Tbta va dt kafedrasi Telekommunikatasiya tarmoqlarini boshqarish

4-LABORATORIYA ISHI
Telnet protokolini sozlash
Ishdan maqsad: Telnet protokolini sozlash va u yordamida tarmoq qurilmalariga masofadan kirishni o’rganish.
Topshiriq:

• 
  4.3-rasmda ko’rsatilgan topologiya bo’yicha LSW1, LSW2 kommutatorlarni sozlang;
  
• 
  AAA sozlamalarini sozlang;
  
• 
  VTY virtual terminalini sozlang;
  
• 
  Telnet serverni sozlang;
  
• 
  Foydalanuvchi kirish ma’lumotlarini sozlang.
  
• 
  Telnet yordamida masofadagi qurilmaga kirishni tekshiring.
  

Nazariy qism
Telnet tarmoq protokoli bo’lib, tarmoq yoki Internet orqali masofaviy (masofadagi) kompyuterga ulanish va ushbu tizimni masofaviy buyruqlar bilan boshqarish uchun ishlatiladi. Telnet matn terminali yordamida masofaviy tizim bilan virtual aloqa qilish uchun ishlatiladigan asosiy tarmoq protokoli hisoblanadi. Telnet tarmoq yoki Internet orqali ikkita masofadagi hostlar o’rtasida ikki tomonlama aloqa uchun ishlatiladigan tarmoq protokoli hisoblanadi.

4.1-rasm. Telnet protokoli vazifasi
Ushbu protokoldan foydalanib, foydalanuvchilar masofaviy tizimga kirishlari va virtual terminal yordamida muloqot qilishlari mumkin, lekin Internet kabi ishonchsiz tarmoqlarda foydalanish uchun xavfsiz emas.

LSW1 kommutatorga nom beramiz va IP manzilni sozlaymiz.

system-view
[Huawei]sysname BaxtiyorovE-Muhriddin1
[LSW1]vlan 5
[LSW1-vlan5]description **vlan_mgmt**
[LSW1-vlan5]int vlan5
[LSW1-Vlanif5]description **vlan_mgmt**
[LSW1-Vlanif5]ip address 192.168.1.1 24
[LSW1-Vlanif5]display this

Konsol portga parol qo’yamiz. Autentifikatsiya sifatida AAA dan foydalanamiz.

[LSW1]user-interface console 0
[LSW1-ui-console0]authentication-mode aaa
[LSW1-ui-console0]idle-timeout 15
[LSW1-ui-console0]display this
[LSW1-ui-console0]quit

VTY virtual terminalini sozlaymiz.

[LSW1]user-interface vty 0 4
[LSW1-ui-vty0-4]authentication-mode aaa
[LSW1-ui-vty0-4]protocol inbound telnet
[LSW1-ui-vty0-4]idle-timeout 15
[LSW1-ui-vty0-4]display this

Telnet serverini sozlaymiz.

[LSW1]telnet server enable
[LSW1]aaa
[LSW1-aaa]local-user consolelsw1 password cipher password privilege level 15
[LSW1-aaa]display this
[LSW1-aaa]local-user consolelsw1 service-type terminal
[LSW1-aaa]quit
[LSW1]quit
quit
Username:consolelsw1 Password:
system-view

Foydalanuvchi kirish ma'lumotlarini sozlaymiz.
[LSW1]aaa
[LSW1-aaa]display this
[LSW1-aaa]local-user telnetlsw1 password cipher password privilege level 15
[LSW1-aaa]local-user telnetlsw1 service-type telnet
[LSW1-aaa]display this
[LSW1]display current-configuration
[LSW1]interface GigabitEthernet 0/0/1
[LSW1-GigabitEthernet0/0/1]port link-type access
[LSW1-GigabitEthernet0/0/1]
[LSW1-GigabitEthernet0/0/1]display this
[LSW1-GigabitEthernet0/0/1]quit

Endi ikkinchi kimmutator qurilmasini sozlashni boshlaymiz. LSW2 kommutatorga nom beramiz va IP manzilni sozlaymiz.

clock datetime 12:03:22 2022-01-15
system-view [Huawei]sysname BaxtiyorovE-Muhriddin2
[LSW2]vlan 5
[LSW2-vlan5]description **vlan_mgmt**
[LSW2-vlan5]display this
[LSW2-vlan5]int vlan5
[LSW2-Vlanif5]description **vlan_mgmt** [LSW2-Vlanif5]ip address 192.168.1.2 24
[LSW2-vlanif5]quit

Konsol portga parol qo’yamiz. Autentifikatsiya sifatida AAA dan foydalanamiz.
[LSW2]user-interface console 0
[LSW2-ui-console0]authentication-mode aaa
[LSW2-ui-console0]idle-timeout 15
[LSW2-ui-console0]display this
[LSW2-ui-console0]quit

VTY virtual terminalini sozlaymiz.
[LSW2]user-interface vty 0 4
[LSW2-ui-vty0-4]authentication-mode aaa
[LSW2-ui-vty0-4]protocol inbound telnet
[LSW2-ui-vty0-4]idle-timeout 15
[LSW2-ui-vty0-4]quit

Telnet serverni sozlaymiz.
[LSW2]telnet server enable
[LSW2]aaa
[LSW2-aaa]display this

[LSW2-aaa]local-user telnetlsw2 password cipher password privilege level 15

[LSW2-aaa]local-user telnetlsw2 service-type telnet
[LSW2-aaa]display this

Foydalanuvchi kirish ma'lumotlarini sozlaymiz.

[LSW2]aaa
[LSW2-aaa]local-user consolelsw2 password cipher
password privilege level 15
[LSW2-aaa]local-user consolelsw2 service-type terminal
[LSW2-aaa]quit
[LSW2]quit
quit
Username:consolelsw2 Password:
system-view
[LSW2]aaa
[LSW2-aaa]display this
[LSW2]interface GigabitEthernet 0/0/1
[LSW2-GigabitEthernet0/0/1]port link-type access
[LSW2-GigabitEthernet0/0/1]port default vlan 5
[LSW2-GigabitEthernet0/0/1]quit
[LSW2]ping 192.168.1.2
[LSW2]ping 192.168.1.1
telnet 192.168.1.2