分别如图13、图14、图15、图16、图17所般称带插针之类推适配器头一端称之为“”，而带有孔的适配器一端通常称之为“母头”，注意“EIA-530”接口两端都是一样的接口类型，这主要是考虑到连接的紧密。图中的“”DTE（数据终端设备，DataTerminalEquipment）连接适配器，下方“母头”DCE（数据通信设备，DataCommunicationsEquipment连接适18所示为同步串Internet Console口与计算机的串口/并RJ-45-to-DB-9RJ-45-to-DB-25转换用适配器，如图21所示。实验要求

实验二修改路由器的名称及操设置模式下的password为ccna,secret为ccnp,vty线路为为：Router>：注Router# Router(config)#hostnamewanhe(config)#enablepasswordwanhecon0isnowavailePressRETURNtogetstarted.注：IOSUNIXwanhe#shBuildingCurrentconfiguration:857!hostnamewanhe!noaaanew-modelipsubnet-wanhe#confwanhe(config)#enablesecret wanhe#shBuildinghostnamewanhe!!enable enablepassword!noaaanew-modelipsubnet-wanhecon0isnowavailePressRETURNtogetstarted.有2个，一个是明 wanhe(config-wanhe(config-line)#end-----------------------------从接口模式下直接退到模wanhe#shBuildinglinecontransportoutputalllineaux0transportoutputalllinevty04passwordwanhe(config)#servicepassword-wanhe#shBuildinglinecontransportoutputalllineaux0transportoutputalllinevty04 transportinputalltransportoutputall

实验三基本的操作命令wanhe#clockset12:12:1230Nov2008wanhe#showclock 2wanhe（config）#lineconsole0wanhe（config-line）wanhe（config）#bannermotd#EnterTEXTmessage.Endwiththeeto#wanhecon0isnowavailablePressRETURNtogeteto思，从而让找到发起的借口。4wanhe#showruninte0InterfaceEthernet0descriptionISPnoipaddresswanhe#showrunints0Interfaceipaddresswanhe（config）#defaultinterfaceserial0Buildingconfiguration…InterfaceSerial0settodefaultwanhe#showrunint!noipaddressRouter#show查看路由器Router#showRouter#show Router#showipintRouter#showipintRouter#showRouter#show实验要求

实验四CDPRouter#confEnterconfigurationcommands,oneperline. Router(config)#hostnamewanhe1 IP- OK?Method YES administrativelydown YES administrativelydown注：注：status和protocol分别表示物理端口状态数据链路层状态。默认情况下，路wanhe1#configureterminalEnterconfigurationcommands,oneperline. wanhe1(config)#interfaceserial0wanhe1(config-if)#no wanhe1(config-wanhe1#showipinterface IP- OK?Method YESYES虽然我们再端口下使用了noshutdown令，但是端口状态依然还是down，现实中到2号线路。Router#showipinterfaceIP-OK?MethodYES administrativelyYES wanhe1wanhe1serial0端口为“管理员性关闭”Router#confEnterconfigurationcommands,oneper Endwithwanhe2(config)#interfaceserial0wanhe2(config-if)#noshutdownwanhe2#showipinterfaceIP-OK?MethodYES YES wanhe2#showcontrollersseriallinestate:cabletype:V.11(X.21)DCEcable,receivedclockratebase0registers=0x3C000000,base1registers=0x3C002000mxt_ds=0x62AD6220,rxringentries=78,txringentries=128rxring=0x5D18580,rxrshadow=0x62619EF8,rx_head=40txring=0x5D18820,txrshadow=0x6261A2CC,tx_head=43,tx_tail=43,wanhe2(config)#ints0wanhe2#showipinterfaceIP-OK?MethodYES YES wanhe1(config)#ints0wanhe1(config-if)#ipaddresswanhe1#showipinterfaceIP-OK?MethodYESmanualYES wanhe2(config)#intserialwanhe2(config-if)#ipaddresswanhe2#Sending5,100-byteICMPEchosto,timeoutis2!!!!!------------成功，不成功则为Successrateis100percent(5/5),round-tripmin/avg/max=40/70/108CDP的相关命令wanhe2#showcdpSendingCDPpacketsevery60secondsSendingaholdtimevalueof180secondsSendingCDPv2advertisementsis wanhe2#showcdpCapabilityCodes:R-Router,T-TransBridge,B-SourceRouteS-Switch,H-Host,I-IGMP,r-DeviceLocaltformPortSerRSerSer Ser0 wanhe2#showcdpentry*DeviceID:wanhe1EntryIPaddress: tform:Cisco2500, Capabilities:RouterSwitchIGMPInterface:Serial0, PortID(outgoingport):Serial0Holdtime:179sec实验要求

实验五 2500文件把路由器的IOSPC wanhe(config)#interfaceethernet0wanhe(config-if)#ipaddresswanhe(config-if)#noshutdown（过程省略wanhe#TypeescapesequencetoSending5,100-byteICMPEchosto,timeoutis2Successrateis100percent(5/5),round-tripmin/avg/max=40/70/108 为wanhe#showTerminal-Serveruptimeis3hours,13minutesSystemreturnedtoROMbypower-onSystemimagefileisflash:c2500-i-l.121-10.binIOS名称wanher#copy 注：flash注：flash：------代表源地址，来自flash。 代表目的地址，去往TFTPSourcefilename[]?c2500-i-l.121-Addressornameofremotehost[]?Destinationfilename[c2500-i-l.121-

实验六路由器的恢 设置为wanhe后，保存配置 在wanhe上的配置：router(config)#hostnamewanhewanhe#copyrunning-configstartup- 保存 2500>o/r router#copystartup-configrunning-wanhe#configureterminalciscowanhe#showX.25software,VersionEthernet/IEEE802.3Serialnetwork32Kbytesofnon-volatileconfiguration16384KbytesofprocessorboardSystemflash(ReadONLY)检查是否存在？修改完后，需要保存配置，否则之前的还是放在配置文件中wanhe(config)#configure-register0x21022600seriesandthelater 2600以及以上系列修改配置寄存器值的 把配置寄存器值修改为 保存配置并重新router#copystartup-configrunning-wanhe#configureterminalciscowanhe#showX.25software,VersionEthernet/IEEE802.3Serialnetwork32Kbytesofnon-volatileconfiguration16384KbytesofprocessorboardSystemflash(ReadONLY)检查是否存在？修改完后，需要保存配置，否则之前的还是放在配置文件中wanhe(config)#configure-register注：不同型号恢复时的参数可能不同具体参考路由器配置手册。

实验七配 NET登在wanhe2上设置和VTY从wanhe1上NET到 设置wanhe2的和线wanhe2(config)#enablesecret wanhe2(config)#linevty0 Last 001516wanhe2(config)#linevty0wanhe2(config-if)#ipaddresswanhe2(config-if)#clockrate64000wanhe2(config-if)#noshutdown设置wanhe1wanhe1(config)#interfaceserialwanhe1(config-if)#ipaddresswanhe1(config-if)#noshutdown netTrying 输入 输wanhe2#show 0con 3vty 00:00:00 Peerlogin的使用Buildingconfiguration...lineconexec-timeout00transportpreferredalltransportoutputalllineaux0transportoutputalllinevty04password!wanhe2#confEnterconfigurationcommands,oneperline. wanhe2(config)#linevty04[Connectiontoclosedbyforeignhost] netTrying 由此得出结论，login的作用是对线路进行检测，如果去掉，则导致直接登陆到路由器上，

实验八静态路由wanhe1wanhe3wanhe3上配置默认路由（使用邻居路由器的下一跳地址wanhe2#Sending5,100-byteICMPEchosto,timeoutis2Successrateis100percent(5/5),round-tripmin/avg/max=32/55/80wanhe2#Sending5,100-byteICMPEchosto,timeoutis2Successrateis100percent(5/5),round-tripmin/avg/max=28/61/120mswanhe1#Sending5,100-byteICMPEchosto,timeoutis2wanhe1#showipGatewayoflastresortisnot /24isdirectlyconnected,wanhe1(config)#iproutewanhe1#shipGatewayoflastresortisnot /24isdirectlyconnected, /24[1/0]viawanhe1#TypeescapesequencetoSending5,100-byteICMPEchosto,timeoutis2问题分析：虽然现在路由表中有路由条目了，但是却没有成功，那是因为我们的命令是基于ICMP协议，到对方的时候，我们使用的是ECHOREQUEST报文，对方收到ECHORELAYwanhe1wanhe3上却没有回来的路径，所以会失败。wanhe3#shipGatewayoflastresortisnot /24isdirectlyconnected,wanhe1#Sending5,100-byteICMPEchosto,timeoutis2wanhe2#shipGatewayoflastresortisnot /24isdirectlyconnected,Serial0 /24isdirectlyconnected,wanhe22个直连网段的条目，当我们从地址。从而说明，路由器需要学习的是非直连网段的路由条目。为了让wanhe1能到wanhe3(config)#iprouteserialwanhe3#shiprouteGatewayoflastresortisnot /24isdirectlyconnected, /24isdirectlyconnected,Serial1wanhe3#TypeescapesequencetoSending5,100-byteICMPEchosto,timeoutis2wanhe3(config)#iproute注：注：80wanhe3#shiprouteGatewayoflastresortistonetworkS/24isdirectlyconnected,Serial1C/24isdirectlyconnected,Serial1S*/0[1/0]via配置为出站接口，度量值为0实验九RIP查看路由表并验证各网段之间的连通性wanhe1(config)#router wanhe1(config-router)#network RIPRIPIP—55RIPwanhe2(config)#routerwanhe2(config-router)#networkwanhe2(config-router)#networkwanhe3(config)#routerwanhe3(config-router)#networkRoutingProtocolis"rip"Sendingupdatesevery30Invalidafter180seconds,holddown180,flushedafterOutgoingupdatefilterlistforallinterfacesisnotsetingupdatefilterlistforallinterfacesisnotRedistributing:Defaultversioncontrol:sendversion1,receiveany TriggeredKey-Serial 1Automaticnetworksummarizationisineffectumpath:4RoutingInformation 注RIP30S发送路由表的拷贝给它的邻居180S这possiblelypossiblelydownpossiblelydown。。wanhe1#shipGatewayoflastresortisnot /24isdirectlyconnected, /24[120/1]via,00:00:15,wanhe1#TypeescapesequencetoSending5,100-byteICMPEchosto,timeoutis2wanhe1wanhe1(config)#interfaceloopbackwanhe1(config-if)#ipaddwanhe1(config-if)#routerripUPwanhe3(config)#interfaceloopbackwanhe3(config-if)#ipaddwanhe3(config-if)#routerripwanhe2#通的现象CEF，，wanhe2#ship /16[120/1]via,00:00:15,[120/1]via,00:00:09, /24isdirectlyconnected,Serial0 /24isdirectlyconnected,注注 然的是24位子网掩码，但是实际的是16位的子网掩码。 wanhe2#debugipRIPprotocoldebuggingison 100:42:23.095:RIP:sendingv1updateto55viaSerial0/0 100:42:23.099:RIP:buildupdate 1 networkmetric 100:42:23.639:RIP:sendingv1updateto55viaSerial0/1 100:42:23.639:RIP:buildupdate 1 networkmetric 100:42:24.559:RIP:receivedv1updatefromon 1 in1 100:42:40.247:RIP:receivedv1updatefromon 1 in1wanhe2#u修改rip版本wanhe1(config)#routerripwanhe1#cleariproute*wanhe2(config)#routerripwanhe2#cleariproute*wanhe3(config)#routerripwanhe3#cleariproute*wanhe2# 100:40:02.111:RIP:sendingv2updatetoviaLoopback0 100:40:02.115:RIP:buildupdate 1 /24via,metric1,tag 1 /24via,metric2,tag 100:40:02.127:RIP:sendingv2updatetoviaSerial0 100:40:02.127:RIP:buildupdate 1 /16via,metric1,tag 100:40:02.143:RIP:ignoredv2packetfrom(sourcedfromoneofour1616wanhe1#uAllpossibledebugginghasbeenturned00:57:11:RIP:receivedv2updatefromonSerial1 /24viain1hops00:57:31:RIP:sendingv2updatetoviaLoopback0()00:57:31:RIP:buildupdateentries /24via,metric2,tag /24via,metric1,tag00:57:31:RIP:sendingv2updatetoviaSerial1()00:57:31:RIP:buildupdateentries /16via,metric1,tag00:57:31:RIP:ignoredv2packetfrom(sourcedfromoneofour16问题分析：两边同时/16的网段，所以wanhe2依然还是一个路由条目对2个出站接口的现象。要解决这样的问题，还需要我们关闭RIP中自动汇总的特性。wanhe1#cleariproutewanhe2#cleariproute*wanhe3#cleariproute*wanhe2#ship/16isvariablysubnetted,3subnets,2 /24[120/1]via,00:00:07,Serial0 /24[120/1]via,00:00:00,C/24isdirectlyconnected,Serial0C/24isdirectlyconnected,Serial1wanhe2#TypeescapesequencetoSending5,100-byteICMPEchosto,timeoutis2wanhe2#Typeescapesequenceto实验十EIGRPwanhe1(config)#routereigrpwanhe2(config)#routereigrpwanhe3(config)#routereigrp查看wanhe2的路由表wanhe2#showiprouteGatewayoflastresortisnotset /16 ]via,00:01:11, /8 ]via,00:01:11, /24isdirectlyconnected,Serial0 /24isdirectlyconnected,注：EIGRP的代号为D，来为为wanhe2#showipprotocolsRoutingProtocolis"eigrp100"OutgoingupdatefilterlistforallinterfacesisnotsetingupdatefilterlistforallinterfacesisnotDefaultnetworksflaggedinoutgoingupdatesDefaultnetworksacceptedfrom ingupdates： )，EIGRPmetricweightK1=1,K2=0,： )，注注：计算EIGRP度量值默认的参数K1带宽K（延迟EIGRPumhopcount ummetricvariance1Redistributing:eigrp100Automaticnetworksummarizationisin/24forSerial0/24forSerial1umpath:4RoutingInformationDistance:internal90externalwanhe2wanhe2#showipeigrpIP-EIGRPneighborsforprocess Hold Seq Cnt112040110315wanhe3#debugippacketIPpacketdebuggingison01:18:51:IP:s=(local),d=0(Serial1),len60,sendingbroad/multicast01:18:52:IP:s=(local),d=0(Loopback0),len60,sendingbroad/multicast01:18:52:IP:s=(Loopback0),d=0,len60,rcvd201:18:53:IP:s=(Serial1),d=0,len60,rcvdwanhe3#u关闭自动汇总（解决路由非连续子网的路由可达性问题wanhe2#showiprouteGatewayoflastresortisnotsetD/16]via,00:14:43,D/8]via,00:14:43, /24isdirectlyconnected,Serial0 /24isdirectlyconnected,在wanhe1上关闭自动汇总wanhe1(config)#routereigrp100wanhe2#shipCodes:C-connected,S-static,I-IGRP,R-RIP,M-,B–BGP，D-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterarea，N1-OSPFNSSAexternaltype1,N2-OSPFNSSAexternaltype2，E1-OSPFexternaltype1,E2-OSPFexternaltype2,E–EGP，i-IS-IS,L1-IS-ISlevel-1,L2-IS-ISlevel-2,ia-IS-ISinterarea，*-candidatedefault,U-per-userstaticroute,o-ODRP-periodicdownloadedstaticrouteGatewayoflastresortisnotset/24issubnetted,4subnetsD]via,00:01:00,D]via,00:01:00,D]via,00:01:00,D]via,00:01:00,D/8]via,00:17:55, /24isdirectlyconnected,Serial0 /24isdirectlyconnected,wanhe1(config)#interfaceserialwanhe1(config-if)#ipsummary-addresseigrp100wanhe2#showip/22issubnetted,1 [90/ ]via,00:01:23,Serial0 /8[90/ ]via,00:21:15,Serial1 /24isdirectlyconnected,Serial0 /24isdirectlyconnected,

实验十一EIGRP由器绞线（10M）和串行线连接(1.544M)相连接路由器wanhe1的配置wanhe1(config)#noipcefwanhe1(config)#interfaceethernet0wanhe1(config-if)#ipaddresswanhe1(config)#interfaceserialwanhe1(config-if)#ipaddresswanhe1(config-if)#noshutdownwanhe1(config-if)#ipaddresswanhe1(config)#routereigrpwanhe1(config-router)#networkwanhe2(config)#noipcefwanhe2(config-if)#ipaddresswanhe2(config-if)#clockrate64000wanhe2(config-if)#noshutdownwanhe2(config)#interfaceethernet0wanhe2(config-if)#ipaddresswanhe2(config)#interfaceloopbackwanhe2(config-if)#ipaddresswanhe2(config)#routereigrpwanhe2(config-router)#networkwanhe1#ship04:24:23:%SYS-5-CONFIG_I:ConfiguredfromconsolebyCodes:C-connected,S-static,I-IGRP,R-RIP,M-,B–BGP，D-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterarea，N1-OSPFNSSAexternaltype1,N2-OSPFNSSAexternaltype2，E1-OSPFexternaltype1,E2-OSPFexternaltype2,E–EGP，i-IS-IS,L1-IS-ISlevel-1,L2-IS-ISlevel-2,ia-IS-ISinterarea，*-candidatedefault,U-per-userstaticroute,o-ODRP-periodicdownloadedstaticrouteGatewayoflastresortisnotset/24issubnetted,1subnets isdirectlyconnected,Loopback0/24issubnetted,1subnets[90/409600]via,00:00:16,/24issubnetted,1 isdirectlyconnected,Ethernet0 /24isdirectlyconnected,Serial0wanhe1#showipeigrpCodes:P-Passive,A-Active,U-Update,Q-Query,R-Reply,r-replyStatus,s-siaStatusP/24,1successors,FDis128256viaConnected,Loopback0P/24,1successors,FDisvia(409600/128256),Ethernet0via /128256),P/24,1successors,FDviaConnected,P/24,1successors,FDis281600viaConnected,Ethernet041serial线的度须要把serial线这个路径加入到路由表中。在EIGRP协议中，有variance（因子值）这个参数，它的含义是把最优路径乘以这个为229万，那41万*5=205万，度量值依然还是小229万的，那serial线这条路径还是加入不到路由表中41万*6=246万，正好大229万，那么我们就6作为wanhe1(config)#routereigrpwanhe1#cleariproute*wanhe1#showiprouteGatewayoflastresortisnotset/24issubnetted,1subnets isdirectlyconnected,Loopback0/24issubnetted,1subnets[90/409600]via,00:00:01, ]via,00:00:01,/24issubnetted,1172.16..0isdirtlyonnted,Ethernt0C 192.168..0/24isdrtlyonnted,Srial0wanhe2(config)#routereigrpwanhe2#cleariproute*wanhe2#shiprouteGatewayoflastresortisnotset/24issubnetted,1subnets[90/409600]via,00:00:01, ]via,00:00:01,/24issubnetted,1 isdirectlyconnected,Loopback0/24issubnetted,1subnets isdirectlyconnected,Ethernet0 /24isdirectlyconnected,Serial0wanhe1#traceroute--------------进行路由Protocol 目的地Sourceaddress 源地NumericdisyTimeoutinsecondsMinimumTimetoLiveumTimetoLivePortNumberTypeescapesequencetoabort.Tracingtherouteto14msec 4msec 4msec84msec 4msec 12msec8

实验十二配置单区域的OSPF用扩展命令，测试用到的连通性wanhe1(config)#routerospfwanhe1(config-router)#network55area wanhe1(config-router)#network wanhe2(config)#routerospfwanhe2(config-router)#network55areawanhe3(config)#routerospfwanhe3(config-router)#network55areawanhe3(config-router)#network55areawanhe1#showip/24issubnetted,1 isdirectlyconnected,/32issubnetted,1 [110/75]via,00:00:59, /24isdirectlyconnected, /24[110/74]via, OSPFO110cost=108wanhe1#debugipospfadjwanhe1(config)#inte002:00:59:%LINK-5-CHANGEDInterfaceEthernet0,changedstatetoadministrativelydown等待接口被管理员性关闭后，再用noshutdown打开02:01:00:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceEthernet0,changedstatetodownwanhe1(config-02:01:05:OSPF:InterfaceEthernet0going02:01:05:OSPF:BuildrouterLSAforarea0,routerID,seq0x02:01:07:%LINK-3-UPDOWN:InterfaceEthernet0,changedstatetoup02:01:08:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceEthernet0,changedstatetoup02:01:12:OSPF:2WayCommunicationtoonEthernet0,state2WAY02:01:12:OSPF:BackupseenEventbeforeWAITtimeronEthernet002:01:12:OSPF:DR/BDRelectiononEthernet002:01:12:OSPF:ElectBDR02:01:12:OSPF:ElectDR02:01:12:OSPF:ElectBDR02:01:12:OSPF:ElectDR DR: BDR:02:01:12:OSPF:SendDBDtoonEthernet0seq0x1513opt0x42flag0x7len02:01:15:OSPF:RcvDBDfromonEthernet0seq0x169Copt0x42flag0x7len32 mtu1500stateEXSTART02:01:15:OSPF:NBRNegotiationDone.Wearethe02:01:15:OSPF:SendDBDtoonEthernet0seq0x169Copt0x42flag0x2len02:01:15:OSPF:RcvDBDfromonEthernet0seq0x169Dopt0x42flag0x3len92 mtu1500stateEXCHANGE02:01:15:OSPF:SendDBDtoonEthernet0seq0x169Dopt0x42flag0x002:01:15:OSPF:Databaserequestto02:01:15:OSPF:sentLSREQpacketto,length02:01:15:OSPF:RcvDBDfromonEthernet0seq0x169Eopt0x42flag0x1len32 mtu1500stateEXCHANGE02:01:15:OSPF:ExchangeDonewithon02:01:15:OSPF:SendDBDtoonEthernet0seq0x169Eopt0x42flag0x0len02:01:15:OSPF:SynchronizedwithonEthernet0,state02:01:15:%OSPF-5-ADJCHG:Process1,NbronEthernet0fromtoFULL,Loading02:01:15:OSPF:BuildrouterLSAforarea0,routerID,seq0xwanhe1#uDOWN---INIT---2WAY---EXSTART---EXCHANGE---LOADING---wanhe1#showipospfNeighborID DeadTime 00:00:39 注：OSPFwanhe2#showipospfNeighbor Dead 问题分析为什么在wanhe1和wanhe2上有DR和BDR的过程，而wanhe2和wanhe3上却没有？我们要了解，对于DR和BDR的，是有条件的，那就是必须是要在多路的链进行，wanhe1和wanhe2是用以太网线，以太网的链路是星型结构，属于多路访问类型，可以参与DR和BDR的，但是wanhe2和wanhe3上使用的是serial线缆，它是属于点到点的专线结构，所以是没有必要参与DR和BDR的的。查看参与OSPF进程的以太网口状态wanhe1#showipospfinterfaceethernet0Ethernet0isup,lineprotocolisupInternetAddress/24,AreaProcessID1,RouterID,NetworkTypeBROADCAST,Cost:10-------------------TransmitDelayis1sec,StateDROTHER,PriorityDesignatedRouter(ID),InterfaceaddressNobackupdesignatedrouteronthisnetworkTimerintervalsconfigured,o10,Dead40,Wait40,Retransmit5oduein00:00:07Index1/1,floodqueuelength0Next0x0(0)/0x0(0)Lastfloodscanlengthis1,umisLastfloodscantimeis0msec,umis8msecNeighborCountis1,Adjacentneighborcountis1Adjacentwithneighbor Suppressofor0neighbor(s)wanhe2#showipospfinterfaceserial1Serial1isup,lineprotocolisupInternetAddress/24,AreaProcessID1,RouterID,NetworkTypePOINT_TO_POINTCost: Serial线缆为点到点类型的TransmitDelayis1sec,StateTimerintervalsconfigured,o10,Dead40,Wait40,Retransmit5oduein00:00:00Index2/2,floodqueuelength0Next0x0(0)/0x0(0)Lastfloodscanlengthis1,umisLastfloodscantimeis0msec,umis0msecNeighborCountis1,Adjacentneighborcountis1AdjacentwithneighborSuppressofor0neighbor(s)

实验十三使用扩展的ACL命做扩展的控制列表， 到wanhe1(config-if)#ipaddresswanhe1(config-if)#noshutdownwanhe2(config)#interfaceserialwanhe2(config-if)#clockratewanhe2(config-if)#ipaddresswanhe2(config-if)#noshutdownwanhe1#Sending5,100-byteICMPEchosto,timeoutis2Successrateis0percentwanhe1(config)#access-list100denyicmpwanhe1(config)#access-list100permitipanyICMP。用反掩码绝对匹配一个源地址。用反掩码绝对匹一个目的地址。ACLExtendedIPaccesslist10010denyicmphosthost20permitipanyanywanhe1(config)#intwanhe1(config-if)#ipaccess-group100wanhe1#Sending5,100-byteICMPEchosto,timeoutis2Successrateis100percent(5/5),round-tripmin/avg/max=24/37/52问题分析：对于ACL的放置位置，我们有以下的原则：扩展ACL放置在靠近源的位置，ExtendedIPaccesslist10010denyicmphosthost20permitipanyany15 问题分析：对于ACL，有个非常重要的特性，他不能过滤本地数据流！也就是说，对于进行过滤，我们需要把ACL设置在对端的wanhe2上wanhe2(config)#access-l100denyicmphosthostwanhe2(config)#access-l100permiticmpanywanhe2(config)#interfaceserial0wanhe2(config-if)#ipaccess-group100inwanhe1#TypeescapesequencetoSending5,100-byteICMPEchosto,timeoutis2Successrateis0percentExtendedIPaccesslist10010denyicmphosthost(11matches)---20permiticmpany

实验十四使用ACLNET应路由器名为:wanhe1、wanhe1S0wanhe2S0端口相连，IP地址如图所示,wanhe2上设置为wanhe，线路为cisco；从wanhe1使用命令测试到wanhe2的连通性，结果可达，但却不可NETwanhe2方法一:使用扩展ACLwanhe2(config)#linevty04wanhe2(config-line)#passwordcisco netUserAccessVerification wanhe2(config)#access-list101denytcphostanyeq23wanhe2(config)#access-list101permitipanyanywanhe2(config-if)#ipaccess-group101inwanhe1#netTrying%Destinationunreachable;gatewayorhostwanhe1#Sending5,100-byteICMPEchosto,timeoutis2Successrateis100percent(5/5),round-tripmin/avg/max=24/156/364了wanhe2(config)#intwanhe2(config-if)#noipaccess-group101 netUserAccessVerification wanhe2(config)#access-list1denyhostwanhe2(config)#access-list1permitwanhe2(config)#linevty04wanhe2(config-line)#access-class1inwanhe1#netTrying%Connectionrefusedbyremote么它的提示是Destinationunreachable;gatewayorhostdown”,23号端口根本不可达。说明的确是到达了23号端口，只不过被了。在实际使用中最好使用扩展的ACL，减少23号端口的负担！

NATwanhe2上完成NAT的基理解静态NAT，动态NAT和PAT的原理wanhe1(config)#interfaceserialwanhe1(config-if)#ipaddresswanhe1(config-if)#ipaddresswanhe1(config-if)#ipaddresssecondarywanhe1(config-if)#noshwanhe2(config)#interfaceserialwanhe2(config-if)#ipaddress54wanhe2(config-if)#noshutdownwanhe2(config-if)#clockratewanhe2(config)#interfaceserialwanhe2(config-if)#ipaddwanhe2(config-if)#noshutdownwanhe2(config-if)#clockrate64000wanhe3(config)#interfaceserialwanhe3(config-if)#ipaddwanhe3(config-if)#noshutdownwanhe3(config-wanhe2(config)#ipnatinsidesourcestatic网络使用的地址。内部全局地址：用来代替一个或多个本地地址的，对外的，向wanhe2(config)#interfaceserialwanhe2(config-if)#intswanhe2#debugipnatIPNATdebuggingisonwanhe1#Sending5,100-byteICMPEchosto,timeoutis2Successrateis0percentwanhe2#showipnatwanhe1(config)#iprouteserialwanhe1#Sending5,100-byteICMPEchosto,timeoutis2Successrateis100percent5/5round-tripmin/avg/max68/74/88mswanhe1#---------------使用扩展。ProtocolTargetIPaddress:DatagramsizeTimeoutinseconds地址来SweeprangeofsizesTypeescapesequencetoSending50,100-byteICMPEchosto,timeoutis2[Resumingconnection2to 00:18:28:NAT*:s=->,d=00:18:28:NAT*:s=,d=->[38]省略wanhe2#showipnatProInsideInsideOutsideOutside---wanhe2(config)#noipnatinsidesourcestatic 若不能删除请执行命令：clearipnattran*wanhe2(config)#access-list1permit55wanhe2(config)#ipnatpoolwanhepwanhe2(config)#ipnatinsidesourcelist1pool3、用wanhe1#TypeescapesequencetoSending5,100-byteICMPEchosto,timeoutis2Successrateis0percentwanhe3(config)#iprouteswanhe3上配置去往wanhe1Repeatcount[5]:50Sending50,100-byteICMPEchosto,timeoutis2!!!!!!!!!!!!!!!------------------通说明路由添加正确[Resumingconnection2to 01:16:55:NAT*:s=->,d=01:16:55:NAT*:s=,d=->省略wanhe2#showipnatProInsideInsideOutsideOutside-------4、用Repeatcount[5]:20DatagramsizeTimeoutinsecondsExtendedcommands[n]:Sourceaddressorinterface:Sending20,100-byteICMPEchosto,timeoutis2seconds:Packetsentwithasourceaddressofip[Resumingconnection2to 01:35:02:NAT*:s=->,d=01:35:02:NAT*:s=,d=->省略wanhe2#showipnatProInsideInsideOutsideOutside--------------5、用Repeatcount[5]:20Extendedcommands[n]:Sending20,100-byteICMPEchosto,timeoutis2seconds:Packetsentwithasourceaddressof[Resumingconnection2to 00:22:02:NAT:translationfailed(A),droppackets=192.16812.300:22:02:NAT:translationfailed(A),droppackets=省略ProInsideInsideOutsideOutside--------------1、清除NAT2、将NAT超时时间改小，让被转换的目标地址能在短时间内得到释放。请wanhe2#clearipnattr*wanhe2#showipnattr[Resumingconnection1to Extendedcommands[n]:ySourceaddressorinterface:Sending5,100-byteICMPEchosto,timeoutis2seconds:Packetsentwithasourceaddressof [Resumingconnection2towanhe2...00:46:21:NAT:s=->,d=00:46:21:NAT*:s=,d=->省略wanhe2#shipnatProInside Inside Outside Outside--- wanhe2(config)#noipnatpoolwanheprefix-lengthwanhe2(config)#ipnatpoolwanheprefix-length24wanhe2(config)#noipnatinsidesourcelist1poolwanhewanhe2(config)#ipnatinsidesourcelist1poolwanhe7、在wanhe1用上wanhe1#TypeescapesequencetoSending5,100-byteICMPEchosto,timeoutis2Successrateis100percent(5/5),round-tripmin/avg/max=68/71/80ms[Resumingconnection2towanhe2...01:01:55:NAT*:s=->,d=01:01:55:NAT*:s=,d=->省略wanhe2#shipnat Insideglobal Insidelocal Outsidelocal Icmp:6:6:6 01:02:55:NAT:expiring()icmp6wanhe2#shipnattranslations查找NAT，表中没有任何的转换条目。8、在wanhe1用上Extendedcommands[n]:ySourceaddressorinterface:Typeescapesequencetoabort.Sending5,100-byteICMPEchosto,timeoutis2seconds:Packetsentwithasourceaddressof[Resumingconnection2to 01:03:37:NAT:s=->,d=01:03:37:NAT*:s=,d=->省略wanhe2#shipnatProInsideInsideOutsideOutsideicmp701:04:37:NAT:expiring()icmp7

完换机IP地址配置，IP地址为50,网关为 实验过程：（以2950交换机为例）Switch#configureterminalwanhe(config)#linevty04wanhe(config-if)#passwordccnp。wanhe(config)#interfacevlanwanhe(config-if)#ipaddress50wanhe(config)#ipdefault-gateway

wanhe(config)#mac-address-tablestatic0010.7a61.1884vlan1interface

实验十七交换码恢1、掌握交换机的恢复原Switch#conftSwitch(config)#lineconsoleSwitch(config-。Switch#copyrunning-configstartup-Destinationfilename[startup-config]?Buildingconfiguration...注：保注：保存配置。起交换机。这次软重起，也可以拔掉交换机电源，然后再接上电源。BaseethernetMACAddress:00:0c:30:51:56:00XmodemfilesystemisavaThesystemhasbeeninterruptedpriortoinitializingtheflashfilesystem. Thefollowingcommandswillinitializetheflashfilesystem,andfinishloadingtheoperatingsystemsoftware:InitializingFlash...省略ParameterBlockFilesystem(pb:)installed,fsid:4switch:load_helperDirectoryof - 3 45private-bytesavai bytesswitch:renameflash:config.text注将启动配置文件改名这样交换机启动时就读不到注将启动配置文件改名这样交换机启动时就读不到config.text。 "flash:/c2950-i6q4l2-mz.121- 省略Switch#showflashDirectoryof Mar011993 3 Mar01199300:04:42c2950-i6q4l2-mz.121- Mar011993 -rwx5Mar01199300:01:20 Switch#renameflash:config.oldflash:config.textSwitch#copyflash:config.textrunning-Destinationfilename[running-1193bytescopiedin1.312secs(909Switch#confSwitch(config)#noenablepassword-----------删除Switch(config)#lineconSwitch(config-line)#nopassword-------------删除控制台的Switch(config-line)#nologin----------------不要求验证Switch(config-Destinationfilename[startup-config]?Switchcon0isnowavailePressRETURNtogetstarted.\

wanhe(config)#interfacefastethernet0/23wanhe(config-if)#switchportmodewanhe(config-if)#switchportport- um1wanhe(config-if)#switchportport-securityviolationMACMAC机都无法接入，需要管理员使用“no