說(shuō)E-pohui@ESS說(shuō)E-pohui@ESSH3CS3610-MSR20-基本命創(chuàng)建超級(jí)終端基本命創(chuàng)建超級(jí)終端，通過(guò)口進(jìn)入交換機(jī)、路由進(jìn)去后按回車，之后將出現(xiàn)命令行提示符(如<H3C>)##[H3C]sysnamesuper(明文)super(密文)super(明文)super(密文)telnet[RouterA]user-interfacevty0[RouterA-ui-vty0-4]authentication-modepassword[RouterA-ui-vty0-4]userprivilegelevel3[RouterA-ui-vty0-[RouterA]telnetserver#配置端口IP[RouterA]inte##保存,#[RouterA]displaysaved-configuration[RouterA]resetsaved-configuration##TFTP<H3C>tftpIPput|get}<H3C>tftpputstartup.cfg<H3C>tftpgettest.txt//上//下交換機(jī)、路由器基本命#交換機(jī)、路由器基本命#[H3C]intvlan#[H3C]undovlan#VLAN[H3C-vlan10]porte1/0/5toe[H3C-vlan10]porte1/0/8toe1/0/9e1/0/11toe#VLAN[H3C]dis#設(shè)置以太網(wǎng)端口的鏈路類型為T(mén)RUNK#設(shè)置以太網(wǎng)端口的鏈路類型為ACCESS[H3C-Ethernet1/0/1]portaccessvlan10[H3C-Ethernet1/0/1]undoportaccessLoopback[H3C]intloopback#[H3C]iproutes1/0[H3C]undoiproutes1/0#[H3C]iproutes缺省路由和靜態(tài)路缺省路由和靜態(tài)路實(shí)驗(yàn)要由到和的子網(wǎng)實(shí)驗(yàn)步[R1]iproute[R2]iproute[R2]iproute[R3]iproute實(shí)驗(yàn)要使用RIPv1,實(shí)驗(yàn)要使用RIPv1,使各子網(wǎng)間能正常通實(shí)驗(yàn)步實(shí)驗(yàn)要使用實(shí)驗(yàn)要使用RIPv2,使各子網(wǎng)間能正常通實(shí)驗(yàn)步[R1-rip-1]version單區(qū)域?qū)嶒?yàn)要單區(qū)域?qū)嶒?yàn)要實(shí)驗(yàn)步[R2-ospf-1-area-]network[R3-ospf-1-area-]network多區(qū)域?qū)嶒?yàn)要多區(qū)域?qū)嶒?yàn)要R1area0,R3直接相連的兩個(gè)網(wǎng)絡(luò)實(shí)驗(yàn)步[R1]int[R1-LoopBack0]ipadd32[R1-LoopBack0]undoshut[R1-ospf-1-area-]network[R1-ospf-[R2]intl[R2-[R2-[R2-ospf-1-area-[R3]intl[R3-LoopBack0]ipadd32[R3-ospf-1-area-]network[R3-ospf-單臂路實(shí)驗(yàn)要單臂路實(shí)驗(yàn)要實(shí)驗(yàn)步交換[H3C-vlan10]porte1/0/2toe1/0/12[H3C-vlan20]porte1/0/13toe1/0/24[H3C]inte[H3C-Ethernet1/0/1]portlink-type[H3C-Ethernet1/0/1]porttrunkpermitvlanall[H3C-Ethernet1/0/1]porttrunkpvidvlan1[H3C-Ethernet0/0.1]ipadd24[H3C-Ethernet0/0.1]vlan-type[H3C-Ethernet0/0.1]ipadd24[H3C-Ethernet0/0.1]vlan-typedot1qvid10[H3C-Ethernet0/0.1]inte0/0.2R1(config)#inte0/0R1(config-if)#noshutR1(config-subif)#ipaddR1(config-subif)#noshutR1(config-R1(config)#inte0/0.2R1(config-subif)#ipaddR1(config-subif)#noshutR1(config-SW1(config-if)#switchporttrunkencapsulationdot1qSW1(config-if)#switchportmodetrunkSW1(vlan)#vlan10nameqqSW1(vlan)#vlan20nameeeSW1#conftSW1(config-if)#switchportaccessvlan10SW1(config-if)#noshutSW1(config-if)#switchportaccessvlanSW1(config-if)#no三層交換：三層交換：實(shí)現(xiàn)不同VLANPC1在VLAN10,PC2VLAN20開(kāi)啟全局GVRP將以太口E1/0/1TrunkVLAN[Sw1]inte[Sw1-Ethernet1/0/1]portlink-typetrunk[Sw1-Ethernet1/0/1]porttrunkpermitvlanall#在Trunk端口上啟動(dòng)GVRP#[Sw1]vlan20[Sw1]vlan20[Sw1]inte1/0/2[Sw1-Ethernet1/0/2]portaccvlan10VLAN[Sw1]intvlan[Sw1-Vlan-interface10]ipadd24[Sw1-Vlan-interface10]intvlan20[Sw2-Ethernet1/0/1]portlink-typetrunk[Sw2-Ethernet1/0/1]porttrunkpermitvlanallSw1Sw1#vlandataSw1(vlan)#vtpserverSw1(vlan)#vlan10Sw1(vlan)#vlanSw1#conftSw1(config-if)#switchmodetrunkSw1(config-if)#switchtrunkencapdot1qSw1(config-if)#intf0/2Sw1(config-if)#switchaccvlanSw1(config-if)#ipaddSw1(config-if)#noshutSw1(config-if)#ipaddSw1(config-if)#noshutSw1(config-if)#ipaddSw1(config-if)#noshutSw1#copyrunSw2Sw2#vlandataSw2(vlan)#vtpclientSw2#conftSw2(config-if)#switchmodetrunkSw2(config-if)#intf0/2Sw2(config-if)#switchaccvlan20Sw2#copyrun擴(kuò)展訪問(wèn)列擴(kuò)展訪問(wèn)列R2上使用擴(kuò)展訪問(wèn)控制列表使R1telnet到R3,但無(wú)法ping可以ping通地址;其他通過(guò)R102的訪問(wèn)不受影響實(shí)驗(yàn)步[R2]aclnumber 0icmp-type[R2-acl-adv-3000]rulepermittcpsource0destination0destination-porteqtelnet[R2-acl-adv-3000]ruledenyipsource0destinationany[R2-acl-adv-3000]rulepermitipsouranydesany[R2-acl-adv-[R2]ints[R2-R2(config)#access-list100R2(config)#access-list100permiticmphosthostR2(config)#access-list100permittcphosthosteqR2(config)#access-list100denyiphostanyR2(config)#access-list100permitipanyanyR2(config)#ints2/0R2(config-if)#ipaccess-group100實(shí)驗(yàn)要h3c路由器的地址轉(zhuǎn)換功能連接到廣域網(wǎng)。要求該公司能h3c實(shí)驗(yàn)要h3c路由器的地址轉(zhuǎn)換功能連接到廣域網(wǎng)。要求該公司能h3cs1/0internetwww、ftpsmtp服務(wù)，05六個(gè)合法的ip地址。機(jī)至端實(shí)驗(yàn)步#[H3C]natadd101[H3C]aclnumber[H3C-acl-basic-2001]ruledenysource[H3C]aclnumber[H3C-acl-basic-2001]ruledenysource55[H3C]ints[H3C-Serial1/0]natoutbound2001address-group#設(shè)置內(nèi)部ftp[H3C-Serial1/0]natserverprotocoltcpglobal00insideftp[H3C-Serial1/0]natserverprotocoltcpglobal00insidewww[H3C-Serial1/0]natserverprotocoltcpglobal008080insidewww#smtp[H3C-實(shí)驗(yàn)要路由R1實(shí)驗(yàn)要路由R1和路由器R3間通過(guò)其他網(wǎng)絡(luò)相連，運(yùn)IP協(xié)議的似有玩了過(guò)的兩個(gè)網(wǎng)和,通過(guò)在兩臺(tái)路由器之間使簡(jiǎn)歷隧道實(shí)實(shí)驗(yàn)步#Tunnel0[R1]inttrunnel#配置Tunnel封裝模式Tunnel0接口的源地址(R1Serial1/0IP地址)[R1-Tunnel0]sourceTunnel0接口的目的地址(R3Serial1/0IP地址)[R1-Tunnel0]destination#[R1]iproute-statictunnel#Tunnel#Tunnel0[R3]inttrunnel#配置Tunnel封裝模式Tunnel0接口的源地址(R3Serial1/0IP地址)[R3-Tunnel0]sourceTunnel0接口的目的地址(R1Serial1/0IP地址)[R3-Tunnel0]destinatio