企業(yè)級網(wǎng)絡ip地址規(guī)劃與配置

1、企業(yè)級網(wǎng)絡ip地址規(guī)劃與配置以設計具有三層結構的大型企業(yè)級網(wǎng)絡設計為例，完成IP地址的分配、NAT地址轉換、三層網(wǎng)絡拓撲結構等功能，并選擇合適的設備實現(xiàn)該網(wǎng)絡，用模擬器驗證通連性。二、實驗拓撲結構圖與IP規(guī)劃 拓撲實現(xiàn)：ROUTER0為本園區(qū)網(wǎng)絡的出口，并在出口處通過NAT轉換來實現(xiàn)與外網(wǎng)的連接，出口網(wǎng)絡地址為1，三臺路由器構成的主路由區(qū)域使用RIP動態(tài)路由協(xié)議，ROUTER1所連為園區(qū)網(wǎng)絡服務器群，網(wǎng)段為 /24；由于設備限制在此只設置WEB與FTP服務器模擬現(xiàn)實中的服務器群，ROUTER3所連網(wǎng)段為/24。Switch0模擬現(xiàn)實

2、中的新交換機，并與switch3做鏈路負載均衡，switch1與switch1之間使用PVLAN技術連接，做到本交換機上VLAN之間的隔離與整體的透傳，Switch3模擬學生機房主交換機，與switch1之間使用兩條普通鏈路，利用端口匯聚技術實現(xiàn)帶寬的增加，并在交換機上連接一臺DHCP服務器實現(xiàn)IP地址的自動分配，DHCP服務器使用windows 2003 server 附帶的DHCP組建實現(xiàn)，由于設備限制，本次試驗采用架設在VM虛擬機中的windows 2003 server操作系統(tǒng)實現(xiàn)，虛擬機與現(xiàn)實網(wǎng)絡通過橋接網(wǎng)絡通信，wlan部分采用單AP布局，AP型號為NETGEAR，internet

3、接口地址為：54，LAN地址段為 /24。3、 實驗器材：設備名稱設備數(shù)量設備作用華為R2501路由器3路由、尋徑華為s2008交換機4服務器2Web服務器/DHCP服務器無線AP(netgear)1構建無線網(wǎng)絡PC機6筆記本（帶無線網(wǎng)卡）2四、配置過程：配置命令：Router0：Quidwaysysname router0 /重新命名交路由器router0int s0 /配置串行鏈路接口router0-Serial0ip add 52 /配置接口IP地址router0-Serial0link-p

4、rotocol ppp /鏈路層啟用PPP協(xié)議router0-Serial0quitrouter0int s1router0-Serial1ip add 52router0-Serial1link-protocol ppprouter0-Serial1quitrouter0rip /啟用RIP協(xié)議router0-ripnetwork all /發(fā)布直連網(wǎng)絡router0-ripquitrouter0nat address-group 1 1 pool 1 /設定nat地址池router0acl 1rout

5、er0-acl-2rule permit source /設定ACL規(guī)則router0-acl-2rule permit source router0-acl-2quitrouter0int e0router0-Ethernet0nat outbound 1 address-group pool1 /增加訪問控制列表和端口關聯(lián)router0-Ethernet0ip route-s /設置缺省路由router0-Ethernet0nat server global ftp

6、tcp /設置內(nèi)部FTP服務器router0-Ethernet0nat server global www tcp /設置內(nèi)部WWW服務器router0-Ethernet0quitRouter1：<Quidway>syspassword:Quidwaysysname router1router1int s0router1-Serial0ip add 52router1-Serial0link-protocol ppprouter1-Serial0clock dteclk1router1-Serial0int s1

7、router1-Serial1ip add 0 52router1-Serial1link-protocol ppprouter1-Serial1int e0router1-Ethernet0ip add router1-Ethernet0quitrouter1riprouter1-ripnetwork allrouter1ip route-s s0 Router 3：<Quidway>sysQuidwaysysname router3router3int

8、s0router3-Serial0ip add 52router3-Serial0link-protocol ppprouter3-Serial0clock dteclk1router3-Serial0int s1router3-Serial1ip add 52router3-Serial1link-protocol ppprouter3-Serial1clock dteclk1router3-Serial1int e0router3-Ethernet0ip add 2

9、router3-Ethernet0quitrouter3riprouter3-ripnetwork allrouter3-riprouter3ip route-s s1 Switch0:<Quidway>syspassword:Quidwaysysname switch0switch0int e 0/1 /進入端口視圖switch0-Ethernet0/1port link-type trunk /設置端口類型為TRUNKswitch0-Ethernet0/1port trunk permit vlan all /允許通過所有

10、VLANswitch0-Ethernet0/1duplex full /設置工作模式為全雙工switch0-Ethernet0/1speed 100 /設置速率為100Mbpsswitch0int e 0/2switch0-Ethernet0/2port link-type trunk switch0-Ethernet0/2port trunk permit vlan allswitch0-Ethernet0/2duplex full /設置工作模式為全雙工switch0-Ethernet0/2speed 100 /設置速率為100Mbpsswitch0-Ethernet0/2quitswit

11、ch0link-aggreation int e0/1 to int e0/2 both /設置匯聚連接switch0 Switch1: <Quidway>sys Quidwaysysname switch1switch1vlan 8 /配置VLAN信息switch1-vlan8port eth 0/1 to eth 0/4 /加入端口switch1-vlan8vlan 24switch1-vlan24port eth 0/5 to eth 0/8switch1-vlan24quitswitch1vlan 23 /配置isovlanswitch1-vlan23isolate-use

12、r-vlan enable /啟用ISOswitch1-vlan23port eth 0/9 /加入端口switch1-vlan23isolate-user-vlan 23 secondary 8 24 /配置與二層vlan之間關聯(lián)信息switch1-vlan23Switch2: <Quidway>sys Quidwaysysname switch2switch2vlan 4switch1-vlan8port eth 0/8switch2-vlan8port eth 0/1 to eth 0/4switch2-vlan8vlan 5switch2-vlan24port eth 0/

13、5 to eth 0/8switch2-vlan24quitswitch2vlan 23switch2-vlan23isolate-user-vlan enableswitch2-vlan23port eth 0/9switch2-vlan23isolate-user-vlan 23 secondary 4 5switch2-vlan23Switch3: <Quidway>syspassword:Quidwaysysname switch3switch3int e 0/1switch3-Ethernet0/1port link-type trunk switch3-Ethernet0/1port trunk permit vlan allswitch3-Ethernet0/1duplex full switch3-Ethernet0/1speed 100 switch3-Ethernet0/1int e 0/2switch3-Ethernet0/2port link-type trunkswitch3-Ethernet0/2port trunk permit vlan allswitch3-Ethernet0/2duplex full switch3-Ethernet0/2speed 100 switch3-Ethernet0/2quitswitch3link-agg