13-laboratoriya ishi tarmoq marshrutizatorida dmz ni o`rnatish

13.3. Laboratoriya ishining bajarilish tartibi
13.3.1. CPT dasturida global tarmoqda DMZ ni sozlash uchun bu laboratoriya ishida routerdan foydalaniladi. DMZ ni xavfsizlik devori (cisco asa) orqali sozlasa ham bo’ladi. Dastlab CPT dasturida 2 router, 2 server, 1 kommutator (switch) va 2 kompyuter, laptop olib ularni aloqa kabeli orqali ulab chiqiladi:



13.2-rasm
13.3.2. Router0 ga laptop0 ni «console» kabeli orqali ulanib sozlash rejimiga (config) kiriladi:

13.3-rasm
13.3.3. Router0 ga ulanib portlarni (interface) sozlamalari kiritiladi va bir vaqtning o’zida NAT sozlanadi. Buning uchun quyidagi komandalar kiritiladi:
enable; configure terminal
interface FastEthernet 0/0
description outside
ip address 210.210.0.2 255.255.255.252
ip nat outside; exit
interface FastEthernet 1/0
description inside
ip address 192.168.1.1 255.255.255.0
no shutdown
ip nat inside; exit
interface FastEthernet 0/1
description dmz
ip address 210.210.2.1 255.255.255.252
no shutdown; exit

13.4-rasm
13.3.4. Router1 sozlanadi. Buning uchun dastlab router1 ga laptop0 ni «console» kabeli orqali ulaniladi va quyidagi komandalar kiritiladi:
Enable; configure terminal
interface FastEthernet 0/0
no shutdown
ip address 210.210.0.1 255.255.255.252
exit
interface FastEthernet 0/1
no shutdown
ip address 210.210.1.1 255.255.255.252
exit
ip route 0.0.0.0 0.0.0.0 210.210.0.2

13.5-rasm
13.3.5. Serverlarga va kompyuterlarga 13.1-jadvalda ko’rsatilganidek qilib IP address sozlamalari kiritiladi:

13.1-jadval