静态综合实验

一丶实验要求

1. R6为isp,接口IP地址均为公有地址;该设备只能配置IP地址，之后不能冉对其进行其他任何配置;

2. R1-R5为局域网，私有IP地址192.168.1.0/24，请合理分配;

3. R1，R2，R4，各有两个环回地址，R5，R6各有一个环回地址，所有路由器上环回均代表连接用户的接口;

4. R3下的两台PC通过DHCP自动获取IP地址;

5. 选路最佳，路由表尽量小，避免环路;

6. R1-R5均可以访问R6的环回;

7. R6telnetR5的公有IP地址时，实际登陆到R1上;

8. R4与R5正常通过1000M链路，故障时通过100M链路;

二丶IP规划

将192.168.1.0/24划分

192.168.1.0/27(主干)
192.168.1.32/27(R1)
192.168.1.64/27(R2)
192.168.1.96/27(R3)
192.168.1.128/27(R4)

192.168.1.0/27（主干划分）

192.168.1.0/30
192.168.1.4/30
192.168.1.8/30
192.168.1.12/30
192.168.1.16/30
192.168.1.20/30

192.168.1.32/27(R1）

192.168.1.32/28
192.168.1.48/28

192.168.1.64/27(R2）

192.168.1.64/28
192.168.1.80/28

192.168.1.96/27（R3）

192.168.1.128/27(R4)

192.168.1.128/28
192.168.1.144/28

三丶底层IP配置

R1

<Huawei>SYS?? ?
<Huawei>system-view?
Enter system view, return user view with Ctrl+Z.
[Huawei]SY?? ?
[Huawei]sysname r1
[r1]interface LoopBack 0
[r1-LoopBack0]ip address 192.168.1.33 28
[r1-LoopBack0]q???
[r1]interface LoopBack 1
[r1-LoopBack1]ip address 192.168.1.49 28
[r1-LoopBack1]q
[r1]interface g0/0/0? ?
[r1-GigabitEthernet0/0/0]ip address 192.168.1.1 30
Jan 21 2024 20:31:16-08:00 r1 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP?
on the interface GigabitEthernet0/0/0 has entered the UP state.??
[r1-GigabitEthernet0/0/0]q?
[r1]interface g0/0/1? ?
[r1-GigabitEthernet0/0/1]ip address 192.168.1.9 30
Jan 21 2024 20:31:44-08:00 r1 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP?
on the interface GigabitEthernet0/0/1 has entered the UP state.?

R2

<Huawei>sys?? ?
<Huawei>system-view?
Enter system view, return user view with Ctrl+Z.
[Huawei]sysn?? ?
[Huawei]sysname r2???
[r2]interface LoopBack 0? ?
[r2-LoopBack0]ip address 192.168.1.65 28
[r2-LoopBack0]q?
[r2]interface LoopBack 1?
[r2-LoopBack1]ip address 192.168.1.81 28
[r2-LoopBack1]q?
[r2]interface g0/0/0
[r2-GigabitEthernet0/0/0]ip address 192.168.1.2 30
Jan 21 2024 20:36:07-08:00 r2 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP?
on the interface GigabitEthernet0/0/0 has entered the UP state.?
[r2-GigabitEthernet0/0/0]q
[r2]interface g0/0/1??
[r2-GigabitEthernet0/0/1]ip address 192.168.1.5 30
Jan 21 2024 20:36:21-08:00 r2 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP?
on the interface GigabitEthernet0/0/1 has entered the UP state.?

R3??

<Huawei>system-view?
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname r3
[r3]interface g0/0/0
[r3-GigabitEthernet0/0/0]ip address 192.168.1.10 30
Jan 21 2024 20:39:33-08:00 r3 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP?
on the interface GigabitEthernet0/0/0 has entered the UP state.?
[r3-GigabitEthernet0/0/0]q?
[r3]interface g0/0/1
[r3-GigabitEthernet0/0/1]ip address 192.168.1.13 30
Jan 21 2024 20:40:23-08:00 r3 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP?
on the interface GigabitEthernet0/0/1 has entered the UP state.?
[r3-GigabitEthernet0/0/1]q?
[r3]interface g0/0/2?
[r3-GigabitEthernet0/0/2]ip address 192.168.1.97 27
Jan 21 2024 20:41:12-08:00 r3 %%01IFNET/4/LINK_STATE(l)[2]:The line protocol IP?
on the interface GigabitEthernet0/0/2 has entered the UP state.?

R4

<Huawei>system-view?
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname r4
[r4]interface LoopBack 0??
[r4-LoopBack0]ip address 192.168.1.129 28
[r4-LoopBack0]q??
[r4]interface LoopBack 1?
[r4-LoopBack1]ip address 192.168.1.145 28
[r4-LoopBack1]q??
[r4]interface g0/0/0
[r4-GigabitEthernet0/0/0]ip address 192.168.1.6 30
Jan 21 2024 20:45:55-08:00 r4 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP?
on the interface GigabitEthernet0/0/0 has entered the UP state.?
[r4-GigabitEthernet0/0/0]q? ?
[r4]interface g0/0/1
[r4-GigabitEthernet0/0/1]ip address 192.168.1.14 30
Jan 21 2024 20:46:12-08:00 r4 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP?
on the interface GigabitEthernet0/0/1 has entered the UP state.?
[r4-GigabitEthernet0/0/1]q?
[r4]interface g0/0/2??
[r4-GigabitEthernet0/0/2]ip address 192.168.1.17 30
Jan 21 2024 20:46:36-08:00 r4 %%01IFNET/4/LINK_STATE(l)[2]:The line protocol IP?
on the interface GigabitEthernet0/0/2 has entered the UP state.?
[r4-GigabitEthernet0/0/2]q?
[r4]interface e4/0/0
[r4-Ethernet4/0/0]ip address 192.168.1.21 30
Jan 21 2024 20:47:09-08:00 r4 %%01IFNET/4/LINK_STATE(l)[3]:The line protocol IP?
on the interface Ethernet4/0/0 has entered the UP state.?

R5

<Huawei>system-view?
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname r5?
[r5]interface g0/0/0
[r5-GigabitEthernet0/0/0]ip address 192.168.1.18 30
Jan 21 2024 20:51:48-08:00 r5 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP?
on the interface GigabitEthernet0/0/0 has entered the UP state.?
[r5-GigabitEthernet0/0/0]q?
[r5]interface g0/0/1??
[r5-GigabitEthernet0/0/1]ip address 192.168.1.22 30
Jan 21 2024 20:52:04-08:00 r5 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP?
on the interface GigabitEthernet0/0/1 has entered the UP state.?

[r5]interface g0/0/2
[r5-GigabitEthernet0/0/2]ip address 12.0.0.1 24
Jan 21 2024 20:57:27-08:00 r5 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP?
on the interface GigabitEthernet0/0/2 has entered the UP state.?

R6

<Huawei>sys?? ?
<Huawei>system-view?
Enter system view, return user view with Ctrl+Z.?
[Huawei]sysname ISP? ?
[ISP]interface G0/0/0? ?
[ISP-GigabitEthernet0/0/0]ip?address 12.0.0.2 24?
[ISP]interface LoopBack 0?
[ISP-LoopBack0]ip address 1.1.1.1 24
[ISP]interface G0/0/0??
[ISP-GigabitEthernet0/0/0]IP address?
[ISP-GigabitEthernet0/0/0]IP address 12.0.0.2?24
Jan 21 2024 20:55:23-08:00 ISP %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP
?on the interface GigabitEthernet0/0/0 has entered the UP state.

四丶R3下的两台PC通过DHCP自动获取IP地址;

R3 0/0/2接口下DHCP配置

[r3]DHCP enable?
Info: The operation may take a few seconds. Please wait for a moment.done.
[r3]ip pool panghu
Info: It's successful to create an IP address pool.? ?
[r3-ip-pool-panghu]network 192.168.1.96 mask 27? ??
[r3-ip-pool-panghu]gateway-list 192.168.1.97? ?
[r3-ip-pool-panghu]dns-list 114.114.114.114 8.8.8.8
[r3-ip-pool-panghu]q
[r3]interface g0/0/2
[r3-GigabitEthernet0/0/2]dhcp select global?

pc获取IP

ipconfig

五丶路由

R1? ?

[r1]ip route-static 192.168.1.64 27 192.168.1.2
[r1]ip route-static 192.168.1.4 30 192.168.1.2
[r1]ip route-static 192.168.1.12 30 192.168.1.10
[r1]ip route-static 192.168.1.96 27 192.168.1.10
[r1]ip route-static 192.168.1.128 27 192.168.1.10
[r1]ip route-static 192.168.1.128 27 192.168.1.2
[r1]ip route-static 192.168.1.16 30 192.168.1.2
[r1]ip route-static 192.168.1.16 30 192.168.1.10

R2

[r2]ip route-static 192.168.1.32 27 192.168.1.1
[r2]ip route-static 192.168.1.8 30 192.168.1.1
[r2]ip route-static 192.168.1.96 27 192.168.1.1
[r2]ip route-static 192.168.1.128 27 192.168.1.6
[r2]ip route-static 192.168.1.12 30 192.168.1.6
[r2]ip route-static 192.168.1.96 27 192.168.1.6
[r2]ip route-static 192.168.1.16 30 192.168.1.6

R3

[r3]ip route-static 192.168.1.32 27 192.168.1.9
[r3]ip route-static 192.168.1.0 30 192.168.1.9
[r3]ip route-static 192.168.1.64 27 192.168.1.9
[r3]ip route-static 192.168.1.64 27 192.168.1.14
[r3]ip route-static 192.168.1.4 30 192.168.1.14
[r3]ip route-static 192.168.1.128 27 192.168.1.14
[r3]ip route-static 192.168.1.16 30 192.168.1.14

R4

[r4]ip route-static 192.168.1.32 27 192.168.1.5
[r4]ip route-static 192.168.1.32 27 192.168.1.13
[r4]ip route-static 192.168.1.8 30 192.168.1.13
[r4]ip route-static 192.168.1.96 27 192.168.1.13
[r4]ip route-static 192.168.1.0 30 192.168.1.5
[r4]ip route-static 192.168.1.64 27 192.168.1.5

R5

[r5]ip route-static 192.168.1.32 27 192.168.1.17
[r5]ip route-static 192.168.1.64 27 192.168.1.17
[r5]ip route-static 192.168.1.96 27 192.168.1.1
[r5]ip route-static 192.168.1.128 27 192.168.1.17
[r5]ip route-static 192.168.1.0 30 192.168.1.17
[r5]ip route-static 192.168.1.4 30 192.168.1.17
[r5]ip route-static 192.168.1.8 30 192.168.1.17
[r5]ip route-static 192.168.1.12 30 192.168.1.17

R1-R5之间测试内网互通

六丶避免环路

在黑洞路由器上，配置一条到达汇总网段的空接口防环路由；

规则：1、转发到空接口的流量将被丢弃

? ? ? ? ? ?2、路由器的匹配路由表规则，为最长匹配? 匹配最精确掩码的路由

R1

[r1]ip route-static 192.168.1.32 27 NULL 0

R2

[r2]ip route-static 192.168.1.64 27 NULL 0

R3

R4

[r4]ip route-static 192.168.1.128 27 NULL 0

六丶全网互通

添加缺省路由

?

NAT一对多由被成为端口地址转换

[r5]acl 2000??
[r5-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255
[r5-acl-basic-2000]q
[r5]interface g0/0/2??
[r5-GigabitEthernet0/0/2]nat outbound 2000

测试R1-R5均可以访问R6的环回;

R1

R2

R3

R4

R5

七丶 R4与R5正常通过1000m链路，故障时通过100M链路;

R4

[r4]ip route-static 0.0.0.0 0 192.168.1.22 preference 61

R5

[r5]ip route-static 192.168.1.0 255.255.255.252 192.168.1.21 pr 61
[r5]
[r5]ip route-static 192.168.1.4 255.255.255.252 192.168.1.21 pr 61
[r5]
[r5]ip route-static 192.168.1.8 255.255.255.252 192.168.1.21 pr 61
[r5]
[r5]ip route-static 192.168.1.12 255.255.255.252 192.168.1.21 pr 61
[r5]
[r5]ip route-static 192.168.1.32 255.255.255.224 192.168.1.21 pr 61
[r5]
[r5]ip route-static 192.168.1.64 255.255.255.224 192.168.1.21 pr 61
[r5]
[r5]ip route-static 192.168.1.96 255.255.255.224 192.168.1.21 pr 61
[r5]
[r5]ip route-static 192.168.1.128 255.255.255.224 192.168.1.21 pr 61

关闭1000M链路

再次测试是否启用100m

八丶R6telnetR5的公有IP地址时，实际登陆到R1上

1.开启R1网络设备的远程登录

[r1]aaa??
[r1-aaa]local-user huawei privilege level 15 password cipher 123456
Info: Add a new user.??
[r1-aaa]local-user huawei service-type telnet?
[r1-aaa]q
[r1]user-interface vty 0 4
[r1-ui-vty0-4]authentication-mode aaa

2.在R5上开启端口映射?

仅将一个公有ip地址的一个端口号，固定和一个私有ip地址的一个端口号进行转换

[r5]interface g0/0/2?

[r5-GigabitEthernet0/0/2]nat server protocol tcp global current-interface 23 ins
ide 192.168.1.1 23
Warning:The port 23 is well-known port. If you continue it may cause function fa
ilure.
Are you sure to continue?[Y/N]:y
[r5-GigabitEthernet0/0/2]

3.使用R6 telnet R5的公有IP地址时，登录到了R1