奧山ccna實(shí)驗(yàn)手冊

1、奧山ccna試驗(yàn)手冊目 錄實(shí)驗(yàn)一、配置stp與vtp3實(shí)驗(yàn)二、靜態(tài)路由11實(shí)驗(yàn)三、rip路由協(xié)議14實(shí)驗(yàn)四、ripv1與eigrp在不連續(xù)網(wǎng)絡(luò)下的比較21實(shí)驗(yàn)五、訪問列表與telnet訪問控制27實(shí)驗(yàn)六、靜態(tài)、動態(tài)nat與pat31實(shí)驗(yàn)七、幀中繼鏈路上運(yùn)行eigrp35實(shí)驗(yàn)八、背靠背幀中繼40實(shí)驗(yàn)一、配置stp與vtp 環(huán)境：三臺交換機(jī)，形成一個全互連結(jié)構(gòu)，sw3為2950，sw1和sw2為2900xl；要求：設(shè)置sw3為vtp server,設(shè)置sw1和sw2為vtp client,域名為cisco，密碼為：cisco，在server創(chuàng)建vlan 10(name:aa)和vlan20(nam

2、e:bb);設(shè)置sw3為vlan1的根橋，sw1為vlan10的根橋，sw2為vlan20的根橋； 初始化配置：sw#show vlan à查看vlan信息sw#delete vlan.dat à用此命令將vlan刪除sw#show startup-config à查看一下nvram是否保存了配置sw#erase startup-config à清空配置文件sw#reload à重新啟動交換機(jī)sw>enablesw#config terminalsw(config)#hostname sw1sw1(config)#no ip domain

3、-lookup à關(guān)閉域名查找sw1(config)#line console 0sw1(config-line)#logging synchronous à命令輸入達(dá)到同步sw1(config-line)#exec-timeout 0 0 à設(shè)置永不超時(shí)sw1(config-line)#exit步驟一、配置vtpsw3的配置：sw3(config)#vtp mode server à在sw3上啟用vtp serverdevice mode already vtp server.sw3(config)#vtp domain cisco à設(shè)置域

4、名changing vtp domain name from null to ciscosw3(config)#vtp password cisco à設(shè)置密碼setting device vlan database password to ciscosw1的配置:sw1#vlan database à進(jìn)入vlan數(shù)據(jù)庫sw1(vlan)#vtp client à啟用vtp client模式setting device to vtp client mode.sw1(vlan)#vtp domain cisco à作用到cisco域中changing vt

5、p domain name from null to ciscosw1(vlan)#vtp password cisco à設(shè)置密碼與server端相同 setting device vlan database password to cisco.sw1(vlan)#exit à使配置生效in client state, no apply attempted.exiting.sw2的配置:sw2#vlan databasesw2(vlan)#vtp clientsetting device to vtp client mode.sw2(vlan)#vtp domain ci

6、scochanging vtp domain name from null to ciscosw2(vlan)#vtp password ciscosetting device vlan database password to cisco.sw2(vlan)#exitsw2#步驟二、啟用干道端口sw3的配置：sw3(config)#interface fa0/23sw3(config-if)#switchport mode trunk à啟用trunk端口sw3(config-if)#interface fa0/24sw3(config-if)#switchport mode tr

7、unk sw1的配置：sw1(config)#interface fa0/23sw1(config-if)#switchport trunk encapsulation dot1q à封裝干道協(xié)議sw1(config-if)#switchport mode trunk à啟用trunk模式sw1(config-if)#sw1(config)#interface fa0/24sw1(config-if)#switchport trunk encapsulation dot1qsw1(config-if)#switchport mode trunksw2的配置：sw2(conf

8、ig)#interface fa0/23sw2(config-if)#switchport trunk encapsulation dot1qsw2(config-if)#switchport mode trunksw2(config)#interface fa0/24sw2(config-if)#switchport trunk encapsulation dot1qsw2(config-if)#switchport mode trunk步驟三、測試vtp狀態(tài)及創(chuàng)建vlansw3的狀態(tài)：sw3#show vtp status à顯示vtp狀態(tài)vtp version : 2confi

9、guration revision : 0 à配置修訂號maximum vlans supported locally : 254number of existing vlans : 5 vtp operating mode : server àvtp模式vtp domain name : cisco àvtp域名vtp pruning mode : disabledvtp v2 mode : disabledvtp traps generation : disabledmd5 digest : 0x3f 0x17 0xc8 0xb8 0x5a 0xe3 0x01

10、 0x66 configuration last modified by 0.0.0.0 at 0-0-00 00:00:00創(chuàng)建vlan:sw3(config)#vlan 10 à創(chuàng)建vlan10sw3(config-vlan)#name aa à命名為aasw3(config-vlan)#exit à應(yīng)用配置sw3(config)#vlan 20 à創(chuàng)建vlan20sw3(config-vlan)#name bb à命名為bbsw3(config-vlan)#exitsw3(config)#sw3的狀態(tài)：sw3#show vtp statu

11、s à在sw3顯示vtp的狀態(tài)vtp version : 2configuration revision : 2 àserver的修訂號maximum vlans supported locally : 254number of existing vlans : 7 àvlan也已經(jīng)增加vtp operating mode : servervtp domain name : ciscovtp pruning mode : disabledvtp v2 mode : disabledvtp traps generation : disabledmd5 digest

12、: 0x98 0x31 0xcf 0xa0 0xa7 0x17 0x73 0x66configuration last modified by 0.0.0.0 at 3-1-93 00:52:05sw2的狀態(tài)：sw2#show vtp statusvtp version : 2configuration revision : 2 à已經(jīng)同步了servermaximum vlans supported locally : 254number of existing vlans : 7vtp operating mode : clientvtp domain name : ciscovt

13、p pruning mode : disabledvtp v2 mode : disabledvtp traps generation : disabledmd5 digest : 0x98 0x31 0xcf 0xa0 0xa7 0x17 0x73 0x66configuration last modified by 0.0.0.0 at 3-1-93 00:52:05sw1的vlan信息:sw1#show vlan à顯示vlan信息vlan name status ports- - - -1 default active fa0/1, fa0/2, fa0/3, fa0/4,

14、fa0/5, fa0/6, fa0/7, fa0/8, fa0/9, fa0/10, fa0/11, fa0/12, fa0/13, fa0/14, fa0/15, fa0/16, fa0/17, fa0/18, fa0/19, fa0/20, fa0/21, fa0/22, fa0/23, fa0/2410 aa active à已經(jīng)同步了vlan的信息20 bb active步驟四、配置pvstsw3(config)#spanning-tree vlan 1 root primary à設(shè)置為vlan1的根橋sw1(config)#spanning-tree vlan

15、10 priority 4096 à設(shè)置為vlan10的根橋sw2(config)#spanning-tree vlan 20 priority 4096 à設(shè)置為vlan20的根橋步驟五、顯示stp的信息sw1的生成樹信息:sw1#show spanning-tree brief à顯示每vlan生成樹信息vlan1 spanning tree enabled protocol ieee root id priority 24577 address 0007.eb06.1740 à非vlan1的根橋 hello time 2 sec max age 2

16、0 sec forward delay 15 sec bridge id priority 32768 address 0030.803d.f640 hello time 2 sec max age 20 sec forward delay 15 secvlan10 spanning tree enabled protocol ieee root id priority 4096 address 0030.803d.f641 à為vlan10的根橋 this bridge is the root hello time 2 sec max age 20 sec forward dela

17、y 15 sec bridge id priority 4096 address 0030.803d.f641 hello time 2 sec max age 20 sec forward delay 15 secvlan20 spanning tree enabled protocol ieee root id priority 4096 address 00b0.645f.34c2 à非vlan20的根橋 hello time 2 sec max age 20 sec forward delay 15 sec bridge id priority 32768 address 0

18、030.803d.f642 hello time 2 sec max age 20 sec forward delay 15 secsw2的生成樹信息:sw2#show spanning-tree briefvlan1 spanning tree enabled protocol ieee à非vlan1的根橋 root id priority 24577 address 0007.eb06.1740 hello time 2 sec max age 20 sec forward delay 15 sec bridge id priority 32768 address 00b0.6

19、45f.34c0 hello time 2 sec max age 20 sec forward delay 15 secvlan10 spanning tree enabled protocol ieee root id priority 4096 à非vlan10的根橋 address 0030.803d.f641 hello time 2 sec max age 20 sec forward delay 15 sec bridge id priority 32768 address 00b0.645f.34c1 hello time 2 sec max age 20 sec f

20、orward delay 15 secvlan20 spanning tree enabled protocol ieee root id priority 4096 à為vlan20的根橋 address 00b0.645f.34c2 this bridge is the root hello time 2 sec max age 20 sec forward delay 15 sec bridge id priority 4096 address 00b0.645f.34c2 hello time 2 sec max age 20 sec forward delay 15 sec

21、sw3的生成樹信息:sw3#show spanning-treevlan0001 spanning tree enabled protocol ieee root id priority 24577 à為vlan1的根橋 address 0007.eb06.1740 this bridge is the root hello time 2 sec max age 20 sec forward delay 15 sec bridge id priority 24577 (priority 24576 sys-id-ext 1) address 0007.eb06.1740 hello

22、time 2 sec max age 20 sec forward delay 15 sec aging time 300vlan0010 spanning tree enabled protocol ieee root id priority 4096 à非vlan10的根橋 address 0030.803d.f641 cost 19 port 24 (fastethernet0/24) hello time 2 sec max age 20 sec forward delay 15 sec bridge id priority 32779 (priority 32768 sys

23、-id-ext 11) address 0007.eb06.1740 hello time 2 sec max age 20 sec forward delay 15 sec aging time 300vlan0020 spanning tree enabled protocol ieee root id priority 4096 à非vlan20的根橋 address 00b0.645f.34c2 cost 19 port 23 (fastethernet0/23) hello time 2 sec max age 20 sec forward delay 15 sec bri

24、dge id priority 32780 (priority 32768 sys-id-ext 12) address 0007.eb06.1740 hello time 2 sec max age 20 sec forward delay 15 sec aging time 300interface role sts cost prio.nbr type- - - - - -fa0/23 root fwd 19 128.23 p2pfa0/24 altn blk 19 128.24 p2p步驟六、顯示當(dāng)前配置結(jié)果sw1的配置結(jié)果：sw1#show running-config!hostna

25、me sw1!spanning-tree vlan 10 priority 4096！no ip domain-lookup!interface fastethernet0/23 switchport trunk encapsulation dot1q switchport mode trunk!interface fastethernet0/24switchport trunk encapsulation dot1q switchport mode trunk!endsw2的配置結(jié)果：sw2#show running-confighostname sw2！spanning-tree vlan

26、 20 priority 4096!no ip domain-lookup!interface fastethernet0/23switchport trunk encapsulation dot1q switchport mode trunk!interface fastethernet0/24 switchport trunk encapsulation dot1q switchport mode trunk!endsw3的配置結(jié)果：sw3#show running-config!hostname sw3!no ip domain-lookup!spanning-tree vlan 1 p

27、riority 24576!interface fastethernet0/23 switchport mode trunk!interface fastethernet0/24 switchport mode trunk!end實(shí)驗(yàn)二、靜態(tài)路由 環(huán)境：兩臺2500系列路由器通過串口相連。 要求：在r1和r2上啟用靜態(tài)路由，使兩端網(wǎng)絡(luò)能夠互通。步驟一、基本配置router>router>enablerouter#config terminalrouter(config)#hostname r1r1(config)#no ip domain-lookup r1(config)#lin

28、e console 0r1(config-line)# logging synchronous r1(config-line)#exec-timeout 0 0 r1(config-line)#exit步驟二:接口配置r1的配置：r1(config)#interface s0r1(config-if)#ip address 30.1.1.1 255.255.255.0r1(config-if)#clock rate 64000 à時(shí)鐘速率端r1(config-if)#no shutdownr1(config-if)#interface loopback 0r1(config-if)#

29、ip address 10.1.1.1 255.255.255.0r1(config-if)#r2的配置：router(config)#hostname r2r2(config)#interface s1r2(config-if)#ip address 30.1.1.2 255.255.255.0r2(config-if)#no shutdownr2(config-if)#interface loopback 0r2(config-if)#ip address 20.1.1.1 255.255.255.0r2(config-if)#exitr2(config)#步驟三、指定靜態(tài)路由r1(con

30、fig)#r1(config)#ip route 20.1.1.0 255.255.255.0 serial 0 à指定靜態(tài)路由r2(config)#r2(config)#ip route 10.1.1.0 255.255.255.0 30.1.1.1 à指定靜態(tài)路由步驟四、作ping 測試r1#pingprotocol ip:target ip address: 20.1.1.1 à目的地址extended commands n: y à是否用擴(kuò)展命令source address or interface: 10.1.1.1 à源地址! &#

31、224;顯示已通步驟五、顯示靜態(tài)路由條目r1#show ip routecodes: c - connected, s - static, i - igrp, r - rip, m - mobile, b - bgp d - eigrp, ex - eigrp external, o - ospf, ia - ospf inter area n1 - ospf nssa external type 1, n2 - ospf nssa external type 2 e1 - ospf external type 1, e2 - ospf external type 2, e - egp i -

32、 is-is, l1 - is-is level-1, l2 - is-is level-2, ia - is-is inter area * - candidate default, u - per-user static route, o - odr p - periodic downloaded static routegateway of last resort is not set 20.0.0.0/24 is subnetted, 1 subnetss 20.1.1.0 is directly connected, serial0 à靜態(tài)路由條目 10.0.0.0/24

33、is subnetted, 1 subnetsc 10.1.1.0 is directly connected, loopback0 30.0.0.0/24 is subnetted, 1 subnetsc 30.1.1.0 is directly connected, serial0步驟六、顯示當(dāng)前配置r1的配置結(jié)果：r1#show running-config!hostname r1!no ip domain-lookup!interface loopback0 ip address 10.1.1.1 255.255.255.0!interface serial0 ip address 3

34、0.1.1.1 255.255.255.0 clockrate 64000!ip route 20.1.1.0 255.255.255.0 serial0!line con 0 exec-timeout 0 0 logging synchronous transport input noneendr2的配置結(jié)果：r2#show running-config!hostname r2!no ip domain-lookup!interface loopback0 ip address 20.1.1.1 255.255.255.0!interface serial1 ip address 30.1.

35、1.2 255.255.255.0!ip route 10.1.1.0 255.255.255.0 30.1.1.1!line con 0 exec-timeout 0 0 logging synchronous!end實(shí)驗(yàn)三、rip路由協(xié)議 環(huán)境：兩臺2500系列路由器由串口相連。 要求：如下圖所示，在r1和r2上運(yùn)行ripv1,讓兩端能夠?qū)W習(xí)到對端的路由以達(dá)到通信的目的。 步驟一、基本配置router>router>enablerouter#config terminalrouter(config)#hostname r1r1(config)#no ip domain-look

36、up à關(guān)閉域名查找r1(config)#line console 0r1(config-line)# logging synchronous à命令輸入達(dá)到同步r1(config-line)#exec-timeout 0 0 à設(shè)置永不超時(shí)r1(config-line)#exit步驟二、接口ip配置r1的配置：r1(config)#interface s0r1(config-if)#ip address 30.1.1.1 255.255.255.0r1(config-if)#clock rate 64000 à注意時(shí)鐘速率端r1(config-if)#

37、no shutdownr1(config-if)#interface loopback 0r1(config-if)#ip address 10.1.1.1 255.255.255.0r1(config-if)#r2的配置：router(config)#hostname r2r2(config)#interface s1r2(config-if)#ip address 30.1.1.2 255.255.255.0r2(config-if)#no shutdownr2(config-if)#interface loopback 0r2(config-if)#ip address 20.1.1.1

38、 255.255.255.0r2(config-if)#exitr2(config)#步驟三、啟用rip路由選擇協(xié)議r1的配置：r1(config)#router rip à啟用ripr1(config-router)#network 30.0.0.0 à發(fā)布直連網(wǎng)段r1(config-router)#network 10.0.0.0r1(config-router)#exitr1(config)#r2的配置：r2(config)#router rip à啟用ripr2(config-router)#network 20.0.0.0 à發(fā)布直連網(wǎng)段r2(

39、config-router)#network 30.0.0.0r2(config-router)#exitr2(config)#end步驟四、顯示路由表，查看路由條目r1#show ip routecodes: c - connected, s - static, i - igrp, r - rip, m - mobile, b - bgp d - eigrp, ex - eigrp external, o - ospf, ia - ospf inter area n1 - ospf nssa external type 1, n2 - ospf nssa external type 2 e1

40、 - ospf external type 1, e2 - ospf external type 2, e - egp i - is-is, l1 - is-is level-1, l2 - is-is level-2, ia - is-is inter area * - candidate default, u - per-user static route, o - odr p - periodic downloaded static routegateway of last resort is not setr 20.0.0.0/8 120/1 via 30.1.1.2, 00:00:0

41、3, serial0 à學(xué)習(xí)來的路由條目 10.0.0.0/24 is subnetted, 1 subnetsc 10.1.1.0 is directly connected, loopback0 30.0.0.0/24 is subnetted, 1 subnetsc 30.1.1.0 is directly connected, serial0步驟五、用擴(kuò)展ping命令測試連通性r2#pingprotocol ip:target ip address: 10.1.1.1repeat count 5:datagram size 100:timeout in seconds 2:e

42、xtended commands n: ysource address or interface: 20.1.1.1!步驟六、顯示你當(dāng)前路由協(xié)議r2#show ip protocols à顯示你當(dāng)前路由協(xié)議配置情況和運(yùn)行狀態(tài)routing protocol is "rip" sending updates every 30 seconds, next due in 24 seconds invalid after 180 seconds, hold down 180, flushed after 240 outgoing update filter list fo

43、r all interfaces is incoming update filter list for all interfaces is redistributing: rip default version control: send version 1, receive any version interface send recv triggered rip key-chain loopback0 1 1 2 serial1 1 1 2 automatic network summarization is in effect routing for networks: 10.0.0.0

44、 20.0.0.0 routing information sources: gateway distance last update 30.1.1.1 120 00:14:05 distance: (default is 120)步驟七、顯示當(dāng)前配置r1的當(dāng)前配置：r1#show running-config!hostname r1!no ip domain-lookup!interface loopback0 ip address 10.1.1.1 255.255.255.0!interface serial0 ip address 30.1.1.1 255.255.255.0 clock

45、rate 64000!router rip network 30.0.0.0network 10.0.0.0!line con 0 exec-timeout 0 0 logging synchronous transport input noneendr2的當(dāng)前配置：r2#sh run!hostname r2!no ip domain-lookup!interface loopback0 ip address 20.1.1.1 255.255.255.0!interface serial1 ip address 30.1.1.2 255.255.255.0!router rip network

46、 30.0.0.0network 20.0.0.0!line con 0 exec-timeout 0 0 logging synchronous!end實(shí)驗(yàn)四、ripv1與eigrp在不連續(xù)網(wǎng)絡(luò)下的比較 環(huán)境：兩臺2500系列路由器，由串口相連。要求：在ripv1和eigrp中將兩個相同主類網(wǎng)絡(luò)的不同子網(wǎng)由另一個主類網(wǎng)絡(luò)分割，如何能學(xué)到對端網(wǎng)絡(luò)。 rip配置：步驟一、基本配置router>router>enablerouter#config terminalrouter(config)#hostname r1r1(config)#no ip domain-lookup r1(co

47、nfig)#line console 0r1(config-line)#logging synchronous r1(config-line)#exec-timeout 0 0 r1(config-line)#exit步驟二、接口配置r1的配置：r1(config)#interface s0r1(config-if)#ip address 172.16.1.1 255.255.255.0r1(config-if)#clock rate 64000 r1(config-if)#no shutdownr1(config-if)#interface loopback 0r1(config-if)#i

48、p address 10.1.1.1 255.255.255.0r1(config-if)#r2的配置：r2(config)#interface s1r2(config-if)#ip add 172.16.1.2 255.255.255.0r2(config-if)#no shutdownr2(config-if)#interface loopback 0r2(config-if)#ip address 10.1.2.1 255.255.255.0r2(config-if)#exitr2(config)#步驟三、啟用rip路由選擇協(xié)議r1的配置：r1(config)#router rip à啟用rip r1(config-router)#network 10.0.0.0 à發(fā)布直連網(wǎng)段r1(config-router)#network 172.16.0.0r1(config-router)#exitr1(config)#r2的配置：r2(config)#router rip à啟用ripr2(config-router)#network 10.0.0.0 à發(fā)布直連網(wǎng)段r2(config-router)#network 172.16.0.0r2(config-rout