CCNP综合实验题实验题: 1.在图上显示的所有设备上配置Hostname,enable密文密码,所有vty密码.Hostname如图所示,密码都为cisco. 2.确保交换机之间所有的端口都为Trunk. 3.Core1,Core2为VTP-server,SW1,SW2为VTP-client,域名为CCNP,创建VLAN10,VLAN20,VLAN30,VLAN40, 4.确保Core1与Core2其中一个为VLAN1-500的根桥和VLAN501-1024的备份根桥,一个为VLAN1-500备份根桥和VLAN501-1024的根桥. 5.划VLAN.PC1为VLAN10,PC2为VLAN20.SW0f0/1连PC1,SW1f0/1边PC2.Gatewayf0/0为VLAN30,gatewayF0/1为VLAN40, 6.Core1与Core2两个链路做二层etherchannel,用工业标准.只要求写出配置文档,暂时不配置到生产环境中. 8.Core1起SVI口,VLAN10:192.168.10.100,VLAN20:192.168.20.100,VLAN30:192.168.30.100,VLAN40:192.168.40.100 Core2起SVI口,VLAN10:192.168.10.200,VLAN20:192.168.20.200,VLAN30:192.168.30.200,VLAN40:192.168.40.200 9.Gateway S0/3/0与ISP-internet s0/3/0相连, GatewayIP:S0/3/0-197.68.1.1/30 f0/0-192.168.30.30/24 f0/1-192.168.40.40/24 10.Gateway,Core1,Core起OSPF,宣告相应的网络.使得Core1只与Gatewayf0/0建立邻居,Core1只有一个 OSPF邻居.Core2只与Gatewayf0/1建立邻居,Core2只有一个邻居.Core1与Core2之间不需要建立OSPF邻 居.Gateway的邻居表中只有两个邻居. Gateway:Loopback0:3.3.3.3/32,宣告该网络,也作为ospf router-id Core1:Loopback0:1.1.1.1/32,宣告该网络,也作为ospf router-id Core2:Loopback0:2.2.2.2/32,宣告该网络,也作为ospf router-id 确保PC1,PC2能ping通gateway3.3.3.3. 11:SW1与SW2上只能配上192.168.1.0/24网段的管理IP,通过一定的配置,使PC能登录到这两个交换机上. 在Gateway上做NAT, 13.在SW1上配置.使得F0/1的端口只能接入PC1,否则自动关闭端口. 14.配置HSRP.只要求写出配置,(可以使用dynamips查命令) core1为VLAN10的主网关,Vlan20的备份网关 core2为VLAN20的主网关,VLAN10的备份网关. 15.只要求写出配置.在gateway上建立两个帐启用用于管理,当PC用户登录到gateway时,输入不同的用户会 拥有不同的权限. 一个是超级用户:level:15,username:admin,password:admin, 一个是受限用户:level:0,username:user,password:user,并具有查看路由表的权限. 答案： 1、 enable conf t host * no ip domain-lo lin con 0 exec-ti 0 0 logg syn exit enable secret cisco lin vty 0 * password cisco 2、 switchport mode trunk 3、 core1: enable vlan database vlan 10 vlan 20 vlan 30 vlan 40 vtp server vtp domain CCNP core2: enable vlan database vtp server vtp domain CCNP SW1/SW2: enable vlan database vtp client vtp domain CCNP 4、 core1: spanning-tree vlan 1-500 root primary spanning-tree vlan 501-1024 root secondary core2: spanning-tree vlan 1-500 root secondary spanning-tree vlan 501-1024 root primary 5、 switchport mode access switchport access vlan * 6、 int range f0/2 - 3 channel-group 1 mode on switchport mode trunk int int port-channel 1 switchport mode trunk 7、PC直接配置 8、 core1: interface Vlan10 ip address 192.168.10.100 255.255.255.0 interface Vlan20 ip address 192.168.20.100 255.255.255.0 interface Vlan30 ip address 192.168.30.100 255.255.255.0 interface Vlan40 ip address 192.168.40.100 255.255.255.0 core2: interface Vlan10 ip address 192.168.10.200 255.255.255.0 interface Vlan20 ip address 192.168.20.200 255.255.255.0 interface Vlan30 ip address 192.168.30.200 255.255.255.0 interface Vlan40 ip address 192.168.40.200 255.255.255.0 9、 Gateway: enable conf t int s0/3/0 ip add 197.68.1.1 255.255.255.252 no sh int f0/0 ip add 192.168.30.30 255.255.255.0 no sh int f0/1 ip add 192.168.40.40 255.255.255.0 no sh 10、 gateway : router ospf 100 router-id 3.3.3.3 network 192.168.30.0 0.0.0.255 area 0 network 192.168.40.0 0.0.0.255 area 0 network 3.3.3.3 0.0.0.0 area 0 core1： router ospf 100 router-id 1.1.1.1 redistribute connected subnets network 192.168.30.0 0.0.0.255 area 0 network 1.1.1.1 0.0.0.0 area 0 core2： router ospf 100 router-id 2.2.2.2 redistribute connected subnets network 192.168.40.0 0.0.0.255 area 0 network 2.2.2.2 0.0.0.0 area 0 11、 core1: int vlan 1 ip add 192.168.1.100 255.255.255.0 no sh core2: int vlan 1 ip add 192.168.1.200 255.255.255.0 no sh sw1: int vlan 1 ip add 192.168.1.10 255.255.255.0 no sh ip default-gateway 192.168.10.100 sw2: int vlan 1 ip add 192.168.1.20 255.255.255.0 no sh ip default-gateway 192.168.10.200 12、 Gateway:enable conf t int s0/3/0 ip nat outside int f0/0 ip nat inside int f0/1 ip nat inside exit router ospf 100 default-information originate exit ip route 0.0.0.0 0.0.0.0 197.68.1.2 access-list 10 permit 192.168.10.1 0.0.0.14 access-list 20 permit 192.168.20.32 0.0.0.0 access-list 20 permit 192.168.20.0 0.0.0.31 ip nat pool VLAN10 198.1.1.1 198.1.1.5 netmask 255.255.255.240 ip nat pool VLAN20 198.1.1.6 198.1.1.10 netmask 255.255.255.240 ip nat inside source list 10 pool vlan10 overload ip nat inside source list 20 pool vlan20 overload end ISP:enableconf tend13、 enable conf t int f0/1 switchport mode access switchport access vlan 10 switchport port-security(开启端口安全) switchport port-security mac-address sticky (第一个接入电脑MAC地址-常用) 或 switchport port-security mac-address 00E0.8FB6.D85（某PC的MAC地址） switchport port-security maximum 1（允许最大连接数为1) switchport port-securi