【正文】 參考文獻[1] 張躍廷，顧彥玲．．清華大學出版社，2008[2] 章立民．（基于C）．科學出版社，2009[3]謝希仁．《計算機網絡》．電子工業(yè)出版社，2003[4] 董宇峰．《計算機網絡技術基礎》．清華大學出版社，2010[5] 李利軍，韓小琴，金素梅．《中小企業(yè)網絡管理員實戰(zhàn)指南》．科學出版社，2008[6] 馮昊、黃治虎、伍技祥．交換機/路由器的配置和管理．清華大學出版社，2005 [7] ：中國水利水電出版社，2003附錄路由器實現(xiàn)DHCP配置如下：Router(config) dhcpdRouter(dhcpconfig dhcpd)network Router(dhcpconfig dhcpd)range Router(dhcpconfig)Router(dhcpconfig)dnsserver Router(dhcpconfig)exit路由器NAT配置如下：啟用基本NAT功能：Routerconfigure terminal
Router(config)accesslist 15 permit
Router(config)ip nat inside source list 15 interface FastEthernet0/0 overload
Router(config)interface FastEthernet0/2
Router(configif)ip address
Router(configif)ip nat inside
Router(configif)exit
Router(config)interface FastEthernet0/1
Router(configif)ip address
Router(configif)ip nat inside
Router(configif)exit
Router(config)interface Ethernet0/0
Router(configif)ip address
Router(configif)ip nat outside
Router(configif)exit
Router(config)end
Router動態(tài)分配外部地址：Routerconfigure terminal
Router(config)accesslist 15 permit
Router(config)ip nat pool NATPOOL netmask
Router(config)ip nat inside source list 15 pool NATPOOL
Router(config)interface FastEthernet 0/0
Router(configif)ip address
Router(configif)ip nat inside
Router(configif)exit
Router(config)interface FastEthernet 0/1
Router(configif)ip address
Router(configif)ip nat inside
Router(configif)exit
Router(config)interface Ethernet1/0
Router(configif)ip address
Router(configif)ip nat outside
Router(configif)exit
Router(config)end
Router
靜態(tài)分配外部地址：Routerconfigure terminal
Router(config)ip nat inside source static
Router(config)ip nat inside source static
Router(config)interface FastEthernet 0/0
Router(configif)ip address
Router(configif)ip nat inside
Router(configif)exit
Router(config)interface FastEthernet 0/1
Router(configif)ip address
Router(configif)ip nat inside
Router(configif)exit
Router(config)interface Ethernet1/0
Router(configif)ip address
Router(configif)ip nat outside
Router(configif)exit
Router(config)end
Router路由器安全配置：Router(config)enable secret hongRouter(config)line vty 0 4Router(configline)passRouter(configline)password hongRouter(configline)exitRouter(config)accesslist 120 deny tcp any any eq 23Router(config)accesslist 120 deny tcp any any eq 135Router(config)accesslist 120 deny tcp any any eq 136Router(config)accesslist 120 deny tcp any any eq 137Router(config)accesslist 120 deny tcp any any eq 138Router(config)accesslist 120 deny tcp any any eq 139Router(config)accesslist 120 deny tcp any any eq 389Router(config)accesslist 120 deny tcp any any eq 445Router(config)accesslist 120 deny tcp any any eq 4444Router(config)accesslist 120 deny tcp any any eq 69Router(config)accesslist 120 deny udp any any eq 69Router(config)accesslist 120 deny udp any any eq 135Router(config)accesslist 120 deny udp any any eq 136Router(config)accesslist 120 deny udp any any eq 137Router(config)accesslist 120 deny udp any any eq 138Router(config)accesslist 120 deny udp any any eq 139Router(config)accesslist 120 deny udp any any eq snmpRouter(config)accesslist 120 deny udp any any eq 389Router(config)accesslist 120 deny udp any any eq 445Router(config)accesslist 120 deny udp any any eq 1434Router(config)accesslist 120 deny udp any any eq 1433Router(config)accesslist 120 permit ip any anyRouter(config)int f0/0Router(configif)ip accessgroup 120 inRouter(configif)Router交換機權限配置：車間A：SwitchenSwitchconf tSwitch(config)int vlan 2Switch(configif)int vlan 2Switch(configif)exitSwitch(config)int vlan 1Switch(configif)ip add Switch(configif)no shutSwitch(configif)exitSwitch(config)enable secret kbzentSwitch(config)line vty 0 4Switch(configline)passSwitch(configline)password kbzSwitch(configline)exitSwitch(config)Switch車間不BSwitchenSwitchconf tSwitch(config)int vlan 3Switch(configif)ip Switch(configif)no shutSwitch(configif)exitSwitch(config)enable secret hongSwitch(config)line vty 0 4Switch(configline)pasSwitch(configline)password hongSwitch(configline)Switch財務部SwitchenSwitchconf tSwitch(config)int vlan 4Switch(configif)ip add Switch(configif)no shutSwitch(configif)exitSwitch(config)enable secret kbznetSwitch(config)line vty 0 4Switch(configline)pasSwitch(configline)password kabzSwitch(configline)Switch人事部SwitchenSwitchconf tSwitch(config)int vlan 5Switch(configif)ip add Switch(configif)no shutSwitch(configif)exitSwitch(config)enable secret hongSwitch(config)line vty 0 4Switch(configline)pasSwitch(configline)password hongSwitch(configline)Switch銷售部SwitchenSwitchconf tSwitch(config)int vlan 6Switch(configif)ip add Switch(configif)no shutSwitch(configif)exitSwitch(config)enable secret hongSwitch(config)line vty 0 4Switch(configline)pasSwitch(configline