计管袁晨帅36计算机网络技术

《计管袁晨帅36计算机网络技术》由会员上传分享，免费在线阅读，更多相关内容在行业资料-天天文库。

《计算机网络技术》课程设计报告题目小型公司网络建设班级：10计算机管理与应用姓名：袁晨帅学号：1003011136指导教师：程宁老师2018年12月17日2/17

1目录一．具体设计任务1二．基本思路及相关理论1三．方案设计2四．网络具体配置步骤21、根据网络拓扑规划网络结构并按要求连接线缆。22、按要求配置各设备的IP、掩码、主机名等基本配置。33、将S21和S22划分44、配置S21和S22端口安全65、在S3上配置DHCP服务76、在S3上配置ACL77、配置DNS服务器98、配置WWW和FTP服务器109、配置RIP路由1210、在R1上配置NAT14六．总结152/17

2．具体设计任务某企业计划建设自己的企业园区网络，希望通过这个新建的网络，提供一个安全、可靠、可扩展、高效的网络环境，将两个办公地点连接到一起，使企业内能够方便快捷的实现网络资源共享、全网接入Internet等目标，同时实现公司内部的信息保密隔离，以及对于公网的安全访问。二．基本思路及相关理论基本思路：1、根据网络拓扑规划网络结构并按要求连接线缆2、根据要求配置各设备的IP、掩码、主机名等基本配置3、将S1和S2划分vian:S1的fO/1-1O端口为vian2,S2的fO/1-1O端口为vlan34、配置S1和S2端口安全，规定每个端口最大学习MAC地址为5个，如果违规则shutdown该端口）5、在S3上配置DHCPI艮务：VLAN1分配的地址网段为192.168.1.0/24；VLAN2分配的地址网段为192.168.2.06、在S3上配置ACL隔离VLAN2和VLAN3使业务部和财务部之间不能相互访问7、配置DNSS艮务器，使其能完成内网域名的解读，当用户访问外网时，能自动转发到公网的域名服务器做解读8、配置WW和FTP服务器，公司员工可通过http://www.shixun.com域名访问公司网站；通过ftp://FTP.shixun.com完成文件的上传和下载9、企业内部网络中实现高效的路由选择协议ospf完成互联10、在RB上配置NAT以实现内网能够访问Internet相关理论：IP地址、掩码、主机名的配置VLAN的划分端口安全配置DHCP艮务配置ACL隔离配置DNSJ艮务器配置ospF协议NAT配置PPPCHAP勺配置15/17

3E办公地点iQ/0/O1B4Cloud-PTCloudO£0/12960S296I-24TTkl192.168ID101/24,Server-PT迫氏内劇wwvAftpServer£0/3192.168.10.100/24Server-PT內都dnwServer£0/1*HlPC-PTPCO%f0/2□HIHNVPC-PTPCI163.t0vlanS：192.168.2.015/17192.168.1.2/24192.1682.2/2415/17财务都四.网络具体配置步骤1、根据网络拓扑规划网络结构并按要求连接线缆aO/2^2611R215/1715/17Server-PTServer0Cloud-IPTCloudlFaO/1n匚-PTPCOPC-PTPCI15/17

42、按要求配置各设备的IP、掩码、主机名等基本配置。设备名称设备ip、掩码所接端口与线业务部电脑192.168.1.10/24直通线财务部电脑192.168210/24直通线S21双层交换机无交叉线fa0/24S22双层交换机无交叉线fa0/23S3三层交换机Vlan2192.168.1.1/24Vlan3192.168.2.1/24Vlan4192.168.10.1/24Vlan1192.168.23.2/24交叉线fa0/24交叉线fa0/23交叉线fa0/21交叉线fa0/22R2路由器Fa0/1192.168.23.1/24Se1/092.168.12.2/24交叉线fa0/0串行DCESe1/0R1路由器Se1/0192.168.12.1/24Fa0/1192.168.5.100/24串行DCESe1/0交叉线fa0/0服务器192.168.10.100/24交叉线fa0/213、将S21和S22划分vian：S21的fO/1-1O端口为vian2,S22的fO/1-1O端口为vian3S21交换机的配置：Switch>enSwitch#conftSwitch(config>#hosts21s21(config>#vlan2s21(config-vlan>#exits21(config>#vlan3s21(config-vlan>#exits21(config>#intrangefa0/1-10s21(config-if-range>#switchmodeaccesss21(config-if-range>#switchaccessvian2s21(config-if-range>#exit15/17

5s21(config>#intrangefa0/11-20s21(config-if-range>#switchmodeaccesss21(config-if-range>#switchaccessvlan3s21(config-if-range>#exits21(config>#intfa0/24s21(config-if>#switchmodetrunkVLANEtaxua1active-FaO/；!,Ya.Q/22fFaO/23,F&0/24A.€activeFaO/LfFaO/：,FaO/3,FaO/4Faa/5,FaO/6,FaO/7,FaC/aFaO/9,FaQ/103VLANQCW3Faa/l.lrFa0/l：#FaO/13,FaO/14FaO/LS,raO/lfi,FaO/17,FaO/19Fa0/201002fddi-cLefaultact/ufisup10Q3token-ring-def&ultact/unsup1004fddinetfaultact/unaup1D0Stme匸-default巨匚t^/unsupVLANT^rpeSAIDMTUParentRingNoBridgaNoEtpBrdgMcdeIranalTrans21enet1000011&00-—■=00Aenetloooa;1&00-一一一一003eneit1000031500-一---001002fddi101002ISDO-----0-010031010031SOO--一一-001004fdnet101004tsoo-一一ieee一00iaostrnet1010051^00二一ibm二0□S22交换机的配置：Switch>enSwitch#conftSwitch(config>#hosts22s22(config>#vlan2s22(config-vlan>#exits22(config>#vlan3s22(config-vlan>#exits22(config>#intrangefa0/1-10s22(config-if-range>#switchmodeaccesss22(config-if-range>#switchaccessvlan2s22(config-if-range>#exits22(config>#intrangefa0/11-20s22(config-if-range>#switchmodeaccesss22(config-if-range>#switchaccessvlan315/17

6s22(config-if-range>#exits22(config>#intfaO/23s22(config-if>#switchmodetrunk1defaultKtiveFa0/21fFaO/23,FaO/24A€VLAK0002act-iveF^0/l.rFa0/2rFa0/3ffF*0/4Faa/5,Fa0/€FFa0/7,FaC/aFaO/9,FaQ/lQ3ytiveFaO/Ll,Fa0/Li.FaO/13,FaO/14FaO/lS,FaC/16,FaO/17；FaO/18FaO/19,Fa0/201002fddi-d-efaLLlt,aet/iiEisupiao-3tekeBL-ring-defaultact/unsup1004fddin«t=da-faultact/unsup1005tenet-defaultacl^/unsupVLANKajnaStatusEsz匸mVLANTypeSAIDMTUParanaMngKcBridgeN-aEtpBtdgHed®rranalTrans21enet1000011500■00Aenet;10000^1SOO一003enei&L000Q31500-0a1002fddi101002LSDO-0□1003tr1010031&00一0□1004fduet1010041&00ieM001005trnet1010051&00rbm0□4、配置S21和S22端口安全，规定每个端口最大学习MAC地址为5个，如果违规则shutdown该端口)S21#conftS21(config>#intrangefaO/1-24S21(config-if-range>#switchport-securityS21(config-if-range>#switchport-securitymax5S21(config-if-range>#switchport-securityviolationshutdownS21(config-if-range>#endMacAddressTableVianMacAddr^ffsiTyptPorta10002.1€97.4cl7DYl^ICFaO/23I00€0,3eb4.7042F^a/23r丄0002rl€97,4cl7DYNAMICFaO/23310002.l£97.4e!7DYNAMICFaO/23S22#conft15/17

7S22(config>#intrangefaO/1-24S22(config-if-range>#switchport-securityS22(config-if-range>#switchport-securitymax5S22(config-if-range>#switchport-securityviolationshutdownS22(config-if-range>#endMaeAddressTablaVianMaeAddrejg3TypePorts10002.1597.4clSDniAMIC1G0€0.3»b4.70d2DYNAMICFaD/245、在S3上配置DHCP服务：VLAN1分配的地址网段为192.168.1.0/24;VLAN2分配的地址网段为192.168.2.0s3(config>#ipdhcppoolglobals3(dhcp-config>#network192.168.1.0255.255.255.0s3(dhcp-config>#dns-server192.168.10.100s3(dhcp-config>#default-router192.168.1.1s3(dhcp-config>#exits3(config>#ipdhcppoolglobal2s3(dhcp-config>#network192.168.2.0255.255.255.0s3(dhcp-config>#dns-server192.168.10.100s3(dhcp-config>#default-router192.168.2.1s3(dhcp-config>#exits3(config>#ipdhcpexcluded-address192.168.1.1192.168.1.10s3(config>#ipdhcpexcluded-address192.168.2.1192.168.2.106、在S3上配置ACL,隔离VLAN2和VLAN3，使业务部和财务部之间不能相互访问S3>enS3#conftS3(config>#access-list1deny192.168.2.00.0.0.255S3(config>#access-list1permit192.168.5.00.0.0.255S3(config>#intvlan215/17

8S3(config-if-VLAN2>#ipaccess-group1outS3(config-if-VLAN2>#exitS3(config>#access-list2deny192.168.1.00.0.0S3(config>#access-list2permit192.168.5.00.0.0.255S3(config>#intvlan3S3(config-if-VLAN3>#ipaccess-group2outS3(config-if-VLAN3>#exitS3(config>#endS3#showaccess-listipaccess-liststandard110deny192.168.2.00.0.0.25520permit192.168.5.00.0.0.2557packetsfilteredipaccess-liststandard210deny192.168.1.00.0.0.25520permit192.168.5.00.0.0.2552packetsfiltered连通测试：15/17

9PC>ping192,166.2.ZPingingISSxZ.Zwith3Zbytescfd^taz15/1715/17Replyfrom192.1€S.Z.2ifcyt&s=32tlufr=125ia5TTL-127Replyfrom192.168.Z.ZzI^eplyftouL9Z.1C®.Z.2;bytts=32tinLft«110HisrTL«：127Lytes=3Ztiiue^LZSiasTTL^IZ?ReplyfromL9Z.16S.2.Zzfcytes=3Zt.i£L&=LZ5iiisTrL=12715/1715/17Pingsta^ifticsfor19Z.168.2.£;Packets:Sent■4r=4rLast■0(□%less)rApproxiiaateroundtripintilil-seconds:flininLua=llOnfMaxiiuum=12,SusAvara^«=1£1kl5POpintf152.1€S,5.SPinningL9Z.166T5.Zwith3Zbytesof15/1715/17Replyfrom192.168.5.2:Replyftoia192,1^8.5.S:Raply£rou192.l€e.S.2:Replyfrom192.168,5.?:fcytei^jztinie«LZSHi3TTL^lZEbytes=32tioe=156ia£TTL=125bytss=32tiiu»=156HisTTL=125hyteE=32tiBLe=lE6n«TTL=12E15/17Pingstatisticsfor192.168.S.Z:Packetr?:Sent=4fFecelv&d=4fLost-oto*less),Approxlma^eround^ripininilli-seconds:Hininiuik=12-5iiks,Haximusk■l£6uifrAverage■L4Sia£15/17

107、配置DNS服务器，使其能完成内网域名的解读，当用户访问外网时，能自动转发到公网的域名服务器做解读15/1715/1715/17

118、配置WWW和FTP服务器，公司员工可通过http://www.shixun.com域名访问公司网站；通过ftp://FTP.shixun.com完成文件的上传和下载15/17

1215/17

13RIP完成互联9、企业内部网络中实现高效的路由选择协议R1路由器r1(config>#intsO/O%lnvalidinterfacetypeandnumberr1(config>#ints1/0r1(config-if>#ipaddress192.168.12.1255.255.255.0r1(config-if>#clockrate64000r1(config-if>#noshutr1(config-if>#endr1#conftr1(config>#routeripr1(config-router>#network192.168.12.0r1(config-router>#network192.168.5.0r1(config-router>#exitr1(config>#endrltshowiprouteCodes:C-亡口nneeted,S-I-IGRPfR-M-mobile„B-BGPD二EIGRP,EX-ElGRPexternal,O-OSPFrIA-OSPFinterareaN1一OSPFNSSAexternaltyp合1*N2=OSPFNSSAexternaltyp吕2El-OSPFextfiEHBltyp-filrE2-OSPFfiKteEHAltype2,E-EGP1-IS-IS,LL-IS-ISlevel-lfL2-IS-ISlevel-2rla一IS-ISinterarea*-candidate口-per-口兮色芷xout;e口—QDRP=periodicdawnlaidedstaticequesGatewayoflastresortisnot-set1921€EI.S.0/24isdirectlycazin«ctedrTaatEthemet0/1C192_168_12_0/24ladirectlyeamiected,Seri昌l_l/OR2路由器r2(config>#r2(config>#ints1/0r2(config-if>#ipaddress192.168.12.2255.255.255.0r2(config-if>#clockrate64000r2(config-if>#noshutr2(config-if>#exitr2(config>#intfa0/1r2(config-if>#ipaddress192.168.23.1255.255.255.0r2(config-if>#noshutr2(config-if>#endr2#conftr2(config>#routeripr2(config-router>#network192.168.12.0r2(config-router>#network192.168.23.0r2(config-router>#end——iprouteCades:C-匸口nnactfid^S-另匸■匸士u*I-工GRP.M-ziabile,,B-BGPD-EIGRPrEX-ElGRPextSEnal,O-OSP：FrIA-OSPFinterarea15/17

14N1一OSPFNSSAexternaltype1,N2-OSPFNSSAtype2El-OSPFexternal匸曲轻ltE2-OSPFexternaltype2rE-EGP1-IS-IS,LI二IS-ISlevel-1,L2-IS-ISlev皀1=2$la-IS-ISinterasea*=candidatedefaultU■psx-usersxati匚zzaute^□―ODRP-periodicdetrnlodedstaticrouteGatewayoflastreaorl;isnotg@tC192・l£ELl・0/'24imdirectLyconnscted^Vlan2C192„16B_2_0/24isdirectlyconnected,,VlanSH192.150.5.0/24[120/2]via192.16B.23.1,00:00:03,VlanlR192-16^.12.0/24[120/1]via192.168.23.I,□□:00:03JVlanlC192.lea,23,0/24±gdirectlyeormeeted,VlanlS3三层交换机Ruijie(config>#vlan2Ruijie(config-vlan>#exitRuijie(config>#vlan3Ruijie(config-vlan>#exitRuijie(config>#intvlan2Ruijie(config-if-VLAN2>#ipaddress192.168.1.1255Ruijie(config-if-VLAN2>#noshut.Ruijie(config-if>#exitRuijie(config>#intrangefa0/23-24Ruijie(config-if-range>#switchmodetrunkRuijie(config>#intvlan2Ruijie(config-if-VLAN2>#ipaddress192.168.1.1255.255.255.0Ruijie(config-if-VLAN2>#noshutRuijie(config-if-VLAN2>#exitRuijie(config>#intvlan3Ruijie(config-if-VLAN3>#ipaddress192.168.2.1255.25Ruijie(config-if-VLAN3>#noshutRuijie(config-if-VLAN3>#exitRuijie(config>#hosts2s2(config>#intvlan1s2(config-if-VLAN1>#ipaddress192.168.23.2255.255.255.0s2(config-if-VLAN1>#noshuts2(config-if-VLAN1>#exits2(config>#ends2#showiprouteC192.168.1.0/24isdirectlyconnected,VLAN2C192.168.1.1/32islocalhost.C192.168.2.0/24isdirectlyconnected,VLAN3C192.168.2.1/32islocalhost.C192.168.23.0/24isdirectlyconnected,VLAN1C192.168.23.2/32islocalhost.s2#confts2(config>#routeospf1s2(config-router>#network192.168.1.00.0.0.255area015/17

15s2(config-router>#network192.168.2.00.0.0.255area0s2(config-router>#network192.168.23.00.0.0.255area0s2(config-router>#exitCcdea:C-eormected,5-sta-cie,I-IGTIP,R-罠工M-mobile,B-BGPD-E1GRP,ZX-E1GRPeKtarnal,O-OSPErIA-OSPJinterN1-OSPFNSSA«xterndl匸ypu1,N2-OSPFHS3AexterTidltypw2El-OSPFtypelrZ2-OSPF^xtexnaltype2rZ-SGPi-IS-IS,LI-IS-ISlevel-1,LZ-IS-ISlsval-2,ia-IS-ISinterarea*-CAndidft-LEaultrU-per-u3eratrouteFc-OD^P-periodicdownloadedrouteGazawayaflaa'tregortisnotC192.168.1.0/24j_adirectlyeonnectsdfVlan2C192.L€S.2.0/24Isdirectlyconnected,Vlan32192.168.5.0/241120/2]via192.1G3.23.1,00:00:03,VlanlR192,168,15.0/24[120/1Jvia192,168,23-1,00:00:03,VlanlC19Z.16B.23.0/S4isdirectlyconnected,Vlanl10、在R1上配置NAT,以实现内网能够访问InternetRuijie>enRuijie#Ruijie#conftRuijie(config>#intfa0/0Ruijie(config-if>#ipaddress192.168.5.100255.255.255.0Ruijie(config-if>#noshutRuijie(config-if>#ipnatoutsideRuijie(config-if>#exitRuijie(config>#intfa0/1Ruijie(config-if>#ipaddress192.168.1.1255.255.255.0Ruijie(config-if>#noshutRuijie(config-if>#ipnatinsideRuijie(config-if>#exitRuijie(config>#access-list1permitanyRuijie(config>#$00192.168.5.100netmask255.255.255.0Ruijie(config>#ipnatinsidesourcelist1poolabcoverloadRuijie(config>#iproute0.0.0.00.0.0.0192.168.5.1Ruijie(config>#endRuijie#showipnattrProInsideglobalInsidelocalOutsidelocalOutsideglobalicmp192.168.5.100:1024192.168.1.10:1024192.168.4.1192.168.4.1icmp192.168.5.100:1024192.168.1.10:1024192.168.3.1192.168.3.1六．总结由于上课有些东西没听懂，连线的时候经常连错，导致经常通不了。然后经常没重启机器然后直接连接，所以有时候有很多错误。有时候经常粗心大意，代码都打错。所以，做任何事情都要细心。15/17

16最后祝老师圣诞快乐。15/17