Difference between revisions of "AMU HAMMR"

From Teknologisk videncenter
Jump to: navigation, search
m (Router øvelse med nat)
m
 
(5 intermediate revisions by the same user not shown)
Line 11: Line 11:
 
==Subnetting==
 
==Subnetting==
 
[[File:23.1_-_SUBNET_eksempel.pdf| Subnet eksempel]]
 
[[File:23.1_-_SUBNET_eksempel.pdf| Subnet eksempel]]
 +
==VPN introduktion==
 +
[https://mars.merhot.dk/data/pdf/VPN_intro.pdf VPN Introduktion]
 +
 
== Router øvelse med nat==
 
== Router øvelse med nat==
 
=== Del 1 uden Trunking ===
 
=== Del 1 uden Trunking ===
Line 97: Line 100:
 
  switchport mode trunk
 
  switchport mode trunk
 
!
 
!
interface range FastEthernet0/5 - 9
+
interface range FastEthernet0/5 - 10
 
  switchport access vlan 10
 
  switchport access vlan 10
 
  switchport mode access
 
  switchport mode access
Line 109: Line 112:
 
===SOHO Router===
 
===SOHO Router===
 
Følgende ekstra konfiguration af SOHO Routeren er foretaget - udover det i del 1.
 
Følgende ekstra konfiguration af SOHO Routeren er foretaget - udover det i del 1.
 +
 +
*Netværk opbygget i Packet Tracer: [https://mars.merhot.dk/data/netAMU2025.pkt NetAMU2025.pkt]
 
<source lang=bash>
 
<source lang=bash>
 
!
 
!
Line 126: Line 131:
 
ip route 10.0.0.0 255.255.255.0 172.16.0.10
 
ip route 10.0.0.0 255.255.255.0 172.16.0.10
 
ip route 10.0.1.0 255.255.255.0 172.16.0.10
 
ip route 10.0.1.0 255.255.255.0 172.16.0.10
 +
!
 +
access-list 1 permit 172.16.0.0 0.0.0.255
 +
access-list 1 permit 172.16.1.0 0.0.0.255
 +
access-list 1 permit 10.0.0.0 0.0.0.255
 +
access-list 1 permit 10.0.1.0 0.0.0.255
 
</source>
 
</source>
 +
 
===Lag tre switch===
 
===Lag tre switch===
 
<source lang=bash>
 
<source lang=bash>
Line 150: Line 161:
 
  ip address 10.0.1.1 255.255.255.0
 
  ip address 10.0.1.1 255.255.255.0
 
  ip helper-address 172.16.0.1
 
  ip helper-address 172.16.0.1
 +
!
 +
ip route 0.0.0.0 0.0.0.0 172.16.0.1
 
</source>
 
</source>
 +
 
=Links=
 
=Links=
 
*[https://www.netacad.com/ Link til Cisco Netacad]
 
*[https://www.netacad.com/ Link til Cisco Netacad]

Latest revision as of 14:36, 4 September 2025

Materialer anvendt

Uge 1

Agenda

Subnetting

File:23.1 - SUBNET eksempel.pdf

VPN introduktion

VPN Introduktion

Router øvelse med nat

Del 1 uden Trunking

Overordnet plan vi lagde: Router grundkonfig:

  1. fa0/0 - DHCP (Anvend ISP'ens DHCP-server)
  2. Test: show ip int brief, ping 8.8.8.8
  3. fa0/1 - Statisk IP 172.16.0.1/24
  4. Test: show ip int br, ping 172.16.0.1
  5. Konfigurer NAT
  6. Test: ping 8.8.8.8 source 172.16.0.1
  7. Test: show ip nat translations
  8. Konfigurer DHCP på 172.16.0.0/24 scope
  9. Tilslut PC og test den får en ip

Del 2: - VLAN til Teacher og Student

hostname SOHO
!
ip dhcp pool STUDENTS
 import all
 network 172.16.0.0 255.255.255.0
 default-router 172.16.1.1
!
interface GigabitEthernet0/0
 description Outside
 ip address dhcp
 ip nat outside
!
interface GigabitEthernet0/1
 description Inside
 ip address 172.16.0.1 255.255.255.0
 ip nat inside
!
ip nat inside source list 1 interface GigabitEthernet0/0 overload
!
access-list 1 permit 172.16.0.0 0.0.0.255
!

Del 1 med Trunking

Router

hostname SOHO
!
ip dhcp pool STUDENTS
 import all
 network 172.16.0.0 255.255.255.0
 default-router 172.16.0.1
!
ip dhcp pool TEACHER
 import all
 network 172.16.1.0 255.255.255.0
 default-router 172.16.1.1
!
interface GigabitEthernet0/0
 description Outside
 ip address dhcp
 ip nat outside
!
interface GigabitEthernet0/1
 description Inside
 no ip address
!
interface GigabitEthernet0/1.10
 encapsulation dot1Q 10
 ip address 172.16.0.1 255.255.255.0
 ip nat inside
!
interface GigabitEthernet0/1.20
 encapsulation dot1Q 20
 ip address 172.16.1.1 255.255.255.0
 ip nat inside
!
ip nat inside source list 1 interface GigabitEthernet0/0 overload
!
access-list 1 permit 172.16.0.0 0.0.0.255
access-list 1 permit 172.16.1.0 0.0.0.255

Lag 2 switch

hostname Switch

interface FastEthernet0/1
 switchport mode trunk
!
interface range FastEthernet0/5 - 10
 switchport access vlan 10
 switchport mode access
!
interface range FastEthernet0/11 - 19
 switchport access vlan 20
 switchport mode access

Del 2 - med LAG 3 switch - statisk routening

SOHO Router

Følgende ekstra konfiguration af SOHO Routeren er foretaget - udover det i del 1.

!
ip dhcp excluded-address 10.0.1.1 10.0.1.9
ip dhcp excluded-address 10.0.0.1 10.0.0.9
!
ip dhcp pool GUEST
 import all
 network 10.0.0.0 255.255.255.0
 default-router 10.0.0.1
!
ip dhcp pool HACKERS
 import all
 network 10.0.1.0 255.255.255.0
 default-router 10.0.1.1
!
ip route 10.0.0.0 255.255.255.0 172.16.0.10
ip route 10.0.1.0 255.255.255.0 172.16.0.10
!
access-list 1 permit 172.16.0.0 0.0.0.255
access-list 1 permit 172.16.1.0 0.0.0.255 
access-list 1 permit 10.0.0.0 0.0.0.255
access-list 1 permit 10.0.1.0 0.0.0.255

Lag tre switch

ip routing
!
interface range GigabitEthernet0/1 - 4
 switchport mode access
 switchport access vlan 30
!
interface range GigabitEthernet0/5 - 9
 switchport access vlan 40
 switchport mode access
!
interface GigabitEthernet0/10
 no switchport
 ip address 172.16.0.10 255.255.255.0
!
interface Vlan30
 ip address 10.0.0.1 255.255.255.0
 ip helper-address 172.16.0.1
!
interface Vlan40
 ip address 10.0.1.1 255.255.255.0
 ip helper-address 172.16.0.1
!
ip route 0.0.0.0 0.0.0.0 172.16.0.1

Links