網(wǎng)絡(luò)系統(tǒng)建設(shè)與運(yùn)維初級 6.4 綜合實驗

4.IPv4編址及靜態(tài)路由配置您是公司的網(wǎng)絡(luò)管理員，現(xiàn)在公司安排您來組建企業(yè)網(wǎng)。通過本項目可以掌握如下知識點(diǎn)和技能點(diǎn)。本項目的主要任務(wù)是復(fù)習(xí)與鞏固網(wǎng)絡(luò)運(yùn)維相關(guān)的知識點(diǎn)和能力。步驟7STelnet遠(yuǎn)程登步驟10電子標(biāo)簽、配置文件等資步驟1數(shù)據(jù)準(zhǔn)備。型U=untaggedT=tagged4To_staffAccess4Access115To_staffAccess51無無無huaweihuawei@B1webuserhuawei123huaweihuawei@B2huaweihuawei@HQhuawei123步驟1設(shè)備名稱和接口描述等基礎(chǔ)配置，此處列出HQ-R上的配置，其他設(shè)備的基礎(chǔ)Entersystemview,returnuserviewwi[HQ-R]interfaceGigabi[HQ-R-GigabitEthernet0/0/0]descrip[HQ-R]interfaceGigabi[HQ-R-GigabitEthernet0/0/1]descrip[HQ-R]interfaceGigabit[HQ-R-GigabitEthernet0/0/2]descri[HQ-S-1-Eth-Trunk1]m[HQ-S-1]interfaceGigabi[HQ-S-1-GigabitEthernet0/0/[HQ-S-1]interfaceGigabi[HQ-S-2-Eth-Trunk1]m[HQ-S-2]interfaceGiga[HQ-S-2]interfaceGigabi[HQ-S-1]interfaceGigabi[HQ-S-1-GigabitEthernet0/0/1]port[HQ-S-1-GigabitEthernet0/0/1]porthybridp[HQ-S-1-GigabitEthernet0/0/1]porthybrid[HQ-S-1]interfaceGigabi[HQ-S-1-GigabitEthernet0/0/2]port[HQ-S-1-GigabitEthernet0/0/2]portde[HQ-S-1-GigabitEthe[HQ-S-1]interfaceGigabitE[HQ-S-1-GigabitEthernet0/0/24]porthybrid[HQ-S-1-GigabitEthe[HQ-S-1-Eth-Trunk1]portli[HQ-S-1-Eth-Trunk1]porttrunka[HQ-S-2]interfaceGigabi[HQ-S-2-GigabitEthernet0/0/1]port[HQ-S-2-GigabitEthernet0/0/1]port[HQ-S-2-GigabitEthernet0/0/1]porthybrid[HQ-S-2]interfaceGigabi[HQ-S-2-GigabitEthernet0/0/2]port[HQ-S-2-GigabitEthernet0/0/2]portdefaultv[HQ-S-2-Eth-Trunk1]portli[HQ-S-2-Eth-Trunk1]porttrunka步驟4IPv4編址。按表[B1-R]interfaceGigabi[B1-R]interfaceGigabi[B2-R]interfaceGigabi[B2-R]interfaceGigabi[HQ-R]interfaceGigabi[HQ-R]interfaceGigabi[HQ-R]interfaceGigabi步驟5靜態(tài)路由配置，假定分公司訪問互聯(lián)網(wǎng)需要經(jīng)過總部HQ-R上中轉(zhuǎn)。因此對于分公司之間的通信，采用浮動路由配置，主路由為B1R到B2R互聯(lián)的鏈路，備份路由為經(jīng)過HQR再到B2R的鏈路，具體配置如下。lB2R上的配置。與B1R類似，B2R上配置一條缺省路步驟6Telnet遠(yuǎn)程登[B1-R]user-interface[B1-R]user-interface[B1-R-ui-vty0-4]authenticaPleaseconfiguretheloginpasswor[B1-R-ui-vty0-4]userprivilegel[B1-R]superpassword[B1-R]superpassword[B2-R-aaa]local-userhuaweipasswor[B2-R-aaa]local-userhuaweiservice-[B2-R-aaa]local-userhuaweiprivile[B2-R-ui-vty0-4]auth[B2-R-ui-vty0-4]userpriv[B2-R]superpassword[HQ-R-aaa]local-userhuaweipasswo[HQ-R-aaa]local-userhuaweiprivilegel[HQ-R-aaa]local-userhuaw[HQR]user-interface[HQR]user-interface[HQR-ui-vty0-4]authentic[HQR-ui-vty0-4]userprivilegele[HQ-R]rsalocal-key-paThekeynamewillb%RSAkeysdefinedforHosConfirmtoreplacethem?(yTherangeofpublickeysizeis(512~2048).NOTES:Ifthekeymodulusisgreaterthan512,Inputthebitsinthemodulus[default=Generatingkeys..............................[HQ-R]sshuserhuaweiauthenticat[HQ-R]sshuserhuaweiauthenticat步驟8配置Web登錄相關(guān)設(shè)置。配“huawei123”，https端[B1-R-aaa]local-userwebuserpasswordc[B1-R-aaa]local-userwebuser[B1-R-aaa]local-userwebuserse[B1-R]httpserverpermitinterfaceGiga注：在使能HTTPS服務(wù)時，可能會提示沒有配置S[B1-R]sslpolicyde[B1-R-ssl-policy-default][B1-R]httpsecure-serv步驟9FTP服務(wù)器搭建。該部分配置實驗只要求在HQ-R上完成。要求路由器HQ-R上搭建FTP服務(wù)器，F(xiàn)TP用戶名為[HQ-R]setdefaultftp-di[HQ-R-aaa]local-userftpuserpasswordciph[HQ-R-aaa]local-userftpuserse[HQ-R-aaa]local-userftpuserftp-d步驟10電子標(biāo)簽、配置文件等備1）路由器HQR上執(zhí)行如下操作，將電子標(biāo)簽備份到本地，建議文件名為“設(shè)備-elabel-日期”。[HQ-R]backupelabel[HQ-R]backupelabel<<HQ-R>saveHQR-cfg-0506.zipAreyousuretosavetheconfigurationtoHQR-cfg-0506.zipItwilltakeseveralminutestosaveconfigurationfConfigurationfilehadbeeNote:Theconfigurationfilewilltakeeffectafter3）維護(hù)終端上執(zhí)行如下操作，將電子標(biāo)簽、配置文件保存到計算機(jī)。530PleaseloginwithUSER用戶(:(none)):f331Passwordrequiredfor684May0607:09rsa_host_key.efs2263May0604:49statemach.efs223May0604:56private-150OpeningBINARYmodedataconnectionf150OpeningBINARYmodedataconnectionEth-Trunk1'sstateinfHasharithmetic:AccordNumberOfUpPortInTrunk:2ActorPortNameStatusPortTypePortPriPortNoPortKeyPortStateWeight-------------------------------------------------------------------------ActorPortNameSysPriSystemIDPortPriPortNoPortKeyPoEth-Trunk1'sstateinfHasharithmetic:AccoNumberOfUpPortInTrunk:2 ActorPortNameStatusPortTypePortPriPortNoPortKeyPortStateW-------------------------------------------------------------------------ActorPortNamePortPriPortNoPortKeyPort4c1f-ccd7-178614411111111111111111111155111111111111111111111的Ping2的Ping步驟3執(zhí)行[displayipinterf<B1-R><B1-R>displayipinterfacebriefThenumberofinterfacethatisUPinPhysicalis4ThenumberofinterfacethatisThenumberofinterfacethatisUPinProtocolis4ThenumberofinterfacethatisDOWNinProtocolis1InterfaceIPAddress/MaskGigabitEthernet0/0/0unassignedGigabitEthernet0/0/1/24GigabitEthernet0/0/2/24LoopBack0/24NULL0unassignedupup(s)<B2-R><B2-R>displayipinterfacebriefThenumberofinterfacethatisUPinPhysicalis4ThenumberofinterfacethatisDOWNinPhysicaliThenumberofinterfacethatisUPinProtocolis4ThenumberofinterfacethatisDOWNinProtocolis1ProtocolupupupupNULL0unassignedupupup(s)up(s)<HQ-R>displayipinterfacebriefThenumberofinterfacethatisUPinPhysicalis5ThenumberofinterfacethatisDOWNinPhyThenumberofinterfacethatisUPinProtocolis5ThenumberofinterfacethatisDOWNinProtocolis0Protocolupupupupupupupup(s)NULL0unassignedupup(s)<B1-R>dispiprouting-tableprotocolstaRouteFlags:R-relay,Destination/MaskProtoPreCoNextHop00Destination/MaskProtoPreCNextHopR<B2-R>displayiprouting-tableprotocolstRouteFlags:R-relay,NextHop00Destination/MaskProtoPreCNextHopR<HQ-R>displayiprouting-tableprotocolstaticRouteFlags:R-relay,-----------------------------------------------------------------------NextHop0000總部PC測試到分公司2的連通性并跟蹤路由。12123123tracerouteto(),maxhops:30,packetlength:40,pressCTRL_C120ms20ms10msB1-R上關(guān)閉接口GE0/0/2（模擬接口故障），此份鏈路（繞行HQ-R）進(jìn)行通信。查看路<B1-R>displayiprouting-tableprotocolstatRouteFlags:R-relay,NextHop00PreCostFlaNextHoptracerouteto(),maxhops:30,packetlength:40,pressCTRL_C^Error:UnrecognizedcommandfoundatNowuserprivilegeislevel3,andonlythosecommandsequaltoorlessthanthislPrivilegenote:0-VISIT,1-MOEntersystemview,returnuserviewwit2）B1-R上查看Telnet服務(wù)<B1-R>displaytelnetserversUser-IntfDelayTypeNetworkAddressAuthenStatusAuthorcm--------------------------------------------------------------------^Error:Unrecognizedcommandfoundat'^'posiNowuserprivilegeislevel3,andonlythosecommandsequaltoorlessthanthislPrivilegenote:0-VISIT,1-MOEntersystemview,returnuserviewwi2）B2-R上查看Telnet服務(wù)User-IntfDelayTypeNetworkAddressAuthenStatusAuthoSSHserverkeygeneConnVerEncryStateAuth-type-------------------------------------------------------------VTY02.0AESrunpassword步驟8查看Web服務(wù)器狀態(tài)，并進(jìn)行登錄管理。:終端上使用URL::8443,進(jìn)行遠(yuǎn)程Web登錄管理。步驟9終端測試登錄HQR的FTP服務(wù)器，然后查看FTP服務(wù)器相關(guān)配置及狀態(tài)。UsercountTimeoutvalue(inminute)Listeningport21Aclnumberusernamehostportidle<B1-R>displaycurrent-configura##superpasswordlevel3cipher%$%$n=z)5Gcqs:%"<_DrQD#httpsecure-serverssl-policydefahttpsecure-serverenhttpserverpermitinterfaceGigabitEthernet0/0/1##local-userwebuserpasswordcipher%$%$`bv:%2Mi75)G\kG;7local-userwebuserprivilegelevel3local-userwebuserservice-typ#interfaceGigabitEther#interfaceGigabitEther###user-interfacevty04setauthenticationpasswordcipher%$%$Bz1f7*~W3DH`]h8F}K8+,,]VnS`>@\G+`6bw7W!OxI#<B2-R>displaycurrent-configuration[V200R003C00]#sysnameB2-R#superpasswordlevel3cipher%$%$xeW[&$3T"A>hg`Ur$[wV,,uv%$%$#aaaauthentication-schemedefaultauthorization-schemedefaultaccounting-schemedefaultdomaindefaultdomaindefault_adminlocal-useradminpasswordcipher%$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$local-useradminservice-typehttplocal-userhuaweipasswordcipher%$%$>e60(ZMjLKrG-,;1!:=1Q5J@%$%$local-userhuaweiprivilegelevel0local-userhuaweiservice-typetelnet#interfaceGigabitEthernet0/0/0descriptionto-HQ-Ripaddress#interfaceGigabitEthernet0/0/2descriptionto-B1-Ripaddress#interfaceLoopBack0ipaddress#iproute-staticiproute-staticiproute-staticpreference80#user-interfacecon0authentication-modepassworduser-interfacevty04authentication-modeaaauser-interfacevty1620#return[HQ-R]displaycurre##superpasswordlevel3cipher%$%$}*yM's@C3;Mi#lo