本文通过思科模拟器详细展示了如何配置银行网络，实现生产PC、办公PC的访问权限隔离，并确保运维人员只能从特定地址管理所有设备。配置包括不同网络区域的路由设置、访问列表限制，以及OSPF协议的使用。
网络拓扑：
功能要求：
1.生产PC可以访问公共服务区服务器
2.生产PC可以访问生产服务器
3.办公PC可以访问公共服务区服务器
4.办公PC可以访问ISP服务器
5.运维人员可管理所有设备,仅10.10.11.1可管理所有设备
配置文件：
办公网络
Building configuration...
Current configuration : 1479 bytes
!
version 15.1
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname R1_BG
!
enable password qwer
!
username qwer password 0 qwer
!
license udi pid CISCO2911/K9 sn FTX1524J4DQ
!
spanning-tree mode pvst
!
interface Loopback0
ip address 6.6.6.6 255.255.255.0
!
interface GigabitEthernet0/0
ip address 100.100.100.254 255.255.255.0
duplex auto
speed auto
!
interface GigabitEthernet0/1
ip address 10.10.17.1 255.255.255.0
duplex auto
speed auto
!
interface GigabitEthernet0/2
ip address 10.10.16.2 255.255.255.0
duplex auto
speed auto
!
interface FastEthernet0/0/0
switchport trunk allowed vlan 1
switchport mode trunk
!
interface FastEthernet0/0/1
switchport mode access
shutdown
!
interface FastEthernet0/0/2
switchport mode access
shutdown
!
interface FastEthernet0/0/3
switchport mode access
shutdown
!
interface Vlan1
ip address 114.114.114.254 255.255.255.0
!
router ospf 100
router-id 6.6.6.6
log-adjacency-changes
redistribute static subnets
network 6.6.6.6 0.0.0.0 area 0
network 10.10.17.0 0.0.0.255 area 0
network 100.100.100.0 0.0.0.255 area 0
network 114.114.114.0 0.0.0.255 area 0
!
ip classless
ip route 10.10.8.0 255.255.255.0 10.10.16.1
ip route 10.10.15.0 255.255.255.0 10.10.16.1
!
access-list 1 permit host 10.10.11.1
!
line con 0
!
line aux 0
!
line vty 0 4
access-class 1 in
password qwer
login local
!
End
Building configuration...
Current configuration : 868 bytes
!
version 12.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname R2_BG
!
enable password qwer
!
username qwer password 0 qwer
!
spanning-tree mode pvst
!
interface Loopback0
ip address 5.5.5.5 255.255.255.255
!
interface FastEthernet0/0
ip address 10.10.18.1 255.255.255.0
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 10.10.17.2 255.255.255.0
duplex auto
speed auto
!
interface Vlan1
no ip address
shutdown
最低0.47元/天 解锁文章
扫一扫
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
