【正文】 Totally 5919 packets, 1021492 bytes, 96% denied.RouterAdisp acl 3001 Advanced ACL 3001, 3 rules Acl39。s step is 1 rule 0 permit ip source (194 times matched) rule 1 permit tcp source destinationport eq pop3 (9 times matched) rule 2 permit tcp source destinationport eq smtp (0 times matched)【提示】 系統(tǒng)缺省情況下為禁止防火墻（firewall disable），需要使用命令“firewall enable”來使能防火墻功能 防火墻缺省過濾方式為允許通過（permit），可以通過“firewall default deny”修改為禁止通過 在內(nèi)網(wǎng)使用包過濾，并同時使用DHCP server分配地址時，需要在acl 3001中添加一條“rule 0 permit ip source 0”否則會出現(xiàn)DHCP Server無法分配地址的問題。一、實驗名稱：實驗八 PPP/CHAP實驗二、儀器、設備：每組路由器兩臺，交換機兩臺，學生機四臺,V。35DTE/DCE線纜一根。三、參考資料：計算機網(wǎng)絡實驗指導書四、實驗（設計）目的：1) 掌握路由器的同異步串口上PPP協(xié)議的基本配置方法2) 掌握PPP的PAP的驗證配置方法3) 掌握PPP的CHAP的驗證配置方法五、實驗內(nèi)容（步驟）：實驗組網(wǎng)圖S0/1S0/1PPP 的pap驗證 在ra上配置[Ra] interface serial 0/1[raserial0/1] ip addr 24在rb上配置[Rb] interface serial 0/1[rbserial0/1] ip addr 24在ra驗證方配置[Ra] localuser huawei[raluserhuawei] password simple 123[raluserhuawei]servicetype ppp[Ra] interface serial 0/1[raserial0/1] ppp authenticationmode pap在Rb被驗證方的配置[rbserial0/1]ppp pap localuser huawei password simple 123PPP 的CHAP驗證 在ra驗證方配置[Ra] localuser huawei[raluserhuawei] password simple 123[raluserhuawei]servicetype ppp[Ra] interface serial 0/1[raserial0/1] ppp authenticationmode chap[raserial0/1] ppp chap user huawei3在Rb被驗證方的配置[Rb] localuser huawei3[rbluserhuawei] password simple 123[rbluserhuawei]servicetype ppp[rbserial0/1] ppp chap user huawei一、實驗名稱： 實驗九 廣域網(wǎng)配置(2學時)二、儀器、設備：華為路由器6臺，V. 35 電纜和雙絞線若干，學生實驗主機2部。三、參考資料：計算機網(wǎng)絡實驗指導書四、實驗目的通過路由建立起網(wǎng)絡之間的連接，熟悉廣域網(wǎng)協(xié)議配置，并掌握組網(wǎng)相關技術。五、實驗重點、難點 廣域網(wǎng)協(xié)議配置六、實驗內(nèi)容RouterA，RouterB和Router C運行OSPF協(xié)議 ，Router X，RouterY和Router Z運行RIP協(xié)議?！窘M網(wǎng)圖】【配置腳本】RouterA配置腳本 sysname routeAlocaluser admin password cipher admin servicetype telnet terminal level 3 servicetype ftpinterface Ethernet0/0 ip address interface Serial0/0 linkprotocol ppp ip address ospf 1 /啟用OSPF協(xié)議 area network network userinterface vty 0 4 authenticationmode schemereturnRouterB配置腳本sysname routeB super password level 3 simple adminlocaluser admin password cipher admin servicetype telnet terminal level 3 servicetype ftpinterface Ethernet0/0interface Serial0/0 clock DTECLK1 linkprotocol pppip address interface Serial2/0 clock DTECLK1 linkprotocol pppip address interface NULL0ospf 1 area network network userinterface vty 0 4 set authentication password simple adminreturnRouterC配置腳本 sysname routeClocaluser admin password cipher admin servicetype telnet terminal level 3 servicetype ftpinterface Ethernet0/0 ip address interface Serial0/0 linkprotocol ppp ip address interface NULL0ospf 1 area network network importroute rip userinterface vty 0 4 authenticationmode schemeReturnRouterX配置腳本 sysname routexlocaluser admin password cipher admin servicetype telnet terminal level 3 servicetype ftpinterface Ethernet0/0 ip address interface Serial0/0 linkprotocol ppp ip address interface NULL0rip network network importroute ospf userinterface vty 0 4 authenticationmode schemeReturnRouterY配置腳本sysname routeB super password level 3 simple adminlocaluser admin password cipher admin servicetype telnet terminal level 3 servicetype ftpinterface Ethernet0/0interface Serial0/0 clock DTECLK1 linkprotocol pppip address interface Serial2/0 clock DTECLK1 linkprotocol pppip address interface NULL0rip network network userinterface vty 0 4 set authentication password simple adminreturnRouterZ配置腳本sysname routeB super password level 3 simple adminlocaluser admin password cipher admin servicetype telnet terminal level 3 servicetype ftpinterface Ethernet0/0interface Serial0/0 clock DTECLK1 linkprotocol pppip address interface Serial2/0 clock DTECLK1 linkprotocol pppip address rip network network userinterface vty 0 4 set authentication password simple adminreturn【驗證】Pc1可能Ping通pc2，【提示】 ， 。41 / 41