{"id":99708,"date":"2026-09-03T05:48:50","date_gmt":"2026-09-02T21:48:50","guid":{"rendered":"https:\/\/www.wsisp.com\/helps\/99708.html"},"modified":"2026-09-03T05:48:50","modified_gmt":"2026-09-02T21:48:50","slug":"%e4%bc%81%e4%b8%9a%e5%9b%ad%e5%8c%ba%e7%bd%91%e7%bb%9c%e8%ae%be%e8%ae%a1%e4%b8%8e%e5%ae%9e%e7%8e%b0","status":"publish","type":"post","link":"https:\/\/www.wsisp.com\/helps\/99708.html","title":{"rendered":"\u4f01\u4e1a\u56ed\u533a\u7f51\u7edc\u8bbe\u8ba1\u4e0e\u5b9e\u73b0"},"content":{"rendered":"

\u4f01\u4e1a\u56ed\u533a\u7f51\u7edc\u8bbe\u8ba1\u4e0e\u5b9e\u73b0<\/h3>\n

A<\/span>.<\/span>\u9879\u76ee\u63cf\u8ff0\u4e0e\u9700\u6c42<\/p>\n

\u67d0\u516c\u53f8 \u8058\u8bf7\u4f60\u4e3a\u5176\u4f4d\u4e8e\u514b\u62c9\u79d1\u592b\u7684\u65b0\u603b\u90e8\u642d\u5efa\u4e00\u4e2a LAN<\/span>\u3002\u4ee5\u4e0b\u662f\u5728\u65b0\u697c\u5b87\u4e2d\u90e8\u7f72\u8be5\u7f51\u7edc\u7684\u9700\u6c42\u3002
\n 1.<\/span>\u4f7f\u7528 Cisco Packet Tracer \u5b9e\u73b0\u8be5\u89e3\u51b3\u65b9\u6848\u3002
\n 2.<\/span>\u516c\u53f8\u5206\u914d\u7684\u7f51\u7edc\u5730\u5740\u4e3a 192.168<\/span>.1<\/span>.0<\/span>\/<\/span>20<\/span>\u3002
\n 3.<\/span>\u8fd9\u680b 4<\/span> \u5c42\u697c\u7684\u6bcf\u4e00\u5c42\u90fd\u6709\u4e0d\u540c\u90e8\u95e8\u529e\u516c\u3002\u6bcf\u4e2a\u90e8\u95e8\u5c06\u5212\u5206\u5230\u4e0d\u540c\u7684 VLAN<\/span> \u548c\u4e0d\u540c\u7684\u5b50\u7f51\u3002
\n 4.<\/span>\u4e09\u697c\u5c06\u90e8\u7f72\u4e00\u4e2a\u65e0\u7ebf\u63a5\u5165\u70b9，\u6700\u591a\u53ef\u63a5\u5165 1000<\/span> \u53f0\u8bbe\u5907\u3002\u5404\u697c\u5c42\u548c\u90e8\u95e8\u7684\u8be6\u7ec6\u4fe1\u606f\u5982\u4e0b\u3002
\n \u7b2c 1<\/span> \u5c42：
\n \u884c\u653f\u4e0e\u4eba\u529b\u8d44\u6e90\u90e8：\u9700\u8981 90<\/span> \u53f0\u8bbe\u5907
\n \u9500\u552e\u4e0e\u5e02\u573a\u90e8：\u9700\u8981 200<\/span> \u53f0\u8bbe\u5907<\/p>\n

\u7b2c 2<\/span> \u5c42：
\n \u8d22\u52a1\u90e8：\u9700\u8981 80<\/span> \u53f0\u8bbe\u5907
\n \u516c\u5171\u5173\u7cfb\u90e8：\u9700\u8981 100<\/span> \u53f0\u8bbe\u5907<\/p>\n

\u7b2c 3<\/span> \u5c42：
\n IT<\/span> \u4e0e\u901a\u4fe1\u90e8：\u9700\u8981 200<\/span> \u53f0\u8bbe\u5907
\n \u65e0\u7ebf\u63a5\u5165\u70b9：\u6700\u591a\u5e94\u8fde\u63a5 1000<\/span> \u53f0\u8bbe\u5907<\/p>\n

\u7b2c 4<\/span> \u5c42：
\n \u670d\u52a1\u5668\u673a\u623f：\u9700\u8981 20<\/span> \u53f0\u8bbe\u5907<\/p>\n

5.<\/span>\u5e94\u90e8\u7f72\u4e00\u53f0\u8fde\u63a5\u5230 ISP<\/span> \u7684\u6838\u5fc3\u8def\u7531\u5668，\u5e76\u5c06\u4e24\u53f0\u4e09\u5c42\u4ea4\u6362\u673a\u8fde\u63a5\u5230\u8be5\u6838\u5fc3\u8def\u7531\u5668\u3002
\n \u6838\u5fc3\u8def\u7531\u5668\u4e0e ISP<\/span> \u4e4b\u95f4\u7684\u7f51\u7edc\u5730\u5740：193.168<\/span>.16<\/span>.0<\/span>\/<\/span>30<\/span>
\n \u4e09\u5c42\u4ea4\u6362\u673a S1<\/span> \u4e0e\u6838\u5fc3\u8def\u7531\u5668\u4e4b\u95f4\u7684\u7f51\u7edc\u5730\u5740：192.168<\/span>.19<\/span>.164<\/span>\/<\/span>30<\/span>
\n \u4e09\u5c42\u4ea4\u6362\u673a S2<\/span> \u4e0e\u6838\u5fc3\u8def\u7531\u5668\u4e4b\u95f4\u7684\u7f51\u7edc\u5730\u5740：192.168<\/span>.19<\/span>.168<\/span>\/<\/span>30<\/span><\/p>\n

6.<\/span>\u6240\u6709\u90e8\u95e8\u7684\u8bbe\u5907\u90fd\u9700\u8981\u901a\u8fc7\u5bf9\u5e94\u4e09\u5c42\u4ea4\u6362\u673a\u4e0a\u914d\u7f6e\u7684 VLAN<\/span> \u95f4\u8def\u7531\u5b9e\u73b0\u76f8\u4e92\u901a\u4fe1\u3002
\n 7.<\/span>\u4e09\u5c42\u4ea4\u6362\u673a\u5e94\u540c\u65f6\u627f\u62c5\u8def\u7531\u8f6c\u53d1\u548c\u4e8c\u5c42\u4ea4\u6362\u529f\u80fd\u3002
\n 8.<\/span>\u7f51\u7edc\u4e2d\u7684\u6240\u6709\u7ec8\u7aef\u8bbe\u5907\u5e94\u4ece\u4f4d\u4e8e\u670d\u52a1\u5668\u673a\u623f\u7684 DHCP<\/span> \u670d\u52a1\u5668\u52a8\u6001\u83b7\u53d6 IP<\/span> \u5730\u5740\u3002
\n 9.<\/span>\u670d\u52a1\u5668\u673a\u623f\u4e2d\u7684\u8bbe\u5907\u5e94\u91c7\u7528\u9759\u6001\u65b9\u5f0f\u5206\u914d IP<\/span> \u5730\u5740\u3002
\n 10.<\/span>\u4f7f\u7528 OSPF<\/span> \u4f5c\u4e3a\u8def\u7531\u534f\u8bae，\u5728\u8def\u7531\u5668\u4e0e\u4e09\u5c42\u4ea4\u6362\u673a\u4e4b\u95f4\u901a\u544a\u8def\u7531\u3002
\n 11.<\/span>\u5728\u6838\u5fc3\u8def\u7531\u5668\u4e0a\u914d\u7f6e NAT<\/span>\u3002<\/p>\n

B<\/span>.<\/span>\u5b50\u7f51\u5212\u5206<\/p>\n

\u57fa\u7840\u7f51\u7edc：192.168<\/span>.16<\/span>.0<\/span>\/<\/span>20<\/span>
\n 11000000.10101000<\/span>.00010000<\/span>.00000000<\/span> \/<\/span> 11111111.11111111<\/span>.1111<\/span> 0000.00000000<\/span><\/p>\n

\u884c\u653f\u4e0e\u4eba\u529b\u8d44\u6e90\u90e8
\n \u7f51\u7edc\u5730\u5740：192.168<\/span>.16<\/span>.0<\/span>\/<\/span>25<\/span>
\n \u5e7f\u64ad\u5730\u5740：192.168<\/span>.16<\/span>.127<\/span>
\n \u6240\u9700\u8bbe\u5907\u6570：90<\/span>
\n \u4e3a\u4e3b\u673a\u5206\u914d\u7684\u53ef\u7528 IP<\/span> \u5730\u5740\u6570：126<\/span><\/p>\n

\u8d22\u52a1\u90e8
\n \u7f51\u7edc\u5730\u5740：192.168<\/span>.16<\/span>.128<\/span>\/<\/span>25<\/span>
\n \u5e7f\u64ad\u5730\u5740：192.168<\/span>.16<\/span>.255<\/span>
\n \u6240\u9700\u8bbe\u5907\u6570：90<\/span>
\n \u4e3a\u4e3b\u673a\u5206\u914d\u7684\u53ef\u7528 IP<\/span> \u5730\u5740\u6570：126<\/span><\/p>\n

\u9500\u552e\u4e0e\u5e02\u573a\u90e8
\n \u7f51\u7edc\u5730\u5740：192.168<\/span>.17<\/span>.0<\/span>\/<\/span>24<\/span>
\n \u5e7f\u64ad\u5730\u5740：192.168<\/span>.17<\/span>.255<\/span>
\n \u6240\u9700\u8bbe\u5907\u6570：200<\/span>
\n \u4e3a\u4e3b\u673a\u5206\u914d\u7684\u53ef\u7528 IP<\/span> \u5730\u5740\u6570：254<\/span><\/p>\n

IT<\/span> \u4e0e\u901a\u4fe1\u90e8
\n \u7f51\u7edc\u5730\u5740：192.168<\/span>.18<\/span>.0<\/span>\/<\/span>24<\/span>
\n \u5e7f\u64ad\u5730\u5740：192.168<\/span>.18<\/span>.255<\/span>
\n \u6240\u9700\u8bbe\u5907\u6570：200<\/span>
\n \u4e3a\u4e3b\u673a\u5206\u914d\u7684\u53ef\u7528 IP<\/span> \u5730\u5740\u6570：254<\/span><\/p>\n

\u516c\u5171\u5173\u7cfb\u90e8
\n \u7f51\u7edc\u5730\u5740：192.168<\/span>.19<\/span>.0<\/span>\/<\/span>25<\/span>
\n \u5e7f\u64ad\u5730\u5740：192.168<\/span>.19<\/span>.127<\/span>
\n \u6240\u9700\u8bbe\u5907\u6570：90<\/span>
\n \u4e3a\u4e3b\u673a\u5206\u914d\u7684\u53ef\u7528 IP<\/span> \u5730\u5740\u6570：126<\/span><\/p>\n

\u670d\u52a1\u5668\u673a\u623f
\n \u7f51\u7edc\u5730\u5740：192.168<\/span>.19<\/span>.128<\/span>\/<\/span>27<\/span>
\n \u5e7f\u64ad\u5730\u5740：192.168<\/span>.19<\/span>.159<\/span>
\n \u6240\u9700\u8bbe\u5907\u6570：20<\/span>
\n \u4e3a\u4e3b\u673a\u5206\u914d\u7684\u53ef\u7528 IP<\/span> \u5730\u5740\u6570：30<\/span><\/p>\n

\u65e0\u7ebf\u7f51\u7edc\u4fe1\u606f
\n \u7f51\u7edc\u5730\u5740：192.168<\/span>.20<\/span>.0<\/span>\/<\/span>22<\/span>
\n \u5e7f\u64ad\u5730\u5740：192.168<\/span>.23<\/span>.255<\/span>
\n \u6240\u9700\u8bbe\u5907\u6570：1000<\/span>
\n \u4e3a\u4e3b\u673a\u5206\u914d\u7684\u53ef\u7528 IP<\/span> \u5730\u5740\u6570：1022<\/span><\/p>\n

C<\/span>.<\/span>\u7f51\u7edc\u62d3\u6251
\n \u8def\u7531\u5668\u548c\u4e09\u5c42\u4ea4\u6362\u673a\u5747\u4f7f\u7528 OSPF<\/span> \u4f5c\u4e3a\u8def\u7531\u534f\u8bae\u3002
\n \u6838\u5fc3\u8def\u7531\u5668\u4e0a\u5df2\u914d\u7f6e NAT<\/span>\u3002
\n \u4e09\u5c42\u4ea4\u6362\u673a\u5df2\u914d\u7f6e VLAN<\/span> \u95f4\u8def\u7531\u3002
\n \u4e09\u5c42\u4ea4\u6362\u673a\u4e0e 2960<\/span> \u578b\u53f7\u4ea4\u6362\u673a\u4e4b\u95f4\u7684\u7aef\u53e3\u5df2\u914d\u7f6e\u4e3a trunk \u7aef\u53e3\u3002
\n 2960<\/span> \u578b\u53f7\u4ea4\u6362\u673a\u4e0e\u7ec8\u7aef\u8bbe\u5907\u4e4b\u95f4\u7684\u7aef\u53e3\u5df2\u914d\u7f6e\u4e3a access \u7aef\u53e3\u3002
\n \u65e0\u7ebf\u63a5\u5165\u70b9\u91c7\u7528 WPA2<\/span>–<\/span>PSK<\/span> \u8ba4\u8bc1\u5e76\u8bbe\u7f6e\u4e86\u5bc6\u7801\u3002\u7531\u4e8e\u516c\u5171\u5173\u7cfb\u90e8\u7684\u667a\u80fd\u624b\u673a\u672a\u8f93\u5165\u6b63\u786e\u5bc6\u7801，\u56e0\u6b64\u672a\u8fde\u63a5\u5230\u65e0\u7ebf\u7f51\u7edc\u3002<\/p>\n

\u62d3\u6251\u7ed3\u6784\u6982\u89c8<\/h3>\n

#mermaid-svg-FQxUmiM6wIFacnUb{font-family:\\”trebuchet ms\\”,verdana,arial,sans-serif;font-size:16px;fill:#333;}@keyframes edge-animation-frame{from{stroke-dashoffset:0;}}@keyframes dash{to{stroke-dashoffset:0;}}#mermaid-svg-FQxUmiM6wIFacnUb .edge-animation-slow{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 50s linear infinite;stroke-linecap:round;}#mermaid-svg-FQxUmiM6wIFacnUb .edge-animation-fast{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 20s linear infinite;stroke-linecap:round;}#mermaid-svg-FQxUmiM6wIFacnUb .error-icon{fill:#552222;}#mermaid-svg-FQxUmiM6wIFacnUb .error-text{fill:#552222;stroke:#552222;}#mermaid-svg-FQxUmiM6wIFacnUb .edge-thickness-normal{stroke-width:1px;}#mermaid-svg-FQxUmiM6wIFacnUb .edge-thickness-thick{stroke-width:3.5px;}#mermaid-svg-FQxUmiM6wIFacnUb .edge-pattern-solid{stroke-dasharray:0;}#mermaid-svg-FQxUmiM6wIFacnUb .edge-thickness-invisible{stroke-width:0;fill:none;}#mermaid-svg-FQxUmiM6wIFacnUb .edge-pattern-dashed{stroke-dasharray:3;}#mermaid-svg-FQxUmiM6wIFacnUb .edge-pattern-dotted{stroke-dasharray:2;}#mermaid-svg-FQxUmiM6wIFacnUb .marker{fill:#333333;stroke:#333333;}#mermaid-svg-FQxUmiM6wIFacnUb .marker.cross{stroke:#333333;}#mermaid-svg-FQxUmiM6wIFacnUb svg{font-family:\\”trebuchet ms\\”,verdana,arial,sans-serif;font-size:16px;}#mermaid-svg-FQxUmiM6wIFacnUb p{margin:0;}#mermaid-svg-FQxUmiM6wIFacnUb .label{font-family:\\”trebuchet ms\\”,verdana,arial,sans-serif;color:#333;}#mermaid-svg-FQxUmiM6wIFacnUb .cluster-label text{fill:#333;}#mermaid-svg-FQxUmiM6wIFacnUb .cluster-label span{color:#333;}#mermaid-svg-FQxUmiM6wIFacnUb .cluster-label span p{background-color:transparent;}#mermaid-svg-FQxUmiM6wIFacnUb .label text,#mermaid-svg-FQxUmiM6wIFacnUb span{fill:#333;color:#333;}#mermaid-svg-FQxUmiM6wIFacnUb .node rect,#mermaid-svg-FQxUmiM6wIFacnUb .node circle,#mermaid-svg-FQxUmiM6wIFacnUb .node ellipse,#mermaid-svg-FQxUmiM6wIFacnUb .node polygon,#mermaid-svg-FQxUmiM6wIFacnUb .node path{fill:#ECECFF;stroke:#9370DB;stroke-width:1px;}#mermaid-svg-FQxUmiM6wIFacnUb .rough-node .label text,#mermaid-svg-FQxUmiM6wIFacnUb .node .label text,#mermaid-svg-FQxUmiM6wIFacnUb .image-shape .label,#mermaid-svg-FQxUmiM6wIFacnUb .icon-shape .label{text-anchor:middle;}#mermaid-svg-FQxUmiM6wIFacnUb .node .katex path{fill:#000;stroke:#000;stroke-width:1px;}#mermaid-svg-FQxUmiM6wIFacnUb .rough-node .label,#mermaid-svg-FQxUmiM6wIFacnUb .node .label,#mermaid-svg-FQxUmiM6wIFacnUb .image-shape .label,#mermaid-svg-FQxUmiM6wIFacnUb .icon-shape .label{text-align:center;}#mermaid-svg-FQxUmiM6wIFacnUb .node.clickable{cursor:pointer;}#mermaid-svg-FQxUmiM6wIFacnUb .root .anchor path{fill:#333333!important;stroke-width:0;stroke:#333333;}#mermaid-svg-FQxUmiM6wIFacnUb .arrowheadPath{fill:#333333;}#mermaid-svg-FQxUmiM6wIFacnUb .edgePath .path{stroke:#333333;stroke-width:2.0px;}#mermaid-svg-FQxUmiM6wIFacnUb .flowchart-link{stroke:#333333;fill:none;}#mermaid-svg-FQxUmiM6wIFacnUb .edgeLabel{background-color:rgba(232,232,232, 0.8);text-align:center;}#mermaid-svg-FQxUmiM6wIFacnUb .edgeLabel p{background-color:rgba(232,232,232, 0.8);}#mermaid-svg-FQxUmiM6wIFacnUb .edgeLabel rect{opacity:0.5;background-color:rgba(232,232,232, 0.8);fill:rgba(232,232,232, 0.8);}#mermaid-svg-FQxUmiM6wIFacnUb .labelBkg{background-color:rgba(232, 232, 232, 0.5);}#mermaid-svg-FQxUmiM6wIFacnUb .cluster rect{fill:#ffffde;stroke:#aaaa33;stroke-width:1px;}#mermaid-svg-FQxUmiM6wIFacnUb .cluster text{fill:#333;}#mermaid-svg-FQxUmiM6wIFacnUb .cluster span{color:#333;}#mermaid-svg-FQxUmiM6wIFacnUb div.mermaidTooltip{position:absolute;text-align:center;max-width:200px;padding:2px;font-family:\\”trebuchet ms\\”,verdana,arial,sans-serif;font-size:12px;background:hsl(80, 100%, 96.2745098039%);border:1px solid #aaaa33;border-radius:2px;pointer-events:none;z-index:100;}#mermaid-svg-FQxUmiM6wIFacnUb .flowchartTitleText{text-anchor:middle;font-size:18px;fill:#333;}#mermaid-svg-FQxUmiM6wIFacnUb rect.text{fill:none;stroke-width:0;}#mermaid-svg-FQxUmiM6wIFacnUb .icon-shape,#mermaid-svg-FQxUmiM6wIFacnUb .image-shape{background-color:rgba(232,232,232, 0.8);text-align:center;}#mermaid-svg-FQxUmiM6wIFacnUb .icon-shape p,#mermaid-svg-FQxUmiM6wIFacnUb .image-shape p{background-color:rgba(232,232,232, 0.8);padding:2px;}#mermaid-svg-FQxUmiM6wIFacnUb .icon-shape .label rect,#mermaid-svg-FQxUmiM6wIFacnUb .image-shape .label rect{opacity:0.5;background-color:rgba(232,232,232, 0.8);fill:rgba(232,232,232, 0.8);}#mermaid-svg-FQxUmiM6wIFacnUb .label-icon{display:inline-block;height:1em;overflow:visible;vertical-align:-0.125em;}#mermaid-svg-FQxUmiM6wIFacnUb .node .label-icon path{fill:currentColor;stroke:revert;stroke-width:revert;}#mermaid-svg-FQxUmiM6wIFacnUb :root{–mermaid-font-family:\\”trebuchet ms\\”,verdana,arial,sans-serif;}<\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/p>\n

Web Server\u5916\u7f51\u670d\u52a1\u533a<\/p>\n

<\/span><\/p>\n

ISP Router2911<\/p>\n

<\/span><\/p>\n

ASA-FirewallASA 5505<\/p>\n

<\/span><\/p>\n

CORE-Router2911OSPF + NAT<\/p>\n

<\/span><\/p>\n

MLS13650-24PSVLAN10\/40\/60\/70<\/p>\n

<\/span><\/p>\n

MLS23650-24PSVLAN20\/50\/80<\/p>\n

<\/span><\/p>\n

SW10 \/ Switch10VLAN10<\/p>\n

<\/span><\/p>\n

SW40 \/ Switch40VLAN40<\/p>\n

<\/span><\/p>\n

SW60 \/ Switch60VLAN60<\/p>\n

<\/span><\/p>\n

SW70 \/ Switch70VLAN70<\/p>\n

<\/span><\/p>\n

SW20 \/ Switch20VLAN20<\/p>\n

<\/span><\/p>\n

SW50 \/ Switch50VLAN50<\/p>\n

<\/span><\/p>\n

SW80 \/ Switch80VLAN80<\/p>\n

<\/span><\/p>\n

PC10-1<\/p>\n

<\/span><\/p>\n

PC40-1<\/p>\n

<\/span><\/p>\n

PC60-1<\/p>\n

<\/span><\/p>\n

DNS Server<\/p>\n

<\/span><\/p>\n

DHCP Server<\/p>\n

<\/span><\/p>\n

PC20-1<\/p>\n

<\/span><\/p>\n

PC50-1<\/p>\n

<\/span><\/p>\n

Access Point0<\/p>\n

<\/span><\/p>\n

MLS1\u8bbe\u8ba1：<\/h4>\n\n\u94fe\u8defA \u7aefB \u7aef\u7f51\u6bb5<\/tr>\n\n\n
Core – MLS1<\/td>\nCore G0\/1 192.168.19.166\/30<\/td>\nMLS1 G1\/0\/5 192.168.19.165\/30<\/td>\n192.168.19.164\/30<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
\u8fde\u7ebf<\/h6>\n
\u8fde\u7ebf<\/h6>\n\n\u8bbe\u5907 A\u7aef\u53e3 A\u8bbe\u5907 B\u7aef\u53e3 B\u7ebf\u7f06\u7c7b\u578b<\/tr>\n\n\n\n\n\n\n\n\n\n\n\n
Switch10<\/td>\nFastEthernet0\/1<\/td>\nPC10-1<\/td>\nFastEthernet0<\/td>\neStraightThrough<\/td>\n<\/tr>\n
Switch40<\/td>\nFastEthernet0\/1<\/td>\nPC40-1<\/td>\nFastEthernet0<\/td>\neStraightThrough<\/td>\n<\/tr>\n
Switch60<\/td>\nFastEthernet0\/1<\/td>\nPC60-1<\/td>\nFastEthernet0<\/td>\neStraightThrough<\/td>\n<\/tr>\n
Switch70<\/td>\nFastEthernet0\/1<\/td>\nDNS Server<\/td>\nFastEthernet0<\/td>\neStraightThrough<\/td>\n<\/tr>\n
Switch70<\/td>\nFastEthernet0\/2<\/td>\nDHCP Server<\/td>\nFastEthernet0<\/td>\neStraightThrough<\/td>\n<\/tr>\n
Switch10<\/td>\nGigabitEthernet0\/1<\/td>\nMLS1<\/td>\nGigabitEthernet1\/0\/1<\/td>\neCrossOver<\/td>\n<\/tr>\n
Switch40<\/td>\nGigabitEthernet0\/1<\/td>\nMLS1<\/td>\nGigabitEthernet1\/0\/2<\/td>\neCrossOver<\/td>\n<\/tr>\n
Switch60<\/td>\nGigabitEthernet0\/1<\/td>\nMLS1<\/td>\nGigabitEthernet1\/0\/3<\/td>\neCrossOver<\/td>\n<\/tr>\n
Switch70<\/td>\nGigabitEthernet0\/1<\/td>\nMLS1<\/td>\nGigabitEthernet1\/0\/4<\/td>\neCrossOver<\/td>\n<\/tr>\n
Core Router<\/td>\nGigabitEthernet0\/1<\/td>\nMLS1<\/td>\nGigabitEthernet1\/0\/5<\/td>\neStraightThrough<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
MLS1\u4e2dVLAN \u4e0e\u5730\u5740\u89c4\u5212<\/h6>\n\nVLAN\u540d\u79f0\/\u90e8\u95e8\u7f51\u6bb5\u9ed8\u8ba4\u7f51\u5173\u7f51\u5173\u6240\u5728\u8bbe\u5907<\/tr>\n\n\n\n\n\n
10<\/td>\nAdministration-HR<\/td>\n192.168.16.0\/25<\/td>\n192.168.16.1<\/td>\nMLS1 Vlan10<\/td>\n<\/tr>\n
40<\/td>\nSales-Marketing<\/td>\n192.168.17.0\/24<\/td>\n192.168.17.1<\/td>\nMLS1 Vlan40<\/td>\n<\/tr>\n
60<\/td>\nIT-Communication<\/td>\n192.168.18.0\/24<\/td>\n192.168.18.1<\/td>\nMLS1 Vlan60<\/td>\n<\/tr>\n
70<\/td>\nServer-Room<\/td>\n192.168.19.128\/27<\/td>\n192.168.19.129<\/td>\nMLS1 Vlan70<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

MLS1\u62d3\u6251\u56fe<\/h4>\n

\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\"<\/p>\n

MLS1\u4e2d\u4e8c\u5c42\u4ea4\u6362\u673a\u4ee3\u7801<\/h5>\n

\u4f8b\u5982 SW10<\/span> \u662f\u884c\u653f\u4e0e\u4eba\u529b\u8d44\u6e90\u90e8\u4ea4\u6362\u673a，PC<\/span> \u63a5\u53e3\u5c5e\u4e8e VLAN<\/span> 10<\/span>：
\nenable
\nconfigure terminal
\nvlan 10<\/span>
\nname ADMIN_HR<\/span>
\n!<\/span> PC<\/span> \u6240\u63a5\u7684\u7aef\u53e3
\ninterface<\/span> fastEthernet<\/span> 0<\/span>\/<\/span>1<\/span>
\nswitchport mode access
\nswitchport access vlan 10<\/span>
\nspanning–<\/span>tree portfast
\n!<\/span> \u4e0a\u8054\u5230 MLS1<\/span> \u7684\u7aef\u53e3
\ninterface<\/span> gigabitEthernet<\/span> 0<\/span>\/<\/span>1<\/span>
\nswitchport mode trunk
\nswitchport trunk allowed vlan 10<\/span>
\nend
\nwrite memory<\/p>\n

\u4f8b\u5982 SW40<\/span> \u662f\u9500\u552e\u4e0e\u5e02\u573a，PC<\/span> \u63a5\u53e3\u5c5e\u4e8e VLAN<\/span> 40<\/span>：
\nenable
\nconfigure terminal
\nvlan 40<\/span>
\nname SALES_MARKETING<\/span>
\n!<\/span> PC<\/span> \u6240\u63a5\u7684\u7aef\u53e3
\ninterface<\/span> fastEthernet<\/span> 0<\/span>\/<\/span>1<\/span>
\nswitchport mode access
\nswitchport access vlan 40<\/span>
\nspanning–<\/span>tree portfast
\n!<\/span> \u4e0a\u8054\u5230 MLS1<\/span> \u7684\u7aef\u53e3
\ninterface<\/span> gigabitEthernet<\/span> 0<\/span>\/<\/span>1<\/span>
\nswitchport mode trunk
\nswitchport trunk allowed vlan 40<\/span>
\nend
\nwrite memory<\/p>\n

\u4f8b\u5982 SW60<\/span> \u662fIT<\/span> \u4e0e\u901a\u4fe1\u90e8，PC<\/span> \u63a5\u53e3\u5c5e\u4e8e VLAN<\/span> 60<\/span>：
\nenable
\nconfigure terminal
\nvlan 60<\/span>
\nname IT_COMMUNICATIONS<\/span>
\n!<\/span> PC<\/span> \u6240\u63a5\u7684\u7aef\u53e3
\ninterface<\/span> fastEthernet<\/span> 0<\/span>\/<\/span>1<\/span>
\nswitchport mode access
\nswitchport access vlan 60<\/span>
\nspanning–<\/span>tree portfast
\n!<\/span> \u4e0a\u8054\u5230 MLS1<\/span> \u7684\u7aef\u53e3
\ninterface<\/span> gigabitEthernet<\/span> 0<\/span>\/<\/span>1<\/span>
\nswitchport mode trunk
\nswitchport trunk allowed vlan 60<\/span>
\nend
\nwrite memory<\/p>\n

\u4f8b\u5982 SW70<\/span> \u662f\u670d\u52a1\u5668\u673a\u623f，PC<\/span> \u63a5\u53e3\u5c5e\u4e8e VLAN70<\/span>：<\/p>\n

enable
\nconfigure terminal
\nvlan 70<\/span>
\nname SERVER_ROOM<\/span>
\n!<\/span> PC<\/span> \u6240\u63a5\u7684\u7aef\u53e3
\ninterface<\/span> fastEthernet<\/span> 0<\/span>\/<\/span>1<\/span>
\nswitchport mode access
\nswitchport access vlan 70<\/span>
\nspanning–<\/span>tree portfast
\n!<\/span> \u4e0a\u8054\u5230 MLS1<\/span> \u7684\u7aef\u53e3
\ninterface<\/span> gigabitEthernet<\/span> 0<\/span>\/<\/span>1<\/span>
\nswitchport mode trunk
\nswitchport trunk allowed vlan 70<\/span>
\nend
\nwrite memory<\/p>\n

MLS1（\u4e09\u5c42\u4ea4\u6362\u673a 1）\u914d\u7f6e<\/h5>\n

MLS1<\/span>（\u4e09\u5c42\u4ea4\u6362\u673a） \u7684\u6b63\u786e\u6838\u5fc3\u914d\u7f6e：\u5b83\u8d1f\u8d23\u521b\u5efa VLAN<\/span> 10<\/span>\u300140<\/span>\u300160<\/span>\u300170<\/span>，\u5e76\u4f5c\u4e3a\u8fd9\u4e9b VLAN<\/span> \u7684\u9ed8\u8ba4\u7f51\u5173\u3002
\n enable
\n configure terminal
\n !<\/span> \u5f00\u542f\u4e09\u5c42\u4ea4\u6362\u548c VLAN<\/span> \u95f4\u8def\u7531
\n ip routing
\n !<\/span> \u521b\u5efa VLAN<\/span>
\n vlan 10<\/span>
\n name ADMIN_HR<\/span>
\n vlan 40<\/span>
\n name SALES_MARKETING<\/span>
\n vlan 60<\/span>
\n name IT_COMMUNICATIONS<\/span>
\n vlan 70<\/span>
\n name SERVER_ROOM<\/span>
\n !<\/span> VLAN<\/span> 10<\/span>：\u884c\u653f\u4e0e\u4eba\u529b\u8d44\u6e90\u90e8
\n interface<\/span> vlan<\/span> 10<\/span>
\n ip address 192.168<\/span>.16<\/span>.1<\/span> 255.255<\/span>.255<\/span>.128<\/span>
\n no shutdown
\n !<\/span> VLAN<\/span> 40<\/span>：\u9500\u552e\u4e0e\u5e02\u573a\u90e8
\n interface<\/span> vlan<\/span> 40<\/span>
\n ip address 192.168<\/span>.17<\/span>.1<\/span> 255.255<\/span>.255<\/span>.0<\/span>
\n no shutdown
\n !<\/span> VLAN<\/span> 60<\/span>：IT<\/span> \u4e0e\u901a\u4fe1\u90e8
\n interface<\/span> vlan<\/span> 60<\/span>
\n ip address 192.168<\/span>.18<\/span>.1<\/span> 255.255<\/span>.255<\/span>.0<\/span>
\n no shutdown
\n !<\/span> VLAN<\/span> 70<\/span>：\u670d\u52a1\u5668\u673a\u623f
\n interface<\/span> vlan<\/span> 70<\/span>
\n ip address 192.168<\/span>.19<\/span>.129<\/span> 255.255<\/span>.255<\/span>.224<\/span>
\n no shutdown
\n end
\n write memory
\nMLS1<\/span>（\u4e09\u5c42\u4ea4\u6362\u673a）\u4e0a，\u628a\u8fde\u63a5\u5404\u4e8c\u5c42\u4ea4\u6362\u673a\u7684\u7269\u7406\u63a5\u53e3\u8bbe\u7f6e\u4e3a Trunk\u3002
\n enable
\n configure terminal<\/p>\n

!<\/span> \u8fde\u63a5 SW10<\/span>：\u53ea\u4f20\u9012 VLAN<\/span> 10<\/span>
\n interface<\/span> gigabitEthernet<\/span> 1<\/span>\/<\/span>0<\/span>\/<\/span>1<\/span>
\n switchport mode trunk
\n switchport trunk allowed vlan 10<\/span>
\n exit<\/p>\n

!<\/span> \u8fde\u63a5 SW40<\/span>：\u53ea\u4f20\u9012 VLAN<\/span> 40<\/span>
\n interface<\/span> gigabitEthernet<\/span> 1<\/span>\/<\/span>0<\/span>\/<\/span>2<\/span>
\n switchport mode trunk
\n switchport trunk allowed vlan 40<\/span>
\n exit<\/p>\n

!<\/span> \u8fde\u63a5 SW60<\/span>：\u53ea\u4f20\u9012 VLAN<\/span> 60<\/span>
\n interface<\/span> gigabitEthernet<\/span> 1<\/span>\/<\/span>0<\/span>\/<\/span>3<\/span>
\n switchport mode trunk
\n switchport trunk allowed vlan 60<\/span>
\n exit<\/p>\n

!<\/span> \u8fde\u63a5 SW70<\/span>：\u53ea\u4f20\u9012 VLAN<\/span> 70<\/span>
\n interface<\/span> gigabitEthernet<\/span> 1<\/span>\/<\/span>0<\/span>\/<\/span>4<\/span>
\n switchport mode trunk
\n switchport trunk allowed vlan 70<\/span>
\n exit<\/p>\n

end
\n write memory
\nMLS1<\/span>（\u4e09\u5c42\u4ea4\u6362\u673a）\u4e0a，\u628a\u8fde\u63a5CoreRouter\u7684\u7269\u7406\u63a5\u53e3\u8bbe\u7f6eip\u5730\u5740
\n enable
\n configure terminal<\/p>\n

!<\/span> \u8fde\u63a5 Core Router G0<\/span>\/<\/span>1<\/span> \u7684\u4e09\u5c42\u8def\u7531\u7aef\u53e3
\n interface<\/span> gigabitEthernet<\/span> 1<\/span>\/<\/span>0<\/span>\/<\/span>5<\/span>
\n description TO_CORE_ROUTER_G0<\/span>\/<\/span>1<\/span>
\n no switchport
\n ip address 192.168<\/span>.19<\/span>.165<\/span> 255.255<\/span>.255<\/span>.252<\/span>
\n no shutdown<\/p>\n

end
\n write memory
\nMLS1<\/span>（\u4e09\u5c42\u4ea4\u6362\u673a）\u4e0a，\u5efa\u7acbOSPF<\/span> \u3002
\n enable
\n configure terminal<\/p>\n

router ospf 1<\/span>
\n router–<\/span>id 2.2<\/span>.2<\/span>.2<\/span><\/p>\n

!<\/span> Core \u2194 MLS1<\/span> \u4e09\u5c42\u4e92\u8054\u94fe\u8def
\n network 192.168<\/span>.19<\/span>.164<\/span> 0.0<\/span>.0<\/span>.3<\/span> area 0<\/span><\/p>\n

!<\/span> VLAN<\/span> 10<\/span>：\u884c\u653f\u4e0e\u4eba\u529b\u8d44\u6e90
\n network 192.168<\/span>.16<\/span>.0<\/span> 0.0<\/span>.0<\/span>.127<\/span> area 0<\/span><\/p>\n

!<\/span> VLAN<\/span> 40<\/span>：\u9500\u552e\u4e0e\u5e02\u573a
\n network 192.168<\/span>.17<\/span>.0<\/span> 0.0<\/span>.0<\/span>.255<\/span> area 0<\/span><\/p>\n

!<\/span> VLAN<\/span> 60<\/span>：IT<\/span> \u4e0e\u901a\u4fe1
\n network 192.168<\/span>.18<\/span>.0<\/span> 0.0<\/span>.0<\/span>.255<\/span> area 0<\/span><\/p>\n

!<\/span> VLAN<\/span> 70<\/span>：\u670d\u52a1\u5668\u673a\u623f
\n network 192.168<\/span>.19<\/span>.128<\/span> 0.0<\/span>.0<\/span>.31<\/span> area 0<\/span><\/p>\n

end
\n write memory<\/p>\n

\u5728MLS1\u786e\u8ba4\u914d\u7f6e\u751f\u6548：<\/h5>\n

\u4e0b\u9762\u786e\u8ba4\u4e8c\u5c42\u4ea4\u6362\u673a\u7684\u914d\u7f6e<\/span>:<\/span>
\n 1<\/span>.<\/span>show vlan brief:<\/span>\u7b80\u8981\u663e\u793a VLAN<\/span> \u4fe1\u606f
\n VLAN<\/span> Name Status Ports
\n —<\/span>—<\/span> —<\/span>—<\/span>—<\/span>—<\/span>—<\/span>—<\/span>—<\/span>—<\/span>—<\/span>—<\/span>—<\/span>—<\/span>—<\/span>—<\/span>—<\/span>—<\/span> —<\/span>—<\/span>—<\/span>—<\/span>–<\/span> —<\/span>—<\/span>—<\/span>—<\/span>—<\/span>—<\/span>—<\/span>—<\/span>—<\/span>—<\/span>—<\/span>—<\/span>—<\/span>—<\/span>—<\/span>–<\/span>
\n 1<\/span> default<\/span> active Fa0\/<\/span>2<\/span>,<\/span> Fa0\/<\/span>3<\/span>,<\/span> Fa0\/<\/span>4<\/span>,<\/span> Fa0\/<\/span>5<\/span>
\n Fa0\/<\/span>6<\/span>,<\/span> Fa0\/<\/span>7<\/span>,<\/span> Fa0\/<\/span>8<\/span>,<\/span> Fa0\/<\/span>9<\/span>
\n Fa0\/<\/span>10<\/span>,<\/span> Fa0\/<\/span>11<\/span>,<\/span> Fa0\/<\/span>12<\/span>,<\/span> Fa0\/<\/span>13<\/span>
\n Fa0\/<\/span>14<\/span>,<\/span> Fa0\/<\/span>15<\/span>,<\/span> Fa0\/<\/span>16<\/span>,<\/span> Fa0\/<\/span>17<\/span>
\n Fa0\/<\/span>18<\/span>,<\/span> Fa0\/<\/span>19<\/span>,<\/span> Fa0\/<\/span>20<\/span>,<\/span> Fa0\/<\/span>21<\/span>
\n Fa0\/<\/span>22<\/span>,<\/span> Fa0\/<\/span>23<\/span>,<\/span> Fa0\/<\/span>24<\/span>,<\/span> Gig0\/<\/span>2<\/span>
\n 10<\/span> ADMIN_HR<\/span> active Fa0\/<\/span>1<\/span><\/p>\n

2<\/span>.<\/span>show interfaces trunk:<\/span>\u67e5\u770b\u672c\u4ea4\u6362\u673a\u4e0a\u54ea\u4e9b\u7aef\u53e3\u6b63\u5728\u4f5c\u4e3a Trunk \u7aef\u53e3\u8fd0\u884c，\u4ee5\u53ca\u6bcf\u4e2a Trunk \u7aef\u53e3\u5141\u8bb8\u4f20\u9012\u54ea\u4e9b VLAN<\/span>\u3002
\n Port Mode Encapsulation Status Native vlan
\n Gig0\/<\/span>1<\/span> on 802<\/span>.<\/span>1q trunking 1<\/span>
\n Port Vlans allowed on trunk
\n Gig0\/<\/span>1<\/span> 10<\/span>
\n Port Vlans allowed and active in<\/span> management domain
\n Gig0\/<\/span>1<\/span> 10<\/span>
\n Port Vlans in<\/span> spanning tree forwarding state and not pruned
\n Gig0\/<\/span>1<\/span> 10<\/span>
\n 3<\/span>.<\/span>show interfaces status:<\/span>\u7b80\u8981\u67e5\u770b\u4ea4\u6362\u673a\u6240\u6709\u7269\u7406\u7aef\u53e3\u5f53\u524d\u7684\u8fde\u63a5\u72b6\u6001\u3002
\n 4<\/span>.<\/span>show interfaces trunk:<\/span>\u67e5\u770b\u672c\u4ea4\u6362\u673a\u4e0a\u54ea\u4e9b\u7aef\u53e3\u6b63\u5728\u4f5c\u4e3a Trunk \u7aef\u53e3\u8fd0\u884c，\u4ee5\u53ca\u6bcf\u4e2a Trunk \u7aef\u53e3\u5141\u8bb8\u4f20\u9012\u54ea\u4e9b VLAN<\/span>\u3002<\/p>\n

\u4e0b\u9762\u786e\u8ba4\u4e09\u5c42\u4ea4\u6362\u673a\u7684\u914d\u7f6e<\/span>:<\/span>
\n 1<\/span>.<\/span>show running–<\/span>config:<\/span>ip routing\u3001VLAN<\/span>\u3001SVI<\/span>\u3001OSPF<\/span> \u662f\u5426\u5199\u5165
\n 2<\/span>.<\/span>show vlan brief
\n VLAN<\/span> Name Status Ports
\n —<\/span>—<\/span> —<\/span>—<\/span>—<\/span>—<\/span>—<\/span>—<\/span>—<\/span>—<\/span>—<\/span>—<\/span>—<\/span>—<\/span>—<\/span>—<\/span>—<\/span>—<\/span> —<\/span>—<\/span>—<\/span>—<\/span>–<\/span> —<\/span>—<\/span>—<\/span>—<\/span>—<\/span>—<\/span>—<\/span>—<\/span>—<\/span>—<\/span>—<\/span>—<\/span>—<\/span>—<\/span>—<\/span>–<\/span>
\n 1<\/span> default<\/span> active Gig1\/<\/span>0<\/span>\/<\/span>6<\/span>,<\/span> Gig1\/<\/span>0<\/span>\/<\/span>7<\/span>,<\/span> Gig1\/<\/span>0<\/span>\/<\/span>8<\/span>,<\/span> Gig1\/<\/span>0<\/span>\/<\/span>9<\/span>
\n Gig1\/<\/span>0<\/span>\/<\/span>10<\/span>,<\/span> Gig1\/<\/span>0<\/span>\/<\/span>11<\/span>,<\/span> Gig1\/<\/span>0<\/span>\/<\/span>12<\/span>,<\/span> Gig1\/<\/span>0<\/span>\/<\/span>13<\/span>
\n Gig1\/<\/span>0<\/span>\/<\/span>14<\/span>,<\/span> Gig1\/<\/span>0<\/span>\/<\/span>15<\/span>,<\/span> Gig1\/<\/span>0<\/span>\/<\/span>16<\/span>,<\/span> Gig1\/<\/span>0<\/span>\/<\/span>17<\/span>
\n Gig1\/<\/span>0<\/span>\/<\/span>18<\/span>,<\/span> Gig1\/<\/span>0<\/span>\/<\/span>19<\/span>,<\/span> Gig1\/<\/span>0<\/span>\/<\/span>20<\/span>,<\/span> Gig1\/<\/span>0<\/span>\/<\/span>21<\/span>
\n Gig1\/<\/span>0<\/span>\/<\/span>22<\/span>,<\/span> Gig1\/<\/span>0<\/span>\/<\/span>23<\/span>,<\/span> Gig1\/<\/span>0<\/span>\/<\/span>24<\/span>,<\/span> Gig1\/<\/span>1<\/span>\/<\/span>1<\/span>
\n Gig1\/<\/span>1<\/span>\/<\/span>2<\/span>,<\/span> Gig1\/<\/span>1<\/span>\/<\/span>3<\/span>,<\/span> Gig1\/<\/span>1<\/span>\/<\/span>4<\/span>
\n 10<\/span> ADMIN_HR<\/span> active
\n 40<\/span> SALES_MARKETING<\/span> active
\n 60<\/span> IT_COMMUNICATIONS<\/span> active
\n 70<\/span> SERVER_ROOM<\/span> active
\n 3<\/span>.<\/span>show interfaces trunk:<\/span>\u4e0a\u8054 SW10<\/span>\/<\/span>SW40<\/span>\/<\/span>SW60<\/span>\/<\/span>SW70<\/span> \u662f\u5426\u6210\u4e3a Trunk
\n Port Mode Encapsulation Status Native vlan
\n Gig1\/<\/span>0<\/span>\/<\/span>1<\/span> on 802<\/span>.<\/span>1q trunking 1<\/span>
\n Gig1\/<\/span>0<\/span>\/<\/span>2<\/span> on 802<\/span>.<\/span>1q trunking 1<\/span>
\n Gig1\/<\/span>0<\/span>\/<\/span>3<\/span> on 802<\/span>.<\/span>1q trunking 1<\/span>
\n Gig1\/<\/span>0<\/span>\/<\/span>4<\/span> on 802<\/span>.<\/span>1q trunking 1<\/span><\/p>\n

Port Vlans allowed on trunk
\n Gig1\/<\/span>0<\/span>\/<\/span>1<\/span> 10<\/span>
\n Gig1\/<\/span>0<\/span>\/<\/span>2<\/span> 40<\/span>
\n Gig1\/<\/span>0<\/span>\/<\/span>3<\/span> 60<\/span>
\n Gig1\/<\/span>0<\/span>\/<\/span>4<\/span> 70<\/span><\/p>\n

Port Vlans allowed and active in<\/span> management domain
\n Gig1\/<\/span>0<\/span>\/<\/span>1<\/span> 10<\/span>
\n Gig1\/<\/span>0<\/span>\/<\/span>2<\/span> 40<\/span>
\n Gig1\/<\/span>0<\/span>\/<\/span>3<\/span> 60<\/span>
\n Gig1\/<\/span>0<\/span>\/<\/span>4<\/span> 70<\/span><\/p>\n

Port Vlans in<\/span> spanning tree forwarding state and not pruned
\n Gig1\/<\/span>0<\/span>\/<\/span>1<\/span> 10<\/span>
\n Gig1\/<\/span>0<\/span>\/<\/span>2<\/span> 40<\/span>
\n Gig1\/<\/span>0<\/span>\/<\/span>3<\/span> 60<\/span>
\n Gig1\/<\/span>0<\/span>\/<\/span>4<\/span> 70<\/span>
\n 4<\/span>.<\/span>show ip interface<\/span> brief<\/span>:<\/span>\u56db\u4e2a VLAN<\/span> \u7f51\u5173\u662f\u5426\u542f\u7528,<\/span>Core \u94fe\u8def\u662f\u5426\u542f\u7528
\n Interface IP<\/span>–<\/span>Address OK<\/span>?<\/span> Method Status Protocol
\n GigabitEthernet1\/<\/span>0<\/span>\/<\/span>1<\/span> unassigned YES<\/span> unset up up
\n GigabitEthernet1\/<\/span>0<\/span>\/<\/span>2<\/span> unassigned YES<\/span> unset up up
\n GigabitEthernet1\/<\/span>0<\/span>\/<\/span>3<\/span> unassigned YES<\/span> unset up up
\n GigabitEthernet1\/<\/span>0<\/span>\/<\/span>4<\/span> unassigned YES<\/span> unset up up
\n GigabitEthernet1\/<\/span>0<\/span>\/<\/span>5<\/span> 192.168<\/span>.19<\/span>.165<\/span> YES<\/span> manual up up
\n Vlan1 unassigned YES<\/span> unset administratively down down
\n Vlan10 192.168<\/span>.16<\/span>.1<\/span> YES<\/span> manual up up
\n Vlan40 192.168<\/span>.17<\/span>.1<\/span> YES<\/span> manual up up
\n Vlan60 192.168<\/span>.18<\/span>.1<\/span> YES<\/span> manual up up
\n Vlan70 192.168<\/span>.19<\/span>.129<\/span> YES<\/span> manual up up
\n 5<\/span>.<\/span>show interfaces gigabitEthernet 1<\/span>\/<\/span>0<\/span>\/<\/span>5<\/span> switchport<\/span>:<\/span>Gi1\/<\/span>0<\/span>\/<\/span>5<\/span> \u662f\u5426\u5df2\u53d8\u6210\u4e09\u5c42\u8def\u7531\u53e3
\n Name<\/span>:<\/span> Gig1\/<\/span>0<\/span>\/<\/span>5<\/span>
\n Switchport<\/span>:<\/span> Disabled
\n 6<\/span>.<\/span>show ip route:<\/span>\u672c\u5730\u8def\u7531\u662f\u5426\u5b58\u5728
\n Codes<\/span>:<\/span> C<\/span> –<\/span> connected,<\/span> S<\/span> –<\/span> static<\/span>,<\/span> I<\/span> –<\/span> IGRP<\/span>,<\/span> R<\/span> –<\/span> RIP<\/span>,<\/span> M<\/span> –<\/span> mobile,<\/span> B<\/span> –<\/span> BGP<\/span>
\n D<\/span> –<\/span> EIGRP<\/span>,<\/span> EX<\/span> –<\/span> EIGRP<\/span> external,<\/span> O<\/span> –<\/span> OSPF<\/span>,<\/span> IA<\/span> –<\/span> OSPF<\/span> inter area
\n N1<\/span> –<\/span> OSPF<\/span> NSSA<\/span> external type 1<\/span>,<\/span> N2<\/span> –<\/span> OSPF<\/span> NSSA<\/span> external type 2<\/span>
\n E1<\/span> –<\/span> OSPF<\/span> external type 1<\/span>,<\/span> E2<\/span> –<\/span> OSPF<\/span> external type 2<\/span>,<\/span> E<\/span> –<\/span> EGP<\/span>
\n i –<\/span> IS<\/span>–<\/span>IS<\/span>,<\/span> L1<\/span> –<\/span> IS<\/span>–<\/span>IS<\/span> level–<\/span>1<\/span>,<\/span> L2<\/span> –<\/span> IS<\/span>–<\/span>IS<\/span> level–<\/span>2<\/span>,<\/span> ia –<\/span> IS<\/span>–<\/span>IS<\/span> inter area
\n *<\/span> –<\/span> candidate default<\/span>,<\/span> U<\/span> –<\/span> per–<\/span>user static<\/span> route,<\/span> o –<\/span> ODR<\/span>
\n P<\/span> –<\/span> periodic downloaded static<\/span> route<\/p>\n

Gateway of<\/span> last resort is 192.168<\/span>.19<\/span>.166<\/span> to network 0.0<\/span>.0<\/span>.0<\/span><\/p>\n

192.168<\/span>.16<\/span>.0<\/span>\/<\/span>24<\/span> is variably subnetted,<\/span> 3<\/span> subnets,<\/span> 2<\/span> masks
\n C<\/span> 192.168<\/span>.16<\/span>.0<\/span>\/<\/span>25<\/span> is directly connected,<\/span> Vlan10
\n L<\/span> 192.168<\/span>.16<\/span>.1<\/span>\/<\/span>32<\/span> is directly connected,<\/span> Vlan10
\n O<\/span> 192.168<\/span>.16<\/span>.128<\/span>\/<\/span>25<\/span> [<\/span>110<\/span>\/<\/span>3<\/span>]<\/span> via 192.168<\/span>.19<\/span>.166<\/span>,<\/span> 01<\/span>:<\/span>04<\/span>:<\/span>09<\/span>,<\/span> GigabitEthernet1\/<\/span>0<\/span>\/<\/span>5<\/span>
\n 192.168<\/span>.17<\/span>.0<\/span>\/<\/span>24<\/span> is variably subnetted,<\/span> 2<\/span> subnets,<\/span> 2<\/span> masks
\n C<\/span> 192.168<\/span>.17<\/span>.0<\/span>\/<\/span>24<\/span> is directly connected,<\/span> Vlan40
\n L<\/span> 192.168<\/span>.17<\/span>.1<\/span>\/<\/span>32<\/span> is directly connected,<\/span> Vlan40
\n 192.168<\/span>.18<\/span>.0<\/span>\/<\/span>24<\/span> is variably subnetted,<\/span> 2<\/span> subnets,<\/span> 2<\/span> masks
\n C<\/span> 192.168<\/span>.18<\/span>.0<\/span>\/<\/span>24<\/span> is directly connected,<\/span> Vlan60
\n L<\/span> 192.168<\/span>.18<\/span>.1<\/span>\/<\/span>32<\/span> is directly connected,<\/span> Vlan60
\n 192.168<\/span>.19<\/span>.0<\/span>\/<\/span>24<\/span> is variably subnetted,<\/span> 6<\/span> subnets,<\/span> 4<\/span> masks
\n O<\/span> 192.168<\/span>.19<\/span>.0<\/span>\/<\/span>25<\/span> [<\/span>110<\/span>\/<\/span>3<\/span>]<\/span> via 192.168<\/span>.19<\/span>.166<\/span>,<\/span> 01<\/span>:<\/span>04<\/span>:<\/span>09<\/span>,<\/span> GigabitEthernet1\/<\/span>0<\/span>\/<\/span>5<\/span>
\n C<\/span> 192.168<\/span>.19<\/span>.128<\/span>\/<\/span>27<\/span> is directly connected,<\/span> Vlan70
\n L<\/span> 192.168<\/span>.19<\/span>.129<\/span>\/<\/span>32<\/span> is directly connected,<\/span> Vlan70
\n C<\/span> 192.168<\/span>.19<\/span>.164<\/span>\/<\/span>30<\/span> is directly connected,<\/span> GigabitEthernet1\/<\/span>0<\/span>\/<\/span>5<\/span>
\n L<\/span> 192.168<\/span>.19<\/span>.165<\/span>\/<\/span>32<\/span> is directly connected,<\/span> GigabitEthernet1\/<\/span>0<\/span>\/<\/span>5<\/span>
\n O<\/span> 192.168<\/span>.19<\/span>.168<\/span>\/<\/span>30<\/span> [<\/span>110<\/span>\/<\/span>2<\/span>]<\/span> via 192.168<\/span>.19<\/span>.166<\/span>,<\/span> 01<\/span>:<\/span>04<\/span>:<\/span>09<\/span>,<\/span> GigabitEthernet1\/<\/span>0<\/span>\/<\/span>5<\/span>
\n O<\/span> 192.168<\/span>.20<\/span>.0<\/span>\/<\/span>22<\/span> [<\/span>110<\/span>\/<\/span>3<\/span>]<\/span> via 192.168<\/span>.19<\/span>.166<\/span>,<\/span> 01<\/span>:<\/span>04<\/span>:<\/span>09<\/span>,<\/span> GigabitEthernet1\/<\/span>0<\/span>\/<\/span>5<\/span>
\n O<\/span>*<\/span>E2<\/span> 0.0<\/span>.0<\/span>.0<\/span>\/<\/span>0<\/span> [<\/span>110<\/span>\/<\/span>1<\/span>]<\/span> via 192.168<\/span>.19<\/span>.166<\/span>,<\/span> 01<\/span>:<\/span>04<\/span>:<\/span>09<\/span>,<\/span> GigabitEthernet1\/<\/span>0<\/span>\/<\/span>5<\/span>
\n 7<\/span>.<\/span>ping 192.168<\/span>.19<\/span>.166<\/span>:<\/span>MLS1<\/span> \u662f\u5426\u80fd\u5230 Core
\n Type escape sequence to abort.<\/span>
\n Sending 5<\/span>,<\/span> 100<\/span>–<\/span>byte ICMP<\/span> Echos to 192.168<\/span>.19<\/span>.166<\/span>,<\/span> timeout is 2<\/span> seconds<\/span>:<\/span>
\n !<\/span>!<\/span>!<\/span>!<\/span>!<\/span>
\n Success rate is 100<\/span> percent<\/span> (<\/span>5<\/span>\/<\/span>5<\/span>)<\/span>,<\/span> round–<\/span>trip min\/<\/span>avg\/<\/span>max =<\/span> 0<\/span>\/<\/span>0<\/span>\/<\/span>0<\/span> ms
\n 8<\/span>.<\/span>show ip ospf neighbor:<\/span>OSPF<\/span> \u90bb\u5c45\u662f\u5426\u5efa\u7acb
\n Neighbor ID<\/span> Pri State Dead Time Address Interface
\n 1.1<\/span>.1<\/span>.1<\/span> 1<\/span> FULL<\/span>\/<\/span>BDR<\/span> 00<\/span>:<\/span>00<\/span>:<\/span>37<\/span> 192.168<\/span>.19<\/span>.166<\/span> GigabitEthernet1\/<\/span>0<\/span>\/<\/span>5<\/span>
\n 9<\/span>.<\/span>show ip protocols:<\/span>OSPF<\/span> \u662f\u5426\u8fd0\u884c\u3001\u7f51\u6bb5\u662f\u5426\u5ba3\u544a
\n Routing Protocol is "ospf 1"<\/span>
\n Outgoing update filter list for<\/span> all interfaces is not set<\/span>
\n Incoming update filter list for<\/span> all interfaces is not set<\/span>
\n Router ID<\/span> 2.2<\/span>.2<\/span>.2<\/span>
\n Number of<\/span> areas in<\/span> this<\/span> router is 1.<\/span> 1<\/span> normal 0<\/span> stub 0<\/span> nssa
\n Maximum path:<\/span> 4<\/span>
\n Routing for<\/span> Networks<\/span>:<\/span>
\n 192.168<\/span>.19<\/span>.164<\/span> 0.0<\/span>.0<\/span>.3<\/span> area 0<\/span>
\n 192.168<\/span>.16<\/span>.0<\/span> 0.0<\/span>.0<\/span>.127<\/span> area 0<\/span>
\n 192.168<\/span>.17<\/span>.0<\/span> 0.0<\/span>.0<\/span>.255<\/span> area 0<\/span>
\n 192.168<\/span>.18<\/span>.0<\/span> 0.0<\/span>.0<\/span>.255<\/span> area 0<\/span>
\n 192.168<\/span>.19<\/span>.128<\/span> 0.0<\/span>.0<\/span>.31<\/span> area 0<\/span>
\n Routing Information Sources:<\/span>
\n Gateway Distance Last Update
\n 1.1<\/span>.1<\/span>.1<\/span> 110<\/span> 00<\/span>:<\/span>07<\/span>:<\/span>50<\/span>
\n 2.2<\/span>.2<\/span>.2<\/span> 110<\/span> 00<\/span>:<\/span>07<\/span>:<\/span>49<\/span>
\n 3.3<\/span>.3<\/span>.3<\/span> 110<\/span> 00<\/span>:<\/span>07<\/span>:<\/span>50<\/span>
\n Distance<\/span>:<\/span> (<\/span>default<\/span> is 110<\/span>)<\/span>
\n 10<\/span>.<\/span>show ip route ospf:<\/span>\u662f\u5426\u5b66\u5230\u8fdc\u7aef OSPF<\/span> \u8def\u7531
\n 192.168<\/span>.16<\/span>.0<\/span>\/<\/span>24<\/span> is variably subnetted,<\/span> 3<\/span> subnets,<\/span> 2<\/span> masks
\n O<\/span> 192.168<\/span>.16<\/span>.128<\/span> [<\/span>110<\/span>\/<\/span>3<\/span>]<\/span> via 192.168<\/span>.19<\/span>.166<\/span>,<\/span> 01<\/span>:<\/span>09<\/span>:<\/span>55<\/span>,<\/span> GigabitEthernet1\/<\/span>0<\/span>\/<\/span>5<\/span>
\n 192.168<\/span>.19<\/span>.0<\/span>\/<\/span>24<\/span> is variably subnetted,<\/span> 6<\/span> subnets,<\/span> 4<\/span> masks
\n O<\/span> 192.168<\/span>.19<\/span>.0<\/span> [<\/span>110<\/span>\/<\/span>3<\/span>]<\/span> via 192.168<\/span>.19<\/span>.166<\/span>,<\/span> 01<\/span>:<\/span>09<\/span>:<\/span>55<\/span>,<\/span> GigabitEthernet1\/<\/span>0<\/span>\/<\/span>5<\/span>
\n O<\/span> 192.168<\/span>.19<\/span>.168<\/span> [<\/span>110<\/span>\/<\/span>2<\/span>]<\/span> via 192.168<\/span>.19<\/span>.166<\/span>,<\/span> 01<\/span>:<\/span>09<\/span>:<\/span>55<\/span>,<\/span> GigabitEthernet1\/<\/span>0<\/span>\/<\/span>5<\/span>
\n O<\/span> 192.168<\/span>.20<\/span>.0<\/span> [<\/span>110<\/span>\/<\/span>3<\/span>]<\/span> via 192.168<\/span>.19<\/span>.166<\/span>,<\/span> 01<\/span>:<\/span>09<\/span>:<\/span>55<\/span>,<\/span> GigabitEthernet1\/<\/span>0<\/span>\/<\/span>5<\/span>
\n O<\/span>*<\/span>E2<\/span> 0.0<\/span>.0<\/span>.0<\/span>\/<\/span>0<\/span> [<\/span>110<\/span>\/<\/span>1<\/span>]<\/span> via 192.168<\/span>.19<\/span>.166<\/span>,<\/span> 01<\/span>:<\/span>09<\/span>:<\/span>55<\/span>,<\/span> GigabitEthernet1\/<\/span>0<\/span>\/<\/span>5<\/span>
\n 11<\/span>.<\/span>show startup–<\/span>config:<\/span>\u662f\u5426\u5df2\u7ecf\u4fdd\u5b58<\/p>\n

MLS2\u8bbe\u8ba1：<\/h4>\n\n\u94fe\u8defA \u7aefB \u7aef\u7f51\u6bb5<\/tr>\n\n\n
Core – MLS2<\/td>\nCore G0\/2 192.168.19.170\/30<\/td>\nMLS2 G1\/0\/4 192.168.19.169\/30<\/td>\n192.168.19.168\/30<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
\u8fde\u7ebf<\/h5>\n\n\u8bbe\u5907 A\u7aef\u53e3 A\u8bbe\u5907 B\u7aef\u53e3 B\u7ebf\u7f06\u7c7b\u578b<\/tr>\n\n\n\n\n\n\n\n\n
Switch20<\/td>\nFastEthernet0\/1<\/td>\nPC20-1<\/td>\nFastEthernet0<\/td>\nCopper Straight-Through<\/td>\n<\/tr>\n
Switch50<\/td>\nFastEthernet0\/1<\/td>\nPC50-1<\/td>\nFastEthernet0<\/td>\nCopper Straight-Through<\/td>\n<\/tr>\n
Switch80<\/td>\nFastEthernet0\/1<\/td>\nAccess Point<\/td>\nPort0<\/td>\nCopper Straight-Through<\/td>\n<\/tr>\n
Switch20<\/td>\nGigabitEthernet0\/1<\/td>\nMLS2<\/td>\nGigabitEthernet1\/0\/1<\/td>\nCopper Cross-Over<\/td>\n<\/tr>\n
Switch50<\/td>\nGigabitEthernet0\/1<\/td>\nMLS2<\/td>\nGigabitEthernet1\/0\/2<\/td>\nCopper Cross-Over<\/td>\n<\/tr>\n
Switch80<\/td>\nGigabitEthernet0\/1<\/td>\nMLS2<\/td>\nGigabitEthernet1\/0\/3<\/td>\nCopper Cross-Over<\/td>\n<\/tr>\n
Core Router<\/td>\nGigabitEthernet0\/2<\/td>\nMLS2<\/td>\nGigabitEthernet1\/0\/4<\/td>\nCopper Straight-Through<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
MLS2 \u4e2d VLAN \u4e0e\u5730\u5740\u89c4\u5212<\/h5>\n\nVLAN\u540d\u79f0\/\u90e8\u95e8\u7f51\u6bb5\u9ed8\u8ba4\u7f51\u5173\u7f51\u5173\u6240\u5728\u8bbe\u5907<\/tr>\n\n\n\n\n
20<\/td>\nFinance<\/td>\n192.168.16.128\/25<\/td>\n192.168.16.129<\/td>\nMLS2 Vlan20<\/td>\n<\/tr>\n
50<\/td>\nPublic-Relations<\/td>\n192.168.19.0\/25<\/td>\n192.168.19.1<\/td>\nMLS2 Vlan50<\/td>\n<\/tr>\n
80<\/td>\nWireless<\/td>\n192.168.20.0\/22<\/td>\n192.168.20.1<\/td>\nMLS2 Vlan80<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
MLS2 \u7aef\u53e3\u89c4\u5212<\/h5>\n\nMLS2 \u7aef\u53e3\u8fde\u63a5\u8bbe\u5907\u7aef\u53e3\u6a21\u5f0f\u5141\u8bb8\u901a\u8fc7\u7684 VLAN \/ IP \u5730\u5740<\/tr>\n\n\n\n\n\n
GigabitEthernet1\/0\/1<\/td>\nSwitch20 G0\/1<\/td>\nTrunk<\/td>\nVLAN 20<\/td>\n<\/tr>\n
GigabitEthernet1\/0\/2<\/td>\nSwitch50 G0\/1<\/td>\nTrunk<\/td>\nVLAN 50<\/td>\n<\/tr>\n
GigabitEthernet1\/0\/3<\/td>\nSwitch80 G0\/1<\/td>\nTrunk<\/td>\nVLAN 80<\/td>\n<\/tr>\n
GigabitEthernet1\/0\/4<\/td>\nCore Router G0\/2<\/td>\n\u4e09\u5c42\u8def\u7531\u7aef\u53e3<\/td>\n192.168.19.169\/30<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

MLS2\u62d3\u6251\u56fe<\/h4>\n

\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\"<\/p>\n

MLS2\u4e2d\u4e8c\u5c42\u4ea4\u6362\u673a\u4ee3\u7801<\/h5>\n

\u4f8b\u5982 SW20<\/span> \u662f\u8d22\u52a1\u90e8，PC<\/span> \u63a5\u53e3\u5c5e\u4e8e VLAN20<\/span>：
\nenable
\nconfigure terminal
\nvlan 20<\/span>
\nname FINANCE<\/span>
\n!<\/span> PC<\/span> \u6240\u63a5\u7684\u7aef\u53e3
\ninterface<\/span> fastEthernet<\/span> 0<\/span>\/<\/span>1<\/span>
\n switchport mode access
\n switchport access vlan 20<\/span>
\n spanning–<\/span>tree portfast
\n!<\/span> \u4e0a\u8054\u5230 MLS1<\/span> \u7684\u7aef\u53e3
\ninterface<\/span> gigabitEthernet<\/span> 0<\/span>\/<\/span>1<\/span>
\n switchport mode trunk
\n switchport trunk allowed vlan 20<\/span>
\nend
\nwrite memory<\/p>\n

\u4f8b\u5982 SW50<\/span> \u662f\u516c\u5171\u5173\u7cfb\u90e8，PC<\/span> \u63a5\u53e3\u5c5e\u4e8e VLAN50<\/span>：
\nenable
\nconfigure terminal
\nvlan 50<\/span>
\nname PUBLIC_RELATIONS<\/span>
\n!<\/span> PC<\/span> \u6240\u63a5\u7684\u7aef\u53e3
\ninterface<\/span> fastEthernet<\/span> 0<\/span>\/<\/span>1<\/span>
\n switchport mode access
\n switchport access vlan 50<\/span>
\n spanning–<\/span>tree portfast
\n!<\/span> \u4e0a\u8054\u5230 MLS1<\/span> \u7684\u7aef\u53e3
\ninterface<\/span> gigabitEthernet<\/span> 0<\/span>\/<\/span>1<\/span>
\n switchport mode trunk
\n switchport trunk allowed vlan 50<\/span>
\nend
\nwrite memory<\/p>\n

\u4f8b\u5982 SW80<\/span> \u662f\u65e0\u7ebf\u7f51\u7edc，PC<\/span> \u63a5\u53e3\u5c5e\u4e8e VLAN80<\/span>：
\nenable
\nconfigure terminal
\nvlan 80<\/span>
\n name WIRELESS<\/span>
\n!<\/span> PC<\/span> \u6240\u63a5\u7684\u7aef\u53e3
\ninterface<\/span> fastEthernet<\/span> 0<\/span>\/<\/span>1<\/span>
\n switchport mode access
\n switchport access vlan 80<\/span>
\n spanning–<\/span>tree portfast
\n!<\/span> \u4e0a\u8054\u5230 MLS1<\/span> \u7684\u7aef\u53e3
\ninterface<\/span> gigabitEthernet<\/span> 0<\/span>\/<\/span>1<\/span>
\n switchport mode trunk
\n switchport trunk allowed vlan 80<\/span>
\nend
\nwrite memory<\/p>\n

MLS2（\u4e09\u5c42\u4ea4\u6362\u673a 2）\u914d\u7f6e<\/h5>\n

\u8d1f\u8d23 VLAN<\/span> 20<\/span>\u300150<\/span>\u300180<\/span>：<\/p>\n

enable
\n configure terminal
\n !<\/span> \u5f00\u542f\u4e09\u5c42\u4ea4\u6362\u548c VLAN<\/span> \u95f4\u8def\u7531
\n ip routing
\n !<\/span> \u521b\u5efa VLAN<\/span>
\n vlan 20<\/span>
\n name FINANCE<\/span>
\n vlan 50<\/span>
\n name PUBLIC_RELATIONS<\/span>
\n vlan 80<\/span>
\n name WIRELESS<\/span>
\n !<\/span> VLAN<\/span> 20<\/span>：\u8d22\u52a1\u90e8
\n interface<\/span> vlan<\/span> 20<\/span>
\n ip address 192.168<\/span>.16<\/span>.129<\/span> 255.255<\/span>.255<\/span>.128<\/span>
\n no shutdown
\n !<\/span> VLAN<\/span> 50<\/span>：\u516c\u5171\u5173\u7cfb\u90e8
\n interface<\/span> vlan<\/span> 50<\/span>
\n ip address 192.168<\/span>.19<\/span>.1<\/span> 255.255<\/span>.255<\/span>.128<\/span>
\n no shutdown
\n !<\/span> VLAN<\/span> 80<\/span>：\u65e0\u7ebf\u7f51\u7edc
\n interface<\/span> vlan<\/span> 80<\/span>
\n ip address 192.168<\/span>.20<\/span>.1<\/span> 255.255<\/span>.252<\/span>.0<\/span>
\n no shutdown
\n end
\n write memory<\/p>\n

MLS2<\/span>（\u4e09\u5c42\u4ea4\u6362\u673a）\u4e0a，\u628a\u8fde\u63a5\u5404\u4e8c\u5c42\u4ea4\u6362\u673a\u7684\u7269\u7406\u63a5\u53e3\u8bbe\u7f6e\u4e3a Trunk\u3002<\/p>\n

enable
\n configure terminal
\n !<\/span> \u8fde\u63a5 SW20<\/span>：\u53ea\u4f20\u9012 VLAN<\/span> 20<\/span>
\n interface<\/span> gigabitEthernet<\/span> 1<\/span>\/<\/span>0<\/span>\/<\/span>1<\/span>
\n switchport mode trunk
\n switchport trunk allowed vlan 20<\/span>
\n exit<\/p>\n

!<\/span> \u8fde\u63a5 SW50<\/span>：\u53ea\u4f20\u9012 VLAN<\/span> 50<\/span>
\n interface<\/span> gigabitEthernet<\/span> 1<\/span>\/<\/span>0<\/span>\/<\/span>2<\/span>
\n switchport mode trunk
\n switchport trunk allowed vlan 50<\/span>
\n exit<\/p>\n

!<\/span> \u8fde\u63a5 SW80<\/span>：\u53ea\u4f20\u9012 VLAN<\/span> 80<\/span>
\n interface<\/span> gigabitEthernet<\/span> 1<\/span>\/<\/span>0<\/span>\/<\/span>3<\/span>
\n switchport mode trunk
\n switchport trunk allowed vlan 80<\/span>
\n exit<\/p>\n

!<\/span> \u8fde\u63a5 SW70<\/span>：\u53ea\u4f20\u9012 VLAN<\/span> 70<\/span>
\n interface<\/span> gigabitEthernet<\/span> 1<\/span>\/<\/span>0<\/span>\/<\/span>4<\/span>
\n switchport mode trunk
\n switchport trunk allowed vlan 70<\/span>
\n exit<\/p>\n

end
\n write memory<\/p>\n

MLS2<\/span>（\u4e09\u5c42\u4ea4\u6362\u673a）\u4e0a，\u628a\u8fde\u63a5CoreRouter\u7684\u7269\u7406\u63a5\u53e3\u8bbe\u7f6eip\u5730\u5740<\/p>\n

enable
\n configure terminal<\/p>\n

!<\/span> \u8fde\u63a5 Core Router G0<\/span>\/<\/span>2<\/span> \u7684\u4e09\u5c42\u8def\u7531\u7aef\u53e3
\n interface<\/span> gigabitEthernet<\/span> 1<\/span>\/<\/span>0<\/span>\/<\/span>4<\/span>
\n description TO_CORE_ROUTER_G0<\/span>\/<\/span>2<\/span>
\n no switchport
\n ip address 192.168<\/span>.19<\/span>.169<\/span> 255.255<\/span>.255<\/span>.252<\/span>
\n no shutdown<\/p>\n

end
\n write memory
\nMLS2<\/span>（\u4e09\u5c42\u4ea4\u6362\u673a）\u4e0a，\u5efa\u7acbOSPF<\/span> \u3002
\n\u5728 MLS2<\/span> \u8f93\u5165：<\/p>\n

enable
\n configure terminal
\n !<\/span> \u5f00\u542f\u4e09\u5c42\u4ea4\u6362\u529f\u80fd
\n ip routing
\n !<\/span> ===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>=<\/span>
\n !<\/span> MLS2<\/span> \u8fde\u63a5 Core Router \u7684\u4e09\u5c42\u63a5\u53e3
\n !<\/span> ===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>=<\/span>
\n interface<\/span> gigabitEthernet<\/span> 1<\/span>\/<\/span>0<\/span>\/<\/span>4<\/span>
\n description TO_CORE_ROUTER_G0<\/span>\/<\/span>2<\/span>
\n no switchport
\n ip address 192.168<\/span>.19<\/span>.169<\/span> 255.255<\/span>.255<\/span>.252<\/span>
\n no shutdown
\n exit
\n !<\/span> ===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>=<\/span>
\n !<\/span> \u914d\u7f6e OSPF<\/span>
\n !<\/span> ===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>=<\/span>
\n router ospf 1<\/span>
\n !<\/span> MLS2<\/span> \u7684\u552f\u4e00 OSPF<\/span> Router ID<\/span>
\n router–<\/span>id 3.3<\/span>.3<\/span>.3<\/span>
\n !<\/span> \u9ed8\u8ba4\u8ba9\u6240\u6709\u63a5\u53e3\u4e0d\u5efa\u7acb OSPF<\/span> \u90bb\u5c45
\n passive–<\/span>interface<\/span> default<\/span>
\n !<\/span> \u53ea\u6709\u8fde\u63a5 Core \u7684\u63a5\u53e3\u5141\u8bb8\u5efa\u7acb OSPF<\/span> \u90bb\u5c45
\n no passive–<\/span>interface<\/span> gigabitEthernet<\/span> 1<\/span>\/<\/span>0<\/span>\/<\/span>4<\/span>
\n !<\/span> Core \u2194 MLS2<\/span> \u7684\u4e09\u5c42\u4e92\u8054\u94fe\u8def
\n network 192.168<\/span>.19<\/span>.168<\/span> 0.0<\/span>.0<\/span>.3<\/span> area 0<\/span>
\n !<\/span> VLAN<\/span> 20<\/span>：\u8d22\u52a1\u90e8
\n network 192.168<\/span>.16<\/span>.128<\/span> 0.0<\/span>.0<\/span>.127<\/span> area 0<\/span>
\n !<\/span> VLAN<\/span> 50<\/span>：\u516c\u5171\u5173\u7cfb\u90e8
\n network 192.168<\/span>.19<\/span>.0<\/span> 0.0<\/span>.0<\/span>.127<\/span> area 0<\/span>
\n !<\/span> VLAN<\/span> 80<\/span>：\u65e0\u7ebf\u7f51\u7edc
\n network 192.168<\/span>.20<\/span>.0<\/span> 0.0<\/span>.3<\/span>.255<\/span> area 0<\/span>
\n end
\n write memory<\/p>\n

Core Router \u8bbe\u8ba1<\/h4>\n

\u4e09\u5c42\u94fe\u8def\u4e0e\u5730\u5740\u89c4\u5212<\/h5>\n\n\u94fe\u8defA \u7aefB \u7aef\u7f51\u6bb5<\/tr>\n\n\n\n\n
Core Router – ASA<\/td>\nCore Router G0\/0 192.168.19.174\/30<\/td>\nASA inside 192.168.19.173\/30<\/td>\n192.168.19.172\/30<\/td>\n<\/tr>\n
Core Router – MLS1<\/td>\nCore Router G0\/1 192.168.19.166\/30<\/td>\nMLS1 G1\/0\/5 192.168.19.165\/30<\/td>\n192.168.19.164\/30<\/td>\n<\/tr>\n
Core Router – MLS2<\/td>\nCore Router G0\/2 192.168.19.170\/30<\/td>\nMLS2 G1\/0\/4 192.168.19.169\/30<\/td>\n192.168.19.168\/30<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
\u8fde\u7ebf<\/h5>\n\n\u8bbe\u5907 A\u7aef\u53e3 A\u8bbe\u5907 B\u7aef\u53e3 B\u7ebf\u7f06\u7c7b\u578b<\/tr>\n\n\n\n\n
Core Router<\/td>\nGigabitEthernet0\/0<\/td>\nASA-Firewall<\/td>\nEthernet0\/1<\/td>\neStraightThrough<\/td>\n<\/tr>\n
Core Router<\/td>\nGigabitEthernet0\/1<\/td>\nMLS1<\/td>\nGigabitEthernet1\/0\/5<\/td>\neStraightThrough<\/td>\n<\/tr>\n
Core Router<\/td>\nGigabitEthernet0\/2<\/td>\nMLS2<\/td>\nGigabitEthernet1\/0\/4<\/td>\neStraightThrough<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
Core Router \u63a5\u53e3\u89c4\u5212<\/h5>\n\nCore Router \u63a5\u53e3\u5bf9\u7aef\u8bbe\u5907\u672c\u7aef IP \u5730\u5740\u5bf9\u7aef IP \u5730\u5740\u63a5\u53e3\u4f5c\u7528NAT \u89d2\u8272<\/tr>\n\n\n\n\n
GigabitEthernet0\/0<\/td>\nASA inside<\/td>\n192.168.19.174\/30<\/td>\n192.168.19.173\/30<\/td>\n\u8fde\u63a5\u9632\u706b\u5899\u3001\u8bbf\u95ee\u5916\u7f51<\/td>\noutside<\/td>\n<\/tr>\n
GigabitEthernet0\/1<\/td>\nMLS1 G1\/0\/5<\/td>\n192.168.19.166\/30<\/td>\n192.168.19.165\/30<\/td>\n\u8fde\u63a5 VLAN 10\u300140\u300160\u300170<\/td>\ninside<\/td>\n<\/tr>\n
GigabitEthernet0\/2<\/td>\nMLS2 G1\/0\/4<\/td>\n192.168.19.170\/30<\/td>\n192.168.19.169\/30<\/td>\n\u8fde\u63a5 VLAN 20\u300150\u300180<\/td>\ninside<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
Core Router \u8def\u7531\u4e0e NAT \u89c4\u5212<\/h5>\n\n\u9879\u76ee\u914d\u7f6e\u5185\u5bb9\u4f5c\u7528<\/tr>\n\n\n\n\n\n\n\n\n\n
OSPF \u8fdb\u7a0b\u53f7<\/td>\nrouter ospf 1<\/td>\n\u4e0e MLS1\u3001MLS2 \u52a8\u6001\u4ea4\u6362\u8def\u7531<\/td>\n<\/tr>\n
Core Router ID<\/td>\n1.1.1.1<\/td>\nCore Router \u7684\u552f\u4e00 OSPF \u6807\u8bc6<\/td>\n<\/tr>\n
OSPF Area<\/td>\nArea 0<\/td>\nOSPF \u9aa8\u5e72\u533a\u57df<\/td>\n<\/tr>\n
MLS1 \u4e92\u8054\u7f51\u6bb5<\/td>\n192.168.19.164\/30<\/td>\n\u4e0e MLS1 \u5efa\u7acb OSPF \u90bb\u5c45<\/td>\n<\/tr>\n
MLS2 \u4e92\u8054\u7f51\u6bb5<\/td>\n192.168.19.168\/30<\/td>\n\u4e0e MLS2 \u5efa\u7acb OSPF \u90bb\u5c45<\/td>\n<\/tr>\n
\u9ed8\u8ba4\u8def\u7531<\/td>\n0.0.0.0\/0 \u2192 192.168.19.173<\/td>\n\u672a\u77e5\u6d41\u91cf\u4ea4\u7ed9 ASA<\/td>\n<\/tr>\n
NAT ACL<\/td>\n192.168.16.0 0.0.15.255<\/td>\n\u5141\u8bb8\u5185\u7f51 192.168.16.0\/20 \u51fa\u7f51<\/td>\n<\/tr>\n
PAT \u63a5\u53e3<\/td>\nGigabitEthernet0\/0<\/td>\n\u6240\u6709\u5185\u7f51\u4e3b\u673a\u5171\u7528 192.168.19.174 \u51fa\u7f51<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
Core Router \u53ef\u5b66\u4e60\u5230\u7684\u4e1a\u52a1\u7f51\u6bb5<\/h5>\n\n\u6765\u6e90\u8bbe\u5907VLAN\u90e8\u95e8\/\u7528\u9014\u7f51\u6bb5\u9ed8\u8ba4\u7f51\u5173<\/tr>\n\n\n\n\n\n\n\n\n
MLS1<\/td>\n10<\/td>\nAdministration-HR<\/td>\n192.168.16.0\/25<\/td>\n192.168.16.1<\/td>\n<\/tr>\n
MLS2<\/td>\n20<\/td>\nFinance<\/td>\n192.168.16.128\/25<\/td>\n192.168.16.129<\/td>\n<\/tr>\n
MLS1<\/td>\n40<\/td>\nSales-Marketing<\/td>\n192.168.17.0\/24<\/td>\n192.168.17.1<\/td>\n<\/tr>\n
MLS1<\/td>\n60<\/td>\nIT-Communications<\/td>\n192.168.18.0\/24<\/td>\n192.168.18.1<\/td>\n<\/tr>\n
MLS2<\/td>\n50<\/td>\nPublic-Relations<\/td>\n192.168.19.0\/25<\/td>\n192.168.19.1<\/td>\n<\/tr>\n
MLS1<\/td>\n70<\/td>\nServer-Room<\/td>\n192.168.19.128\/27<\/td>\n192.168.19.129<\/td>\n<\/tr>\n
MLS2<\/td>\n80<\/td>\nWireless<\/td>\n192.168.20.0\/22<\/td>\n192.168.20.1<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Core Router\u914d\u7f6e<\/h4>\n

enable
\n configure terminal
\n !<\/span> \u8bbe\u7f6e\u6838\u5fc3\u8def\u7531\u5668\u540d\u79f0
\n hostname CORE<\/span>–<\/span>Router
\n !<\/span> ===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>
\n !<\/span> G0<\/span>\/<\/span>0<\/span>：\u8fde\u63a5 ASA<\/span>
\n !<\/span> ===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>
\n interface<\/span> GigabitEthernet0<\/span>\/<\/span>0<\/span>
\n description TO_ASA<\/span>
\n !<\/span> Core Router：192.168<\/span>.19<\/span>.174<\/span>\/<\/span>30<\/span>
\n !<\/span> ASA<\/span> inside：192.168<\/span>.19<\/span>.173<\/span>\/<\/span>30<\/span>
\n ip address 192.168<\/span>.19<\/span>.174<\/span> 255.255<\/span>.255<\/span>.252<\/span>
\n ip nat outside
\n no shutdown
\n exit
\n !<\/span> ===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>
\n !<\/span> G0<\/span>\/<\/span>1<\/span>：\u8fde\u63a5 MLS1<\/span>
\n !<\/span> ===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>
\n interface<\/span> GigabitEthernet0<\/span>\/<\/span>1<\/span>
\n description TO_MLS1<\/span>
\n !<\/span> Core Router：192.168<\/span>.19<\/span>.166<\/span>\/<\/span>30<\/span>
\n !<\/span> MLS1<\/span>：192.168<\/span>.19<\/span>.165<\/span>\/<\/span>30<\/span>
\n ip address 192.168<\/span>.19<\/span>.166<\/span> 255.255<\/span>.255<\/span>.252<\/span>
\n ip nat inside
\n no shutdown
\n exit<\/p>\n

!<\/span> ===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>
\n !<\/span> G0<\/span>\/<\/span>2<\/span>：\u8fde\u63a5 MLS2<\/span>
\n !<\/span> ===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>
\n interface<\/span> GigabitEthernet0<\/span>\/<\/span>2<\/span>
\n description TO_MLS2<\/span>
\n !<\/span> Core Router：192.168<\/span>.19<\/span>.170<\/span>\/<\/span>30<\/span>
\n !<\/span> MLS2<\/span>：192.168<\/span>.19<\/span>.169<\/span>\/<\/span>30<\/span>
\n ip address 192.168<\/span>.19<\/span>.170<\/span> 255.255<\/span>.255<\/span>.252<\/span>
\n ip nat inside
\n no shutdown
\n exit<\/p>\n

!<\/span> ===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>
\n !<\/span> \u914d\u7f6e OSPF<\/span>
\n !<\/span> ===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>
\n router ospf 1<\/span>
\n router–<\/span>id 1.1<\/span>.1<\/span>.1<\/span>
\n network 192.168<\/span>.19<\/span>.164<\/span> 0.0<\/span>.0<\/span>.3<\/span> area 0<\/span>
\n network 192.168<\/span>.19<\/span>.168<\/span> 0.0<\/span>.0<\/span>.3<\/span> area 0<\/span>
\n default<\/span>–<\/span>information originate
\n exit<\/p>\n

!<\/span> ===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>
\n !<\/span> NAT<\/span> \u4f7f\u7528\u7684 ACL<\/span>
\n !<\/span> \u5141\u8bb8 192.168<\/span>.16<\/span>.0<\/span> ～ 192.168<\/span>.31<\/span>.255<\/span>
\n !<\/span> ===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>
\n access–<\/span>list 10<\/span> permit 192.168<\/span>.16<\/span>.0<\/span> 0.0<\/span>.15<\/span>.255<\/span><\/p>\n

!<\/span> \u914d\u7f6e PAT<\/span>：\u5185\u7f51\u8bbe\u5907\u5171\u7528 G0<\/span>\/<\/span>0<\/span> \u5730\u5740\u51fa\u7f51
\n ip nat inside source list 10<\/span> interface<\/span> GigabitEthernet0<\/span>\/<\/span>0<\/span> overload<\/p>\n

!<\/span> \u9ed8\u8ba4\u8def\u7531：\u672a\u77e5\u6d41\u91cf\u4ea4\u7ed9 ASA<\/span>
\n ip route 0.0<\/span>.0<\/span>.0<\/span> 0.0<\/span>.0<\/span>.0<\/span> 192.168<\/span>.19<\/span>.173<\/span><\/p>\n

end
\n write memory<\/p>\n

\u5728Core Router\u4e2d\u786e\u8ba4\u914d\u7f6e\u751f\u6548<\/h5>\n

1<\/span>.<\/span>show ip interface<\/span> brief<\/span>
\n2<\/span>.<\/span>show ip route
\n3<\/span>.<\/span>show ip ospf neighbor
\n4<\/span>.<\/span>show ip protocols
\n5<\/span>.<\/span>show ip nat statistics
\n6<\/span>.<\/span>show startup–<\/span>config<\/p>\n

ASA\u4e09\u5c42\u94fe\u8def\u4e0e\u5730\u5740\u89c4\u5212<\/h5>\n\n\u94fe\u8defA \u7aefB \u7aef\u7f51\u6bb5<\/tr>\n\n\n\n
ASA – Core Router<\/td>\nASA inside 192.168.19.173\/30<\/td>\nCore Router G0\/0 192.168.19.174\/30<\/td>\n192.168.19.172\/30<\/td>\n<\/tr>\n
ASA – ISP Router<\/td>\nASA outside 193.168.16.2\/30<\/td>\nISP Router 193.168.16.1\/30<\/td>\n193.168.16.0\/30<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
\u8fde\u7ebf<\/h5>\n\n\u8bbe\u5907 A\u7aef\u53e3 A\u8bbe\u5907 B\u7aef\u53e3 B\u7ebf\u7f06\u7c7b\u578b<\/tr>\n\n\n\n
ASA-Firewall<\/td>\nEthernet0\/1<\/td>\nCore Router<\/td>\nGigabitEthernet0\/0<\/td>\neStraightThrough<\/td>\n<\/tr>\n
ASA-Firewall<\/td>\nEthernet0\/0<\/td>\nISP Router<\/td>\nGigabitEthernet0\/0<\/td>\neStraightThrough<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
ASA \u63a5\u53e3\u89c4\u5212<\/h5>\n\nASA \u903b\u8f91\u63a5\u53e3\u5bf9\u5e94\u7269\u7406\u7aef\u53e3\u540d\u79f0\u5b89\u5168\u7ea7\u522bIP \u5730\u5740\u5bf9\u7aef\u8bbe\u5907\u63a5\u53e3\u4f5c\u7528<\/tr>\n\n\n\n
Vlan1<\/td>\nEthernet0\/1<\/td>\ninside<\/td>\n100<\/td>\n192.168.19.173\/30<\/td>\nCore Router G0\/0 192.168.19.174<\/td>\n\u63a5\u6536\u516c\u53f8\u5185\u7f51\u6d41\u91cf<\/td>\n<\/tr>\n
Vlan2<\/td>\nEthernet0\/0<\/td>\noutside<\/td>\n0<\/td>\n193.168.16.2\/30<\/td>\nISP Router G0\/0 193.168.16.1<\/td>\n\u8fde\u63a5 ISP \u4e0e\u5916\u90e8\u7f51\u7edc<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
ASA \u8def\u7531\u3001NAT \u4e0e\u5b89\u5168\u7b56\u7565<\/h5>\n\n\u9879\u76ee\u914d\u7f6e\u5185\u5bb9\u4f5c\u7528<\/tr>\n\n\n\n\n\n\n\n\n\n
\u9ed8\u8ba4\u8def\u7531<\/td>\nroute outside 0.0.0.0 0.0.0.0 193.168.16.1<\/td>\n\u6240\u6709\u672a\u77e5\u6d41\u91cf\u53d1\u9001\u7ed9 ISP Router<\/td>\n<\/tr>\n
NAT \u5bf9\u8c61<\/td>\nCORE_PAT_IP<\/td>\n\u8868\u793a Core Router NAT \u540e\u7684\u5730\u5740 192.168.19.174<\/td>\n<\/tr>\n
ASA PAT<\/td>\nnat (inside,outside) dynamic interface<\/td>\n\u5c06 192.168.19.174 \u8f6c\u6362\u4e3a ASA outside \u5730\u5740 193.168.16.2 \u51fa\u7f51<\/td>\n<\/tr>\n
ICMP \u68c0\u67e5<\/td>\ninspect icmp<\/td>\n\u5141\u8bb8\u5185\u7f51\u4e3b\u52a8 Ping \u5916\u7f51\u65f6，Echo Reply \u6b63\u786e\u8fd4\u56de<\/td>\n<\/tr>\n
\u5168\u5c40\u7b56\u7565<\/td>\nservice-policy global_policy global<\/td>\n\u5c06 ICMP \u68c0\u67e5\u7b56\u7565\u5e94\u7528\u5230 ASA \u5168\u5c40<\/td>\n<\/tr>\n
\u5916\u7f51 ACL<\/td>\naccess-group OUTSIDE_IN in interface outside<\/td>\n\u5c06 OUTSIDE_IN ACL \u5e94\u7528\u5230 outside \u5165\u65b9\u5411<\/td>\n<\/tr>\n
ICMP ACL<\/td>\npermit icmp any any echo-reply<\/td>\n\u5141\u8bb8\u5916\u7f51\u8fd4\u56de ICMP Echo Reply \u62a5\u6587<\/td>\n<\/tr>\n
TCP ACL<\/td>\npermit tcp host 203.0.113.2 host 192.168.19.174<\/td>\n\u914d\u7f6e\u4e86\u6765\u81ea Web Server \u7684 TCP \u653e\u884c\u89c4\u5219<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
\u5185\u7f51\u8bbf\u95ee\u5916\u7f51\u65f6\u7684\u5730\u5740\u8f6c\u6362\u8fc7\u7a0b<\/h5>\n\n\u9636\u6bb5\u6e90\u5730\u5740\u53d8\u5316\u6267\u884c\u8bbe\u5907<\/tr>\n\n\n\n\n\n
\u5185\u7f51\u4e3b\u673a\u53d1\u5305<\/td>\n\u4f8b\u5982 192.168.16.10<\/td>\nPC<\/td>\n<\/tr>\n
\u7b2c\u4e00\u6b21 PAT<\/td>\n192.168.16.10 \u2192 192.168.19.174<\/td>\nCore Router<\/td>\n<\/tr>\n
\u7b2c\u4e8c\u6b21 PAT<\/td>\n192.168.19.174 \u2192 193.168.16.2<\/td>\nASA-Firewall<\/td>\n<\/tr>\n
\u53d1\u5f80\u5916\u7f51<\/td>\n\u6e90\u5730\u5740\u4e3a 193.168.16.2<\/td>\nISP Router \/ Internet<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
ASA\u914d\u7f6e<\/h5>\n

enable
\n configure terminal<\/p>\n

!<\/span> \u8bbe\u7f6e ASA<\/span> \u540d\u79f0
\n hostname ASA<\/span>–<\/span>Firewall<\/p>\n

!<\/span> ===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>
\n !<\/span> Inside：\u8fde\u63a5 Core Router
\n !<\/span> ASA<\/span>：192.168<\/span>.19<\/span>.173<\/span>\/<\/span>30<\/span>
\n !<\/span> Core：192.168<\/span>.19<\/span>.174<\/span>\/<\/span>30<\/span>
\n !<\/span> ===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>
\n interface<\/span> Vlan1<\/span>
\n nameif inside
\n security–<\/span>level 100<\/span>
\n ip address 192.168<\/span>.19<\/span>.173<\/span> 255.255<\/span>.255<\/span>.252<\/span>
\n no shutdown
\n exit<\/p>\n

!<\/span> ===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>
\n !<\/span> Outside：\u8fde\u63a5 ISP<\/span> Router
\n !<\/span> ASA<\/span>：193.168<\/span>.16<\/span>.2<\/span>\/<\/span>30<\/span>
\n !<\/span> ISP<\/span>：193.168<\/span>.16<\/span>.1<\/span>\/<\/span>30<\/span>
\n !<\/span> ===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>
\n interface<\/span> Vlan2<\/span>
\n nameif outside
\n security–<\/span>level 0<\/span>
\n no ip address dhcp setroute
\n ip address 193.168<\/span>.16<\/span>.2<\/span> 255.255<\/span>.255<\/span>.252<\/span>
\n no shutdown
\n exit<\/p>\n

!<\/span> E0<\/span>\/<\/span>0<\/span>：\u8fde\u63a5 ISP<\/span>，\u52a0\u5165 outside \u7684 VLAN<\/span> 2<\/span>
\n interface<\/span> Ethernet0<\/span>\/<\/span>0<\/span>
\n switchport access vlan 2<\/span>
\n no shutdown
\n exit<\/p>\n

!<\/span> E0<\/span>\/<\/span>1<\/span>：\u8fde\u63a5 Core Router，\u52a0\u5165 inside \u7684 VLAN<\/span> 1<\/span>
\n interface<\/span> Ethernet0<\/span>\/<\/span>1<\/span>
\n switchport access vlan 1<\/span>
\n no shutdown
\n exit<\/p>\n

!<\/span> \u9ed8\u8ba4\u8def\u7531：\u672a\u77e5\u6d41\u91cf\u53d1\u5f80 ISP<\/span>
\n route outside 0.0<\/span>.0<\/span>.0<\/span> 0.0<\/span>.0<\/span>.0<\/span> 193.168<\/span>.16<\/span>.1<\/span><\/p>\n

!<\/span> ===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>
\n !<\/span> ASA<\/span> PAT<\/span>
\n !<\/span> Core PAT<\/span> \u540e\u7684\u6e90\u5730\u5740 .174<\/span>
\n !<\/span> \u518d\u8f6c\u6362\u4e3a ASA<\/span> outside \u5730\u5740 .2<\/span>
\n !<\/span> ===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>
\n object network CORE_PAT_IP<\/span>
\n host 192.168<\/span>.19<\/span>.174<\/span>
\n nat<\/span> (<\/span>inside,<\/span>outside)<\/span> dynamic interface<\/span>
\n exit<\/span><\/p>\n

!<\/span> ===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>
\n !<\/span> ICMP<\/span> \u68c0\u67e5\u7b56\u7565
\n !<\/span> \u5141\u8bb8\u5185\u7f51 ping \u7684 Echo Reply \u6b63\u786e\u8fd4\u56de
\n !<\/span> ===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>++<\/span>++<\/span>++<\/span>++<\/span>++<\/span>++<\/span>++<\/span>++<\/span>++<\/span>++<\/span>++<\/span>++<\/span>++<\/span>+<\/span>
\n configure terminal
\n class<\/span>–<\/span>map inspection_default
\n match default<\/span>–<\/span>inspection–<\/span>traffic
\n exit<\/p>\n

configure terminal
\n policy–<\/span>map global_policy
\n class<\/span> inspection_default<\/span>
\n inspect icmp
\n exit<\/p>\n

!<\/span> \u6b64\u5904\u5df2\u56de\u5230 ASA<\/span>(<\/span>config)<\/span># \u5168\u5c40\u914d\u7f6e\u6a21\u5f0f
\n configure terminal
\n service–<\/span>policy global_policy global<\/p>\n

end
\n write memory<\/p>\n

enable
\n configure terminal<\/p>\n

access–<\/span>list OUTSIDE_IN<\/span> extended permit icmp any any echo–<\/span>reply
\n access–<\/span>group OUTSIDE_IN<\/span> in<\/span> interface<\/span> outside<\/span>
\n end
\n write memory<\/p>\n

enable
\n configure terminal<\/p>\n

access–<\/span>list OUTSIDE_IN<\/span> extended permit tcp host 203.0<\/span>.113<\/span>.2<\/span> host 192.168<\/span>.19<\/span>.174<\/span><\/p>\n

end
\n write memory<\/p>\n

ASA<\/span>–<\/span>Firewall#configure terminal
\n ASA<\/span>–<\/span>Firewall<\/span>(<\/span>config)<\/span>#service–<\/span>policy global_policy global
\n WARNING<\/span>:<\/span> Policy map global_policy is already configured as<\/span> a service policy
\n ASA<\/span>–<\/span>Firewall<\/span>(<\/span>config)<\/span>#end
\n ASA<\/span>–<\/span>Firewall#write memory<\/p>\n

\u786e\u8ba4ASA\u914d\u7f6e\u751f\u6548<\/h5>\n

\u6ce8\u610f：\u4f60\u6700\u540e\u914d\u7f6e\u7684 TCP<\/span> ACL<\/span> \u867d\u7136\u5141\u8bb8 203.0<\/span>.113<\/span>.2<\/span> \u8bbf\u95ee 192.168<\/span>.19<\/span>.174<\/span>，
\n\u4f46 .174<\/span> \u4f7f\u7528\u7684\u662f\u52a8\u6001 PAT<\/span>，\u4e0d\u80fd\u7528\u4e8e\u7a33\u5b9a\u7684\u5916\u7f51\u4e3b\u52a8\u8bbf\u95ee\u5185\u7f51\u670d\u52a1\u3002
\n\u82e5\u4ee5\u540e\u8981\u8ba9\u5916\u7f51\u8bbf\u95ee\u5185\u7f51\u670d\u52a1\u5668，\u9700\u8981\u989d\u5916\u914d\u7f6e\u9759\u6001 NAT<\/span> \u6216\u7aef\u53e3\u6620\u5c04\u3002
\n a．\u9a8c\u8bc1\u63a5\u53e3\u3001VLAN<\/span> \u548c\u5b89\u5168\u57df
\n enable
\n show interface<\/span> ip<\/span> brief
\n show nameif
\n show running–<\/span>config interface<\/span> Ethernet0<\/span>\/<\/span>0<\/span>
\n show running–<\/span>config interface<\/span> Ethernet0<\/span>\/<\/span>1<\/span><\/p>\n

\u6b63\u786e\u65f6\u5e94\u786e\u8ba4：
\n Vlan1 =<\/span> 192.168<\/span>.19<\/span>.173<\/span> =<\/span> inside =<\/span> security–<\/span>level 100<\/span>
\n Vlan2 =<\/span> 193.168<\/span>.16<\/span>.2<\/span> =<\/span> outside =<\/span> security–<\/span>level 0<\/span>
\n Ethernet0\/<\/span>0<\/span> =<\/span> access vlan 2<\/span>
\n Ethernet0\/<\/span>1<\/span> =<\/span> access vlan 1<\/span><\/p>\n

show interface<\/span> ip<\/span> brief \u4e2d，Vlan1\u3001Vlan2\u3001Ethernet0\/<\/span>0<\/span>\u3001Ethernet0\/<\/span>1<\/span> \u90fd\u662f：up up<\/p>\n

b．\u9a8c\u8bc1 ASA<\/span> \u5230 Core \u548c ISP<\/span> \u7684\u76f4\u8fde\u94fe\u8def<\/p>\n

192.168<\/span>.19<\/span>.174<\/span> =<\/span> Core Router G0<\/span>\/<\/span>0<\/span>
\n 193.168<\/span>.16<\/span>.1<\/span> =<\/span> ISP<\/span> Router<\/p>\n

ping 192.168<\/span>.19<\/span>.174<\/span>
\n ping 193.168<\/span>.16<\/span>.1<\/span>
\n c．\u9a8c\u8bc1\u9ed8\u8ba4\u8def\u7531
\n show route<\/p>\n

C<\/span> 192.168<\/span>.19<\/span>.172<\/span> 255.255<\/span>.255<\/span>.252<\/span> is directly connected,<\/span> inside
\n C<\/span> 193.168<\/span>.16<\/span>.0<\/span> 255.255<\/span>.255<\/span>.252<\/span> is directly connected,<\/span> outside
\n S<\/span>*<\/span> 0.0<\/span>.0<\/span>.0<\/span> 0.0<\/span>.0<\/span>.0<\/span> [<\/span>1<\/span>\/<\/span>0<\/span>]<\/span> via 193.168<\/span>.16<\/span>.1<\/span>,<\/span> outside
\n \u6700\u5173\u952e\u7684\u662f：S<\/span>*<\/span> 0.0<\/span>.0<\/span>.0<\/span>\/<\/span>0<\/span> \u2192 193.168<\/span>.16<\/span>.1<\/span>,<\/span> outside
\n \u8fd9\u8868\u793a\u672a\u77e5\u7684\u5916\u7f51\u6d41\u91cf\u4f1a\u88ab ASA<\/span> \u53d1\u7ed9 ISP<\/span> Router\u3002<\/p>\n

d．\u9a8c\u8bc1 ASA<\/span> NAT<\/span> \u89c4\u5219\u662f\u5426\u5b58\u5728
\n show nat<\/p>\n

Auto NAT<\/span> Policies<\/span> (<\/span>Section 2<\/span>)<\/span>
\n 1<\/span> (<\/span>inside)<\/span> to<\/span> (<\/span>outside)<\/span> source dynamic CORE_PAT_IP<\/span> interface<\/span><\/p>\n

\u8fd9\u4ee3\u8868：inside \u6e90\u5730\u5740 192.168<\/span>.19<\/span>.174<\/span>\u4f1a\u88ab\u52a8\u6001\u8f6c\u6362\u4e3a ASA<\/span> outside \u5730\u5740 193.168<\/span>.16<\/span>.2<\/span><\/p>\n

e．\u9a8c\u8bc1 ICMP<\/span> \u68c0\u67e5\u7b56\u7565\u5df2\u5e94\u7528
\n show service–<\/span>policy<\/p>\n

\u5e94\u770b\u5230\u7c7b\u4f3c：<\/p>\n

Global policy:<\/span>
\n Service–<\/span>policy:<\/span> global_policy
\n Class–<\/span>map:<\/span> inspection_default
\n Inspect<\/span>:<\/span> icmp<\/p>\n

\u8fd9\u8868\u793a：inspect icmp\u5df2\u7ecf\u4f5c\u4e3a\u5168\u5c40\u7b56\u7565\u751f\u6548，\u5185\u7f51\u53d1\u51fa\u7684 ping \u56de\u5305\u53ef\u4ee5\u6b63\u5e38\u8fd4\u56de\u3002<\/p>\n

f．\u6700\u91cd\u8981：\u7528\u5185\u7f51 PC<\/span> \u4ea7\u751f\u771f\u5b9e\u51fa\u7f51\u6d41\u91cf<\/p>\n

\u5728\u4efb\u610f\u5185\u7f51 PC<\/span> \u4e0a\u6267\u884c，\u4f8b\u5982 VLAN<\/span> 10<\/span> \u7684 PC<\/span>：<\/p>\n

ping 192.168<\/span>.16<\/span>.1<\/span>
\n ping 203.0<\/span>.113<\/span>.2<\/span><\/p>\n

\u7136\u540e\u7acb\u523b\u5230 ASA<\/span> \u8f93\u5165：<\/p>\n

show xlate
\n show nat
\n show conn
\n show service–<\/span>policy<\/p>\n

show xlate \u4e2d\u5e94\u770b\u5230\u4e0e\u4e0b\u5217\u542b\u4e49\u76f8\u540c\u7684 NAT<\/span> \u6620\u5c04：<\/p>\n

Inside local:<\/span> 192.168<\/span>.19<\/span>.174<\/span>
\n Inside global:<\/span> 193.168<\/span>.16<\/span>.2<\/span><\/p>\n

\u6ce8\u610f：ASA<\/span> \u4e0a\u770b\u4e0d\u5230\u539f\u59cb PC<\/span> \u7684 192.168<\/span>.16<\/span>.<\/span>x，\u8fd9\u662f\u6b63\u5e38\u7684；\u56e0\u4e3a Core \u5df2\u5148\u628a\u5b83\u8f6c\u6362\u4e3a .174<\/span>\u3002<\/p>\n

\u6b64\u65f6 show nat \u7684\u8ba1\u6570\u5e94\u589e\u52a0：<\/p>\n

translate_hits ><\/span> 0<\/span>
\n untranslate_hits ><\/span> 0<\/span>
\n translate_hits \u589e\u52a0：ASA<\/span> \u5df2\u628a .174<\/span> \u8f6c\u4e3a .16<\/span>.2<\/span>\u3002
\n untranslate_hits \u589e\u52a0：\u5916\u7f51\u8fd4\u56de\u6d41\u91cf\u5df2\u88ab ASA<\/span> \u8f6c\u56de .174<\/span>\u3002
\n g．\u9a8c\u8bc1\u914d\u7f6e\u5df2\u4fdd\u5b58
\n show startup–<\/span>config<\/p>\n

ISP-Router \u4e09\u5c42\u94fe\u8def\u4e0e\u5730\u5740\u89c4\u5212<\/h4>\n\n\u94fe\u8defA \u7aefB \u7aef\u7f51\u6bb5<\/tr>\n\n\n\n
ISP Router – ASA<\/td>\nISP Router G0\/0 193.168.16.1\/30<\/td>\nASA outside 193.168.16.2\/30<\/td>\n193.168.16.0\/30<\/td>\n<\/tr>\n
ISP Router – Web Server<\/td>\nISP Router G0\/1 203.0.113.1\/24<\/td>\nWeb Server 203.0.113.2\/24<\/td>\n203.0.113.0\/24<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
\u8fde\u7ebf<\/h5>\n\n\u8bbe\u5907 A\u7aef\u53e3 A\u8bbe\u5907 B\u7aef\u53e3 B\u7ebf\u7f06\u7c7b\u578b<\/tr>\n\n\n\n
ISP-Router<\/td>\nGigabitEthernet0\/0<\/td>\nASA-Firewall<\/td>\nEthernet0\/0<\/td>\neStraightThrough<\/td>\n<\/tr>\n
ISP-Router<\/td>\nGigabitEthernet0\/1<\/td>\nWeb Server<\/td>\nFastEthernet0<\/td>\neStraightThrough<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
ISP Router \u63a5\u53e3\u89c4\u5212<\/h5>\n\nISP Router \u63a5\u53e3\u63cf\u8ff0IP \u5730\u5740\u5b50\u7f51\u63a9\u7801\u5bf9\u7aef\u8bbe\u5907\u63a5\u53e3\u4f5c\u7528<\/tr>\n\n\n\n
GigabitEthernet0\/0<\/td>\nTO_ASA_OUTSIDE<\/td>\n193.168.16.1<\/td>\n255.255.255.252<\/td>\nASA outside 193.168.16.2<\/td>\n\u6a21\u62df ISP，\u4e0e ASA \u5916\u7f51\u63a5\u53e3\u4e92\u8054<\/td>\n<\/tr>\n
GigabitEthernet0\/1<\/td>\nTO_WEB_SERVER<\/td>\n203.0.113.1<\/td>\n255.255.255.0<\/td>\nWeb Server 203.0.113.2<\/td>\n\u6a21\u62df\u516c\u7f51\u670d\u52a1\u5668\u6240\u5728\u7f51\u6bb5\u7684\u7f51\u5173<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
\u516c\u7f51 Web Server \u5730\u5740\u89c4\u5212<\/h5>\n\n\u8bbe\u5907IP \u5730\u5740\u5b50\u7f51\u63a9\u7801\u9ed8\u8ba4\u7f51\u5173\u6240\u5728\u7f51\u6bb5<\/tr>\n\n\n
Web Server<\/td>\n203.0.113.2<\/td>\n255.255.255.0<\/td>\n203.0.113.1<\/td>\n203.0.113.0\/24<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
\u5728 ISP Router \u8f93\u5165：<\/h5>\n

enable
\n configure terminal
\n !<\/span> \u8bbe\u7f6e ISP<\/span> \u8def\u7531\u5668\u540d\u79f0
\n hostname ISP<\/span>–<\/span>Router
\n !<\/span> ===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>
\n !<\/span> G0<\/span>\/<\/span>0<\/span>：\u8fde\u63a5 ASA<\/span> outside
\n !<\/span> ===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>
\n interface<\/span> GigabitEthernet0<\/span>\/<\/span>0<\/span>
\n description TO_ASA_OUTSIDE<\/span>
\n ip address 193.168<\/span>.16<\/span>.1<\/span> 255.255<\/span>.255<\/span>.252<\/span>
\n no shutdown
\n exit
\n !<\/span> ===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>
\n !<\/span> G0<\/span>\/<\/span>1<\/span>：\u8fde\u63a5\u6a21\u62df\u516c\u7f51 Web Server
\n !<\/span> ===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>
\n interface<\/span> GigabitEthernet0<\/span>\/<\/span>1<\/span>
\n description TO_WEB_SERVER<\/span>
\n ip address 203.0<\/span>.113<\/span>.1<\/span> 255.255<\/span>.255<\/span>.0<\/span>
\n no shutdown
\n exit
\n end
\n write memory<\/p>\n

Web Server \u7684 Desktop \u2192 IP Configuration \u8bbe\u7f6e：<\/h5>\n

IP<\/span> Address<\/span>:<\/span> 203.0<\/span>.113<\/span>.2<\/span>
\n Subnet Mask:<\/span> 255.255<\/span>.255<\/span>.0<\/span>
\n Default Gateway:<\/span> 203.0<\/span>.113<\/span>.1<\/span><\/p>\n

SW70：\u5c06\u4e24\u53f0\u670d\u52a1\u5668\u7aef\u53e3\u52a0\u5165 VLAN 70<\/h5>\n
DHCP Server\u914d\u7f6e\u9759\u6001 IP<\/h6>\n

Desktop \u2192 IP Configuration \u2192 Static
\n\u586b\u5199：
\n IP Address: 192.168.19.130
\n Subnet Mask: 255.255.255.224
\n Default Gateway: 192.168.19.129
\n DNS Server: 192.168.19.131
\n\u70b9\u51fb Add ，\u5efa\u7acb\u5176\u4ed6 VLAN \u7684 Pool\u3002<\/p>\n\nPool Name\u5bf9\u5e94 VLANDefault GatewayDNS ServerStart IP AddressSubnet MaskMaximum Users<\/tr>\n\n\n\n\n\n\n\n
VLAN10_ADMIN_HR<\/td>\n10<\/td>\n192.168.16.1<\/td>\n192.168.19.131<\/td>\n192.168.16.10<\/td>\n255.255.255.128<\/td>\n90<\/td>\n<\/tr>\n
VLAN20_FINANCE<\/td>\n20<\/td>\n192.168.16.129<\/td>\n192.168.19.131<\/td>\n192.168.16.140<\/td>\n255.255.255.128<\/td>\n90<\/td>\n<\/tr>\n
VLAN40_SALES<\/td>\n40<\/td>\n192.168.17.1<\/td>\n192.168.19.131<\/td>\n192.168.17.10<\/td>\n255.255.255.0<\/td>\n200<\/td>\n<\/tr>\n
VLAN50_PR<\/td>\n50<\/td>\n192.168.19.1<\/td>\n192.168.19.131<\/td>\n192.168.19.10<\/td>\n255.255.255.128<\/td>\n90<\/td>\n<\/tr>\n
VLAN60_IT<\/td>\n60<\/td>\n192.168.18.1<\/td>\n192.168.19.131<\/td>\n192.168.18.10<\/td>\n255.255.255.0<\/td>\n200<\/td>\n<\/tr>\n
VLAN80_WIRELESS<\/td>\n80<\/td>\n192.168.20.1<\/td>\n192.168.19.131<\/td>\n192.168.20.10<\/td>\n255.255.252.0<\/td>\n1000<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

\u4e0d\u9700\u8981\u4e3a VLAN<\/span> 70<\/span> \u521b\u5efa Pool，\u56e0\u4e3a：
\nDHCP<\/span> Server：192.168<\/span>.19<\/span>.130<\/span>（\u9759\u6001）
\nDNS<\/span> Server： 192.168<\/span>.19<\/span>.131<\/span>（\u9759\u6001）
\n\u5b83\u4eec\u81ea\u5df1\u4e0d\u5e94\u8be5\u901a\u8fc7 DHCP<\/span> \u83b7\u53d6\u5730\u5740\u3002<\/p>\n

DNS Server：\u914d\u7f6e\u9759\u6001 IP<\/h6>\n

Desktop \u2192 IP<\/span> Configuration \u2192 Static
\n \u586b\u5199：
\n IP<\/span> Address<\/span>:<\/span> 192.168<\/span>.19<\/span>.131<\/span>
\n Subnet Mask:<\/span> 255.255<\/span>.255<\/span>.224<\/span>
\n Default Gateway:<\/span> 192.168<\/span>.19<\/span>.129<\/span>
\n DNS<\/span> Server<\/span>:<\/span> 192.168<\/span>.19<\/span>.131<\/span><\/p>\n

\u7136\u540e\u8fdb\u5165：
\n Services \u2192 DNS<\/span> \u2192 On
\n \u6dfb\u52a0 A<\/span> \u8bb0\u5f55：
\n NameAddress
\n www.<\/span>test.<\/span>com203.0<\/span>.113<\/span>.2<\/span>
\n \u70b9\u51fb Add\u3002<\/p>\n

\u5c06\u4e24\u53f0\u670d\u52a1\u5668\u6240\u63a5\u7684\u7aef\u53e3\u5c5e\u4e8e VLAN 70<\/h5>\n

enable
\n configure terminal
\n !<\/span> DHCP<\/span> Server \u4e0e DNS<\/span> Server \u7684\u7aef\u53e3\u90fd\u52a0\u5165 VLAN<\/span> 70<\/span>
\n interface<\/span> range<\/span> fastEthernet 0<\/span>\/<\/span>1<\/span>–<\/span>2<\/span>
\n switchport mode access
\n switchport access vlan 70<\/span>
\n spanning–<\/span>tree portfast
\n no shutdown
\n exit<\/p>\n

end
\n write memory<\/p>\n

\u5c06\u6240\u6709\u5ba2\u6237\u7aef VLAN \u7684 DHCP Relay \u6307\u5411 DHCP Server .130<\/h5>\n
MLS1：VLAN 10\u300140\u300160 \u914d\u7f6e DHCP Relay<\/h6>\n

enable
\n configure terminal
\n !<\/span> DHCP<\/span> Server：192.168<\/span>.19<\/span>.130<\/span>
\n !<\/span> DNS<\/span> Server：192.168<\/span>.19<\/span>.131<\/span>
\n !<\/span> ===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>
\n !<\/span> VLAN<\/span> 10<\/span>：\u884c\u653f\u4e0e\u4eba\u529b\u8d44\u6e90\u90e8
\n !<\/span> ===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>
\n interface<\/span> vlan<\/span> 10<\/span>
\n no ip helper–<\/span>address 192.168<\/span>.19<\/span>.170<\/span>
\n no ip helper–<\/span>address 192.168<\/span>.19<\/span>.131<\/span>
\n ip helper–<\/span>address 192.168<\/span>.19<\/span>.130<\/span>
\n exit
\n !<\/span> ===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>
\n !<\/span> VLAN<\/span> 40<\/span>：\u9500\u552e\u4e0e\u5e02\u573a\u90e8
\n !<\/span> ===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>
\n interface<\/span> vlan<\/span> 40<\/span>
\n no ip helper–<\/span>address 192.168<\/span>.19<\/span>.170<\/span>
\n no ip helper–<\/span>address 192.168<\/span>.19<\/span>.131<\/span>
\n ip helper–<\/span>address 192.168<\/span>.19<\/span>.130<\/span>
\n exit
\n !<\/span> ===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>
\n !<\/span> VLAN<\/span> 60<\/span>：IT<\/span> \u4e0e\u901a\u4fe1\u90e8
\n !<\/span> ===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>
\n interface<\/span> vlan<\/span> 60<\/span>
\n no ip helper–<\/span>address 192.168<\/span>.19<\/span>.170<\/span>
\n no ip helper–<\/span>address 192.168<\/span>.19<\/span>.131<\/span>
\n ip helper–<\/span>address 192.168<\/span>.19<\/span>.130<\/span>
\n exit
\n end
\n write memory<\/p>\n

MLS2：VLAN 20\u300150\u300180 \u914d\u7f6e DHCP Relay<\/h6>\n

enable
\n configure terminal
\n !<\/span> DHCP<\/span> Server：192.168<\/span>.19<\/span>.130<\/span>
\n !<\/span> DNS<\/span> Server：192.168<\/span>.19<\/span>.131<\/span>
\n !<\/span> ===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>
\n !<\/span> VLAN<\/span> 20<\/span>：\u8d22\u52a1\u90e8
\n !<\/span> ===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>
\n interface<\/span> vlan<\/span> 20<\/span>
\n no ip helper–<\/span>address 192.168<\/span>.19<\/span>.170<\/span>
\n no ip helper–<\/span>address 192.168<\/span>.19<\/span>.131<\/span>
\n ip helper–<\/span>address 192.168<\/span>.19<\/span>.130<\/span>
\n exit
\n !<\/span> ===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>
\n !<\/span> VLAN<\/span> 50<\/span>：\u516c\u5171\u5173\u7cfb\u90e8
\n !<\/span> ===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>
\n interface<\/span> vlan<\/span> 50<\/span>
\n no ip helper–<\/span>address 192.168<\/span>.19<\/span>.170<\/span>
\n no ip helper–<\/span>address 192.168<\/span>.19<\/span>.131<\/span>
\n ip helper–<\/span>address 192.168<\/span>.19<\/span>.130<\/span>
\n exit
\n !<\/span> ===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>
\n !<\/span> VLAN<\/span> 80<\/span>：\u65e0\u7ebf\u7f51\u7edc
\n !<\/span> ===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>===<\/span>
\n interface<\/span> vlan<\/span> 80<\/span>
\n no ip helper–<\/span>address 192.168<\/span>.19<\/span>.170<\/span>
\n no ip helper–<\/span>address 192.168<\/span>.19<\/span>.131<\/span>
\n ip helper–<\/span>address 192.168<\/span>.19<\/span>.130<\/span>
\n exit
\n end
\n write memory
\n VLAN<\/span> 70<\/span> \u4e0d\u9700\u8981 ip helper–<\/span>address，\u56e0\u4e3a DHCP<\/span> Server \u5c31\u5728 VLAN<\/span> 70<\/span> \u5185\u3002<\/p>\n

vlan80\u64cd\u4f5c<\/h6>\n

AP<\/span> \u7684\u7f51\u7ebf\u8fde\u63a5\u65b9\u5f0f：<\/p>\n

Switch80 Fa0\/<\/span>1<\/span>
\n\u2193 \u4f7f\u7528 Copper Straight–<\/span>Through
\nAccessPoint–<\/span>PT<\/span> \u7684 Ethernet \/<\/span> Port 0<\/span><\/p>\n

Port 0<\/span> =<\/span> \u7528\u7f51\u7ebf\u8fde\u63a5 Switch6 \u7684\u63a5\u53e3
\nPort 1<\/span> =<\/span> \u65e0\u7ebf Wi–<\/span>Fi \u63a5\u53e3
\n\u5148\u76f4\u63a5\u5728\u4f60\u5f53\u524d\u7684 Port 1<\/span> \u9875\u9762\u914d\u7f6e Wi\u2011Fi：
\n\u628a SSID<\/span> \u4ece Default \u6539\u4e3a：Apple–<\/span>WiFi
\n\u5728 Authentication \u4e2d\u70b9\u51fb：WPA2<\/span>–<\/span>PSK<\/span>
\n\u6b64\u65f6\u53f3\u4fa7\u7684 PSK<\/span> Pass Phrase \u8f93\u5165\u6846\u4f1a\u89e3\u9664\u7070\u8272\u72b6\u6001，\u8f93\u5165：pple@2026<\/span>
\n\u5982\u679c\u8981\u6c42\u9009\u62e9\u52a0\u5bc6\u65b9\u5f0f，\u9009\u62e9：AES<\/span>
\n\u4fdd\u6301\u53f3\u4e0a\u89d2：Port Status：On
\n\u5982\u679c Settings \u548c Port 0<\/span> \u4e2d\u90fd\u6ca1\u6709 IP<\/span> \u5730\u5740\u8f93\u5165\u6846，\u8bf4\u660e\u4f60\u8fd9\u4e2a Packet Tracer \u7684 AccessPoint–<\/span>PT<\/span> \u662f\u4e00\u4e2a\u7eaf\u4e8c\u5c42 AP<\/span> \u6a21\u578b\u3002\u6b64\u65f6\u4e0d\u9700\u8981\u7ed9 AP<\/span> \u914d\u7f6e .20<\/span>.2<\/span>，\u5b83\u4ecd\u7136\u53ef\u4ee5\u6b63\u5e38\u5de5\u4f5c，\u53ea\u8d1f\u8d23\u628a：\u4ea4\u6362\u673a VLAN<\/span> 80<\/span>\u2194\u65e0\u7ebf\u5ba2\u6237\u7aef\u8fde\u63a5\u8d77\u6765\u3002<\/p>\n

\u6dfb\u52a0pc\u7684\u65f6\u5019\u8bb0\u5f97\u5c06pc\u7684\u7f51\u53e3\u8bbe\u7f6e\u4e3a\u65e0\u7ebf<\/p>\n

\u6dfb\u52a0\u6253\u5370\u673a<\/h6>\n

Connections \u2192 Copper Straight–<\/span>Through\u8fde\u63a5：Printer FastEthernet0 \u2192 \u63a5\u5165\u4ea4\u6362\u673a Fa0\/<\/span>x
\n\u914d\u7f6e\u4ea4\u6362\u673a\u7aef\u53e3
\n\u5047\u8bbe\u6253\u5370\u673a\u63a5\u5728 Fa0\/<\/span>24<\/span>：
\nenable
\nconfigure terminal
\ninterface<\/span> FastEthernet0<\/span>\/<\/span>24<\/span>
\n switchport mode access
\n switchport access vlan 10<\/span>
\n no shutdown
\nend
\nwrite memory
\n\u914d\u7f6e\u6253\u5370\u673a IP<\/span><\/p>\n

\u603b\u62d3\u6251<\/h4>\n

\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\"<\/p>\n","protected":false},"excerpt":{"rendered":"

\u4f01\u4e1a\u56ed\u533a\u7f51\u7edc\u8bbe\u8ba1\u4e0e\u5b9e\u73b0
\nA.\u9879\u76ee\u63cf\u8ff0\u4e0e\u9700\u6c42\u67d0\u516c\u53f8 \u8058\u8bf7\u4f60\u4e3a\u5176\u4f4d\u4e8e\u514b\u62c9\u79d1\u592b\u7684\u65b0\u603b\u90e8\u642d\u5efa\u4e00\u4e2a LAN\u3002\u4ee5\u4e0b\u662f\u5728\u65b0\u697c\u5b87\u4e2d\u90e8\u7f72\u8be5\u7f51\u7edc\u7684\u9700\u6c42\u30021.\u4f7f\u7528 Cisco Packet Tracer \u5b9e\u73b0\u8be5\u89e3\u51b3\u65b9\u6848\u30022.\u516c\u53f8\u5206\u914d\u7684\u7f51\u7edc\u5730\u5740\u4e3a 192.168.1.0\/20\u30023.\u8fd9\u680b 4 \u5c42\u697c\u7684\u6bcf\u4e00\u5c42\u90fd\u6709\u4e0d\u540c\u90e8\u95e8\u529e\u516c\u3002\u6bcf\u4e2a\u90e8\u95e8\u5c06\u5212\u5206\u5230\u4e0d\u540c\u7684 VLAN \u548c\u4e0d\u540c\u7684\u5b50\u7f51\u30024.\u4e09\u697c\u5c06\u90e8\u7f72\u4e00\u4e2a\u65e0\u7ebf\u63a5\u5165\u70b9，\u6700\u591a\u53ef\u63a5\u5165 1000 \u53f0\u8bbe\u5907\u3002\u5404\u697c\u5c42\u548c\u90e8\u95e8\u7684\u8be6\u7ec6\u4fe1\u606f\u5982\u4e0b\u3002\u7b2c 1 \u5c42：\u884c\u653f\u4e0e<\/p>\n","protected":false},"author":2,"featured_media":99705,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[167,78,191],"topic":[],"class_list":["post-99708","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-server","tag-167","tag-78","tag-191"],"yoast_head":"\n\u4f01\u4e1a\u56ed\u533a\u7f51\u7edc\u8bbe\u8ba1\u4e0e\u5b9e\u73b0 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.wsisp.com\/helps\/99708.html\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u4f01\u4e1a\u56ed\u533a\u7f51\u7edc\u8bbe\u8ba1\u4e0e\u5b9e\u73b0 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"og:description\" content=\"\u4f01\u4e1a\u56ed\u533a\u7f51\u7edc\u8bbe\u8ba1\u4e0e\u5b9e\u73b0 A.\u9879\u76ee\u63cf\u8ff0\u4e0e\u9700\u6c42\u67d0\u516c\u53f8 \u8058\u8bf7\u4f60\u4e3a\u5176\u4f4d\u4e8e\u514b\u62c9\u79d1\u592b\u7684\u65b0\u603b\u90e8\u642d\u5efa\u4e00\u4e2a LAN\u3002\u4ee5\u4e0b\u662f\u5728\u65b0\u697c\u5b87\u4e2d\u90e8\u7f72\u8be5\u7f51\u7edc\u7684\u9700\u6c42\u30021.\u4f7f\u7528 Cisco Packet Tracer \u5b9e\u73b0\u8be5\u89e3\u51b3\u65b9\u6848\u30022.\u516c\u53f8\u5206\u914d\u7684\u7f51\u7edc\u5730\u5740\u4e3a 192.168.1.0\/20\u30023.\u8fd9\u680b 4 \u5c42\u697c\u7684\u6bcf\u4e00\u5c42\u90fd\u6709\u4e0d\u540c\u90e8\u95e8\u529e\u516c\u3002\u6bcf\u4e2a\u90e8\u95e8\u5c06\u5212\u5206\u5230\u4e0d\u540c\u7684 VLAN \u548c\u4e0d\u540c\u7684\u5b50\u7f51\u30024.\u4e09\u697c\u5c06\u90e8\u7f72\u4e00\u4e2a\u65e0\u7ebf\u63a5\u5165\u70b9，\u6700\u591a\u53ef\u63a5\u5165 1000 \u53f0\u8bbe\u5907\u3002\u5404\u697c\u5c42\u548c\u90e8\u95e8\u7684\u8be6\u7ec6\u4fe1\u606f\u5982\u4e0b\u3002\u7b2c 1 \u5c42：\u884c\u653f\u4e0e\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.wsisp.com\/helps\/99708.html\" \/>\n<meta property=\"og:site_name\" content=\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-02T21:48:50+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/09\/20260902214848-6a9899c02229e.png\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"17 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/99708.html\",\"url\":\"https:\/\/www.wsisp.com\/helps\/99708.html\",\"name\":\"\u4f01\u4e1a\u56ed\u533a\u7f51\u7edc\u8bbe\u8ba1\u4e0e\u5b9e\u73b0 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"isPartOf\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\"},\"datePublished\":\"2026-09-02T21:48:50+00:00\",\"dateModified\":\"2026-09-02T21:48:50+00:00\",\"author\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/99708.html#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.wsisp.com\/helps\/99708.html\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/99708.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.wsisp.com\/helps\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u4f01\u4e1a\u56ed\u533a\u7f51\u7edc\u8bbe\u8ba1\u4e0e\u5b9e\u73b0\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\",\"url\":\"https:\/\/www.wsisp.com\/helps\/\",\"name\":\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"description\":\"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"contentUrl\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"caption\":\"admin\"},\"sameAs\":[\"http:\/\/wp.wsisp.com\"],\"url\":\"https:\/\/www.wsisp.com\/helps\/author\/admin\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"\u4f01\u4e1a\u56ed\u533a\u7f51\u7edc\u8bbe\u8ba1\u4e0e\u5b9e\u73b0 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.wsisp.com\/helps\/99708.html","og_locale":"zh_CN","og_type":"article","og_title":"\u4f01\u4e1a\u56ed\u533a\u7f51\u7edc\u8bbe\u8ba1\u4e0e\u5b9e\u73b0 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","og_description":"\u4f01\u4e1a\u56ed\u533a\u7f51\u7edc\u8bbe\u8ba1\u4e0e\u5b9e\u73b0 A.\u9879\u76ee\u63cf\u8ff0\u4e0e\u9700\u6c42\u67d0\u516c\u53f8 \u8058\u8bf7\u4f60\u4e3a\u5176\u4f4d\u4e8e\u514b\u62c9\u79d1\u592b\u7684\u65b0\u603b\u90e8\u642d\u5efa\u4e00\u4e2a LAN\u3002\u4ee5\u4e0b\u662f\u5728\u65b0\u697c\u5b87\u4e2d\u90e8\u7f72\u8be5\u7f51\u7edc\u7684\u9700\u6c42\u30021.\u4f7f\u7528 Cisco Packet Tracer \u5b9e\u73b0\u8be5\u89e3\u51b3\u65b9\u6848\u30022.\u516c\u53f8\u5206\u914d\u7684\u7f51\u7edc\u5730\u5740\u4e3a 192.168.1.0\/20\u30023.\u8fd9\u680b 4 \u5c42\u697c\u7684\u6bcf\u4e00\u5c42\u90fd\u6709\u4e0d\u540c\u90e8\u95e8\u529e\u516c\u3002\u6bcf\u4e2a\u90e8\u95e8\u5c06\u5212\u5206\u5230\u4e0d\u540c\u7684 VLAN \u548c\u4e0d\u540c\u7684\u5b50\u7f51\u30024.\u4e09\u697c\u5c06\u90e8\u7f72\u4e00\u4e2a\u65e0\u7ebf\u63a5\u5165\u70b9，\u6700\u591a\u53ef\u63a5\u5165 1000 \u53f0\u8bbe\u5907\u3002\u5404\u697c\u5c42\u548c\u90e8\u95e8\u7684\u8be6\u7ec6\u4fe1\u606f\u5982\u4e0b\u3002\u7b2c 1 \u5c42：\u884c\u653f\u4e0e","og_url":"https:\/\/www.wsisp.com\/helps\/99708.html","og_site_name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","article_published_time":"2026-09-02T21:48:50+00:00","og_image":[{"url":"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/09\/20260902214848-6a9899c02229e.png"}],"author":"admin","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"admin","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"17 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.wsisp.com\/helps\/99708.html","url":"https:\/\/www.wsisp.com\/helps\/99708.html","name":"\u4f01\u4e1a\u56ed\u533a\u7f51\u7edc\u8bbe\u8ba1\u4e0e\u5b9e\u73b0 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","isPartOf":{"@id":"https:\/\/www.wsisp.com\/helps\/#website"},"datePublished":"2026-09-02T21:48:50+00:00","dateModified":"2026-09-02T21:48:50+00:00","author":{"@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41"},"breadcrumb":{"@id":"https:\/\/www.wsisp.com\/helps\/99708.html#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.wsisp.com\/helps\/99708.html"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.wsisp.com\/helps\/99708.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.wsisp.com\/helps"},{"@type":"ListItem","position":2,"name":"\u4f01\u4e1a\u56ed\u533a\u7f51\u7edc\u8bbe\u8ba1\u4e0e\u5b9e\u73b0"}]},{"@type":"WebSite","@id":"https:\/\/www.wsisp.com\/helps\/#website","url":"https:\/\/www.wsisp.com\/helps\/","name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","description":"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41","name":"admin","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/","url":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","contentUrl":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","caption":"admin"},"sameAs":["http:\/\/wp.wsisp.com"],"url":"https:\/\/www.wsisp.com\/helps\/author\/admin"}]}},"_links":{"self":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/99708","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/comments?post=99708"}],"version-history":[{"count":0,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/99708\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/media\/99705"}],"wp:attachment":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/media?parent=99708"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/categories?post=99708"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/tags?post=99708"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/topic?post=99708"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}