ensp之DHCP、ACL、NAT配置

1、DHCP

二层交换机

int e0/0/1  int e0/0/2
port link-type access
port default vlan 10/20
int e0/0/3
port link-type trunk
port trunk allow-pass vlan all

三层交换机

int g0/0/1
port link-type trunk
port trunk allow-pass vlan all
vlan batch 10 20 30
dhcp enable                        开启dhcp功能
int vlan 10/20/30
ip address 192.168.10.1 24/  192.168.20.1 24 / 192.168.30.1 24
int vlan 10/20
dhcp select relay                  开启dhcp中继
dhcp relay server-ip 192.168.30.2  指向dhcp服务器端口ip
int g0/0/2
port link-type access
port defalut vlan 30

dhcp服务器

dhcp enable
int g0/0/0
ip address 192.168.30.2 24 写成之前指向的ip地址
dhcp select global         开启dhcp全局配置
ip pool pc 6               分配给pc6 dhcp
network 192.168.10.0 mask 24
gatway-list 192.168.10.1
dns-list 8.8.8.8     
ip pool pc 7               分配给pc7 dhcp
network 192.168.20.0 mask 24
gatway-list 192.168.20.1
dns-list 8.8.8.8

2、ACL+NAT

拓扑如下

AR3配置    AR4，配置接口IP：10.1.1.2 24（g0/0/0）

配置pc4和pc5的dhcp和接口ip

dhcp enable
int g0/0/0
ip address 192.168.1.1 26
dhcp select global
int g0/0/1
ip address 192.168.1.193 26
dhcp select global
ip pool pc4
network 192.168.1.0 mask 26
gatway-list 192.168.1.1
ip pool pc5
network 192.168.1.192 mask 26
gatway-list 192.168.1.193             
  
配置ACL规则，允许pc5流量进行nat转换上公网，拒绝pc4流量

acl 2000 (基本acl，根据源IP进行匹配)
rule deny source 192.168.1.0 0.0.0.63
rule permit source 192.168.1.192 0.0.0.63
quit
int g2/0/0
ip address 10.1.1.1 24
nat outbound 2000                  动态pat进行端口转换

配置上公网的默认路由
ip route-static 0.0.0.0 0 10.1.1.2

高级ACL

动静态nat pat

静态nat

静态pat

3、ospf

R4配置（接口ip已经配好），其他路由器操作类似，但是要注意把网段按区域全宣告进去。

ospf 1 router-id 1.1.1.1
area 0
network 192.168.10.0 0.0.0.255
area 1
network 192.168.50.0 0.0.0.255