ccna实验手册[北京亚威教育]

《ccna实验手册[北京亚威教育]》由会员分享，可在线阅读，更多相关《ccna实验手册[北京亚威教育]（44页珍藏版）》请在装配图网上搜索。

1、亚威CCNA实验手册目 录实验一、配置STP与VTP2实验二、静态路由10实验三、RIP路由协议13实验四、RIPv1与EIGRP在不连续网络下的比较20实验五、访问列表与telnet访问控制26实验六、静态、动态NAT与PAT30实验七、帧中继链路上运行EIGRP34实验八、背靠背帧中继39实验九、配置ISDN DDR43实验一、配置STP与VTP 环境：三台交换机，形成一个全互连结构，sw3为2950，sw1和sw2为2900xl；要求：设置sw3为VTP server,设置sw1和sw2为VTP client,域名为cisco，密码为：cisco，在server创建vlan 10(nam

2、e:aa)和vlan20(name:bb);设置sw3为vlan1的根桥，sw1为vlan10的根桥，sw2为vlan20的根桥； 初始化配置：Sw#show vlan 查看vlan信息Sw#Delete vlan.dat 用此命令将vlan删除Sw#show startup-config 查看一下NVRAM是否保存了配置Sw#erase startup-config 清空配置文件Sw#reload 重新启动交换机swenablesw#config terminalsw(config)#hostname sw1sw1(config)#no ip domain-lookup 关闭域名查找sw1(

3、config)#line console 0sw1(config-line)#logging synchronous 命令输入达到同步sw1(config-line)#exec-timeout 0 0 设置永不超时sw1(config-line)#exit步骤一、配置VTPsw3的配置：sw3(config)#vtp mode server 在sw3上启用vtp serverDevice mode already VTP SERVER.sw3(config)#vtp domain cisco 设置域名Changing VTP domain name from NULL to ciscosw3(

4、config)#vtp password cisco 设置密码Setting device VLAN database password to ciscosw1的配置:sw1#vlan database 进入vlan数据库sw1(vlan)#vtp client 启用VTP client模式Setting device to VTP CLIENT mode.sw1(vlan)#vtp domain cisco 作用到cisco域中Changing VTP domain name from NULL to ciscosw1(vlan)#vtp password cisco 设置密码与server

5、端相同 Setting device VLAN database password to cisco.sw1(vlan)#exit 使配置生效In CLIENT state, no apply attempted.Exiting.sw2的配置:sw2#vlan databasesw2(vlan)#vtp clientSetting device to VTP CLIENT mode.sw2(vlan)#vtp domain ciscoChanging VTP domain name from NULL to ciscosw2(vlan)#vtp password ciscoSetting de

6、vice VLAN database password to cisco.sw2(vlan)#exitsw2#步骤二、启用干道端口sw3的配置：sw3(config)#interface fa0/23sw3(config-if)#switchport mode trunk 启用trunk端口sw3(config-if)#interface fa0/24sw3(config-if)#switchport mode trunk sw1的配置：sw1(config)#interface fa0/23sw1(config-if)#switchport trunk encapsulation dot1q

7、 封装干道协议sw1(config-if)#switchport mode trunk 启用trunk模式sw1(config-if)#sw1(config)#interface fa0/24sw1(config-if)#switchport trunk encapsulation dot1qsw1(config-if)#switchport mode trunksw2的配置：sw2(config)#interface fa0/23sw2(config-if)#switchport trunk encapsulation dot1qsw2(config-if)#switchport mode

8、trunksw2(config)#interface fa0/24sw2(config-if)#switchport trunk encapsulation dot1qsw2(config-if)#switchport mode trunk步骤三、测试vtp状态及创建vlansw3的状态：sw3#show vtp status 显示vtp状态VTP Version : 2Configuration Revision : 0 配置修订号Maximum VLANs supported locally : 254Number of existing VLANs : 5 VTP Operating M

9、ode : server vtp模式VTP Domain Name : cisco vtp域名VTP Pruning Mode : DisabledVTP V2 Mode : DisabledVTP Traps Generation : DisabledMD5 digest : 0x3F 0x17 0xC8 0xB8 0x5A 0xE3 0x01 0x66 Configuration last modified by 0.0.0.0 at 0-0-00 00:00:00创建vlan:sw3(config)#vlan 10 创建VLAN10sw3(config-vlan)#name aa 命名为

10、aasw3(config-vlan)#exit 应用配置sw3(config)#vlan 20 创建VLAN20sw3(config-vlan)#name bb 命名为bbsw3(config-vlan)#exitsw3(config)#sw3的状态：sw3#show vtp status 在sw3显示vtp的状态VTP Version : 2Configuration Revision : 2 server的修订号Maximum VLANs supported locally : 254Number of existing VLANs : 7 vlan也已经增加VTP Operating M

11、ode : serverVTP Domain Name : ciscoVTP Pruning Mode : DisabledVTP V2 Mode : DisabledVTP Traps Generation : DisabledMD5 digest : 0x98 0x31 0xCF 0xA0 0xA7 0x17 0x73 0x66Configuration last modified by 0.0.0.0 at 3-1-93 00:52:05sw2的状态：sw2#show vtp statusVTP Version : 2Configuration Revision : 2 已经同步了ser

12、verMaximum VLANs supported locally : 254Number of existing VLANs : 7VTP Operating Mode : ClientVTP Domain Name : ciscoVTP Pruning Mode : DisabledVTP V2 Mode : DisabledVTP Traps Generation : DisabledMD5 digest : 0x98 0x31 0xCF 0xA0 0xA7 0x17 0x73 0x66Configuration last modified by 0.0.0.0 at 3-1-93 0

13、0:52:05sw1的vlan信息:sw1#show vlan 显示vlan信息VLAN Name Status Ports- - - -1 default active Fa0/1, Fa0/2, Fa0/3, Fa0/4, Fa0/5, Fa0/6, Fa0/7, Fa0/8, Fa0/9, Fa0/10, Fa0/11, Fa0/12, Fa0/13, Fa0/14, Fa0/15, Fa0/16, Fa0/17, Fa0/18, Fa0/19, Fa0/20, Fa0/21, Fa0/22, Fa0/23, Fa0/2410 aa active 已经同步了vlan的信息20 bb ac

14、tive步骤四、配置PVSTsw3(config)#spanning-tree vlan 1 root primary 设置为vlan1的根桥Sw1(config)#spanning-tree vlan 10 priority 4096 设置为vlan10的根桥Sw2(config)#spanning-tree vlan 20 priority 4096 设置为vlan20的根桥步骤五、显示STP的信息sw1的生成树信息:sw1#show spanning-tree brief 显示每VLAN生成树信息VLAN1 Spanning tree enabled protocol IEEE ROOT

15、 ID Priority 24577 Address 0007.eb06.1740 非vlan1的根桥 Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Bridge ID Priority 32768 Address 0030.803d.f640 Hello Time 2 sec Max Age 20 sec Forward Delay 15 secVLAN10 Spanning tree enabled protocol IEEE ROOT ID Priority 4096 Address 0030.803d.f641 为vlan10

16、的根桥 This bridge is the root Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Bridge ID Priority 4096 Address 0030.803d.f641 Hello Time 2 sec Max Age 20 sec Forward Delay 15 secVLAN20 Spanning tree enabled protocol IEEE ROOT ID Priority 4096 Address 00b0.645f.34c2 非vlan20的根桥 Hello Time 2 sec Max

17、Age 20 sec Forward Delay 15 sec Bridge ID Priority 32768 Address 0030.803d.f642 Hello Time 2 sec Max Age 20 sec Forward Delay 15 secsw2的生成树信息:sw2#show spanning-tree briefVLAN1 Spanning tree enabled protocol IEEE 非vlan1的根桥 ROOT ID Priority 24577 Address 0007.eb06.1740 Hello Time 2 sec Max Age 20 sec

18、Forward Delay 15 sec Bridge ID Priority 32768 Address 00b0.645f.34c0 Hello Time 2 sec Max Age 20 sec Forward Delay 15 secVLAN10 Spanning tree enabled protocol IEEE ROOT ID Priority 4096 非vlan10的根桥 Address 0030.803d.f641 Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Bridge ID Priority 32768 Ad

19、dress 00b0.645f.34c1 Hello Time 2 sec Max Age 20 sec Forward Delay 15 secVLAN20 Spanning tree enabled protocol IEEE ROOT ID Priority 4096 为vlan20的根桥 Address 00b0.645f.34c2 This bridge is the root Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Bridge ID Priority 4096 Address 00b0.645f.34c2 Hell

20、o Time 2 sec Max Age 20 sec Forward Delay 15 secsw3的生成树信息:sw3#show spanning-treeVLAN0001 Spanning tree enabled protocol ieee Root ID Priority 24577 为vlan1的根桥 Address 0007.eb06.1740 This bridge is the root Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Bridge ID Priority 24577 (priority 24576 s

21、ys-id-ext 1) Address 0007.eb06.1740 Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Aging Time 300VLAN0010 Spanning tree enabled protocol ieee Root ID Priority 4096 非vlan10的根桥 Address 0030.803d.f641 Cost 19 Port 24 (FastEthernet0/24) Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Bridge I

22、D Priority 32779 (priority 32768 sys-id-ext 11) Address 0007.eb06.1740 Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Aging Time 300VLAN0020 Spanning tree enabled protocol ieee Root ID Priority 4096 非vlan20的根桥 Address 00b0.645f.34c2 Cost 19 Port 23 (FastEthernet0/23) Hello Time 2 sec Max Age 2

23、0 sec Forward Delay 15 sec Bridge ID Priority 32780 (priority 32768 sys-id-ext 12) Address 0007.eb06.1740 Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Aging Time 300Interface Role Sts Cost Prio.Nbr Type- - - - - -Fa0/23 Root FWD 19 128.23 P2pFa0/24 Altn BLK 19 128.24 P2p步骤六、显示当前配置结果Sw1的配置结果：

24、sw1#show running-config!hostname sw1!spanning-tree vlan 10 priority 4096！no ip domain-lookup!interface FastEthernet0/23 switchport trunk encapsulation dot1q switchport mode trunk!interface FastEthernet0/24switchport trunk encapsulation dot1q switchport mode trunk!endsw2的配置结果：sw2#show running-configh

25、ostname sw2！spanning-tree vlan 20 priority 4096!no ip domain-lookup!interface FastEthernet0/23switchport trunk encapsulation dot1q switchport mode trunk!interface FastEthernet0/24 switchport trunk encapsulation dot1q switchport mode trunk!endsw3的配置结果：sw3#show running-config!hostname sw3!no ip domain

26、-lookup!spanning-tree vlan 1 priority 24576!interface FastEthernet0/23 switchport mode trunk!interface FastEthernet0/24 switchport mode trunk!End实验二、静态路由 环境：两台2500系列路由器通过串口相连。 要求：在R1和R2上启用静态路由，使两端网络能够互通。步骤一、基本配置RouterRouterenableRouter#config terminalRouter(config)#hostname R1R1(config)#no ip domain

27、-lookup R1(config)#line console 0R1(config-line)# logging synchronous R1(config-line)#exec-timeout 0 0 R1(config-line)#exit步骤二:接口配置R1的配置：R1(config)#interface s0R1(config-if)#ip address 30.1.1.1 255.255.255.0R1(config-if)#clock rate 64000 时钟速率端R1(config-if)#no shutdownR1(config-if)#interface loopback

28、 0R1(config-if)#ip address 10.1.1.1 255.255.255.0R1(config-if)#R2的配置：Router(config)#hostname R2R2(config)#interface s1R2(config-if)#ip address 30.1.1.2 255.255.255.0R2(config-if)#no shutdownR2(config-if)#interface loopback 0R2(config-if)#ip address 20.1.1.1 255.255.255.0R2(config-if)#exitR2(config)#

29、步骤三、指定静态路由R1(config)#R1(config)#ip route 20.1.1.0 255.255.255.0 serial 0 指定静态路由R2(config)#R2(config)#ip route 10.1.1.0 255.255.255.0 30.1.1.1 指定静态路由步骤四、作ping 测试R1#pingProtocol ip:Target IP address: 20.1.1.1 目的地址Extended commands n: y 是否用扩展命令Source address or interface: 10.1.1.1 源地址! 显示已通步骤五、显示静态路由条目

30、R1#show ip routeCodes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, L1 - IS-IS l

31、evel-1, L2 - IS-IS level-2, ia - IS-IS inter area * - candidate default, U - per-user static route, o - ODR P - periodic downloaded static routeGateway of last resort is not set 20.0.0.0/24 is subnetted, 1 subnetsS 20.1.1.0 is directly connected, Serial0 静态路由条目 10.0.0.0/24 is subnetted, 1 subnetsC 1

32、0.1.1.0 is directly connected, Loopback0 30.0.0.0/24 is subnetted, 1 subnetsC 30.1.1.0 is directly connected, Serial0步骤六、显示当前配置R1的配置结果：R1#show running-config!hostname R1!no ip domain-lookup!interface Loopback0 ip address 10.1.1.1 255.255.255.0!interface Serial0 ip address 30.1.1.1 255.255.255.0 cloc

33、krate 64000!ip route 20.1.1.0 255.255.255.0 Serial0!line con 0 exec-timeout 0 0 logging synchronous transport input noneendR2的配置结果：R2#show running-config!hostname R2!no ip domain-lookup!interface Loopback0 ip address 20.1.1.1 255.255.255.0!interface Serial1 ip address 30.1.1.2 255.255.255.0!ip route

34、 10.1.1.0 255.255.255.0 30.1.1.1!line con 0 exec-timeout 0 0 logging synchronous!end实验三、RIP路由协议 环境：两台2500系列路由器由串口相连。 要求：如下图所示，在R1和R2上运行RIPv1,让两端能够学习到对端的路由以达到通信的目的。 步骤一、基本配置RouterRouterenableRouter#config terminalRouter(config)#hostname R1R1(config)#no ip domain-lookup 关闭域名查找R1(config)#line console 0

35、R1(config-line)# logging synchronous 命令输入达到同步R1(config-line)#exec-timeout 0 0 设置永不超时R1(config-line)#exit步骤二、接口IP配置R1的配置：R1(config)#interface s0R1(config-if)#ip address 30.1.1.1 255.255.255.0R1(config-if)#clock rate 64000 注意时钟速率端R1(config-if)#no shutdownR1(config-if)#interface loopback 0R1(config-if)

36、#ip address 10.1.1.1 255.255.255.0R1(config-if)#R2的配置：Router(config)#hostname R2R2(config)#interface s1R2(config-if)#ip address 30.1.1.2 255.255.255.0R2(config-if)#no shutdownR2(config-if)#interface loopback 0R2(config-if)#ip address 20.1.1.1 255.255.255.0R2(config-if)#exitR2(config)#步骤三、启用RIP路由选择协议

37、R1的配置：R1(config)#router rip 启用RIPR1(config-router)#network 30.0.0.0 发布直连网段R1(config-router)#network 10.0.0.0R1(config-router)#exitR1(config)#R2的配置：R2(config)#router rip 启用RIPR2(config-router)#network 20.0.0.0 发布直连网段R2(config-router)#network 30.0.0.0R2(config-router)#exitR2(config)#end步骤四、显示路由表，查看路由条

38、目R1#show ip routeCodes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, L1 - IS-IS

39、level-1, L2 - IS-IS level-2, ia - IS-IS inter area * - candidate default, U - per-user static route, o - ODR P - periodic downloaded static routeGateway of last resort is not setR 20.0.0.0/8 120/1 via 30.1.1.2, 00:00:03, Serial0 学习来的路由条目 10.0.0.0/24 is subnetted, 1 subnetsC 10.1.1.0 is directly conn

40、ected, Loopback0 30.0.0.0/24 is subnetted, 1 subnetsC 30.1.1.0 is directly connected, Serial0步骤五、用扩展ping命令测试连通性R2#pingProtocol ip:Target IP address: 10.1.1.1Repeat count 5:Datagram size 100:Timeout in seconds 2:Extended commands n: ySource address or interface: 20.1.1.1!步骤六、显示你当前路由协议R2#show ip proto

41、cols 显示你当前路由协议配置情况和运行状态Routing Protocol is rip Sending updates every 30 seconds, next due in 24 seconds Invalid after 180 seconds, hold down 180, flushed after 240 Outgoing update filter list for all interfaces is Incoming update filter list for all interfaces is Redistributing: rip Default version

42、control: send version 1, receive any version Interface Send Recv Triggered RIP Key-chain Loopback0 1 1 2 Serial1 1 1 2 Automatic network summarization is in effect Routing for Networks: 10.0.0.0 20.0.0.0 Routing Information Sources: Gateway Distance Last Update 30.1.1.1 120 00:14:05 Distance: (defau

43、lt is 120)步骤七、显示当前配置r1的当前配置：r1#show running-config!hostname R1!no ip domain-lookup!interface Loopback0 ip address 10.1.1.1 255.255.255.0!interface Serial0 ip address 30.1.1.1 255.255.255.0 clockrate 64000!router rip network 30.0.0.0network 10.0.0.0!line con 0 exec-timeout 0 0 logging synchronous tra

44、nsport input noneendr2的当前配置：R2#sh run!hostname R2!no ip domain-lookup!interface Loopback0 ip address 20.1.1.1 255.255.255.0!interface Serial1 ip address 30.1.1.2 255.255.255.0!router rip network 30.0.0.0network 20.0.0.0!line con 0 exec-timeout 0 0 logging synchronous!end实验四、RIPv1与EIGRP在不连续网络下的比较 环境：

45、两台2500系列路由器，由串口相连。要求：在RIPv1和EIGRP中将两个相同主类网络的不同子网由另一个主类网络分割，如何能学到对端网络。 RIP配置：步骤一、基本配置RouterRouterenableRouter#config terminalRouter(config)#hostname R1R1(config)#no ip domain-lookup R1(config)#line console 0R1(config-line)#logging synchronous R1(config-line)#exec-timeout 0 0 R1(config-line)#exit步骤二、接

46、口配置R1的配置：R1(config)#interface s0R1(config-if)#ip address 172.16.1.1 255.255.255.0R1(config-if)#clock rate 64000 R1(config-if)#no shutdownR1(config-if)#interface loopback 0R1(config-if)#ip address 10.1.1.1 255.255.255.0R1(config-if)#R2的配置：R2(config)#interface s1R2(config-if)#ip add 172.16.1.2 255.255

47、.255.0R2(config-if)#no shutdownR2(config-if)#interface loopback 0R2(config-if)#ip address 10.1.2.1 255.255.255.0R2(config-if)#exitR2(config)#步骤三、启用RIP路由选择协议R1的配置：R1(config)#router rip 启用RIP R1(config-router)#network 10.0.0.0 发布直连网段R1(config-router)#network 172.16.0.0R1(config-router)#exitR1(config)#

48、R2的配置：R2(config)#router rip 启用RIPR2(config-router)#network 10.0.0.0 发布直连网段R2(config-router)#network 172.16.0.0R2(config-router)#exitR2(config)#end显示路由信息R1#show ip route 显示路由信息Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF

49、inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area * - candidate default, U - per-user static route, o - ODR P - periodic downloaded static ro

50、uteGateway of last resort is not set 172.16.0.0/24 is subnetted, 1 subnetsC 172.16.1.0 is directly connected, Serial0 没有学习到任何路由条目 10.0.0.0/24 is subnetted, 4 subnetsC 10.1.3.0 is directly connected, Serial0C 10.1.1.0 is directly connected, Loopback0步骤四、配置辅助IPR1(config)#interface s0R1(config-if)#ip a

51、ddress 10.1.3.1 255.255.255.0 secondary配置辅助IPR2(config)#interface s1R2(config-if)#ip address 10.1.3.2 255.255.255.0 secondary配置辅助IP步骤四、显示路由信息R1#show ip route 显示路由信息Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

52、N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area * - candidate default, U - per-user static route, o - ODR P - periodic downloaded static routeGateway of last resort is not set 172.16.0.0/24 is subnetted, 1 subnetsC 172.16.1.0 is directly connected, Serial0 10.0.0.0/24 is subnetted, 4 subnetsC 10.1.3.0 is directly connected, Serial0R 10.1.2.0 120/1 via 10.1.3.2, 00:00:14, Serial0