单向路由-白红宇

单向路由

阅读量：6953 次

发布时间：2019-06-27

本文共 7452 字，大约阅读时间需要 24 分钟。

需求分析

省厅。地市到县区有路由

而县区到地市和省厅没有路由

从而实现整个网络的互通

在接口上配置

地址，并使用

loopback

模拟网段

1.0

[Router]dis cu

Now create configuration...

Current configuration

version 1.74

local-user user1 service-type administrator password simple 123

undo pos-server addr-switch

firewall enable

aaa-enable

aaa accounting-scheme optional

interface Aux0

async mode flow

link-protocol ppp

interface Ethernet0

ip address 192.168.100.4 255.255.255.0

interface Ethernet1

ip address 192.168.4.1 255.255.255.0

interface Serial0

link-protocol ppp

interface Serial1

link-protocol ppp

interface Async0

physical-mode async

async mode protocol

link-protocol ppp

interface Async1

physical-mode async

async mode protocol

link-protocol ppp

interface Async2

physical-mode async

async mode protocol

link-protocol ppp

interface Async3

physical-mode async

async mode protocol

link-protocol ppp

interface Async4

physical-mode async

async mode protocol

link-protocol ppp

interface Async5

physical-mode async

async mode protocol

link-protocol ppp

interface Async6

physical-mode async

async mode protocol

link-protocol ppp

interface Async7

physical-mode async

async mode protocol

link-protocol ppp

interface Async8

physical-mode async

async mode protocol

link-protocol ppp

interface Async9

physical-mode async

async mode protocol

link-protocol ppp

interface Async10

physical-mode async

async mode protocol

link-protocol ppp

interface Async11

physical-mode async

async mode protocol

link-protocol ppp

interface Async12

physical-mode async

async mode protocol

link-protocol ppp

interface Async13

physical-mode async

async mode protocol

link-protocol ppp

interface Async14

physical-mode async

async mode protocol

link-protocol ppp

interface Async15

physical-mode async

async mode protocol

link-protocol ppp

interface LoopBack1

ip address 192.168.1.1 255.255.255.0

return

[Router]

[Router]dis ip rou

Routing Tables:

Destination/Mask Proto Pref Metric Nexthop Interface

127.0.0.0/8 Direct 0 0 127.0.0.1 LoopBack0

127.0.0.1/32 Direct 0 0 127.0.0.1 LoopBack0

192.168.1.0/24 Direct 0 0 192.168.1.1 LoopBack1

192.168.1.1/32 Direct 0 0 127.0.0.1 LoopBack0

192.168.4.0/24 Direct 0 0 192.168.4.1 Ethernet1

192.168.4.1/32 Direct 0 0 127.0.0.1 LoopBack0

192.168.100.0/24 Direct 0 0 192.168.100.4 Ethernet0

192.168.100.4/32 Direct 0 0 127.0.0.1 LoopBack0

[Router]

在接口上配置

地址，并使用

loopback

模拟网段

2.0

[R6]dis cu

Now create configuration...

Current configuration

version 1.74

local-user user1 service-type administrator password simple 123

sysname R6

undo pos-server addr-switch

firewall enable

aaa-enable

aaa accounting-scheme optional

interface Aux0

async mode flow

link-protocol ppp

interface Ethernet0

ip address 192.168.100.6 255.255.255.0

interface Ethernet1

ip address 192.168.5.1 255.255.255.0

interface Serial0

link-protocol ppp

interface Serial1

link-protocol ppp

interface Async0

physical-mode async

async mode protocol

link-protocol ppp

interface Async1

physical-mode async

async mode protocol

link-protocol ppp

interface Async2

physical-mode async

async mode protocol

link-protocol ppp

interface Async3

physical-mode async

async mode protocol

link-protocol ppp

interface Async4

physical-mode async

async mode protocol

link-protocol ppp

interface Async5

physical-mode async

async mode protocol

link-protocol ppp

interface Async6

physical-mode async

async mode protocol

link-protocol ppp

interface Async7

physical-mode async

async mode protocol

link-protocol ppp

interface LoopBack1

ip address 192.168.2.1 255.255.255.0

return

[R6]

[R6]dis ip rou

Routing Tables:

Destination/Mask Proto Pref Metric Nexthop Interface

127.0.0.0/8 Direct 0 0 127.0.0.1 LoopBack0

127.0.0.1/32 Direct 0 0 127.0.0.1 LoopBack0

192.168.2.0/24 Direct 0 0 192.168.2.1 LoopBack1

192.168.2.1/32 Direct 0 0 127.0.0.1 LoopBack0

192.168.5.0/24 Direct 0 0 192.168.5.1 Ethernet1

192.168.5.1/32 Direct 0 0 127.0.0.1 LoopBack0

192.168.100.0/24 Direct 0 0 192.168.100.6 Ethernet0

192.168.100.6/32 Direct 0 0 127.0.0.1 LoopBack0

[R6]

[F2]dis cu

在接口上配置

地址，并制定

trust

区域

配置

acl

规则，应用在相应的接口上

并配置默认路由

sysname F2

firewall packet-filter enable

firewall packet-filter default permit

insulate

firewall statistic system enable

radius scheme system

server-type extended

domain system

local-user admin

password cipher .]@USE=B,53Q=^Q`MAF4<1!!

service-type telnet terminal

level 3

service-type ftp

local-user user1

password simple 123

service-type telnet

level 3

acl number 3000

rule 0 permit ip source 192.168.3.0 0.0.0.255 destination 192.168.1.0 0.0.0.255

acl number 3001

rule 0 permit ip source 192.168.3.0 0.0.0.255 destination 192.168.2.0 0.0.0.255

interface Aux0

async mode flow

interface Ethernet0/0

ip address 192.168.100.42 255.255.255.0

interface Ethernet0/1

ip address 192.168.4.2 255.255.255.0

nat outbound 3000

interface Ethernet0/2

ip address 192.168.5.2 255.255.255.0

nat outbound 3001

interface Ethernet0/3

ip address 192.168.3.1 255.255.255.0

interface Ethernet0/4

interface Encrypt1/0

interface NULL0

firewall zone local

set priority 100

firewall zone trust

add interface Ethernet0/0

add interface Ethernet0/3

set priority 85

firewall zone untrust

add interface Ethernet0/1

add interface Ethernet0/2

set priority 5

firewall zone DMZ

set priority 50

firewall interzone local trust

firewall interzone local untrust

firewall interzone local DMZ

firewall interzone trust untrust

firewall interzone trust DMZ

firewall interzone DMZ untrust

FTP server enable

ip route-static 192.168.1.0 255.255.255.0 192.168.4.1 preference 60

ip route-static 192.168.2.0 255.255.255.0 192.168.5.1 preference 60

user-interface con 0

user-interface aux 0

user-interface vty 0 4

authentication-mode scheme

return

[F2] dis ip rou

[F2] dis ip routing-table

Routing Table: public net

Destination/Mask Protocol Pre Cost Nexthop Interface

127.0.0.0/8 DIRECT 0 0 127.0.0.1 InLoopBack0

127.0.0.1/32 DIRECT 0 0 127.0.0.1 InLoopBack0

192.168.1.0/24 STATIC 60 0 192.168.4.1 Ethernet0/1

192.168.2.0/24 STATIC 60 0 192.168.5.1 Ethernet0/2

192.168.4.0/24 DIRECT 0 0 192.168.4.2 Ethernet0/1

192.168.4.2/32 DIRECT 0 0 127.0.0.1 InLoopBack0

192.168.5.0/24 DIRECT 0 0 192.168.5.2 Ethernet0/2

192.168.5.2/32 DIRECT 0 0 127.0.0.1 InLoopBack0

192.168.100.0/24 DIRECT 0 0 192.168.100.42 Ethernet0/0

192.168.100.42/32 DIRECT 0 0 127.0.0.1 InLoopBack0

测试

[F2]ping 192.168.1.1

PING 192.168.1.1: 56 data bytes, press CTRL_C to break

Reply from 192.168.1.1: bytes=56 Sequence=1 ttl=255 time=12 ms

Reply from 192.168.1.1: bytes=56 Sequence=2 ttl=255 time=6 ms

Reply from 192.168.1.1: bytes=56 Sequence=3 ttl=255 time=4 ms

Reply from 192.168.1.1: bytes=56 Sequence=4 ttl=255 time=4 ms

Reply from 192.168.1.1: bytes=56 Sequence=5 ttl=255 time=5 ms

--- 192.168.1.1 ping statistics ---

5 packet(s) transmitted

5 packet(s) received

0.00% packet loss

round-trip min/avg/max = 4/6/12 ms

[F2]ping 192.168.2.1

PING 192.168.2.1: 56 data bytes, press CTRL_C to break

Reply from 192.168.2.1: bytes=56 Sequence=1 ttl=255 time=8 ms

Reply from 192.168.2.1: bytes=56 Sequence=2 ttl=255 time=4 ms

Reply from 192.168.2.1: bytes=56 Sequence=3 ttl=255 time=4 ms

Reply from 192.168.2.1: bytes=56 Sequence=4 ttl=255 time=5 ms

Reply from 192.168.2.1: bytes=56 Sequence=5 ttl=255 time=7 ms

--- 192.168.2.1 ping statistics ---

5 packet(s) transmitted

5 packet(s) received

0.00% packet loss

round-trip min/avg/max = 4/5/8 ms

转载于:https://blog.51cto.com/haoxiaoyang/794816

你可能感兴趣的文章

discuz X3用户登录uc_user_login()函数详解

查看>>

R6300V2 从 DD-WRT 回刷恢复官方原厂固件 DD-WRT to R6300V2

查看>>

nginx 安装

查看>>

Centos7配置 SNMP服务(防火墙配置注意)

linux mint 向“显示(display)”面板添加没有提供的分辨率选项，使虚拟机中的linux mint可以全屏显示...

查看>>

Oracle_11g_R2数据库在Windows_Server_2008_R2企业版中安装

CentOS 7.x 安装教程、硬盘分区、LVM、网络配置、软件源配置、制作USB Disk、U盘安装、网络安装...

查看>>

android中页面跳转以及数据在Activity之间的传递

查看>>

全球排名前50网站使用的开发语言及系统平台

查看>>

国内网络安全风险评估市场与技术操作

查看>>