CCNA高级实验

要求如上：

具体配置如下：

r4#sh run
Building configuration...

Current configuration : 1155 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname r4
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
!
resource policy
!
memory-size iomem 5
ip subnet-zero
!
!
ip cef
no ip domain lookup
!
     
interface Loopback1
ip address 172.16.1.1 255.255.255.0
!
interface Loopback2
ip address 172.16.2.1 255.255.255.0
shutdown
!
interface Loopback3
ip address 172.16.3.1 255.255.255.0
shutdown
!
interface Serial0/0
no ip address
shutdown
serial restart-delay 0
!
interface Serial0/1
ip address 192.168.14.4 255.255.255.0
serial restart-delay 0
!
interface Serial0/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial0/3
no ip address
shutdown
serial restart-delay 0
!
router eigrp 20
network 172.16.1.0 0.0.0.255
network 172.16.2.0 0.0.0.255
network 172.16.3.0 0.0.0.255
network 192.168.14.0
no auto-summary
!
ip http server
no ip http secure-server
!
ip classless
!

control-plane
!
line con 0
exec-timeout 0 0
logging synchronous
line aux 0
line vty 0 4
login
!
!
end

 

r2#sh run
Building configuration...

Current configuration : 1900 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname r2
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
!
resource policy
!
memory-size iomem 5
ip subnet-zero
!
!
ip cef
no ip domain lookup
!
interface Serial0/0
ip address 8.8.13.1 255.255.255.0
serial restart-delay 0
!
interface Serial0/1
ip address 192.168.14.1 255.255.255.0
ip access-group 101 in
serial restart-delay 0
!
interface Serial0/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial0/3
no ip address
shutdown
serial restart-delay 0
!
router eigrp 20
redistribute ospf 10 metric 1544 20000 255 1 1500
network 8.8.13.0 0.0.0.255
network 192.168.14.0
no auto-summary
!
router ospf 10
log-adjacency-changes
redistribute eigrp 20 subnets
network 8.8.13.0 0.0.0.255 area 0
network 192.168.14.0 0.0.0.255 area 0
!
ip http server
no ip http secure-server
!
ip classless
!
!
access-list 101 deny   icmp 172.16.0.0 0.0.255.255 host 8.8.3.3 echo
access-list 101 deny   icmp 172.16.0.0 0.0.255.255 host 8.8.3.3 echo-reply
access-list 101 deny   icmp 172.16.0.0 0.0.255.255 host 8.8.35.5 echo
access-list 101 deny   icmp 172.16.0.0 0.0.255.255 host 8.8.35.5 echo-reply
access-list 101 deny   icmp 172.16.0.0 0.0.255.255 host 8.8.5.5 echo
access-list 101 deny   icmp 172.16.0.0 0.0.255.255 host 8.8.5.5 echo-reply
access-list 101 permit icmp any any echo
access-list 101 permit icmp any any echo-reply
access-list 101 deny   tcp 172.16.0.0 0.0.255.255 host 8.8.13.3 eq telnet
access-list 101 deny   tcp 172.16.0.0 0.0.255.255 host 8.8.35.5 eq telnet
access-list 101 permit tcp any any
access-list 101 permit udp any any
access-list 101 permit ip any any
!
control-plane
!
line con 0
exec-timeout 0 0
logging synchronous
line aux 0
line vty 0 4
login   
!
!
end

 

r1#sh run
Building configuration...

Current configuration : 1201 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname r1
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
!
resource policy
!
memory-size iomem 5
ip subnet-zero
!
!
ip cef
no ip domain lookup
!
interface Loopback0
ip address 8.8.3.3 255.255.255.0
!
interface Serial0/0
ip address 8.8.13.3 255.255.255.0
serial restart-delay 0
!
interface Serial0/1
ip address 8.8.35.3 255.255.255.0
encapsulation frame-relay
ip ospf network broadcast
serial restart-delay 0
frame-relay map ip 8.8.35.5 105 broadcast
no frame-relay inverse-arp
!
interface Serial0/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial0/3
no ip address
shutdown
serial restart-delay 0
!
router ospf 10
log-adjacency-changes
network 8.8.3.0 0.0.0.255 area 0
network 8.8.13.0 0.0.0.255 area 0
network 8.8.35.0 0.0.0.255 area 0
!
ip http server
no ip http secure-server
!
ip classless
!
!
access-list 1 permit 192.168.14.1
access-list 1 deny   any
!
control-plane
!
line con 0
exec-timeout 0 0
logging synchronous
line aux 0
line vty 0 4
login
!
!
end

 

r5#sh run
Building configuration...

Current configuration : 1097 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname r5
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
!
resource policy
!
memory-size iomem 5
ip subnet-zero
!
!
ip cef
no ip domain lookup
!        
interface Loopback0
ip address 8.8.5.5 255.255.255.0
!
interface Serial0/0
ip address 8.8.35.5 255.255.255.0
encapsulation frame-relay
ip ospf network broadcast
serial restart-delay 0
frame-relay map ip 8.8.35.3 501 broadcast
no frame-relay inverse-arp
!
interface Serial0/1
no ip address
shutdown
serial restart-delay 0
!
interface Serial0/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial0/3
no ip address
shutdown
serial restart-delay 0
!
router ospf 10
log-adjacency-changes
network 8.8.5.0 0.0.0.255 area 0
network 8.8.35.0 0.0.0.255 area 0
!
ip http server
no ip http secure-server
!
ip classless
!
control-plane
!
line con 0
exec-timeout 0 0
logging synchronous
line aux 0
line vty 0 4
login
!
!
end

几个难点：

1、题目要求了几种路由协议共存，又要保障路由连通，所以要设置eigrp和ospf在R2上的双向重分发（这些貌似不是CCNA要求范围吧！！我理解复杂了？？）。EIGRP上重分发OSPF协议的命令要用 redistribute ospf 10 metric 1544 20000 255 1 1500定义eigrp需求的5个参数，而不能直接用redistribute ospf 10来达到目的；OSPF协议上重分发EIGRP则可直接用redistribute eigrp 20 subnets来完成。

2、题目要求的扩展ACL要设置在R2的S0/1口的in方向，而不能直接设置在R4上，因为ACL并不能过滤路由器本身产生的数据流。