贵州大学xx校区学生公寓网络改造可行性研究报告(编辑修改稿)

贵州大学xx校区学生公寓网络改造可行性研究报告(编辑修改稿)内容摘要：

ip address no ip directedbroadcast physicallayer speed 64000 ! interface Serial0/3 ip address no ip directedbroadcast ip accessgroup aaa in physicallayer speed 64000 ! interface Serial1/0 ip address no ip directedbroadcast ip accessgroup aaa in physicallayer speed 64000 ! interface Async0/0 no ip address no ip directedbroadcast ! router ospf 1 work area 0 work area 0 work area 0 work area 0 area 0 range area 0 range ! ip route ip route ip route ip route ! 11 ip accesslist extended aaa deny tcp eq timera nge on_work deny tcp eq ftp timera nge on_work deny tcp eq timera nge on_work permit tcp eq smtp timer ange on_work permit tcp eq smtp timer ange on_work deny tcp eq ftp timera nge on_work permit ip any any ! ip setwancount 1 ! timerange on_work periodic weekdays 09:00 to17:00 ! b) 路由器 40004是在汇聚层，配置了 serial 口 IP及速率和以太口 IP，使用 OSPF宣告直连网段，配置静态路由外网和到三层交换机的非直连网段，使用单臂路由配置二层交换机 VLAN的网关，配置 ACL使 VLAN100 和 VLAN200 不能互相访问。 r40004show run Building configuration... Current configuration: !version service timestamps log date service timestamps debug date no service passwordencryption ! hostname r40004 ! interface FastEther0/0 no ip address no ip directedbroadcast ! interface FastEther0/ ip address no ip directedbroadcast ip accessgroup 101 in encapsulation dot1Q 100 delay 1 12 ! interface FastEther0/ ip address no ip directedbroadcast ip accessgroup 102 in encapsulation dot1Q 200 delay 1 ! interface Ether0/1 no ip address no ip directedbroadcast duplex half ! interface Serial0/2 ip address no ip directedbroadcast physicallayer speed 64000 ! router ospf 1 work area 0 work area 0 work area 0 ! ip route ip route ip route ip route ! ip accesslist extended 101 deny ip permit ip any any ! ip accesslist extended 102 deny ip permit ip any any ! ip setwancount 1 c) 路由器 40005是在汇聚层，配置了 serial 口 IP及速率和以太口 IP，使用 OSPF宣告直连网段，配置静态路由外网和 到三层交换机的非直连网段，配置 ACL使 Vlan500 可以访问内网所有 VLAN， Vlan600 既可以访问内网，又可以访问 Inter。 r40005show run Building configuration... Current configuration: 13 !version service timestamps log date service timestamps debug date no service passwordencryption ! hostname r40005 ! interface FastEther0/0 ip address no ip directedbroadcast ip accessgroup 104 in ! interface Ether0/1 no ip address no ip directedbroadcast duplex half ! interface Serial0/2 ip address no ip directedbroadcast physicallayer speed 64000 ! router ospf 1 work area 0 work area 0 ! ip route ip route ip route ip route ! ip accesslist extended 104 permit ip permit ip any deny ip any any ! ip setwancount 1 ! d) 路由器 40006是在汇聚层，配置了 serial 口 IP及速率和以太口 IP，使用 OSPF宣告直连网段，配置静态路由外网和到三层交换机的非直连网段，配置 ACL使 Vlan 300和 Vlan 400之间能够通信，均只能通过路由器访问校园网（ ），而不能访问 Inter。 r40006show run Building configuration... Current configuration: 14 ! !version service timestamps log date service timestamps debug date no service passwordencryption ! hostname r40006 ! interface FastEther0/0 ip address no ip directedbroadcast ip accessgroup 103 in ! interface Ether0/1 no ip address no ip directedbroadcast duplex half ! interface Serial0/2 ip address no ip directedbroadcast ! router ospf 1 work area 0 work area 0 ! ip route ip route ip route ! ip accesslist extended 103 permit ip any permit ip any deny ip any any ! ip setwancount 1 交换机的 配置代码 a) 三层交换机 40007是接入层，划分了 VLAN300和 VLAN400，分别配置了管理 VLAN300和400的 IP，配置了一条通过网关 的默认路由。 s40007show run Current configuration: hostname s40007 ! 15 Vlan 1 vlan 1 ! Vlan 300 vlan 300 ! Vlan 400 vlan 400 ! Interface Ether0/0/1 switchport access vlan 300 ! Interface Ether0/0/2 switchport access vlan 300 ! Interface Ether0/0/3 switchport access vlan 300 ! Interface Ether0/0/4 switchport access vlan 300 ! Interface Ether0/0/5 switchport access vlan 300 ! Interface Ether0/0/6 switchport access vlan 300 ! Interface Ether0/0/7 switchport access vlan 300 ! Interface Ether0/0/8 switchport access vlan 300 ! Interface Ether0/0/9 switchport access vlan 400。 Interface Ether0/0/10 switchport access vlan 400 ! Interface Ether0/0/11 switchport access vlan 400 ! Interface Ether0/0/12 switchport access vlan 400 16 ! Interface Ether0/0/13 switchport access vlan 400 ! Interface Ether0/0/14 switchport access vlan 400 ! Interface Ether0/0/15 switchport access vlan 400 ! Interface Ether0/0/16 switchport access vlan 400 ! Interface Ether0/0/17 ! Interface Ether0/0/18 ! Interface Ether0/0/19 ! Interface Ether0/0/20 ! Interface Ether0/0/21 ! Interface Ether0/0/22 ! Interface Ether0/0/23 ! Interface Ether0/0/24 ! interface Vlan300 interface vlan 300 ip address ! interface Vlan400 interface vlan 400 ip address ! ip route . b) 三层交换机 40008是接入层，划分了 VLAN500和 VLAN600，分别配置了管理 VLAN500和600的 IP，配置了一条通过网关 的默认路由，配置 e0/0/24 和 e0/0/23为 trunk,启动生成树。 s40008show run Current configuration: hostname s40008 17 ! spanningtree spanningtree mode stp ! Vlan 1 vlan 1 ! Vlan 500 vlan 500 ! Vlan 600 vlan 600 ! Interface Ether0/0/1 switchport access vlan 500 ! Interface Ether0。