CCNA实验手册

更新时间：2023-08-14 00:00:01 阅读量： IT计算机文档下载

说明：文章内容仅供预览，部分内容可能不全。下载后的文档，内容与下面显示的完全一致。下载之前请确认下面内容是否您想要的，是否完整无缺。

ccna

实验一、配置STP与VTP............................. 2 实验二、静态路由 ................................ 10 实验三、RIP路由协议 ............................. 13 实验四、RIPv1与EIGRP在不连续网络下的比较........... 20 实验五、访问列表与telnet访问控制 .................. 26 实验六、静态、动态NAT与PAT ...................... 30 实验七、帧中继链路上运行EIGRP ..................... 34 实验八、背靠背帧中继 ............................. 39 实验九、配置ISDN DDR ............................ 43

ccna

实验一、配置STP与VTP

环境：三台交换机，形成一个全互连结构，sw3为2950，sw1和sw2为2900xl；要求：设置sw3为VTP server,设置sw1和sw2为VTP client,域名为cisco，

密码为：cisco，在server创建vlan 10(name:aa)和vlan20(name:bb);设置sw3为vlan1的根桥，sw1为vlan10的根桥，sw2为vlan20的根桥；

初始化配置：

Sw#show vlan 查看vlan信息

Sw#Delete vlan.dat 用此命令将vlan删除

Sw#show startup-config 查看一下NVRAM是否保存了配置 Sw#erase startup-config 清空配置文件 Sw#reload 重新启动交换机 sw>enable

sw#config terminal

sw(config)#hostname sw1

sw1(config)#no ip domain-lookup 关闭域名查找 sw1(config)#line console 0

sw1(config-line)#logging synchronous 命令输入达到同步 sw1(config-line)#exec-timeout 0 0 设置永不超时 sw1(config-line)#exit

步骤一、配置VTP

sw3的配置：

sw3(config)#vtp mode server 在sw3上启用vtp server Device mode already VTP SERVER.

sw3(config)#vtp domain cisco 设置域名 Changing VTP domain name from NULL to cisco

ccna

sw3(config)#vtp password cisco 设置密码 Setting device VLAN database password to cisco

sw1的配置:

sw1#vlan database 进入vlan数据库 sw1(vlan)#vtp client 启用VTP client模式 Setting device to VTP CLIENT mode.

sw1(vlan)#vtp domain cisco 作用到cisco域中 Changing VTP domain name from NULL to cisco

sw1(vlan)#vtp password cisco 设置密码与server端相同 Setting device VLAN database password to cisco. sw1(vlan)#exit 使配置生效 In CLIENT state, no apply attempted. Exiting....

sw2的配置:

sw2#vlan database sw2(vlan)#vtp client

Setting device to VTP CLIENT mode. sw2(vlan)#vtp domain cisco

Changing VTP domain name from NULL to cisco sw2(vlan)#vtp password cisco

Setting device VLAN database password to cisco. sw2(vlan)#exit sw2#

步骤二、启用干道端口

sw3的配置：

sw3(config)#interface fa0/23

sw3(config-if)#switchport mode trunk 启用trunk端口 sw3(config-if)#interface fa0/24

sw3(config-if)#switchport mode trunk

sw1的配置：

sw1(config)#interface fa0/23

sw1(config-if)#switchport trunk encapsulation dot1q 封装干道协议 sw1(config-if)#switchport mode trunk 启用trunk模式sw1(config-if)#

sw1(config)#interface fa0/24

sw1(config-if)#switchport trunk encapsulation dot1q sw1(config-if)#switchport mode trunk

sw2的配置：

ccna

sw2(config)#interface fa0/23

sw2(config-if)#switchport trunk encapsulation dot1q sw2(config-if)#switchport mode trunk

sw2(config)#interface fa0/24

sw2(config-if)#switchport trunk encapsulation dot1q sw2(config-if)#switchport mode trunk

步骤三、测试vtp状态及创建vlan

sw3的状态：

sw3#show vtp status 显示vtp状态 VTP Version : 2

Configuration Revision : 0 配置修订号 Maximum VLANs supported locally : 254

Number of existing VLANs : 5

VTP Operating Mode : server vtp模式 VTP Domain Name : cisco vtp域名 VTP Pruning Mode : Disabled VTP V2 Mode : Disabled VTP Traps Generation : Disabled

MD5 digest : 0x3F 0x17 0xC8 0xB8 0x5A 0xE3 0x01 0x66 Configuration last modified by 0.0.0.0 at 0-0-00 00:00:00

创建vlan:

sw3(config)#vlan 10 创建VLAN10 sw3(config-vlan)#name aa 命名为aa sw3(config-vlan)#exit 应用配置

sw3(config)#vlan 20 创建VLAN20 sw3(config-vlan)#name bb 命名为bb sw3(config-vlan)#exit sw3(config)#

sw3的状态：

sw3#show vtp status 在sw3显示vtp的状态 VTP Version : 2

Configuration Revision : 2 server的修订号 Maximum VLANs supported locally : 254

Number of existing VLANs : 7 vlan也已经增加 VTP Operating Mode : server VTP Domain Name : cisco VTP Pruning Mode : Disabled VTP V2 Mode : Disabled VTP Traps Generation : Disabled

ccna

MD5 digest : 0x98 0x31 0xCF 0xA0 0xA7 0x17 0x73 0x66

Configuration last modified by 0.0.0.0 at 3-1-93 00:52:05

sw2的状态：

sw2#show vtp status

VTP Version : 2

Configuration Revision : 2 已经同步了server Maximum VLANs supported locally : 254 Number of existing VLANs : 7

VTP Operating Mode : Client VTP Domain Name : cisco VTP Pruning Mode : Disabled VTP V2 Mode : Disabled VTP Traps Generation : Disabled

MD5 digest : 0x98 0x31 0xCF 0xA0 0xA7 0x17 0x73 0x66

Configuration last modified by 0.0.0.0 at 3-1-93 00:52:05

sw1的vlan信息:

sw1#show vlan 显示vlan信息

VLAN Name Status Ports ---- -------------------------------- --------- -------------------------------

1 default active Fa0/1, Fa0/2, Fa0/3, Fa0/4, Fa0/5, Fa0/6, Fa0/7, Fa0/8,

Fa0/9, Fa0/10, Fa0/11, Fa0/12,

Fa0/13, Fa0/14, Fa0/15, Fa0/16,

Fa0/17, Fa0/18, Fa0/19, Fa0/20,

Fa0/21, Fa0/22, Fa0/23, Fa0/24

10 aa active 已经同步了vlan的信息 20 bb active

步骤四、配置PVST

sw3(config)#spanning-tree vlan 1 root primary 设置为vlan1的根桥

Sw1(config)#spanning-tree vlan 10 priority 4096 设置为vlan10的根桥

Sw2(config)#spanning-tree vlan 20 priority 4096 设置为vlan20的根桥

ccna

步骤五、显示STP的信息

sw1的生成树信息:

sw1#show spanning-tree brief 显示每VLAN生成树信息

VLAN1

Spanning tree enabled protocol IEEE ROOT ID Priority 24577

Address 0007.eb06.1740 非vlan1的根桥 Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 32768

Address 0030.803d.f640

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec VLAN10

Spanning tree enabled protocol IEEE ROOT ID Priority 4096

Address 0030.803d.f641 为vlan10的根桥 This bridge is the root

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 4096

Address 0030.803d.f641

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec VLAN20

Spanning tree enabled protocol IEEE ROOT ID Priority 4096

Address 00b0.645f.34c2 非vlan20的根桥

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 32768

Address 0030.803d.f642

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

sw2的生成树信息:

sw2#show spanning-tree brief

VLAN1

Spanning tree enabled protocol IEEE 非vlan1的根桥 ROOT ID Priority 24577

Address 0007.eb06.1740

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

ccna

Bridge ID Priority 32768

Address 00b0.645f.34c0

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

VLAN10

Spanning tree enabled protocol IEEE

ROOT ID Priority 4096 非vlan10的根桥 Address 0030.803d.f641

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 32768

Address 00b0.645f.34c1

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

VLAN20

Spanning tree enabled protocol IEEE

ROOT ID Priority 4096 为vlan20的根桥 Address 00b0.645f.34c2 This bridge is the root

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 4096

Address 00b0.645f.34c2

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

sw3的生成树信息:

sw3#show spanning-tree

VLAN0001

Spanning tree enabled protocol ieee

Root ID Priority 24577 为vlan1的根桥 Address 0007.eb06.1740 This bridge is the root

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 24577 (priority 24576 sys-id-ext 1) Address 0007.eb06.1740

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Aging Time 300

VLAN0010

Spanning tree enabled protocol ieee

ccna

Root ID Priority 4096 非vlan10的根桥 Address 0030.803d.f641 Cost 19

Port 24 (FastEthernet0/24)

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 32779 (priority 32768 sys-id-ext 11) Address 0007.eb06.1740

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Aging Time 300

VLAN0020

Spanning tree enabled protocol ieee

Root ID Priority 4096 非vlan20的根桥 Address 00b0.645f.34c2 Cost 19

Port 23 (FastEthernet0/23)

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 32780 (priority 32768 sys-id-ext 12) Address 0007.eb06.1740

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Aging Time 300

Interface Role Sts Cost Prio.Nbr Type

---------------- ---- --- --------- -------- -------------------------------- Fa0/23 Root FWD 19 128.23 P2p Fa0/24 Altn BLK 19 128.24 P2p

步骤六、显示当前配置结果

Sw1的配置结果：

sw1#show running-config !

hostname sw1 !

spanning-tree vlan 10 priority 4096 ！

no ip domain-lookup !

interface FastEthernet0/23

switchport trunk encapsulation dot1q switchport mode trunk !

ccna

interface FastEthernet0/24

switchport trunk encapsulation dot1q switchport mode trunk ! end

sw2的配置结果：

sw2#show running-config hostname sw2 ！

spanning-tree vlan 20 priority 4096 !

no ip domain-lookup !

interface FastEthernet0/23

switchport trunk encapsulation dot1q switchport mode trunk !

interface FastEthernet0/24

switchport trunk encapsulation dot1q switchport mode trunk ! end

sw3的配置结果：

sw3#show running-config !

hostname sw3 !

no ip domain-lookup !

spanning-tree vlan 1 priority 24576 !

interface FastEthernet0/23 switchport mode trunk !

interface FastEthernet0/24 switchport mode trunk ! End

ccna

实验二、静态路由

环境：两台2500系列路由器通过串口相连。

要求：在R1和R2上启用静态路由，使两端网络能够互通。

步骤一、基本配置

Router>

Router>enable

Router#config terminal

Router(config)#hostname R1

R1(config)#no ip domain-lookup R1(config)#line console 0

R1(config-line)# logging synchronous R1(config-line)#exec-timeout 0 0 R1(config-line)#exit

步骤二:接口配置

R1的配置：

R1(config)#interface s0

R1(config-if)#ip address 30.1.1.1 255.255.255.0 R1(config-if)#clock rate 64000 时钟速率端 R1(config-if)#no shutdown

R1(config-if)#interface loopback 0

R1(config-if)#ip address 10.1.1.1 255.255.255.0 R1(config-if)#

R2的配置：

Router(config)#hostname R2 R2(config)#interface s1

R2(config-if)#ip address 30.1.1.2 255.255.255.0 R2(config-if)#no shutdown

R2(config-if)#interface loopback 0

ccna

R2(config-if)#ip address 20.1.1.1 255.255.255.0 R2(config-if)#exit R2(config)#

步骤三、指定静态路由 R1(config)#

R1(config)#ip route 20.1.1.0 255.255.255.0 serial 0 指定静态路由 R2(config)#

R2(config)#ip route 10.1.1.0 255.255.255.0 30.1.1.1 指定静态路由

步骤四、作ping 测试 R1#ping

Protocol [ip]:

Target IP address: 20.1.1.1 目的地址

Extended commands [n]: y 是否用扩展命令 Source address or interface: 10.1.1.1 源地址 !!!!! 显示已通

步骤五、显示静态路由条目 R1#show ip route

Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area * - candidate default, U - per-user static route, o - ODR P - periodic downloaded static route

Gateway of last resort is not set

20.0.0.0/24 is subnetted, 1 subnets

S 20.1.1.0 is directly connected, Serial0 静态路由条目 10.0.0.0/24 is subnetted, 1 subnets

C 10.1.1.0 is directly connected, Loopback0 30.0.0.0/24 is subnetted, 1 subnets

C 30.1.1.0 is directly connected, Serial0

步骤六、显示当前配置

R1的配置结果：

R1#show running-config !

hostname R1

ccna

no ip domain-lookup !

interface Loopback0

ip address 10.1.1.1 255.255.255.0 !

interface Serial0

ip address 30.1.1.1 255.255.255.0 clockrate 64000 !

ip route 20.1.1.0 255.255.255.0 Serial0 !

line con 0

exec-timeout 0 0 logging synchronous transport input none end

R2的配置结果：

R2#show running-config !

hostname R2 !

no ip domain-lookup !

interface Loopback0

ip address 20.1.1.1 255.255.255.0 !

interface Serial1

ip address 30.1.1.2 255.255.255.0 !

ip route 10.1.1.0 255.255.255.0 30.1.1.1 !

line con 0

exec-timeout 0 0 logging synchronous ! end

ccna

实验三、RIP路由协议

环境：两台2500系列路由器由串口相连。

要求：如下图所示，在R1和R2上运行RIPv1,让两端能够学习到对端的路由

以达到通信的目的。

步骤一、基本配置

Router>

Router>enable

Router#config terminal

Router(config)#hostname R1

R1(config)#no ip domain-lookup 关闭域名查找 R1(config)#line console 0

R1(config-line)# logging synchronous 命令输入达到同步 R1(config-line)#exec-timeout 0 0 设置永不超时 R1(config-line)#exit

步骤二、接口IP配置

R1的配置：

R1(config)#interface s0

R1(config-if)#ip address 30.1.1.1 255.255.255.0

R1(config-if)#clock rate 64000 注意时钟速率端 R1(config-if)#no shutdown

R1(config-if)#interface loopback 0

R1(config-if)#ip address 10.1.1.1 255.255.255.0 R1(config-if)#

R2的配置：

Router(config)#hostname R2

ccna

R2(config)#interface s1

R2(config-if)#ip address 30.1.1.2 255.255.255.0 R2(config-if)#no shutdown

R2(config-if)#interface loopback 0

R2(config-if)#ip address 20.1.1.1 255.255.255.0 R2(config-if)#exit R2(config)#

步骤三、启用RIP路由选择协议

R1的配置：

R1(config)#router rip 启用RIP

R1(config-router)#network 30.0.0.0 发布直连网段 R1(config-router)#network 10.0.0.0 R1(config-router)#exit R1(config)#

R2的配置：

R2(config)#router rip 启用RIP

R2(config-router)#network 20.0.0.0 发布直连网段 R2(config-router)#network 30.0.0.0 R2(config-router)#exit R2(config)#end

步骤四、显示路由表，查看路由条目

R1#show ip route

Gateway of last resort is not set

R 20.0.0.0/8 [120/1] via 30.1.1.2, 00:00:03, Serial0 学习来的路由条目 10.0.0.0/24 is subnetted, 1 subnets

C 10.1.1.0 is directly connected, Loopback0 30.0.0.0/24 is subnetted, 1 subnets

C 30.1.1.0 is directly connected, Serial0

ccna

步骤五、用扩展ping命令测试连通性 R2#ping

Protocol [ip]:

Target IP address: 10.1.1.1 Repeat count [5]: Datagram size [100]: Timeout in seconds [2]: Extended commands [n]: y

Source address or interface: 20.1.1.1 !!!!!

步骤六、显示你当前路由协议

R2#show ip protocols 显示你当前路由协议配置情况和运行状态 Routing Protocol is "rip"

Sending updates every 30 seconds, next due in 24 seconds Invalid after 180 seconds, hold down 180, flushed after 240 Outgoing update filter list for all interfaces is Incoming update filter list for all interfaces is Redistributing: rip

Default version control: send version 1, receive any version

Interface Send Recv Triggered RIP Key-chain Loopback0 1 1 2 Serial1 1 1 2

Automatic network summarization is in effect Routing for Networks: 10.0.0.0 20.0.0.0

Routing Information Sources:

Gateway Distance Last Update 30.1.1.1 120 00:14:05 Distance: (default is 120)

步骤七、显示当前配置

r1的当前配置：

r1#show running-config !

hostname R1 !

no ip domain-lookup !

interface Loopback0

ccna

ip address 10.1.1.1 255.255.255.0 !

interface Serial0

ip address 30.1.1.1 255.255.255.0 clockrate 64000 !

router rip

network 30.0.0.0 network 10.0.0.0 !

line con 0

exec-timeout 0 0 logging synchronous transport input none end

r2的当前配置： R2#sh run !

hostname R2 !

no ip domain-lookup !

interface Loopback0

ip address 20.1.1.1 255.255.255.0 !

interface Serial1

ip address 30.1.1.2 255.255.255.0 !

router rip

network 30.0.0.0 network 20.0.0.0 !

line con 0

exec-timeout 0 0 logging synchronous ! end

ccna

实验四、RIPv1与EIGRP在不连续网络下的比较

环境：两台2500系列路由器，由串口相连。

要求：在RIPv1和EIGRP中将两个相同主类网络的不同子网由另一个主类

网络分割，如何能学到对端网络。

RIP配置：

步骤一、基本配置

Router>

Router>enable

Router#config terminal

Router(config)#hostname R1

R1(config)#no ip domain-lookup R1(config)#line console 0

R1(config-line)#logging synchronous R1(config-line)#exec-timeout 0 0 R1(config-line)#exit

步骤二、接口配置

R1的配置：

R1(config)#interface s0

R1(config-if)#ip address 172.16.1.1 255.255.255.0 R1(config-if)#clock rate 64000 R1(config-if)#no shutdown

R1(config-if)#interface loopback 0

R1(config-if)#ip address 10.1.1.1 255.255.255.0 R1(config-if)#

R2的配置：

R2(config)#interface s1

R2(config-if)#ip add 172.16.1.2 255.255.255.0 R2(config-if)#no shutdown

ccna

R2(config-if)#interface loopback 0

R2(config-if)#ip address 10.1.2.1 255.255.255.0 R2(config-if)#exit R2(config)#

步骤三、启用RIP路由选择协议

R1的配置：

R1(config)#router rip 启用RIP R1(config-router)#network 10.0.0.0 发布直连网段 R1(config-router)#network 172.16.0.0 R1(config-router)#exit R1(config)#

R2的配置：

R2(config)#router rip 启用RIP R2(config-router)#network 10.0.0.0 发布直连网段 R2(config-router)#network 172.16.0.0 R2(config-router)#exit R2(config)#end

显示路由信息

R1#show ip route 显示路由信息

Gateway of last resort is not set

172.16.0.0/24 is subnetted, 1 subnets

C 172.16.1.0 is directly connected, Serial0 没有学习到任何路由条目 10.0.0.0/24 is subnetted, 4 subnets

C 10.1.3.0 is directly connected, Serial0 C 10.1.1.0 is directly connected, Loopback0

步骤四、配置辅助IP

R1(config)#interface s0

R1(config-if)#ip address 10.1.3.1 255.255.255.0 secondary 配置辅助IP R2(config)#interface s1

ccna

R2(config-if)#ip address 10.1.3.2 255.255.255.0 secondary 配置辅助IP

步骤四、显示路由信息

R1#show ip route 显示路由信息

Gateway of last resort is not set

172.16.0.0/24 is subnetted, 1 subnets

C 172.16.1.0 is directly connected, Serial0 10.0.0.0/24 is subnetted, 4 subnets

C 10.1.3.0 is directly connected, Serial0

R 10.1.2.0 [120/1] via 10.1.3.2, 00:00:14, Serial0 已经学习到了路由 R 10.0.0.0 [120/1] via 172.16.1.2, 00:00:14, Serial0 C 10.1.1.0 is directly connected, Loopback0

步骤五、显示当前配置信息

R1的当前配置：

R1#show running-config hostname R1 !

no ip domain-lookup !

interface Loopback0

ip address 10.1.1.1 255.255.255.0 !

interface Serial0

ip address 10.1.3.1 255.255.255.0 secondary ip address 172.16.1.1 255.255.255.0 clockrate 64000 !

router rip

network 10.0.0.0 network 172.16.0.0 ! End

ccna

R2的当前配置：

R2#show running-config !

hostname R2

no ip domain-lookup !

interface Loopback0

ip address 10.1.2.1 255.255.255.0 !

interface Serial1

ip address 10.1.3.2 255.255.255.0 secondary ip address 172.16.1.2 255.255.255.0 !

router rip

network 10.0.0.0 network 172.16.0.0 ! End

步骤八、启用EIGRP

R1的配置:

R1(config)#no router rip 关闭IGRP

R1(config)#router eigrp 100 启用EIGRP R1(config-router)#network 10.1.1.0 0.0.0.255 R1(config-router)#network 172.16.1.0 0.0.0.255 R1(config-router)#no auto-summary

R2的配置:

R2(config)#no router rip R2(config)#router eigrp 100

R2(config-router)#network 10.1.2.0 0.0.0.255 R2(config-router)#network 172.16.1.0 0.0.0.255 R2(config-router)#no auto-summary

测试：

R1#show ip route 显示路由

ccna

i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area * - candidate default, U - per-user static route, o - ODR P - periodic downloaded static route

Gateway of last resort is not set

172.16.0.0/24 is subnetted, 1 subnets

C 172.16.1.0 is directly connected, Serial0 10.0.0.0/24 is subnetted, 2 subnets

D 10.1.2.0 [90/2297856] via 172.16.1.2, 00:00:20, Serial0 C 10.1.1.0 is directly connected, Loopback0

R2#show ip route

Gateway of last resort is not set

172.16.0.0/24 is subnetted, 1 subnets

C 172.16.1.0 is directly connected, Serial1 10.0.0.0/24 is subnetted, 2 subnets

C 10.1.2.0 is directly connected, Loopback0

D 10.1.1.0 [90/2297856] via 172.16.1.1, 00:03:45, Serial1

步骤九、显示当前配置

R1的配置: