实验-CISCO

难度110分1、2、3、4、5难度315分6、6、8、9、10难度515分11、12、13、14、15·一、请按要求完成静态、默认路由的相关配置（难度等级1）。根据下图所示（以下的设备均为CISCO设备），完成静态路由的相关配置。实验要求：1、配置路由器R1、R2和R3的网络接口地址，地址分配如下表所示：设备接口IP地址子网掩码网关备注R1Fa0/0172.16.3.1255.255.255.0不适用R1S1/0172.16.2.1255.255.255.0不适用R2Fa0/0172.16.1.1255.255.255.0不适用R2S1/0172.16.2.2255.255.255.0不适用R2S1/1192.168.1.2255.255.255.0不适用R3Fa0/0192.168.2.1255.255.255.0不适用R3S1/1192.168.1.1255.255.255.0不适用PC1网卡172.16.3.11255.255.255.0172.16.3.1已完成配置PC2网卡172.16.1.11255.255.255.0172.16.1.1已完成配置PC3网卡192.168.2.11255.255.255.0192.168.2.1已完成配置2、配置静态路由及默认路由。3、实现全网互通，并保存配置。得分点：操作内容分数10关键字配置各接口地址3ipadd静态路由配置3iproute172.16.3.0255.255.255.0172.16.2.1iproute192.168.2.0255.255.255.0192.168.1.1默认路由配置3iproute0.0.0.0255.255.255.0192.168.1.2答案：R1配置：RouterenRouterenableRouter#confRouter#configuretRouter#configureterminalRouter(config)#hostRouter(config)#hostnameR1Router（config）#hostnameR1命名R1（config）#noipdomain-lookup容错R1（config）#linecon0进入consolR1（config-line）#loggingsyn日志同步R1（config-line）#exec-timeout0延时为0R1（config）#interfaces1/0进入串口R1（config-line）#descriptionlinktoR2-s1/0说明路径R1（config-if）#noshutdown打开端口!interfacefa0/0ipaddress172.16.3.1255.255.255.0noshutdown!interfaces1/0ipaddress172.16.2.1255.255.255.0clockrate64000noshutdown!iproute0.0.0.0255.255.255.0172.16.2.2!R2配置：!interfacefa0/0ipaddress172.16.1.1255.255.255.0noshutdown!interfaces1/0ipaddress172.16.2.2255.255.255.0clockrate64000noshutdown!interfaces1/1ipaddress192.168.1.2255.255.255.0clockrate64000noshutdown!iproute172.16.3.0255.255.255.0172.16.2.1iproute192.168.2.0255.255.255.0192.168.1.1!R3配置：!interfacefa0/0ipaddress192.168.2.1255.255.255.0noshutdown!interfaces1/1ipaddress192.168.1.1255.255.255.0noshutdown!iproute0.0.0.0255.255.255.0192.168.1.2!二、EthernetChannel基本配置（难度1）根据下图所示（以下所有设备均为CISCO设备），完成EthernetChannel基础配置。要求：1、将两台交换机的F0/2,F0/3绑定一个EthernetChannel，mode为on状态；2、验证EthernetChannel配置的正确性。操作内容分数10关键字接口配置3switchportmodetrunk接口配置3channel-group1modeonPort-channel配置4interfaceport-channel1switchportmodetrunk答案：SW1的配置：!interfaceport-channel1switchportmodetrunknoshutinterfaceFastEthernet0/2channel-group1modeonswitchportmodetrunknoshutintFastEthernet0/3channel-group1modeonswitchportmodetrunknoshut!SW2的配置：!interfaceport-channel1switchportmodetrunknoshut!interfaceFastEthernet0/2channel-group1modeonswitchportmodetrunknoshut!intFastEthernet0/3channel-group1modeonswitchportmodetrunknoshut!三、Trunk基本配置（难度1）根据下图所示（以下所有设备均为CISCO设备），完成Trunk基础配置。要求：1、SW1上分别有VLan10、20，SW2上有VLAN10，PC1/PC3属于VLAN10，PC2属于VLAN20；2、SW1、SW2之间配置Trunk，实现不同的VlAN相互通信。操作内容分数10关键字VLAN配置3vlan10,vlan20;intvlanipaddressVLAN划分3switchportmodeaccessswitchportaccessvlan10Trunk启用、并保证不同VLAN将的PC互通4interfaceFastethernet0/1switchporttrunkencapsulationdot1qswitchportmodetrunk互ping答案：SW1的配置：!iprouting!vlan10namejiguan!vlan20nameshengchan!intvlan10ipaddress192.168.10.1255.255.255.0noshut!ntvlan20ipaddress192.168.20.1255.255.255.0noshut!interfaceFastethernet0/1switchporttrunkencapsulationdot1q启用1q模式封装switchportmodetrunk选择路由为trunk模式noshutswitchporttrunkallowedvlan10,20连通vlan1020!interfaceFastethernet0/2switchportmodeaccess连接模式switchportaccessvlan10noshut!interfaceFasetethernet0/3switchportmodeaccessswitchportmodeaccessswitchportaccessvlan20noshut!SW2配置：!iprouting!vlan10vlan20!interfacevlan10ipaddress192.168.10.2255.255.255.0noshut!interfaceFastethernet0/1switchporttrunkencapsulationdot1qswtichportmodetrunknoshut!interfaceFastethernet0/2switchportmodeaccessswitchportaccessvlan10noshut!四、CHAP认证基本配置（难度1）要求：1、使用“username用户名password密码”命令为对方配置用户名和密码，注意：两方的密码要相同。2、在路由器R1、R2串口上配置PPP封装，并配置CHAP身份验证。3、验证否配置成功。操作内容分数10关键字接口配置3ipaddress使用用户名密码3usernameXXpasswordcisco在两台设备启用PPP封装，并配置CHAP身份验证4interfaces0/0encapsulationppppppauthenticationchap答案：R1的配置!shrun查看配置interfaces1/0ipaddress192.168.12.1255.255.255.252noshut!usernameR1passwordciscousernameciscopasswordcisco(可不用这句)noipdomain-lookup!interfaces1/0descriptionlinktoR2-s1/0ipaddress192.168.12.1255.255.255.252noshutencapsulationppp启用PPP协议pppauthenticationchap验证PPP命令!Linecon0Exec-timeout00PasswordciscoLoginlocal本地启用!Linevty04配置过程登陆PasswordciscoLoginlocal本地启用R2的配置!interfaces0/0ipaddress192.168.12.2255.255.255.252noshut!usernameR2passwordcisco!interfaces0/0encapsulationppppppauthenticationchap!End路由重启后生效测试命令：debugpppauthentication关闭测试命令：nodebugpppauthentication五、EIGRP手工汇总（难度1）要求：1、完成拓扑图上所标识接口地址的配置工作，注意子网掩码的划分。2、路由器R1、R2和R3之间运行EIGRP，进程10，关闭自动汇总功能。3、在路由器R3上将四个回环地址做手工路由汇总，在R1上查看路由学习情况，并实现全网互通。操作内容分数10关键字接口配置3ipaddressEIGRP协议的运行3routereigrp10network1.1.1.00.0.0.255network192.168.12.0noauto-summary在R3上的Serial0/1上做手工汇总4interfaceSerial0/1ipsummary-addresseigrp103.3.0.0255.255.252.05答案：R1的配置：!interfaceLoopback0ipaddress1.1.1.1255.255.255.0!interfaceSerial0/0ipaddress192.168.12.1255.255.255.0noshut!routereigrp10network1.1.1.00.0.0.255network192.168.12.0noauto-summary!R2的配置!interfaceLoopback0ipaddress2.2.2.2255.255.255.0!interfaceSerial0/0ipaddress192.168.12.2255.255.255.0!interfaceSerial0/1ipaddress192.168.23.2255.255.255.0noshut!routereigrp10network192.168.12.0network192.168.23.0network2.2.2.00.0.0.255noauto-su