【正文】 uter] interface MFR0[RouterMFR0] linkprotocol fr[RouterMFR0] ip address [RouterMFR0] fr map ip dlci 100[RouterMFR0] fr dlci 100[RouterMFR0] quit ![Router] interface Serial0[RouterSerial0] linkprotocol fr MFR0 ![Router] interface Serial1[RouterSerial0] linkprotocol fr MFR0 ! FR加密圖29 FR加密Router A配置: ![Router] interface Serial0[RouterSerial0] linkprotocol fr[RouterSerial0] ip address [RouterSerial0] fr map ip dlci 100 IETF pression frf9[RouterSerial0] fr dlci 100[RouterSerial0] quit !Router B配置: ![Router] interface Serial0[RouterSerial0] linkprotocol fr[RouterSerial0] ip address [RouterSerial0] fr map ip dlci 100 IETF pression frf9[RouterSerial0] fr dlci 100[RouterSerial0] quit ! HDLC組網(wǎng):圖210 HDLCrouter A配置: ![Router] interface Serial0[RouterSerial0] linkprotocol HDLC[RouterSerial0] ip address !router B配置:[Router] ![Router] interface Serial0[RouterSerial0] linkprotocol HDLC[RouterSerial0] ip address ! 橋組網(wǎng): 通過路由器的橋接功能,ethernet 1和ethernet 2中的計算機可以通過橋接通訊,進行網(wǎng)上鄰居的直接訪問和其他應(yīng)用.圖211 橋RTA配置:![Router]bridge enable [Router]bridge 1 stp ieee![Router]interface ethernet 0[RouterEthernet0]bridgeset 1[RouterEthernet0]quit![Router]interface serial 0[RouterSerial0] linkprotocol ppp[RouterSerial0] ip address [RouterSerial0]bridgeset 1[RouterSerial0]quit!RTB配置:![Router]bridge enable [Router]bridge 1 stp ieee![Router]interface ethernet 0[RouterEthernet0]bridgeset 1[RouterEthernet0]quit![Router]interface serial 0[RouterSerial0] linkprotocol ppp[RouterSerial0] ip address [RouterSerial0]bridgeset 1[RouterSerial0]quit!注意:兩路由器互連可以是ethernet,ppp,hdlc,fr,此處僅給出PPP的例子.第3章 網(wǎng)絡(luò)協(xié)議配置應(yīng)用 NAT地址轉(zhuǎn)換組網(wǎng):內(nèi)部網(wǎng)絡(luò)INTERNET圖31 Nat 使用出口公網(wǎng)地址做nat version ![Router]acl 101 acl 1 matchorder auto[Routeracl101] rule normal permit source [Routeracl101] rule normal deny source any ![Router] interface Ethernet0[RouterEthernet0] ip address ![Router] interface Ethernet1[RouterEthernet1] ip address [RouterEthernet1] nat outbound 1 interface ![Router]ip routestatic preference 60[Router]![Router]return 使用地址池做nat version [Router] nat addressgroup 1 pool1 ![Router]acl 101 acl 1 matchorder auto[Routeracl101] rule normal permit source [Routeracl101] rule normal deny source any ![Router] interface Ethernet0[RouterEthernet0] ip address ![Router] interface Ethernet1[RouterEthernet1] ip address [RouterEthernet1] nat outbound 1 pool pool1 ![Router]ip routestatic preference 60!return 內(nèi)部對外提供,ftp或者其他服務(wù)以服務(wù)為例,公網(wǎng)接口需要增加如下配置:[RouterEthernet1]nat server global inside tcp注意:如果需要其他用戶可以ping通內(nèi)部對外提供服務(wù)的服務(wù)器,必須增加如下配置:[RouterEthernet1]nat server global any inside any icmp注意:內(nèi)部用戶不能使用公網(wǎng)地址來訪問內(nèi)部服務(wù)器,必須使用內(nèi)網(wǎng)地址訪問.如上例子:,不能訪問,而只能訪問 IPX轉(zhuǎn)發(fā)的演示組網(wǎng):兩臺路由器通過串口相連,路由器分別通過以太口連接內(nèi)部局域網(wǎng)圖32 IPX需求:在tcp/ip的互聯(lián)世界里,(類似IP地址的網(wǎng)絡(luò)部分)與節(jié)點號(類似IP地址的主機部分).路由器中接口的地址只需要用ipx network命令配置網(wǎng)絡(luò)部分,節(jié)點號要么通過ipx routing node命令指定,并學(xué)習(xí)實際IPX組網(wǎng)應(yīng)用.配置:(1) ![Router] ipx enable node ![Router] interface Ethernet0[RouterEthernet0] ipx network ee10 ![Router] interface Serial1[RouterSerial1] clock DTECLK1[RouterSerial1] linkprotocol ppp[RouterSerial1] ipx network ff10 !quit (2) ![Router] ipx enable node ![Router] interface Ethernet0[RouterEthernet0] ipx network ff40 ![Router] interface Serial1[RouterSerial1] linkprotocol ppp[RouterSerial1] ipx network ff10 ! quit 在本例中,作了如上配置后,通過display ipx , ipx route可觀察到IPX的路由學(xué)習(xí)情況,在路由器Router1上執(zhí)行ping ipx ,可以ping通對端以太口IPX地址.注意:上面的例子中無需配置IPX靜態(tài)路由,對端以太網(wǎng)路由是通過IPX RIP動態(tài)學(xué)習(xí)到的. 路由器支持VLAN()的應(yīng)用配置組網(wǎng):圖33 組網(wǎng):路由器與交換機的上行trunk端口相連,交換機下行口劃分3個VLAN,帶若干主機.需求:在局域網(wǎng)中,通過交換機上配置VLAN可以減少主機通信廣播域的范圍,當(dāng)VLAN之間有部分主機需要通信,但交換機不支持三層交換時,分配IP地址作為該VLAN的網(wǎng)關(guān),.配置:(1) 路由器的配置 ![Router] interface Ethernet0[RouterEthernet0] ip address ![Router] interface [] vlantype dot1q vid 1[] ip address ![Router] interface [] vlantype dot1q vid 2[] ip address ![Router] interface [] vlantype dot1q vid 3[]ip address !(2) 交換機的配置(以Quidway S2016為例) !vlan 1!vlan 2!vlan 3!interface Ethernet0/1!interface Ethernet0/10 port access vlan 2!interface Ethernet0/11 port access vlan 2!interface Ethernet0/12 port access vlan 2!interface Ethernet0/13 port access vlan 3!interface Ethernet0/14 port access vlan 3!interface Ethernet0/15 port access vlan 3!interface Ethernet0/16 port linktype trunk port trunk permit vlan all!interface Ethernet0/7 port access vlan 2!interface Ethernet0/8 port access vlan 2!interface Ethernet0/9 port access vlan 2!其他:在各個VLAN中的主機必須指定網(wǎng)關(guān),其地址為路由器相應(yīng)子接口的IP.過程:按上述配置完,各VLAN的主機可以互相PING通.注意:,一個方法是在路由器上通過訪問控制列表實施業(yè)務(wù)量的過濾.,基本的意思是:與路由器相連接口需要trunk IPcount ! [Router] ip count enable[Router] ip count exteriorthreshold 10[Ro