2023年秋季期末考试题

拓扑图

?任务1：设备命名
???????1.将ISP设备名称修改为学号。（此题不做，整个大题为0分）
???????2.其他设备名称与显示名称一致，注意大小写。
任务2：链路聚合
??????为了保证链路的稳定性，在S1和S2之间的G0/0/2和G0/0/3接口配置链路聚合，请通过LACP模式实现二层链路聚合，聚合接口ID为5。
任务3：配置VLAN接口IP地址信息
??????按图示进行VLAN及IP地址配置，并实现VLAN间通信（SVI、单臂路由），中继链路允许所有VLAN通过。
任务4：VRRP配置
?????1.在S1和S2上创建两个虚拟组分配是11和12，11组上的虚拟组IP：10.11.11.254，12组上的虚拟组IP：10.12.12.254.
?????2.10组选择S1上为vlan11的master，12组选择S2上为VLAN?12的master，优先级都设置为200，备用网关优先级120。
?????3.配置VRRP追踪上行接口状态，裁剪优先级值100.
任务5：MSTP配置?
?????1.vlan?11和vlan12的流量进行负载分担。
?????2.S1为实例11跟桥，为实例12备用根桥（根桥优先级为4096和备份根桥优先级8192）。
?????3.S2为实例12根桥，为实例11备用根桥（根桥优先级为4096和备份根桥优先级8192）。
?????3.S11连接PC用户的接口不要参与STP计算。
?????4.配置域名为cs2023，并配置域内VLAN和实例的映射关系（VLAN11映射实例11，VLAN12?映射实例12）。
任务6：通信配置
?????1.内网使用ospf路由协议通信，S1、S2、R1、FW和DHCP的router-id分别为1.1.1.1、2.2.2.2、3.3.3.3、4.4.4.4和5.5.5.5。
?????2.出外网使用默认路由，跟下一条地址。
?????3.将默认路由重分布进ospf
任务7：DHCP配置
????1.使用全局方式在DHCP设备上配置DHCP服务器，地址池分别为pool11、pool12、pool21和pool22，DNS：8.8.8.8，地址租约时间为90分钟。
????2.设置DHCP中继转发。
任务8：出口设计
?????1.将www服务器设置静态NAT，全局地址为69.2.3.6
?????2.PAT配置：全局地址编号为5，全局地址池为：69.2.3.3?-69.2.3.5，内网地址使用ACL2100指定范围，使用4个条件(4个终端主机所在网段）,条件编号默认，让vlan11、vlan12、vlan21和vlan22内的主机上公网。
任务9：远程登录配置
????开启FW远程登录（telnet），采用aaa验证，用户名为学生姓名拼音全拼，密码123456，配置服务器的用户权限等级为3级，设置同时在线人数为15人。
任务10：上传文件
????完成后请试卷生成答案，文件ID为：学号+姓名.ans文件格式。上传此文件到超星学习通考试平台。

//S11

?<S11>sy????????//进入全局模式
Enter system view, return user view with Ctrl+Z.
[S11]sy S11????????//更改交换机名称
[S11]un inf en???????? //关闭设备日志信息
Info: Information center is disabled.
[S11]vl ba 11 to 12????????//创建vlan
Info: This operation may take a few seconds. Please wait for a moment...done.
[S11]int e0/0/1????????//进入e0/0/1端口????????
[S11-Ethernet0/0/1]po li acc?????????//配置端口类型为access
[S11-Ethernet0/0/1]po de v 11????????//配置接口组的缺省vlan为11?，pvid=11
[S11-Ethernet0/0/1]stp edg en????????//S11连接用户的接口不要参与STP计算
[S11-Ethernet0/0/1]int e0/0/2?????????//进入e0/0/2端口?
[S11-Ethernet0/0/2]po li acc????????//配置端口类型为access
[S11-Ethernet0/0/2]po de v 12?????????//配置接口组的缺省vlan为12?，pvid=12
[S11-Ethernet0/0/2]stp edg en????????//S11连接用户的接口不要参与STP计算
[S11-Ethernet0/0/2]int g0/0/1????????//进入g0/0/1端口
[S11-GigabitEthernet0/0/1]po li tr?????????//配置端口类型为trunk
[S11-GigabitEthernet0/0/1]po tr a v a?????????//聚合端口允许所有vlan通行
[S11-GigabitEthernet0/0/1]int g0/0/2?????????//进入g0/0/1端口
[S11-GigabitEthernet0/0/2]po li tr????????//配置端口类型为trunk
[S11-GigabitEthernet0/0/2]po tr a v a????????//聚合端口允许所有vlan通行
[S11-GigabitEthernet0/0/2]q
[S11]stp reg????????//进入mstp视图
[S11-mst-region]reg cs2023?????????//配置域名为scitc
[S11-mst-region]ins 11 v 11?????????//VLAN11映射实例11
[S11-mst-region]ins 12 v 12?????????//VLAN12映射实例12
[S11-mst-region]act reg?????????//激活配置

//S12

<Huawei>sy????????//进入全局模式
Enter system view, return user view with Ctrl+Z.
[Huawei]sy S12? ? ? ? //更改交换机名称
[S12]un inf en?????????//关闭设备日志信息
Info: Information center is disabled.
[S12]vl ba 21 to 22????????//创建vlan
Info: This operation may take a few seconds. Please wait for a moment...done.
[S12]int e0/0/1?????????//进入e0/0/1端口
[S12-Ethernet0/0/1]po li acc?????????//配置端口类型为access
[S12-Ethernet0/0/1]po de v 21????????//配置接口组的缺省vlan为21?，pvid=21
[S12-Ethernet0/0/1]stp edg en????????//S12连接用户的接口不要参与STP计算
[S12-Ethernet0/0/1]int e0/0/2?????????//进入e0/0/1端口
[S12-Ethernet0/0/2]po li acc????????//配置端口类型为access
[S12-Ethernet0/0/2]po de v 22????????//配置接口组的缺省vlan为22?，pvid=22
[S12-Ethernet0/0/2]stp edg en?????????//S12连接用户的接口不要参与STP计算
[S12-Ethernet0/0/2]int g0/0/1?????????//进入g0/0/1端口
[S12-GigabitEthernet0/0/1]po li tr????????//配置端口类型为trunk
[S12-GigabitEthernet0/0/1]po tr a v a????????//聚合端口允许所有vlan通行

//S1

<Huawei>sy????????//进入全局模式
Enter system view, return user view with Ctrl+Z.
[Huawei]sy S1????????//更改交换机名称
[S1]un inf en?????????//关闭设备日志信息
Info: Information center is disabled.
[S1]vlan ba 10 to 12????????//创建vlan
Info: This operation may take a few seconds. Please wait for a moment...done.
[S1]int e 5????????//创建聚合链路5
[S1-Eth-Trunk5]mo lacp????????//配置为自动负载分担模式
[S1-Eth-Trunk5]tr g 0/0/2 to 0/0/3????????//将物理端口GE 0/0/2和GE 0/0/3添加到聚合链路端口中
Info: This operation may take a few seconds. Please wait for a moment...done.
[S1-Eth-Trunk5]po li tr????????//配置聚合端口类型为trunk
[S1-Eth-Trunk5]po tr a v a????????//聚合端口允许所有vlan通行
[S1-Eth-Trunk5]q
[S1]dhcp en?????????//全局启用DHCP服务
[S1]int v 10?????????//进入vlan10
[S1-Vlanif10]ip add 10.10.10.1 30???????//配置vlanIP地址?
[S1-Vlanif10]int v 11????????//进入vlan11
[S1-Vlanif11]ip add 10.11.11.1 24?????????//配置vlanIP地址
[S1-Vlanif11]vrrp v 11 v 10.11.11.254????????//配置备份组11的虚拟网关地址
[S1-Vlanif11]vrrp v 11 pr 200?????????//优先级设置为200
[S1-Vlanif11]vrrp v 11 tr int G0/0/4 red 100????????裁剪优先级值100
[S1-Vlanif11]dhcp sel re????????//配置vlanif11接口为全局模式
[S1-Vlanif11]dhcp re ser 10.30.30.30?????????//配置vlanif11接口从全局地址选择地址
[S1-Vlanif11]int v 12????????//进入vlan11
[S1-Vlanif12]ip add 10.12.12.1 24??????????//配置vlanIP地址
[S1-Vlanif12]vrrp v 12 v 10.12.12.254????????//配置备份组12的虚拟网关地址
[S1-Vlanif12]vrrp v 12 pr 120????????//优先级设置为120
[S1-Vlanif12]dhcp sel re????????//配置vlanif11接口为全局模式
[S1-Vlanif12]dhcp re ser 10.30.30.30????????//配置vlanif12接口从全局地址选择地址
[S1-Vlanif12]q
[S1]stp reg?????????//进入mstp视图
[S1-mst-region]reg cs2023????????//配置域名为cs2023
[S1-mst-region]ins 11 v 11????????//VLAN11映射实例11
[S1-mst-region]ins 12 v 12????????//VLAN12映射实例12
[S1-mst-region]act reg?????????//激活配置
Info: This operation may take a few seconds. Please wait for a moment...done.
[S1-mst-region]q
[S1]stp ins 11 pr 4096?????????//根桥优先级为4096
[S1]stp ins 12 pr 8192????????//备份根桥优先级8192
[S1]ospf 1 rou 1.1.1.1?????????//创建ospf? 1 配置route-id为1.1.1.1
[S1-ospf-1]a 0.0.0.0?????????//创建area0区域
[S1-ospf-1-area-0.0.0.0]net 10.10.10.0 0.0.0.3?????????//宣告接口网段
[S1-ospf-1-area-0.0.0.0]net 10.11.11.0 0.0.0.255?????????//宣告接口网段
[S1-ospf-1-area-0.0.0.0]net 10.12.12.0 0.0.0.255?????????//宣告接口网段

//S2

<Huawei>sy??????????//进入全局模式
Enter system view, return user view with Ctrl+Z.
[Huawei]sy S2????????//更改交换机名称
[S2]un inf en?????????//关闭设备日志信息
Info: Information center is disabled.
[S2]vlan ba 11 to 12 20????????//创建vlan
Info: This operation may take a few seconds. Please wait for a moment...done.
[S2]int e 5????????//创建聚合链路5
[S2-Eth-Trunk5]mo lacp?????????//配置为自动负载分担模式
[S2-Eth-Trunk5]tr g 0/0/2 to 0/0/3?????????//将物理端口GE 0/0/2和GE 0/0/3添加到聚合链路端口中
Info: This operation may take a few seconds. Please wait for a moment...done.
[S2-Eth-Trunk5]po li tr?????????//配置聚合端口类型为trunk
[S2-Eth-Trunk5]po tr a v a????????//聚合端口允许所有vlan通行
[S2-Eth-Trunk5]q
[S2]dhcp en????????//全局启用DHCP服务
[S2]int v 20?????????//进入vlan20
[S2-Vlanif20]ip add 10.20.20.1 30????????//配置vlanIP地址?
[S2-Vlanif20]int v 11????????//进入vlan20
[S2-Vlanif11]ip add 10.11.11.1 24?????????//配置vlanIP地址
[S2-Vlanif11]vrrp v 11 v 10.11.11.254????????//配置备份组11的虚拟网关地址
[S2-Vlanif11]vrrp v 11 pr 120????????//优先级设置为120
[S2-Vlanif11]dhcp sel re????????//配置vlanif11接口为全局模式
[S2-Vlanif11]dhcp re ser 10.30.30.30? ? ? ??//配置vlanif11接口从全局地址选择地址
[S2-Vlanif11]int v 12????????//进入vlan20
[S2-Vlanif12]ip add 10.12.12.1 24?????????//配置vlanIP地址
[S2-Vlanif12]vrrp v 12 v 10.12.12.254?????????//配置备份组12的虚拟网关地址
[S2-Vlanif12]vrrp v 12 pr 200????????//优先级设置为200
[S2-Vlanif12]vrrp v 12 tr int G0/0/4 red 100????????裁剪优先级值100
[S2-Vlanif12]dhcp sel re????????//配置vlanif12接口为全局模式
[S2-Vlanif12]dhcp re ser 10.30.30.30????????//配置vlanif12接口从全局地址选择地址
[S2-Vlanif12]q
[S2]stp reg????????//进入mstp视图
[S2-mst-region]reg cs2023????????//配置域名为cs2023
[S2-mst-region]ins 11 v 11?????????//VLAN11映射实例11
[S2-mst-region]ins 12 v 12?????????//VLAN12映射实例12
[S2-mst-region]act reg????????//激活配置
Info: This operation may take a few seconds. Please wait for a moment...done.
[S2-mst-region]q
[S2]stp ins 12 pr 4096????????//根桥优先级为4096
[S2]stp ins 11 pr 8192????????//备份根桥优先级8192
[S2]ospf 1 rou 2.2.2.2??????????//创建ospf? 1 配置route-id为2.2.2.2
[S2-ospf-1]a 0.0.0.0??????????//创建area0区域
[S2-ospf-1-area-0.0.0.0]net 10.20.20.0 0.0.0.3?????????//宣告接口网段
[S2-ospf-1-area-0.0.0.0]net 10.11.11.0 0.0.0.255?????????//宣告接口网段
[S2-ospf-1-area-0.0.0.0]net 10.12.12.0 0.0.0.255????????//宣告接口网段

//R1

<Huawei>sys????????//进入全局模式
Enter system view, return user view with Ctrl+Z.
[Huawei]sys R1?????????//更改路由器名称
[R1]un inf en????????//关闭设备日志信息
Info: Information center is disabled.
[R1]vlan ba 10 to 12?????????//创建vlan
Info: This operation may take a few seconds. Please wait for a moment...done.
[R1]dhcp en??????????//全局启用DHCP服务
Info: The operation may take a few seconds. Please wait for a moment.done.
[R1]int g0/0/0????????//进入g0/0/0端口
[R1-GigabitEthernet0/0/0]ip add 10.10.10.2 30?????????//配置接口IP地址
[R1-GigabitEthernet0/0/0]int g0/0/1????????//进入g0/0/1端口
[R1-GigabitEthernet0/0/1]ip add 10.20.20.2 30?????????//配置接口IP地址
[R1-GigabitEthernet0/0/1]int g 0/0/2????????//进入g0/0/2端口
[R1-GigabitEthernet0/0/2]ip add 10.1.1.1 30?????????//配置接口IP地址
[R1-GigabitEthernet0/0/2]int g0/0/3????????//进入g0/0/3端口
[R1-GigabitEthernet0/0/3]int g0/0/3.21????????//进入g0/0/3.21端口
[R1-GigabitEthernet0/0/3.21]dot1q ter v 21? ? ? ? //将VLAN ID 21的数据从802.1Q封装中解封
[R1-GigabitEthernet0/0/3.21]ip add 10.21.21.1 24?????????//配置接口IP地址
[R1-GigabitEthernet0/0/3.21]arp bro en? ? ? ? //允许设备发送广播信息
[R1-GigabitEthernet0/0/3.21]dhcp sel re?????????//配置接口为全局模式
[R1-GigabitEthernet0/0/3.21]dhcp re ser 10.30.30.30????????//配置接口从全局地址选择地址
[R1-GigabitEthernet0/0/3.21]int g0/0/3.22? ? ? ?//进入g0/0/3.22端口
[R1-GigabitEthernet0/0/3.22]dot1q ter v 22????????//将VLAN ID 21的数据从802.1Q封装中解封
[R1-GigabitEthernet0/0/3.22]ip add 10.22.22.1 24????????//配置接口IP地址
[R1-GigabitEthernet0/0/3.22]dhcp sel re????????//配置接口为全局模式
[R1-GigabitEthernet0/0/3.22]dhcp re ser 10.30.30.30????????//配置接口从全局地址选择地址
[R1-GigabitEthernet0/0/3.22]q
[R1]ospf 1 rou 3.3.3.3????????//创建ospf? 1 配置route-id为3.3.3.3
[R1-ospf-1]a 0????????//创建area0区域
[R1-ospf-1-area-0.0.0.0]net 10.1.1.0 0.0.0.3?????????//宣告接口网段
[R1-ospf-1-area-0.0.0.0]net 10.20.20.0 0.0.0.3?????????//宣告接口网段
[R1-ospf-1-area-0.0.0.0]net 10.10.10.0 0.0.0.3?????????//宣告接口网段
[R1-ospf-1-area-0.0.0.0]net 10.21.21.0 0.0.0.255?????????//宣告接口网段
[R1-ospf-1-area-0.0.0.0]net 10.22.22.0 0.0.0.255????????//宣告接口网段

//FW

<Huawei>sys????????//进入全局模式

[Huawei]sys FW?????????//更改路由器名称
[FW]un inf en?????????//关闭设备日志信息
Info: Information center is disabled.
[FW]int g0/0/0?????????//进入g0/0/0端口
[FW-GigabitEthernet0/0/0]ip add 10.1.1.2 30????????//配置接口IP地址
[FW-GigabitEthernet0/0/0]int g0/0/1????????//进入g0/0/1端口
[FW-GigabitEthernet0/0/1]ip add 10.30.30.1 24????????//配置接口IP地址
[FW-GigabitEthernet0/0/1]int g0/0/2????????//进入g0/0/2端口
[FW-GigabitEthernet0/0/2]ip add 10.100.100.1 30????????//配置接口IP地址
[FW-GigabitEthernet0/0/2]int g2/0/0????????//进入g2/0/0端口
[FW-GigabitEthernet2/0/0]ip add 69.2.3.1 29????????//配置接口IP地址
[FW-GigabitEthernet2/0/0]nat sta gl 69.2.3.6 in 10.100.100.2?????????//将WWW服务器设置静态NAT，全局地址为10.100.100.2
[FW-GigabitEthernet2/0/0]nat address-group 5 69.2.3.3 69.2.3.5????????//配置pat转换地址池
[FW]acl num 2100 ??????????//配置基本的acl 2100
[FW-acl-basic-2100]rule 5 pe sou 10.21.21.0 0.0.0.255??????????//允许地址段转换
[FW-acl-basic-2100]rule 10 pe sou 10.22.22.0 0.0.0.255?????????//允许地址段转换
[FW-acl-basic-2100]rule 15 pe sou 10.11.11.0 0.0.0.255?????????//允许地址段转换
[FW-acl-basic-2100]rule 20 pe sou 10.12.12.0 0.0.0.255????????//允许地址段转换
[FW-acl-basic-2100]q
[FW]ip rou 0.0.0.0 0 69.2.3.2????????//配置默认路由为下一跳地址
[FW]ospf 1 rou 4.4.4.4??????????//创建ospf? 1 配置route-id为4.4.4.4
[FW-ospf-1]default-route-advertise?????????//将默认路由重分发进ospf
[FW-ospf-1]a 0? ? ? ??//创建area0区域
[FW-ospf-1-area-0.0.0.0]net 10.1.1.0 0.0.0.3??????????//宣告接口网段
[FW-ospf-1-area-0.0.0.0]net 10.30.30.0 0.0.0.255??????????//宣告接口网段
[FW-ospf-1-area-0.0.0.0]net 10.100.100.0 0.0.0.3??????????//宣告接口网段
[FW-ospf-1-area-0.0.0.0]q
[FW-ospf-1]int g2/0/0????????//进入g0/0/2端口
[FW-GigabitEthernet2/0/0]nat out 2100 add 5????????//配置为出接口全局地址编号为5
[FW-GigabitEthernet2/0/0]q
[FW]user-int vty 0 4????????//进入VTY用户模式
[FW-ui-vty0-4]aut aaa????????//启用AAA认证模式
[FW-ui-vty0-4]user pr le 3????????//设置用户级别
[FW-ui-vty0-4]aaa????????//启用AAA验证
[FW-aaa]local name pass cipher 123456????????//创建本地用户和密码
Info: Add a new user.
[FW-aaa]local name pr le 3????????//设置用户级别
[FW-aaa]local name ser telnet?????????//设置业务类型为telnet

//DHCP

<Huawei>sys????????//进入全局模式
Enter system view, return user view with Ctrl+Z.
[Huawei]sys DHCP????????//更改路由器名称
[DHCP]un inf en??????????//关闭设备日志信息
Info: Information center is disabled.
[DHCP]int g0/0/0?????????//进入g0/0/0端口
[DHCP-GigabitEthernet0/0/0]ip add 10.30.30.30 24???????//配置接口IP地址?
[DHCP-GigabitEthernet0/0/0]q
[DHCP]dhcp en????????//全局启用DHCP服务
[DHCP]ip pool pool11?????????//创建DHCP地址池
Info:It's successful to create an IP address pool.
[DHCP-ip-pool-pool11]net 10.11.11.0 m 24????????//指定地址池所在的网段
[DHCP-ip-pool-pool11]ga 10.11.11.254????????//指定改网段的网关
[DHCP-ip-pool-pool11]dns 8.8.8.8?????????//指定DNS服务器
[DHCP-ip-pool-pool11]lea day 0 ho 1 m 30?????????//地址租约时间为90分钟
[DHCP-ip-pool-pool11]q
[DHCP]ip pool pool12????????//创建DHCP地址池
Info:It's successful to create an IP address pool.
[DHCP-ip-pool-pool12]net 10.12.12.0 m 24????????//指定地址池所在的网段
[DHCP-ip-pool-pool12]ga 10.12.12.254?????????//指定改网段的网关
[DHCP-ip-pool-pool12]dns 8.8.8.8?????????//指定DNS服务器
[DHCP-ip-pool-pool12]lea day 0 ho 1 m 30?????????//地址租约时间为90分钟
[DHCP-ip-pool-pool12]q
[DHCP]ip pool pool21????????//创建DHCP地址池
Info:It's successful to create an IP address pool.
[DHCP-ip-pool-pool21]net 10.21.21.0 m 24????????//指定地址池所在的网段
[DHCP-ip-pool-pool21]ga 10.21.21.254?????????//指定改网段的网关
[DHCP-ip-pool-pool21]dns 8.8.8.8?????????//指定DNS服务器
[DHCP-ip-pool-pool21]lea day 0 ho 1 m 30?????????//地址租约时间为90分钟
[DHCP-ip-pool-pool21]q
[DHCP]ip pool pool22????????//创建DHCP地址池
Info:It's successful to create an IP address pool.
[DHCP-ip-pool-pool22]net 10.22.22.0 m 24????????//指定地址池所在的网段
[DHCP-ip-pool-pool22]ga 10.22.22.254?????????//指定改网段的网关
[DHCP-ip-pool-pool22]dns 8.8.8.8?????????//指定DNS服务器
[DHCP-ip-pool-pool22]lea day 0 ho 1 m 30?????????//地址租约时间为90分钟
[DHCP-ip-pool-pool22]q
[DHCP]int g0/0/0????????//进入g0/0/0接口?
[DHCP-GigabitEthernet0/0/0]dhcp se gl????????//配置g0/0/0接口从全局地址选择地址
[DHCP-GigabitEthernet0/0/0]q
[DHCP]ospf 1 rou 5.5.5.5????????//创建ospf? 1 配置route-id为5.5.5.5
[DHCP-ospf-1]a 0????????//创建area0区域
[DHCP-ospf-1-area-0.0.0.0]net 10.30.30.0 0.0.0.255????????//宣告接口网段

//ISP

<Huawei>sy??????????//进入全局模式
Enter system view, return user view with Ctrl+Z.
[Huawei]sy 123456?????????//更改路由器名称为学号
[123456]un inf en????????//关闭设备日志信息
Info: Information center is disabled.
[123456]int g0/0/0????????//进入g0/0/0端口
[123456-GigabitEthernet0/0/0]ip add 69.2.3.2 29????????//配置接口IP地址
[123456-GigabitEthernet0/0/0]int g0/0/1????????//进入g0/0/0端口
[123456-GigabitEthernet0/0/1]ip add 69.2.3.9 30????????//配置接口IP地址