CCNA实验总结（二）——远程登陆

蔚落 2022-04-11 14:39 221阅读 0赞

实验原理图

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQxOTU1NjUz_size_16_color_FFFFFF_t_70][]

实验要求：

p0能登陆r2，不能pingr2、p0不能登陆r1但能ping通r1；p1相反，既

p0 Telnet 192.168.2.2
    
    p0 ICMP 192.168.1.1 192.168.2.1
    
    p1 ICMP 192.168.2.2
    
    p1 Telnet 192.168.1.1 192.168.2.1

实验配置：

Router0路由器：

interface FastEthernet0/0
     ip address 192.168.1.1 255.255.255.0
     ip access-group ww in
    
    interface FastEthernet0/1
     ip address 192.168.2.1 255.255.255.0
    
    ip flow-export version 9
    
    ip access-list standard qq
    access-list 100 permit ip host 192.168.1.2 host 192.168.1.1
    access-list 100 permit ip host 192.168.1.2 host 192.168.2.1
    ip access-list extended ww
     permit tcp host 192.168.1.2 host 192.168.2.2 eq telnet
     permit icmp host 192.168.1.2 host 192.168.1.1
     permit icmp host 192.168.1.2 host 192.168.2.1
     permit tcp host 192.168.1.3 host 192.168.1.1 eq telnet
     permit tcp host 192.168.1.3 host 192.168.2.1 eq telnet
     permit icmp host 192.168.1.3 host 192.168.2.2
    
    line con 0
    line aux 0
    line vty 0 4
     login local

Router1路由器：

username ccna privilege 15 secret 5 $1$mERr$5.a6P4JqbNiMX01usIfka/
    
    interface FastEthernet0/0
     ip address 192.168.2.2 255.255.255.0
     ip access-group ww in
    
    ip route 192.168.1.0 255.255.255.0 192.168.2.1 
    
    
    ip access-list extended ww
     permit tcp host 192.168.1.2 host 192.168.2.2 eq telnet
     permit icmp host 192.168.1.2 host 192.168.1.1
     permit icmp host 192.168.1.2 host 192.168.2.1
     permit tcp host 192.168.1.3 host 192.168.1.1 eq telnet
     permit tcp host 192.168.1.3 host 192.168.2.1 eq telnet
     permit icmp host 192.168.1.3 host 192.168.2.2
    
    line con 0
    line aux 0
    line vty 0 4
     login local

实验结果测试：

PC0：

PC>ping 192.168.1.1
    
    Pinging 192.168.1.1 with 32 bytes of data:
    
    Reply from 192.168.1.1: bytes=32 time=0ms TTL=255
    Reply from 192.168.1.1: bytes=32 time=0ms TTL=255
    Reply from 192.168.1.1: bytes=32 time=0ms TTL=255
    Reply from 192.168.1.1: bytes=32 time=0ms TTL=255
    
    Ping statistics for 192.168.1.1:
        Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
    Approximate round trip times in milli-seconds:
        Minimum = 0ms, Maximum = 0ms, Average = 0ms
    
    PC>ping 192.168.2.1
    
    Pinging 192.168.2.1 with 32 bytes of data:
    
    Reply from 192.168.2.1: bytes=32 time=1ms TTL=255
    Reply from 192.168.2.1: bytes=32 time=1ms TTL=255
    Reply from 192.168.2.1: bytes=32 time=0ms TTL=255
    Reply from 192.168.2.1: bytes=32 time=0ms TTL=255
    
    Ping statistics for 192.168.2.1:
        Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
    Approximate round trip times in milli-seconds:
        Minimum = 0ms, Maximum = 1ms, Average = 0ms
    
    PC>ping 192.168.2.2
    
    Pinging 192.168.2.2 with 32 bytes of data:
    
    Reply from 192.168.1.1: Destination host unreachable.
    Reply from 192.168.1.1: Destination host unreachable.
    Reply from 192.168.1.1: Destination host unreachable.
    Reply from 192.168.1.1: Destination host unreachable.
    
    Ping statistics for 192.168.2.2:
        Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),
    
    PC>telnet 192.168.1.1
    Trying 192.168.1.1 ...
    % Connection timed out; remote host not responding
    PC>telnet 192.168.2.1
    Trying 192.168.2.1 ...
    % Connection timed out; remote host not responding
    
    PC>telnet 192.168.2.2
    Trying 192.168.2.2 ...Open
    
    
    User Access Verification
    
    Username: ccna
    Password: 
    r2#

PC1:

PC>ping 192.168.1.1
    
    Pinging 192.168.1.1 with 32 bytes of data:
    
    Reply from 192.168.1.1: Destination host unreachable.
    Reply from 192.168.1.1: Destination host unreachable.
    Reply from 192.168.1.1: Destination host unreachable.
    Reply from 192.168.1.1: Destination host unreachable.
    
    Ping statistics for 192.168.1.1:
        Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),
    
    PC>ping 192.168.2.1
    
    Pinging 192.168.2.1 with 32 bytes of data:
    
    Reply from 192.168.1.1: Destination host unreachable.
    Reply from 192.168.1.1: Destination host unreachable.
    Reply from 192.168.1.1: Destination host unreachable.
    Reply from 192.168.1.1: Destination host unreachable.
    
    Ping statistics for 192.168.2.1:
        Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),
    
    PC>telnet 192.168.1.1
    Trying 192.168.1.1 ...Open
    
    
    User Access Verification
    
    Username: ccna
    Password: 
    r1#exit
    
    [Connection to 192.168.1.1 closed by foreign host]
    PC>telnet 192.168.2.2
    Trying 192.168.2.2 ...
    % Connection timed out; remote host not responding

实验总结：

在实验过程中需要打开远程登陆的功能，在NP阶段会讲到ssh登录，此实验最重要的是需要运用ACL抓取路由进行路由策略

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQxOTU1NjUz_size_16_color_FFFFFF_t_70]: /images/20220411/ac2fda7b46c74801b4c910e250cf660d.png