Проектирование локальной вычислительной сети предприятия (количество пользователей – 35), страница 6

 ip address 87.240.188.252 255.0.0.0

 ip access-group 100 in

 ip access-group 103 out

!

interface FastEthernet0/1.2

 encapsulation dot1Q 10

 ip address 89.175.181.188 255.0.0.0

 ip access-group 100 in

 ip access-group 103 out

!

interface FastEthernet0/1.3

 encapsulation dot1Q 11

 ip address 192.168.9.1 255.255.255.0

 ip access-group 100 in

 ip access-group 103 out

!

ip classless

!

!

access-list 100 deny ip 192.168.2.0 0.0.0.255 192.168.3.0 0.0.0.255

access-list 100 deny ip 192.168.2.0 0.0.0.255 192.168.4.0 0.0.0.255

access-list 100 deny ip 192.168.2.0 0.0.0.255 192.168.6.0 0.0.0.255

access-list 100 deny ip 192.168.4.0 0.0.0.255 192.168.6.0 0.0.0.255

access-list 100 deny ip 192.168.5.0 0.0.0.255 192.168.6.0 0.0.0.255

access-list 100 deny ip 192.168.3.0 0.0.0.255 192.168.4.0 0.0.0.255

access-list 100 deny ip 192.168.3.0 0.0.0.255 192.168.5.0 0.0.0.255

access-list 100 deny ip any 87.0.0.0 0.255.255.255

access-list 100 deny ip any 89.0.0.0 0.255.255.255

access-list 100 permit ip any any

access-list 101 deny ip 192.168.2.0 0.0.0.255 192.168.3.0 0.0.0.255

access-list 101 deny ip 192.168.3.0 0.0.0.255 192.168.4.0 0.0.0.255

access-list 101 deny ip 192.168.3.0 0.0.0.255 192.168.5.0 0.0.0.255

access-list 101 deny ip 192.168.3.0 0.0.0.255 192.168.6.0 0.0.0.255

access-list 101 deny ip any 87.0.0.0 0.255.255.255

access-list 101 deny ip any 89.0.0.0 0.255.255.255

access-list 101 permit ip any any

access-list 102 deny ip 192.168.2.0 0.0.0.255 192.168.6.0 0.0.0.255

access-list 102 deny ip 192.168.3.0 0.0.0.255 192.168.6.0 0.0.0.255

access-list 102 deny ip 192.168.4.0 0.0.0.255 192.168.6.0 0.0.0.255

access-list 102 deny ip 192.168.5.0 0.0.0.255 192.168.6.0 0.0.0.255

access-list 102 deny ip any 87.0.0.0 0.255.255.255

access-list 102 deny ip any 89.0.0.0 0.255.255.255

access-list 102 permit ip any any

access-list 103 permit ip any any

!

line con 0

line vty 0 4

 login

!

end

Конфигурация подинтерфейсов

FastEthernet0/0 is up, line protocol is up (connected)

  Hardware is Lance, address is 0010.11dd.7601 (bia 0010.11dd.7601)

  MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,

     reliability 255/255, txload 1/255, rxload 1/255

  Encapsulation ARPA, loopback not set

  ARP type: ARPA, ARP Timeout 04:00:00,

  Last input 00:00:08, output 00:00:05, output hang never

  Last clearing of "show interface" counters never

  Input queue: 0/75/0 (size/max/drops); Total output drops: 0

  Queueing strategy: fifo

  Output queue :0/40 (size/max)

  5 minute input rate 0 bits/sec, 0 packets/sec

  5 minute output rate 0 bits/sec, 0 packets/sec

     0 packets input, 0 bytes, 0 no buffer

     Received 0 broadcasts, 0 runts, 0 giants, 0 throttles

     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

     0 input packets with dribble condition detected

     0 packets output, 0 bytes, 0 underruns

     0 output errors, 0 collisions, 1 interface resets

     0 babbles, 0 late collision, 0 deferred

     0 lost carrier, 0 no carrier

     0 output buffer failures, 0 output buffers swapped out

FastEthernet0/0.2 is up, line protocol is up (connected)

  Hardware is PQUICC_FEC, address is 0010.11dd.7601 (bia 0010.11dd.7601)

  Internet address is 192.168.2.1/24

  MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,

     reliability 255/255, txload 1/255, rxload 1/255

  Encapsulation 802.1Q Virtual LAN, Vlan ID 2

  ARP type: ARPA, ARP Timeout 04:00:00,

  Last clearing of "show interface" counters never

FastEthernet0/0.3 is up, line protocol is up (connected)

  Hardware is PQUICC_FEC, address is 0010.11dd.7601 (bia 0010.11dd.7601)

  Internet address is 192.168.3.1/24

  MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,

     reliability 255/255, txload 1/255, rxload 1/255

  Encapsulation 802.1Q Virtual LAN, Vlan ID 3

  ARP type: ARPA, ARP Timeout 04:00:00,

  Last clearing of "show interface" counters never

FastEthernet0/0.4 is up, line protocol is up (connected)

  Hardware is PQUICC_FEC, address is 0010.11dd.7601 (bia 0010.11dd.7601)

  Internet address is 192.168.4.1/24

  MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,

     reliability 255/255, txload 1/255, rxload 1/255

  Encapsulation 802.1Q Virtual LAN, Vlan ID 4