实验报告（大致）

最新推荐文章于 2025-12-23 19:51:25 发布

原创最新推荐文章于 2025-12-23 19:51:25 发布 · 1.3k 阅读

20 ·

CC 4.0 BY-SA版权

文章标签：

#网络 #windows

要求：

一．ISP仅配IP地址

LSP:

system-view
[Huawei]sysname LSP
[Huawei]interface GigabitEthernet 0/0/0
[Huawei-GigabitEthernet0/0/0]ip address 202.1.1.2 30
[Huawei-GigabitEthernet0/0/0]q
[Huawei]interface GigabitEthernet 0/0/1
[Huawei-GigabitEthernet0/0/1]ip address 192.168.1.254 24
[Huawei-GigabitEthernet0/0/1]q

Text-1和text-2作为终端设备进行测试使用，路由采用静态路由

Text-1：

system-view
ip route-static 203.1.1.2 203.1.1.1
display this

Text-2:

system-view
ip route-static 203.1.1.1 203.1.1.2
display this

R1/R2之间使用OSPF做到内网全通，单区域，OSPF使用一条命令进行宣告（直接宣告192.168.1.0网段）；router-ID分别为1.1.1.1和2.2.2.2；OSPF进程为1

<huawei>system-view
R1:
.[Huawei]sysname R1
[R1]ospf router-id 1.1.1.1
[R1-ospf-1]area 0
[R1-ospf-1-area-0.0.0.0]network 192.168.1.0 0.0.0.255
[R1-ospf-1-area-0.0.0.0]network 12.0.0.0 0.0.0.255
[r2-ospf-1-area-0.0.0.0]q

R2:

[Huawei]sysname R2
[R2]ospf router-id 2.2.2.2
[R2-ospf-1]area 0
[R1-ospf-1-area-0.0.0.0]network 192.168.1.0 0.0.0.255
[R1-ospf-1-area-0.0.0.0]network 12.0.0.0 0.0.0.255
6.[r2-ospf-1-area-0.0.0.0]q

PC1-PC4使用DHCP获得地址，地址名称使用1，2

PC1:

system-view
[PC1]dhcp enable
[pc1]ip pool 1
[PC1-ip-pool-1]network 192.168.1.0 mask 27
[PC11-ip-pool-1]gateway-list 192.168.1.30
[pc1-ip-pool-1]dns-list 192.168.1.100 8.8.8.8
[PC1-GigabitEthernet0/0/0]dhcp select global

PC4:

system-view
[PC4]dhcp enable
[pc4]ip pool 2
[PC4-ip-pool-2]network 192.168.1.96 mask 27
[PC4-ip-pool-2]gateway-list 192.168.1.126
[pc4-ip-pool-2]dns-list 192.168.1.100 8.8.8.8
7.[PC1-GigabitEthernet0/0/0]dhcp select global

注：PC2和PC3的ip,网关也如上。

PC1不能访问PC5,ac1编号为3000

system-view
[PC1]acl name PC5

3.[r1-acl-adv-xuqiu]rule deny ip source 192.168.1.30 0.0.0.0 destination

203.1.254 0.0.0.0

4.traffic-filter inbound acl 3000

R2出口只拥有一个公网IP

Text-1设备可以登录内网telnet服务器，text-2不行；ac1编号为3000

text-2:
system-view

[Text-2]acl name telnet
rule deny ip source203.1.1.2 0.0.0.0 destination 192.168.1.129 0.0.0.0
traffic-filter inbound acl 3000
Text-1:
system-view
[Text-1]acl name telnet

9.[Text-1-acl-adv-xuqiu]rule permit ip source any destination telnet

telnet服务器的账号密码为huawei/123456

system-view
[telent]aaa[telent-aaa]local-user huawei password cipher 123456

内网用户可以正常访问ISP（边界做默认路由）

PC1,PC2,PC3,PC4和Telnet Server都要有如下操作，以PC1为例：
System-view
ip route-static 203.1.1.254（补全的目标网段，及ISP的ip地址） (下一跳），下一跳通过display ip routing-table指令查找
save

内网设备的路由表不能有公网的路由表，边界下发默认路由

PC1,PC2,PC3,PC4和Telnet Server都要有如下操作，以PC4为例:
System-view

3.Ip route-static 0.0.0.0 192.168.1.96（下一跳）：下一跳通过display ip routing-table指令查找

4.Display ip routing-table

5.Undo ip route-static 202.1.1.0 255.255.255.0 192.168.1.96

6.save

VLAN及IP规划查看附件材料（所有trunk链路按照最少VLAN透传原则放通）

:R1:

system-view
[Huawei]sysname R1
[Huawei]interface GigabitEthernet 0/0/0
[Huawei-GigabitEthernet0/0/0]ip address 192.168.1.1 24
[Huawei]q
[Huawei]interface GigabitEthernet 0/0/1
[Huawei-GigabitEthernet0/0/1]ip address 192.168.1.161 30

save
[Huawei]q

R2:

system-view
[Huawei]sysname R2
[Huawei]interface GigabitEthernet 0/0/1 4.[Huawei-GigabitEthernet0/0/1]ip address 192.168.1.162 30
[Huawei-GigabitEthernet0/0/1]q
[Huawei]interface GigabitEthernet 0/0/0
[Huawei-GigabitEthernet0/0/0]ip address 192.168.1.10 24
[Huawei-GigabitEthernet0/0/0]q
[Huawei]interface GigabitEthernet 0/0/2
[Huawei-GigabitEthernet0/0/2]ip address 202.1.1.1 30
[Huawei-GigabitEthernet0/0/2]q

LSP:

system-view
[Huawei]sysname LSP
[Huawei]interface GigabitEthernet 0/0/0
[Huawei-GigabitEthernet0/0/0]ip address 202.1.1.2 30
[Huawei-GigabitEthernet0/0/0]q
[Huawei]interface GigabitEthernet 0/0/1
[Huawei-GigabitEthernet0/0/1]ip address 192.168.1.254 24
[Huawei-GigabitEthernet0/0/1]q

PC	子网掩码	网关	IP地址
PC1	255.255.255.0	192.168.1.30	192.168.1.0 27
PC2	255.255.255.0	192.168.1.62	192.168.1.32 27
PC3	255.255.255.0	192.168.1.94	192.168.1.64 27
PC4	255.255.255.0	192.168.1.126	192.168.1.96 27
PC5	255.255.255.0	203.1.1.254	203.1.1.0 24