cisco大型（单核心）网络综合实验
【
实验名称
】
大型（单核心）网络综合实验
【
实验原型
】
某大型企业全网建设（采用设备：
RG-R 3662
路由器、
RG-S6806E
多业务万兆核心路由交换机、
RG-S 3550 -12SFP/GT
全千兆三层路由交换机、
RG-S 2126 G / 50G
千兆安全智能堆叠交换机）
【
实验目的
】
在实验室环境根据具体真实网络建设搭建模拟环境进行综合应用实验，指导学员如何规划实施大型企业、校园网络建设规划
【
预备知识
】
交换路由基础，
OSPF
、
802.1qvlan
、
NAT
、
SNMP
、
ACL
访问控制、安全控制等
【
背景描述
】
为了加快并某集团的信息化建设，新的集团企业网将建设一个以集团办公自动化、电子商务、业务综合管理、多媒体视频会议、远程通讯、信息发布及查询为核心，以现代网络技术为依托，技术先进、扩展性强，将集团的各种办公室、多媒体会议室、控制中心的PC机、工作站、终端设备、控制系统用高速计算机网络连接起来，实现内、外沟通的现代化计算机网络系统。该网络系统是日后支持办公自动化、供应链管理以及各应用系统运行的基础设施，为了确保这些关键应用系统的正常运行、安全和发展，系统必须具备如下的特性：
1、采用先进的网络通信技术完成集团企业网的建设，实现各分公司的信息化；
2、在整个企业集团内实现所有部门的办公自动化，提高工作效率和管理服务水平；
3、在整个企业集团内实现资源共享、产品信息共享、实时新闻发布；
4、在整个企业集团内实现财务电算化；
5、在整个企业集团内实现集中式的供应链管理系统和客户服务关系管理系统
建设后的网络拓朴如下：
【
实现功能
】
实现内部网络
VLAN
划分，三层路由功能，并启用
OSPF
路由协议；病毒攻击防护、出口实现
NAT
地址转换，全网采用
starview
进行网络管理。
【
实验拓扑
】
【
实验设备
】
出口设备：
R 2624
路由器
1
台；核心设备：
S68
系列（或
S65/S35
系列设备）
1
台，配置千兆光纤接口
2
块；汇聚设备：
S 3550 -24 2
台，每台配置
1
块千兆光纤接口
；接入设备：
S 2126 G
二层交换机
4
台：
实验
PC
：
8
台；终端用户的默认网关指向各自对应的
vlan
接口的
ip
地址。
【
实验步骤
】
实验配置分为：（以下配置默认在全局配置模式下进行
）。
第一步：网络设备的基本配置；
第二步：
ospf
配置及其测试；
第三步：网络连通性测试；
第四步：
NAT
功能测试四部分
第一步
基本配置
(1) S 2126 G -A1
基本配置
hostname S 2126 G -A1
vlan 1
exit
vlan 10
！划分
vlan10
exit
vlan 20
！划分
vlan10
exit
vlan 30
！划分
vlan10
exit
enable secret level 1 0 star
！设置
telnet
密码
enable secret level 15 0 star
!
设置特权模式密码
interface range fastEthernet 0/1-3
switchport access vlan 10
exit
！将
f0/1
，
f0/2
和
f0/3
划分到
vlan10
里
interface range fastEthernet 0/4-6
switchport access vlan 20
exit
！将
f0/4,f0/5
和
f0/6
划分到
vlan20
里
interface range fastEthernet 0/7-9
switchport access vlan 30
exit
！将
f0/7,f0/8
和
f0/9
划分到
vlan30
里
interface fastEthernet 0/10
switchport mode trunk
exit
！将
f0/10
设置为
trunk
模式
end
S 2126 G -A1#
(2) S 2126 G -A2
基本配置
hostname S 2126 G -A2
vlan 1
exit
vlan 10
exit
vlan 20
exit
vlan 30
exit
enable secret level 1 0 star
enable secret level 15 0 star
!
interface range fastEthernet 0/1-3
switchport access vlan 10
exit
interface range fastEthernet 0/4-6
switchport access vlan 20
exit
interface range fastEthernet 0/7-9
switchport access vlan 30
exit
interface fastEthernet 0/20
switchport mode trunk
exit
end
S 2126 G -A2#
(3) S 2126 G -B1
基本配置
hostname S 2126 G -B1
vlan 1
exit
vlan 50
exit
vlan 60
exit
vlan 70
exit
enable secret level 1 0 star
enable secret level 15 0 star
!
interface range fastEthernet 0/1-3
switchport access vlan 50
exit
interface range fastEthernet 0/4-6
switchport access vlan 60
exit
interface range fastEthernet 0/7-9
switchport access vlan 70
exit
interface fastEthernet 0/10
switchport mode trunk
exit
(4) S 2126 G -B2
基本配置
hostname S 2126 G -B2
vlan 1
exit
vlan 50
exit
vlan 60
exit
vlan 70
exit
enable secret level 1 0 star
enable secret level 15 0 star
!
interface range fastEthernet 0/1-3
switchport access vlan 50
exit
interface range fastEthernet 0/4-6
switchport access vlan 60
exit
interface range fastEthernet 0/7-9
switchport access vlan 70
exit
interface fastEthernet 0/20
switchport mode trunk
exit
(5) S 3550 -24-A
基本配置
hostname S 3550 -24-A
vlan 1
exit
vlan 10
exit
vlan 20
exit
vlan 30
exit
vlan 100
exit
interface FastEthernet 0/1
switchport mode trunk
exit
!
interface FastEthernet 0/10
switchport mode trunk
exit
!
interface FastEthernet 0/20
switchport mode trunk
exit
!
interface Vlan 1
ip address 192.168.0.1 255.255.255.0
no shut
exit
!
为交换机分配管理
ip
地址
interface Vlan 10
ip address 172.16.10.1 255.255.255.0
no shut
exit
!
为
vlan10
分配
ip
地址
interface Vlan 20
ip address 172.16.20.1 255.255.255.0
no shut
exit
!
为
vlan20
分配
ip
地址
interface Vlan 30
ip address 172.16.30.1 255.255.255.0
no shut
exit
!
为
vlan30
分配
ip
地址
interface Vlan 100
ip address 192.168.128.44 255.255.255.248
no shut
exit
!
为
vlan30
分配
ip
地址
(6) S 3550 -24-B
基本配置
hostname S 3550 -24-B
vlan 1
exit
vlan 50
exit
vlan 60
exit
vlan 70
exit
vlan 200
exit
enable secret level 1 0 star
enable secret level 15 0 star
!
interface FastEthernet 0/1
switchport mode trunk
exit
!
interface FastEthernet 0/10
switchport mode trunk
exit
!
interface FastEthernet 0/20
switchport mode trunk
exit
!
interface Vlan 1
ip address 192.168.0.2 255.255.255.0
no shut
exit
!
interface Vlan 50
ip address 172.18.50.1 255.255.255.0
no shut
exit
!
interface Vlan 60
ip address 172.18.60.1 255.255.255.0
no shut
exit
!
interface Vlan 70
ip address 172.18.70.1 255.255.255.0
no shut
exit
!
interface Vlan 200
ip address 192.168.129.44 255.255.255.248
no shut
exit
!
End
(7) S6806E-A
基本配置
hostname S6806E-A
enable secret level 1 0 star
enable secret level 15 0 star
!
interface GigabitEthernet 4/1
switchport mode trunk
exit
!
interface GigabitEthernet 4/2
switchport mode trunk
exit
!
interface GigabitEthernet 4/10
switchport access vlan 300
exit
!
interface Vlan 1
ip address 192.168.0.3 255.255.255.0
no shut
exit
!
interface Vlan 100
ip address 192.168.128.45 255.255.255.248
no shut
exit
!
interface Vlan 200
ip address 192.168.129.45 255.255.255.248
no shut
exit
!
interface Vlan 300
ip address 192.168.86.17 255.255.255.240
no shut
exit
!
End
(8) R 2624 -A
基本配置
hostname R 2624 -A
!
enable password star
!
interface FastEthernet0
ip address 192.168.86.30 255.255.255.240
no shut
ip nat inside
exit
!
interface FastEthernet1
ip address 210.96.100.85 255.255.255.252
no shut
ip nat outside
exit
!
line con 0
line aux 0
line vty 0 4
password star
login
end
第二步
ospf
路由选择协议配置及测试
（
1
）
S 3550 -24-A ospf
路由协议配置
router ospf
!
在路由器上启动
ospf
进程
are a 0.0.0 .0
network 172.16.10.0 255.255.255.0 are a 0.0.0 .0
！指定参与交换
ospf
更新的网络以及这些网络所属的区域
network 172.16.20.0 255.255.255.0 are a 0.0.0 .0
！指定参与交换
ospf
更新的网络以及这些网络所属的区域
network 172.16.30.0 255.255.255.0 are a 0.0.0 .0
！指定参与交换
ospf
更新的网络以及这些网络所属的区域
network 192.168.128.40 255.255.255.248 are a 0.0.0 .0
！指定参与交换
ospf
更新的网络以及这些网络所属的区域
end
（
2
）
S 3550 -24-B ospf
路由协议配置
router ospf
are a 0.0.0 .0
network 172.18.50.0 255.255.255.0 are a 0.0.0 .0
network 172.18.60.0 255.255.255.0 are a 0.0.0 .0
network 172.18.70.0 255.255.255.0 are a 0.0.0 .0
network 192.168.129.40 255.255.255.248 are a 0.0.0 .0
end
（
3
）
S6806E ospf
路由协议配置
router ospf
are a 0.0.0 .0
network 192.168.86.16 255.255.255.240 are a 0.0.0 .0
network 192.168.128.40 255.255.255.248 are a 0.0.0 .0
network 192.168.129.40 255.255.255.248 are a 0.0.0 .0
end
（
4
）
R 2624 -A ospf
路由协议配置
router ospf 1
！启动
ospf
进程并指定本地进程号
network 210.96.100.84 0.0.0 .3 area 0.0.0.0
network 192.168.86.16 0.0.0 .15 area 0.0.0.0
default-information originate always
！不管路由器是否存在缺省路由，总是向其它路由器公告缺省路由
end
（
5
）
ospf
验证
A) S 3550 -24-A# show ip route
！查看
S3550-24-A
路由表，以下路由信息除了直连路由外，都是通过
ospf
学习来的
Type: C - connected, S - static, R - RIP, O - OSPF , IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
Type Destination IP Next hop Interface Distance Metric Status
---- ------------------ --------------- --------- -------- -------- --------
O E2 0.0.0 .0/0 192.168.128.45 VL100 110 1 Active
C 172.16.10.0/24 0.0.0 .0 VL10 0 0 Active
C 172.16.20.0/24 0.0.0 .0 VL20 0 0 Active
C 172.16.30.0/24 0.0.0 .0 VL30 0 0 Active
O 172.18.50.0/24 192.168.128.45 VL100 110 3 Active
O 172.18.60.0/24 192.168.128.45 VL100 110 3 Active
O 172.18.70.0/24 192.168.128.45 VL100 110 3 Active
C 192.168.0.0/24 0.0.0 .0 VL1 0 0 Active
O 192.168.86.16/28 192.168.128.45 VL100 110 2 Active
C 192.168.128.40/29 0.0.0 .0 VL100 0 0 Active
O 192.168.129.40/29 192.168.128.45 VL100 110 2 Active
O 210.96.100.84/30 192.168.128.45 VL100 110 3 Active
S 3550 -24-A# show ip ospf neighbor
！查看
S3550-24-A
的邻居路由器。
Neighbor ID Pri State DeadTime Address Interface
--------------- --- ---------------- -------- --------------- ----------
192.168.129.45 1 full/DR 00:00:32 192.168.128.45 VL100
S 3550 -24-A#
B) S 3550 -24-B# show ip route
！查看
S3550-24-B
路由表，以下路由信息除了直连路由外，都是通过
ospf
学习来的
Type: C - connected, S - static, R - RIP, O - OSPF , IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
Type Destination IP Next hop Interface Distance Metric Status
---- ------------------ --------------- --------- -------- -------- --------
O E2 0.0.0 .0/0 192.168.129.45 VL200 110 1 Active
O 172.16.10.0/24 192.168.129.45 VL200 110 3 Active
O 172.16.20.0/24 192.168.129.45 VL200 110 3 Active
O 172.16.30.0/24 192.168.129.45 VL200 110 3 Active
C 172.18.50.0/24 0.0.0 .0 VL50 0 0 Active
C 172.18.60.0/24 0.0.0 .0 VL60 0 0 Active
C 172.18.70.0/24 0.0.0 .0 VL70 0 0 Active
C 192.168.0.0/24 0.0.0 .0 VL1 0 0 Active
O 192.168.86.16/28 192.168.129.45 VL200 110 2 Active
O 192.168.128.40/29 192.168.129.45 VL200 110 2 Active
C 192.168.129.40/29 0.0.0 .0 VL200 0 0 Active
O 210.96.100.84/30 192.168.129.45 VL200 110 3 Active
S 3550 -24-B#show ip ospf neighbor
！查看
S3550-24-B
的邻居路由器。
Neighbor ID Pri State DeadTime Address Interface
--------------- --- ---------------- -------- --------------- ----------
192.168.129.45 1 full/DR 00:00:35 192.168.129.45 VL200
C) S6806E-A# show ip route
！查看
S6806E-A
路由表，以下路由信息除了直连路由外，都是通过
ospf
学习来的。
Type: C - connected, S - static, R - RIP, B - BGP, P - policy
O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
Type Destination IP Next hop Interface Distance Metric Status
---- ------------------ --------------- --------- -------- -------- --------
O E2 0.0.0 .0/0 192.168.86.30 VL300 110 1 Active
O 172.16.10.0/24 192.168.128.44 VL100 110 2 Active
O 172.16.20.0/24 192.168.128.44 VL100 110 2 Active
O 172.16.30.0/24 192.168.128.44 VL100 110 2 Active
O 172.18.50.0/24 192.168.129.44 VL200 110 2 Active
O 172.18.60.0/24 192.168.129.44 VL200 110 2 Active
O 172.18.70.0/24 192.168.129.44 VL200 110 2 Active
C 192.168.0.0/24 0.0.0 .0 VL1 0 0 Active
C 192.168.86.16/28 0.0.0 .0 VL300 0 0 Active
C 192.168.128.40/29 0.0.0 .0 VL100 0 0 Active
C 192.168.129.40/29 0.0.0 .0 VL200 0 0 Active
O 210.96.100.84/30 192.168.86.30 VL300 110 2 Active
S6806E-A#show ip ospf neighbor
！查看
S6806E-A
的
ospf
邻居
Neighbor ID Pri State DeadTime Address Interface
--------------- --- ---------------- -------- --------------- ----------
210.96.100.85 1 full/BDR 00:00:31 192.168.86.30 VL300
192.168.128.44 1 full/BDR 00:00:30 192.168.128.44 VL100
192.168.129.44 1 full/BDR 00:00:37 192.168.129.44 VL200
S6806E-A#
D) R 2624 -A#show ip route
！查看
R2624-A
路由表
Codes: C - connected, S - static, R - RIP
O - OSPF, IA - OSPF inter area
E1 - OSPF external type 1, E2 - OSPF external type 2
Gateway of last resort is 210.96.100.86 to network 0.0.0 .0
192.168.86.0/28 is subnetted, 1 subnets
C 192.168.86.16 is directly connected, FastEthernet0
172.16.0.0/24 is subnetted, 3 subnets
O 172.16.30.0 [110/3] via 192.168.86.17, 00:43:05, FastEthernet0
O 172.16.20.0 [110/3] via 192.168.86.17, 00:43:05, FastEthernet0
O 172.16.10.0 [110/3] via 192.168.86.17, 00:43:05, FastEthernet0
172.18.0.0/24 is subnetted, 3 subnets
O 172.18.60.0 [110/3] via 192.168.86.17, 00:43:05, FastEthernet0
O 172.18.50.0 [110/3] via 192.168.86.17, 00:43:05, FastEthernet0
O 172.18.70.0 [110/3] via 192.168.86.17, 00:43:05, FastEthernet0
210.96.100.0/30 is subnetted, 1 subnets
C 210.96.100.84 is directly connected, FastEthernet1
192.168.128.0/29 is subnetted, 1 subnets
O 192.168.128.40 [110/2] via 192.168.86.17, 00:43:05, FastEthernet0
192.168.129.0/29 is subnetted, 1 subnets
O 192.168.129.40 [110/2] via 192.168.86.17, 00:43:05, FastEthernet0
S* 0.0.0 .0/0 [1/0] via 210.96.100.86
R 2624 -A#show ip ospf neighbor
！查看
R2624-A
的
ospf
邻居
Neighbor ID Pri State Dead Time Address Interface
192.168.129.45 1 FULL/DR 00:00:36 192.168.86.17 FastEthernet0
R 2624 -A#
第三步
基本连通性测试。包括网络连通性测试和不同
vlan
间用户通信连通性测试
（
1
）网络连通性测试
在
S 2126 G-A1
的
vlan10
内的用户，用户主机
ip
地址为
172.16.10.195/24
，网关为
172.16.10.1
。
D:\>ipconfig
Windows 2 000 IP Configuration
Ethernet adapter
本地连接
:
Connection-specific DNS Suffix . :
IP Address. . . . . . . . . . . . : 172.16.10.195
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 172.16.10.1
！在
vlan10
里，
ip
地址为
172.16.10.195
主机为测试主机
D:\> ping 172.16.10.1
Ping
ing 172.16.10.1 with 32 bytes of data:
Reply from 172.16.10.1: bytes=32 time<10ms TTL=64
Reply from 172.16.10.1: bytes=32 time<10ms TTL=64
！测试到网关的连通性
D:\> ping 172.16.20.1
Ping
ing 172.16.20.1 with 32 bytes of data:
Reply from 172.16.20.1: bytes=32 time<10ms TTL=64
！测试到
S 3550 -24-A vlan20svi
口的连通性
D:\> ping 172.16.30.1
Ping
ing 172.16.30.1 with 32 bytes of data:
Reply from 172.16.30.1: bytes=32 time<10ms TTL=64
！测试到
S 3550 -24-A vlan30svi
口的连通性
D:\> ping 192.168.128.44
Ping
ing 192.168.128.44 with 32 bytes of data:
Reply from 192.168.128.44: bytes=32 time<10ms TTL=64
！测试到
S 3550 -24-A vlan100svi
口的连通性
D:\> ping 192.168.128.45
Ping
ing 192.168.128.45 with 32 bytes of data:
Reply from 192.168.128.45: bytes=32 time=2ms TTL=62
！测试到
S6806E-A vlan100
的
svi
口的连通性
D:\> ping 192.168.129.45
Ping
ing 192.168.129.45 with 32 bytes of data:
Reply from 192.168.129.45: bytes=32 time=1ms TTL=63
！测试到
S6806E-A vlan200
的
svi
口的连通性
D:\> ping 192.168.86.17
Ping
ing 192.168.86.17 with 32 bytes of data:
Reply from 192.168.86.17: bytes=32 time=1ms TTL=63
！测试到
S6806E-A vlan300
的
svi
口的连通性
D:\> ping 192.168.86.30
Ping
ing 192.168.86.30 with 32 bytes of data:
Reply from 192.168.86.30: bytes=32 time<10ms TTL=253
！测试到
R 2624 -A f0
口的连通性
D:\> ping 172.18.50.1
Ping
ing 172.18.50.1 with 32 bytes of data:
Reply from 172.18.50.1: bytes=32 time=1ms TTL=62
Reply from 172.18.50.1: bytes=32 time=2ms TTL=62
！测试到
S 3550 -24-Bvlan50
的
svi
口的连通性
D:\> ping 172.18.60.1
Ping
ing 172.18.60.1 with 32 bytes of data:
Reply from 172.18.60.1: bytes=32 time=1ms TTL=62
！测试到
S 3550 -24-Bvlan60
的
svi
口的连通性
D:\> ping 172.18.70.1
Ping
ing 172.18.70.1 with 32 bytes of data:
Reply from 172.18.70.1: bytes=32 time=1ms TTL=62
！测试到
S 3550 -24-Bvlan 70
的
svi
口的连通性
D:\> ping 192.168.129.44
Ping
ing 192.168.129.44 with 32 bytes of data:
Reply from 192.168.129.44: bytes=32 time<10ms TTL=62
！测试到
S 3550 -24-B vlan 200
的
svi
口的连通性
D:\> ping 210.96.100.85
Ping
ing 210.96.100.85 with 32 bytes of data:
Reply from 210.96.100.85: bytes=32 time=1ms TTL=253
！测试到
R 2624 -A
路由器
F1
口的连通性
（
2
）
vlan
间通信测试。在这里我们只举例测试
vlan50
里用户
172.18.50.195
与
vlan10
里用户
172.16.10.179
通行的连通性，其中主机指向各自的网关。由于不同
vlan
间用户通信测试方法相同，这里我们就举例说明。
D:\>ipconfig
Windows 2 000 IP Configuration
Ethernet adapter
本地连接
:
Connection-specific DNS Suffix . :
IP Address. . . . . . . . . . . . : 172.18.50.195
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 172.18.50.1
D:\> ping 172.18.50.1
Ping
ing 172.18.50.1 with 32 bytes of data:
Reply from 172.18.50.1: bytes=32 time<10ms TTL=64
！
vlan50
用户
172.18.50.195
测试到此网关的连通性
D:\> ping 192.168.86.30
Ping
ing 192.168.86.30 with 32 bytes of data:
Reply from 192.168.86.30: bytes=32 time<10ms TTL=253
！测试到网络的连通性
D:\> ping 172.16.10.179
Ping
ing 172.16.10.179 with 32 bytes of data:
Reply from 172.16.10.179: bytes=32 time<10ms TTL=125
Reply from 172.16.10.179: bytes=32 time<10ms TTL=125
Reply from 172.16.10.179: bytes=32 time<10ms TTL=125
Reply from 172.16.10.179: bytes=32 time<10ms TTL=125
！测试
vlan50
里的用户用户
172.18.50.195
到
vlan10
用户
172.16.10.179
的连通性
第四步
NAT
功能配置及测试。
NAT
功能是通过在
R 2624 -A
上实现的。
(1)
在
R 2624 -A
上配置
NAT
功能
access-list 10 permit any
exit
!
ip nat inside source list 10 interface FastEthernet1 overload
！
interface FastEthernet0
ip nat inside
exit
!
interface FastEthernet1
ip nat outside
exit
!
（
2
）测试
nat
功能。如实验拓扑，在
R 2624 -A F1
口的对端放置
pc
模拟
isp
。通过内部主机
172.18.50.195 ping
此主机
210.96.100.86
，在路由器上调试
nat
，通过查看相关调试信息测试
nat
功能。
R 2624 -A#debug ip nat
NAT events debugging is on
R 2624 -A#debug ip nat detailed
NAT detailed events debugging is on
R 2624 -A#debug ip nat packet
NAT packet flow events debugging is on
R 2624 -A#
！在
R2624-A
上开启
NAT debug
功能
D:\Documents and Settings\Administrator>ipconfig
Windows 2 000 IP Configuration
Ethernet adapter
本地连接
:
Connection-specific DNS Suffix . :
IP Address. . . . . . . . . . . . : 172.18.50.195
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 172.18.50.1
D:\ > ping 210.96.100.86
！客户机访问外部网络主机
Ping
ing 210.96.100.86 with 32 bytes of data:
Reply from 210.96.100.86: bytes=32 time=3ms TTL=125
Reply from 210.96.100.86: bytes=32 time=3ms TTL=125
Reply from 210.96.100.86: bytes=32 time=3ms TTL=125
2624
-A#
IPNAT: I* icmp 210.96.100.85:512 -> 210.96.100.86:512 [5930, 60]
IPNAT: O icmp 210.96.100.86:512 -> 210.96.100.85:512 [21452, 60]
IPNAT: O* icmp 210.96.100.86:512 -> 172.18.50.195:512 [21452, 60]
IPNAT: I icmp 172.18.50.195:512 -> 210.96.100.86:512 [5931, 60]
IPNAT: I* icmp 210.96.100.85:512 -> 210.96.100.86:512 [5931, 60]
IPNAT: O icmp 210.96.100.86:512 -> 210.96.100.85:512 [21453, 60]
IPNAT: O* icmp 210.96.100.86:512 -> 172.18.50.195:512 [21453, 60]
！
NAT
相关信息，可以看到
NAT
成功
【
问题与思考
】
（
1
）理解
NAT
概念和原理；
（
2
）理解
ospf
路由协议原理；
【
参考配置
】
参考配置包括如下清单：
（
1
）
R 2624 -A
参考配置；
（
2
）
S6806E-A
参考配置；
（
3
）
S 3550 -24-A
参考配置；
（
4
）
S 3550 -24-B
参考配置；
（
5
）
S 2126 G -A1
参考配置；
（
6
）
S 2126 G -A2
参考配置；
（
7
）
S 2126 G -B1
参考配置；
（
8
）
S 2126G -B2
参考配置
（1）
R2624-A
参考配置
R 2624 -A(config)#end
R 2624 -A#show run
Building configuration...
Current configuration:
!
version 6.14(2)
!
hostname "R 2624 -A"
!
enable password star
!
!
!
ip subnet-zero
!
!
!
interface FastEthernet0
ip address 192.168.86.30 255.255.255.240
ip nat inside
!
interface FastEthernet1
ip address 210.96.100.85 255.255.255.252
ip nat outside
!
interface FastEthernet2
no ip address
shutdown
!
interface FastEthernet3
no ip address
shutdown
!
interface Serial0
no ip address
!
interface Serial1
no ip address
!
router ospf 1
network 210.96.100.84 0.0.0 .3 area 0.0.0.0
network 192.168.86.16 0.0.0 .15 area 0.0.0.0
default-information originate always
!
ip nat inside source list 10 interface FastEthernet1 overload
ip classless
ip route 0.0.0 .0 0.0.0.0 210.96.100.86
access-list 10 permit any
!
line con 0
line aux 0
line vty 0 4
password star
login
!
End
（2）
S6806E-A
参考配置
S6806E-A#show run
System software version : 2.41(2) Build Sep 19 2005 Rel
Building configuration...
Current configuration : 883 bytes
!
version 1.0
install 4 12sfp/gt
ip routing algorithm CRC32_UPPER
!
hostname S6806E-A
enable secret level 1 5 $2IOrJ%(3LMp]K*.4AxB^"[/QwNq&#Z1
enable secret level 15 5 $2knAxB^3glowNq&4h`@IOrJQimLMp]K
!
interface GigabitEthernet 4/1
switchport mode trunk
!
interface GigabitEthernet 4/2
switchport mode trunk
!
interface GigabitEthernet 4/10
switchport access vlan 300
!
interface Vlan 1
ip address 192.168.0.3 255.255.255.0
!
interface Vlan 100
ip address 192.168.128.45 255.255.255.248
!
interface Vlan 200
ip address 192.168.129.45 255.255.255.248
!
interface Vlan 300
ip address 192.168.86.17 255.255.255.240
!
router ospf
are a 0.0.0 .0
network 192.168.86.16 255.255.255.240 are a 0.0.0 .0
network 192.168.128.40 255.255.255.248 are a 0.0.0 .0
network 192.168.129.40 255.255.255.248 are a 0.0.0 .0
!
snmp-server community star ro
end
（3）
S3550-24-B
参考配置
S 3550 -24-B#show run
Building configuration...
Current configuration : 968 bytes
!
version 1.0
!
hostname S 3550 -24-B
vlan 1
!
vlan 50
!
vlan 60
!
vlan 70
!
vlan 200
!
enable secret level 1 5 $2gkE,1u3dhl&-8U4ein'.tjQfjo+/7R
enable secret level 15 5 $ 2G 1X)sv3>H.Y*T 74C ,tZ[V/QD+S(\W&
!
interface FastEthernet 0/1
switchport mode trunk
!
interface FastEthernet 0/10
switchport mode trunk
!
interface FastEthernet 0/20
switchport mode trunk
!
interface Vlan 1
ip address 192.168.0.2 255.255.255.0
!
interface Vlan 50
ip address 172.18.50.1 255.255.255.0
!
interface Vlan 60
ip address 172.18.60.1 255.255.255.0
!
interface Vlan 70
ip address 172.18.70.1 255.255.255.0
!
interface Vlan 200
ip address 192.168.129.44 255.255.255.248
!
router ospf
are a 0.0.0 .0
network 172.18.50.0 255.255.255.0 are a 0.0.0 .0
network 172.18.60.0 255.255.255.0 are a 0.0.0 .0
network 172.18.70.0 255.255.255.0 are a 0.0.0 .0
network 192.168.129.40 255.255.255.248 are a 0.0.0 .0
!
snmp-server community star rw
end
（4）
S3550-24-A
参考配置
S 3550 -24-A#show run
Building configuration...
Current configuration : 968 bytes
!
version 1.0
!
hostname S 3550 -24-A
vlan 1
!
vlan 10
!
vlan 20
!
vlan 30
!
vlan 100
!
enable secret level 1 5 $29=G1X)3R:>H.Y*4_;C,tZ[Q0<D+S(\
enable secret level 15 5 $21u_;C,3-8U0<D+4.tj9=G1Q/7R:>H.
!
interface FastEthernet 0/1
switchport mode trunk
!
interface FastEthernet 0/10
switchport mode trunk
!
interface FastEthernet 0/20
switchport mode trunk
!
interface Vlan 1
ip address 192.168.0.1 255.255.255.0
!
interface Vlan 10
ip address 172.16.10.1 255.255.255.0
!
interface Vlan 20
ip address 172.16.20.1 255.255.255.0
!
interface Vlan 30
ip address 172.16.30.1 255.255.255.0
!
interface Vlan 100
ip address 192.168.128.44 255.255.255.248
!
router ospf
are a 0.0.0 .0
network 172.16.10.0 255.255.255.0 are a 0.0.0 .0
network 172.16.20.0 255.255.255.0 are a 0.0.0 .0
network 172.16.30.0 255.255.255.0 are a 0.0.0 .0
network 192.168.128.40 255.255.255.248 are a 0.0.0 .0
!
snmp-server community star rw
end
（7）
S 2126G -B1
参考配置
S 2126 G -B1#show run
System software version : 1.61 Build Jun 17 2005 Release
Building configuration...
Current configuration : 800 bytes
!
version 1.0
!
hostname S 2126 G -B1
vlan 1
!
vlan 50
!
vlan 60
!
vlan 70
!
enable secret level 1 5 $29=G1X)3R:>H.Y*4_;C,tZ[Q0<D+S(\
enable secret level 15 5 $2Y*T7+.3tZ[V/,|4S(\W&-/QX)sv'~1
!
interface fastEthernet 0/1
switchport access vlan 50
!
interface fastEthernet 0/2
switchport access vlan 50
!
interface fastEthernet 0/3
switchport access vlan 50
!
interface fastEthernet 0/4
switchport access vlan 60
!
interface fastEthernet 0/5
switchport access vlan 60
!
interface fastEthernet 0/6
switchport access vlan 60
!
interface fastEthernet 0/7
switchport access vlan 70
!
interface fastEthernet 0/8
switchport access vlan 70
!
interface fastEthernet 0/9
switchport access vlan 70
!
interface fastEthernet 0/10
switchport mode trunk
!
end
S 2126G -B1#
（6）
S2126G-B2
参考配置
S 2126G -B2#show run
System software version : 1.61 Build Jun 17 2005 Release
Building configuration...
Current configuration : 800 bytes
!
version 1.0
!
hostname S 2126G -B2
vlan 1
!
vlan 50
!
vlan 60
!
vlan 70
!
enable secret level 1 5 $29=G1X)3R:>H.Y*4_;C,tZ[Q0<D+S(\
enable secret level 15 5 $2Y*T7+.3tZ[V/,|4S(\W&-/QX)sv'~1
!
interface fastEthernet 0/1
switchport access vlan 50
!
interface fastEthernet 0/2
switchport access vlan 50
!
interface fastEthernet 0/3
switchport access vlan 50
!
interface fastEthernet 0/4
switchport access vlan 60
!
interface fastEthernet 0/5
switchport access vlan 60
!
interface fastEthernet 0/6
switchport access vlan 60
!
interface fastEthernet 0/7
switchport access vlan 70
!
interface fastEthernet 0/8
switchport access vlan 70
!
interface fastEthernet 0/9
switchport access vlan 70
!
interface fastEthernet 0/10
switchport mode trunk
!
end
S 2126G -B2#
（7）
S2126G-A1
参考配置
S 2126 G -A1#show run
Building configuration...
Current configuration : 800 bytes
!
version 1.0
!
hostname S 2126 G -A1
vlan 1
!
vlan 10
!
vlan 20
!
vlan 30
!
enable secret level 1 5 $2@IOrJ%3mLMp]K*4nAxB^"[QowNq&#Z
enable secret level 15 5 $2-/-aeh3'~1'dfi4+.t{bckQ,|7zygl
!
interface fastEthernet 0/1
switchport access vlan 10
!
interface fastEthernet 0/2
switchport access vlan 10
!
interface fastEthernet 0/3
switchport access vlan 10
!
interface fastEthernet 0/4
switchport access vlan 20
!
interface fastEthernet 0/5
switchport access vlan 20
!
interface fastEthernet 0/6
switchport access vlan 20
!
interface fastEthernet 0/7
switchport access vlan 30
!
interface fastEthernet 0/8
switchport access vlan 30
!
interface fastEthernet 0/9
switchport access vlan 30
!
interface fastEthernet 0/10
switchport mode trunk
!
end
S 2126 G -A1#
（8）
S2126G-A2
参考配置
S 2126 G -A1#show run
Building configuration...
Current configuration : 800 bytes
!
version 1.0
!
hostname S 2126G -A2
vlan 1
!
vlan 10
!
vlan 20
!
vlan 30
!
enable secret level 1 5 $2@IOrJ%3mLMp]K*4nAxB^"[QowNq&#Z
enable secret level 15 5 $2-/-aeh3'~1'dfi4+.t{bckQ,|7zygl
!
interface fastEthernet 0/1
switchport access vlan 10
!
interface fastEthernet 0/2
switchport access vlan 10
!
interface fastEthernet 0/3
switchport access vlan 10
!
interface fastEthernet 0/4
switchport access vlan 20
!
interface fastEthernet 0/5
switchport access vlan 20
!
interface fastEthernet 0/6
switchport access vlan 20
!
interface fastEthernet 0/7
switchport access vlan 30
!
interface fastEthernet 0/8
switchport access vlan 30
!
interface fastEthernet 0/9
switchport access vlan 30
!
interface fastEthernet 0/10
switchport mode trunk
!
end