Quan tri mang - CT06
1. Thi thuc hanh
2. De cuong
3. Cong cu hoc
- Thi cuoi ky: GNS3, Vmware
- Thi giua ky: Cisco packet tracert
- Muc tieu chinh:
+ Dien toan dam may
+ Phat trien ung dung tren cloud
Bai 1. Mo hinh mang 7 thanh phan
Buoi so 1
1. Mo hinh mang 7 thanh phan
- 1 Tang access: Gan voi user nhat
Switch layer 2 - OSI tang 2
Vi du: switch 24 port X 6 = 120 user
- 2 Tang Distribute: ket noi nhieu access
Vi du: switch 1 switch 24
Switch layer 3
(multilayer layer) - OSI 2, 3
Policy
- 3 Tang Core: Switch layer 3
+ performent
- 4 Tang server farm: Server
- 5 Tang DMZ: server ao hoa - public server
(Docker, container, Kubernet)
- 6 WAN: ket noi internet
- 7 Security: Firewall, IDS, IPS
Vi du: port 345 TCP
2. Thiet ke va cau hinh he thong
- 3 USB: Cisco packet tracer
- Dang nhap bang account tren zalo
- 14h-14h30
- 14h30: thiet ke va cau hinh mo hinh
mang
3. Cau hinh mo hinh mang
3.1 Cau hinh Virtual LAN
Switch> : user mode -- ko cau hinh
Switch>enable
Switch# : Priveledge mode -- kiem tra cau hinh
Switch#configure terminal
Switch(config)#: config mode - cau hinh
chinh
Switch>enable
Switch#configure terminal
Switch(config)#exit
Switch#configure terminal
Switch(config)#hostname AS1
AS1(config)#exit
- Kiem tra vlan
AS1#show vlan
-- vlan mac dinh la vlan 1
-- theo mac dinh thi tat ca cac cong thuoc
vlan 1
- Tao vlan
AS1#configure terminal
AS1(config)#vlan 2
AS1(config-vlan)#name ketoan
AS1(config-vlan)#exit
AS1(config)#vlan 3
AS1(config-vlan)#name IT
-- Khi tao vlan thi mac dinh vlan do
ko con cong nao ca.
- Gan cong (interface) vao vlan
0/1, 0/5, 0/6: vlan 2
0/2, 0/7, 0/8: vlan 3
AS1#configure terminal
AS1(config)#interface f0/1
AS1(config-if)#switchport mode access
AS1(config-if)#switchport access vlan 2
AS1(config-if)#exit
AS1(config)#interface range fastEthernet 0/5-6
AS1(config-if-range)#switchport mode access
AS1(config-if-range)#switchport access vlan 2
PC1: vlan 2 - 192.168.1.1
PC100 f0/5 - 192.168.1.3
PC2: vlan 3 - 192.168.1.2
Cac may tinh thuoc cung vlan thi lien lac ok
Cac may tinh thuoc cac vlan khac nhau thi
khong lien lac
3.2 Cau hinh VTP - VLAN Trunking Protocol
VTP la giao thuc tren Cisco
Dung de dong bo vlan
Vi du:
Buoc 1: Tao 10 vlan tren DS1
Buoc 2: Cau hinh VTP de 10 vlan tren DS1
dong bo sang DS2, AS1, AS2, AS3
Buoc 3: Kiem tra ket qua
VTP muon su dung duoc thi co 2 DK:
- Dieu kien 1: Trunking
- Dien kien 2: VTP domain
Trunking la ket noi giua switch - switch
cho moi VLAN di qua
Cau hinh trunking:
+ Trunking giua AS1 - DS1, AS1 - DS2
....AS1 - DS1
AS1(config)#interface f0/3
AS1(config-if)#switchport mode trunk
DS1(config)#interface f0/1
DS1(config-if)#switchport trunk encapsulation dot1q
DS1(config-if)#switchport mode trunk
AS1: switch layer 2
DS1: switch layer 3
+ Trunking giua AS2 - DS1, AS2 - DS2
....
Kiem tra cau hinh trunking:
AS1#show interface trunk
Cau hinh tao vlan:
DS1(config)#vlan 2
DS1(config-vlan)#name IT
DS1(config-vlan)#exit
DS1(config)#vlan 3
DS1(config-vlan)#name TI
Cau hinh VTP: cung 1 VTP domain
DS1(config)#vtp domain abc
DS1(config)#vtp password 123
DS1(config)#vtp mode server
AS1(config)#vtp domain abc
AS1(config)#vtp password 123
AS1(config)#vtp mode client
Tuong tu AS1 cho AS2, AS3 va DS2
AS1#show vlan
MEO: tu DS1 ko dong bo qua duoc
DS1(config)#vlan 100
DS1(config)#no vlan 100
Luu cau hinh:
DS1#wr
DS2#wr
-----------------------------------------------------------------------------------
-----------------------------------------------------------------------------------
-----------------------------------------------------------------------------------
-----------------------------------------------------------------------------------
-----------------------------------------------------------------------------------
-----------------------------------------------------------------------------------
------------------------------------------------------
Buoi so 2. Cau hinh dinh tuyen
Thiet ke mo hinh da cho
00000000 0
10000000 128 + 64
11000000 192 + 32
11100000 224 + 16
11110000 240 + 8
11111000 248 + 4
11111100 252 + 2
11111110 254 + 1
11111111 255
/26 = 8+8+8+2 --> 255.255.255.192
/19 = 8+8+3+0 --> 255.255.224.0
Buoc 1. Dat IP theo mo hinh
- Dat IP cho 2 may tinh
- Dat IP cho 2 router
Router>enable
Router#configure terminal
Router(config)#hostname R1
R1(config)#interface 0/0
R1(config-if)#ip address 192.168.1.1 255.255.255.192
R1(config-if)#no shutdown
R1(config-if)#exit
R1(config)#interface 0/1
R1(config-if)#ip address 192.168.12.1 255.255.255.128
R1(config-if)#no shutdown
Tuong tu se thuc hien cho R2
Buoc 2. Tra loi 3 cau hoi
Cau 1. A (trai) ping 192.168.1.1 (0/0 R1)
ping ok vi A - 192.168.1.10
0/0 R1 - 192.168.1.1
--> cung subnet --> ping duoc
Cau 2. A (trai) ping 192.168.12.1 (0/1 R1)
ping ko ok
vi A - 192.168.1.10
0/1 R1 - 192.168.12.1
--> khac subnet --> ping ko duoc
Chinh IP cua A:
IP: 192.168.1.10
SM: 255.255.255.192
DG: 192.168.1.1 --> "Proxy ARP" --> giai thich them
--> ping duoc
Cau 3. A (trai) ping 192.168.12.2 (0/1 R2)
vi A - 192.168.1.10
0/1 R2 - 192.168.12.2
--> khac subnet --> ping ko duoc
--> ly do vi sao?
- Kiem tra bang dinh tuyen --> bang chon duong di
tren router
R1#show ip route
C 192.168.1.0/26 is directly connected, F0/0
C 192.168.12.0/25 is directly connected,F0/1
--> bang dinh tuyen se co khi: router duoc dat IP
R2#show ip route
C 192.168.2.0/27 is directly connected, F0/0
C 192.168.12.0/25 is directly connected, F0/1
Vi sao ping duoc va vi sao ko ping duoc
Va muon ping duoc thi phai lam gi?
Co che dinh tuyen trong mang
Do bang dinh tuyen cua R2 chi co 192.168.12.0
va 192.168.2.0, the hien boi 2 chu C (connected)
Theo so do mang thi bang dinh tuyen cua R2
con thieu 192.168.1.0 --> de lay duoc 192.168.1.0
vao bang dinh tuyen cua R2 thi phai dung den giao
thuc dinh tuyen.
STATIC, DYNAMIC (EIGRP, OSPF, RIPv2)
OSPF va RIPV2: co network nao
thi gui network do ra
- Cau hinh RIPv2:
R1(config)#router rip
R1(config-router)#version 2
R1(config-router)#network 192.168.12.0
R1(config-router)#network 192.168.1.0
R1(config-router)#no auto-summary
R2(config)#router rip
R2(config-router)#version 2
R2(config-router)#network 192.168.12.0
R2(config-router)#network 192.168.2.0
R2(config-router)#no auto-summary
PC A ping PC B ok
Kiem tra lai bang dinh tuyen
R1#show ip route
R 192.168.2.0
- Cau hinh OSPF:
R1(config)#no router rip
R2(config)#no router rip
--> PC A ping qua PC het duoc
R1(config)#router ospf 13 // process id, kich hoat
tien trinh OSPF chay
R1(config-router)#network 192.168.12.0 0.0.0.127 area 0
R1(config-router)#network 192.168.1.0 0.0.0.63 area 0
0.0.0. --> wildcast mask
255.255.255.255
255.255.255.128
0. .0 .0 .127
255.255.255.255
255.255.255.192
0 .0 .0 . 63
R1(config)#router ospf 13
R1(config-router)#network 192.168.12.0 0.0.0.127 area 0
R1(config-router)#network 192.168.1.0 0.0.0.63 area 0
Tuong tu cau hinh tren R2
PC A ping PC B
R1#show ip route
O 192.168.2.0
Can nho trong dinh tuyen RIP: dua major network
172 --> thuoc lop B --> chi co 2 nhom network
R1(config)#router rip
R1(config-router)#version 2
R1(config-router)#network 172.16.0.0
R1(config-router)#no auto-summary
