Static comprehensive experimental title
I. Experimental topology:
Second, the experimental requirements:
1.R4 to the ISP, can only assign an IP address can not be any other configuration;
2.R1-R3 within the network, the address 192.168.1.0/24 rational planning;
3.PC You may be two different servers within the domain of the visited network, two different public address of the server;
PC 4. normal external network can access the network PC;
between floating static route R3 5.R2 and backup paths;
6. R4TelnetR3 actually log into Rl;
7. the reduced number of routing entries, to avoid loops.
Third, the experimental setup ideas:
1. rational planning IP address;
2.pc1 obtain an IP address through DHCP;
3. routes (static)
4. configuration easy nat, complete claim 4;
5 arranged one (two), complete in claim 3;
6. configure port mapping, complete claim 6;
7 disposed empty interface, preventing ring.
Fourth, the experimental setup procedure:
1. rational planning and IP address configuration; and the like of the server IP standard as shown in FIG.
pc1 automatically obtain an IP address using DHCP:
[Rl] DHCP enable
[Rl] the pool A IP
[IP-the pool-Rl-A] NET 192.168.1.32 mask 27
[Rl-the pool-IP-A]-Gateway List 192.168.1.33
[ the pool--IP-Rl A] DNS-List 8.8.8.8
[Rl-the pool-IP-A] Q
[Rl]
[Rl] int G0 / 0 /. 1
[Rl-the GigabitEthernet0 / 0 /. 1] Global DHCP SELECT
2.路由：
R1：
ip route-static 0.0.0.0 0.0.0.0 192.168.1.2
R2：
ip route-static 0.0.0.0 0.0.0.0 192.168.1.6
ip route-static 0.0.0.0 0.0.0.0 192.168.1.10 preference 61
ip route-static 192.168.1.32 255.255.255.224 192.168.1.1
ip route-static 192.168.1.96 255.255.255.224 192.168.1.6
ip route-static 192.168.1.96 255.255.255.224 192.168.1.10 preference 61
ip route-static 192.168.1.64 27 NULL 0 //空接口防环
R3：
ip route-static 0.0.0.0 0.0.0.0 12.1.1.2
ip route-static 192.168.1.0 255.255.255.252 192.168.1.5
ip route-static 192.168.1.0 255.255.255.252 192.168.1.9 preference 61
ip route-static 192.168.1.32 255.255.255.224 192.168.1.5
ip route-static 192.168.1.32 255.255.255.224 192.168.1.9 preference 61
ip route-static 192.168.1.64 255.255.255.224 192.168.1.5
ip route-static 192.168.1.64 255.255.255.224 192.168.1.9 preference 61
ip route-static 192.168.1.96 27 NULL 0
Note: This, all-pass network.
3. Configure easy nat: pc network can access the network to the normal PC;
[the Huawei] ACL 2000
[Hawei-Basic-ACL-2000] Source rule the permit 192.168.0.0 0.0.255.255
[the Huawei-Basic-ACL-2000] Q
[the Huawei] int G0 / 0/0
[the Huawei-the GigabitEthernet0 / 0/0] 2000 outbound NAT
4. floating achieved pc address within the network can be accessed by a different domain two servers, the two servers for different public address;
[the Huawei-the GigabitEthernet0 / 0/0] static NAT Inside Global 12.1.1.3 192.168.1.34
[the Huawei-the GigabitEthernet0 / 0/0] static NAT Inside Global 12.1.1.4 192.168.1.35
5. the port mapping: R4TelnetR3 actually log into Rl;
first open Telnet:
Rl:
[Rl] User-interface VTY 0. 4
[Rl-UI-vty0-4] MODE-password authentication
Please Configure The Login password (maximum length 16): RedHat
[Rl-UI-vty0-4] User Privilege 15 Level
[Rl-UI-vty0-4] Q
Telnet first inner web is turned by a successful test:
port mapping on R3:
[the Huawei] int G0 / 0/0
uawei-the GigabitEthernet0 / 0/0] NAT Server Protocol TCP 12.1.1.1 Inside 23 is 192.168.
1.1 // 23 is an analog device does not support
[the GigabitEthernet0-R3 / 0/0] Current Global NAT Server Protocol TCP interface 23 is INS-
IDE 23 is 192.168.1.1
Warning:. iS of the Well-Known Port Port 23 is the If you IT on May Continue the cause is function FA
ilure.
Are you sure to continue [Y / N ]:? y
**
OK, the experiment ended. Oh, there are problems leave a message!
**
