本文模拟试验如下:

===============================================

1.Gns3连接vps

2.Gns3连接虚拟机

3.Gns3连接真机

4.Gns3将vps,虚拟机,真机互通

5.Gns3实验PBR策略路由

===============================================

实验1:Gns3连接vps

Topology

VPC1配置:

R1配置:

R1#conf t

Enter configuration commands, one per line.  End with CNTL/Z. R1(config)#int fa 0/0 R1(config-if)#ip add 192.168.1.254 255.255.255.0 R1(config-if)#no sh R1(config-if)#do ping 192.1 *Mar  1 00:06:56.147: %LINK-3-UPDOWN: Interface FastEthernet0/0, changed state to up *Mar  1 00:06:57.147: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to up R1(config-if)#do ping 192.168.1.2 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.1.2, timeout is 2 seconds: .!!!! Success rate is 80 percent (4/5), round-trip min/avg/max = 8/15/32 ms

Ok,实验1结束.

---------------------------------------------------------------------------------------

实验2:Gns3连接虚拟机(将虚拟机网卡设置在VMnet1上)

Topology

虚拟机:

root@badboy-virtual-machine:/home/badboy# ifconfig eth0

eth0      Link encap:Ethernet  HWaddr 00:0c:29:a4:0c:45            inet addr:192.168.2.2  Bcast:192.168.2.255  Mask:255.255.255.0          inet6 addr: fe80::20c:29ff:fea4:c45/64 Scope:Link          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1          RX packets:1280 errors:0 dropped:0 overruns:0 frame:0          TX packets:1239 errors:0 dropped:0 overruns:0 carrier:0          collisions:0 txqueuelen:1000           RX bytes:121102 (121.1 KB)  TX bytes:126756 (126.7 KB)          Interrupt:19 Base address:0x2000

R1配置:

R1#conf t

Enter configuration commands, one per line.  End with CNTL/Z. R1(config)#int fa 0/0 R1(config-if)#ip add 192.168.2.254 255.255.255.0 R1(config-if)#no sh

R1测试

R1(config-if)#do ping 192.1 *Mar  1 00:03:32.319: %LINK-3-UPDOWN: Interface FastEthernet0/0, changed state to up *Mar  1 00:03:33.319: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to up R1(config-if)#do ping 192.168.2.2 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.2.2, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 8/13/20 ms

虚拟机测试:

root@badboy-virtual-machine:/home/badboy# ping 192.168.2.254

PING 192.168.2.254 (192.168.2.254) 56(84) bytes of data. 64 bytes from 192.168.2.254: icmp_req=1 ttl=255 time=17.6 ms 64 bytes from 192.168.2.254: icmp_req=2 ttl=255 time=29.4 ms 64 bytes from 192.168.2.254: icmp_req=3 ttl=255 time=20.3 ms 64 bytes from 192.168.2.254: icmp_req=4 ttl=255 time=30.6 ms 64 bytes from 192.168.2.254: icmp_req=5 ttl=255 time=10.6 ms ^C --- 192.168.2.254 ping statistics --- 5 packets transmitted, 5 received, 0% packet loss, time 4034ms rtt min/avg/max/mdev = 10.637/21.732/30.605/7.478 ms OK,实验2结束.

-----------------------------------------------------------------------------------

实验3:Gns3连接真机(仅能用Loopback接口)

Topology

真实机配置loopback口:

R1配置:

R1(config)#int fa 0/0

R1(config-if)#ip add 192.168.3.254 255.255.255.0 R1(config-if)#no shut R1(config-if)# R1测试:

R1(config-if)#do ping 192.168.3.2

Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.3.2, timeout is 2 seconds: .!!!! Success rate is 80 percent (4/5), round-trip min/avg/max = 4/16/28 ms

真实机测试:

C:\Users\badboy>ping 192.168.3.254

正在 Ping 192.168.3.254 具有 32 字节的数据: 来自 192.168.3.254 的回复: 字节=32 时间=36ms TTL=255 来自 192.168.3.254 的回复: 字节=32 时间=32ms TTL=255 来自 192.168.3.254 的回复: 字节=32 时间=9ms TTL=255 来自 192.168.3.254 的回复: 字节=32 时间=10ms TTL=255 192.168.3.254 的 Ping 统计信息:    数据包: 已发送 = 4，已接收 = 4，丢失 = 0 (0% 丢失)， 往返行程的估计时间(以毫秒为单位):    最短 = 9ms，最长 = 36ms，平均 = 21ms

OK,实验3结束

-----------------------------------------------------------------------------

实验4:Gns3将vps,虚拟机,真机互通

Topology

R1配置:

R1(config)#int fa 0/0

R1(config-if)#ip add 192.168.3.254 255.255.255.0 R1(config-if)#no sh R1(config-if)#int fa *Mar  1 00:01:27.387: %LINK-3-UPDOWN: Interface FastEthernet0/0, changed state to up *Mar  1 00:01:28.387: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to up R1(config-if)#int fa 1/0 R1(config-if)#ip add 192.168.2.254 255.255.255.0 R1(config-if)#no sh R1(config-if)#int fa 2/0 *Mar  1 00:01:45.655: %LINK-3-UPDOWN: Interface FastEthernet1/0, changed state to up *Mar  1 00:01:46.655: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet1/0, changed state to up R1(config-if)#int fa 2/0 R1(config-if)#ip add 192.168.1.254 255.255.255.0 R1(config-if)#no sh R1(config-if)#

vpc配置看实验1,虚拟机配置看实验2,真机配置看实验3.

R1测试:

R1(config-if)#do ping 192.168.1.2

Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.1.2, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 16/27/36 ms R1(config-if)#do ping 192.168.2.2 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.2.2, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 8/18/32 ms R1(config-if)#do ping 192.168.3.2 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.3.2, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 8/18/32 ms OK,实验4结束.

------------------------------------------------------------------------------

为何要花这么长时间来折腾呢?因为很多复杂的实验都需要我们将vpc和虚拟机及真实机混合起来,所以我们需要点时间来把基础的东西好好练习练习....

来把,搞点复杂的实验.

实验5:Gns3实验PBR策略路由

Topology

第1步,先将vpc,真实机,虚拟机,路由器配置对应ip

第2步,R1,R2,R3,R4添加静态路由器

R1

Gateway of last resort is not set

C    192.168.4.0/24 is directly connected, FastEthernet1/0 C    192.168.5.0/24 is directly connected, FastEthernet2/0 S    192.168.2.0/24 [1/0] via 192.168.5.253 C    192.168.3.0/24 is directly connected, FastEthernet0/0 R2

Gateway of last resort is not set

C    192.168.4.0/24 is directly connected, FastEthernet0/0 C    192.168.6.0/24 is directly connected, FastEthernet1/0 S    192.168.2.0/24 [1/0] via 192.168.6.254 S    192.168.3.0/24 [1/0] via 192.168.4.254

R3

Gateway of last resort is not set

C    192.168.5.0/24 is directly connected, FastEthernet0/0 C    192.168.7.0/24 is directly connected, FastEthernet1/0 S    192.168.2.0/24 [1/0] via 192.168.7.254 S    192.168.3.0/24 [1/0] via 192.168.5.254

R4

Gateway of last resort is not set

C    192.168.6.0/24 is directly connected, FastEthernet1/0 C    192.168.7.0/24 is directly connected, FastEthernet0/0 C    192.168.2.0/24 is directly connected, FastEthernet2/0 S    192.168.3.0/24 [1/0] via 192.168.7.253                    [1/0] via 192.168.6.253

测试真实机/VPC到虚拟机-server

如果想让路由从R2走,那么只需要将R1将去往192.168.2.0的下一跳指到R2的接口上,便可以了.

但这个实验,不是我们想要的,我们需要的是将真实机访问虚拟机Server的80走R2,SSH走R3.

VPC 30这个ip走R2,40这个ip走R3.

添加ACL

R1(config)#access-list 100 permit tcp any any eq 80

R1(config)#access-list 101 permit tcp any any eq 22

R1(config)#route-map myPBR permit 10

R1(config-route-map)#match ip address 100 R1(config-route-map)#set ip next-hop 192.168.4.253 R1(config-route-map)#exit

R1(config)#route-map myPBR permit 20 R1(config-route-map)#match ip address 101 R1(config-route-map)#set ip next-hop 192.168.5.253 R1(config-route-map)#exit

R1(config)#int fa 0/0 R1(config-if)#ip policy route-map myPBR 以上就定义了80应用走R2,22应用走R3,如何测试呢.

还好,我装了wireshark

我们在访问80的时候,可以通过抓取R2连接R4之间的链路,再尝试telnet 22端口,是通的,但没有抓取到包,说明访问22走的是R3那条路.

那么,我们还需要试验VPC走不同的路噢.

R1(config)#access-list 1 permit 192.168.3.30 0.0.0.0

R1(config)#access-list 2 permit 192.168.3.40 0.0.0.0 R1(config)#route-map myPBR permit 10 R1(config-route-map)#match ip address 1 R1(config-route-map)#match ip address 100 R1(config-route-map)#set ip next-hop 192.168.4.253 R1(config-route-map)#exit R1(config)#route-map myPBR permit 20 R1(config-route-map)#match ip address 2 R1(config-route-map)#match ip address 101 R1(config-route-map)#set ip next-hop 192.168.5.253 R1(config-route-map)#exit R1(config)#int fa 0/0 R1(config-if)#ip policy route-map myPBR R1(config-if)#exit

测试

到此,我的GNS3测试结束.