拓扑 1026.zip

PC 地址配置

PC IP地址 子网掩码 网关
PC_1 192.168.3.1 255.255.255.0 192.168.3.254
Client1 192.168.1.1 255.255.255.0 192.168.1.254
Server1 192.168.2.1 255.255.255.0 192.168.2.254

LSW1

<Huawei>sy
[Huawei]un in e
[Huawei]sysn LSW1
[LSW1]v b 30 12 23
[LSW1]int v30
[LSW1-Vlanif30]ip a 192.168.3.254 24
[LSW1-Vlanif30]int vl 12
[LSW1-Vlanif12]ip a 12.1.1.1 24
[LSW1-Vlanif12]int vl 23
[LSW1-Vlanif23]ip a 23.1.1.1 24
[LSW1-Vlanif23]int g0/0/03
[LSW1-GigabitEthernet0/0/3]port l a
[LSW1-GigabitEthernet0/0/3]port d v 30
[LSW1-GigabitEthernet0/0/3]int g0/0/1
[LSW1-GigabitEthernet0/0/1]port l a
[LSW1-GigabitEthernet0/0/1]port d v 12
[LSW1-GigabitEthernet0/0/1]int g0/0/2
[LSW1-GigabitEthernet0/0/2]port l a
[LSW1-GigabitEthernet0/0/2]port d v 23
[LSW1-GigabitEthernet0/0/2]ospf
[LSW1-ospf-1]a 0
[LSW1-ospf-1-area-0.0.0.0]n 12.1.1.1 0.0.0.0
[LSW1-ospf-1-area-0.0.0.0]n 23.1.1.1 0.0.0.0
[LSW1-ospf-1-area-0.0.0.0]q
[LSW1-ospf-1]i d

AR1

<Huawei>sy
[Huawei]un in e
[Huawei]sysn AR1
[AR1]int g0/0/1
[AR1-GigabitEthernet0/0/1]ip a 12.1.1.254 24
[AR1-GigabitEthernet0/0/1]int g0/0/0
[AR1-GigabitEthernet0/0/0]ip a 192.168.1.254 24
[AR1-GigabitEthernet0/0/0]ospf 
[AR1-ospf-1]a 0
[AR1-ospf-1-area-0.0.0.0]n 12.1.1.254 0.0.0.0
[AR1-ospf-1-area-0.0.0.0]q
[AR1-ospf-1]i d
[AR1-ospf-1]acl 3000
[AR1-acl-adv-3000]rule 5 permit tcp source 192.168.1.1 0 destination 192.168.2.1 0 destination-port eq www
[AR1-acl-adv-3000]rule 10 permit ip source 192.168.1.1 0 destination 192.168.3.0 0.0.0.255
[AR1-acl-adv-3000]rule 15 deny ip source 192.168.1.1 0
[AR1-acl-adv-3000]int g0/0/0
[AR1-GigabitEthernet0/0/0]traffic-filter in a 3000

AR3

<Huawei>sy
[Huawei]un in e
[Huawei]sysn AR3
[AR3]int g0/0/2
[AR3-GigabitEthernet0/0/2]ip a 23.1.1.254 24
[AR3-GigabitEthernet0/0/2]int g0/0/1
[AR3-GigabitEthernet0/0/1]ip a 192.168.2.254 24
[AR3-GigabitEthernet0/0/1]ospf 
[AR3-ospf-1]a 0
[AR3-ospf-1-area-0.0.0.0]n 23.1.1.254 0.0.0.0
[AR3-ospf-1-area-0.0.0.0]q
[AR3-ospf-1]i d

测试web服务

双击Server1 点击服务器信息–> HttpServer –> 选择站点目录 –> 启动服务

选择的站点应包含html文件，可以使用 HBuilder X 建立站点目录

点击 Client1 客户端信息–> httpClient –> 输入服务器地址 –> 点击获取

服务器地址为 192.168.2.1

正常应获取到文件

测试192.168.30.0/24网段

Client1 ping 192.168.3.1 即可，测试应通

测试不允许访问其他网络

Client1 ping 192.168.2.1 应不通