《奥山ccna实验手册.doc》由会员分享，可在线阅读，更多相关《奥山ccna实验手册.doc（40页珍藏版）》请在三一文库上搜索。
1、奥山CCNA试验手册目 录实验一、配置STP与VTP3实验二、静态路由11实验三、RIP路由协议14实验四、RIPv1与EIGRP在不连续网络下的比较21实验五、访问列表与telnet访问控制27实验六、静态、动态NAT与PAT31实验七、帧中继链路上运行EIGRP35实验八、背靠背帧中继40实验一、配置STP与VTP 环境：三台交换机，形成一个全互连结构，sw3为2950，sw1和sw2为2900xl；要求：设置sw3为VTP server,设置sw1和sw2为VTP client,域名为cisco，密码为：cisco，在server创建vlan 10(name:aa)和vlan20(nam
2、e:bb);设置sw3为vlan1的根桥，sw1为vlan10的根桥，sw2为vlan20的根桥； 初始化配置：Sw#show vlan 查看vlan信息Sw#Delete vlan.dat 用此命令将vlan删除Sw#show startup-config 查看一下NVRAM是否保存了配置Sw#erase startup-config 清空配置文件Sw#reload 重新启动交换机swenablesw#config terminalsw(config)#hostname sw1sw1(config)#no ip domain-lookup 关闭域名查找sw1(config)#line con
3、sole 0sw1(config-line)#logging synchronous 命令输入达到同步sw1(config-line)#exec-timeout 0 0 设置永不超时sw1(config-line)#exit步骤一、配置VTPsw3的配置：sw3(config)#vtp mode server 在sw3上启用vtp serverDevice mode already VTP SERVER.sw3(config)#vtp domain cisco 设置域名Changing VTP domain name from NULL to ciscosw3(config)#vtp pass
4、word cisco 设置密码Setting device VLAN database password to ciscosw1的配置:sw1#vlan database 进入vlan数据库sw1(vlan)#vtp client 启用VTP client模式Setting device to VTP CLIENT mode.sw1(vlan)#vtp domain cisco 作用到cisco域中Changing VTP domain name from NULL to ciscosw1(vlan)#vtp password cisco 设置密码与server端相同 Setting devi
5、ce VLAN database password to cisco.sw1(vlan)#exit 使配置生效In CLIENT state, no apply attempted.Exiting.sw2的配置:sw2#vlan databasesw2(vlan)#vtp clientSetting device to VTP CLIENT mode.sw2(vlan)#vtp domain ciscoChanging VTP domain name from NULL to ciscosw2(vlan)#vtp password ciscoSetting device VLAN databa
6、se password to cisco.sw2(vlan)#exitsw2#步骤二、启用干道端口sw3的配置：sw3(config)#interface fa0/23sw3(config-if)#switchport mode trunk 启用trunk端口sw3(config-if)#interface fa0/24sw3(config-if)#switchport mode trunk sw1的配置：sw1(config)#interface fa0/23sw1(config-if)#switchport trunk encapsulation dot1q 封装干道协议sw1(confi
7、g-if)#switchport mode trunk 启用trunk模式sw1(config-if)#sw1(config)#interface fa0/24sw1(config-if)#switchport trunk encapsulation dot1qsw1(config-if)#switchport mode trunksw2的配置：sw2(config)#interface fa0/23sw2(config-if)#switchport trunk encapsulation dot1qsw2(config-if)#switchport mode trunksw2(config)
8、#interface fa0/24sw2(config-if)#switchport trunk encapsulation dot1qsw2(config-if)#switchport mode trunk步骤三、测试vtp状态及创建vlansw3的状态：sw3#show vtp status 显示vtp状态VTP Version : 2Configuration Revision : 0 配置修订号Maximum VLANs supported locally : 254Number of existing VLANs : 5 VTP Operating Mode : server vtp
9、模式VTP Domain Name : cisco vtp域名VTP Pruning Mode : DisabledVTP V2 Mode : DisabledVTP Traps Generation : DisabledMD5 digest : 0x3F 0x17 0xC8 0xB8 0x5A 0xE3 0x01 0x66 Configuration last modified by 0.0.0.0 at 0-0-00 00:00:00创建vlan:sw3(config)#vlan 10 创建VLAN10sw3(config-vlan)#name aa 命名为aasw3(config-vla
10、n)#exit 应用配置sw3(config)#vlan 20 创建VLAN20sw3(config-vlan)#name bb 命名为bbsw3(config-vlan)#exitsw3(config)#sw3的状态：sw3#show vtp status 在sw3显示vtp的状态VTP Version : 2Configuration Revision : 2 server的修订号Maximum VLANs supported locally : 254Number of existing VLANs : 7 vlan也已经增加VTP Operating Mode : serverVTP
11、Domain Name : ciscoVTP Pruning Mode : DisabledVTP V2 Mode : DisabledVTP Traps Generation : DisabledMD5 digest : 0x98 0x31 0xCF 0xA0 0xA7 0x17 0x73 0x66Configuration last modified by 0.0.0.0 at 3-1-93 00:52:05sw2的状态：sw2#show vtp statusVTP Version : 2Configuration Revision : 2 已经同步了serverMaximum VLANs
12、 supported locally : 254Number of existing VLANs : 7VTP Operating Mode : ClientVTP Domain Name : ciscoVTP Pruning Mode : DisabledVTP V2 Mode : DisabledVTP Traps Generation : DisabledMD5 digest : 0x98 0x31 0xCF 0xA0 0xA7 0x17 0x73 0x66Configuration last modified by 0.0.0.0 at 3-1-93 00:52:05sw1的vlan信
13、息:sw1#show vlan 显示vlan信息VLAN Name Status Ports- - - -1 default active Fa0/1, Fa0/2, Fa0/3, Fa0/4, Fa0/5, Fa0/6, Fa0/7, Fa0/8, Fa0/9, Fa0/10, Fa0/11, Fa0/12, Fa0/13, Fa0/14, Fa0/15, Fa0/16, Fa0/17, Fa0/18, Fa0/19, Fa0/20, Fa0/21, Fa0/22, Fa0/23, Fa0/2410 aa active 已经同步了vlan的信息20 bb active步骤四、配置PVSTsw
14、3(config)#spanning-tree vlan 1 root primary 设置为vlan1的根桥Sw1(config)#spanning-tree vlan 10 priority 4096 设置为vlan10的根桥Sw2(config)#spanning-tree vlan 20 priority 4096 设置为vlan20的根桥步骤五、显示STP的信息sw1的生成树信息:sw1#show spanning-tree brief 显示每VLAN生成树信息VLAN1 Spanning tree enabled protocol IEEE ROOT ID Priority 245
15、77 Address 0007.eb06.1740 非vlan1的根桥 Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Bridge ID Priority 32768 Address 0030.803d.f640 Hello Time 2 sec Max Age 20 sec Forward Delay 15 secVLAN10 Spanning tree enabled protocol IEEE ROOT ID Priority 4096 Address 0030.803d.f641 为vlan10的根桥 This bridge
16、is the root Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Bridge ID Priority 4096 Address 0030.803d.f641 Hello Time 2 sec Max Age 20 sec Forward Delay 15 secVLAN20 Spanning tree enabled protocol IEEE ROOT ID Priority 4096 Address 00b0.645f.34c2 非vlan20的根桥 Hello Time 2 sec Max Age 20 sec Forwa
17、rd Delay 15 sec Bridge ID Priority 32768 Address 0030.803d.f642 Hello Time 2 sec Max Age 20 sec Forward Delay 15 secsw2的生成树信息:sw2#show spanning-tree briefVLAN1 Spanning tree enabled protocol IEEE 非vlan1的根桥 ROOT ID Priority 24577 Address 0007.eb06.1740 Hello Time 2 sec Max Age 20 sec Forward Delay 15
18、 sec Bridge ID Priority 32768 Address 00b0.645f.34c0 Hello Time 2 sec Max Age 20 sec Forward Delay 15 secVLAN10 Spanning tree enabled protocol IEEE ROOT ID Priority 4096 非vlan10的根桥 Address 0030.803d.f641 Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Bridge ID Priority 32768 Address 00b0.645f.
19、34c1 Hello Time 2 sec Max Age 20 sec Forward Delay 15 secVLAN20 Spanning tree enabled protocol IEEE ROOT ID Priority 4096 为vlan20的根桥 Address 00b0.645f.34c2 This bridge is the root Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Bridge ID Priority 4096 Address 00b0.645f.34c2 Hello Time 2 sec Max
20、 Age 20 sec Forward Delay 15 secsw3的生成树信息:sw3#show spanning-treeVLAN0001 Spanning tree enabled protocol ieee Root ID Priority 24577 为vlan1的根桥 Address 0007.eb06.1740 This bridge is the root Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Bridge ID Priority 24577 (priority 24576 sys-id-ext 1) Add
21、ress 0007.eb06.1740 Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Aging Time 300VLAN0010 Spanning tree enabled protocol ieee Root ID Priority 4096 非vlan10的根桥 Address 0030.803d.f641 Cost 19 Port 24 (FastEthernet0/24) Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Bridge ID Priority 32779
22、 (priority 32768 sys-id-ext 11) Address 0007.eb06.1740 Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Aging Time 300VLAN0020 Spanning tree enabled protocol ieee Root ID Priority 4096 非vlan20的根桥 Address 00b0.645f.34c2 Cost 19 Port 23 (FastEthernet0/23) Hello Time 2 sec Max Age 20 sec Forward De
23、lay 15 sec Bridge ID Priority 32780 (priority 32768 sys-id-ext 12) Address 0007.eb06.1740 Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Aging Time 300Interface Role Sts Cost Prio.Nbr Type- - - - - -Fa0/23 Root FWD 19 128.23 P2pFa0/24 Altn BLK 19 128.24 P2p步骤六、显示当前配置结果Sw1的配置结果：sw1#show running
24、-config!hostname sw1!spanning-tree vlan 10 priority 4096！no ip domain-lookup!interface FastEthernet0/23 switchport trunk encapsulation dot1q switchport mode trunk!interface FastEthernet0/24switchport trunk encapsulation dot1q switchport mode trunk!endsw2的配置结果：sw2#show running-confighostname sw2！span
25、ning-tree vlan 20 priority 4096!no ip domain-lookup!interface FastEthernet0/23switchport trunk encapsulation dot1q switchport mode trunk!interface FastEthernet0/24 switchport trunk encapsulation dot1q switchport mode trunk!endsw3的配置结果：sw3#show running-config!hostname sw3!no ip domain-lookup!spanning
26、-tree vlan 1 priority 24576!interface FastEthernet0/23 switchport mode trunk!interface FastEthernet0/24 switchport mode trunk!End实验二、静态路由 环境：两台2500系列路由器通过串口相连。 要求：在R1和R2上启用静态路由，使两端网络能够互通。步骤一、基本配置RouterRouterenableRouter#config terminalRouter(config)#hostname R1R1(config)#no ip domain-lookup R1(confi
27、g)#line console 0R1(config-line)# logging synchronous R1(config-line)#exec-timeout 0 0 R1(config-line)#exit步骤二:接口配置R1的配置：R1(config)#interface s0R1(config-if)#ip address 30.1.1.1 255.255.255.0R1(config-if)#clock rate 64000 时钟速率端R1(config-if)#no shutdownR1(config-if)#interface loopback 0R1(config-if)#
28、ip address 10.1.1.1 255.255.255.0R1(config-if)#R2的配置：Router(config)#hostname R2R2(config)#interface s1R2(config-if)#ip address 30.1.1.2 255.255.255.0R2(config-if)#no shutdownR2(config-if)#interface loopback 0R2(config-if)#ip address 20.1.1.1 255.255.255.0R2(config-if)#exitR2(config)#步骤三、指定静态路由R1(con
29、fig)#R1(config)#ip route 20.1.1.0 255.255.255.0 serial 0 指定静态路由R2(config)#R2(config)#ip route 10.1.1.0 255.255.255.0 30.1.1.1 指定静态路由步骤四、作ping 测试R1#pingProtocol ip:Target IP address: 20.1.1.1 目的地址Extended commands n: y 是否用扩展命令Source address or interface: 10.1.1.1 源地址! 显示已通步骤五、显示静态路由条目R1#show ip route
30、Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, L1 - IS-IS level-1, L2 - IS-
31、IS level-2, ia - IS-IS inter area * - candidate default, U - per-user static route, o - ODR P - periodic downloaded static routeGateway of last resort is not set 20.0.0.0/24 is subnetted, 1 subnetsS 20.1.1.0 is directly connected, Serial0 静态路由条目 10.0.0.0/24 is subnetted, 1 subnetsC 10.1.1.0 is direc
32、tly connected, Loopback0 30.0.0.0/24 is subnetted, 1 subnetsC 30.1.1.0 is directly connected, Serial0步骤六、显示当前配置R1的配置结果：R1#show running-config!hostname R1!no ip domain-lookup!interface Loopback0 ip address 10.1.1.1 255.255.255.0!interface Serial0 ip address 30.1.1.1 255.255.255.0 clockrate 64000!ip r
33、oute 20.1.1.0 255.255.255.0 Serial0!line con 0 exec-timeout 0 0 logging synchronous transport input noneendR2的配置结果：R2#show running-config!hostname R2!no ip domain-lookup!interface Loopback0 ip address 20.1.1.1 255.255.255.0!interface Serial1 ip address 30.1.1.2 255.255.255.0!ip route 10.1.1.0 255.25
34、5.255.0 30.1.1.1!line con 0 exec-timeout 0 0 logging synchronous!end实验三、RIP路由协议 环境：两台2500系列路由器由串口相连。 要求：如下图所示，在R1和R2上运行RIPv1,让两端能够学习到对端的路由以达到通信的目的。 步骤一、基本配置RouterRouterenableRouter#config terminalRouter(config)#hostname R1R1(config)#no ip domain-lookup 关闭域名查找R1(config)#line console 0R1(config-line)#
35、 logging synchronous 命令输入达到同步R1(config-line)#exec-timeout 0 0 设置永不超时R1(config-line)#exit步骤二、接口IP配置R1的配置：R1(config)#interface s0R1(config-if)#ip address 30.1.1.1 255.255.255.0R1(config-if)#clock rate 64000 注意时钟速率端R1(config-if)#no shutdownR1(config-if)#interface loopback 0R1(config-if)#ip address 10.1
36、.1.1 255.255.255.0R1(config-if)#R2的配置：Router(config)#hostname R2R2(config)#interface s1R2(config-if)#ip address 30.1.1.2 255.255.255.0R2(config-if)#no shutdownR2(config-if)#interface loopback 0R2(config-if)#ip address 20.1.1.1 255.255.255.0R2(config-if)#exitR2(config)#步骤三、启用RIP路由选择协议R1的配置：R1(config)
37、#router rip 启用RIPR1(config-router)#network 30.0.0.0 发布直连网段R1(config-router)#network 10.0.0.0R1(config-router)#exitR1(config)#R2的配置：R2(config)#router rip 启用RIPR2(config-router)#network 20.0.0.0 发布直连网段R2(config-router)#network 30.0.0.0R2(config-router)#exitR2(config)#end步骤四、显示路由表，查看路由条目R1#show ip rout
38、eCodes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area * - candidate default, U - per-user static route, o - ODR P - periodic downloaded static routeGateway of last resort is