划分ip
IP配置
AR1
[AR1]int g 0/0/0 [AR1-GigabitEthernet0/0/0]ip address 192.168.1.1 30 [AR1-GigabitEthernet0/0/0]int g 0/0/1 [AR1-GigabitEthernet0/0/1]ip address 192.168.1.5 30 [AR1-GigabitEthernet0/0/1]int l 0 [AR1-LoopBack0]ip address 192.168.1.32 28 [AR1-LoopBack0]int l 1 [AR1-LoopBack1]ip address 192.168.1.48 28
AR2
[AR2]int g 0/0/0 [AR2-GigabitEthernet0/0/0]ip address 192.168.1.2 30 [AR2-GigabitEthernet0/0/0]int g 0/0/1 [AR2-GigabitEthernet0/0/1]ip address 192.168.1.9 30 [AR2-GigabitEthernet0/0/1]int l 0 [AR2-LoopBack0]ip address 192.168.1.65 28 [AR2-LoopBack0]int l 1 [AR2-LoopBack1]ip address 192.168.1.81 28
AR3
[AR3]int g 0/0/1 [AR3-GigabitEthernet0/0/1]ip address 192.168.1.6 30 [AR3-GigabitEthernet0/0/1]int g 0/0/2 [AR3-GigabitEthernet0/0/2]ip address 192.168.1.13 30 [AR3-GigabitEthernet0/0/2]int l 0 [AR3-LoopBack0]ip address 192.168.1.97 27
AR4
[AR4]int g 0/0/1 [AR4-GigabitEthernet0/0/1]ip address 192.168.1.10 30 [AR4-GigabitEthernet0/0/1]int g 0/0/2 [AR4-GigabitEthernet0/0/2]ip address 192.168.1.14 30 [AR4-GigabitEthernet0/0/2]int l 0 [AR4-LoopBack0]ip address 192.168.1.129 28 [AR4-LoopBack0]int l 1 [AR4-LoopBack1]ip address 192.168.1.145 28 [AR4-LoopBack1]int g 4/0/0 [AR4-GigabitEthernet4/0/0]ip address 192.168.1.21 30 [AR4-GigabitEthernet4/0/0]int g 0/0/0 [AR4-GigabitEthernet0/0/0]ip address 192.168.1.17 30
AR5
[AR5]int g 0/0/1 [AR5-GigabitEthernet0/0/1]ip address 192.168.1.15 30 [AR5-GigabitEthernet0/0/1]int g 0/0/0 [AR5-GigabitEthernet0/0/0]ip address 192.168.1.18 30 [AR5-GigabitEthernet0/0/0]int l 0 [AR5-LoopBack0]ip address 192.168.1.161 27
AR6
[AR6]int g 0/0/2 [AR6-GigabitEthernet0/0/2]ip address 12.0.0.2 24 [AR6-GigabitEthernet0/0/2]int l 0 [AR6-LoopBack0]ip address 1.1.1.1 24
配置AR3的DHCP
[AR3]dhcp enable [AR3]ip pool pool1 [AR3-ip-pool-pool1]network 192.168.1.96 mask 27 [AR3-ip-pool-pool1]gateway-list 192.168.1.97 [AR3-ip-pool-pool1]dns-list 8.8.8.8 [AR3]int g 0/0/0 [AR3-GigabitEthernet0/0/0]ip address 192.168.1.97 27 [AR3-GigabitEthernet0/0/0]dhcp select global
静态路由配置
AR1
[AR1]ip route-static 0.0.0.0 0 192.168.1.2 [AR1]ip route-static 0.0.0.0 0 192.168.1.6 [AR1]ip route-static 192.168.1.64 27 192.168.1.2 [AR1]ip route-static 192.168.1.8 30 192.168.1.2 [AR1]ip route-static 192.168.1.12 30 192.168.1.6 [AR1]ip route-static 192.168.1.96 27 192.168.1.6
AR2
[AR2]ip route-static 0.0.0.0 0 192.168.1.10 [AR2]ip route-static 192.168.1.96 27 192.168.1.1 [AR2]ip route-static 192.168.1.96 27 192.168.1.10 [AR2]ip route-static 192.168.1.4 30 192.168.1.1 [AR2]ip route-static 192.168.1.32 27 192.168.1.1
AR3
[AR3]ip route-static 0.0.0.0 0 192.168.1.14 [AR3]ip route-static 192.168.1.64 27 192.168.1.14 [AR3]ip route-static 192.168.1.64 27 192.168.1.5 [AR3]ip route-static 192.168.1.0 30 192.168.1.5 [AR3]ip route-static 192.168.1.32 27 192.168.1.5
AR4
[AR4]ip route-static 0.0.0.0 0 192.168.1.18 [AR4]ip route-static 0.0.0.0 0 192.168.1.22 preference 61 [AR4]ip route-static 192.168.1.32 27 192.168.1.9 [AR4]ip route-static 192.168.1.32 27 192.168.1.13 [AR4]ip route-static 192.168.1.0 30 192.168.1.9 [AR4]ip route-static 192.168.1.64 27 192.168.1.9 [AR4]ip route-static 192.168.1.96 27 192.168.1.13 [AR4]ip route-static 192.168.1.4 30 192.168.1.13 [AR4]ip route-static 192.168.1.160 27 192.168.1.18
AR5
[AR5]ip route-static 0.0.0.0 0 12.0.0.2 [AR5]ip route-static 192.168.1.0 24 192.168.1.21 preference 70
空接口配置
AR1
[AR1]ip route-static 192.168.1.32 27 NULL 0
AR2
[AR2]ip route-static 192.168.1.64 27 NULL 0
AR4
[AR4]ip route-static 0.0.0.0 0 GigabitEthernet 0/0/2 192.168.1.18
NAT
AR5
[AR5]acl 2000 [AR5-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255 [AR5]int g 0/0/2 [AR5-GigabitEthernet0/0/2]nat outbound 2000
telnet
AR1开启telnet
[AR1]aaa [AR1-aaa]local-user wuhu privilege level 15 password cipher 123 [AR1-aaa]local-user wuhu service-type telnet [AR1]user-interface vty 0 4 [AR1-ui-vty0-4]authentication-mode aaa
AR5配置端口映射
[AR5]int g 0/0/2 [AR5-GigabitEthernet0/0/2]nat server protocol tcp global current-interface 23 in side 192.168.1.1 23
测试
telnet测试
全网可达测试