園區(qū)網(wǎng)絡(luò)安全實(shí)驗(yàn)報(bào)告new

1、園區(qū)網(wǎng)絡(luò)安全實(shí)驗(yàn)報(bào)告一根據(jù)企業(yè)網(wǎng)絡(luò)拓?fù)浣Y(jié)構(gòu)圖完成網(wǎng)絡(luò)基礎(chǔ)配置和安全配置，要求如下：1. PC0能夠通過PING和HTTP訪問Server0；2PC1不能PING通Server0，但是能夠訪問Server0上的WEB服務(wù)；3. 根據(jù)拓?fù)浣Y(jié)構(gòu)圖完成網(wǎng)絡(luò)地址規(guī)劃表。二 企業(yè)網(wǎng)絡(luò)拓?fù)浣Y(jié)構(gòu)圖三網(wǎng)絡(luò)地址規(guī)劃表設(shè)備名稱IP地址子網(wǎng)掩碼默認(rèn)網(wǎng)關(guān)PC054PC154Router0Fa0/052S1/025

2、52Router1Fa0/054S1/052四配置文件1、ROUTER0的配置：RouterenRouter#config tEnter configuration commands, one per line. End with CNTL/Z.Router(config)#int fa0/0Router(config-if)#ip add 52Router(config-if)#no sh%LINK-5-CHANGED: In

3、terface FastEthernet0/0, changed state to up%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to upRouter(config-if)#int se1/0Router(config-if)#ip add 52Router(config-if)#no sh%LINK-5-CHANGED: Interface Serial1/0, changed state to downexitRouter(

4、config)#ip rout Router(config)#access-list 100 deny icmp Router(config)#access-list 100 permit tcp any anyRouter(config)#int se1/0Router(config-if)#ip access-group 100 inRouter(config)#no access-list 100Router(config)#access

5、-list 100 deny icmp host host Router(config)#access-list 100 permit tcp any anyRouter(config)#access-list 100 permit icmp any anyRouter(config)#2、ROUTER1的配置：RouterenRouter#config tEnter configuration commands, one per line. End with CNTL/Z.Router(config)#int se1/0Router(config

6、-if)#ip add 52Router(config-if)#no sh%LINK-5-CHANGED: Interface Serial1/0, changed state to upRouter(config-if)#int fa%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial1/0, changed state to up0/0Router(config-if)#int fa0/0Router(config-if)#ip add 54 255.255.25

7、5.0Router(config-if)#no sh%LINK-5-CHANGED: Interface FastEthernet0/0, changed state to up%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to upRouter(config-if)#exitRouter(config)#ip rout Router#config tEnter configuration commands, o

8、ne per line. End with CNTL/Z.Router(config)#ip rout Router(config)#五結(jié)果測試（可截圖說明）從PC0機(jī)ping 是通的：從PC1機(jī)ping 是通的：在router0上給PC1機(jī)配置好擴(kuò)展ACL后 ping 不通了，但可以訪問Server0 TCP服務(wù)在router0上配置好所有PC機(jī)擴(kuò)展ACL后PC0即能ping通Server0也能用TCP方式訪問；PC1機(jī)還是只能訪問TCP不能ping通Server0.六實(shí)驗(yàn)結(jié)果分析與總結(jié)今天邱教授對園區(qū)網(wǎng)絡(luò)安全知識的講解，實(shí)例操作后，小組成功完成了根據(jù)拓?fù)鋱D架設(shè)路由網(wǎng)絡(luò)模擬實(shí)驗(yàn)，對ROUTER0和ROUTER1進(jìn)行網(wǎng)絡(luò)安全的擴(kuò)展ACL配置。 分析：1、在模擬實(shí)驗(yàn)之前要規(guī)劃好整個(gè)網(wǎng)絡(luò)IP地址，畫好拓?fù)鋱D