配置路由 R1
hostname R1
username R1 password 123456
interface fastethernet 0/0
ip address 10.0.0.1 255.255.255.252
no shutdown
interface Serial 2/0
ip address 76.7.8.1 255.255.255.240
no shutdown
interface Serial 2/1
ip address 10.0.0.5 255.255.255.252
no shutdown
encapsulation ppp
ppp authentication chap
no shutdown
interface fastethernet 0/0
ip nat inside
interface Serial 2/0
ip nat outside
interface Serial 2/1
ip nat inside
time-range work-time
periodic weekdays 09:00 to 18:00
access-list 10 permit 10.0.100.0 0.0.0.255 time-range work-time
access-list 10 permit 10.0.101.0 0.0.0.255 time-range work-time
access-list 10 permit 10.0.102.0 0.0.0.255 time-range work-time
access-list 10 permit 10.0.103.0 0.0.0.255 time-range work-time
ip nat pool INTERNET 76.7.8.1 76.7.8.5 network 255.255.255.240
ip nat inside source list 10 pool INTERNET overload
ip nat inside source tcp 10.0.104.2 80 76.7.8.6. 80
ip nat inside source tcp 10.0.104.6 110 76.7.8.6. 110
ip nat inside source tcp 10.0.104.6 25 76.7.8.6. 25
router OSPF 10
route-id 2.2.2.2
network 10.0.0.0 0.0.0.3 area 0
redistribute rip metric-type 1 metric 50 subnets
default-information originate
interface Fastethernet 0/0
ip OSPF authentication message-digest
ip OSPF message-digest-key 1 MD5 abc
router rip
version 2
network 10.0.0.0
no auto-summary
redistribute OSPF 10 metric 4
default-information originate
ip route 0.0.0.0.0.0.0.0 Serial 2/0
key chain www
key 1
key-string 123
interface serial 2/1
ip rip authentication mode MD5
ip rip authentication key-chain www
配置单臂路由R2
hostname R2
username R2 password 123456
interface fastethernet 0/0
no shutdown
interface fastethernet 0/0.102
encapsulation dotlq 102
ip address 10.0.102.1 255.255.255.0
no shutdown
interface fastethernet 0/0.103
encapsulation dotlq 103
ip address 10.0.103.1 255.255.255.0
no shutdown
router rip
version 2
network 10.0.0.0
no auto-summary
interface Serial 2/1
ip address 10.0.0.6 255.255.255.252
encapsulation ppp
no shutdown
key chain www
key 1
key-string 123
interface serial 2/1
ip rip authentication mode MD5
ip rip authentication key-chain www
配置运营商路由器 R3
hostname R3
interface Serial 2/0
ip address 67.7.8.14 255.255.255.240
no shutdown
ip route 0.0.0.0.0.0.0.0 Serial 2/0
核心三层交换机sw1
hostname sw1
vlan 100
name gongchengbu
vlan 101
name shichangbu
vlan 104
name fuwuqiqun
interface fastethernet 0/10
portgroup 1
interface fastethernet 0/11
portgroup 1
interface aggregateport 1
switchport mode trunk
interface range fastethernet 0/2-6
switchport mode access
switchport access vlan 104
interface fastethernet 0/1
no shutdown
ip add 10.0.0.2 255.255.255.252
no shutdown
interface fastethernet 0/7
no shutdown
ip add 10.0.0.9 255.255.255.252
no shutdown
interface vlan 100
ip add 10.0.100.1 255.255.255.0
no shutdown
interface vlan 101
ip add 10.0.101.1 255.255.255.0
no shutdown
interface vlan 104
ip add 10.0.104.1 255.255.255.0
no shutdown
router OSPF 10
route-id 1.1.1.1
network 10.0.0.0 0.0.0.0.3 area 0
network 10.0.8.0 0.0.0.0.255 area 0
network 10.0.100.0 0.0.0.0.255 area 0
network 10.0.101.0 0.0.0.0.255 area 0
network 10.0.104.0 0.0.0.0.255 area 0
interface Fastethernet 0/1
ip ospf authentication message-digest
ip OSPF message-digest-key 1 MD5 abc
interface Fastethernet 0/7
ip OSPF authentication message-digest
ip OSPF message-digest-key 1 MD5 abc
三层交换机sw2
hostname sw2
vlan 100
name gongchengbu
vlan 101
name shichangbu
interface fastethernet 0/10
portgroup 1
interface fastethernet 0/11
portgroup 1
interface aggregateport 1
switchport mode trunk
interface range fastethernet 0/1-9
switchport mode access
switchport access vlan 100
switchport port-security
switchport port-security maximum 1
switchport port-security violation shutdown
spanning-tree portfast
interface range fastethernet 0/12-20
switchport mode access
switchport access vlan 101
switchport port-security
switchport port-security maximum 1
switchport port-security violation shutdown
spanning-tree portfast
二层交换机sw3
hostname sw3
vlan 102
name yunweibu
vlan 103
name guanlibu
interface fastethernet 0/1
switchport mode trunk
interface range fastethernet 0/1-10
switchport mode access
switchport access vlan 102
switchport port-security
switchport port-security maximum 1
switchport port-security violation shutdown
spanning-tree portfast
interface range fastethernet 0/11-20
switchport mode access
switchport access vlan 103
switchport port-security
switchport port-security maximum 1
switchport port-security violation shutdown
spanning-tree portfast
配置无线ap
hostname AP1
vlan 105
name wuxian
service dhcp
ip helper-address 10.0.104.5
dot11 wlan 10
vlan 105
broadcast-ssid
ssid xinshiji
interface GigabitEthernet 0/1
ip address 10.0.0.10 255.255.255.252
speed 100
no shutdown
interface dot11radio 1/0
encapsulation dot1Q 105
mac-mode fat
radio-type 802.11b
channel 1
wlan-id 10
interface dot11radio 2/0
encapsulation dot1Q 105
mac-mode fat
radio-type 802.11a
channel 149
wlan-id 10
interface BVI 105
ip address 10.0.105.1 255.255.255.0
wlansec 1
security static-wep-key encryption 40 ascii 1 12345
router OSPF 10
route-id 3.3.3.3
network 10.0.0.8 0.0.0.3 area 0
network 10.0.105.0 0.0.0.255 area 0
interface GigabitEthernet 0/1
ip ospf authentication message-digest
ip OSPF message-digest-key 1 md5 abc