HCIP复习拓扑练习(修改版)

拓扑：

实际：

需求：

需求分析

1.这意味着学校内部网络能够正常解析域名并进行互联网访问。

2. PC1和PC2处于同一个内网192.168.1.0/24，其中PC1有权限访问外部网段3.3.3.0/24，而PC2没有。这涉及ACL（访问控制列表）与安全策略的配置。

3.使用了两条链路进行冗余配置，并且配置了浮动静态路由以实现链路故障时的自动切换。

4.运营商网络采用了OSPF动态路由协议，以实现自动路由更新和管理。

5.AR1路由器允许通过Telnet协议进行远程管理，这需要配置相应的用户名、密码和访问权限。

配置代码

lsw1 配置

<Huawei>system-view 
[Huawei]vlan batch 2 3
[Huawei]interface g0/0/1
[Huawei-GigabitEthernet0/0/1]port link-type access
[Huawei-GigabitEthernet0/0/1]port default vlan 3
[Huawei-GigabitEthernet0/0/1]q
[Huawei]interface g0/0/2
[Huawei-GigabitEthernet0/0/2]port link-type access
[Huawei-GigabitEthernet0/0/2]port default vlan 2
[Huawei-GigabitEthernet0/0/2]q
[Huawei]interface g0/0/4
[Huawei-GigabitEthernet0/0/4]port link-type access
[Huawei-GigabitEthernet0/0/4]port default vlan 3
[Huawei-GigabitEthernet0/0/4]q
[Huawei]interface g0/0/3
[Huawei-GigabitEthernet0/0/3]port link-type trunk
[Huawei-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 3

查看端口状态

ar1配置代码

[r1]int g 0/0/1
[r1-GigabitEthernet0/0/1]ip address 192.168.1.134 30
[r1]int g 0/0/2
[r1-GigabitEthernet0/0/2]ip address 192.168.1.130 30
[r1]interface GigabitEthernet 0/0/0.2
[r1-GigabitEthernet0/0/0.2]ip address 192.168.1.126 26
[r1-GigabitEthernet0/0/0.2]dot1q termination vid 2
[r1]int g 0/0/0.3
[r1-GigabitEthernet0/0/0.3]ip address 192.168.1.62 26
[r1-GigabitEthernet0/0/0.3]dot1q termination vid 3
[r1]int g 0/0/0.2
[r1-GigabitEthernet0/0/0.2]arp broadcast enable 
[r1]int g 0/0/0.3
[r1-GigabitEthernet0/0/0.3]arp broadcast enable
<r1>reset arp all
[r1]int g 0/0/1
[r1-GigabitEthernet0/0/1]ip address 13.0.0.1 24
[r1]ip route-static 0.0.0.0 0 13.0.0.3
[r1]acl 2000
[r1-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255
[r1]int g 0/0/1
[r1-GigabitEthernet0/0/1]nat outbound 2000
[r1]user-interface vty 0 4
[r1-ui-vty0-4]authentication-mode aaa
[r1]aaa
[r1-aaa]local-user huawei password cipher 123456 privilege level 15
[r1-aaa]local-user huawei service-type telnet

ar2配置

[r2]interface GigabitEthernet 0/0/0
[r2-GigabitEthernet0/0/0]ip address 192.168.1.133 30
[r2]int g 0/0/2
[r2-GigabitEthernet0/0/2]ip address 192.168.1.129 30
[r2]ip route-static 192.168.1.0 25 192.168.1.134 permanent 61
[r2]ip route-static 192.168.1.0 25 192.168.1.134 preference 61
[r2]ip route-static 0.0.0.0 0 192.168.1.129
[r2]ip route-static 0.0.0.0 0 192.168.1.131 preference 61
[r2]acl 3000
[r2-acl-adv-3000]rule permit ip source 192.168.1.1 0 destination 3.3.3.3 0
[r2-acl-adv-3000]rule deny ip source 192.168.1.0 0.0.0.63 destination 3.3.3.3 0
[r2]int g 0/0/0
[r2-GigabitEthernet0/0/0]traffic-filter inbound acl 3000
[r2]dhcp enable 
[r2]int g 0/0/0.3
[r2-GigabitEthernet0/0/0.3]dhcp select interface 
[r2-GigabitEthernet0/0/0.3]dhcp server dns-list 100.1.1.0

ar3配置

[r3]int g 0/0/0
[r3-GigabitEthernet0/0/0]ip address 13.0.0.3 24
[r3]int g 0/0/1
[r3-GigabitEthernet0/0/1]ip address 34.0.0.3 24
[r3]int g 0/0/2
[r3-GigabitEthernet0/0/2]ip address 35.0.0.3 24
[r3]interface LoopBack 0
[r3-LoopBack0]ip address 3.3.3.3 24
[r3]ospf 1 router-id 3.3.3.3
[r3-ospf-1]area 0
[r3-ospf-1-area-0.0.0.0]network 13.0.0.3 0.0.0.0
[r3-ospf-1-area-0.0.0.0]network 34.0.0.3 0.0.0.0
[r3-ospf-1-area-0.0.0.0]network 35.0.0.3 0.0.0.0
[r3-ospf-1-area-0.0.0.0]network 3.3.3.3 0.0.0.0

ar4配置

[r4]int g 0/0/0
[r4-GigabitEthernet0/0/0]ip address 34.0.0.4 24
[r4]int g 0/0/1
[r4-GigabitEthernet0/0/1]ip address 100.1.1.254 24
[r4]ospf 1 router-id 4.4.4.4
[r4-ospf-1]area 0
[r4-ospf-1-area-0.0.0.0]network 34.0.0.4 0.0.0.0
[r4-ospf-1-area-0.0.0.0]network 100.1.1.254 0.0.0.0

ar5配置

[r5]int g 0/0/0
[r5-GigabitEthernet0/0/0]ip address 35.0.0.5 24
[r5]int g 0/0/1
[r5-GigabitEthernet0/0/1]ip address 56.0.0.5 24
[r5]ospf 1 router-id 5.5.5.5
[r5-ospf-1]area 0
[r5-ospf-1-area-0.0.0.0]network 35.0.0.5 0.0.0.0
[r5-ospf-1-area-0.0.0.0]network 56.0.0.5 0.0.0.0

ar6配置

[r6]int g 0/0/0
[r6-GigabitEthernet0/0/0]ip address 56.0.0.6 24
[r6]ospf 1 router-id 1.1.1.1
[r6]undo ospf 1
Warning: The OSPF process will be deleted. Continue? [Y/N]:y
[r6]int g 0/0/1
[r6-GigabitEthernet0/0/1]ip address 10.1.1.254 24
[r6]ip route-static 0.0.0.0 0 56.0.0.5
[r6]acl 2000
[r6-acl-basic-2000]rule permit source 10.1.1.0 0.0.0.255
[r6]int g 0/0/0
[r6-GigabitEthernet0/0/0]nat outbound 2000
[r6-GigabitEthernet0/0/0]nat server protocol tcp global current-interface www in
side 10.1.1.1 www
Warning:The port 80 is well-known port. If you continue it may cause function fa
ilure.
Are you sure to continue?[Y/N]:y

pc1

pc2

DNS配置

域名解析

http服务器

http客户端

结果

pc1ping

pc2ping