攻城狮cisco ccna实验手册一路由器的基令操作

实验一路由器的基本命令操作host enablepassword 设置enablesecret linevty04pass intfaipadd19 no bannermotdetoccna intdescthisisaserial copyrunning-config 实验 CDP命令操confhost enablepassword 设置enablesecret linevty04pass intipadd clockrate56000noshutConfhost enablepassword 设置enablesecret linevty04pass int ipaddclockrate56000noshutipaddconfhost enablepassword 设置enablesecret linevty04pass int ipaddshowcdp show 显示CDPshowcdp 显示CDPshowcdpentry* showcdpentryWORD(路由器名) 显示该路由器的所有信息un 关闭所有DEBUG信(config)#cdp showcdp (端口 clearcdp debugcdp A(config-if)#ipadd 添加e0口的IP 打开e0 A(config-if)#ipadd 添加s0口的IP RouterRouter#conftRouter(config)#hostB B(config-if)#ipadd 添加e0口的IP 打开e0 B(config-if)#ipadd 添加s1口的IP 打开s1口B(config)#iproute PC ip PC ip netmask defaultgetway实验四：静态路由、缺省路由的配Router#conftRouter(config)#hostR1R1(config)#inte0R1(config-if)#noshut R2(config)#intR2(config-if)#ipaddR2config)#iproute R2config)#iproute Router#conft R3config-if)#ipadd ( R3config)#int R3(config-if)#ipadd R3(config-if)#no 打开s1口R3config)#iproute

实验五 动态路由的配灵活掌握RIP的动态路由的配置。Router#conftRouter(config)#hostr1r1(config)#inte0

r1(config-if)#ipaddr1(config-if)#noshutdownr1(config)#intr1(config-if)#ipaddr1(config-if)#noshutdownr1(config-if)#noshutdownr1(config)#routerripr1(config-router)#netr1#showipCodes:C-connected,S-static,I-IGRP,R-RIP,M ,B-D-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterareaE1-OSPFexternaltype1,E2-OSPFexternaltype2,E-EGPi-IS-IS,L1-IS-ISlevel-1,L2-IS-ISlevel-2,*-candidatedefaultU-per-userstaticrouteGatewayoflastresortisnot /24isdirectlyconnected,Ethernet0 /24isdirectlyconnected,Serial0RIP协议启用后的路由表r1#showipCodes:C-connected,S-static,I-IGRP,R-RIP,M-,B-D-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterareaE1-OSPFexternaltype1,E2-OSPFexternaltype2,E-EGPi-IS-IS,L1-IS-ISlevel-1,L2-IS-ISlevel-2,*-candidatedefaultU-per-userstaticrouteGatewayoflastresortisnot /24isdirectlyconnected,Ethernet0 /24isdirectlyconnected,Serial0 /24[120/1]via,00:01:37,Serial0 /24[120/1]via,00:07:21,Serial0 /24[120/2]via,00:05:21,Serial0Router#conftRouter(config)#hostr2r2(config)#ints1r2(config-if)#ipaddr2(config-if)#noshutdownr2(config)#intr2(config-if)#ipaddr2(config-if)#ipaddr2(config-if)#noshutdownr2(config)#inte0r2(config-if)#ipaddr2(config-if)#noshutdownr2(config)#routerripr2(config-router)#netr2#showipCodes:C-connected,S-static,I-IGRP,R-RIP,M ,B-D-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterareaE1-OSPFexternaltype1,E2-OSPFexternaltype2,E-EGPi-IS-IS,L1-IS-ISlevel-1,L2-IS-ISlevel-2,*-candidatedefaultU-per-userstaticrouteGatewayoflastresortisnot /24isdirectlyconnected, /24isdirectlyconnected,Ethernet0 /24isdirectlyconnected,Serial0 /24[120/1]via,00:09:13,Serial1 /24[120/1]via,00:09:13,Router#conftRouter(config-if)#ipaddRouter(config-if)#noshutdownRouter(config-if)#ipaddRouter(config-if)#noshutdownRouter(config)#hostr3r3(config)#routerripr3(config-router)#netr3#showipCodes:C-connected,S-static,I-IGRP,R-RIP,M ,B-D-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterareaE1-OSPFexternaltype1,E2-OSPFexternaltype2,E-EGPi-IS-IS,L1-IS-ISlevel-1,L2-IS-ISlevel-2,*-candidatedefaultU-per-userstaticrouteGatewayoflastresortisnot /24isdirectlyconnected, /24isdirectlyconnected, /24[120/1]via,00:05:32,Serial1 /24[120/1]via,00:08:19,Serial1 /24[120/1]via,00:05:32,Serial1ProtocolTargetIPaddress:Repeatcount[5]:DatagramsizeTimeoutinsecondsExtendedcommandsTypeescapesequencetoSending5,100-byteICMPEchosto,timeoutis2Successrateis100percent5/5round-tripmin/avg/max1/2/4msPC上的配置为：PC1：IP网关：PC2：IP网关：PC3：IP实验6路由器的简单配 一．实验目的环回口的正确配置4）Consol口日志的同步启用5）Consol口日志的级别设定拓扑分析： S0/1路由R1配置如下：Router> Routerconf Routerhost R1configint R1(config-if)#ipadd R1(config-if)#exitR1(config)#intR1(config-if)#ipaddR1(config-if)#exitR1(config)#intR1(config-if)#ipadd R1#configR1configint R1config-ifipadd R1config-ifclockrate R1config-ifno R1configrouter R1config-routernet R1(config-router)#netR1(config-router)#netR1(config-router)#^ZR1showip Router>enRouter#configtRouter(config)#hostR2R2(config-if)#ints0/1R2(config-if)#ipaddR2(config-if)#noshutR2(config-if)#exitR2(config)#intlo1R2(config-if)#ipaddR2(config-if)#exitR2(config)#routerR2(config-router)#netR2(config-router)#netR2(config-router)#^ZR2#showip三．实验结果由图可见，C代表直连的两个网络。RRIP协议从路由器R1上学习来的3IP。noipclasslessR2上将看不到A10的路由，原因是RIP是有类路由，会在边界R2s0/1A10R1也能四．实验总结DCE端的位置以便在端口配置中设置时钟的位置。在给路由器接口配IP地址时，注意IP的选用，如本实验/30的网络。在实验中经常遇到一些问题，经切身实践我将其总结问题1：在输命令时，经常被CONSOLE口日志打断。解决：CONSOLER2(config)#lineconsoleR2config-line 问题2：想清空端口的先前配置解决：(解决：使用缺省路由。使用命令：R2configiproute 实验七IGRP实验要求路由R1配置如下：Router> Routerconf Routerhost R1configint R1(config-if)#ipadd R1#configR1configint R1config-ifipadd R1config-ifclockrate R1config-ifno R1configrouterigrp R1config-routernet R1(config-router)#netR1(config-router)#netR1(config-router)#variance6 variance值，可以在路径间启用负载平衡，把值设成6的依据是用低速带宽的METRIC值除高速带宽的METRICMETRIC值呢（因路由表缺省只显示最优路由）？把高速带宽的端口禁用，就可看到低速带宽的METRIC值了R1(config)debugipicmp路由器R2配置如下：Router>enRouter#configRouter(config)#hostR2R2(config-if)#ints0R2(config-if)#ipadd R2(config-if)#noshutR2(config-if)#exitR2(config)#intR2(config-if)#ipaddR2(config-if)#exitR2(config)#routerigrp100R2(config-router)#netR2(config-router)#netR2(config-router)#netR2(config-router)#variance6Router(config)debugipicmp三．实验结果：ProtocolTargetIPaddress:Repeatcount[5]:14DatagramsizeTimeoutinsecondsExtendedcommandsSweeprangeofsizesTypeescapesequencetoSending14,100-byteICMPEchosto,timeoutis2Successrateis100percent(14/14),round-tripmin/avg/max=8/14/40ms00:21:18:ICMP:echoreplyrcvd,src,dst00:21:18:ICMP:echoreplyrcvd,src,dst00:21:18:ICMP:echoreplyrcvd,src,dst00:21:18:ICMP:echoreplyrcvd,src,dstProtocolTargetIPaddress:Repeatcount[5]:14DatagramsizeTimeoutinsecondsExtendedcommandsSweeprangeofsizesTypeescapesequencetoSending14,100-byteICMPEchosto,timeoutis2Successrateis100percent(14/14),round-tripmin/avg/max=8/15/44ms00:30:26:ICMP:echoreplyrcvd,src,dst00:30:26:ICMP:echoreplyrcvd,src,dst00:30:26:ICMP:echoreplyrcvd,src,dst00:30:26:ICMP:echoreplyrcvd,src,dstACL.3可以2．的子网只能的FTP服务器和INTERNET(用R2路由器的L01口模拟 S0 S1Router#conftR1(config)#intR1(config-if)#ipaddR1(config-if)#noshutR1(config)#access-list101permitipR1(config)#access-list101permittcp555eqR1(config)#access-list101denyip555R1(config)#intlo2R1(config-if)#ipaddR1(config-if)#ipaccess-group101outR1(config-if)#noshutR1(config-if)#exitR1(config)#access-list1deny55R1(config)#ints0R1(config-if)#ipaddR1(config-if)#clockrate56000R1(config-if)#noR1(config-if)#ipaccess-group1outR1(config-if)#exitR1(config)#routerR1(config-router)#netR1(config-router)#exitRouter#conftR2(config)#intR2(config-if)#ipaddR2(config-if)#clockrate56000R2(config-if)#noshutR2(config-if)#exitR2(config)#intR2(config-if)#ipaddR2(config-if)#noshutR2(config)#routerR2(config-router)#netR2(config-router)#exit R1配置Conftintlo1ipaddInts0IpaddClockrate56000NoshutR2配置ConftInts1IpaddInts0IpaddClockrate56000noshutR3配置Confintlo1ipaddInts1IpaddNoRouterripNetworkRouterNetworkNetworkRouterripNetwork配置完成后,我在路由器模拟器上进行实验,但发现模拟器无论是从R3R1的lo1口还是R1R3的lo1口都能通,我换到R2继续R1的lo1口或是R3的lo1口都能全部通,和崔老师的演示结果不一至,估计是是这个模拟器的软件问题,无法看出实验的真正正确结果:R2R1的lo1口或是R3的lo1口时,发出去的包应该一个能到达一个无法到达,而R3无法通R1的lo1口,而R1也一样通R3的lo1口.原因RIP路由,RIP是有类路由,R1不是同类网段,会进行汇总,R2自己汇总的路由,R2R两个网段,R3也是同样原R2两个网段,这时候R2R1R3同时拥有网段,所以无论是还是会一个包发向R1下一个包就会发向R3,所以会出现一个包通,另一个包不通的结果.就不会向外发,所以无法通.R3无法拼通也是同样的原因.更改R1/R2/R3的各个端口配置IntNoipaddIpaddNoshutNonetworkNetworkIntNoipaddIpaddIntNoipaddIpaddNoshutNonetworkNonetworkNetwokrNetworkIntNoipaddIpaddNoshutnonetworkNetwork结果还是R3的lo1口都不会出现丢包的现象.而R1也能通R3的lo1口,R3同样也能R3lo1口原因总,就不会出现原来的问题,R1不会以为R3的lo1口就在自己网段,R3一样也不会以为R1的lo1口在自己网段,而R2也不会认为R1和R3在同一网段而不知道发给谁了.mobilmobil1、staticrouter(iproutenetwork]subnetwork]ip])2、defaultrouter iproute.0[ip]ipdefault-network3、dynamicrouter(rip)Weneed:configureRIPbetweenR1，R2andR3R1，R2andR3配置RIPconfiguredefaultnetworkinR1,配置默认路由问题：在模拟器中R1的（config）中不能配置default-networkproblem:ican'tconfiguredefault-networkinR1withsimulationPressEntertoStartRouter#confEnterconfigurationcommands,oneperline. Router(config)#hostnameR1 R1(config-if)#ipadd配置ipR1(config-if)#clockrate56000在DCE端配置时钟频率R1(config-if)#noshut %LINK-3-UPDOWN:InterfaceSerial0,changedstatetoup%LINEPROTO-5-UPDOWNLineprotocolonInterfaceSerial0,changedstatetodownR1(config)#inte0 配置Ethernet0R1(config-if)#ipadd %LINK-3-UPDOWN:InterfaceEthernet0,changedstatetoup R1(config-if)#ipadd R1(config-if)#noshut %LINEPROTO-5-UPDOWN:LineprotocolonInterfaceSerial1,changedstatetodown%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceSerial1,changedstatetoup%Invalidinputdetectedat'^'R1#showiprouteCodes:C-connected,S-static,I-IGRP,R-RIP,M-,B-D-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterareaE1-OSPFexternaltype1,E2-OSPFexternaltype2,E-EGPi-IS-IS,L1-IS-ISlevel-1,L2-IS-ISlevel-2,*-candidatedefaultU-per-userstaticrouteGatewayoflastresortisnot /24isdirectlyconnected,Ethernet0 /24isdirectlyconnected,Serial0 /24isdirectlyconnected,R1#confEnterconfigurationcommands,oneperline.EndwithCNTL/Z.R1(config)#routerrip启用rip路由协议R1(config-router)#net设置网段R1(config-router)#net设置网段R1(config-router)#net设置网段R1#showipCodes:C-connected,S-static,I-IGRP,R-RIP,M ,B-D-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterareaE1-OSPFexternaltype1,E2-OSPFexternaltype2,E-EGPi-IS-IS,L1-IS-ISlevel-1,L2-IS-ISlevel-2,*-candidatedefaultU-per-userstaticrouteGatewayoflastresortisnot /24isdirectlyconnected,Ethernet0 /24isdirectlyconnected,Serial0 /24isdirectlyconnected,Serial1R1#confEnterconfigurationcommands,oneperline. EndwithCNTL/Z.R1(config)#ip? Namedaccess-list ConfigureDHCPserverandrelay EnableIPNameSystemhostnametranslation Addanentrytotheiphostnametable HTTPserver Allow'subnetzero'%Invalidinputdetectedat'^'R1#showipCodes:C-connected,S-static,I-IGRP,R-RIP,M-,B-D-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterE1-OSPFexternaltype1,E2-OSPFexternaltype2,E-i-IS-IS,L1-IS-ISlevel-1,L2-IS-ISlevel-2,*-candidatedefaultU-per-userstaticrouteGatewayoflastresortisnot /24isdirectlyconnected,Ethernet0 /24isdirectlyconnected,Serial0 /24isdirectlyconnected,Serial1 /24[120/1]via,00:03:23,Serial0 /24[120/1]via,00:05:41, ConfigureDHCPserverandrelay EnableIP NameSystemhostnametranslation Addanentrytotheiphostnametable HTTPserver Allow'subnetzero'Router#conftEnterconfigurationcommands,oneperline. Router(config)#hostnameR2R2(config-if)#ipadd %LINK-3-UPDOWN:InterfaceSerial1,changedstatetoupR2(config-if)#ipaddR2(config-if)#clockrate56000R2(config-if)#noshut%LINK-3-UPDOWN:InterfaceSerial0,changedstatetoup%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceSerial0,changedstatetodownR2(config)#inte0R2(config-if)#ipaddR2(config-if)#noshut%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceSerial0,changedstatetoupR2#showipCodes:C-connected,S-static,I-IGRP,R-RIP,M ,B-D-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterareaE1-OSPFexternaltype1,E2-OSPFexternaltype2,E-EGPi-IS-IS,L1-IS-ISlevel-1,L2-IS-ISlevel-2,*-candidatedefaultU-per-userstaticrouteGatewayoflastresortisnot /24isdirectlyconnected, /24isdirectlyconnected,Ethernet0 /24isdirectlyconnected,Serial0R2#confEnterconfigurationcommands,oneper Endwith 配置rip由R2(config-router)#netR2#showipCodes:C-connected,S-static,I-IGRP,R-RIP,M-,B-D-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterareaE1-OSPFexternaltype1,E2-OSPFexternaltype2,E-EGPi-IS-IS,L1-IS-ISlevel-1,L2-IS-ISlevel-2,*-candidatedefaultU-per-userstaticrouteGatewayoflastresortisnot /24isdirectlyconnected, /24isdirectlyconnected,Ethernet0 /24isdirectlyconnected,Serial0R2#showipCodes:C-connected,S-static,I-IGRP,R-RIP,M ,B-D-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterareaE1-OSPFexternaltype1,E2-OSPFexternaltype2,E-EGPi-IS-IS,L1-IS-ISlevel-1,L2-IS-ISlevel-2,*-candidatedefaultU-per-userstaticrouteGatewayoflastresortisnot /24isdirectlyconnected, /24isdirectlyconnected,Ethernet0 /24isdirectlyconnected,Serial0R2#showipCodes:C-connected,S-static,I-IGRP,R-RIP,M ,B-D-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterareaE1-OSPFexternaltype1,E2-OSPFexternaltype2,E-EGPi-IS-IS,L1-IS-ISlevel-1,L2-IS-ISlevel-2,*-candidatedefaultU-per-userstaticrouteGatewayoflastresortisnot /24isdirectlyconnected, /24isdirectlyconnected,Ethernet0 /24isdirectlyconnected,Serial0 /24[120/1]via,00:05:41,Serial1 /24[120/1]via,00:02:44,R2#confEnterconfigurationcommands,oneper EndwithR2(config)#iproute R2#showipCodes:C-connected,S-static,I-IGRP,R-RIP,M-,B-D-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterareaE1-OSPFexternaltype1,E2-OSPFexternaltype2,E-EGPi-IS-IS,L1-IS-ISlevel-1,L2-IS-ISlevel-2,*-candidatedefaultU-per-userstaticrouteGatewayoflastresort tonetwork /24isdirectlyconnected, /24isdirectlyconnected, /24isdirectlyconnected, /24[120/1]via,00:09:16,Serial1 /24[120/1]via,00:04:25,Serial1S*/0[1/0]viaR2#TypeescapesequencetoSending5,100-byteICMPEchosto,timeoutis2Successrateis100percent(5/5),round-tripmin/avg/max=1/2/4msR2#%Unrecognizedhostoraddress,orprotocolnotrunning.R2#TypeescapesequencetoSending5,100-byteICMPEchosto,timeoutis2Successrateis100percent(5/5),round-tripmin/avg/max=1/2/4Router#conftEnterconfigurationcommands,oneperline. Router(config)#hostnameR3 R3(config-if)#ipaddR3(config-if)#clockrate56000R3(config-if)#noshut%LINK-3-UPDOWN:InterfaceSerial0,changedstatetoupR3(config-if)#ipaddR3(config-if)#noshut%LINK-3-UPDOWN:InterfaceSerial1,changedstatetoup%SYS-5-CONFIG_I:ConfiguredfromconsolebyconsoleR3#showiproute%Invalidinputdetectedat'^'R3#showipCodes:C-connected,S-static,I-IGRP,R-RIP,M ,B-D-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterareaE1-OSPFexternaltype1,E2-OSPFexternaltype2,E-EGPi-IS-IS,L1-IS-ISlevel-1,L2-IS-ISlevel-2,*-candidatedefaultU-per-userstaticrouteGatewayoflastresortisnot /24isdirectlyconnected,Serial0 /24isdirectlyconnected,R3#confEnterconfigurationcommands,oneper EndwithR3(config)#router R3(config-router)#net%SYS-5-CONFIG_I:ConfiguredfromconsolebyconsoleR3#showiprouteCodes:C-connected,S-static,I-IGRP,R-RIP,M-,B-D-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterareaE1-OSPFexternaltype1,E2-OSPFexternaltype2,E-EGPi-IS-IS,L1-IS-ISlevel-1,L2-IS-ISlevel-2,*-candidatedefaultU-per-userstaticrouteGatewayoflastresortisnot /24isdirectlyconnected,Serial0 /24isdirectlyconnected,R3#TypeescapesequencetoSending5,100-byteICMPEchosto,timeoutis2Successrateis100percent(5/5),round-tripmin/avg/max=1/2/4msR3#TypeescapesequencetoSending5,100-byteICMPEchosto,timeoutis2Successrateis100percent(5/5),round-tripmin/avg/max=1/2/4msR3#TypeescapesequencetoSending5,100-byteICMPEchosto,timeoutis2Successrateis100percent(5/5),round-tripmin/avg/max=1/2/4msR3#TypeescapesequencetoSending5,100-byteICMPEchosto,timeoutis2Successrateis100percent(5/5),round-tripmin/avg/max=1/2/4msR3#TypeescapesequencetoSending5,100-byteICMPEchosto,timeoutis2Successrateis100percent(5/5),round-tripmin/avg/max=1/2/4msR3#showiprouteCodes:C-connected,S-static,I-IGRP,R-RIP,M-,B-D-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterareaE1-OSPFexternaltype1,E2-OSPFexternaltype2,E-EGPi-IS-IS,L1-IS-ISlevel-1,L2-IS-ISlevel-2,*-candidatedefaultU-per-userstaticrouteGatewayoflastresortisnot /24isdirectlyconnected,Serial0 /24isdirectlyconnected,Serial1 /24[120/1]via,00:01:31,Serial1 /24[120/1]via,00:02:42,Serial0 /24[120/1]via,00:07:17,Serial0Router#conftEnterconfigurationcommands,oneperline. Router(config)#hostnameRR(config)#hostnameR4R4(config)#inte1R4(config-if)#ipaddR4(config-if)#noshut%LINK-3-UPDOWN:InterfaceEthernet1,changedstatetoupR4(config-if)#ipaddR4(config-if)#noshut%LINK-3-UPDOWN:InterfaceEthernet0,changedstatetoupR4(config-if)#showiproute%Invalidinputdetectedat'^'R4#showipCodes:C-connected,S-static,I-IGRP,R-RIP,M ,B-D-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterareaE1-OSPFexternaltype1,E2-OSPFexternaltype2,E-EGPi-IS-IS,L1-IS-ISlevel-1,L2-IS-ISlevel-2,*-candidatedefaultU-per-userstaticrouteGatewayoflastresortisnot /24isdirectlyconnected,Ethernet1 /24isdirectlyconnected,R4#confEnterconfigurationcommands,oneperline. R4(config)#iprouteR4#showipCodes:C-connected,S-static,I-IGRP,R-RIP,M ,B-D-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterareaE1-OSPFexternaltype1,E2-OSPFexternaltype2,E-EGPi-IS-IS,L1-IS-ISlevel-1,L2-IS-ISlevel-2,*-candidatedefaultU-per-userstaticrouteGatewayoflastresortistonetwork /24isdirectlyconnected,Ethernet1 /24isdirectlyconnected,Ethernet0S*/0[1/0]viaR4#TypeescapesequencetoSending5,100-byteICMPEchosto,timeoutis2Successrateis0percent(0/5),round-tripmin/avg/max=1/2/4msR4#TypeescapesequencetoSending5,100-byteICMPEchosto,timeoutis2Successrateis100percent(5/5),round-tripmin/avg/max=1/2/4msR4#TypeescapesequencetoSending5,100-byteICMPEchosto,timeoutis2Successrateis0percent(0/5),round-tripmin/avg/max=1/2/4R4#showBuilding!servicetimestampsdebuguptimeservicetimestampsloguptimenoservicepassword-encryption!hostname!!!!!!!interfaceSerial0noipaddressnoipdirected-broadcast!interfaceSerial1noipaddressnoipdirected-!interfaceipaddressnoipdirected-broadcast!interfaceipaddressnoipdirected-broadcast!!ipnoiphttpiproute!!linecontransportinputnonelineaux0linevty0!R4#confEnterconfigurationcommands,oneperline. R4(config)#inte1R4(config-if)#ipaddoverlapswithR4(config-if)#noipaddR4(config-if)#ipaddoverlapswithR4(config-if)#ipaddR4(config-if)#noshutR4(config-if)#ipaddR4(config-if)#noshut实验十一的配外界不能主动发起对内部的，hostRouter路由器的关键配置如下：access-list101permittcpanyanyestablishedinterfacee0(hostRouter路由器右端的端口)ipaccess-group101out要求：重设路由器的ENABLEreload60秒内，按住计算机的ctrl+cctrl+pause键，进入monitor模式) 4:跳过start配置文件 copystartup-configrunning-configenablepasscisco copyrunning-config

实验 ospf协 2、启用认证3、用r2做DR，r3做 4、设r1的cost值为configtinte0ipadd

igtipaddipaddnoshutipadd启用ospf

configrouterospfnetareanet55configrouterospfnetareanet55areaconfigrouterospfnetareanet55arear1：configrouterospfarea0 authenticationmessage-digestinte0ipospfmessage-digest-key1md5ciscor2：configtrouterospfarea0authenticationmessage-digestinte0ipospfmessage-digest-key1md5ciscor3：configtrouterospfarea0 authenticationmessage-digestinte0ipospfmessage-digest-key1md5r2；inte0

ipospfpriority100inte0ipospfpriorityinte0ipospfcost50实验 OSPF(OpenShortestPathFirst)是一个内部网关协议(InteriorGatewayProtocol,IGP)，一个链路状态路由选择协议，用于在单一自治系统(autonomoussystem,AS)内决策路由。OSPF路由器使用这些最短路径构造路由表在默认情况下OSPF不使用区域验证。通过两种方法可启用验证功能，纯文本验证和消息(md5)验证。纯文本验证传送的验证口令为纯文本，它会被网络探测器确定，所以不安全，不建议使用。而消息(md5)验证在传输验证口令前， ipospfmessage-digest-keykeyidmd5了解ospfconfthostint /*进入s0端口 ipadd noshutclockrateipospfmessage-digest-key1md5ciscoint ipadd noshutclockrateipospfmessage-digest-key1md5ciscointipaddrouterospfnet55areanet55areaconfthostint ipadd noshutipospfmessage-digest-key1md5ciscoint ipadd clockrate56000ipospfmessage-digest-key1md5cisconoshutipaddrouteospfiproute routerospfnetareanet55areanetareaconfthostint ipadd noshutipospfmessage-digest-key1md5ciscointipaddrouterospfnetareaconfthostint ipadd noshutipospfmessage-digest-key1md5ciscointipaddnoclockrateipospfmessage-digest-key1md5ciscorouterospfnetareanet55area实验15.IGRPEIGRP的无缝结实验目的：证明IGRP和EIGRPRouter1#conftRouter1(config)#inte0Router1(config-if)#ipaddRouter1(config-if)#noshutRouter2#conftRouter2(config-if)#ipaddRouter2(config-if)#noshutRouter2(config)#intfa0/1Router2(config-if)#ipaddRouter2(config-if)#noshutRouter2(config)#routereigrp100Router3#conftRouter3(config)#inte0Router3(config-if)#ipaddRouter3(config-if)#noshutRouter3(config)#routereigrp100EIGRP路由协议目的：熟悉EIGRP路由协议的使用与工作原理要求：用环回口代替c机设置EP步骤 host enpass int ipaddnoipsummary-addresseigrp200 intlo1ipadd //5个环回口代替pcintipaddintipaddintipaddintipaddroutereigrp net netnetnoauto-summary conftenpassciscointe0/0ipaddintlo1ipaddintipaddintipaddintipaddroutereigrpnetnetnetnoauto-—实验目的

实验十 交换机命二实验要求三具体命令

ipadd ipdefault-getway iphttpserveriphttppost

mac-address-tablestatic interfas0/5

max-mac-count33个口（端口的安全设置 fas shutdown/trap设置安全要求后采取的措施，关闭还是

0/23口关闭/ 附加（其令 mac-address- 显示MAC地址 startup- 实验十八交换机的恢重新设置交换机的ENABLEDirConfEnable dir renameflash:config.text [ Destinationfilename[running-config]?running-configconftenablepassword 试验十九：生成树协议的应用iphttpserveriphttpport[port-num]开启交换机的Web模式。给Vlan1配置IP地址，然后用浏览器交换机，在打开的界面中选择进入交换机图形配置模式。之后选择portconfiguration…conft要求：1.将交换机划成2个VLAN；把后3把路由器的Fa0/0口加入VLAN1，Fa0/1口加入VLAN2仅使路由器的Fa0/0与VLAN1说明：1.本实验须2900交换机一台，2621路由器一台，PC机两将2900交换机的E0/1口与PC1相连，E0/2口与路由器的F0/0相连PC1的IP地址是/24，网关是；PC2的IP地址是/24，网关是；vlandatabase vlan2name2vlan3namevlan4name4intf0/26 switchportaccessvlan2intswitchportaccessvlan2intswitchportaccessvlan2intswitchportaccessvlannoswitchportaccessvlan3e0/11VLAN3vlandatabase novlan3novlan

configtintipaddressnoshutintipaddressno这时接入VLAN1的配置正确的计算机与接入VLAN2的配置正确的计算机可以正常通信，但多浪费路将连接路由器端口Fa0/1与交换机的线断

configtintswitchportmode switchporttrunkencapsulation

configtnoshutintencapsulationisl 将子fa0/0设置为trunk，用ISL封装，划分到noshutintfa0/0.2encapsulationisl2ipaddressno配置

实验 VTP的配两个交换机用FA0/1相连三交换机上的配置confthostvtpmodeservervtpintswitchportmodetrunkswitchporttrunkencapsulationislvlanvlan2namemarketconftvtpvtpintswitchportmodetrunkswitchporttrunkencapsulationisl 交换机上使用SHOWVLAN发现此交换机上已经有SERVER交换VLAN信22公司网络规实验要求：5个部门之间不能互相，但是都可以服务区和Internet。服务区不能访问Internet。Internet不能主动发起内部服务。实验目的：了解vlan的划分；控制列表的设置；trunk的封装； conftinte0/0.1encapsulationislvlan1ipaddnoshutencapsulationislvlanipaddnoshutencapsulationislvlanipaddnoshutencapsulationislvlanipaddnoshutencapsulationislvlanipaddnoshutencapsulationislvlanipaddno

vlandatabasevlan2namevlan2vlan3namevlan3vlan4namevlan4vlan5namevlan5vlan6namevlan6intswitchportaccessvlan2intfa0/3switchportaccessvlan3intfa0/4switchportaccessvlan4intfa0/5switchportaccessvlan5intfa0/6switchportaccessvlan6intfa0/7switchportmodetrunkswitchporttrunkencapsulationisl access-list101denytcp0.0.0255anyestablishedpermittcpanyanyestablishedaccess-list102permitip55access-list103permitip55denyip00.0.255access-list104permitip55denyip55denyip55acces-list105permitip55denyip55denyip55access-list106permitip55denyip55denyip55access-list107permitip55denyip55.1intipaccess-group101ipaccess-group102ininte0/0.2ipaccess-group101ipaccess-group103ininte0/0.3ipaccess-group101ipaccess-group104ininte0/0.4ipaccess-group101ipaccess-group105ininte0/0.5intaccess-group101intaccess-group106ininte0/0.6intaccess-group101intaccess-group107inaccess-list101permit tcp55anyinte/0.1ipaccess-group101access-list102denytcp55access-list102denytcp55access-list102denytcp55access-list102denytcp55access-list102permittcp55anyaccess-list102permittcpanyanyestablishedintipaccess-group102实验二十三NAT(网络地址转换)的超载及PAT（接Ｔ（网络地址转换）的超载的配置来实现多台计算机上网;外界主动ip地址50/24的所有端口时，通过ＰＡＴ（接口且完成全部映射服务;外界主动ip地址为50/24的80端口时，通过ＰＡＴ（接口地址转换，转换到ip地址为0/24的这台计算机上来，并且只映射８０端口的http服一内部因特二：实验过首先对路由器Ｒ进行基本配置Router#conftRouter(config-if)#ipaddRouter(config-if)#ipnatinsideRouter(config-if)#noshutRouter(config-if)#intfa0/0Router(config-if)#ipnatoutsideRouter(config-if)#ipadd50Router(config-if)#noshutRouter(config)#iprouterRouter(config)#ipnatpooloutuser5050netmaskR