【文章內(nèi)容簡(jiǎn)介】 net0/0/0]disipint brief *down: administratively down(s): spoofing Interface Physical Protocol IP Address Description GigabitEthernet0/0/0 up up GigabitEt...GigabitEthernet0/0/1 down down unassigned GigabitEt...GigabitEthernet0/0/2 down down unassigned GigabitEt...GigabitEthernet0/0/3 down down unassigned GigabitEt...Serial0/1/0 down down unassigned Serial0/1...Serial0/1/1 down down unassigned Serial0/1...Serial0/1/2 down down unassigned Serial0/1...Serial0/1/3 down down unassigned Serial0/1...[RT1]ping PING : 56 data bytes, press CTRL_C to break Request time out Reply from : bytes=56 Sequence=2 ttl=62 time=9 ms Reply from : bytes=56 Sequence=3 ttl=62 time=26 ms Reply from : bytes=56 Sequence=4 ttl=62 time=4 ms Reply from : bytes=56 Sequence=5 ttl=62 time=4 ms RT2 sys [RT2]int g0/0/1 [RT2GigabitEthernet0/0/1]ip ad 24 [RT2GigabitEthernet0/0/1]qu [RT2]int g0/0/0 [RT2GigabitEthernet0/0/0]ip ad 24 [RT2GigabitEthernet0/0/0]int s0/1/0 [RT2Serial0/1/0]ip ad 24 [RT2Serial0/1/0]qu[RT2]dhcp enable DHCP is enabled successfully![RT2]dhcp server ippool 1 [RT2dhcppool1]network mask [RT2dhcppool1]gatewaylist [RT2dhcppool1]expired day 1 [RT2dhcppool1]qu [RT2]ip routestatic 0 [RT2]ping PING : 56 data bytes, press CTRL_C to break Reply from : bytes=56 Sequence=1 ttl=254 time=25 ms Reply from : bytes=56 Sequence=2 ttl=254 time=5 ms Reply from : bytes=56 Sequence=3 ttl=254 time=5 ms Reply from : bytes=56 Sequence=4 ttl=254 time=4 ms Request time ping statistics5 packet(s)transmitted 4 packet(s)received % packet loss roundtrip min/avg/max = 4/9/25 ms [RT2]int Tunnel 1 [RT2Tunnel1]source [RT2Tunnel1]destination [RT2Tunnel1] %Dec 1 21:59:30:213 2015 RT2 IFNET/3/LINK_UPDOWN: Tunnel1 link status is UP.%Dec 1 21:59:30:213 2015 RT2 IFNET/5/LINEPROTO_UPDOWN: Line protocol on the interface Tunnel1 is UP.[RT2Tunnel1]ip ad 24 [RT2Tunnel1]qu [RT2]ip routestatic 24 Tunnel 1 [RT2]acl number 2000 [RT2aclbasic2000]rule 1 permit s [RT2aclbasic2000]rule 2 permit s [RT2aclbasic2000]qu [RT2]int s0/1/0 [RT2Serial0/1/0]nat outbound 2000 [RT2Serial0/1/0]qu [RT2]disnat session There are currently 5 NAT sessions: Protocol GlobalAddr PortInsideAddr Port DestAddr Port ICMP 12288 37035 37035 status:11 TTL:00:00:10 Left:00:00:01 VPN:ICMP 12292 38059 38059 status:11 TTL:00:00:10 Left:00:00:06 VPN:ICMP 12289 37291 37291 status:11 TTL:00:00:10 Left:00:00:02 VPN:ICMP 12290 37547 37547 status:11 TTL:00:00:10 Left:00:00:03 VPN:ICMP 12291 37803 37803 status:11 TTL:00:00:10 Left:00:00:05 VPN:RT3 sys [RT3]int s0/1/0 [RT3Serial0/1/0]ip ad 24 [RT3Serial0/1/0] %Dec 1 21:50:56:505 2015 RT3 IFNET/5/PROTOCOL_UPDOWN: Protocol PPP IPCP on the interface Serial0/1/0 is UP.[RT3Serial0/1/0]qu [RT3]int s0/1/1 [RT3Serial0/1/1]ip ad 24 [RT3Serial0/1/1]int g0/0/0 [RT3GigabitEthernet0/0/0]ip ad 24 [RT3GigabitEthernet0/0/0] %Dec 1 21:53:15:096 2015 RT3 IFNET/5/PROTOCOL_UPDOWN: Protocol PPP IPCP onthe interface Serial0/1/1 is sys System View: return to User View with Ctrl+Z.[RT4]int s0/1/1 [RT4Serial0/1/1]ip ad 24 [RT4Serial0/1/1] %Dec 1 21:53:15:161 2015 RT4 IFNET/5/PROTOCOL_UPDOWN: Protocol PPP IPCP on the interface Serial0/1/1 is UP.[RT4Serial0/1/1]int g0/0/0 [RT4GigabitEthernet0/0/0]ip ad 24 [RT4GigabitEthernet0/0/0]qu [RT4]ip routestatic 0 [RT4]int Tunnel 1 [RT4Tunnel1]source [RT4Tunnel1]destination [RT4Tunnel1] %Dec 1 22:00:32:635 2015 RT4 IFNET/3/LINK_UPDOWN: Tunnel1 link status is UP.%Dec 1 22:00:32:635 2015 RT4 IFNET/5/LINEPROTO_UPDOWN: Line protocol on the interface Tunnel1 is UP.[RT4Tunnel1]ip ad 24 [RT4Tunnel1]qu [RT4]ip routestatic 24 Tunnel 1 實(shí)驗(yàn)二：Vrrp圖42 RT1 interface GigabitEthernet0/0/0 port linkmode route ip address 24 vrrpvrid 1 virtualip vrrpvrid 1 priority 120 rip 1 undo summary version 2 network network interface s0/1/0 ip address 24 RT2interface GigabitEthernet0/0/0 port linkmode route ip address 24 vrrpvrid 1 virtualip rip 1 undo summary version 2 network network interface s0/1/1 ip address 24 RT3 interface Serial0/1/0 linkprotocolppp ip address interface Serial0/1/1 linkprotocolppp ip address interface LoopBack0 ip address rip 1 undo summary version 2 network 實(shí)驗(yàn)三：ACL圖43 需求：R1可以ping通R2，不可以telnet R2,R3可以ping通R2,可以telnet R2 RT1 sys System View: return to User View with Ctrl+Z.[RT1]int s0/1/0 [RT1Serial0/1/0]ip ad 24 [RT1Serial0/1/0] %Dec 2 18:51:58:891 2015 RT1 IFNET/5/PROTOCOL_UPDOWN: Protocol PPP IPCP on the interface Serial0/1/0 is UP.[RT1Serial0/1/0]qu [RT1]ping PING : 56 data bytes, press CTRL_C to break Request time out Request time out Request time out Request time out Request time ping statistics5 packet(s)transmitted 0 packet(s)received % packet loss RT2 sys System View: return to User View with Ctrl+Z.[RT2]int s0/1/0 [RT2Serial0/1/0]ip ad 24 [RT2Serial0/1/0] %Dec 2 18:51:58:297 2015 RT2 IFNET/5/PROTOCOL_UPDOWN: Protocol PPP IPCP on the interface Serial0/1/0 is UP.[RT2Serial0/1/0]int s0/1/1 [RT2Serial0/1/1]ip ad 24 [RT2Serial0/1/1]qu [RT2]tel [RT2]telnet server enable % Start Telnet server [RT2]userinterface vty 0 [RT2uivty0]authenticationmode none [RT2uivty0]user privilege level 3 [RT2]firewall enable [RT2]acl number 3000 [RT2acladv3000]rule 1 deny tcp source 0 destinationport eq telnet [RT2acladv3000]qu [RT2]int s0/1/0 [RT2Serial0/1/0]firewall packetfilter 3000 inbound [RT2Serial0/1/0]qu RT3 sys System View: return to User View with Ctrl+Z.[RT3]int s0/1/1 [RT3Serial0/1/1]ip ad 24 [RT3Serial0/1/1] %Dec 2 18:52:43:515 2015 RT3 IFNET/5/PROTOCOL_UPDOWN: Protocol PPP IPCP on the interface Serial0/1/1 is UP.[RT3Serial0/1/1]qu [RT3]ping PING : 56 data bytes, press CTRL_C to breakReply from : bytes=56 Sequence=1 ttl=255 time=4 ms Reply from : bytes=56 Sequence=2 ttl=255 time=1 ms Request time out Reply from : bytes=56 Sequence=4 ttl=255 time=1 ms Reply from : bytes=56 Sequence=5 ttl=255 time=1 ping statistics5 packet(s)transmitted 4 packet