Gns3模拟器试验

本文模拟试验如下:

===============================================

1.Gns3连接vps

2.Gns3连接虚拟机

3.Gns3连接真机

4.Gns3将vps,虚拟机,真机互通

5.Gns3实验PBR策略路由

===============================================

实验1:Gns3连接vps
Topology

VPC1配置:

R1配置:

R1#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
R1(config)#int fa 0/0
R1(config-if)#ip add 192.168.1.254 255.255.255.0
R1(config-if)#no sh
R1(config-if)#do ping 192.1
*Mar  1 00:06:56.147: %LINK-3-UPDOWN: Interface FastEthernet0/0, changed state to up
*Mar  1 00:06:57.147: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to up
R1(config-if)#do ping 192.168.1.2

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.2, timeout is 2 seconds:
.!!!!
Success rate is 80 percent (4/5), round-trip min/avg/max = 8/15/32 ms

Ok,实验1结束.

---------------------------------------------------------------------------------------

实验2:Gns3连接虚拟机(将虚拟机网卡设置在VMnet1上)

Topology

虚拟机:

root@badboy-virtual-Machine:/home/badboy# ifconfig eth0
eth0      Link encap:Ethernet  HWaddr 00:0c:29:a4:0c:45  
         inet addr:192.168.2.2  Bcast:192.168.2.255  Mask:255.255.255.0
         inet6 addr: fe80::20c:29ff:fea4:c45/64 Scope:Link
         UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
         RX packets:1280 errors:0 dropped:0 overruns:0 frame:0
         TX packets:1239 errors:0 dropped:0 overruns:0 carrier:0
         collisions:0 txqueuelen:1000
         RX bytes:121102 (121.1 KB)  TX bytes:126756 (126.7 KB)
         Interrupt:19 Base address:0x2000

R1配置:

R1#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
R1(config)#int fa 0/0
R1(config-if)#ip add 192.168.2.254 255.255.255.0
R1(config-if)#no sh

R1测试
R1(config-if)#do ping 192.1
*Mar  1 00:03:32.319: %LINK-3-UPDOWN: Interface FastEthernet0/0, changed state to up
*Mar  1 00:03:33.319: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to up
R1(config-if)#do ping 192.168.2.2

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.2.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 8/13/20 ms

虚拟机测试:

root@badboy-virtual-machine:/home/badboy# ping 192.168.2.254
PING 192.168.2.254 (192.168.2.254) 56(84) bytes of data.
64 bytes from 192.168.2.254: icmp_req=1 ttl=255 time=17.6 ms
64 bytes from 192.168.2.254: icmp_req=2 ttl=255 time=29.4 ms
64 bytes from 192.168.2.254: icmp_req=3 ttl=255 time=20.3 ms
64 bytes from 192.168.2.254: icmp_req=4 ttl=255 time=30.6 ms
64 bytes from 192.168.2.254: icmp_req=5 ttl=255 time=10.6 ms
^C
--- 192.168.2.254 ping statistics ---
5 packets transmitted, 5 received, 0% packet loss, time 4034ms
rtt min/avg/max/mdev = 10.637/21.732/30.605/7.478 ms

OK,实验2结束.

-----------------------------------------------------------------------------------

实验3:Gns3连接真机(仅能用Loopback接口)

Topology

真实机配置loopback口:

R1配置:

R1(config)#int fa 0/0
R1(config-if)#ip add 192.168.3.254 255.255.255.0
R1(config-if)#no shut
R1(config-if)#

R1测试:

R1(config-if)#do ping 192.168.3.2

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.3.2, timeout is 2 seconds:
.!!!!
Success rate is 80 percent (4/5), round-trip min/avg/max = 4/16/28 ms

真实机测试:

C:\Users\badboy>ping 192.168.3.254

正在 Ping 192.168.3.254 具有 32 字节的数据:
来自 192.168.3.254 的回复: 字节=32 时间=36ms TTL=255
来自 192.168.3.254 的回复: 字节=32 时间=32ms TTL=255
来自 192.168.3.254 的回复: 字节=32 时间=9ms TTL=255
来自 192.168.3.254 的回复: 字节=32 时间=10ms TTL=255

192.168.3.254 的 Ping 统计信息:
   数据包: 已发送 = 4，已接收 = 4，丢失 = 0 (0% 丢失)，
往返行程的估计时间(以毫秒为单位):
   最短 = 9ms，最长 = 36ms，平均 = 21ms

OK,实验3结束

-----------------------------------------------------------------------------

实验4:Gns3将vps,虚拟机,真机互通

Topology

R1配置:

R1(config)#int fa 0/0
R1(config-if)#ip add 192.168.3.254 255.255.255.0
R1(config-if)#no sh
R1(config-if)#int fa
*Mar  1 00:01:27.387: %LINK-3-UPDOWN: Interface FastEthernet0/0, changed state to up
*Mar  1 00:01:28.387: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to up
R1(config-if)#int fa 1/0
R1(config-if)#ip add 192.168.2.254 255.255.255.0
R1(config-if)#no sh
R1(config-if)#int fa 2/0
*Mar  1 00:01:45.655: %LINK-3-UPDOWN: Interface FastEthernet1/0, changed state to up
*Mar  1 00:01:46.655: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet1/0, changed state to up
R1(config-if)#int fa 2/0
R1(config-if)#ip add 192.168.1.254 255.255.255.0
R1(config-if)#no sh
R1(config-if)#

vpc配置看实验1,虚拟机配置看实验2,真机配置看实验3.

R1测试:

R1(config-if)#do ping 192.168.1.2

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 16/27/36 ms
R1(config-if)#do ping 192.168.2.2

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.2.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 8/18/32 ms
R1(config-if)#do ping 192.168.3.2

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.3.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 8/18/32 ms

OK,实验4结束.

------------------------------------------------------------------------------

为何要花这么长时间来折腾呢?因为很多复杂的实验都需要我们将vpc和虚拟机及真实机混合起来,所以我们需要点时间来把基础的东西好好练习练习....

来把,搞点复杂的实验.

实验5:Gns3实验PBR策略路由

Topology

第1步,先将vpc,真实机,虚拟机,路由器配置对应ip

第2步,R1,R2,R3,R4添加静态路由器

R1

Gateway of last resort is not set

C    192.168.4.0/24 is directly connected, FastEthernet1/0
C    192.168.5.0/24 is directly connected, FastEthernet2/0
S    192.168.2.0/24 [1/0] via 192.168.5.253
C    192.168.3.0/24 is directly connected, FastEthernet0/0

R2

Gateway of last resort is not set

C    192.168.4.0/24 is directly connected, FastEthernet0/0
C    192.168.6.0/24 is directly connected, FastEthernet1/0
S    192.168.2.0/24 [1/0] via 192.168.6.254
S    192.168.3.0/24 [1/0] via 192.168.4.254

R3

Gateway of last resort is not set

C    192.168.5.0/24 is directly connected, FastEthernet0/0
C    192.168.7.0/24 is directly connected, FastEthernet1/0
S    192.168.2.0/24 [1/0] via 192.168.7.254
S    192.168.3.0/24 [1/0] via 192.168.5.254

R4

Gateway of last resort is not set

C    192.168.6.0/24 is directly connected, FastEthernet1/0
C    192.168.7.0/24 is directly connected, FastEthernet0/0
C    192.168.2.0/24 is directly connected, FastEthernet2/0
S    192.168.3.0/24 [1/0] via 192.168.7.253
                   [1/0] via 192.168.6.253

测试真实机/VPC到虚拟机-server

如果想让路由从R2走,那么只需要将R1将去往192.168.2.0的下一跳指到R2的接口上,便可以了.

但这个实验,不是我们想要的,我们需要的是将真实机访问虚拟机Server的80走R2,ssh走R3.

VPC 30这个ip走R2,40这个ip走R3.

添加ACL

R1(config)#access-list 100 permit tcp any any eq 80
R1(config)#access-list 101 permit tcp any any eq 22

R1(config)#route-map myPBR permit 10
R1(config-route-map)#match ip address 100
R1(config-route-map)#set ip next-hop 192.168.4.253
R1(config-route-map)#exit

R1(config)#route-map myPBR permit 20
R1(config-route-map)#match ip address 101
R1(config-route-map)#set ip next-hop 192.168.5.253
R1(config-route-map)#exit

R1(config)#int fa 0/0
R1(config-if)#ip policy route-map myPBR
以上就定义了80应用走R2,22应用走R3,如何测试呢.

还好,我装了wireshark

我们在访问80的时候,可以通过抓取R2连接R4之间的链路,再尝试telnet 22端口,是通的,但没有抓取到包,说明访问22走的是R3那条路.

那么,我们还需要试验VPC走不同的路噢.

R1(config)#access-list 1 permit 192.168.3.30 0.0.0.0
R1(config)#access-list 2 permit 192.168.3.40 0.0.0.0
R1(config)#route-map myPBR permit 10
R1(config-route-map)#match ip address 1
R1(config-route-map)#match ip address 100
R1(config-route-map)#set ip next-hop 192.168.4.253
R1(config-route-map)#exit
R1(config)#route-map myPBR permit 20
R1(config-route-map)#match ip address 2
R1(config-route-map)#match ip address 101
R1(config-route-map)#set ip next-hop 192.168.5.253
R1(config-route-map)#exit
R1(config)#int fa 0/0
R1(config-if)#ip policy route-map myPBR
R1(config-if)#exit

测试

到此,我的GNS3测试结束.

如果想了解更多，请关注我们的公众号
公众号ID:opdevos
扫码关注