冯业甲 企业网络的规划与设计
3.3.5 无线路由器上的配置
双击无线路由器图标，选择Config，再选择Wireless，如图3-3 所示：
图3-3 无线路由器器的配置
无线路由器配置简单说明：SSID是随意的，三种加密方式选择任意一种并配置密码。
3.3.6 VPN服务器的配置
VPN使用AAA认证，AAA认证是在路由器R1进行的，具体配置命令看路由器R1的配置。VPN服务器上的配置比较简单，主要是在服务器上添加组名和密码、用户名和密码就OK了。双击VPN服务器图标，选择Config，在选择AAA，如图3-4 所示：
图3-4 VPN服务器上的配置
AAA服务器配置简单说明：Clientname是随意的，Client IP是你所要管理的路由器或交换机等网络设备的IP地址。Secret是AAA服务器与管理的网络设备之间的密钥。ServiceType是协议内型，Radius是国际标准，Tacacs是cisco专有协议。本课题中使用的Radius。配置用户名和密码如图所示，点“+”添加。
28
冯业甲 企业网络的规划与设计
第4章 验证
上面已经完成了对路由器、交换机的配置，这章主要描述对其验证，主要包括DHCP的验证、无线网络的验证、路由表的查看、VPN的验证、分公司与分公司之间IP电话的通讯、公司内部间的通信等验证。
4.1 DHCP的验证
在总公司和分公司的三层交换机上配置了DHCP，PC机可以动态获取IP地址，如图4-1、4-2、4-3所示。
图4-1 分公司1的PC机动态获取IP
图4-2 分公司2的PC机动态获取IP
29
冯业甲 企业网络的规划与设计
图4-3 总公司的PC机动态获取IP
4.2 无线网络的验证
在远端笔记本的PC Wireless 中，点击“Connect”出现如图4-4所示：
图4-4 点击“Connect”
选择“fgs1”后，点击“Connect”，出现如图4-5所示：
图4-5 点击“Connect”
30
冯业甲 企业网络的规划与设计
输入密码之后，点击“Connect”。然后查看该笔记本的IP地址，如图4-6所示，说明无线网络已连接。
图4-6 查看IP地址
4.3 路由表的查看
由于公司的设备很多，太多的路由表又无法在这上面全部显示出来，故只查看R1、 3Sfgs1和3Sfgs2的路由表。
R1#show ip route
Gateway of last resort is 0.0.0.0 to network 0.0.0.0
192.168.1.0/24 is variably subnetted, 8 subnets, 2 masks C 192.168.1.0/27 is directly connected, FastEthernet1/0 C 192.168.1.224/30 is directly connected, Serial0/0/0.2 C 192.168.1.228/30 is directly connected, FastEthernet0/1
O 192.168.1.232/30 [110/65] via 192.168.1.226, 04:06:57, Serial0/0/0.2 O 192.168.1.236/30 [110/65] via 192.168.1.253, 04:06:57, Serial0/0/0.1 C 192.168.1.240/30 is directly connected, FastEthernet0/0
O 192.168.1.248/30 [110/128] via 192.168.1.253, 04:07:26, Serial0/0/0.1 [110/128] via 192.168.1.226, 04:07:26, Serial0/0/0.2 C 192.168.1.252/30 is directly connected, Serial0/0/0.1 192.168.2.0/26 is subnetted, 4 subnets
O 192.168.2.0 [110/2] via 192.168.1.229, 04:06:57, FastEthernet0/1 O 192.168.2.64 [110/2] via 192.168.1.229, 04:06:57, FastEthernet0/1 O 192.168.2.128 [110/2] via 192.168.1.229, 04:06:57, FastEthernet0/1 O 192.168.2.192 [110/2] via 192.168.1.229, 04:06:57, FastEthernet0/1 192.168.3.0/26 is subnetted, 4 subnets
O 192.168.3.0 [110/66] via 192.168.1.253, 04:06:57, Serial0/0/0.1 O 192.168.3.64 [110/66] via 192.168.1.253, 04:06:57, Serial0/0/0.1 O 192.168.3.128 [110/66] via 192.168.1.253, 04:06:57, Serial0/0/0.1 O 192.168.3.192 [110/66] via 192.168.1.253, 04:06:57, Serial0/0/0.1 192.168.4.0/26 is subnetted, 4 subnets
O 192.168.4.0 [110/66] via 192.168.1.226, 04:06:57, Serial0/0/0.2 O 192.168.4.64 [110/66] via 192.168.1.226, 04:06:57, Serial0/0/0.2 O 192.168.4.128 [110/66] via 192.168.1.226, 04:06:57, Serial0/0/0.2 O 192.168.4.192 [110/66] via 192.168.1.226, 04:06:57, Serial0/0/0.2
31
冯业甲 企业网络的规划与设计
192.168.5.0/25 is subnetted, 2 subnets
O 192.168.5.0 [110/65] via 192.168.1.253, 04:07:26, Serial0/0/0.1 O 192.168.5.128 [110/65] via 192.168.1.226, 04:07:26, Serial0/0/0.2 C 202.196.1.0/24 is directly connected, Serial0/0/1 S* 0.0.0.0/0 is directly connected, Serial0/0/1
3Sfgs1#show ip route
Gateway of last resort is 192.168.1.237 to network 0.0.0.0
192.168.1.0/24 is variably subnetted, 8 subnets, 2 masks
O 192.168.1.0/27 [110/66] via 192.168.1.237, 03:56:39, FastEthernet0/1 O 192.168.1.224/30 [110/129] via 192.168.1.237, 03:56:39, FastEthernet0/1 O 192.168.1.228/30 [110/66] via 192.168.1.237, 03:56:39, FastEthernet0/1 O 192.168.1.232/30 [110/66] via 192.168.1.237, 03:26:33, FastEthernet0/1 C 192.168.1.236/30 is directly connected, FastEthernet0/1
O 192.168.1.240/30 [110/66] via 192.168.1.237, 03:56:39, FastEthernet0/1 O 192.168.1.248/30 [110/65] via 192.168.1.237, 03:56:39, FastEthernet0/1 O 192.168.1.252/30 [110/65] via 192.168.1.237, 03:56:39, FastEthernet0/1 192.168.2.0/26 is subnetted, 4 subnets
O 192.168.2.0 [110/67] via 192.168.1.237, 03:56:39, FastEthernet0/1 O 192.168.2.64 [110/67] via 192.168.1.237, 03:56:39, FastEthernet0/1 O 192.168.2.128 [110/67] via 192.168.1.237, 03:56:39, FastEthernet0/1 O 192.168.2.192 [110/67] via 192.168.1.237, 03:56:39, FastEthernet0/1 192.168.3.0/26 is subnetted, 4 subnets
C 192.168.3.0 is directly connected, Vlan2 C 192.168.3.64 is directly connected, Vlan3 C 192.168.3.128 is directly connected, Vlan4 C 192.168.3.192 is directly connected, Vlan5 192.168.4.0/26 is subnetted, 4 subnets
O 192.168.4.0 [110/67] via 192.168.1.237, 03:26:33, FastEthernet0/1 O 192.168.4.64 [110/67] via 192.168.1.237, 03:26:33, FastEthernet0/1 O 192.168.4.128 [110/67] via 192.168.1.237, 03:26:33, FastEthernet0/1 O 192.168.4.192 [110/67] via 192.168.1.237, 03:26:33, FastEthernet0/1 192.168.5.0/25 is subnetted, 2 subnets
O 192.168.5.0 [110/2] via 192.168.1.237, 03:56:39, FastEthernet0/1 O 192.168.5.128 [110/66] via 192.168.1.237, 03:56:39, FastEthernet0/1 O*E2 0.0.0.0/0 [110/1] via 192.168.1.237, 03:56:39, FastEthernet0/1
3Sfgs2#show ip route
Gateway of last resort is 192.168.1.233 to network 0.0.0.0
192.168.1.0/24 is variably subnetted, 8 subnets, 2 masks
O 192.168.1.0/27 [110/66] via 192.168.1.233, 04:00:58, FastEthernet0/1 O 192.168.1.224/30 [110/65] via 192.168.1.233, 04:00:58, FastEthernet0/1 O 192.168.1.228/30 [110/66] via 192.168.1.233, 04:00:58, FastEthernet0/1 C 192.168.1.232/30 is directly connected, FastEthernet0/1
O 192.168.1.236/30 [110/66] via 192.168.1.233, 03:30:52, FastEthernet0/1 O 192.168.1.240/30 [110/66] via 192.168.1.233, 04:00:58, FastEthernet0/1 O 192.168.1.248/30 [110/65] via 192.168.1.233, 04:00:58, FastEthernet0/1 O 192.168.1.252/30 [110/129] via 192.168.1.233, 04:00:58, FastEthernet0/1 192.168.2.0/26 is subnetted, 4 subnets
O 192.168.2.0 [110/67] via 192.168.1.233, 04:00:58, FastEthernet0/1 O 192.168.2.64 [110/67] via 192.168.1.233, 04:00:58, FastEthernet0/1 O 192.168.2.128 [110/67] via 192.168.1.233, 04:00:58, FastEthernet0/1 O 192.168.2.192 [110/67] via 192.168.1.233, 04:00:58, FastEthernet0/1 192.168.3.0/26 is subnetted, 4 subnets
O 192.168.3.0 [110/67] via 192.168.1.233, 03:30:52, FastEthernet0/1
32