OSPF&PAT综合实验报告

1.1 实验任务
按照拓扑图配置 OSPF 区域、外部路由和网络地址转换
 
1.2 实验环境和网络拓扑
 
 
IP 地址规划
路由器
接口
IP 地址
Loopback 0
R1
F0/0
192.168.10.1/24
1.1.1 .1
R2
F0/0
192.168.10.2/24
2.2.2 .2
F1/0
192.168.20.1/24
 
R3
F1/0
192.168.20.2/24
 
3.3.3 .3
F0/0
192.168.30.1/24
F1/1
192.168.130.1/24
R4
F0/0
192.168.30.2/24
4.4.4 .4
F1/0
202.193.10.1/24
R5
F1/1
192.168.130.2/24
5.5.5 .5
F1/0
202.193.20.1/24
R6
F0/0
202.193.10.2/24
6.6.6 .6
F1/1
202.193.20.2/24
 
 
1.3 完成标准
(1)    按照拓扑图要求连接路由器,配置好各个 OSPF 区域。
(2)    R4 R5 配置 PAT
(3)    R4 R5 上配置到 R6 的路由, R4 R6 之间为主路由, R5 R6 之间为备份路由;最后验证 R1 R6 的网络连通性。
 
 
2 .详细操作步骤
 
Step 1: 配置路由器各接口 IP 地址、各路由器所属 OSPF 区域和外网路由
 
路由器 R1 配置如下:
Router>en
Router#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
Router(config)#ho R1
R1(config)#int lo 0                                                         // 配置 Loopback 0 地址
R1(config-if)#ip add 1.1.1 .1 255.0.0.0
R1(config-if)#no shut
R1(config-if)#int f0/0                                                     // 配置端口 IP
R1(config-if)#ip add 192.168.10.1 255.0.0.0
R1(config-if)#no shut
R1(config-if)#exit
R1(config)#
*Dec 20 20:10:35.415: %LINK-3-UPDOWN: Interface FastEthernet0/0, changed state to up
*Dec 20 20:10:36.415: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to up
R1(config)#int f0/0                                                         // 配置端口 IP
R1(config-if)#ip add 192.168.10.1 255.255.255.0
R1(config-if)#no shut
R1(config-if)#exit
R1(config)#router ospf 10                                               // 配置进程为 10 OSPF
R1(config-router)#network 192.168.10.0 0.0.0 .255 area 1  // 配置区域 1 的网段和反掩码
R1(config-router)#area 1 stub no-summary                       // 配置区域 1 Stub Totally 区域
R1(config-router)#exit
R1(config)#
*Dec 20 20:19:36.167: %OSPF-5-ADJCHG: Process 10, Nbr 2.2.2 .2 on FastEthernet0/0 from LOADING to FULL, Loading Done
R1(config)#exit
 
路由器 R2 配置如下:
Router>en
Router#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
Router(config)#ho R2
R2(config)#int lo 0                                                         // 配置 Loopback 0 地址
R2(config-if)#ip add 2.2.2 .2 255.0.0.0
R2(config-if)#no shut
R2(config-if)#int f0/0                                                     // 配置端口 IP
R2(config-if)#ip add 192.168.10.2 255.255.255.0
R2(config-if)#no shut
R2(config-if)#
*Dec 20 20:10:54.007: %LINK-3-UPDOWN: Interface FastEthernet0/0, changed state to up
*Dec 20 20:10:55.007: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthet0/0, changed state to up
R2(config-if)#int f1/0                                                     // 配置端口 IP
R2(config-if)#ip add 192.168.20.1 255.255.255.0
R2(config-if)#no shut
R2(config-if)#exit
R2(config)#
*Dec 20 20:12:25.515: %LINK-3-UPDOWN: Interface FastEthernet1/0, changed stato up
*Dec 20 20:12:26.515: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthet1/0, changed state to up
R2(config)#router ospf 20                                               // 配置进程为 20 OSPF
R2(config-router)#network 192.168.10.0 0.0.0 .255 area 1  // 配置区域 1 的网段和反掩码
R2(config-router)#area 1 stub no-summary                       // 配置区域 1 Stub Totally 区域
R2(config-router)#
*Dec 20 20:19:36.387: %OSPF-5-ADJCHG: Process 20, Nbr 1.1.1 .1 on FastEthernet from LOADING to FULL, Loading Done
R2(config-router)#network 192.168.20.0 0.0.0 .255 area 0  // 配置区域 0 的网段和反掩码
R2(config-router)#
*Dec 20 20:21:02.923: %OSPF-5-ADJCHG: Process 20, Nbr 3.3.3 .3 on FastEthernet from LOADING to FULL, Loading Done
R2(config-router)#exit
R2(config)#exit
 
路由器 R3 配置如下:
R3:
Router>
Router>en
Router#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
Router(config)#ho R3
R3(config)#int lo 0                                                         // 配置 Loopback 0 地址
R3(config-if)#ip add 3.3.3 .3 255.0.0.0
R3(config-if)#no shut
R3(config-if)#int f1/0                                                     // 配置端口 IP
R3(config-if)#ip add 192.168.20.2 255.255.255.0
R3(config-if)#no shut
R3(config-if)#
*Dec 20 20:12:57.711: %LINK-3-UPDOWN: Interface FastEthernet1/0, changed stato up
*Dec 20 20:12:58.711: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthet1/0, changed state to up
R3(config-if)#int f0/0                                                     // 配置端口 IP
R3(config-if)#ip add 192.168.30.1 255.255.255.0
R3(config-if)#no shut
R3(config-if)#
*Dec 20 20:13:23.559: %LINK-3-UPDOWN: Interface FastEthernet0/0, changed state to up
*Dec 20 20:13:24.559: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthet0/0, changed state to up
R3(config-if)#int f1/1                                                     // 配置端口 IP
R3(config-if)#ip add 192.168.130.1 255.255.255.0
R3(config-if)#no shut
R3(config-if)#exit
R3(config)#
*Dec 20 20:13:51.943: %LINK-3-UPDOWN: Interface FastEthernet1/1, changed stato up
*Dec 20 20:13:52.943: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthet1/1, changed state to up
R3(config)#router ospf 30                                               // 配置进程为 30 OSPF
R3(config-router)#network 192.168.20.0 0.0.0 .255 area 0  // 配置区域 0 的网段和反掩码
R3(config-router)#
*Dec 20 20:21:02.295: %OSPF-5-ADJCHG: Process 30, Nbr 2.2.2 .2 on FastEthernet from LOADING to FULL, Loading Done
R3(config-router)#network 192.168.30.0 0.0.0 .255 area 2  // 配置区域 2 的网段和反掩码
R3(config-router)#network 192.168.130.0 0.0.0 .255 area 2       // 配置区域 2 的网段和反掩码
R3(config-router)#area 2 nssa                                                // 配置区域 2 NSSA 区域
R3(config-router)#
*Dec 20 20:22:32.271: %OSPF-5-ADJCHG: Process 30, Nbr 4.4.4 .4 on FastEthernet from LOADING to FULL, Loading Done
*Dec 20 20:23:18.007: %OSPF-5-ADJCHG: Process 30, Nbr 5.5.5 .5 on FastEthernet from LOADING to FULL, Loading Done
R3(config-router)#exit
R3(config)#exit
 
路由器 R4 配置如下:
R4:
Router>
Router>en
Router#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
Router(config)#ho R4
R4(config)#int lo 0                                                         // 配置 Loopback 0 地址
R4(config-if)#ip add 4.4.4 .4 255.0.0.0
R4(config-if)#no shut
R4(config-if)#int f0/0                                                     // 配置端口 IP
R4(config-if)#ip add 192.168.30.2 255.255.255.0
R4(config-if)#no shut
R4(config-if)#
*Dec 20 20:14:20.631: %LINK-3-UPDOWN: Interface FastEthernet0/0, changed stato up
*Dec 20 20:14:21.631: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthet0/0, changed state to up
R4(config-if)#int f1/0                                                     // 配置端口 IP
R4(config-if)#ip add 202.193.10.1 255.255.255.0
R4(config-if)#no shut
R4(config-if)#
*Dec 20 20:14:46.503: %LINK-3-UPDOWN: Interface FastEthernet1/0, changed state to up
*Dec 20 20:14:47.503: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthet1/0, changed state to up
R4(config-if)#
*Dec 20 20:16:19.071: %CDP-4-DUPLEX_MISMATCH: duplex mismatch discovered on F
Ethernet1/0 (not half duplex), with R6 FastEthernet0/0 (half duplex).
R4(config-if)#duplex full
R4(config-if)#
*Dec 20 20:16:28.511: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthet1/0, changed state to down
*Dec 20 20:16:30.515: %LINK-3-UPDOWN: Interface FastEthernet1/0, changed state to up
*Dec 20 20:16:31.515: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthet1/0, changed state to up
R4(config-if)#exit
R4(config)#router ospf 40                                               // 配置进程为 40 OSPF
R4(config-router)#network 192.168.30.0 0.0.0 .255 area 2  // 配置区域 2 的网段和反掩码
R4(config-router)#area 2 nssa                                                // 配置区域 2 NSSA 区域
R4(config-router)#
*Dec 20 20:22:32.011: %OSPF-5-ADJCHG: Process 40, Nbr 3.3.3 .3 on FastEthernet from LOADING to FULL, Loading Done
R4(config-router)#exit
R4(config)#ip route 0.0.0 .0 0.0.0.0 202.193.10.2                     // 配置到 R6 的默认路由
R4(config)#router ospf 40
R4(config-router)#area 2 nssa default-information-originate
//NSSA 区域 2 中默认路由重分发 (代价默认为 0 的主默认路由)
R4(config-router)#exit
 
路由器 R5 配置如下:
Router>en
Router#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
Router(config)#ho R5
R5(config)#int lo 0                                                         // 配置 Loopback 0 地址
R5(config-if)#ip add 5.5.5 .5 255.0.0.0
R5(config-if)#no shut
R5(config-if)#int f1/1                                                     // 配置端口 IP
R5(config-if)#ip add 192.168.130.2 255.255.255.0
R5(config-if)#no shut
R5(config-if)#
*Dec 20 20:15:20.755: %LINK-3-UPDOWN: Interface FastEthernet1/1, changed state to up
*Dec 20 20:15:21.755: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet1/1, changed state to up
R5(config-if)#int f1/0                                                     // 配置端口 IP
R5(config-if)#ip add 202.193.20.1 255.255.255.0
R5(config-if)#no shut
R5(config-if)#
*Dec 20 20:15:42.523: %LINK-3-UPDOWN: Interface FastEthernet1/0, changed state to up
*Dec 20 20:15:43.523: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet1/0, changed state to up
R5(config-if)#exit
R5(config)#nrouter ospf 50                                             // 配置进程为 50 OSPF
R5(config-router)#network 192.168.130.0 0.0.0 .255 area 2       // 配置区域 2 的网段和反掩码
R5(config-router)#area 2 nssa                                                // 配置区域 2 NSSA 区域
R5(config-router)#
*Dec 20 20:23:18.403: %OSPF-5-ADJCHG: Process 50, Nbr 3.3.3 .3 on FastEthernet1/1
 from LOADING to FULL, Loading Done
R5(config-router)#exit
R5(config)#ip route 0.0.0 .0 0.0.0.0 202.193.20.2                     // 配置到 R6 的默认路由
R5(config)#router ospf 50
R5(config-router)#area 2 nssa default-information-originate metric 150
//NSSA 区域 2 中默认路由重分发 (代价设置为 150 的备份默认路由)
R5(config-router)#exit
 
路由器 R6 配置如下:
Router>en
Router#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
Router(config)#ho R6
R6(config)#int lo 0                                                         // 配置 Loopback 0 地址
R6(config-if)#ip add 6.6.6 .6 255.0.0.0
R6(config-if)#no shut
R6(config-if)#int f0/0                                                     // 配置端口 IP
R6(config-if)#ip add 202.193.10.2 255.255.255.0
R6(config-if)#no shut
R6(config-if)#
*Dec 20 20:16:21.479: %LINK-3-UPDOWN: Interface FastEthernet0/0, changed state to up
*Dec 20 20:16:22.479: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to up
*Dec 20 20:16:31.123: %CDP-4-DUPLEX_MISMATCH: duplex mismatch discovered on Fast
Ethernet0/0 (not full duplex), with R4 FastEthernet1/0 (full duplex).
R6(config-if)#duplex full
R6(config-if)#int f1/1                                                     // 配置端口 IP
R6(config-if)#ip add 202.193.20.2 255.255.255.0
R6(config-if)#no shut
R6(config-if)#
*Dec 20 20:17:42.323: %LINK-3-UPDOWN: Interface FastEthernet1/1, changed state to up
*Dec 20 20:17:43.323: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet1/1, changed state to up
R6(config-if)#exit
R6(config)#exit
R6#
 
Step 2: 配置路由器 R4 R5 上的 PAT
 
路由器 R4 配置如下:
R4(config)#access-list 4 permit any                                 // 定义内部 ACL 4 ,允许所有
R4(config)#ip nat inside source list 4 interface f1/0            // 设置复用 IP 地址转换在 F1/0
R4(config)#int f1/0                                                         // F1/0 上启用外部 NAT
R4(config-if)#ip nat outside
R4(config-if)#int f0/0                                                     // F0/0 上启用内部 NAT
R4(config-if)#ip nat inside
R4(config-if)#exit
R4(config)#exit
 
路由器 R5 配置如下:
R5(config)#access-list 5 permit any                                 // 定义内部 ACL 5 ,允许所有
R5(config)#ip nat inside source list 5 interface f1/0            // 设置复用 IP 地址转换在 F1/0
R5(config)#int f1/0                                                         // F1/0 上启用外部 NAT
R5(config-if)#ip nat outside
R5(config-if)#int f1/1                                                     // F1/1 上启用内部 NAT
R5(config-if)#ip nat inside
R5(config-if)#exit
R5(config)#exit
 
Step 3: 验证路由表、验证网络连通性
 
路由器 R1 路由表显示如下:
C    1.0.0 .0/8 is directly connected, Loopback0
C    192.168.10.0/24 is directly connected, FastEthernet0/0
O*I A 0.0.0 .0/0 [110/2] via 192.168.10.2, 00:08:01, FastEthernet0/0
 
路由器 R2 路由表显示如下:
C    2.0.0 .0/8 is directly connected, Loopback0
O IA 192.168.30.0/24 [110/2] via 192.168.20.2, 00:05:35, FastEthernet1/0
C    192.168.10.0/24 is directly connected, FastEthernet0/0
O IA 192.168.130.0/24 [110/2] via 192.168.20.2, 00:04:50, FastEthernet1/0
C    192.168.20.0/24 is directly connected, FastEthernet1/0
O*E2 0.0.0 .0/0 [110/1] via 192.168.20.2, 00:03:41, FastEthernet1/0
 
路由器 R3 路由表显示如下:
C    3.0.0 .0/8 is directly connected, Loopback0
C    192.168.30.0/24 is directly connected, FastEthernet0/0
O IA 192.168.10.0/24 [110/2] via 192.168.20.1, 00:03:16, FastEthernet1/0
C    192.168.130.0/24 is directly connected, FastEthernet1/1
C    192.168.20.0/24 is directly connected, FastEthernet1/0
O*N2 0.0.0 .0/0 [110/1] via 192.168.30.2, 00:03:16, FastEthernet0/0
 
路由器 R4 路由表显示如下:
C    192.168.30.0/24 is directly connected, FastEthernet0/0
C    4.0.0 .0/8 is directly connected, Loopback0
O IA 192.168.10.0/24 [110/3] via 192.168.30.1, 00:03:22, FastEthernet0/0
O    192.168.130.0/24 [110/2] via 192.168.30.1, 00:03:22, FastEthernet0/0
O IA 192.168.20.0/24 [110/2] via 192.168.30.1, 00:03:22, FastEthernet0/0
C    202.193.10.0/24 is directly connected, FastEthernet1/0
S*   0.0.0 .0/0 [1/0] via 202.193.10.2
 
路由器 R5 路由表显示如下:
C    202.193.20.0/24 is directly connected, FastEthernet1/0
O    192.168.30.0/24 [110/2] via 192.168.130.1, 00:03:27, FastEthernet1/1
C    5.0.0 .0/8 is directly connected, Loopback0
O IA 192.168.10.0/24 [110/3] via 192.168.130.1, 00:03:27, FastEthernet1/1
C    192.168.130.0/24 is directly connected, FastEthernet1/1
O IA 192.168.20.0/24 [110/2] via 192.168.130.1, 00:03:27, FastEthernet1/1
S*   0.0.0 .0/0 [1/0] via 202.193.20.2
 
路由器 R6 路由表显示如下:
C    202.193.20.0/24 is directly connected, FastEthernet1/1
C    6.0.0 .0/8 is directly connected, Loopback0
C    202.193.10.0/24 is directly connected, FastEthernet0/0
 
路由器 R1 与其他路由器网络连通性测试:
R1#ping 192.168.10.1
// 本地接口地址
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.10.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms
R1#ping 192.168.10.2
// R2 上与本地接口相连的接口地址
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.10.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 12/56/164 ms
R1#ping 192.168.20.1
// R2 上与 R3 相连的接口地址
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.20.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 12/80/212 ms
R1#ping 192.168.20.2
// R3 上与 R2 相连的接口地址
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.20.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 36/84/216 ms
R1#ping 192.168.30.1
// R3 上与 R4 相连的接口地址
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.30.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 100/142/224 ms
R1#ping 192.168.130.1
// R3 上与 R5 相连的接口地址
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.130.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 84/150/208 ms
R1#ping 192.168.30.2
// R4 上与 R3 相连的接口地址
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.30.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 64/156/280 ms
R1#ping 192.168.130.2
// R5 上与 R3 相连的接口地址
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.130.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 160/192/228 ms
R1#ping 202.193.10.1
// R4 上与 R6 相连的接口地址
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 202.193.10.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 184/222/268 ms
R1#ping 202.193.20.1
// R5 上与 R6 相连的接口地址
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 202.193.20.1, timeout is 2 seconds:
..!!!
Success rate is 60 percent (3/5), round-trip min/avg/max = 312/333/368 ms
R1#ping 202.193.10.2
// R6 上与 R4 相连的接口地址
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 202.193.10.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 188/264/352 ms
R1#ping 202.193.20.2
// R6 上与 R5 相连的接口地址
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 202.193.20.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 204/316/476 ms
R1#ping 6.6.6 .6
// R6 上的 Loopback 0 地址
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 6.6.6 .6, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 144/270/488 ms
 
验证路由器 R4 PAT 的配置:
R4#show ip nat translations                                             // 监控 NAT
Pro Inside global      Inside local       Outside local      Outside global
协议 内部全局地址     内部局部地址       外部局部地址     外部全局地址
icmp 202.193.10.1:13   192.168.10.1:13    6.6.6 .6:13         6.6.6 .6:13
icmp 202.193.10.1:14   192.168.10.1:14    202.193.10.2:14    202.193.10.2:14
icmp 202.193.10.1:15   192.168.10.1:15    202.193.20.2:15    202.193.20.2:15
R4#
R4#show ip nat statistics                                                        // 显示 NAT 数据
Total active translations: 1 (0 static, 1 dynamic; 1 extended)
// 总的活动翻译数: 1 0 个静态, 1 个动态; 1 个扩展的)
Outside interfaces:                                                          // 外部接口
  FastEthernet1/0
Inside interfaces:                                                            // 内部接口
  FastEthernet0/0
Hits: 70  Misses: 8                                                  // 完成: 70 失败: 8
Expired translations: 7                                                     // 过期的翻译: 7
Dynamic mappings:                                                        // 动态映射:
-- Inside Source                                                             // 内部资源
[Id: 1] access-list 4 interface FastEthernet1/0 refcount 1    //Id:1 ACL 4 接口 F1/0 计算 1
 
 
3 .实验总结
 
       此实验在 OSPF 多区域基础上增加 PAT 配置和默认路由备份配置,实验总结如下:
l         网络地址转换( Network Address Translation, NAT )通过将内部网络的私有 IP 地址翻译成全球唯一的公网 IP 地址,使内部网络可以连接到互联网等外部网络上,广泛应用于各种类型因特网接入方式和各种类型的网络中。
l         NAT 实现的三种方式:静态转换( Static Translation );动态转换( Dynamic Translation );端口多路复用( Port Address Translation, PAT
l         复用内部 LAN 地址( PAT )是网络地址转换( NAT )的一种方式,是通过准许对 TCP 连接或 UDP 会话的端口进行转换,从而节省内全局集中的合法地址。
l         当多个不同的内部局部地址映射到同一个内部全局地址时,使用各个内部主机的 TCP UDP 端口号来区分它们。
 

本文出自 “�a�i天命嘻哈” 博客,转载请与作者联系!

你可能感兴趣的:(网络,pat,休闲,交换,ospf)