实验1

实验环境

实验需求

实施PC1和PC2跨公开网络访问

实验步骤

一. 配置个人计算机1和2的IP地址、子网膜和网关。

2.配置路由器IP

R1 : G0/0/0 IP:192.168.1.254 24
G0/0/1 IP:200.1.22.1 24
R2 : G0/0/0 IP:200.1.23.1 24
G0/0/1 IP:182.168.1.254 24
R3 : G0/0/0 IP:200.1.22.2 24
G0/0/1 IP:200.1.23.2 24
​

3.配置GRE

[R1]interface Tunnel 0/0/1
[R1-Tunnel0/0/1]ip address 1.1.1.1 24
[R1-Tunnel0/0/1]tunnel-protocol gre
[R1-Tunnel0/0/1]source 200.1.22.1
[R1-Tunnel0/0/1]destination 200.1.23.1
R2：
[R2]int Tunnel 0/0/0
[R2-Tunnel0/0/0]ip add 2.2.2.2 24
[R2-Tunnel0/0/0]tunnel-protocol gre
[R2-Tunnel0/0/0]source 200.1.23.1
[R2-Tunnel0/0/0]destination 200.1.22.1
​

4.配置默认路由

[R1]ip route-static 0.0.0.0 0 200.1.22.2
[R1]ip route-static 192.168.1.1 32 Tunnel 0/0/1
[R2]ip route-static 0.0.0.0 0 200.1.23.2
[R2]ip route-static 192.168.1.1 32 Tunnel 0/0/0
​

五. 确认是否连接到PC1和Ping PC2。

PC2 ping PC1

实验2

实验环境

实验需求

实施计算机对计算机网络访问

实验步骤

1.配置ip

2. 配置FW1和FW2IP地址。

[FW1-GigabitEthernet1/0/0]ip address 192.168.1.254 24
[FW1-GigabitEthernet1/0/1]ip address 200.1.13.1 24
[FW2-GigabitEthernet1/0/0]ip address 200.1.23.2 24
[FW2-GigabitEthernet1/0/1]ip address 172.16.1.254 24
[R2-GigabitEthernet0/0/1]ip address 200.1.23.3 24
[R2-GigabitEthernet0/0/0]ip address 200.1.13.3 24
​

三,做一个探子的理由 并包含一个安全的地点。

[FW2]firewall zone trust
[FW2-zone-trust]add int g1/0/1
[FW2]firewall zone untrust
[FW2-zone-untrust]add int g1/0/0
[FW2]int Tunnel 0
[FW2-Tunnel0]ip address 2.2.2.2 24
[FW2-Tunnel0]tunnel-protocol gre
[FW2-Tunnel0]source 200.1.23.2
[FW2-Tunnel0]destination 200.1.13.1
[FW2]firewall zone dmz
[FW2-zone-dmz]add int Tunnel 0
[FW1]firewall zone trust
[FW1-zone-trust]add int g1/0/0
[FW1]firewall zone untrust
[FW1-zone-untrust]add int g1/0/1
[FW1]int Tunnel 1
[FW1-Tunnel1]ip address 1.1.1.1 24
[FW1-Tunnel1]tunnel-protocol gre
[FW1-Tunnel1]source 200.1.13.1
[FW1-Tunnel1]destination 200.1.23.2
​

设定默认和静态路径 。

[FW1]ip route-static 0.0.0.0 0 200.1.13.3
[FW1]ip route-static 172.16.1.1 32 Tunnel 1
[FW2]ip route-static 0.0.0.0 0 200.1.23.3
[FW2]ip route-static 192.168.1.1 32 Tunnel 0
​

5.配置安全策略

[FW2]security-policy
[FW2-policy-security]rule name t-d
[FW2-policy-security-rule-t-d]source-zone trust
[FW2-policy-security-rule-t-d]destination-zone dmz
[FW2-policy-security-rule-t-d]source-address 172.16.1.1 24
[FW2-policy-security-rule-t-d]destination-address 192.168.1.1 24
[FW2-policy-security-rule-t-d]action permit
​

安全区域u-l
[FW2-policy-security]rule name u-l
[FW2-policy-security-rule-u-l]source-zone untrust
[FW2-policy-security-rule-u-l]destination-zone local
[FW2-policy-security-rule-u-l]source-address 200.1.13.1 32
[FW2-policy-security-rule-u-l]destination-address 200.1.23.2 32
[FW2-policy-security-rule-u-l]service gre
[FW2-policy-security-rule-u-l]action permit
​

[FW1]security-policy
[FW1-policy-security]rule name d-t
[FW1-policy-security-rule-d-t]source-zone dmz
[FW1-policy-security-rule-d-t]destination-zone trust
[FW1-policy-security-rule-d-t]source-address 172.16.1.1 24
[FW1-policy-security-rule-d-t]destination-address 192.168.1.1 24
[FW1-policy-security-rule-d-t]action permit
​

安全区域u-l
[FW1-policy-security]rule name u-l
[FW1-policy-security-rule-u-l]source-zone untrust
[FW1-policy-security-rule-u-l]destination-zone local
[FW1-policy-security-rule-u-l]source-address 200.1.23.2 32
[FW1-policy-security-rule-u-l]destination-address 200.1.13.1 32
[FW1-policy-security-rule-u-l]service gre
[FW1-policy-security-rule-u-l]action permit
​

六. 指挥中心检查


本文由 在线网速测试 整理编辑，转载请注明出处，原文链接：https://www.wangsu123.cn/news/14941.html。