某某宾馆网络建设

目录实验分工：....................................................................2项目目的：....................................................................2需求分析：....................................................................2实验拓扑：....................................................................3编址规划：....................................................................3实施步骤........................................................................4测试文档........................................................................9经验总结......................................................................122实验分工：独立完成项目目的：通过实施项目，掌握如何对中小型宾馆建设网络的需求进行分析，给出解决方案，并进行实施，进一步巩固网络网络课程背景描述：北京某宾馆是北京市一家集住宿、商务、餐饮于一体的星级宾馆，拥有管理部、财务部、服务部、客房部，以及会议室等多个部门。宾馆计划建立自己安全、可靠、可扩展、高效的企业园区网网络环境，为客户提供优质的Internet服务，并为宾馆内部实现资源共享和部分外网服务，同时实现宾馆内部信息保密隔离，以及对外网的安全访问。需求分析：1、企业有五个部门，其分别为管理部、服务部、技术部、客房部、财务部，其中客房部和技术部不能访问财务部门2、在RA和RB之间使用PPP协议，并使用CHAP协议认证3、在两台三层交换机配置链路聚合4、配置RSTP协议，要求两台三层交换机根交换机5、配置动态路由协议OSPF6、配置NAT，其公网的地址池为99.1.1.0/287、在所有接入层交换机的接口上配置端口安全，最大数为3，违规则关闭接口8、在VLAN10中有两台服务，分别WEB和FTP服务器，需要发布到互联网上，其公网地址为99.1.1.9和99.1.1.109、财务部不能访问互联网，而客房部只能访问互联的WEB和MAIL服务，其它的不受限制3实验拓扑：编址规划：客房部：网络号：192.168.1.0/24网关：192.168.1.1/24实验用址：192.168.1.10/24技术部：网络号：192.168.2.0/24网关：192.168.2.1/24实验用址：192.168.2.10/24管理部：网络号：192.168.3.0/24网关：192.168.3.1/24实验用址：192.168.3.10/24服务部：网络号：192.168.4.0/24网关：192.168.4.1/24实验用址：192.168.4.10/24财务部：4网络号：192.168.5.0/24网关：192.168.5.1/24实验用址：192.168.5.10/24服务器：网络号：192.168.6.0/24网关：192.168.6.1/24WEB服务器用址：192.168.6.10/24FTP服务器用址：192.168.6.20/24osfp域地址：MSW0f0/1接口：172.16.1.2/24MSW1f0/1接口：172.16.2.2/24RAf0/0接口：172.16.1.1/24RAf0/1接口：172.16.2.1/24实验设备:Cisco2811Routerx2Cisco3560-24PSSwitchx2Cisco2960-24TTSwitchx2PCx5Server服务器x2实施步骤MSW0spanning-treemoderapid-pvstspanning-treevlan13-15priority4096spanning-treevlan10-12priority8192interfaceFastEthernet0/1noswitchportipaddress172.16.1.2255.255.255.0duplexautospeedautointerfaceFastEthernet0/9switchportmodetrunkinterfaceFastEthernet0/10switchportmodetrunkinterfaceFastEthernet0/11channel-group1modeoninterfaceFastEthernet0/125channel-group1modeoninterfacePort-channel1switchportmodetrunkinterfaceVlan1noipaddressshutdowninterfaceVlan10ipaddress192.168.6.1255.255.255.0interfaceVlan11ipaddress192.168.1.1255.255.255.0interfaceVlan12ipaddress192.168.2.1255.255.255.0interfaceVlan13ipaddress192.168.3.2255.255.255.0interfaceVlan14ipaddress192.168.4.2255.255.255.0interfaceVlan15ipaddress192.168.5.2255.255.255.0ipaccess-group100outrouterospf1log-adjacency-changesnetwork192.168.1.00.0.0.255area0network192.168.2.00.0.0.255area0network192.168.3.00.0.0.255area0network192.168.4.00.0.0.255area0network192.168.5.00.0.0.255area0network192.168.6.00.0.0.255area0network172.16.1.00.0.0.255area0access-list100denyip192.168.1.00.0.0.255192.168.5.00.0.0.255access-list100denyip192.168.2.00.0.0.255192.168.5.00.0.0.255MSW1spanning-treemoderapid-pvstspanning-treevlan10-12priority4096spanning-treevlan13-15priority8192interfaceFastEthernet0/1noswitchportipaddress172.16.2.2255.255.255.0duplexautospeedautointerfaceFastEthernet0/9switchportmodetrunkinterfaceFastEthernet0/10switchportmodetrunk6interfaceFastEthernet0/11channel-group1modeoninterfaceFastEthernet0/12channel-group1modeoninterfacePort-channel1switchportmodetrunkinterfaceVlan10ipaddress192.168.6.2255.255.255.0interfaceVlan11ipaddress192.168.1.2255.255.255.0interfaceVlan12ipaddress192.168.2.2255.255.255.0interfaceVlan13ipaddress192.168.3.1255.255.255.0interfaceVlan14ipaddress192.168.4.1255.255.255.0interfaceVlan15ipaddress192.168.5.1255.255.255.0ipaccess-group100outrouterospf1log-adjacency-changesnetwork192.168.1.00.0.0.255area0network192.168.2.00.0.0.255area0network192.168.3.00.0.0.255area0network192.168.4.00.0.0.255area0network192.168.5.00.0.0.255area0network172.16.2.00.0.0.255area0access-list100denyip192.168.1.00.0.0.255192.168.5.00.0.0.255access-list100denyip192.168.2.00.0.0.255192.168.5.00.0.0.255RAinterfaceFastEthernet0/0ipaddress172.16.1.1255.255.255.0ipnatinsideduplexautospeedautointerfaceFastEthernet0/1ipaddress172.16.2.1255.255.255.0ipnatinsideduplexautospeedautointerfaceSerial0/0/0ipaddress99.1.1.2255.255.255.07encapsulationppppppauthenticationchapipaccess-group100outipnatoutsiderouterospf1log-adjacency-changesnetwork172.16.1.00.0.0.255area0network172.16.1.00.0.0.255area0network99.1.1.00.0.0.15area0ipnatpool199.1.1.399.1.1.14netmask255.255.255.240ipnatinsidesourcelist10pool1overloadipnatinsidesourcestatic192.168.6.1099.1.1.9ipnatinsidesourcestatic192.168.6.2099.1.1.10access-list10permit192.168.1.00.0.0.255access-list10permit192.168.2.00.0.0.255access-list10permit192.168.3.00.0.0.255access-list10permit192.168.4.00.0.0.255access-list10permit192.168.5.00.0.0.255access-list10permit172.16.1.00.0.0.255access-list10permit172.16.2.00.0.0.255access-list100denyip192.168.5.00.0.0.255anyaccess-list100permittcp192.168.1.00.0.0.255anyeq