VLAN作业

一、要求
1、ISP路由器只配置IP地址，再不做任何配置；
2、内部网络基于192.168.1.0/24进行规划；
3、R1-R2之间启动ospf协议，
4、PC1-PC4自动获取IP地址；
5、PC1不能Telnet R1，其他内网pc都可以Telnet；
6、PC1-PC4可以访问PC5，R2的公网接口只有一个公网IP：12.1.1.1；
7、ISP路由Telnet 12.1.1.1 ，最终成功登录到R1上；
二、拓扑图

三、实验过程
1.r1配置
（1）接口ip配置

[R1]interface GigabitEthernet 0/0/0
[R1-GigabitEthernet0/0/0] ip address 192.168.1.0 255.255.255.252
[R1-GigabitEthernet0/0/0]interface GigabitEthernet 0/0/1
[R1-GigabitEthernet0/0/1] ip address 192.168.1.5 255.255.255.248

（2）OSPF部署
匹配 R1-R2 互联段：

R1]ospf 1
[R1-ospf-1] area 0 
[R1-ospf-1-area-0.0.0.0]  network 192.168.1.0 0.0.0.3

匹配 Area 1 网段

[R1-ospf-1-area-0.0.0.0]area 1 
[R1-ospf-1-area-0.0.0.1]  network 192.168.1.4 0.0.0.7 

（3）DHCP配置

[R1]dhcp enable

[R1]ip pool VLAN2  
[R1-ip-pool-VLAN2]network 192.168.1.4 mask 255.255.255.248
[R1-ip-pool-VLAN2]gateway-list 192.168.1.5
[R1-ip-pool-VLAN2]dns-list 8.8.8.8 

[R1-ip-pool-VLAN2]lease day 1 hour 0 minute 0

[R1-ip-pool-VLAN2]ip pool VLAN3
[R1-ip-pool-VLAN3]network 192.168.1.12 mask 255.255.255.248

[R1-ip-pool-VLAN3]gateway-list 192.168.1.13

[R1-ip-pool-VLAN3]dns-list 8.8.8.8
[R1-ip-pool-VLAN3]lease day 1 hour 0 minute 0

(4)配置Telnet访问控制（拒绝PC1,允许其他设备）

[R1]acl number 2000
[R1-acl-basic-2000]rule 10 deny source 192.168.1.6 0
[R1-acl-basic-2000]rule 20 permit source any 

[R1]user-interface vty 0 4
[R1-ui-vty0-4]authentication-mode password 
Please configure the login password (maximum length 16):123456
[R1-ui-vty0-4]user privilege level 3 
[R1-ui-vty0-4]acl 2000 inbound

（5）配置静态路由

[R1]ip route-static 1.1.1.0 255.255.255.0 192.168.1.1 
[R1]ip route-static 0.0.0.0 0.0.0.0 192.168.1.1

2.R2配置
（1）接口IP配置

[R2]interface GigabitEthernet 0/0/0
[R2-GigabitEthernet0/0/0]ip address 192.168.1.1 255.255.255.252  
[R2-GigabitEthernet0/0/0]]interface GigabitEthernet 0/0/1
[R2-GigabitEthernet0/0/1]ip address 12.1.1.1 255.255.255.0  
[R2-GigabitEthernet0/0/1]interface GigabitEthernet 0/0/2
[R2-GigabitEthernet0/0/2]ip address 192.168.1.13 255.255.255.248

（2）OSPF部署

[R2]ospf 1 router-id 2.2.2.2 
[R2-ospf-1]area 0 
[R2-ospf-1-area-0.0.0.0]network 192.168.1.0 0.0.0.3 
[R2-ospf-1-area-0.0.0.0]area 2 
[R2-ospf-1-area-0.0.0.2]network 192.168.1.12 0.0.0.7 

（3）配置NAT转换

[R2]acl number 3000
[R2-acl-adv-3000]rule 10 permit ip source 192.168.1.0 0.0.0.255 destination 1.1.1.0 0.0.0.255  
[R2-acl-adv-3000]rule 20 permit ip source 192.168.1.0 0.0.0.255 destination any
[R2]interface GigabitEthernet 0/0/1
[R2-GigabitEthernet0/0/1]nat outbound 3000

（4）配置静态路由

[R2]ip route-static 0.0.0.0 0.0.0.0 12.1.1.2 
[R2]ip route-static 1.1.1.0 255.255.255.0 12.1.1.2

3.SW1配置
（1）配置连接PC1的接口

[SW1]vlan batch 2 3
[SW1]interface GigabitEthernet 0/0/2
[SW1-GigabitEthernet0/0/2]port link-type access
[SW1-GigabitEthernet0/0/2]port default vlan 2

（2）配置连接PC2的接口

[SW1]interface GigabitEthernet 0/0/3
[SW1-GigabitEthernet0/0/3]port link-type access
[SW1-GigabitEthernet0/0/3]port default vlan 3

（3）配置连接R1的接口

[SW1]interface GigabitEthernet 0/0/1
[SW1-GigabitEthernet0/0/1]port link-type trunk
[SW1-GigabitEthernet0/0/1]port trunk allow-pass vlan 2 3

（4）配置VLAN 2的VLANIF接口

[SW1]interface Vlanif 2
[SW1-Vlanif2]ip address 192.168.1.5 255.255.255.248 
[SW1-Vlanif2]dhcp select relay  
[SW1-Vlanif2]dhcp relay server-ip 192.168.1.5 

（5）配置VLAN 3的VLANIF接口

[SW1]interface Vlanif 3
[SW1-Vlanif3]ip address 192.168.1.13 255.255.255.248
[SW1-Vlanif3]dhcp select relay
[SW1-Vlanif3]dhcp relay server-ip 192.168.1.5

4.SW2配置
（1）配置连接PC3的接口

[SW2]vlan batch 2 3
[SW2]interface GigabitEthernet 0/0/2
[SW2-GigabitEthernet0/0/2]port link-type access
[SW2-GigabitEthernet0/0/2]port default vlan 2

（2）配置连接PC4的接口

[SW2]interface GigabitEthernet 0/0/3
[SW2-GigabitEthernet0/0/3]port link-type access
[SW2-GigabitEthernet0/0/3]port default vlan 3

(3)配置连接R2的接口

[SW2]interface GigabitEthernet0/0/1
[SW2-GigabitEthernet0/0/1]port link-type trunk
[SW2-GigabitEthernet0/0/1]port trunk allow-pass vlan 2 3

（4）VLANIF与DHCP中继

[SW2]dhcp enable
[SW2]interface Vlanif 2
[SW2-Vlanif2]ip address 192.168.1.13 255.255.255.248
[SW2-Vlanif2]dhcp select relay
[SW2-Vlanif2]dhcp relay server-ip 192.168.1.5  
[SW2]interface Vlanif 3
[SW2-Vlanif3]ip address 192.168.1.14 255.255.255.248
[SW2-Vlanif3]dhcp select relay
[SW2-Vlanif3]dhcp relay server-ip 192.168.1.5

5.PC5配置

6.运行结果