HCIP——第一课作业

谁借莪１个温暖的怀抱￠ 2024-03-22 23:44 74阅读 0赞

### ![4ed7a56584884382abb413defb0ef31e.png][] ###

### ![80982adc5e3c4aa6908a87721483885e.png][] ###

**目录**

1、第一步地址规划

2、配置ip

3、DHCP自动获取地址

4、全网可达

5、R1-R5均可访问R6的环回

6、防止回环

7、 R6 telnetR5的公有IP地址时，实际登陆到R1上

--------------------

### 1、第一步地址规划 ###

私有ip地址为 192.168.1.0/24

先将网络划分为六段，其中五段为环回地址，1段为骨干地址

1、192.168.1.0/27 ————骨干

> 骨干共有六条需要匹配 子网借3位
> 
> 192.168.1.0/30 —— R1-R2之间
> 
> 192.168.1.4/30 —— R1-R3之间
> 
> 192.168.1.8/30 —— R2-R4之间
> 
> 192.168.1.12/30 —— R3-R4之间
> 
> 192.168.1.16/30 —— R4-R5之间
> 
> 192.168.1.20/30 —— R4-R5之间
> 
> 192.168.1.24/30 备用
> 
> 192.168.1.28/30 备用

2、192.168.1.32/27 ———— R1环回 192.168.1.32 28 192.168.1.48 28

3、192.168.1.64/27 ———— R2 环回 192.168.1.64 28 192.168.1.80 28

4、192.168.1.96/27 ———— R3

5、192.168.1.128/27 ———— R4环回 192.168.1.128 28 192.168.1.144 28

6、192.168.1.160/27 ———— R5环回

192.168.1.192/27 备用

192.168.1.224/27 备用

### 2、配置ip ###

#### R1 ####

[Huawei]sys r1
    [r1]interface LoopBack 0
    [r1-LoopBack0]ip add 192.168.1.33 28
    [r1-LoopBack0]interface lo 1
    [r1-LoopBack1]ip add 192.168.1.49 28
    [r1-LoopBack1]int g 0/0/0
    [r1-GigabitEthernet0/0/0]ip add 192.168.1.1 30
    [r1-GigabitEthernet0/0/0]int g 0/0/1
    [r1-GigabitEthernet0/0/1]ip add 192.168.1.5 30
    [r1-GigabitEthernet0/0/1]ip int brif

![b407d579715744138978deddc0e93bce.png][]

#### R2 ####

<Huawei>sys
    [Huawei]sys r2
    [r2]int LoopBack  0
    [r2-LoopBack0]ip add 192.168.1.65 28
    [r2-LoopBack0]int lo 1
    [r2-LoopBack1]ip add 192.168.1.81 28
    [r2-LoopBack1]int g 0/0/0
    [r2-GigabitEthernet0/0/0]ip add 192.168.1.2 30
    [r2-GigabitEthernet0/0/0]int g0/0/1
    [r2-GigabitEthernet0/0/1]ip add 192.168.1.9 30
    [r2-GigabitEthernet0/0/1]dis ip int bri

![e26af72a533347dba1deeab36db5224f.png][]

####  ####

#### R3 ####

<Huawei>sys
    [Huawei]sys r3
    [r3]int g 0/0/0
    [r3-GigabitEthernet0/0/0]int g 0/0/1
    [r3-GigabitEthernet0/0/1]ip add 192.168.1.13 30
    [r3-GigabitEthernet0/0/1]int g 0/0/2
    [r3-GigabitEthernet0/0/2]ip add 192.168.1.97 27
    [r3-GigabitEthernet0/0/2]int g 0/0/0
    [r3-GigabitEthernet0/0/0]ip add 192.168.1.6 30
    [r3-GigabitEthernet0/0/2]dis ip int bri

![76f8217166b649e58812f55ff2f5fc11.png][]

#### R4 ####

<Huawei>sys
    [Huawei]sys r4
    [r4]int lo0
    [r4-LoopBack0]ip add 192.168.1.129 28
    [r4-LoopBack0]int lo1
    [r4-LoopBack1]ip add 192.168.1.145 28
    [r4-LoopBack1]int g 0/0/0
    [r4-GigabitEthernet0/0/0]ip add 192.168.1.10 30
    [r4-GigabitEthernet0/0/0]int g 0/0/1
    [r4-GigabitEthernet0/0/1]ip add 192.168.1.14 30
    [r4-GigabitEthernet0/0/1]int g 4/0/0
    [r4-GigabitEthernet4/0/0]ip add 192.168.1.17 30
    [r4-GigabitEthernet4/0/0]int g 0/0/2
    [r4-GigabitEthernet0/0/2]ip add 192.168.1.21 30
    [r4-GigabitEthernet0/0/2]dis ip int bri

![9725ae4bf3a1487ab7550778113cbf06.png][]

#### R5 ####

<Huawei>sys
    [Huawei]sys r5
    [r5]int lo0
    [r5-LoopBack0]ip add 192.168.1.161 27
    [r5-LoopBack0]int g 0/0/1
    [r5-GigabitEthernet0/0/1]ip add 192.168.1.18 30
    [r5-GigabitEthernet0/0/1]int g 0/0/0
    [r5-GigabitEthernet0/0/0]ip add 192.168.1.22 30
    [r5-GigabitEthernet0/0/0]int g 0/0/2
    [r5-GigabitEthernet0/0/2]ip add 56.1.1.1 30
    [r5-GigabitEthernet0/0/2]dis ip int bri

![983309cc8cef49e4b16b2bdaeda8fb78.png][]

#### R6 ####

<Huawei>sys
    [Huawei]sys r6
    [r6]int g 0/0/0
    [r6-GigabitEthernet0/0/0]ip add 56.1.1.2 30
    [r6-GigabitEthernet0/0/0]int lo0
    [r6-LoopBack0]ip add 11.11.11.11 28
    [r6-LoopBack0]dis ip int bri

![12152658d05c4bb1929faebd723dba52.png][]

### 3、DHCP自动获取地址 ###

启动DHCP协议，创建地址池，配置网关和地址，到对应接口启动DHCP服务

> \[r3\]dhcp enable  
> \[r3\]ip pool xiao  
> \[r3-ip-pool-xiao\]network 192.168.1.96 mask 27  
> \[r3-ip-pool-xiao\]gateway-list 192.168.1.97  
> \[r3\]int g 0/0/2  
> \[r3-GigabitEthernet0/0/2\]dhcp select global

在主机上启动DHCP服务，一定要点确定！之后在配置上查看服务就可![d5946914d8fa49e7b34786e260d7f8b4.png][]

### 4、全网可达 ###

配置静态路由

配置缺省到R6公网上去

所有路由器都要配置缺省，到r6的出接口

![d304e4f7907c4c97a88943214f70873e.png][]

注意：

R1、R2、R3、R4——可以使用缺省到R5，所以可以不用配置静态路由，直接使用缺省到达即可，配置内部静态

> \[r1\]ip route-static 192.168.1.8 30 192.168.1.2  
> \[r1\]ip route-static 192.168.1.12 30 192.168.1.6  
> \[r1\]ip route-static 192.168.1.128 27 190.168.1.2  
> \[r1\]ip route-static 192.168.1.128 27 190.168.1.6  
> \[r1\]ip route-static 192.168.1.16 30 192.168.1.2  
> \[r1\]ip route-static 192.168.1.16 30 192.168.1.6  
> \[r1\]ip route-static 192.168.1.64 27 192.168.1.2  
> \[r1\]ip route-static 192.168.1.96 27 192.168.1.6

> \[r2\]ip route-static 192.168.1.4 30 192.168.1.1  
> \[r2\]ip route-static 192.168.1.12 30 192.168.1.10  
> \[r2\]ip route-static 192.168.1.16 30 192.168.1.10  
> \[r2\]ip route-static 192.168.1.32 27 192.168.1.1  
> \[r2\]ip route-static 192.168.1.64 27 192.168.1.1  
> \[r2\]ip route-static 192.168.1.64 27 192.168.1.10  
> \[r2\]ip route-static 192.168.1.128 27 192.168.1.10

> \[r3\]ip route-static 192.168.1.0 30 192.168.1.5  
> \[r3\]ip route-static 192.168.1.8 30 192.168.1.14  
> \[r3\]ip route-static 192.168.1.16 30 192.168.1.14  
> \[r3\]ip route-static 192.168.1.32 27 192.168.1.5  
> \[r3\]ip route-static 192.168.1.128 27 192.168.1.14  
> \[r3\]ip route-static 192.168.1.64 27 192.168.1.14  
> \[r3\]ip route-static 192.168.1.64 27 192.168.1.5

> \[r4\]ip route-static 192.168.1.0 30 192.168.1.9  
> \[r4\]ip route-static 192.168.1.4 30 192.168.1.13  
> \[r4\]ip route-static 192.168.1.64 27 192.168.1.9  
> \[r4\]ip route-static 192.168.1.96 27 192.168.1.13  
> \[r4\]ip route-static 192.168.1.32 27 192.168.1.13  
> \[r4\]ip route-static 192.168.1.32 27 192.168.1.9

> \[r5\]ip route-static 192.168.1.8 30 192.168.1.17  
> \[r5\]ip route-static 192.168.1.12 30 192.168.1.17  
> \[r5\]ip route-static 192.168.1.0 30 192.168.1.17  
> \[r5\]ip route-static 192.168.1.4 30 192.168.1.17  
> \[r5\]ip route-static 192.168.1.32 27 192.168.1.17  
> \[r5\]ip route-static 192.168.1.64 27 192.168.1.17  
> \[r5\]ip route-static 192.168.1.96 27 192.168.1.17  
> \[r5\]ip route-static 192.168.1.128 27 192.168.1.17

使用ping测试是否ping 通

![19b8d234f6bc42e2bc2470d74ed72009.png][]

![4d38e621b06446b080e384cc534c0c1c.png][]

### 5、R1-R5均可访问R6的环回 ###

在r4配置配置100兆备用口的优先级

![e857ef9c9deb4067ad7c45f8c11146d5.png][]

\[r5\] display this

在r5上配置优先级

> \[r5\]ip route-static 192.168.1.0 255.255.255.252 192.168.1.21 p 61  
> \[r5\]ip route-static 192.168.1.4 255.255.255.252 192.168.1.21 p 61  
> \[r5\]ip route-static 192.168.1.8 255.255.255.252 192.168.1.21 p 61  
> \[r5\]ip route-static 192.168.1.12 255.255.255.252 192.168.1.21 p 61  
> \[r5\]ip route-static 192.168.1.32 255.255.255.224 192.168.1.21 p 61  
> \[r5\]ip route-static 192.168.1.64 255.255.255.224 192.168.1.21 p 61  
> \[r5\]ip route-static 192.168.1.96 255.255.255.224 192.168.1.21 p 61  
> \[r5\]ip route-static 192.168.1.128 255.255.255.224 192.168.1.21 p 61

将内网的ip配置外网，让外网通过这个规则学习到6.6.6.6这个环回，实现全网可通

因为R6有R5 56.1.1.1的地址，可以ping通，而R6没有内网的ip，所以我们要将内部网段转换为56.1.1.1的地址，实现访问R6环回

[r5]acl 2000	
    [r5-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255
    [r5-acl-basic-2000]int g 0/0/1
    [r5-GigabitEthernet0/0/1]nat outbound 2000
    [r5-GigabitEthernet0/0/1]int g 0/0/0
    [r5-GigabitEthernet0/0/0]nat outbound 2000

![9e7a80ee68e3408ebbc5677e629ef6b6.png][]

####  ####

### 6、防止回环 ###

**因为如果其中一条环回28的断掉后，有路由访问，他不知道丢没丢，所以就形成环路，解决方法是设置空接口，进行防患**

**谁的环回被汇总，谁就要设立空接口**

> \[r4\]ip route-static 192.168.1.128 27 NULL 0

### 7、 **R6 telnetR5的公有IP地址时，实际登陆到R1上** ###

先在r1上做一个aaa认证

[r1]aaa
    [r1-aaa]local-user aa privilege  level  15 password cipher 123456  设置账户名+密码
    [r1-aaa]local-user aa service-type telnet   ——设置服务远程登录
    [r1-aaa]q
    [r1]user-interface vty 0 4
    [r1-ui-vty0-4]authentication-mode aa

在r5上远程登录试一下

> <r5>telnet 192.168.1.33

![d6c2ce30d22c4d1395d15d682cba438e.png][]

登入成功后，设置端口映射，让 r6可以远程登录到人r1

[r5-GigabitEthernet0/0/2]nat server protocol tcp global current-interface 23 ins
    ide 192.168.1.33 27
    Warning:The port 23 is well-known port. If you continue it may cause function fa
    ilure.
    Are you sure to continue?[Y/N]:y

注意 ：

![e8b49d960bb1490c8f015d8a94cf9e5b.png][]这个不能设置最高权限，就是15的权限

[4ed7a56584884382abb413defb0ef31e.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/d794c72ec4f349feb06c844dd528da02.png
[80982adc5e3c4aa6908a87721483885e.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/bfc9cae9d8ff4fe380c79698d96ae088.png
[b407d579715744138978deddc0e93bce.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/4f6a1cf8eaee446fbbcf06b1825dea2a.png
[e26af72a533347dba1deeab36db5224f.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/5103454bca3d4c0fa0ba3e8bc70c4e24.png
[76f8217166b649e58812f55ff2f5fc11.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/43fb899f32234b11960419661ffbda41.png
[9725ae4bf3a1487ab7550778113cbf06.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/b9f540a98c2d458c9e11f59adf9fbc82.png
[983309cc8cef49e4b16b2bdaeda8fb78.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/ad7c78be46ca4f1aa0df81d8c12e4667.png
[12152658d05c4bb1929faebd723dba52.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/2c8b601ebad04e0488ce73c2a668dd98.png
[d5946914d8fa49e7b34786e260d7f8b4.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/12ec122e786a47b19827a1cd301ef538.png
[d304e4f7907c4c97a88943214f70873e.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/dc9b333b49f54a329fdd77207401ba0e.png
[19b8d234f6bc42e2bc2470d74ed72009.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/269561fd4e9143e7b75cae595c4d3d90.png
[4d38e621b06446b080e384cc534c0c1c.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/84ef1ef4940442299641413608c3bb5d.png
[e857ef9c9deb4067ad7c45f8c11146d5.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/cdc298548e3d492e8a3c4a059c2c8e1b.png
[9e7a80ee68e3408ebbc5677e629ef6b6.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/5bd9b7881c544d12bc74428097a32d86.png
[d6c2ce30d22c4d1395d15d682cba438e.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/6f30c44f2e01496f8fa52eb506d8da04.png
[e8b49d960bb1490c8f015d8a94cf9e5b.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/f8289ccd39bb4583bba67238a0f697c4.png