数通-综合实验案例

本次实验拓扑分为技术部、销售部、工程部，使用C类地址段（192.168.0.0）共六个网段
分别使用OSPF(开放式最短路径优先)、ACL（访问控制列表）、DHCP（接口模式）、rip(路由信息协议)、单臂路由的协议技术，让技术部可以和销售部ping通，技术部可以和工程部ping通但是销售部不能和工程部ping通。

实验拓扑图

实验平台	ENSP510
实验设备	AR1200 S3700

在AR1和LSW1上配置单臂路由如下：
AR1:interface GigabitEthernet0/0/0.1
dot1q termination vid 2
ip address 192.168.1.1 255.255.255.0
arp broadcast enable
dhcp select interface
dhcp server dns-list 8.8.8.8

interface GigabitEthernet0/0/0.2
dot1q termination vid 3
ip address 192.168.2.1 255.255.255.0
arp broadcast enable
dhcp select interface
dhcp server dns-list 8.8.8.8

LSW1:interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/2
port link-type access
port default vlan 2

interface GigabitEthernet0/0/3
port link-type access
port default vlan 3

在AR1上配置dhcp（接口模式）分配IP地址
AR1:interface GigabitEthernet0/0/0.1
dhcp select interface
dhcp server dns-list 8.8.8.8
interface GigabitEthernet0/0/0.2
dhcp select interface
dhcp server dns-list 8.8.8.8

在AR1和AR2上配置OSPF,AR2配置rip,并在AR2上作OSPF和RIP路由引入
AR1:ospf 1
area 0.0.0.0
network 192.168.1.0 0.0.0.255
network 192.168.2.0 0.0.0.255
network 192.168.3.0 0.0.0.255
AR2:ospf 1
area 0.0.0.0
network 192.168.3.0 0.0.0.255
import-route rip
rip 1
network 192.168.4.0
import-route ospf 1

在AR2和AR3中配置链路聚合并且配置rip
interface Eth-Trunk1
undo portswitch
ip address 192.168.4.1 255.255.255.0
interface GigabitEthernet0/0/1
eth-trunk 1
interface GigabitEthernet1/0/0
eth-trunk 1

AR3:[R3]rip
[R3-rip-1]network 192.168.4.0
[R3-rip-1]network 192.168.5.0
interface Eth-Trunk1
undo portswitch
ip address 192.168.4.2 255.255.255.0
interface GigabitEthernet0/0/0
eth-trunk 1
interface GigabitEthernet2/0/0
eth-trunk 1
interface GigabitEthernet0/0/1
ip address 192.168.5.1 255.255.255.0

在AR4中配置rip并宣告子网和配置ip
interface GigabitEthernet0/0/0
ip address 192.168.5.2 255.255.255.0
interface GigabitEthernet0/0/1
ip address 192.168.6.2 255.255.255.0
rip 1
network 192.168.5.0
network 192.168.6.0

在AR1中配置ACL使得技术部可以访问工程部但是销售部则不能

AR1:acl number 3000
rule 1 deny icmp source 192.168.2.254 0 destination 192.168.6.1 0
interface GigabitEthernet0/0/1
traffic-filter outbound acl 3000

最终配置结果为