DHCP与DNS与NAT配置–华为设备–ENSP模拟器–内外访问外网

实验拓扑

获取地址
项目连接
实验步骤
SW1
配置的接口
配置的DHCP
配置缺省路由

 interface GigabitEthernet0/0/1 port link-type access port default vlan <span class="token number">10</span>  interface GigabitEthernet0/0/2 port link-type trunk port trunk allow-pass vlan <span class="token number">2</span> to <span class="token number">4094</span>  DHCP配置在交换机SW2上 <span class="token number">1</span>.dhcp <span class="token builtin class-name">enable</span> <span class="token number">2</span>.ip pool <span class="token number">1</span> network <span class="token number">192.168</span>.1.0 mask <span class="token number">255.255</span>.255.0 dns-list <span class="token number">192.168</span>.4.1 gateway-list <span class="token number">192.168</span>.1.254    <span class="token number">3</span>.vlan batch <span class="token number">10</span> <span class="token number">20</span> <span class="token number">4</span>.int vlanif <span class="token number">10</span> <span class="token function">ip</span> address <span class="token number">192.168</span>.1.254 <span class="token number">255.255</span>.255.0 dhcp <span class="token keyword">select</span> global <span class="token number">5</span>.display <span class="token function">ip</span> pool 
 interface GigabitEthernet0/0/1 port link-type access port default vlan <span class="token number">10</span>  interface GigabitEthernet0/0/2 port link-type trunk port trunk allow-pass vlan <span class="token number">2</span> to <span class="token number">4094</span>  DHCP配置在交换机SW2上 <span class="token number">1</span>.dhcp <span class="token builtin class-name">enable</span> <span class="token number">2</span>.ip pool <span class="token number">1</span> network <span class="token number">192.168</span>.1.0 mask <span class="token number">255.255</span>.255.0 dns-list <span class="token number">192.168</span>.4.1 gateway-list <span class="token number">192.168</span>.1.254    <span class="token number">3</span>.vlan batch <span class="token number">10</span> <span class="token number">20</span> <span class="token number">4</span>.int vlanif <span class="token number">10</span> <span class="token function">ip</span> address <span class="token number">192.168</span>.1.254 <span class="token number">255.255</span>.255.0 dhcp <span class="token keyword">select</span> global <span class="token number">5</span>.display <span class="token function">ip</span> pool 
 interface GigabitEthernet0/0/1 port link-type access port default vlan 10  interface GigabitEthernet0/0/2 port link-type trunk port trunk allow-pass vlan 2 to 4094  DHCP配置在交换机SW2上 1.dhcp enable 2.ip pool 1 network 192.168.1.0 mask 255.255.255.0 dns-list 192.168.4.1 gateway-list 192.168.1.254    3.vlan batch 10 20 4.int vlanif 10 ip address 192.168.1.254 255.255.255.0 dhcp select global 5.display ip pool 

AR1
配置接口
配置nat
配置地址组
配置acl
进入端口使用acl
配置缺省路由
配置静态路由

 acl number <span class="token number">2000</span> rule <span class="token number">5</span> permit <span class="token builtin class-name">source</span> <span class="token number">192.168</span>.0.0 <span class="token number">0.0</span>.255.255 nat address-group <span class="token number">1</span> <span class="token number">202.1</span>.1.3 <span class="token number">202.1</span>.1.5  interface GigabitEthernet0/0/0 <span class="token function">ip</span> address <span class="token number">192.168</span>.3.2 <span class="token number">255.255</span>.255.0  interface GigabitEthernet0/0/1 <span class="token function">ip</span> address <span class="token number">202.1</span>.1.1 <span class="token number">255.255</span>.255.0 nat outbound <span class="token number">2000</span> address-group <span class="token number">1</span>  <span class="token function">ip</span> route <span class="token number">0.0</span>.0.0 <span class="token number">0.0</span>.0.0 <span class="token number">202.1</span>.1.2 <span class="token function">ip</span> route <span class="token number">192.168</span>.0.0 <span class="token number">16</span> <span class="token number">192.168</span>.3.1 SW2  interface Vlanif1  interface Vlanif10 <span class="token function">ip</span> address <span class="token number">192.168</span>.1.254 <span class="token number">255.255</span>.255.0 dhcp <span class="token keyword">select</span> global  interface Vlanif20 <span class="token function">ip</span> address <span class="token number">192.168</span>.2.254 <span class="token number">255.255</span>.255.0 dhcp <span class="token keyword">select</span> global  interface Vlanif30 <span class="token function">ip</span> address <span class="token number">192.168</span>.3.1 <span class="token number">255.255</span>.255.0  interface Vlanif40 <span class="token function">ip</span> address <span class="token number">192.168</span>.4.254 <span class="token number">255.255</span>.255.0  interface MEth0/0/1  interface GigabitEthernet0/0/1 port link-type trunk port trunk allow-pass vlan <span class="token number">2</span> to <span class="token number">4094</span>  interface GigabitEthernet0/0/2 port link-type access port default vlan <span class="token number">30</span>  interface GigabitEthernet0/0/3 port link-type trunk port trunk allow-pass vlan <span class="token number">2</span> to <span class="token number">4094</span>  interface GigabitEthernet0/0/4 port link-type access port default vlan <span class="token number">40</span>  <span class="token function">ip</span> route-static <span class="token number">0.0</span>.0.0 <span class="token number">0.0</span>.0.0 <span class="token number">192.168</span>.3.2 
 acl number <span class="token number">2000</span> rule <span class="token number">5</span> permit <span class="token builtin class-name">source</span> <span class="token number">192.168</span>.0.0 <span class="token number">0.0</span>.255.255 nat address-group <span class="token number">1</span> <span class="token number">202.1</span>.1.3 <span class="token number">202.1</span>.1.5  interface GigabitEthernet0/0/0 <span class="token function">ip</span> address <span class="token number">192.168</span>.3.2 <span class="token number">255.255</span>.255.0  interface GigabitEthernet0/0/1 <span class="token function">ip</span> address <span class="token number">202.1</span>.1.1 <span class="token number">255.255</span>.255.0 nat outbound <span class="token number">2000</span> address-group <span class="token number">1</span>  <span class="token function">ip</span> route <span class="token number">0.0</span>.0.0 <span class="token number">0.0</span>.0.0 <span class="token number">202.1</span>.1.2 <span class="token function">ip</span> route <span class="token number">192.168</span>.0.0 <span class="token number">16</span> <span class="token number">192.168</span>.3.1 SW2  interface Vlanif1  interface Vlanif10 <span class="token function">ip</span> address <span class="token number">192.168</span>.1.254 <span class="token number">255.255</span>.255.0 dhcp <span class="token keyword">select</span> global  interface Vlanif20 <span class="token function">ip</span> address <span class="token number">192.168</span>.2.254 <span class="token number">255.255</span>.255.0 dhcp <span class="token keyword">select</span> global  interface Vlanif30 <span class="token function">ip</span> address <span class="token number">192.168</span>.3.1 <span class="token number">255.255</span>.255.0  interface Vlanif40 <span class="token function">ip</span> address <span class="token number">192.168</span>.4.254 <span class="token number">255.255</span>.255.0  interface MEth0/0/1  interface GigabitEthernet0/0/1 port link-type trunk port trunk allow-pass vlan <span class="token number">2</span> to <span class="token number">4094</span>  interface GigabitEthernet0/0/2 port link-type access port default vlan <span class="token number">30</span>  interface GigabitEthernet0/0/3 port link-type trunk port trunk allow-pass vlan <span class="token number">2</span> to <span class="token number">4094</span>  interface GigabitEthernet0/0/4 port link-type access port default vlan <span class="token number">40</span>  <span class="token function">ip</span> route-static <span class="token number">0.0</span>.0.0 <span class="token number">0.0</span>.0.0 <span class="token number">192.168</span>.3.2 
 acl number 2000 rule 5 permit source 192.168.0.0 0.0.255.255 nat address-group 1 202.1.1.3 202.1.1.5  interface GigabitEthernet0/0/0 ip address 192.168.3.2 255.255.255.0  interface GigabitEthernet0/0/1 ip address 202.1.1.1 255.255.255.0 nat outbound 2000 address-group 1  ip route 0.0.0.0 0.0.0.0 202.1.1.2 ip route 192.168.0.0 16 192.168.3.1 SW2  interface Vlanif1  interface Vlanif10 ip address 192.168.1.254 255.255.255.0 dhcp select global  interface Vlanif20 ip address 192.168.2.254 255.255.255.0 dhcp select global  interface Vlanif30 ip address 192.168.3.1 255.255.255.0  interface Vlanif40 ip address 192.168.4.254 255.255.255.0  interface MEth0/0/1  interface GigabitEthernet0/0/1 port link-type trunk port trunk allow-pass vlan 2 to 4094  interface GigabitEthernet0/0/2 port link-type access port default vlan 30  interface GigabitEthernet0/0/3 port link-type trunk port trunk allow-pass vlan 2 to 4094  interface GigabitEthernet0/0/4 port link-type access port default vlan 40  ip route-static 0.0.0.0 0.0.0.0 192.168.3.2 

SW4

interface Vlanif10 <span class="token function">ip</span> address <span class="token number">202.1</span>.1.2 <span class="token number">255.255</span>.255.0  interface Vlanif20 <span class="token function">ip</span> address <span class="token number">66.66</span>.66.254 <span class="token number">255.0</span>.0.0  interface MEth0/0/1  interface GigabitEthernet0/0/1 port link-type access port default vlan <span class="token number">10</span>  interface GigabitEthernet0/0/2 port link-type access port default vlan <span class="token number">20</span>  <span class="token function">ip</span> route-static <span class="token number">202.1</span>.1.0 <span class="token number">24</span> <span class="token number">66.66</span>.66.254 
interface Vlanif10 <span class="token function">ip</span> address <span class="token number">202.1</span>.1.2 <span class="token number">255.255</span>.255.0  interface Vlanif20 <span class="token function">ip</span> address <span class="token number">66.66</span>.66.254 <span class="token number">255.0</span>.0.0  interface MEth0/0/1  interface GigabitEthernet0/0/1 port link-type access port default vlan <span class="token number">10</span>  interface GigabitEthernet0/0/2 port link-type access port default vlan <span class="token number">20</span>  <span class="token function">ip</span> route-static <span class="token number">202.1</span>.1.0 <span class="token number">24</span> <span class="token number">66.66</span>.66.254 
interface Vlanif10 ip address 202.1.1.2 255.255.255.0  interface Vlanif20 ip address 66.66.66.254 255.0.0.0  interface MEth0/0/1  interface GigabitEthernet0/0/1 port link-type access port default vlan 10  interface GigabitEthernet0/0/2 port link-type access port default vlan 20  ip route-static 202.1.1.0 24 66.66.66.254 

sw3

interface GigabitEthernet0/0/1 port link-type access port default vlan <span class="token number">20</span>  interface GigabitEthernet0/0/2 port link-type trunk port trunk allow-pass vlan <span class="token number">2</span> to <span class="token number">4094</span>  
interface GigabitEthernet0/0/1 port link-type access port default vlan <span class="token number">20</span>  interface GigabitEthernet0/0/2 port link-type trunk port trunk allow-pass vlan <span class="token number">2</span> to <span class="token number">4094</span>  
interface GigabitEthernet0/0/1 port link-type access port default vlan 20  interface GigabitEthernet0/0/2 port link-type trunk port trunk allow-pass vlan 2 to 4094  

DNS配置

DHCP 抓包

pc5 ping www.baicu.com

原文链接：https://blog.csdn.net/weixin_45640148/article/details/124871759