（推薦）網(wǎng)絡(luò)工程實(shí)習(xí)報(bào)告

1、如果您需要使用本文檔，請(qǐng)點(diǎn)擊下載按鈕下載!南京工程學(xué)院實(shí)習(xí)報(bào)告 課 程 名 稱 網(wǎng)絡(luò)工程實(shí)習(xí) 院（系、部、中心） 計(jì)算機(jī)工程學(xué)院 專 業(yè) 網(wǎng)絡(luò)工程 班 級(jí) 網(wǎng)絡(luò) 132 起 止 日 期 2015.4.62015.4.17 指 導(dǎo) 教 師 袁宗福 如果您需要使用本文檔，請(qǐng)點(diǎn)擊下載按鈕下載!一、 報(bào)告摘要大二下學(xué)期的六七周，我們網(wǎng)絡(luò)工程班在建策公司進(jìn)行了首次實(shí)習(xí)，CCIE大神老師講課很生動(dòng)，在為期兩周的實(shí)習(xí)期間，學(xué)到了很多。在建策，老師是以實(shí)際案例給我們講課，從工程的角度分析客戶需求，需要怎樣的技術(shù)支持，總的來(lái)說(shuō)，偏重于實(shí)踐應(yīng)用。期間，CCIE老師帶我們這一組學(xué)生主要做了以下幾個(gè)實(shí)驗(yàn)：?jiǎn)伪勐酚桑o

2、態(tài)路由和訪問控制列表，分別對(duì)應(yīng)地鐵網(wǎng)或者校園網(wǎng)，企業(yè)的路由備份以及服務(wù)器過濾方面的知識(shí)。很實(shí)際的問題，我們對(duì)做這些實(shí)驗(yàn)的印象至今很深刻。除此之外，老師還給我們講了些我們學(xué)生很關(guān)心的問題，比如學(xué)校電信寬帶的PPPOE連接，無(wú)線路由沒作用的原因，無(wú)線加密方式以及破解方法等等。重點(diǎn)介紹了他從事這行業(yè)的一些經(jīng)歷，網(wǎng)絡(luò)行業(yè)現(xiàn)在的形勢(shì)以及預(yù)測(cè)一下將來(lái)的行情。讓我們對(duì)網(wǎng)絡(luò)工程有了一定的了解，有助于我們對(duì)未來(lái)有個(gè)清晰的規(guī)劃。二、 摘要翻譯In the sixth and seventh week of the next semester of our sophomore year, we network en

3、gineering students went to JIANCE company for internship for the first time. The teachers lesson who has a certificate “CCIE” is very lively. During the two weeks of internship, we learned a lot.In the company, the teacher gave us a lecture on actual cases. From the perspective of the project, we an

4、alysed customers demand and what kind of technical support his need. In general, the class was focus on practical application. During the classes. The CCIE teacher took our a group of students to do mainly the following experiments: single-arm routing, static routing and access control lists, corres

5、ponding to the subway network or campus network, the companys routing backup and server filter. They are such practical problems that we have a deep impression on these experiments up to now.In addition, the teacher also told us some interesting things that our students are very concerned about, suc

6、h as the PPPOE connection of campus telecom broadband, the cause of the wireless router which is invalid in school, wirelesss way of encryption and how to decode and so on. He mainly introduced some experiences when he was engaged in this industry, the present situation of 如果您需要使用本文檔，請(qǐng)點(diǎn)擊下載按鈕下載!netwo

7、rk industry and he also forecasted the future market. Lets have a certain understand of network engineering which can help us have a clear plan for the future.三、 實(shí)習(xí)目的本次實(shí)習(xí)是我們作為網(wǎng)絡(luò)工程學(xué)生的一次知識(shí)實(shí)踐，其主要目的在于：1. 掌握局域網(wǎng)的設(shè)計(jì)組建方法，并知曉對(duì)局域網(wǎng)的管理和排錯(cuò)維護(hù)等理論知識(shí)。2. 熟練運(yùn)用網(wǎng)絡(luò)配置命令，主要掌握有單臂路由，靜態(tài)路由和訪問控制列表配置方法。3. 將理論和實(shí)際工程結(jié)合起來(lái)，學(xué)會(huì)需求分析，增長(zhǎng)做

8、工程的見聞。4. 認(rèn)清社會(huì)現(xiàn)實(shí)，對(duì)計(jì)算機(jī)相關(guān)行業(yè)有一定的了解。四、 實(shí)習(xí)內(nèi)容分析(一) 實(shí)現(xiàn)在不同VLAN的兩臺(tái)主機(jī)的相互訪問。案例：某企業(yè)的需求，需要將兩個(gè)部門的某兩臺(tái)主機(jī)能互相訪問。原理：在兩臺(tái)主機(jī)所連的三層交換機(jī)上給同VLAN配置ip地址，作為主機(jī)的網(wǎng)關(guān)，交換機(jī)和三層交換機(jī)的連接接口配成trunk模式，使不同VLAN通過共享鏈路與其它交換機(jī)中的相同VLAN通信。實(shí)踐：二層交換機(jī)：SwitchenSwitch#conf tEnter configuration commands, one per line. End with CNTL/Z.Switch(config)#vlan 2如果您需

9、要使用本文檔，請(qǐng)點(diǎn)擊下載按鈕下載!Switch(config-vlan)#int f0/2Switch(config-if)#switch acc vlan 2Switch(config-if)#int f0/1Switch(config-if)#switch mode trunkSwitch(config-if)#endSwitch#show vlan VLAN Name Status Ports- - - -1 default active Fa0/3, Fa0/4, Fa0/5, Fa0/6 Fa0/7, Fa0/8, Fa0/9, Fa0/10 Fa0/11, Fa0/12, Fa0/

10、13, Fa0/14 Fa0/15, Fa0/16, Fa0/17, Fa0/18 Fa0/19, Fa0/20, Fa0/21, Fa0/22 Fa0/23, Fa0/24, Gig1/1, Gig1/22 VLAN0002 active Fa0/21002 fddi-default act/unsup 1003 token-ring-default act/unsup 1004 fddinet-default act/unsup 1005 trnet-default act/unsup 三層交換機(jī)：SwitchenSwitch#conf tEnter configuration comma

11、nds, one per line. End with CNTL/Z.Switch(config)#ip routingSwitch(config)#vlan 2Switch(config-vlan)#vlan 3Switch(config-vlan)#int f0/2Switch(config-if)#switch acc vlan 3Switch(config-if)#int vlan 2Switch(config-if)#ip add Switch(config-if)#int vlan 3Switch(config-if)#ip add

12、 Switch(config-if)#int f0/1Switch(config-if)#switch trunk en dot1q /給端口封裝協(xié)議Switch(config-if)#switch mode trunkSwitch(config-if)#endSwitch#show vlanVLAN Name Status Ports- - - -1 default active Fa0/3, Fa0/4, Fa0/5, Fa0/6 Fa0/7, Fa0/8, Fa0/9, Fa0/10如果您需要使用本文檔，請(qǐng)點(diǎn)擊下載按鈕下載! Fa0/11

13、, Fa0/12, Fa0/13, Fa0/14 Fa0/15, Fa0/16, Fa0/17, Fa0/18 Fa0/19, Fa0/20, Fa0/21, Fa0/22 Fa0/23, Fa0/24, Gig0/1, Gig0/22 VLAN0002 active 3 VLAN0003 active Fa0/21002 fddi-default act/unsup 1003 token-ring-default act/unsup 1004 fddinet-default act/unsup 1005 trnet-default act/unsup Switch#show ip int b

14、riInterface IP-Address OK? Method Status Protocol FastEthernet0/1 unassigned YES unset up up FastEthernet0/2 unassigned YES unset up up Vlan1 unassigned YES unset administratively down down Vlan2 YES manual up up Vlan3 YES manual up up驗(yàn)證：PC0 ping PC1注意點(diǎn)：三層交換機(jī)封裝端口配trunk的原理Cisc

15、o設(shè)備支持ISL和802.1q（dot1Q）協(xié)議。華為只支持802.1q。DOT1Q和ISL的區(qū)別：DOT1Q是各類產(chǎn)品的VLAN通用協(xié)議模式，Dot1q是一種普遍使用的標(biāo)準(zhǔn)，適用所有交換機(jī)與路由設(shè)備。支持超過1024vlan,而ISL最多支持1024個(gè)vlan。ISL是CISCO設(shè)備的專用協(xié)議，適用于Cisco設(shè)備。ISL(Interior Switching Link)交換機(jī)間協(xié)議用于實(shí)現(xiàn)CISCO交換機(jī)間的VLAN中繼。它是一個(gè)信息包標(biāo)記協(xié)議，在支持ISL接口上發(fā)送的幀由一個(gè)標(biāo)準(zhǔn)以太網(wǎng)幀及相關(guān)的VLAN信息組成。(二) 實(shí)現(xiàn)某臺(tái)主機(jī)只能以web的形式訪問服務(wù)器。如果您需要使用本文檔，請(qǐng)點(diǎn)

16、擊下載按鈕下載!案例：出于安全考慮，地鐵某臺(tái)服務(wù)器只允許通過web形式訪問，任何主機(jī)不能ping通它，且主機(jī)間不能相互訪問。原理：通過給路由器或者三層交換機(jī)配置訪問控制列表，使數(shù)據(jù)包只允許通過80端口，起到過濾的作用。實(shí)踐：二層交換機(jī)Switch0：Switch#conf tEnter configuration commands, one per line. End with CNTL/Z.Switch(config)#vlan 2Switch(config-vlan)#int f0/1Switch(config-if)#switch acc vlan 2Switch(config-if)#

17、int f0/2Switch(config-if)#switch mode trunkSwitch(config)#endSwitch#show vlanVLAN Name Status Ports- - - -1 default active Fa0/3, Fa0/4, Fa0/5, Fa0/6 Fa0/7, Fa0/8, Fa0/9, Fa0/10 Fa0/11, Fa0/12, Fa0/13, Fa0/14 Fa0/15, Fa0/16, Fa0/17, Fa0/18 Fa0/19, Fa0/20, Fa0/21, Fa0/22 Fa0/23, Fa0/24, Gig1/1, Gig1/

18、22 VLAN0002 active Fa0/11002 fddi-default act/unsup 1003 token-ring-default act/unsup 1004 fddinet-default act/unsup 1005 trnet-default act/unsup 如果您需要使用本文檔，請(qǐng)點(diǎn)擊下載按鈕下載!二層交換機(jī)Switch1：Switch#conf tEnter configuration commands, one per line. End with CNTL/Z.Switch(config)#vlan 3Switch(config-vlan)#int f0

19、/1Switch(config-if)#switch acc vlan 3Switch(config-if)#int f0/2Switch(config-if)#switch mode trunkSwitch(config)#endSwitch#show vlanVLAN Name Status Ports- - - -1 default active Fa0/3, Fa0/4, Fa0/5, Fa0/6 Fa0/7, Fa0/8, Fa0/9, Fa0/10 Fa0/11, Fa0/12, Fa0/13, Fa0/14 Fa0/15, Fa0/16, Fa0/17, Fa0/18 Fa0/1

20、9, Fa0/20, Fa0/21, Fa0/22 Fa0/23, Fa0/24, Gig1/1, Gig1/23 VLAN0003 active Fa0/11002 fddi-default act/unsup 1003 token-ring-default act/unsup 1004 fddinet-default act/unsup 1005 trnet-default act/unsup三層交換機(jī)：Switch#conf tEnter configuration commands, one per line. End with CNTL/Z.Switch(config)#ip rou

21、tingSwitch(config)#vlan 2Switch(config-vlan)#vlan 3Switch(config-vlan)#vlan 4Switch(config-vlan)#int vlan 2Switch(config-if)#ip add Switch(config-if)#int vlan 3Switch(config-if)#ip add Switch(config-if)#int vlan 4Switch(config-if)#ip add

22、Switch(config-if)#int f0/3Switch(config-if)#switch acc vlan 4Switch(config-if)#int f0/4Switch(config-if)#switch acc vlan 4Switch(config-if)#int f0/1Switch(config-if)#switch trunk en dot1q如果您需要使用本文檔，請(qǐng)點(diǎn)擊下載按鈕下載!Switch(config-if)#switch mode trunkSwitch(config-if)#int f0/2Switch(config-if)#

23、switch trunk en dot1qSwitch(config-if)#switch mode trunkSwitch#show vlanVLAN Name Status Ports- - - -1 default active Fa0/5, Fa0/6, Fa0/7, Fa0/8 Fa0/9, Fa0/10, Fa0/11, Fa0/12 Fa0/13, Fa0/14, Fa0/15, Fa0/16 Fa0/17, Fa0/18, Fa0/19, Fa0/20 Fa0/21, Fa0/22, Fa0/23, Fa0/24 Gig0/1, Gig0/22 VLAN0002 active

24、3 VLAN0003 active 4 VLAN0004 active Fa0/3, Fa0/41002 fddi-default act/unsup 1003 token-ring-default act/unsup 1004 fddinet-default act/unsup 1005 trnet-default act/unsupSwitch#show ip int briInterface IP-Address OK? Method Status Protocol FastEthernet0/1 unassigned YES unset up up FastEthernet0/2 un

25、assigned YES unset up up FastEthernet0/3 unassigned YES unset up up FastEthernet0/4 unassigned YES unset up up Vlan1 unassigned YES unset administratively down down Vlan2 YES manual up up Vlan3 YES manual up up Vlan4 YES manual up upSwitch#conf tEnter configuratio

26、n commands, one per line. End with CNTL/Z.Switch(config)# access-list 100 permit ip 55 55如果您需要使用本文檔，請(qǐng)點(diǎn)擊下載按鈕下載!Switch(config)#int vlan 2Switch(config-if)# ip access-group 100 outSwitch(config-if)#exitSwitch(config)# access-list 101 permit ip 55

27、 55Switch(config)#int vlan 3Switch(config-if)# ip access-group 101 outSwitch(config-if)#exitSwitch(config)# access-list 103 permit tcp any host eq 80Switch(config)# access-list 103 deny ip any host Switch(config)# access-list 103 permit ip any anySwitch(conf

28、ig)#int vlan 4Switch(config-if)# ip access-group 103 out/訪問列表101和102實(shí)現(xiàn)：pc0和pc1不能相互訪問，但都能訪問server0/訪問列表103實(shí)現(xiàn)：所有ip只能以web形式訪問server1Switch#show access-lExtended IP access list 100 permit ip 55 55Extended IP access list 101 permit ip 55 192.168.3.

29、0 55Extended IP access list 103 permit tcp any host eq www deny ip any host permit ip any any驗(yàn)證：1) PC0 無(wú)法ping通 PC12) PC0 無(wú)法ping通 server13) PC0 通過web訪問 server1如果您需要使用本文檔，請(qǐng)點(diǎn)擊下載按鈕下載!(三) 實(shí)現(xiàn)線路備份，在某條線路故障的情況下，導(dǎo)通另一條線路。特別說(shuō)明：本次實(shí)驗(yàn)是在上次vlan互訪實(shí)驗(yàn)和過濾實(shí)驗(yàn)的基礎(chǔ)上進(jìn)行拓展的，是個(gè)綜合實(shí)驗(yàn)，所以之前的已經(jīng)配置過的相關(guān)命令就不

30、再贅述了。案例：某用戶正常上網(wǎng)時(shí)通聯(lián)通的網(wǎng)，當(dāng)聯(lián)通網(wǎng)故障時(shí)，則自動(dòng)切換到移動(dòng)網(wǎng)。原理：在中間路由器上配置默認(rèn)靜態(tài)路由時(shí)，多設(shè)置一個(gè)管理距離，則管理距離小的先通，大的不通。實(shí)踐：三層交換機(jī)：將f0/5劃入vlan5，f0/6劃入vlan6，f0/23和f0/24劃入vlan2。給vlan2，vlan5和vlan6分配地址，作為所在vlan主機(jī)的網(wǎng)關(guān)。具體配置命令如上兩次實(shí)驗(yàn)，略過。服務(wù)器過濾采用的訪問控制列表實(shí)現(xiàn)如上次實(shí)驗(yàn)，不再贅述。給端口f0/1配置IP需要注意：Switch(config)#int f0/1Switch(config-if)# no switchport /開啟三層端口配置功

31、能Switch(config-if)# ip address 靜態(tài)路由Switch(config)# ip route FastEthernet0/1 /采用默認(rèn)靜態(tài)路由形式Switch#show ip routeCodes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA e

32、xternal type 1, N2 - OSPF NSSA external type 2如果您需要使用本文檔，請(qǐng)點(diǎn)擊下載按鈕下載! E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area * - candidate default, U - per-user static route, o - ODR P - periodic downloaded static routeGat

33、eway of last resort is to network C /24 is directly connected, FastEthernet0/1C /24 is directly connected, Vlan2C /24 is directly connected, Vlan5C /24 is directly connected, Vlan6S* /0 is directly connected, FastEthernet0/1中間路由器Route

34、0：給端口f0/0，f0/1，f1/0分配地址后，配置靜態(tài)路由。發(fā)出方向：Router(config)# ip route FastEthernet0/1 Router(config)# ip route FastEthernet1/0 34 /改這條默認(rèn)靜態(tài)路由管理距離為34返回方向：Router(config)# ip route FastEthernet0/0 Router(config)# ip route FastEt

35、hernet0/0Router#show ip routeCodes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS,

36、 L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area * - candidate default, U - per-user static route, o - ODR P - periodic downloaded static routeGateway of last resort is to network C /24 is directly connected, FastEthernet0/0S /24 is directly connect

37、ed, FastEthernet0/0S /24 is directly connected, FastEthernet0/0C /24 is directly connected, FastEthernet0/1C /24 is directly connected, FastEthernet1/0S* /0 is directly connected, FastEthernet0/1路由器Router1：給端口f0/0，f0/1分配地址后，配置靜態(tài)路由。Router(config)# ip route 192.168.

38、1.0 FastEthernet0/0Router(config)# ip route FastEthernet0/0Router(config)# ip route FastEthernet0/0Router#show ip route如果您需要使用本文檔，請(qǐng)點(diǎn)擊下載按鈕下載!Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP

39、 external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area * - candidate default, U - per-user static route, o - ODR P

40、- periodic downloaded static routeGateway of last resort is not setC /8 is directly connected, FastEthernet0/1S /24 is directly connected, FastEthernet0/0S /24 is directly connected, FastEthernet0/0S /24 is directly connected, FastEthernet0/0C /24 is

41、directly connected, FastEthernet0/0路由器Router2：給端口f0/0，f0/1分配地址后，配置靜態(tài)路由。Router(config)# ip route FastEthernet0/0Router(config)# ip route FastEthernet0/0Router(config)# ip route FastEthernet0/0Router#show ip routeCodes: C -

42、connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area * - candidate default, U