HCIA练习

1.在lsw1中创建vlan

<Huawei>system-view 
[Huawei]vlan batch 2 3  批量创建vlan
[Huawei]interface g0/0/1
[Huawei-GigabitEthernet0/0/1]port link-type access 定义该接口下的链路类型为access
[Huawei-GigabitEthernet0/0/1]port default vlan 3 定义该接口下的链路属于vlan 3
[Huawei-GigabitEthernet0/0/1]q
[Huawei]interface g0/0/2
[Huawei-GigabitEthernet0/0/2]port link-type access
[Huawei-GigabitEthernet0/0/2]port default vlan 2
[Huawei-GigabitEthernet0/0/2]q
[Huawei]interface g0/0/4
[Huawei-GigabitEthernet0/0/4]port link-type access
[Huawei-GigabitEthernet0/0/4]port default vlan 3
[Huawei-GigabitEthernet0/0/4]q
[Huawei]interface g0/0/3
[Huawei-GigabitEthernet0/0/3]port link-type trunk  定义该接口下的链路为turnk
[Huawei-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 3 该接口下可通过的vlan为 2  和  3

[Huawei]display vlan

2.配置AR6

内网配置

[AR6-GigabitEthernet0/0/2]ip address 192.168.1.1 30
[AR6-GigabitEthernet0/0/0]ip address 192.168.1.5 30
[AR6]interface g0/0/0.2
[AR6-GigabitEthernet0/0/0.2]dot1q termination vid 2 与vlan相连
[AR6-GigabitEthernet0/0/0.2]ip address 192.168.1.129 26
[AR6-GigabitEthernet0/0/0.2]interface g0/0/0.3
[AR6-GigabitEthernet0/0/0.3]dot1q termination vid 3
[AR6-GigabitEthernet0/0/0.3]ip address 192.168.1.193 26

DHCP配置

缺省路由

[AR6]ip route-static 0.0.0.0 0 192.168.1.2
[AR6]ip route-static 0.0.0.0 0 0.0.0.0 192.168.1.6 preference 61

禁止pc2访问3.3.3.3

[AR6]acl 3000
[AR6-acl-adv-3000]rule deny ip source 192.16.1.253 0.0.0.0 destination 3.3.3.3 0

规定 拒绝 源 192.16.1.253 向 目标IP 3.3.3.3 的IP协议行为  
[AR6-GigabitEthernet0/0/0.3]traffic-filter inbound acl 3000在该接口上 调用acl3000

AR5配置

[AR5-GigabitEthernet0/0/1]ip address 13.0.0.1 24
[AR5-GigabitEthernet0/0/0]ip address 192.168.1.6 30
[AR5-GigabitEthernet0/0/2]ip address 192.168.1.2 30

配置acl和nat

使AR5可以被telnet控制

AR3配置

[AR3-GigabitEthernet0/0/0]ip address 13.0.0.3 24
 
[AR3-GigabitEthernet0/0/1]ip address 34.0.0.3 24
 
[AR3GigabitEthernet0/0/2]ip address 35.0.0.3 24

环回设置

AR4配置

[AR4-GigabitEthernet0/0/0]ip address 34.0.0.4 24
[AR4-GigabitEthernet0/0/1]ip address 100.1.1.254 24

设置rip

AR2配置

设置网关和rip

AR1配置

ip

[AR1-GigabitEthernet0/0/1]ip address 172.16.1.254 24
 
[AR1-GigabitEthernet0/0/0]ip address 56.0.0.6 24

[AR1]ip route-static 0.0.0.0 0 56.0.0.5  缺省路由

端口映射

[AR6-GigabitEthernet0/0/0]nat server protocol tcp global current-interface 80 ins
ide 172.16.1.1 80
 
[AR6]acl 2000
 
[AR6-acl-basic-2000]rule permit source 172.16.1.0 0.0.0.255
 
[AR6-GigabitEthernet0/0/0]nat outbound 2000