网络拓扑：
功能要求：
1.生产PC可以访问公共服务区服务器
2.生产PC可以访问生产服务器
3.办公PC可以访问公共服务区服务器
4.办公PC可以访问ISP服务器
5.运维人员可管理所有设备,仅10.10.11.1可管理所有设备
配置文件：
办公网络
Building configuration...
Current configuration : 1479 bytes
!
version 15.1
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname R1_BG
!
enable password qwer
!
username qwer password 0 qwer
!
license udi pid CISCO2911/K9 sn FTX1524J4DQ
!
spanning-tree mode pvst
!
interface Loopback0
?ip address 6.6.6.6 255.255.255.0
!
interface GigabitEthernet0/0
?ip address 100.100.100.254 255.255.255.0
?duplex auto
?speed auto
!
interface GigabitEthernet0/1
?ip address 10.10.17.1 255.255.255.0
?duplex auto
?speed auto
!
interface GigabitEthernet0/2
?ip address 10.10.16.2 255.255.255.0
?duplex auto
?speed auto
!
interface FastEthernet0/0/0
?switchport trunk allowed vlan 1
?switchport mode trunk
!
interface FastEthernet0/0/1
?switchport mode access
?shutdown
!
interface FastEthernet0/0/2
?switchport mode access
?shutdown
!
interface FastEthernet0/0/3
?switchport mode access
?shutdown
!
interface Vlan1
?ip address 114.114.114.254 255.255.255.0
!
router ospf 100
?router-id 6.6.6.6
?log-adjacency-changes
?redistribute static subnets
?network 6.6.6.6 0.0.0.0 area 0
?network 10.10.17.0 0.0.0.255 area 0
?network 100.100.100.0 0.0.0.255 area 0
?network 114.114.114.0 0.0.0.255 area 0
!
ip classless
ip route 10.10.8.0 255.255.255.0 10.10.16.1
ip route 10.10.15.0 255.255.255.0 10.10.16.1
!
access-list 1 permit host 10.10.11.1
!
line con 0
!
line aux 0
!
line vty 0 4
?access-class 1 in
?password qwer
?login local
!
End
Building configuration...
Current configuration : 868 bytes
!
version 12.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname R2_BG
!
enable password qwer
!
username qwer password 0 qwer
!
spanning-tree mode pvst
!
interface Loopback0
?ip address 5.5.5.5 255.255.255.255
!
interface FastEthernet0/0
?ip address 10.10.18.1 255.255.255.0
?duplex auto
?speed auto
!
interface FastEthernet0/1
?ip address 10.10.17.2 255.255.255.0
?duplex auto
?speed auto
!
interface Vlan1
?no ip address
?shutdown
!
router ospf 100
?router-id 5.5.5.5
?log-adjacency-changes
?network 5.5.5.5 0.0.0.0 area 0
?network 10.10.17.0 0.0.0.255 area 0
?network 10.10.18.0 0.0.0.255 area 0
!
ip classless
!
!
access-list 1 permit host 10.10.11.1
!
line con 0
!
line aux 0
!
line vty 0 4
?access-class 1 in
?password qwer
?login local
!
End
Building configuration...
Current configuration : 868 bytes
!
version 12.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname R3_BG
!
enable password qwer
!
username qwer password 0 qwer
!
spanning-tree mode pvst
!
interface Loopback0
?ip address 4.4.4.4 255.255.255.0
!
interface FastEthernet0/0
?ip address 10.10.18.2 255.255.255.0
?duplex auto
?speed auto
!
interface FastEthernet0/1
?ip address 10.10.11.254 255.255.255.0
?duplex auto
?speed auto
!
interface Vlan1
?no ip address
?shutdown
!
router ospf 100
?router-id 4.4.4.4
?log-adjacency-changes
?network 4.4.4.4 0.0.0.0 area 0
?network 10.10.18.0 0.0.0.255 area 0
?network 10.10.11.0 0.0.0.255 area 0
!
ip classless
!
!
access-list 1 permit host 10.10.11.1
!
line con 0
!
line aux 0
!
line vty 0 4
?access-class 1 in
?password qwer
?login local
!
End
生产网络
Building configuration...
Current configuration : 868 bytes
!
version 12.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname R3_SC
!
enable password qwer
!
username qwer password 0 qwer
!
spanning-tree mode pvst
!
interface Loopback0
?ip address 1.1.1.1 255.255.255.255
!
interface FastEthernet0/0
?ip address 10.10.12.2 255.255.255.0
?duplex auto
?speed auto
!
interface FastEthernet0/1
?ip address 10.10.9.254 255.255.255.0
?duplex auto
?speed auto
!
interface Vlan1
?no ip address
?shutdown
!
router ospf 100
?router-id 1.1.1.1
?log-adjacency-changes
?network 1.1.1.1 0.0.0.0 area 0
?network 10.10.9.0 0.0.0.255 area 0
?network 10.10.12.0 0.0.0.255 area 0
!
ip classless
!
access-list 1 permit host 10.10.15.2
!
line con 0
!
line aux 0
!
line vty 0 4
?access-class 1 in
?password qwer
?login local
!
End
Building configuration...
Current configuration : 1386 bytes
!
version 15.1
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname R1_SC
!
enable password qwer
!
username qwer password 0 qwer
!
license udi pid CISCO2911/K9 sn FTX1524R4W1
!
spanning-tree mode pvst
!
interface Loopback0
?ip address 3.3.3.3 255.255.255.255
!
interface GigabitEthernet0/0
?ip address 10.10.13.1 255.255.255.0
?duplex auto
?speed auto
!
interface GigabitEthernet0/1
?ip address 10.10.14.2 255.255.255.0
?duplex auto
?speed auto
!
interface GigabitEthernet0/2
?ip address 10.10.10.254 255.255.255.0
?duplex auto
?speed auto
!
interface FastEthernet0/0/0
?switchport mode access
!
interface FastEthernet0/0/1
?switchport mode access
?shutdown
!
interface FastEthernet0/0/2
?switchport mode access
?shutdown
!
interface FastEthernet0/0/3
?switchport mode access
?shutdown
!
interface Vlan1
?no ip address
?shutdown
!
router ospf 100
?router-id 3.3.3.3
?log-adjacency-changes
?redistribute static subnets
?network 3.3.3.3 0.0.0.0 area 0
?network 10.10.13.0 0.0.0.255 area 0
?network 10.10.10.0 0.0.0.255 area 0
!
ip classless
ip route 10.10.8.0 255.255.255.0 10.10.14.1
ip route 10.10.15.0 255.255.255.0 10.10.14.1
!
access-list 1 permit host 10.10.15.2
!
line con 0
!
line aux 0
!
line vty 0 4
?access-class 1 in
?password qwer
?login local
!
End
Building configuration...
Current configuration : 868 bytes
!
version 12.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname R2_SC
!
enable password qwer
!
username qwer password 0 qwer
!
spanning-tree mode pvst
!
interface Loopback0
?ip address 2.2.2.2 255.255.255.255
!
interface FastEthernet0/0
?ip address 10.10.12.1 255.255.255.0
?duplex auto
?speed auto
!
interface FastEthernet0/1
?ip address 10.10.13.2 255.255.255.0
?duplex auto
?speed auto
!
interface Vlan1
?no ip address
?shutdown
!
router ospf 100
?router-id 2.2.2.2
?log-adjacency-changes
?network 2.2.2.2 0.0.0.0 area 0
?network 10.10.13.0 0.0.0.255 area 0
?network 10.10.12.0 0.0.0.255 area 0
!
ip classless
!
!
access-list 1 permit host 10.10.15.2
!
line con 0
!
line aux 0
!
line vty 0 4
?access-class 1 in
?password qwer
?login local
!
End
公共服务网络
Building configuration...
Current configuration : 1089 bytes
!
version 15.1
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname R1_GGFW
!
enable password qwer
!
username qwer password 0 qwer
!
license udi pid CISCO2911/K9 sn FTX15245B55
!
spanning-tree mode pvst
!
interface GigabitEthernet0/0
?ip address 10.10.15.2 255.255.255.0
?duplex auto
?speed auto
!
interface GigabitEthernet0/1
?ip address 10.10.8.254 255.255.255.0
?duplex auto
?speed auto
!
interface GigabitEthernet0/2
?ip address 10.10.16.1 255.255.255.0
?duplex auto
?speed auto
!
interface FastEthernet0/0/0
?switchport mode access
?shutdown
!
interface FastEthernet0/0/1
?switchport mode access
?shutdown
!
interface FastEthernet0/0/2
?switchport mode access
?shutdown
!
interface FastEthernet0/0/3
?switchport mode access
?shutdown
!
interface Vlan1
?no ip address
?shutdown
!
ip classless
ip route 0.0.0.0 0.0.0.0 10.10.15.1
!
access-list 1 permit host 10.10.11.1
!
line con 0
!
line aux 0
!
line vty 0 4
?access-class 1 in
?password qwer
?login local
!
End
Building configuration...
Current configuration : 1115 bytes
!
version 15.1
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname R2_GGFW
!
enable password qwer
!
username qwer password 0 qwer
!
license udi pid CISCO2911/K9 sn FTX1524L8T8
!
spanning-tree mode pvst
!
interface GigabitEthernet0/0
?ip address 10.10.15.1 255.255.255.0
?duplex auto
?speed auto
!
interface GigabitEthernet0/1
?ip address 10.10.14.1 255.255.255.0
?duplex auto
?speed auto
!
interface GigabitEthernet0/2
?ip address 10.10.16.1 255.255.255.0
?duplex auto
?speed auto
!
interface Vlan1
?no ip address
?shutdown
!
ip classless
ip route 10.10.8.0 255.255.255.0 10.10.15.2
ip route 10.10.9.0 255.255.255.0 10.10.14.2
ip route 10.10.11.0 255.255.255.0 10.10.16.2
ip route 10.10.12.0 255.255.255.0 10.10.14.2
ip route 10.10.18.0 255.255.255.0 10.10.16.2
ip route 10.10.13.0 255.255.255.0 10.10.14.2
ip route 10.10.17.0 255.255.255.0 10.10.16.2
!
access-list 1 permit host 10.10.11.1
!
line con 0
!
line aux 0
!
line vty 0 4
?access-class 1 in
?password qwer
?login local
!
End
ISP
Building configuration...
Current configuration : 1291 bytes
!
version 12.2
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname Switch
!
enable password qwer
!
username qwer privilege 1 password 0 qwer
!
spanning-tree mode pvst
!
interface FastEthernet0/1
?switchport trunk allowed vlan 1
?switchport mode trunk
!
interface FastEthernet0/2
!
interface FastEthernet0/3
!
interface FastEthernet0/4
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
!
interface GigabitEthernet1/1
!
interface GigabitEthernet1/2
!
interface Vlan1
?ip address 114.114.114.253 255.255.255.0
!
ip default-gateway 114.114.114.254
!
access-list 1 permit host 10.10.11.1
line con 0
!
line vty 0 4
?access-class 1 in
?password qwer
?login local
line vty 5 15
?login
!
End
功能验证：
?