基于TCPIP的互連網(wǎng)絡CICND10S08A.ppt

第六章 基于TCP/IP的 互連網(wǎng)絡,通過本章的學習，您應該掌握以下內(nèi)容： 了解TCP/IP協(xié)議棧，各個分層的主要功能、IP協(xié)議的應用 掌握IP地址分類，子網(wǎng)掩碼的作用，識別網(wǎng)絡標識號、主機標識號，子網(wǎng)的數(shù)目 學會在路由器的端口正確設置IP地址和子網(wǎng)掩碼 用路由器連接兩個不同的VLAN實現(xiàn)通訊,本章目標,早期的協(xié)議族 全球范圍,TCP/IP介紹,主機,Internet,TCP/IP,主機,TCP/IP 協(xié)議族,7,6,5,4,3,2,5,4,3,2,應用層,表達層,會話層,傳輸層,網(wǎng)絡層,數(shù)據(jù)鏈路層,物理層,1,應用層,傳輸層,Internet層,數(shù)據(jù)鏈路層,物理層,1,應用層概述,* 路由器使用,應用層,傳輸層,Internet層,數(shù)據(jù)鏈路層,物理層,文件傳輸 - TFTP * - FTP * - NFS E-Mail - SMTP 遠程登陸 - Telnet * - rlogin * 網(wǎng)絡管理 - SNMP * 名稱管理 - DNS*,傳輸層概述,Transmission Control Protocol (TCP) User Datagram Protocol (UDP),應用層,傳輸層,Internet層,數(shù)據(jù)鏈路層,物理層,面向連接 非面向連接,TCP 數(shù)據(jù)格式,Source port (16),Destination port (16),Sequence number (32),Header length (4),Acknowledgement number (32),Reserved (6),Code bits (6),Window (16),Checksum (16),Urgent (16),Options (0 or 32 if any),Data (varies),20 Bytes,Bit 0,Bit 15,Bit 16,Bit 31,端口號,TCP,端口號,F T P,傳輸層,T E L N E T,D N S,S N M P,T F T P,S M T P,UDP,應用層,21,23,25,53,69,161,R I P,520,TCP 端口號,源端口,目標端口,Host A,1028,23,SP,DP,Host Z,Telnet Z,目標端口 = 23.,發(fā)送 SYN (seq=100 ctl=SYN),接收 SYN,Host A,Host B,TCP 三次握手,發(fā)送 SYN (seq=100 ctl=SYN),接收 SYN,發(fā)送 SYN, ACK (seq=300 ack=101 ctl=syn,ack),Host A,Host B,接收 SYN,TCP 三次握手,發(fā)送 SYN (seq=100 ctl=SYN),接收 SYN,發(fā)送 SYN, ACK (seq=300 ack=101 ctl=syn,ack),建立會話 (seq=101 ack=301 ctl=ack),Host A,Host B,接收 SYN,TCP 三次握手,TCP 簡單確認,滑動窗口 = 1,發(fā)送方,接收方,TCP 簡單確認,滑動窗口 = 1,發(fā)送方,接收方,發(fā)送 1,接收 1,TCP 簡單確認,滑動窗口 = 1,發(fā)送方,接收方,發(fā)送 1,接收 1,接收 ACK 2,發(fā)送 ACK 2,TCP 簡單確認,滑動窗口 = 1,發(fā)送方,接收方,發(fā)送 1,接收 1,接收 ACK 2,發(fā)送 ACK 2,發(fā)送 2,接收 2,TCP 簡單確認,滑動窗口 = 1,發(fā)送方,接收方,發(fā)送 1,接收 1,接收 ACK 2,發(fā)送 ACK 2,發(fā)送 2,接收 2,接收 ACK 3,發(fā)送 ACK 3,TCP 簡單確認,滑動窗口 = 1,發(fā)送方,接收方,發(fā)送 1,接收 1,接收 ACK 2,發(fā)送 ACK 2,發(fā)送 2,接收 2,接收 ACK 3,發(fā)送 ACK 3,發(fā)送 3,接收 3,滑動窗口 = 1,發(fā)送方,接收方,發(fā)送 1,接收 1,接收 ACK 2,發(fā)送 ACK 2,發(fā)送 2,接收 2,接收 ACK 3,發(fā)送 ACK 3,發(fā)送 3,接收 3,接收 ACK 4,發(fā)送 ACK 4,TCP 簡單確認,TCP 順序號和確認號,源端口,目標端口,順序號 #,確認號 #,Source,Dest.,Seq.,Ack.,1028,23,10,1,我發(fā)送 #10.,TCP 順序號和確認號,我已收到 #10, 現(xiàn)在我需要 #11.,源端口,目標端口,順序號 #,確認號 #,1028,23,Source,Dest.,10,Seq.,1,Ack.,1028,23,Source,Dest.,11,Seq.,1,Ack.,我發(fā)送 #10.,TCP 順序號和確認號,源端口,目標端口,順序號 #,確認號 #,1028,23,Source,Dest.,11,Seq.,2,Ack.,1028,23,Source,Dest.,10,Seq.,1,Ack.,1028,23,Source,Dest.,11,Seq.,1,Ack.,我已收到 #10, 現(xiàn)在我需要 #11.,我發(fā)送 #10.,TCP 順序號和確認號,源端口,目標端口,順序號 #,確認號 #,1028,23,Source,Dest.,11,Seq.,2,Ack.,1028,23,Source,Dest.,10,Seq.,1,Ack.,1028,23,Source,Dest.,11,Seq.,1,Ack.,1028,23,Source,Dest.,12,Seq.,2,Ack.,我已收到 #11, 現(xiàn)在我需要 #12.,我發(fā)送 #11,TCP 窗 口,發(fā)送方,接收方,TCP 窗 口,Window size = 3 Send 2,發(fā)送方,接收方,Window size = 3 Send 1,Window size = 3 Send 3,Window size = 3 Send 2,TCP 窗 口,發(fā)送方,Window size = 3 Send 1,Window size = 3 Send 3,ACK 3 Window size = 2,數(shù)據(jù) 3 被丟棄,接收方,Window size = 3 Send 2,TCP 窗 口,發(fā)送方,Window size = 3 Send 1,Window size = 3 Send 3,ACK 3 Window size = 2,數(shù)據(jù) 3 被丟棄,Window size = 3 Send 4,Window size = 3 Send 3,接收方,Window size = 3 Send 2,TCP 窗 口,發(fā)送方,Window size = 3 Send 1,Window size = 3 Send 3,ACK 3 Window size = 2,數(shù)據(jù) 3 被丟棄,Window size = 3 Send 4,Window size = 3 Send 3,ACK 5 Window size = 2,接收方,沒有順序號和確認號,UDP 數(shù)據(jù)格式,Source port (16),Destination port (16),Length (16),Data (if any),1,Bit 0,Bit 15,Bit 16,Bit 31,Checksum (16),8 Bytes,Internet 層概述,OSI 網(wǎng)絡層對應的是TCP/IP的internet層,Internet Protocol (IP) Internet Control Message Protocol (ICMP) Address Resolution Protocol (ARP) Reverse Address Resolution Protocol (RARP),應用層,傳輸層,Internet層,數(shù)據(jù)鏈路層,物理層,IP 數(shù)據(jù),Version (4),Destination IP Address (32),Options (0 or 32 if any),Data (varies if any),1,Bit 0,Bit 15,Bit 16,Bit 31,Header Length (4),Priority & Type of Service (8),Total Length (16),Identification (16),Flags (3),Fragment offset (13),Time to live (8),Protocol (8),Header checksum (16),Source IP Address (32),20 Bytes,決定上層協(xié)議,協(xié)議域,Transport Layer,Internet Layer,TCP,UDP,Protocol Numbers,IP,17,6,ICMP協(xié)議,Application,Transport,Internet,Data Link,Physical,Destination Unreachable Echo (Ping) Other,ICMP,1,ARP協(xié)議,,,IP: = ?,我需要知道的物理地址.,ARP協(xié)議,,,IP: = ?,ARP協(xié)議,,IP: Ethernet: 0800.0020.1111,,IP: = ?,ARP協(xié)議,映射 IP Ethernet Local ARP,,IP: Ethernet: 0800.0020.1111,,IP: = ?,RARP協(xié)議,Ethernet: 0800.0020.1111 IP = ?,我的地址是多少？,RARP協(xié)議,Ethernet: 0800.0020.1111 IP = ?,我的地址是多少？,我聽到了廣播你的地址是 5.,RARP協(xié)議,Ethernet: 0800.0020.1111 IP: 5,Ethernet: 0800.0020.1111 IP = ?,我的地址是多少？,我聽到了廣播你的地址是 5.,RARP協(xié)議,映射 Ethernet IP,Ethernet: 0800.0020.1111 IP: 5,Ethernet: 0800.0020.1111 IP = ?,我的地址是多少？,我聽到了廣播你的地址是 5.,斷點連接需要確定的地址 路徑選擇 Location is represented by an address,TCP/IP地址介紹,,,,,,,SA,DA,HDR,DATA,,,,,IP 地 址,255,255,255,255,Dotted Decimal,Maximum,Network,Host,32 bits,IP 地 址,255,255,255,255,Dotted Decimal,Maximum,Network,Host,128 64 32 16 8 4 2 1,11111111,11111111,11111111,11111111,Binary,32 bits,1,8,9,16,17,24,25,32,128 64 32 16 8 4 2 1,128 64 32 16 8 4 2 1,128 64 32 16 8 4 2 1,IP 地 址,255,255,255,255,Dotted Decimal,Maximum,Network,Host,128 64 32 16 8 4 2 1,11111111,11111111,11111111,11111111,10101100,00010000,01111010,11001100,Binary,32 bits,172,16,122,204,Example Decimal,Example Binary,1,8,9,16,17,24,25,32,128 64 32 16 8 4 2 1,128 64 32 16 8 4 2 1,128 64 32 16 8 4 2 1,Class A: Class B: Class C: Class D: 多址地址 Class E: 科研用,IP 地址分類,8 bits,8 bits,8 bits,8 bits,IP 地址分類,1,Class A:,Bits:,0NNNNNNN,Host,Host,Host,8,9,16,17,24,25,32,Range (1-126),1,Class B:,Bits:,10NNNNNN,Network,Host,Host,8,9,16,17,24,25,32,Range (128-191),1,Class C:,Bits:,110NNNNN,Network,Network,Host,8,9,16,17,24,25,32,Range (192-223),1,Class D:,Bits:,1110MMMM,Multicast Group,Multicast Group,Multicast Group,8,9,16,17,24,25,32,Range (224-239),主機地址,,0,2,,1,18,E1,172.16,12,12,網(wǎng)絡,主機,.,.,網(wǎng)絡,端口, ,E0 E1,路由表,,,E0,11111111,計算可用的主機地址,172 16 0 0,10101100,00010000,00000000,00000000,16 15 14 13 12 11 10 9,8 7 6 5 4 3 2 1,網(wǎng)絡,主機,00000000,00000001,11111111,11111111,11111111,11111110,.,.,00000000,00000011,11111101,1,2,3,65534,65535,65536,-,.,2,65534,N,2N-2 = 216-2 = 65534,IP地址分類練習,地址,類別,網(wǎng)絡,主機,,00,4,,6,20,IP地址分類練習 （答案）,地址,類別,網(wǎng)絡,主機,,00,4,,6,20,A,B,C,C,B,Nonexistent,,,,,,,00,4,,6,網(wǎng)絡 ,,不設子網(wǎng)的地址,,,,.,53,54,網(wǎng)絡 ,設置子網(wǎng)的地址,,,,,子網(wǎng)地址,00,,60,,,00,50,E0,172.16,網(wǎng)絡,網(wǎng)絡,端口, ,E0 E1,新路由表,2,160,主機,.,.,,E1,子網(wǎng)地址,00,,60,,,00,50,,E0,E1,172.16,2,160,網(wǎng)絡,主機,.,.,網(wǎng)絡,端口, ,E0 E1,新路由表,子網(wǎng),子網(wǎng)掩碼,255,255,0,0,IP Address,Default Subnet Mask,8-bit Subnet Mask,Network,Host,Network,Host,Network,Subnet,Host,“/16” 表示子網(wǎng)掩碼有16位.,“/24”表示子網(wǎng)掩碼有24位.,11111111,11111111,00000000,00000000,十進制和二進制的轉(zhuǎn)換,1 0 0 0 0 0 0 0 = 128 1 1 0 0 0 0 0 0 = 192 1 1 1 0 0 0 0 0 = 224 1 1 1 1 0 0 0 0 = 240 1 1 1 1 1 0 0 0 = 248 1 1 1 1 1 1 0 0 = 252 1 1 1 1 1 1 1 0 = 254 1 1 1 1 1 1 1 1 = 255,128 64 32 16 8 4 2 1,16,網(wǎng)絡,主機,172,0,0,10101100,11111111,10101100,00010000,11111111,00010000,00000000,00000000,10100000,00000000,00000000,缺省情況下子網(wǎng)未劃分,00000010,缺省情況下的子網(wǎng)掩碼,60,,網(wǎng)絡號,擴展了8位地址的網(wǎng)絡,利用子網(wǎng)掩碼劃分子網(wǎng),16,網(wǎng)絡,主機,60,,172,2,0,10101100,11111111,10101100,00010000,11111111,00010000,11111111,00000010,10100000,00000000,00000000,00000010,子網(wǎng),網(wǎng)絡號,128 192 224 240 248 252 254 255,利用子網(wǎng)掩碼劃分子網(wǎng),網(wǎng)絡,主機,60,92,10101100,11111111,10101100,00010000,11111111,00010000,11111111,00000010,10100000,11000000,10000000,00000010,子網(wǎng),擴展了10位地址的網(wǎng)絡,16,172,2,128,網(wǎng)絡好,128 192 224 240 248 252 254 255,128 192 224 240 248 252 254 255,子網(wǎng)掩碼練習,地址,子網(wǎng)掩碼,類別,子網(wǎng),0,0,2,,,,子網(wǎng)掩碼練習 （答案）,地址,子網(wǎng)掩碼,類別,子網(wǎng),0,0,2,,,,B,A,A,,,,廣播地址,,,,,55 (Directed broadcast),55 (Local network broadcast),X,55 (All subnets broadcast),地址匯總示例,16,172,2,160,10101100,00010000,10100000,00000010,Host,Mask,Subnet,Broadcast,Last,First,60,92,4,1,地址匯總示例,10101100,11111111,00010000,11111111,11111111,10100000,11000000,00000010,Host,Mask,Subnet,Broadcast,Last,First,60,92,1,2,16,172,2,160,地址匯總示例,10101100,11111111,00010000,11111111,11111111,10100000,11000000,00000010,Host,Mask,Subnet,Broadcast,Last,First,60,92,1,2,3,7,16,172,2,160,地址匯總示例,10101100,11111111,00010000,11111111,11111111,10100000,11000000,10000000,00000010,Host,Mask,Subnet,Broadcast,Last,First,60,92,1,2,3,4,16,172,2,160,地址匯總示例,10101100,11111111,00010000,11111111,11111111,10100000,11000000,10000000,00000010,10111111,Host,Mask,Subnet,Broadcast,Last,First,60,92,1,2,3,4,5,6,16,172,2,160,地址匯總示例,10101100,11111111,00010000,11111111,11111111,10100000,11000000,10000000,00000010,10111111,10000001,Host,Mask,Subnet,Broadcast,Last,First,60,92,1,2,3,4,5,6,16,172,2,160,地址匯總示例,10101100,11111111,00010000,11111111,11111111,10100000,11000000,10000000,00000010,10111111,10000001,10111110,Host,Mask,Subnet,Broadcast,Last,First,60,92,1,2,3,4,5,6,7,16,172,2,160,地址匯總示例,10101100,11111111,10101100,00010000,11111111,00010000,11111111,00000010,10100000,11000000,10000000,00000010,10101100,00010000,00000010,10111111,10101100,00010000,00000010,10000001,10101100,00010000,00000010,10111110,Host,Mask,Subnet,Broadcast,Last,First,60,92,1,2,3,4,5,6,7,8,16,172,2,160,地址匯總示例,10101100,11111111,10101100,00010000,11111111,00010000,11111111,00000010,10100000,11000000,10000000,00000010,10101100,00010000,00000010,10111111,10101100,00010000,00000010,10000001,10101100,00010000,00000010,10111110,Host,Mask,Subnet,Broadcast,Last,First,60,92,28,91,29,90,1,2,3,4,5,6,7,8,9,16,172,2,160,IP Host Address: 21 Subnet Mask: ,Subnet Address = Host Addresses = 54 Broadcast Address = 55 Eight bits of subnetting,Network,Subnet,Host,10101100,00010000,00000010,11111111,21:,:,10101100,11111111,Subnet:,10101100,00010000,00010000,11111111,00000010,00000010,11111111,01111001,00000000,00000000,B類地址子網(wǎng)規(guī)劃,Broadcast:,Network,子網(wǎng)劃分,Other subnets,6,2,8,20 子網(wǎng) 5 主機/子網(wǎng) C類地址： ,11111000,IP Host Address: 21 Subnet Mask: 48,Network,Subnet,Host,21:,11000000,11111111,Subnet:,11000000,10101000,10101000,11111111,00000101,00000101,11111111,01111001,01111000,48:,C類地址子網(wǎng)規(guī)劃,Subnet Address = 20 Host Addresses = 2126 Broadcast Address = 27 Five Bits of Subnetting,Broadcast:,Network,Network,11000000,10101000,00000101,01111111,廣播地址練習,地址,類別,子網(wǎng),廣播地址,0,48,子網(wǎng)掩碼,,,3,52,7,28,廣播地址練習 （答案）,27,地址,類別,子網(wǎng),廣播地址,0,48,C,3,6,子網(wǎng)掩碼,,,A,55,,3,52,B,5,2,7,28,B,,配置交換機的IP地址,指明IP地址和子網(wǎng)掩碼,Switch(config)#ip address ip-address subnet-mask,Switch(config)#ip default-gateway ip-address,指明缺省網(wǎng)關(guān),配置路由器的IP地址,指明IP地址和子網(wǎng)掩碼 在路由器的端口配置模式下設置地址,Router(config-if)#ip address ip-address subnet-mask,配置路由器的IP地址,Router(config-line)#ip netmask-format bitcount | decimal | hexadecimal,在行控制模式下設置IP地址的顯示格式,Router#term ip netmask-format bitcount| decimal | hexadecimal,設置正確的IP地址顯示格式,利用IP地址靜態(tài)映射主機地址 通過IP地址和主機名稱選擇端口,路由器的IP主機命名,Router(config)#ip host name tcp-port-number address address,ip host Norine ip host Roger ,指明一個或多個名稱服務器來解析邏輯地址,路由器名稱服務器的設置,Router(config)#ip name-server server-address1 server-address2.server-address6,DNS Server,缺省情況下DNS為Enable,路由器的名稱解析,Router(config)#ip domain-lookup Router(config)#end Router#pat Translating ”pat“.domain server (55) % Unknown command or computer name, or unable to find computer address Router#config t Router(config)#no ip domain-lookup Router(config)#end Router#pat Translating ”pat“ % Unknown command or computer name, or unable to find computer address Router#,查看主機名稱,Router#show hosts Default domain is not set Name/address lookup uses domain service Name servers are 55 Host Flags Age Type Address(es) Norine (perm, OK) 0 IP 00 Roger (perm, OK) 0 IP 01 Frank (perm, OK) 0 IP 00 Bob (perm, OK) 0 IP 01,顯示主機列表,VLAN 概 述,VLAN 1,VLAN 2,ISL,,,網(wǎng)絡層設備連接多個廣播域,Router on a stick,Application,TCP,IP,ISL,Ethernet,Fast E0/0,將物理端口劃分為多個子端口,FastEthernet 0/0,FastEthernet 0/0.2,FastEthernet 0/0.3,FastEthernet 0/0.1,物理端口能夠劃分為多個邏輯的子端口,ISL 封 裝,在子端口上激活ISL封裝,Router(config-subif)#encapsulation isl domain,不同VLAN間的路由,VLAN 1,VLAN 2,ISL,interface fastethernet 0/0 no ip address ! interface fastethernet 0/0.1 ip address encapsulation isl 1 interface fastethernet 0/0.2 ip address encapsulation isl 2,Fast E0/0,,,廣域網(wǎng)間的路由,ISL,interface Serial0 ip address ,S0,,,VLAN 1,VLAN 2,,,可視化目標,core_ server,wg_sw_a 0,wg_sw_l 20,.,e0/1,fa0/26 (port A),e0/1,fa0/26 (port A),fa0/1,fa0/12,fa