企業(yè)級(jí)網(wǎng)絡(luò)ip地址規(guī)劃與配置

1、企業(yè)級(jí)網(wǎng)絡(luò)ip地址規(guī)劃與配置以設(shè)計(jì)具有三層結(jié)構(gòu)的大型企業(yè)級(jí)網(wǎng)絡(luò)設(shè)計(jì)為例，完成IP地址的分配、NAT地址轉(zhuǎn)換、三層網(wǎng)絡(luò)拓?fù)浣Y(jié)構(gòu)等功能，并選擇合適的設(shè)備實(shí)現(xiàn)該網(wǎng)絡(luò)，用模擬器驗(yàn)證通連性。二、實(shí)驗(yàn)拓?fù)浣Y(jié)構(gòu)圖與IP規(guī)劃 拓?fù)鋵?shí)現(xiàn)：ROUTER0為本園區(qū)網(wǎng)絡(luò)的出口，并在出口處通過NAT轉(zhuǎn)換來實(shí)現(xiàn)與外網(wǎng)的連接，出口網(wǎng)絡(luò)地址為1，三臺(tái)路由器構(gòu)成的主路由區(qū)域使用RIP動(dòng)態(tài)路由協(xié)議，ROUTER1所連為園區(qū)網(wǎng)絡(luò)服務(wù)器群，網(wǎng)段為 /24；由于設(shè)備限制在此只設(shè)置WEB與FTP服務(wù)器模擬現(xiàn)實(shí)中的服務(wù)器群，ROUTER3所連網(wǎng)段為/24。Switch0模擬現(xiàn)實(shí)

2、中的新交換機(jī)，并與switch3做鏈路負(fù)載均衡，switch1與switch1之間使用PVLAN技術(shù)連接，做到本交換機(jī)上VLAN之間的隔離與整體的透傳，Switch3模擬學(xué)生機(jī)房主交換機(jī)，與switch1之間使用兩條普通鏈路，利用端口匯聚技術(shù)實(shí)現(xiàn)帶寬的增加，并在交換機(jī)上連接一臺(tái)DHCP服務(wù)器實(shí)現(xiàn)IP地址的自動(dòng)分配，DHCP服務(wù)器使用windows 2003 server 附帶的DHCP組建實(shí)現(xiàn)，由于設(shè)備限制，本次試驗(yàn)采用架設(shè)在VM虛擬機(jī)中的windows 2003 server操作系統(tǒng)實(shí)現(xiàn)，虛擬機(jī)與現(xiàn)實(shí)網(wǎng)絡(luò)通過橋接網(wǎng)絡(luò)通信，wlan部分采用單AP布局，AP型號(hào)為NETGEAR，internet

3、接口地址為：54，LAN地址段為 /24。3、 實(shí)驗(yàn)器材：設(shè)備名稱設(shè)備數(shù)量設(shè)備作用華為R2501路由器3路由、尋徑華為s2008交換機(jī)4服務(wù)器2Web服務(wù)器/DHCP服務(wù)器無線AP(netgear)1構(gòu)建無線網(wǎng)絡(luò)PC機(jī)6筆記本（帶無線網(wǎng)卡）2四、配置過程：配置命令：Router0：Quidwaysysname router0 /重新命名交路由器router0int s0 /配置串行鏈路接口router0-Serial0ip add 52 /配置接口IP地址router0-Serial0link-p

4、rotocol ppp /鏈路層啟用PPP協(xié)議router0-Serial0quitrouter0int s1router0-Serial1ip add 52router0-Serial1link-protocol ppprouter0-Serial1quitrouter0rip /啟用RIP協(xié)議router0-ripnetwork all /發(fā)布直連網(wǎng)絡(luò)router0-ripquitrouter0nat address-group 1 1 pool 1 /設(shè)定nat地址池router0acl 1rout

5、er0-acl-2rule permit source /設(shè)定ACL規(guī)則router0-acl-2rule permit source router0-acl-2quitrouter0int e0router0-Ethernet0nat outbound 1 address-group pool1 /增加訪問控制列表和端口關(guān)聯(lián)router0-Ethernet0ip route-s /設(shè)置缺省路由router0-Ethernet0nat server global ftp

6、tcp /設(shè)置內(nèi)部FTP服務(wù)器router0-Ethernet0nat server global www tcp /設(shè)置內(nèi)部WWW服務(wù)器router0-Ethernet0quitRouter1：<Quidway>syspassword:Quidwaysysname router1router1int s0router1-Serial0ip add 52router1-Serial0link-protocol ppprouter1-Serial0clock dteclk1router1-Serial0int s1

7、router1-Serial1ip add 0 52router1-Serial1link-protocol ppprouter1-Serial1int e0router1-Ethernet0ip add router1-Ethernet0quitrouter1riprouter1-ripnetwork allrouter1ip route-s s0 Router 3：<Quidway>sysQuidwaysysname router3router3int

8、s0router3-Serial0ip add 52router3-Serial0link-protocol ppprouter3-Serial0clock dteclk1router3-Serial0int s1router3-Serial1ip add 52router3-Serial1link-protocol ppprouter3-Serial1clock dteclk1router3-Serial1int e0router3-Ethernet0ip add 2

9、router3-Ethernet0quitrouter3riprouter3-ripnetwork allrouter3-riprouter3ip route-s s1 Switch0:<Quidway>syspassword:Quidwaysysname switch0switch0int e 0/1 /進(jìn)入端口視圖switch0-Ethernet0/1port link-type trunk /設(shè)置端口類型為TRUNKswitch0-Ethernet0/1port trunk permit vlan all /允許通過所有

10、VLANswitch0-Ethernet0/1duplex full /設(shè)置工作模式為全雙工switch0-Ethernet0/1speed 100 /設(shè)置速率為100Mbpsswitch0int e 0/2switch0-Ethernet0/2port link-type trunk switch0-Ethernet0/2port trunk permit vlan allswitch0-Ethernet0/2duplex full /設(shè)置工作模式為全雙工switch0-Ethernet0/2speed 100 /設(shè)置速率為100Mbpsswitch0-Ethernet0/2quitswit

11、ch0link-aggreation int e0/1 to int e0/2 both /設(shè)置匯聚連接switch0 Switch1: <Quidway>sys Quidwaysysname switch1switch1vlan 8 /配置VLAN信息switch1-vlan8port eth 0/1 to eth 0/4 /加入端口switch1-vlan8vlan 24switch1-vlan24port eth 0/5 to eth 0/8switch1-vlan24quitswitch1vlan 23 /配置isovlanswitch1-vlan23isolate-use

12、r-vlan enable /啟用ISOswitch1-vlan23port eth 0/9 /加入端口switch1-vlan23isolate-user-vlan 23 secondary 8 24 /配置與二層vlan之間關(guān)聯(lián)信息switch1-vlan23Switch2: <Quidway>sys Quidwaysysname switch2switch2vlan 4switch1-vlan8port eth 0/8switch2-vlan8port eth 0/1 to eth 0/4switch2-vlan8vlan 5switch2-vlan24port eth 0/

13、5 to eth 0/8switch2-vlan24quitswitch2vlan 23switch2-vlan23isolate-user-vlan enableswitch2-vlan23port eth 0/9switch2-vlan23isolate-user-vlan 23 secondary 4 5switch2-vlan23Switch3: <Quidway>syspassword:Quidwaysysname switch3switch3int e 0/1switch3-Ethernet0/1port link-type trunk switch3-Ethernet0/1port trunk permit vlan allswitch3-Ethernet0/1duplex full switch3-Ethernet0/1speed 100 switch3-Ethernet0/1int e 0/2switch3-Ethernet0/2port link-type trunkswitch3-Ethernet0/2port trunk permit vlan allswitch3-Ethernet0/2duplex full switch3-Ethernet0/2speed 100 switch3-Ethernet0/2quitswitch3link-agg