Packet Tracer - 综合技巧练习
!HQ-Sw!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! ! en
conf t
intvlan 60
ip add 172.16.15.10 255.255.255.248 no shut
ip default-gateway 172.16.15.9 vlan 15
name Servers vlan 30 name PCs vlan 45
name Native vlan 60
name Management
interface range fa0/1 - 10 switchport mode access switchport access vlan 30 interface fa0/1
switchport port-security
switchport port-security maximum 2
switchport port-security mac-address sticky switchport port-security violation restrict interface range fa0/11 - 20 switchport mode access switchport access vlan 15 interface g1/1
switchport mode trunk
switchport trunk native vlan 45 interface range fa0/21 - 24 , g1/2 shutdown
ip domain-name cisco.com crypto key gen rsa 1024
userHQadmin pass ciscoclass service password-encryption ipssh version 2 ipsshauth 2 ipssh time 60 linevty 0 15 login local
transport input ssh
? 2014思科和/或其附属公司。保留所有权利。本文档所含内容为思科公开发布的信息。 第6页，共10页
Packet Tracer - 综合技巧练习
======================================================= ISOMORPH ID = 111
======================================================= !Admin!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! en
conf t
ipdhcp pool LAN
network 10.10.10.192 255.255.255.192 default-router 10.10.10.193 interface GigabitEthernet0/0 no shutdown
interface GigabitEthernet0/0.15 encapsulation dot1Q 15
ip address 10.10.10.161 255.255.255.224 ipnat inside
interface GigabitEthernet0/0.30 encapsulation dot1Q 30
ip address 10.10.10.193 255.255.255.192 ipnat inside
interface GigabitEthernet0/0.45 encapsulation dot1Q 45 native
ip address 10.10.10.129 255.255.255.240 interface GigabitEthernet0/0.60 encapsulation dot1Q 60
ip address 10.10.10.145 255.255.255.240 routerospf 1
router-id 1.1.1.1
passive-interface GigabitEthernet0/0 network 10.10.10.0 0.0.0.255 area 0 interface s0/0/0 ipnat inside
interface s0/0/1 ipnat inside
interface s0/1/0 ipnat outside !
ipnat pool TEST 198.133.219.128 198.133.219.129 netmask 255.255.255.252 ipnat inside source list 1 pool TEST overload
ipnat inside source static 10.10.10.162 198.133.219.130 ip route 0.0.0.0 0.0.0.0 Serial0/1/0
access-list 1 permit 10.10.10.0 0.0.0.255 end wr
!!!!!!!!!!!!!!!!!!!!!!!!
!Admin-Sw!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
? 2014思科和/或其附属公司。保留所有权利。本文档所含内容为思科公开发布的信息。 第7页，共10页
Packet Tracer - 综合技巧练习
en
conf t
intvlan 60
ip add 10.10.10.146 255.255.255.240 no shut
ip default-gateway 10.10.10.145 vlan 15
name Servers vlan 30 name PCs vlan 45
name Native vlan 60
name Management
interface range fa0/1 - 10 switchport mode access switchport access vlan 30 interface fa0/1
switchport port-security
switchport port-security maximum 2
switchport port-security mac-address sticky switchport port-security violation restrict interface range fa0/11 - 20 switchport mode access switchport access vlan 15 interface g1/1
switchport mode trunk
switchport trunk native vlan 45 interface range fa0/21 - 24 , g1/2 shutdown
ip domain-name cisco.com crypto key gen rsa 1024
user Admin pass letmein
service password-encryption ipssh version 2 ipsshauth 2 ipssh time 60 linevty 0 15 login local
transport input ssh
=============================================================== ISOMORPH ID: 222
? 2014思科和/或其附属公司。保留所有权利。本文档所含内容为思科公开发布的信息。 第8页，共10页
Packet Tracer - 综合技巧练习
=============================================================== !Central!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! en
conf t
ipdhcp pool LAN
network 192.168.45.128 255.255.255.192 default-router 192.168.45.129 interface GigabitEthernet0/0 no shutdown
interface GigabitEthernet0/0.15 encapsulation dot1Q 15
ip address 192.168.45.65 255.255.255.192 ipnat inside
interface GigabitEthernet0/0.30 encapsulation dot1Q 30
ip address 192.168.45.129 255.255.255.192 ipnat inside
interface GigabitEthernet0/0.45 encapsulation dot1Q 45 native
ip address 192.168.45.17 255.255.255.240 interface GigabitEthernet0/0.60 encapsulation dot1Q 60
ip address 192.168.45.33 255.255.255.240 routerospf 1
router-id 1.1.1.1
passive-interface GigabitEthernet0/0 network 192.168.45.0 0.0.0.255 area 0 interface s0/0/0 ipnat inside
interface s0/0/1 ipnat inside
interface s0/1/0 ipnat outside !
ipnat pool TEST 64.100.32.56 64.100.32.57 netmask 255.255.255.252 ipnat inside source list 1 pool TEST overload
ipnat inside source static 192.168.45.66 64.100.32.58 ip route 0.0.0.0 0.0.0.0 Serial0/1/0
access-list 1 permit 192.168.45.0 0.0.0.255 end wr
!!!!!!!!!!!!!!!!!!!!!!!!
!Cnt-Sw!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! en
conf t
? 2014思科和/或其附属公司。保留所有权利。本文档所含内容为思科公开发布的信息。 第9页，共10页
Packet Tracer - 综合技巧练习
intvlan 60
ip add 192.168.45.34 255.255.255.240 no shut
ip default-gateway 192.168.45.33 vlan 15
name Servers vlan 30 name PCs vlan 45
name Native vlan 60
name Management
interface range fa0/1 - 10 switchport mode access switchport access vlan 30 interface fa0/1
switchport port-security
switchport port-security maximum 2
switchport port-security mac-address sticky switchport port-security violation restrict interface range fa0/11 - 20 switchport mode access switchport access vlan 15 interface g1/1
switchport mode trunk
switchport trunk native vlan 45 interface range fa0/21 - 24 , g1/2 shutdown
ip domain-name cisco.com crypto key gen rsa 1024
userCAdmin pass itsasecret service password-encryption ipssh version 2 ipsshauth 2 ipssh time 60 linevty 0 15 login local
transport input ssh
? 2014思科和/或其附属公司。保留所有权利。本文档所含内容为思科公开发布的信息。第10页，共10页