|
##前言
随便记录一下吧！交换机以及路由的配置。
##eNSP模拟
首先我们搭建如下网络拓扑
PC机的配置
PC1
vlan10
ip : 192.168.10.1
默认网关：192.168.10.254
PC2
vlan20
ip : 192.168.20.1
默认网关：192.168.20.254
PC3
vlan10
ip : 192.168.10.2
默认网关：192.168.10.254
PC4
vlan20
ip : 192.168.20.2
默认网关：192.168.20.254
PC6
internet
ip : 192.168.100.1
默认网关: 192.168.100.254
PC8
vlan 10
ip : 192.168.10.3
默认网关: 192.168.10.254
交换机的配置
二层交换机
LSW1
vlan 10 20
interface GigabitEthernet 0/0/2
port link-type access
port default vlan 10
quit
interface GigabitEthernet 0/0/3
port link-type access
port default vlan 20
quit
interface GigabitEthernet 0/0/1
port link-type trunk
port trunk allow-pass vlan all
quit
LSW2
vlan 10 20
interface GigabitEthernet 0/0/1
port link-type access
port default vlan 10
quit
interface GigabitEthernet 0/0/2
port link-type access
port default vlan 20
quit
interface GigabitEthernet 0/0/3
port link-type trunk
port trunk allow-pass vlan all
quit
三层交换机
LSW3
vlan 10 20 200
interface GigabitEthernet 0/0/1
port link-type trunk
port trunk allow-pass vlan all
quit
interface GigabitEthernet 0/0/2
port link-type trunk
port trunk allow-pass vlan all
quit
interface GigabitEthernet 0/0/3
port link-type access
port default vlan 200
quit
interface Vlanif 200
ip address 192.168.200.1 24
quit
ip route-static 0.0.0.0 0.0.0.0 192.168.200.2
quit
路由器的配置
AR1
interface GigabitEthernet 0/0/0
ip address 192.168.200.2 24
quit
interface GigabitEthernet 0/0/1
ip address 192.168.100.254 24
quit
ip route-static 192.168.10.0 24 192.168.200.1
ip route-static 192.168.20.0 24 192.168.200.1
访问控制列表ACL
首先我们可以查看AR2200的产品手册
acl number 2000
rule 5 deny source 192.168.10.0 0.0.0.255
quit
acl number 2001
rule 5 permit source 192.168.20.0 0.0.0.255
quit
acl number 3001
rule 5 deny tcp source 192.168.200.0 0.0.0.255 destination 0.0.0.0 0 destination-port eq telnet
quit
interface GigabitEthernet 0/0/0
traffic-filter inbound acl 2001
quit
interface GigabitEthernet 0/0/1
traffic-filter inbound acl 3001
quit
常用的其他命令
display vlan 显示Vlan
display ip routing-table 显示路由表
display ip interface brief 显示所有的接口
display acl all 显示所有的acl表项
clear configuration interface GigabitEthernet 0/0/1
undo shutdown 开启已关闭的接口
注意事项
一些sys,quit之类的命令可能不是很全，自己注意！
#总结
其实是一些比较简单的东西，只是没什么时间了解罢了！
|
