實驗五城域網(wǎng)互聯(lián)網(wǎng)絡(luò)綜合實驗【實驗名稱】 城域網(wǎng)互聯(lián)網(wǎng)絡(luò)綜合實驗【實驗原型】某教育城域網(wǎng)全網(wǎng)建立〔采用設(shè)備：RG-WALL1000千兆防火墻、RG-S6810E、RG-S3550-12SFP/GT全千兆三層路由交換機、RG-S2126G/50G千兆平安智能堆疊交換機、RG-R3662模塊化路由器【實驗目的】 在實驗室環(huán)境根據(jù)詳細真實網(wǎng)絡(luò)建立搭建模擬環(huán)境進展綜合應(yīng)用實驗，指導學員如何規(guī)劃施行大型城域網(wǎng)互聯(lián)網(wǎng)絡(luò)建立規(guī)劃【預備知識】 交換路由根底，靜態(tài)路由、路由備份、生成樹協(xié)議、802.1QVlan、Vlan三層路由、NAT、ACL訪問控制、平安控制等【背景描繪】某省現(xiàn)有中學85所，隨著教育信息化的逐步深化，教育城域網(wǎng)的建立成為該“校校通〞工程的重點，同時，教育城域網(wǎng)也成為實現(xiàn)遠程教學、多媒體教學及教學資源共享的關(guān)鍵。 建立教育城域網(wǎng)，該省希望通過網(wǎng)絡(luò)建立教學輔助系統(tǒng)，為課堂教學提供豐富的實時音頻、視頻素材；同時，搭建起遠程交互教學、函授教育課程管理硬件平臺。因此，希望網(wǎng)絡(luò)建成后，不僅要滿足當前的業(yè)務(wù)需求，同時系統(tǒng)還要具備良好的可擴展性，能適應(yīng)將來業(yè)務(wù)的開展和智能晉級。在規(guī)劃方面主要提出了兩個方面的要求： 首先，作為連接全省85所中學的根底網(wǎng)絡(luò)，教育城域網(wǎng)要滿足音頻、視頻等網(wǎng)絡(luò)應(yīng)用。所以需要網(wǎng)絡(luò)提供端到端的效勞質(zhì)量管理保障技術(shù)來實現(xiàn)教育城域網(wǎng)IP、VOD、多媒體數(shù)據(jù)傳輸?shù)葢?yīng)用的網(wǎng)絡(luò)效勞質(zhì)量的保障QoS效勞。對于各地市教育局連接省局要增加2M備份線路。 另外，城域網(wǎng)建立要經(jīng)濟實用，具有較高的性價比，并可以充分滿足將來網(wǎng)絡(luò)承載業(yè)務(wù)的不斷擴大。建立后的網(wǎng)絡(luò)拓樸如下：【實現(xiàn)功能】實現(xiàn)各地市內(nèi)部網(wǎng)絡(luò)VLAN劃分，VLAN三層路由功能；防病毒攻擊防護、防掃描攻擊；出口實現(xiàn)地址轉(zhuǎn)換、與省網(wǎng)核心設(shè)備互聯(lián)互通；各地市之間網(wǎng)絡(luò)互聯(lián)互通；路由備份線路備份；啟用生成樹協(xié)議防止環(huán)路。【實驗拓撲】 【實驗設(shè)備】 核心設(shè)備：S68系列〔或S65/S35系列設(shè)備〕1臺，R3662一臺；接入設(shè)備：S3550-242臺；S2126G二層交換機4臺；R2624四臺；C2635C、C實驗PC：7臺；【實驗步驟】實驗配置分為：〔以下配置默認在全局配置形式下進展〕。第一步：網(wǎng)絡(luò)設(shè)備的根本配置；第二步：NAT配置第三步：備分鏈路配置第四步：ospf配置及其測試；第一步網(wǎng)絡(luò)設(shè)備的根本配置(1)R2624-A根本配置hostname"R2624-A"http://設(shè)置交換機名稱為R2624-A!ipsubnet-zero!!interfaceFastEthernet0ipaddress//配置端口0的IP地址!interfaceFastEthernet3ipaddress192.//配置端口3的IP地址!!linecon0lineaux0linevty04password111//設(shè)置TELNET登陸密碼login!endR2624-B、R2624-C、R2624-D的配置與其類似，在此略過。(2)S6806E根本配置hostnameS6806E//設(shè)置交換機名稱為S6806Evlan1!interfaceFastEthernet0/1noswitchport//設(shè)置端口1為三層端口ipaddress.6255.255.255.252//設(shè)置端口1的IP地址!interfaceFastEthernet0/2noswitchportipaddress.10255.255.255.252//設(shè)置端口2的IP地址!interfaceFastEthernet0/3noswitchportipaddress10.0.0.14255.255.255.252!interfaceFastEthernet0/4noswitchportipaddress.18255.255.255.252//設(shè)置端口4的IP地址!interfaceFastEthernet0/5noswitchportipaddress.21255.255.255.252//設(shè)置端口5的IP地址!(3)R3642-A根本配置hostname"R3642-A"http://設(shè)置交換機名稱為R3642-A!!ipsubnet-zero!!!interfaceFastEthernet0ipaddress//設(shè)置端口0的IP地址!interfaceFastEthernet1//設(shè)置端口1的IP地址!interfaceFastEthernet2//設(shè)置端口2的IP地址!linecon0lineaux0linevty04password111//設(shè)置TELNET登陸密碼login!End第二步NAT配置R2624-A上面的NAT配置interfaceFastEthernet0ipaddressipnatoutside//設(shè)置NAT出口地址，連接外部網(wǎng)絡(luò)!interfaceFastEthernet3ipnatinside//設(shè)置NAT入口地址，連接內(nèi)部網(wǎng)絡(luò)!ipnatinsidesourcelist10interfaceFastEthernet0overload//采取NAPT的方式，即多個內(nèi)部地址復用一個外部IP地址access-list10permitany//設(shè)置本地地址訪問列表第三步設(shè)置備分鏈路在R3642上的配置interfaceFastEthernet1ipospfcost50//設(shè)置OSPF路由鏈路代價!interfaceFastEthernet2ipospfcost50//設(shè)置OSPF路由鏈路代價在R2624C上的配置interfaceFastEthernet1ipospfcost50//設(shè)置OSPF路由鏈路代價在R2624D上的配置interfaceFastEthernet1ipospfcost50//設(shè)置OSPF路由鏈路代價在正常情況下，從R2624-D到R2624-A的路由是：R2624-D#traceroute.5Typeescapesequencetoabort.Tracingtherouteto.51.180msec0msec0msec2.50msec0msec*一共為兩跳。當主鏈路斷開的情況下，會自動采用備分鏈路，其路由變化為：R2624-D#traceroute10.0.0Typeescapesequencetoabort.Tracingtherouteto.51202.198.196.50msec0msec0msec2.210msec0msec0msec3.50msec0msec*R2624-D#從路由器R2624-C也可以看出，正常情況下，它到R2624-A的路由是兩跳R2624-C#traceroute.5Typeescapesequencetoabort.Tracingtherouteto.51.140msec0msec0msec2.54msec0msec*當主鏈路斷開后，從備分鏈路走，路由變?yōu)槿篟2624-C#traceroute.5Typeescapesequencetoabort.Tracingtherouteto.51202.198.196.90msec0msec4msec2.210msec0msec0msec3.50msec0msec*第四步設(shè)置OSPF路由在R2624A上的配置routerospf1//啟用OSPF路由協(xié)議network.00.255.255.255area0//公布本機路由信息R2624-B的配置與其類似，在此略過。在R2624C上的配置routerospf1//啟用OSPF路由協(xié)議network.00.255.255.255area0//公布本機路由信息network202.198.196.0.255area0R2624-D的配置與其類似，在此略過。在S6806E上的配置routerospf//啟用OSPF路由協(xié)議are.0//區(qū)域0network//公布本機路由信息以下是各個設(shè)備的OSPF路由信息：S6806E#shiprouteType:C-connected,S-static,R-RIP,O-OSPF,N1-OSPFNSSAexternaltype1,N2-OSPFNSSAexternaltype2E1-OSPFexternaltype1,E2-OSPFexternaltype2TypeDestinationIPNexthopInterfaceDistanceMetricStatus----------------------------------------------------------------------OE2.0/0.22Fa0/51101ActiveC.4/30.0Fa0/100ActiveC.8/30.0Fa0/200ActiveC.12/30.0Fa0/300ActiveC.16/30.0Fa0/400ActiveC.20/30.0Fa0/500Active.22Fa0/511051Active.13Fa0/311051ActiveS6806E#shipospfneiNeighborIDPri-------------------------------------------------------------------192.168.0.11full/BDR00:00:33.5Fa0/1192.168.0.11full/BDR00:00:32.9Fa0/2192.168.0.11full/DR00:00:38.13Fa0/3192.168.0.11full/DR00:00:30.17Fa0/4202.198.196.91full/BDR00:00:32.22Fa0/5R3642-A#shiprouteCodes:C-connected,S-static,R-RIPO-OSPF,IA-OSPFinterareaE1-OSPFexternaltype1,E2-OSPFexternaltype2Gatewayoflastresortisnotset.0/30issubnetted,5subnetsO.8[110/2]vi.21,00:00:03,FastEthernet0O.12[110/2]vi.21,00:00:03,FastEthernet0O.4[110/2]vi.21,00:00:03,FastEthernet0O.16[110/2]vi.21,00:00:03,FastEthernet0C.20isdirectlyconnected,FastEthernet0202.198.196.0/30issubnetted,2subnetsC202.198.196.8isdirectlyconnected,FastEthernet1C202.198.196.4isdirectlyconnected,FastEthernet2R3642-A#R3642-A#shipospfneiNeighborIDPriStateDeadTimeAddressInterface.211FULL/DR00:00:39.21FastEthernet0192.168.0.11FULL/BDR00:00:38202.198.196.10FastEthernet1192.168.0.11FULL/BDR00:00:39202.198.196.6FastEthernet2R2624-A#shiprouteCodes:C-connected,S-static,R-RIPO-OSPF,IA-OSPFinterareaE1-OSPFexternaltype1,E2-OSPFexternaltype2Gatewayoflastresortis.0/30issubnetted,3subnetsO.8[110/2]vi.6,00:06:24,FastEthernet0C.4isdirectlyconnected,FastEthernet0O.20[110/2]vi.6,00:06:24,FastEthernet0C192.168.0.0/24isdirectlyconnected,FastEthernet3202.198.196.0/30issubnetted,2subnetsO202.198.196.8[110/52]vi.6,00:06:24,FastEthernet0O202.198.196.4[110/52]vi.6,00:06:24,FastEthernet0S*.0/0[1/0]vi.6R2624-A#R2624-A#shipospfneiNeighborIDPriStateDeadTimeAddressInterface.211FULL/DR00:00:37.6FastEthernet0R2624-A#R2624-C#shiprouteCodes:C-connected,S-static,R-RIPO-OSPF,IA-OSPFinterareaE1-OSPFexternaltype1,E2-OSPFexternaltype2Gatewayoflastresortis.0/30issubnetted,4subnetsO.8[110/2]vi.14,00:04:02,FastEthernet0C.12isdirectlyconnected,FastEthernet0O.4[110/2]vi.14,00:04:02,FastEthernet0O.20[110/2]vi.14,00:04:02,FastEthernet0C192.168.0.0/24isdirectlyconnected,FastEthernet3202.198.196.0/30issubnetted,2subnetsC202.198.196.8isdirectlyconnected,FastEthernet1O202.198.196.4[110/52]vi.14,00:04:02,FastEthernet0S*.0/0[1/0]vi.14R2624-C#shipospfneiNeighborIDPriStateDeadTimeAddressInterface.211FULL/BDR00:00:38.14FastEthernet0202.198.196.91FULL/DR00:00:39202.198.196.9FastEthernet1R2624-C#【問題與考慮】熟悉NAT的原理熟悉OSPF路由協(xié)議原理【參考配置】R2624-A的參考配置R2624-A#shrunBuildingconfiguration...Currentconfiguration:!version6.14(2)!hostname"R2624-A"!enablepassword111!!!ipsubnet-zero!!!interfaceFastEthernet0ipaddressipnatoutside!interfaceFastEthernet1noipaddressshutdown!interfaceFastEthernet2noipaddressshutdown!interfaceFastEthernet3ipnatinside!interfaceSerial0noipaddressshutdown!interfaceSerial1noipaddressshutdown!routerospf1network.00.255.255.255area0!ipnatinsidesourcelist10interfaceFastEthernet0overloadipclasslessiprouteaccess-list10permitany!linecon0lineaux0linevty04password111login!endR2624-B的參考配置R2624-B#R2624-B#shrunBuildingconfiguration...Currentconfiguration:!!hostname"R2624-B"!enablepassword111!!!ipsubnet-zero!!!interfaceFastEthernet0ipaddressipnatoutside!interfaceFastEthernet1noipaddressshutdown!interfaceFastEthernet2noipaddressshutdown!interfaceFastEthernet3ipnatinside!interfaceSerial0noipaddressshutdown!interfaceSerial1noipaddressshutdown!routerospf1network.00.255.255.255area0!ipnatinsidesourcelist10interfaceFastEthernet0overloadipclasslessiprouteaccess-list10permitany!linecon0line18lineaux0linevty04password111login!endR2624-C的參考配置R2624-C#R2624-C#shrunBuildingconfiguration...Currentconfiguration:!version6.14(2)!hostname"R2624-C"!enablepassword111!!!ipsubnet-zero!!!interfaceFastEthernet0ipaddressipnatoutside!interfaceFastEthernet1ipospfcost50!interfaceFastEthernet2noipaddressshutdown!interfaceFastEthernet3ipnatinside!interfaceSerial0noipaddressshutdown!interfaceSerial1noipaddressshutdown!routerospf1network.00.255.255.255area0network202.198.196.0.255area0!ipnatinsidesourcelist10interfaceFastEthernet0overloadipclasslessiprouteaccess-list10permitany!linecon0lineaux0linevty04password111login!endR2624-D的參考配置R2624-D#shrunBuildingconfiguration...Currentconfiguration:!version6.14(2)!hostname"R2624-D"!aaanew-modelenablepassword111!!!ipsubnet-zero!!!interfaceFastEthernet0ipaddressipnatoutside!interfaceFastEthernet1ipospfcost50!interfaceFastEthernet2noipaddressshutdown!interfaceFastEthernet3ipnatinside!interfaceSerial0noipaddressshutdown!interfaceSerial1noipaddressshutdown!!routerospf1network.00.255.255.255area0network202.198.196.0.255area0!ipnatinsidesourcelist10interfaceFastEthernet0overloadipclasslessiprouteaccess-list10permitany!linecon0lineaux0linevty04password111!endR3642A的參考配置R3642-A#R3642-A#shrunBuildingcon