11-laboratoriya ishi acl ro`yhatini sozlash

11.3. Laboratoriya ishining bajarilish tartibi
11.3.1. Dastlab Cisco Packet Tracer dasturida Golbal tarmoqni qurib NAT teznologiyasi sozlab olinadi. Buning uchun ishni 2 router, 1 kommutator (switch), 2 server, 4 kompyuter (pc) va router va kommutatorlarini (switch) sozlash uchun 1 laptop0 olib va ularni o’zaro aloqa kabeli bilan ulab chiqiladi:

11.1-rasm
11.3.2. Laptop0 ni «console» kabeli orqali kommutatorga (switch) ulab sozlash rejimiga kiriladi:

11.2-rasm
11.3.3. Tarmoq va serverlar xavfsizligini taminlash uchun har bir tarmoq uchun vlan yaratiladi va har bir tarmoq portlari vlanlarga ruxsat berib chiqiladi. Buning uchun kommutatorga «console» kabeli bilan ulanib quyidagi komandalar kiritiladi:
enable
configure terminal
vlan 2; name admin; exit
vlan 3; name users; exit
vlan 4; name buxgalter; exit
vlan 5; name server; exit
interface FastEthernet 0/2
switchport mode access
switchport access vlan 2; exit
interface range FastEthernet 0/3-4
switchport mode access
switchport access vlan 3; exit
interface FastEthernet 0/5
switchport mode access
switchport access vlan 4; exit
interface FastEthernet 0/6
switchport mode access
switchport access vlan 5; exit
interface FastEthernet 0/1
switchport mode trunk
switchport trunk allowed vlan 2,3,4,5; exit

11.3-rasm
11.3.4. Router0 ga ulanib vlanlar uchun SubInterfeys yaratiladi. Bu degani 1 fizik portda bir nechta logik port yaratiladi. Buning uchun laptop0 ni «console» kabeli orqali router0 ga ulab quyidagi komandalar kiritiladi:
enable
configure terminal
interface GigabitEthernet 0/0/1
no shutdown; exit
interface GigabitEthernet 0/0/1.2
no shutdown
encapsulation dot1Q 2
ip address 192.168.2.1 255.255.255.0; exit
interface GigabitEthernet 0/0/1.3
no shutdown
encapsulation dot1Q 3
ip address 192.168.3.1 255.255.255.0; exit
interface GigabitEthernet 0/0/1.4
no shutdown
encapsulation dot1Q 4
ip address 192.168.4.1 255.255.255.0; exit
interface GigabitEthernet 0/0/1.5
no shutdown
encapsulation dot1Q 5
ip address 192.168.5.1 255.255.255.0; exit
interface GigabitEthernet 0/0/0
no shutdown
ip address 120.120.0.2 255.255.255.0; exit



11.4-rasm
11.3.5. router1 sozlanadi. Bunda Internet IP address sozlamalari kiritiladi. Buning uchun dastlab laptop0 «console» kabeli orqali routerga ulab quyidagi komandalar kiritiladi:
enable
configure terminal
interface GigabiEthernet 0/0/0
no shutdown
ip address 120.120.0.1 255.255.255.0;
exit
interface GigabitEthernet 0/0/1
no shutdown
ip address 120.120.1.1 255.255.255.0
exit

11.5-rasm
11.3.6. Kompyuterlar va serverlarga IP address sozlamalari 11.1-jadvalga qarab kiritiladi:
11.1-jadval