2 Router Setting + DHCP + Static NAT


第一部份.

1.進入特權模式

Router>enable

2.進入全局模式

Router#configure

3.<cr>

4.更改路由器名稱

Router(config)#hostname Cisco1841

5.設定加密之特權模式密碼

Cisco1841(config)#enable secret Pentium

6.設定主控台使用者模式之密碼

Cisco1841(config)#line console 0
Cisco1841(config-line)#password Core2Quad
Cisco1841(config-line)#login
Cisco1841(config-line)#exit

7.設定虛擬終端機使用者模式之密碼

Cisco1841(config)#line vty 0 4
Cisco1841(config-line)#password Core2Duo
Cisco1841(config-line)#login
Cisco1841(config-line)#exit

8.設定FastEthernet 0/0

Cisco1841(config)#interface fastEthernet 0/0
Cisco1841(config-if)#ip address92.168.20.1 255.255.255.224
Cisco1841(config-if)#no shutdown
Cisco1841(config-if)#exit

9.設定FastEthernet 0/1

Cisco1841(config)#interface fastEthernet 0/1
Cisco1841(config-if)#ip address 192.168.10.1 255.255.255.224
Cisco1841(config-if)#no shutdown
Cisco1841(config-if)#exit

10.設定Serial 0/0/0

Cisco1841(config)#interface serial 0/0/0
Cisco1841(config-if)#ip address 172.16.100.1.255.255.255.224
Cisco1841(config-if)#no shutdown
Cisco1841(config-if)#exit

11.路由器使用RIP路由協定

Cisco1841(config)#router rip
Cisco1841(config-router)#network 192.168.20.0
Cisco1841(config-router)#network 192.168.10.0
Cisco1841(config-router)#network 172.16.100.0
Cisco1841(config-router)#exit

12.使用ISP端IP設定預設路由

Cisco1841(config)#ip route 0.0.0.0 0.0.0.0 172.16.100.2

13.路由器設定密碼加密保護,將主控台以及虛擬終端機之密碼加密

Cisco1841(config)#service password-encryption

14.將設定儲存回NVRAM中

Cisco1841(config)#do write

第二部份.

1.設定DHCP網段與基本設定

Cisco1841(config)#ip dhcp pool DHCP-1
Cisco1841(dhcp-config)#network 192.168.20.0 255.255.255.224
Cisco1841(dhcp-config)#default-router 192.168.20.1
Cisco1841(dhcp-config)#dns-server 192.168.20.5
Cisco1841(dhcp-config)#exit

2.指定DHCP發送範圍(用遮不要發的範圍方式去限制)

Cisco1841(config)#ip dhcp excluded-address 192.168.20.1 192.168.20.7
Cisco1841(config)#ip dhcp excluded-address 192.168.20.21 192.168.20.30

3.測試電腦是否有領取到

(1)點開PC3(標籤是DHCPClient)

(2)開機(紅色圓圈按下去)

(3)選Desktop

(4)點選Command Prompt

(5)

Packet Tracer PC Command Line 1.0
C:\>ipconfig /renew

(6)顯示畫面結果如下

Packet Tracer PC Command Line 1.0
C:\>ipconfig /renew

	IP Address.......................:192.168.20.8
	Subnet Mask......................:255.255.255.224
	Default Gateway..................:192.168.20.1
	DNS Server.......................:192.168.20.5

C:\>

第三部份.

1.設置左側網段NAT

Cisco1841(config)#ip nat inside source static 192.168.20.2 163.17.20.1

2.設置右側網段NAT

Cisco1841(config)#ip nat inside source static 192.168.10.2 163.17.20.2

3.設置網卡NAT

(1)設置FastEthernet 0/0的NAT

Cisco1841(config)#interface fastEthernet 0/0
Cisco1841(config-if)#ip nat inside

(2)設置FastEthernet 0/1的NAT

Cisco1841(config)#interface fastEthernet 0/1
Cisco1841(config-if)#ip nat inside

(3)設置Serial 0/0/0的NAT

Cisco1841(config)#interface serial 0/0/0
Cisco1841(config-if)#ip nat outside

4.測試ISP端Ping 163.17.20.1 與163.17.20.2

1.開啟ISP端PC-PT(標籤為PC2)

2.打開Command Prompt

3.Ping測試

ping 163.17.20.1 與163.17.20.2(第一個封包Timed out是正常的)

(1)163.17.20.1

C:\>ping 163.17.20.1

(2)163.17.20.2

C:\>ping 163.17.20.2

4.視窗結果如下

Packer Tracer PC Command Line 1.0
C:\>ping 163.17.20.1

Pinging 163.17.20.1 with 32 bytes of data:

Request timed out.
Reply from 163.17.20.1: bytes=32 time=39ms TTL=126
Reply from 163.17.20.1: bytes=32 time=47ms TTL=126
Reply from 163.17.20.1: bytes=32 time=20ms TTL=126

Ping statistics for 163.17.20.1:
	Packets: sent = 4, Received = 3, Lost = 1 (25% loss),
Approximate round trip times in milli-seconds:
	Minimum = 20ms, Maximum = 47ms, Average = 35ms

C:\>ping 163.17.20.2

Pinging 163.17.20.2 with 32 bytes of data:

Request timed out.
Reply from 163.17.20.2: bytes=32 time=21ms TTL=126
Reply from 163.17.20.2: bytes=32 time=21ms TTL=126
Reply from 163.17.20.2: bytes=32 time=22ms TTL=126

Ping statistics for 163.17.20.2:
	Packets: sent = 4, Received = 3, Lost = 1 (25% loss),
Approximate round trip times in milli-seconds:
	Minimum = 21ms, Maximum = 22ms, Average = 21ms

C:\>

結束