【说明】
某企业的网络结构如图4-1所示。企业使用双出口,其中ISP1是高速链路,网关为202.100.1.2, ISP2是低速链路,网关为104.114.128.2。
公司内部有两个网段,192.168.1.0/24 和192.168.2.0/24, 使用三层交换机SwitchB实现VLAN间路由。为提高用户体验,网络管理员决定带宽要求较高的192.168.1.0 网段的数据通过高速链路访问互联网,带宽要求较低的192.168.2.0网段的数据通过低速链路访问互联网。请根据描述,将以下配置代码补充完整。
[SwitchB] acl 3000
[SwitchB-acl-adv-3000] rule permit ip source 192.168.1.0 0.0.0.255 destination 192.168.2.0 0.0.0.255
[SwitchB-acl-adv-3000] rule permit ip source 192.168.2.0 0.0.0.255 destination 192.168.1.0 0.0.0.255
[SwitchB-acl-adv-3000] quit
[SwitchB] acl 3001 //匹配内网192. 168.1.0/24网段的用户数据流
[SwitchB-acl-adv-3001] rule permit ip source( 1 )0.0.0.255
[SwitchB acl-adv-3001] quit
[SwitchB] acl 3002 //匹配内网192.168.2.0/24 网段的用户数据流
[SwitchB-acl-adv-3002] rule permit ip( 2 )192.168.2.0 0.0.0.255
[SwitchB-acl-adv-3002] quit
[SwitchB] traffic classifier c0 operator or
[SwitchB-classifier-c0]( 3 )acl 3000
[SwitchB-classifer-c0] quit
[SwitchB] traffic classifier c1 ( 4 ) or
[SwitchB-classifier-c1] if-match acl 3001
[SwitchB-classifer-c1] quit
[SwitchB] traffic classifier c2 operator or
[SwitchB-classifer-c2] if-match acl( 5 )
[SwitchB-classfer-c2]( 6 ) quit
[SwitchB] traffic behavior b0
[SwitchB-behavior-b0]( 7 )
[SwitchB-behavior-b0] quit
[SwitchB] traffic behavior bl
[SwitchB-behavior-b1] redirect ip-nexthop( 8 )
[SwitchB-behavior-b1] quit
[SwitchB] traffic behavior b2
[SwitchB-behavior-b2] redirect ip-nexthop( 9 )
[SwitchB-behavior-b2] quit
[SwitchB] traffic policy p1
[SwitchB-trafficpolicy-p1] classifier c0 behavior( 10 )
[SwitchB-trafficpolicy-p1] classifier c1 behavior( 11 )
[SwitchB-trafficpolicy-p1] classifier c2 behavior b2
[SwitchB-trafficpolicy-p1] quit
[SwitchB] interface ( 12 )
[SwitchB-GigabitEthenet0/0/3] traffic-policy pl( 13 )
SwitchB-GigabitEthernet0/0/3] return
(1)192.168.1.0
(2)source
(3)if-match
(4)operator
(5)3002
(6)无
(7)permit
(8)202.100.1.1
(9)104.114.128.1
(10)b0
(11)b1
(12)GigabitEthenet0/0/3(或GE0/0/3)
(13)inbound
在问题1的配置代码中,配置ACL 3000的作用是:( 14 )。
(14)实现网段192.168.1.0/24和192.168.2.0/24的VLAN路由互通。
公司需要访问Intermet公网,计划通过配置NAT实现私网地址到公网地址的转换,ISP1公网地址范围为202.100.1.1~202.100.1.5 ;ISP2 公网地址范围为104.114.128.1~104.114.128.5。
请根据描述,将下面的配置代码补充完整。
.....
[SwitchB]nat address-group 0 202.100.1.3 202.100.1.5
[SwitchB]nat address-group 1 104.114.128.3 104.114.128.5
[SwitchB]acl number 2000
[SwitchB-acl-basic-2000]rule 5 ( 15 )source 192.168.1.0 0.0.0.255
[SwitchB]acl number 2001
[SwitchB-acl-basic-2001]rule 5 permit source 192.168.2.0 0.0.0.255
[SwitchB]interface GigabitEthernet0/0/3
[SwitchB-GigabitEthernet0/0/3]nat outbound( 16 )address group 0 no-pat
[SwitchB-GigabitEthernnet0/0/3]nat outbound( 17 )address group 1 no-pat
[SwitchB-GigabitEthernet0/0/3]quit
[SwitchB] ip route-static 192.168.1.0 0.0.0.255( 18 )
[SwitchB] ip route-static 192.168.2.0 0.0.0.255( 19 )
(15)permit
(16)2000
(17)2001
(18)G0/0/3
(19)G0/0/3