【正文】 ip地址設(shè)備名稱端口名稱IP地址MS1vlan10vlan20vlan30MS2vlan10vlan20vlan30Fa0/11R1Fa1/0Fa1/1R2Fa1/14 詳細(xì)設(shè)計 配置接入層交換機(jī)交換機(jī)S1Switch(config)hostname S1S1(config)vlan 10S1(configvlan)exitS1(config)interface range f 0/224S1(configifrange)switchport access vlan 10S1(configifrange)exitS1(config)interface range f 0/1 S1(configifrange)switchport mode trunkS1(configifrange)exitS1(config)interface range f 0/224S1(configifrange)switchport portsecurity S1(configifrange)switchport portsecurity maximum 3S1(configifrange)switchport portsecurity violation shutdownS1(configifrange)switchport portsecurity S1(configifrange)exit交換機(jī)S2Switch(config)hostname S2S2(config)vlan 20S2(configvlan)exitS2(config)interface rang f 0/24S2(configifrange)switchport access vlan 20S2(configifrange)exitS2(config)interface rang f 0/1 S2(configifrange)switchport mode trunkS2(configifrange)exitS2(config)interface range f 0/224S2(configifrange)switchport portsecurityS2(configifrange)switchport portsecurity maximum 2S2(configifrange)switchport portsecurity violation shutdown S2(configifrange)switchport portsecurity S2(configifrange)exit 配置匯聚層交換機(jī)交換機(jī)MS1S37601(config)host MS1 MS1(config)vlan 10 MS1(configvlan)exit MS1(config)vlan 20 MS1(configvlan)exit MS1(config)vlan 30 MS1(configvlan)exit MS1(config)interface vlan 10 MS1(configif)ip address MS1(configif)no shutdown MS1(configif)exit MS1(config)interface vlan 20 MS1(configif)ip address MS1(configif)no shutdown MS1(configif)exit MS1(config)interface vlan 30 MS1(configif)ip address MS1(configif)no shutdown MS1(configif)exit MS1(config)interface fastEthernet 0/10 MS1(configif)switchport mode trunk MS1(configif)exit MS1(config)interface range fastEthernet 0/12 MS1(configifrange)switchport mode trunk MS1(configifrange)exit MS1(config)ip accesslist extended abc MS1(configextnacl)deny tcp .$ MS1(configextnacl)exit MS1(configextnacl)$0 eq ftpdata MS1(configextnacl)exit MS1(config)int vlan 10 MS1(configif)ip accessgroup abc in MS1(configif)exit MS1(config)ip route MS1(config)交換機(jī)MS1S37602(config)host MS2 MS2(config)vlan 10 MS2(configvlan)exit MS2(config)vlan 20 MS2(configvlan)exit MS2(config)vlan 30 MS2(configvlan)exit MS2(config)interface vlan 10 MS2(configif)ip add MS2(configif)no shutdown MS2(configif)exit MS2(config)inter vlan 20 MS2(configif)ip add MS2(configif)no shutdown MS2(configif)exit MS2(config)inter vlan 30 MS2(configif)ip add MS2(configif)no shutdown MS2(configif)exit MS2(config)inter f0/9 MS2(configif)switchport mode access MS2(configif)switchport access vlan 30 MS2(configif)exit MS2(config)interface f0/10 MS2(configif)switchport mode trunk MS2(configif)exit MS2(config)interface f0/11 MS2(configif)no switchport MS2(configif)ip add MS2(configif)exit MS2(config)ip route MS2(config) 配置路由器內(nèi)網(wǎng)路由Router(config)host R1R1(config)inter f 0/0R1(configif)ip address R1(configif)exitR1(config)inter f 0/1R1(configif)ip add R1(configif)exitR1(config)accesslist 10 permit R1(config)accesslist 10 permit R1(config)accesslist 10 permit R1(config)inter f 0/0R1(configif)ip nat insideR1(configif)exitR1(config)inter f 0/1R1(configif)ip nat outside R1(configif)exitR1(config)ip nat pool interR1(config)ip nat pool internet netmask R1(config)ip nat inside source list 10 pool internet overloadR1(config)$ tcp 21 21 permitinside R1(config)$ tcp 20 20 permitinside R1(config)accesslist 115 deny udp any any eq tftpR1(config)accesslist 115 deny tcp any any eq 135R1(config)accesslist 115 deny udp any any eq 135 R1(config)accesslist 115 deny udp any any eq netR1(config)accesslist 115 deny udp any any eq netbiosnsR1(config)accesslist 115 deny udp any any eq netbiosdgmR1(config)accesslist 115 deny tcp any any eq 139 R1(config)accesslist 115 deny udp any any eq netbiosss R1(config)accesslist 115 deny tcp any any eq 445 R1(config)accesslist 115 deny tcp any any eq 593R1(config)accesslist 115 deny tcp any any eq 4444R1(config)accesslist 115 permit ip any anyR1(config)inter f 0/1R1(configif)ip accessgroup 115 in R1(configif)ip accessgroup 115 outR1(configif)exitR1(config)ip route R1(config)ip route R1(config)ip route R1(config)ip route 外網(wǎng)路由Router(config)host R2R2(config)interface FastEthernet 0/0R2(configif)ip address R2(configif)exitR2(config)interface loopback 0R2(configif)R2(configif)ip address R2(configif)exitR2(config)ip route R2(config)enable password 123R2(config)line vty 0 4R2(configline)password 123R2(configline)loginR2(configline)exit 配置FTP服務(wù)器配置內(nèi)網(wǎng)的FTP服務(wù)器步驟如下：1）選擇“開始”→“管理工具”→“internet信息服務(wù)（IIS）管理器”2）打開管理器，選擇“FTP站點”右擊在彈出的快捷菜單中選擇“屬性”，如下圖所示。ttj9=G1qu7R:。整個設(shè)計過程是對網(wǎng)絡(luò)設(shè)備的一點點加深理解的過程，對功能的實現(xiàn)進(jìn)一步清楚，對模糊的功能需求通過問老師，也給了我們透徹的分