【正文】 FastEthernet0/0no ip addressduplex autospeed autoshutdown!interface FastEthernet0/1ip address duplex autospeed auto!interface Serial0/3/0ip address clock rate 56000!interface Serial0/3/1ip address !interface Vlan1no ip addressshutdown!router eigrp 100network network network autosummary!ip classless!!line con 0line vty 0 4password ciscologin!!endHuangChuangsh startupconfigUsing 669 bytes!version no service passwordencryption!hostname HuangChuang!!enable password cisco!ip ssh version 1no ip domainlookup!!interface FastEthernet0/0no ip addressduplex autospeed autoshutdown!interface FastEthernet0/1ip address duplex autospeed auto!interface Serial0/3/0ip address !interface Serial0/3/1ip address clock rate 56000!interface Vlan1no ip addressshutdown!router eigrp 100network network network autosummary!ip classless!line con 0line vty 0 4password ciscologin!!endxixiansh startupconfigUsing 679 bytes!version service passwordencryption!hostname xixian!!enable password 7 0822455D0A16!ip ssh version 1no ip domainlookup!!interface FastEthernet0/0no ip addressduplex autospeed autoshutdown!interface FastEthernet0/1ip address duplex autospeed auto!interface Serial0/3/0ip address clock rate 56000!interface Serial0/3/1ip address !interface Vlan1no ip addressshutdown!router eigrp 100network network network autosummary!ip classless!line con 0line vty 0 4password 7 0822455D0A16login!!end　　三、配置簡單的ACL　　１、配置ACL限制遠(yuǎn)程登錄到路由器的主機(jī)HuangChuangconf tEnter configuration mands, one per line. End with CNTL/Z.HuangChuang(config)accesslist 1 permit host 　\\路由器HuangChuang只允許(telnet)HuangChuang(config)line vty 0 4HuangChuang(configline)accessclass 1 inHuangChuang(configline)　　其它兩個路由器配置相似。　?。病ixian(config)accesslist 101 deny icmp xixian(config)accesslist 101 permit ip any anyxixian(config)int fa0/1xixian(configif)ip accessgroup 101 outxixian(configif)　?。场⑴渲肁CL禁止特點(diǎn)的協(xié)議端口通訊HuangChuangconf tEnter configuration mands, one per line. End with CNTL/Z.HuangChuang(config)ip accesslist extended ACL1　　\\創(chuàng)建基于名稱的擴(kuò)展ACLHuangChuang(configextnacl)deny tcp host eq 80HuangChuang(configextnacl)deny udp host eq 53HuangChuang(configextnacl)permit ip any anyHuangChuang(configextnacl)exitHuangChuang(config)int fa0/1HuangChuang(configif)ip accessgroup ACL1 inHuangChuang(configif)圖四　驗(yàn)證ACL　?。?。檢驗(yàn)、查看ACLHuangChuangsh accesslistStandard IP access list 1 permit host (4 match(es))Extended IP access list ACL1 deny udp host eq domain deny tcp host eq permit ip any anyHuangChuangshow accesslistStandard IP access list 1 permit host (4 match(es))Extended IP access list ACL1 deny udp host eq domain (15 match(es)) deny tcp host eq (60 match(es)) permit ip any any (34 match(es))HuangChuangshow accesslist ACL1Extended IP access list ACL1 deny udp host eq domain (15 match(es)) deny tcp host eq (60 match(es)) permit ip any any (34 match(es))HuangChuangshow accesslist 1Standard IP access list 1 permit host (4 match(es))　　四、配置ACL的路由器配置內(nèi)容HuangChuangsh startupconfigUsing 914 bytes!version no service passwordencryption!hostname HuangChuang!!enable password cisco!ip ssh version 1no ip domainlookup!!interface FastEthernet0/0no ip addressduplex autospeed autoshutdown!interface FastEthernet0/1ip address ip accessgroup ACL1 induplex autospeed auto!interface Serial0/3/0ip address !interface Serial0/3/1ip address clock rate 56000!interface Vlan1no ip addressshutdown!router eigrp 100network network network autosummary!ip classless!!accesslist 1 permit host ip accesslist extended ACL1deny udp host eq domaindeny tcp host eq permit ip any any!line con 0line vty 0 4accessclass 1 inpassword ciscologin!!endLuoShansh startupconfigUsing 756 bytes!version no service passwordencryption!hostname LuoShan!!enable password cisco!!username senya password 0 cisco!ip ssh version 1no ip domainlookup!!interface FastEthernet0/0no ip addressduplex autospeed autoshutdown!interface FastEthernet0/1ip address duplex autospeed auto!interface Serial0/3/0ip address clock rate 56000!interface Serial0/3/1ip address !interface Vlan1no ip addressshutdown!router eigrp 100network network network autosummary!ip classless!!accesslist 2 permit host !line con 0line vty 0 4accessclass 2 inpassword ciscologin!!endxixianshow startupconfigUsing 808 bytes!version service passwordencryption!hostname xixian!!enable password 7 0822455D0A16!!ip ssh version 1no ip domainlookup!!interface FastEthernet0/0no ip addressduplex autospeed autoshutdown!interface FastEthernet0/1ip address ip accessgroup 101 outduplex autospeed auto!interface Serial0/3/0ip address clock rate 56000!interface Serial0/3/1ip address !interface Vlan1no ip addressshutdown!router eigrp 100network network network autosummary!ip classless!!accesslist 101 deny icmp accesslist 101 permit ip any any!!!line con 0line vty 0 4password 7 0822455D0A16login!!endPacket Tracer (16)——DHCP 中繼配置所謂DHCP中繼，即是跨網(wǎng)段為主機(jī)分配IP地址等配置，DHCP Server與DHCP Client處于不同的網(wǎng)段，這時就需要DHCP Relay?！　∫?、實(shí)驗(yàn)配置拓?fù)鋱D圖一　　實(shí)驗(yàn)環(huán)境說明：由于模擬的服務(wù)器只能提供一個地址池，因此我使用兩個DHCP服務(wù)器，分別創(chuàng)建DHCP地址池：::。圖二　DHCP服務(wù)器地址池配置圖三　DNS服務(wù)器　　二、實(shí)驗(yàn)配置　?。?、Router2的配置Router2sh startupconfigUsing 580 bytes!version service passwordencryption!hostname Router2!enable password 7 0822455D