1、企業級網絡ip地址規劃與配置企業級網絡ip地址規劃與配置以設計具有三層結構的大型企業級網絡設計為例，完成IP地址的分配、NAT地址轉換、三層網絡拓撲結構等功能，并選擇合適的設備實現該網絡，用模擬器驗證通連性。二、實驗拓撲結構圖與IP規劃so.mTiar.eLid”R3T譏44PC-PTPC9TvL地演PC-PtPC-FTIFCIO屏心空樓4.（模利Peutfli'-OT吊珞工程機陸陽龍SjEh廣PHRcU:-<l3err=r-PT七引4CHCPSERVER二1拓撲實現:ROUTER0為本園區網絡的出口，并在出口處通過NAT轉換來實現與外網的連接，出口網絡地址為

2、1,三臺路由器構成的主路由區域使用RIP動態路由協議，ROUTER1所連為園區網絡服務器群，網段為/24;由于設備限制在此只設置WEB與FTP服務器模擬現實中的服務器群，ROUTER3所連網段為/24Switch。模擬現實中的新交換機，并與switch3做鏈路負載均衡，switch1與switch1之間使用PVLAN技術連接，做到本交換機上VLAN之間的隔離與整體的透傳，Switch3模擬學生機房主交換機，與switch1之間使用兩條普通鏈路,利用端口匯聚技術實現帶寬的增加，并在交換機上連接一臺DHCP服務器實現IP地址的自動分配，DHCP服務器使用w

3、indows2003server附帶的DHCP組建實現，由于設備限制，本次試驗采用架設在VM虛擬機中的windows2003第1頁共15頁server操作系統實現，虛擬機與現實網絡通過橋接網絡通信，wlan部分采用單AP布局，AP型號為NETGEAR,internet接口地址為：54,LAN地址段為/24三、實驗器材：設備名稱設備數量設備作用華為R2501路由器3路由、尋徑華為s2008交換機4服務器2Web服務器/DHCP服務器無線AP(netgear)1構建無線網絡PC機6筆記本（帶無線網卡）2四、配置過程:配置命令：Router。：Quid

4、waysysnamerouter。/重新命名交路由器router0ints0/配置串行鏈路接口第2頁共15頁router0-Serial0ipaddPPP52/配置接口IP地址router0-Serial0link-protocol/鏈路層啟用PPP協議router0-Serial0quitrouter0ints1router0-Serial1ipadd52router0-Serial1link-protocolppprouter0-Serial1quitrouter0rip/啟用RIP協議allr

5、outer0-ripnetwork/發布直連網絡router0-ripquit/設定nat地址池permitsource/設定ACL規permitsourcerouter0nataddress-group1pool1router0acl1router0-acl-2rule則router0-acl-2rule第3頁共15頁router0-acl-2quitrouter0inte0router0-Ethernet0natoutbound1address-grouppooll/增加訪問控制列表和端口關聯rout

6、er0-Ethernet0iproute-s/設置缺省路由router0-Ethernet0natserverglobalftptcp/設置內部FTP服務器router0-Ethernet0natserverglobalwwwtcp/設置內部WWW服務器router0-Ethernet0quitRouter1:<Quidway>syspassword:Quidwaysysnamerouter1router1ints0router1-Serial0ipadd255.255.255

7、.252router1-Serial0link-protocolppprouter1-Serial0clockdteclk1第4頁共15頁router1-Serial0intsirouter1-Serial1ipadd052router1-Serial1link-protocolppprouter1-Serial1inte0router1-Ethernet0ipaddrouter1-Ethernet0quitrouter1riprouter1-ripnetworkallrouter1iproute-s0

8、.0.0.0s0Router3:<Quidway>sysQuidwaysysnamerouter3router3ints0router3-Serial0ipadd52router3-Serial0link-protocolppprouter3-Serial0clockdteclk1router3-Serial0ints1router3-Serial1ipadd52第5頁共15頁router3-Serial1link-protocolppprouter3-Serial1clo

9、ckdteclklrouter3-Serial1inte0router3-Ethernet0ipaddrouter3-Ethernet0quitrouter3riprouter3-ripnetworkallrouter3-riprouter3iproute-ss1Switch0:<Quidway>syspassword:Quidwaysysnameswitch。switch0inte0/1/進入端口視圖switch0-Ethernet0/1portlink-typetrunk/設置端口類型為TRUNKsw

10、itch0-Ethernet0/1porttrunkpermitvlanall/允許通過所有VLANswitch0-Ethernet0/1duplexfull第6頁共15頁/設置工作模式為全雙工switch0-Ethernet0/1speed100/設置速率為100Mbpsswitch0inte0/2switch0-Ethernet0/2portlink-typetrunkswitch0-Ethernet0/2porttrunkpermitvlanallswitch0-Ethernet0/2duplexfull/設置工作模式為全雙工switch0-Ethernet0/2speed100/設置速

11、率為100Mbpsswitch0-Ethernet0/2quitswitch0link-aggreationinte0/1tointe0/2both/設置匯聚連接switch0Switch1:<Quidway>sysQuidwaysysnameswitch1switch1vlan8/配置VLAN信息switch1-vlan8porteth0/1toeth0/4第7頁共15頁/加入端口switch1-vlan8vlan24switch1-vlan24porteth0/5toeth0/8switch1-vlan24quitswitch1vlan23/酉己置isovlanswitch1-

12、vlan23isolate-user-vlanenable/啟用ISOswitch1-vlan23porteth0/9/加入端口switch1-vlan23isolate-user-vlan23secondary824/配置與二層vlan之間關聯信息switch1-vlan23Switch2:<Quidway>sysQuidwaysysnameswitch2switch2vlan4switch1-vlan8porteth0/8switch2-vlan8porteth0/1toeth0/4switch2-vlan8vlan5switch2-vlan24porteth0/5toeth0

13、/8第8頁共15頁switch2-vlan24quitswitch2vlan23switch2-vlan23isolate-user-vlanenableswitch2-vlan23porteth0/9switch2-vlan23isolate-user-vlan23secondary45switch2-vlan23Switch3:<Quidway>syspassword:Quidwaysysnameswitch3switch3inte0/1switch3-Ethernet0/1portlink-typetrunkswitch3-Ethernet0/1porttrunkpermit

14、vlanallswitch3-Ethernet日1duplexfullswitch3-Ethernet0/1speed100switch3-Ethernet0/1inte0/2switch3-Ethernet0/2portlink-typetrunk第9頁共15頁switch3-Ethernet0/2porttrunkpermitvlanallswitch3-Ethernet0/2duplexfullswitch3-Ethernet0/2speed100switch3-Ethernet0/2quitswitch3link-aggreationinte0/1toe0/2bothswitch3in

15、te0/3switch3-Ethernet0/3quitswitch3monitere0/3switch3portmirrorinte0/4tointe0/8AP配置信息圖:Wan信息：第10頁共15頁NETGEARSeiupWirrdH«sicSebmgWircltasSeltingxLopBlockSilesBlockServices1Schedukt-friBilMainierLanceRouterStatusAltothadDw*iE*flaLkupStillingSeipasswordRouterUpgiadeAdu*ict|V4k«lasSaninas.：Pof

16、IForwarding.PonTrlgqodngWANSetupLAMIPSetupCyramicDN£rovftrmajiagitr6Roflg®MiDx,wNEKTWifslonRouftrLan信息:»METGEARraut£-rmcinaer：RaflgeMa-MNEXTWiraileaiRauiiSfnC<nlLjWUIIIl|KVVirelMfSettingsConitnlFlltotknsLogsBlockSheaBlockSarvicoKSd)tdul«E41ndiIMainienancenauteiSi1Hll»

17、;AltaichedDevicMHockopSettingsSetPasswordRotileiUpcjradeAdvanncedWi*«l»wSvtlingwPdflIarwBfdihgFPq11TfiggmringWANSQiupLANIPSetupUynnmicDNSStaticRoute測試和驗證:LANIPSetupILAHTCPrsellfl)iPMdnene,許二一一hP：iiniel叱k加丁，展5，2S5.2hipOteclon(RohisHIKvetoonDisabled二Pusehouimjsducfserwi注ID呵IP也M山領|.I，；-.REndi

18、ngIPAddress_|_.p34一IPfilldrbsisPeiiiceNLinieL1A.Mi南左w配d加DoutfApplyGencelAtHi百其RoscrvnriMi第11頁共15頁R0配置信息：interfaceEihernetflipaddress10.0.30,1255.255,255,0tinterfaceSerial0clockDTECLK1link-protocolpppipaddress172,16,32.252interfaceSeriallclockDTECLK1link-protocolppppppauthenticdtion-mode

19、chappppchapuserbipaddress17246.32,552interfaceSerial2flow-controlnoneasyncmodeprotocollink-protocolpppvquitripnetworkallHore(PressCTRL_Ctobreak)R1配置信息：interfaceEthernetOipaddress255.255.255,0natoutbound1address-grouppoolltinterfaceSerialOlink-protocolpppHDDpaplocal-userflybirdp

20、asswordsimplefhipaddress52interfaceSerialllink-protocol口ddipaddress052finterfaceSerial2flow-controlnoneasyncmodeprotocol1ink-protocolpppquitripnetworkallquit第12頁共15頁R3配置信息：IinterfaceEthernetsipaddress192.168,19.1255,255,255.0!interfaceSeridlBlink-proto

21、colpppipaddress255.255.255,252!interfaceSeriallclockDTECLK1link-proiocolpppipaddress255.255.255252interfaceSerial2flow-controlnone日syncmodeprotocollink-protocolppp!quitripnetworkallR0路由表：routeOJdisiproutRoutingTables:lestinaiion/NaskProto0.0.30/0StaticiklW2RIPWJ21A5072SDirectl©21tS.91/32Direct/8Direct127.0,0.1/32Direct/30Direct/32Direct172.16,32.2/32Direct/30Direct/32Direct/32Direct172,16,32.8/30RIP192.I68.10W21RIP000n0000000000r6u00DIJIP01000000000011Nexthop10.2,145,110.2.145,16811