ืืืจ ืคืึธืจืืขืฆื ืฆื ืคืื ืึทื ืืขืจืงืืืึทืื ืื ืืึทืกืงืก ืคืื ืื ื ืขืืืืึธืจืง ืืึธืืืืข ืคืื โโืื WorldSkills ืืฉืึทืืคึผืืึทื ืฉืืคึผ ืืื ืื ืงืึทืืคึผืึทืืื ืก "ื ืขืืืืึธืจืง ืืื ืกืืกืืขื ืึทืืืื ืืกืืจืึทืืืึธื".
ืื ืคืืืืขื ืืข ืืึทืกืงืก ืืืขื ืืืื ืงืึทื ืกืืืขืจื ืืื ืืขื ืึทืจืืืงื:
- ืืืืฃ ืึทืืข ืืขืืืืกืขืก, ืฉืึทืคึฟื ืืืืจืืืึทื ืื ืืขืจืคืืืกืื, ืกืืืื ืขืจืคืืืกืื ืืื ืืืคึผืืึทืงืง ืื ืืขืจืคืืืกืื. ืืึทืฉืืืืขื IP ืึทืืจืขืกืขืก ืืืื ืื ืืึธืคึผืึธืืึธืื.
- ืืขืื ืื SLAAC ืืขืงืึทื ืืืึทื ืฆื ืึทืจืืืกืืขืื IPv6 ืึทืืจืขืกืขืก ืืื ืื MNG ื ืขืฅ ืืืืฃ ืื RTR1 ืจืึทืืืขืจ ืฆืืืื ื;
- ืืืืฃ ืืืืจืืืึทื ืื ืืขืจืคืืืกืื ืืื ืืืืึทื 100 (ืื ื) ืืืืฃ ืกืืืืืฉืื SW1, SW2, SW3, ืืขืื IPv6 ืึทืืืึธ-ืงืึทื ืคืืืืขืจืืืฉืึทื ืืึธืืข;
- ืืืืฃ ืึทืืข ืืขืืืืกืขืก (ืึทืืืฅ PC1 ืืื ืืืขื) ืืึทื ืืืึทืื ืืึทืฉืืืืขื ืืื ืง-ืืืืข ืึทืืจืขืกืขืก;
- ืืืืฃ ืึทืืข ืกืืืืืฉืื, ืืืกืืืืึทื ืึทืืข ืคึผืึธืจืฅ ืืืึธืก ืืขื ืขื ื ืืฉื ืืขื ืืฆื ืืื ืืขืจ ืึทืจืืขื ืืื ืึทืจืืืขืจืคืืจื ืฆื ืืืืึทื 99;
- ืืืืฃ ืืึทืฉืืืืขื SW1, ืืขืื ืึท ืฉืืึธืก ืคึฟืึทืจ 1 ืืื ืื ืืืื ืื ืคึผืึทืจืึธื ืืื ืื ืงืขืจืขืงืืื ืฆืืืื ืืึธื ืืื 30 ืกืขืงืื ืืขืก;
- ืึทืืข ืืขืืืืกืขืก ืืืื ืืืื ืืึทื ืืืืฉืึทืืึทื ืืืจื SSH ืืืขืจืกืืข 2.
ืื ื ืขืฅ ืืึทืคึผืึทืืึทืืืฉื ืืื ืื ืืฉืืืืช ืฉืืืืข ืืื ืืขืจืืื ืื ืืื ืื ืคืืืืขื ืืข ืืืึทืืจืึทืืข:
ืื ื ืขืฅ ืืึทืคึผืึทืืึทืืืฉื ืืืืฃ ืื ืืึทืื ืืื ืง ืืืจืื ืืื ืืขืจืืื ืื ืืื ืื ืคืืืืขื ืืข ืืืึทืืจืึทืืข:
ืื ื ืขืฅ ืืึทืคึผืึทืืึทืืืฉื ืืืืฃ ืื ื ืขืฅ ืืืจืื ืืื ืืขืจืืื ืื ืืื ืื ืคืืืืขื ืืข ืืืึทืืจืึทืืข:
ืคืึทืจ-ืืึทืฉืืขืืืงื
ืืืืืขืจ ืืืจ ืืืจืืคืืจื ืื ืืืืื ืืึทืกืงืก, ืขืก ืืื ืืืขืจื ืืึทืฉืืขืืืงื ืื ืืงืขืจืืืง ืกืืืืืฉืื ื ืืืืฃ ืกืืืืืฉืื SW1-SW3, ืืืืึทื ืขืก ืืืขื ืืืื ืืขืจ ืืึทืงืืืขื ืฆื ืงืึธื ืืจืึธืืืจื ืืืืขืจ ืกืขืืืื ืืก ืืื ืืขืจ ืฆืืงืื ืคึฟื. ืื ืกืืืืืฉืื ื ืกืขืืึทืคึผ ืืืขื ืืืื ืืืกืงืจืืืื ืืื ืืขืืึทื ืืื ืืขืจ ืืืืึทืืขืจ ืึทืจืืืงื, ืึธืืขืจ ืืืืื ืื ืกืขืืืื ืืก ืืืขื ืืืื ืืืคืืื ื.
ืืขืจ ืขืจืฉืืขืจ ืฉืจืื ืืื ืฆื ืฉืึทืคึฟื ืืืืึทื ื ืืื ื ืืืขืจื 99, 100 ืืื 300 ืืืืฃ ืึทืืข ืกืืืืืฉืื:
SW1(config)#vlan 99
SW1(config-vlan)#exit
SW1(config)#vlan 100
SW1(config-vlan)#exit
SW1(config)#vlan 300
SW1(config-vlan)#exit
ืืขืจ ืืืืึทืืขืจ ืฉืจืื ืืื ืฆื ืึทืจืืืขืจืคืืจื ืฆืืืื ื g0/1 ืฆื SW1 ืฆื ืืืืึทื ื ืืืขืจ 300:
SW1(config)#interface gigabitEthernet 0/1
SW1(config-if)#switchport mode access
SW1(config-if)#switchport access vlan 300
SW1(config-if)#exit
ืื ืืขืจืคืืืกืื ืค0 / 1-2, ืค0 / 5-6, ืืืึธืก ืคึผื ืื ืื ืืขืจืข ืกืืืืืฉืื, ืืึธื ืืืื ืกืืืืืฉื ืฆื ืฉืืึทื ืืึธืืข:
SW1(config)#interface range fastEthernet 0/1-2, fastEthernet 0/5-6
SW1(config-if-range)#switchport trunk encapsulation dot1q
SW1(config-if-range)#switchport mode trunk
SW1(config-if-range)#exit
ืืืืฃ ืืึทืฉืืืืขื SW2 ืืื ืฉืืึทื ืืึธืืข ืขืก ืืืขื ืืืื ืื ืืขืจืคืืืกืื f0/1-4:
SW2(config)#interface range fastEthernet 0/1-4
SW2(config-if-range)#switchport trunk encapsulation dot1q
SW2(config-if-range)#switchport mode trunk
SW2(config-if-range)#exit
ืืืืฃ ืืึทืฉืืืืขื SW3 ืืื ืฉืืึทื ืืึธืืข, ืขืก ืืืขื ืืืื ืื ืืขืจืคืืืกืื f0/3-6, g0/1:
SW3(config)#interface range fastEthernet 0/3-6, gigabitEthernet 0/1
SW3(config-if-range)#switchport trunk encapsulation dot1q
SW3(config-if-range)#switchport mode trunk
SW3(config-if-range)#exit
ืืื ืืขื ืืื ืข, ืื ืืึทืฉืืืืขื ืกืขืืืื ืืก ืืืขื ืืึธืื ืื ืืืขืงืกื ืคืื ืืึทืื ืคึผืึทืงืืฅ, ืืืึธืก ืืื ืคืืจืืื ืื ืฆื ืคืึทืจืขื ืืืงื ืืึทืกืงืก.
1. ืฉืึทืคึฟื ืืืืจืืืึทื ืื ืืขืจืคืืืกืื, ืกืืืื ืขืจืคืืืกืื ืืื ืืืคึผืืึทืงืง ืื ืืขืจืคืืืกืื ืืืืฃ ืึทืืข ืืขืืืืกืขืก. ืืึทืฉืืืืขื IP ืึทืืจืขืกืขืก ืืืื ืื ืืึธืคึผืึธืืึธืื.
ืจืึธืืืขืจ BR1 ืืืขื ืืืื ืงืึทื ืคืืืืขืจื ืขืจืฉืืขืจ. ืืืื ืื ื 3 ืืึทืคึผืึทืืึทืืืฉื, ืืึธ ืืืจ ืืึทืจืคึฟื ืฆื ืงืึทื ืคืืืืขืจ ืึท ืฉืืืืฃ-ืืืคึผ ืฆืืืื ื, ืืืื ืืืงืื ื ืืื ืืืคึผืืึทืงืง, ื ืืืขืจ 101:
// ะกะพะทะดะฐะฝะธะต loopback
BR1(config)#interface loopback 101
// ะะฐะทะฝะฐัะตะฝะธะต ipv4-ะฐะดัะตัะฐ
BR1(config-if)#ip address 2.2.2.2 255.255.255.255
// ะะบะปััะตะฝะธะต ipv6 ะฝะฐ ะธะฝัะตััะตะนัะต
BR1(config-if)#ipv6 enable
// ะะฐะทะฝะฐัะตะฝะธะต ipv6-ะฐะดัะตัะฐ
BR1(config-if)#ipv6 address 2001:B:A::1/64
// ะัั
ะพะด ะธะท ัะตะถะธะผะฐ ะบะพะฝัะธะณััะธัะพะฒะฐะฝะธั ะธะฝัะตััะตะนัะฐ
BR1(config-if)#exit
BR1(config)#
ืฆื ืงืึธื ืืจืึธืืืจื ืื ืกืืึทืืืก ืคืื ืื ืืืฉืืคื ืฆืืืื ื, ืืืจ ืงืขื ืขื ื ืืฆื ืืขื ืืึทืคึฟืขื show ipv6 interface brief:
BR1#show ipv6 interface brief
...
Loopback101 [up/up]
FE80::2D0:97FF:FE94:5022 //link-local ะฐะดัะตั
2001:B:A::1 //IPv6-ะฐะดัะตั
...
BR1#
ืืึธ ืืืจ ืงืขื ืขื ืืขื ืึทื ืืืคึผืืึทืงืง ืืื ืึทืงืืืื, ืืืึทื ืฉืืึทื UP. ืืืื ืืืจ ืงืืง ืืื ืื, ืืืจ ืงืขื ืขื ืืขื ืฆืืืื IPv6 ืึทืืจืขืกืขืก, ืืึธืืฉ ืืืืื ืืืื ืืึทืคึฟืขื ืืื ืืขื ืืฆื ืฆื ืฉืืขืื ืื IPv6 ืึทืืจืขืก. ืืขืจ ืคืึทืงื ืืื ืึทื FE80::2D0:97FF:FE94:5022 ืืื ืึท ืืื ืง-ืืืืข ืึทืืจืขืก ืืืึธืก ืืื ืึทืกืืื ื ืืืขื ืืคึผืื6 ืืื ืขื ืืืืึทืื ืืืืฃ ืึท ืฆืืืื ื ืืื ืื ืืึทืคึฟืขื ipv6 enable.
ืืื ืฆื ืืขื ืื IPv4 ืึทืืจืขืก, ื ืืฆื ืึท ืขื ืืขื ืืึทืคึฟืขื:
BR1#show ip interface brief
...
Loopback101 2.2.2.2 YES manual up up
...
BR1#
ืคึฟืึทืจ BR1, ืืืจ ืืึธื ืืื ืงืึทื ืคืืืืขืจ ืื g0/0 ืฆืืืื ื; ืืึธ ืืืจ ื ืึธืจ ืืึทืจืคึฟื ืฆื ืฉืืขืื ืื IPv6 ืึทืืจืขืก:
// ะะตัะตั
ะพะด ะฒ ัะตะถะธะผ ะบะพะฝัะธะณััะธัะพะฒะฐะฝะธั ะธะฝัะตััะตะนัะฐ
BR1(config)#interface gigabitEthernet 0/0
// ะะบะปััะตะฝะธะต ะธะฝัะตััะตะนัะฐ
BR1(config-if)#no shutdown
BR1(config-if)#ipv6 enable
BR1(config-if)#ipv6 address 2001:B:C::1/64
BR1(config-if)#exit
BR1(config)#
ืืืจ ืงืขื ืขื ืงืึธื ืืจืึธืืืจื ืื ืกืขืืืื ืืก ืืื ืื ืืขืืืข ืืึทืคึฟืขื show ipv6 interface brief:
BR1#show ipv6 interface brief
GigabitEthernet0/0 [up/up]
FE80::290:CFF:FE9D:4624 //link-local ะฐะดัะตั
2001:B:C::1 //IPv6-ะฐะดัะตั
...
Loopback101 [up/up]
FE80::2D0:97FF:FE94:5022 //link-local ะฐะดัะตั
2001:B:A::1 //IPv6-ะฐะดัะตั
ืืขืจื ืึธื, ืื ISP ืจืึทืืืขืจ ืืืขื ืืืื ืงืึทื ืคืืืืขืจื. ืืึธ, ืืืื ืื ืึทืจืืขื, ืืืคึผืืึทืงืง ื ืืืขืจ 0 ืืืขื ืืืื ืงืึทื ืคืืืืขืจื, ืึธืืขืจ ืึทืืืฅ ืืขื, ืขืก ืืื ืืืืืขืจ ืฆื ืงืึทื ืคืืืืขืจ ืื ื0/0 ืฆืืืื ื, ืืืึธืก ืืึธื ืืึธืื ืื ืึทืืจืขืก 30.30.30.1, ืืืืึทื ืืื ืกืึทืืกืึทืงืืืึทื ื ืืึทืกืงืก ืืึธืจื ืืฉื ืืืขื ืืืื ืืขืืึธืื ืืืขืื. ืืึทืฉืืขืืืงื ืื ืื ืืขืจืคืืืกืื. ืขืจืฉืืขืจ, ืืืคึผืืึทืงืง ื ืืืขืจ 0 ืืื ืงืึทื ืคืืืืขืจื:
ISP(config)#interface loopback 0
ISP(config-if)#ip address 8.8.8.8 255.255.255.255
ISP(config-if)#ipv6 enable
ISP(config-if)#ipv6 address 2001:A:C::1/64
ISP(config-if)#exit
ISP(config)#
ืืึทื ืฉืึทืคึฟื show ipv6 interface brief ืืืจ ืงืขื ืขื ืืึทืฉืืขืืืงื ืึทื ืื ืฆืืืื ื ืกืขืืืื ืืก ืืขื ืขื ืจืืืืืง. ืืขืจื ืึธื ืฆืืืื ื g0/0 ืืื ืงืึทื ืคืืืืขืจื:
BR1(config)#interface gigabitEthernet 0/0
BR1(config-if)#no shutdown
BR1(config-if)#ip address 30.30.30.1 255.255.255.252
BR1(config-if)#exit
BR1(config)#
ืืขืจื ืึธื, ืื RTR1 ืจืึทืืืขืจ ืืืขื ืืืื ืงืึทื ืคืืืืขืจื. ืืึธ ืืืจ ืืืื ืืึทืจืคึฟื ืฆื ืฉืึทืคึฟื ืึท ืืืคึผืืึทืงืง ื ืืืขืจ 100:
BR1(config)#interface loopback 100
BR1(config-if)#ip address 1.1.1.1 255.255.255.255
BR1(config-if)#ipv6 enable
BR1(config-if)#ipv6 address 2001:A:B::1/64
BR1(config-if)#exit
BR1(config)#
ืืืื ืืืืฃ RTR1 ืืืจ ืืึทืจืคึฟื ืฆื ืฉืึทืคึฟื 2 ืืืืจืืืึทื ืกืืืื ืขืจืคืืืกืื ืคึฟืึทืจ ืืืืึทื ื ืืื ื ืืืขืจื 100 ืืื 300. ืืึธืก ืงืขื ืขื ืืืื ืืขืืื ืืื ืืืื.
ืขืจืฉืืขืจ, ืืืจ ืืึทืจืคึฟื ืฆื ืืขืื ืื ืืฉืืืืช ืฆืืืื ื g0/1 ืืื ืื ืงืืื ืฉืึทืืืึทืื ืืึทืคึฟืขื:
RTR1(config)#interface gigabitEthernet 0/1
RTR1(config-if)#no shutdown
RTR1(config-if)#exit
ืืขืจื ืึธื ืกืืinterfaces ืืื ื ืืืขืจื 100 ืืื 300 ืืขื ืขื ืืืฉืืคื ืืื ืงืึทื ืคืืืืขืจื:
// ะกะพะทะดะฐะฝะธะต ะฟะพะดัะฝัะตััะตะนัะฐ ั ะฝะพะผะตัะพะผ 100 ะธ ะฟะตัะตั
ะพะด ะบ ะตะณะพ ะฝะฐัััะพะนะบะต
RTR1(config)#interface gigabitEthernet 0/1.100
// ะฃััะฐะฝะพะฒะบะฐ ะธะฝะบะฐะฟััะปััะธะธ ัะธะฟะฐ dot1q ั ะฝะพะผะตัะพะผ vlan'a 100
RTR1(config-subif)#encapsulation dot1Q 100
RTR1(config-subif)#ipv6 enable
RTR1(config-subif)#ipv6 address 2001:100::1/64
RTR1(config-subif)#exit
// ะกะพะทะดะฐะฝะธะต ะฟะพะดัะฝัะตััะตะนัะฐ ั ะฝะพะผะตัะพะผ 300 ะธ ะฟะตัะตั
ะพะด ะบ ะตะณะพ ะฝะฐัััะพะนะบะต
RTR1(config)#interface gigabitEthernet 0/1.300
// ะฃััะฐะฝะพะฒะบะฐ ะธะฝะบะฐะฟััะปััะธะธ ัะธะฟะฐ dot1q ั ะฝะพะผะตัะพะผ vlan'a 100
RTR1(config-subif)#encapsulation dot1Q 300
RTR1(config-subif)#ipv6 enable
RTR1(config-subif)#ipv6 address 2001:300::2/64
RTR1(config-subif)#exit
ืื ืกืืืื ืืขืจืคืึทืกืข ื ืืืขืจ ืงืขื ืืืื ืึทื ืืขืจืฉ ืคืื ืื ืืืืึทื ื ืืืขืจ ืืื ืืืึธืก ืขืก ืืืขื ืึทืจืืขืื, ืึธืืขืจ ืคึฟืึทืจ ืงืึทื ืืืื ืืึทื ืก ืขืก ืืื ืืขืกืขืจ ืฆื ื ืืฆื ืื ืกืืinterface ื ืืืขืจ ืืืึธืก ืืืืึทืื ืื ืืืืึทื ื ืืืขืจ. ืืืื ืืืจ ืฉืืขืื ืื ืขื ืงืึทืคึผืกืืืึทืืืึธื ืืืคึผ ืืืขื ืืืจ ืืึทืฉืืขืืืงื ืึท ืกืื ืฆืืืื ื, ืืืจ ืืึธื ืกืคึผืขืฆืืคืืฆืืจื ืึท ื ืืืขืจ ืืืึธืก ืืืืึทืื ืื ืืืืึทื ื ืืืขืจ. ืึทืืื ื ืึธื ืื ืืึทืคึฟืขื encapsulation dot1Q 300 ืื ืกืื ืฆืืืื ื ืืืขื ืืืืื ืคืึธืจื ืืืจื ืืืืึทื ืคึผืึทืงืืฅ ืืื ื ืืืขืจ 300.
ืื ืืขืฆืืข ืฉืจืื ืืื ืืขื ืึทืจืืขื ืืื ืื RTR2 ืจืึทืืืขืจ. ืื ืคึฟืึทืจืืื ืืื ื ืฆืืืืฉื SW1 ืืื RTR2 ืืืื ืืืื ืืื ืึทืงืกืขืก ืืึธืืข, ืื ืืึทืฉืืืืขื ืฆืืืื ื ืืืขื ืคืึธืจื ืืืืื ืฆื RTR2 ืคึผืึทืงืืฅ ืืืขื ืคึฟืึทืจ ืืืืึทื ื ืืืขืจ 300, ืืึธืก ืืื ืกืืืืืื ืืื ืื ืึทืจืืขื ืืืืฃ ืื ื 2 ืืึทืคึผืึทืืึทืืืฉื. ืืขืจืืืขืจ, ืืืืื ืื ืืฉืืืืช ืฆืืืื ื ืืืขื ืืืื ืงืึทื ืคืืืืขืจื ืืืืฃ ืื RTR2 ืจืึทืืืขืจ ืึธื ืงืจืืืืืื ื ืกืืืื ืืขืจืคืืืกืื:
RTR2(config)#interface gigabitEthernet 0/1
RTR2(config-if)#no shutdown
RTR2(config-if)#ipv6 enable
RTR2(config-if)#ipv6 address 2001:300::3/64
RTR2(config-if)#exit
RTR2(config)#
ืืขืจื ืึธื ืฆืืืื ื g0/0 ืืื ืงืึทื ืคืืืืขืจื:
BR1(config)#interface gigabitEthernet 0/0
BR1(config-if)#no shutdown
BR1(config-if)#ip address 30.30.30.2 255.255.255.252
BR1(config-if)#exit
BR1(config)#
ืืขื ืงืึทืืคึผืืืฅ ืื ืงืึทื ืคืืืืขืจืืืฉืึทื ืคืื ืจืึทืืืขืจ ืื ืืขืจืคืืืกืื ืคึฟืึทืจ ืื ืงืจืึทื ื ืึทืจืืขื. ืื ืจืืขื ืื ืืขืจืคืืืกืื ืืืขื ืืืื ืงืึทื ืคืืืืขืจื ืืืขื ืืืจ ืคืึทืจืขื ืืืงื ืื ืคืืืืขื ืืข ืืึทืกืงืก.
ื. ืืขืื ืื SLAAC ืืขืงืึทื ืืืึทื ืฆื ืึทืจืืืกืืขืื IPv6 ืึทืืจืขืกืขืก ืืื ืื MNG ื ืขืฅ ืืืืฃ ืื RTR1 ืจืึทืืืขืจ ืฆืืืื ื
ืื SLAAC ืืขืงืึทื ืืืึทื ืืื ืขื ืืืืึทืื ืืืจื ืคืขืืืงืืึทื. ืืขืจ ืืืืื ืืึทื ืืืจ ืืึทืจืคึฟื ืฆื ืืึธื ืืื ืืขืื IPv6 ืจืืืื ื. ืืืจ ืงืขื ืขื ืืึธื ืืึธืก ืืื ืื ืคืืืืขื ืืข ืืึทืคึฟืขื:
RTR1(config-subif)#ipv6 unicast-routing
ืึธื ืืขื ืืึทืคึฟืขื, ืื ืขืงืืืืคึผืืขื ื ืืงืื ืืื ืึท ืืึทืืขืืึธืก. ืืื ืื ืืขืจืข ืืืขืจืืขืจ, ืืึทื ืง ืฆื ืื ืืืืื ืืึทืคึฟืขื, ืขืก ืืื ืืขืืืขื ืฆื ื ืืฆื ื ืึธื ืืคึผืื6 ืคืึทื ืืงืฉืึทื ื, ืึทืจืืึทื ืืขืจืขืื ื ืึทืจืืืกืืขืื ืืคึผืื6 ืึทืืจืขืกืขืก, ืืึทืฉืืขืืืงื ืจืืืื ื, ืขืืง.
ื. ืืืืฃ ืืืืจืืืขื ืื ืืขืจืคืืืกืื ืืื VLAN 100 (MNG) ืืืืฃ ืกืืืืืฉืื SW1, SW2, SW3, ืืขืื IPv6 ืึทืืืึธ-ืงืึทื ืคืืืืขืจืืืฉืึทื ืืึธืืข
ืคืื ืื ื 3 ืืึทืคึผืึทืืึทืืืฉื ืขืก ืืื ืงืืึธืจ ืึทื ืื ืกืืืืืฉืื ืืขื ืขื ืงืึธื ื ืขืงืืขื ืฆื ืืืืึทื 100. ืืขื ืืืื ืึทื ืขืก ืืื ื ืืืืืง ืฆื ืฉืึทืคึฟื ืืืืจืืืึทื ืื ืืขืจืคืืืกืื ืืืืฃ ืื ืกืืืืืฉืื, ืืื ืืืืื ืืขืืึธืื ืืึทืฉืืืืขื ืืื ืฆื ืืึทืงืืืขื IPv6 ืึทืืจืขืกืขืก ืืืจื ืคืขืืืงืืึทื. ืืขืจ ืขืจืฉื ืงืึทื ืคืืืืขืจืืืฉืึทื ืืื ืืืจืืืขืงืึธืื ืคึผืื ืงื ืึทืืื ืึทื ืื ืกืืืืืฉืื ืงืขื ืขื ืืึทืงืืืขื ืคืขืืืงืืึทื ืึทืืจืขืกืขืก ืคึฟืื RTR1. ืืืจ ืงืขื ืขื ืคืึทืจืขื ืืืงื ืืขื ืึทืจืืขื ืืื ืื ืคืืืืขื ืืข ืจืฉืืื ืคืื ืงืึทืืึทื ืื, ืคึผืึทืกืืง ืคึฟืึทืจ ืึทืืข ืืจืื ืกืืืืืฉืื:
// ะกะพะทะดะฐะฝะธะต ะฒะธัััะฐะปัะฝะพะณะพ ะธะฝัะตััะตะนัะฐ
SW1(config)#interface vlan 100
SW1(config-if)#ipv6 enable
// ะะพะปััะตะฝะธะต ipv6 ะฐะดัะตัะฐ ะฐะฒัะพะผะฐัะธัะตัะบะธ
SW1(config-if)#ipv6 address autoconfig
SW1(config-if)#exit
ืืืจ ืงืขื ืขื ืงืึธื ืืจืึธืืืจื ืึทืืฅ ืืื ืื ืืขืืืข ืืึทืคึฟืขื show ipv6 interface brief:
SW1#show ipv6 interface brief
...
Vlan100 [up/up]
FE80::A8BB:CCFF:FE80:C000 // link-local ะฐะดัะตั
2001:100::A8BB:CCFF:FE80:C000 // ะฟะพะปััะตะฝะฝัะน IPv6-ะฐะดัะตั
ืืื ืึทืืืฉืึทื ืฆื ืื ืืื ืง-ืืืืข ืึทืืจืขืก, ืึทื ืืคึผืื6 ืึทืืจืขืก ืืืงืืืขื ืคืื RTR1 ืืจืืืก. ืื ืึทืจืืขื ืืื ืืฆืืื ืืขืขื ืืืงื, ืืื ืื ืืขืืืข ืงืึทืืึทื ืื ืืืื ืืืื ืืขืฉืจืืื ืืืืฃ ืื ืจืืขื ืกืืืืืฉืื.
ืืื. ืืืืฃ ืึทืืข ืืขืืืืกืขืก (ืึทืืืฅ PC1 ืืื WEB) ืืึทื ืืืึทืื ืืึทืฉืืืืขื ืืื ืง-ืืืืข ืึทืืจืขืกืขืก
6-ืฆืืคึฟืขืจ IPvXNUMX ืึทืืจืขืกืขืก ืืขื ืขื ืงืืื ืฉืคึผืึทืก ืคึฟืึทืจ ืึทืืืื ืืกืืจืึทืืึธืจืก, ืึทืืื ืขืก ืืื ืืขืืืขื ืฆื ืืึทื ืืืึทืื ืืืืฉื ืื ืืื ืง-ืืืืข, ืจืืืืกืื ื ืื ืืขื ื ืฆื ืึท ืืื ืืืื ืืืขืจื. ืื ืึทืกืืื ืืึทื ืฅ ืืึธืื ืืึธืจื ืืฉื ืืืขืื ืืืึธืก ืึทืืจืขืกืขืก ืฆื ืงืืืึทืื, ืึทืืื ืึท ืคืจืื ืืจืืจื ืืื ืฆืืืขืฉืืขืื ืืึธ.
ืคึฟืึทืจ ืืืึทืฉืคึผืื, ืืืืฃ ืืึทืฉืืืืขื SW1 ืืืจ ืืึทืจืคึฟื ืฆื ืฉืืขืื ืื ืืื ืง-ืืืืข ืึทืืจืขืก fe80::10. ืืขื ืงืขื ืขื ืืืื ืืขืืื ืืื ืื ืคืืืืขื ืืข ืืึทืคึฟืขื ืคึฟืื ืื ืงืึทื ืคืืืืขืจืืืฉืึทื ืืึธืืข ืคืื โโืื ืืืืกืืขืงืืืื ืฆืืืื ื:
// ะั
ะพะด ะฒ ะฒะธัััะฐะปัะฝัะน ะธะฝัะตััะตะนั vlan 100
SW1(config)#interface vlan 100
// ะ ััะฝะฐั ัััะฐะฝะพะฒะบะฐ link-local ะฐะดัะตัะฐ
SW1(config-if)#ipv6 address fe80::10 link-local
SW1(config-if)#exit
ืืืฆื ืึทืืจืขืกืื ื ืงืืงื ืคืื ืืขืจ ืึทืืจืึทืงืืืื:
SW1#show ipv6 interface brief
...
Vlan100 [up/up]
FE80::10 //link-local ะฐะดัะตc
2001:100::10 //IPv6-ะฐะดัะตั
ืืื ืึทืืืฉืึทื ืฆื ืื ืืื ืง-ืืืืข ืึทืืจืขืก, ืื ืืืงืืืขื IPv6 ืึทืืจืขืก ืืื ืืืื ืืขืืืื, ืืื ื ืื ืึทืืจืขืก ืืื ืืจืืืก ืืืืืจื ืืืืฃ ืื ืืื ืง-ืืืืข ืึทืืจืขืก.
ืืืืฃ ืืึทืฉืืืืขื SW1 ืขืก ืืื ื ืืืืืง ืฆื ืฉืืขืื ืืืืื ืืืื ืืื ืง-ืืืืข ืึทืืจืขืก ืืืืฃ ืืืื ืฆืืืื ื. ืืื ืื RTR1 ืจืึทืืืขืจ, ืืืจ ืืึทืจืคึฟื ืฆื ืืึทืื ืืขืจ ืกืขืืืื ืืก - ืืืจ ืืึทืจืคึฟื ืฆื ืฉืืขืื ืืื ืง-ืืืืข ืืืืฃ ืฆืืืื ืกืืืื ืืขืจืคืืืกืื, ืืืืฃ ืื ืืืคึผืืึทืงืง, ืืื ืืื ืกืึทืืกืึทืงืืืึทื ื ืกืขืืืื ืืก ืื ืืื ืขื 100 ืฆืืืื ื ืืืขื ืืืื ืืขืจืฉืืึทื ืขื.
ืฆื ืืืกืืืืื ืืื ืืืืืง ืฉืจืืืื ืคืื ืงืึทืืึทื ืื, ืืืจ ืงืขื ืขื ืฉืืขืื ืื ืืขืืืข ืืื ืง-ืืืืข ืึทืืจืขืก ืืืืฃ ืึทืืข ืื ืืขืจืคืืืกืื ืืื ืึทืืึธื. ืืืจ ืงืขื ืขื ืืึธื ืืึธืก ืืื ืึท ืงืืืืขืจื range ื ืืืืขืืื ืืขื ืืืจื ืืืกืืื ื ืึทืืข ืื ืืขืจืคืืืกืื:
// ะะตัะตั
ะพะด ะบ ะฝะฐัััะพะนะบะต ะฝะตัะบะพะปัะบะธั
ะธะฝัะตััะตะนัะพะฒ
RTR1(config)#interface range gigabitEthernet 0/1.100, gigabitEthernet 0/1.300, loopback 100
// ะ ััะฝะฐั ัััะฐะฝะพะฒะบะฐ link-local ะฐะดัะตัะฐ
RTR1(config-if)#ipv6 address fe80::1 link-local
RTR1(config-if)#exit
ืืืขื ืืืจ ืงืึธื ืืจืึธืืืจื ืื ืื ืืขืจืคืืืกืื, ืืืจ ืืืขื ืืขื ืึทื ืื ืืื ืง-ืืืืข ืึทืืจืขืกืขืก ืืขื ืขื ืืฉืืื ืืืฉื ืืืืฃ ืึทืืข ืืืืกืืขืงืืืื ืื ืืขืจืคืืืกืื:
RTR1#show ipv6 interface brief
gigabitEthernet 0/1.100 [up/up]
FE80::1
2001:100::1
gigabitEthernet 0/1.300 [up/up]
FE80::1
2001:300::2
Loopback100 [up/up]
FE80::1
2001:A:B::1
ืึทืืข ืื ืืขืจืข ืืขืืืืกืขืก ืืขื ืขื ืงืึทื ืคืืืืขืจื ืืื ืึท ืขื ืืขื ืืืขื
ื. ืืืืฃ ืึทืืข ืกืืืืืฉืื, ืืืกืืืืึทื ืึทืืข ืคึผืึธืจืฅ ืืืึธืก ืืขื ืขื ื ืืฉื ืืขื ืืฆื ืืื ืืขืจ ืึทืจืืขื ืืื ืึทืจืืืขืจืคืืจื ืฆื ืืืืึทื 99
ืื ืืจืื ื ืืขืืึทื ืง ืืื ืื ืืขืืืข ืืืขื ืฆื ืกืขืืขืงืืืจื ืงืืืคื ืื ืืขืจืคืืืกืื ืฆื ืงืึทื ืคืืืืขืจ ืืื ืืขื ืืึทืคึฟืขื range, ืืื ืืืืื ืืขืืึธืื ืืืจ ืืึธื ืฉืจืืึทืื ืงืึทืืึทื ืื ืฆื ืึทืจืืืขืจืคืืจื ืฆื ืื ืืขืืขืื ืืืืึทื ืืื ืืึทื ืงืขืจ ืึทืืืขืง ืื ืื ืืขืจืคืืืกืื. ืคึฟืึทืจ ืืืึทืฉืคึผืื, ืืึทืฉืืืืขื SW1, ืืืื ืื L1 ืืึธืคึผืึธืืึธืื, ืืืขื ืืึธืื ืคึผืึธืจืฅ f0/3-4, f0/7-8, f0/11-24 ืืื g0/2 ืคืึทืจืงืจืืคึผืื. ืคึฟืึทืจ ืืขื ืืืึทืฉืคึผืื, ืื ืกืขืืืื ืืก ืืึธื ืืืื ืืื ืืืื:
// ะัะฑะพั ะฒัะตั
ะฝะตะธัะฟะพะปัะทัะตะผัั
ะฟะพััะพะฒ
SW1(config)#interface range fastEthernet 0/3-4, fastEthernet 0/7-8, fastEthernet 0/11-24, gigabitEthernet 0/2
// ะฃััะฐะฝะพะฒะบะฐ ัะตะถะธะผะฐ access ะฝะฐ ะธะฝัะตััะตะนัะฐั
SW1(config-if-range)#switchport mode access
// ะะตัะตะฒะพะด ะฒ VLAN 99 ะธะฝัะตััะตะนัะพะฒ
SW1(config-if-range)#switchport access vlan 99
// ะัะบะปััะตะฝะธะต ะธะฝัะตััะตะนัะพะฒ
SW1(config-if-range)#shutdown
SW1(config-if-range)#exit
ืืืขื ืงืึธื ืืจืึธืืืจื ืื ืกืขืืืื ืืก ืืื ืึท ืฉืืื ืืืงืื ื ืืึทืคึฟืขื, ืขืก ืืื ืืืื ืฆื ืืืืขืจืงื ืึทื ืึทืืข ืึทื ืืืื ืคึผืึธืจืฅ ืืืื ืืึธืื ืึท ืกืืึทืืืก. ืึทืืืื ืืกืืจืึทืืืืืข ืึทืจืึธืคึผ, ืืืึธืก ืื ืืืงืืืฅ ืึทื ืื ืคึผืึธืจื ืืื ืคืึทืจืงืจืืคึผืื:
SW1#show ip interface brief
Interface IP-Address OK? Method Status Protocol
...
fastEthernet 0/3 unassigned YES unset administratively down down
ืฆื ืืขื ืืืึธืก ืืืืึทื ืื ืคึผืึธืจื ืืื ืืื, ืืืจ ืงืขื ืขื ื ืืฆื ืื ืื ืืขืจ ืืึทืคึฟืขื:
SW1#show ip vlan
...
99 VLAN0099 active Fa0/3, Fa0/4, Fa0/7, Fa0/8
Fa0/11, Fa0/12, Fa0/13, Fa0/14
Fa0/15, Fa0/16, Fa0/17, Fa0/18
Fa0/19, Fa0/20, Fa0/21, Fa0/22
Fa0/23, Fa0/24, Gig0/2
...
ืึทืืข ืึทื ืืืื ืื ืืขืจืคืืืกืื ืืึธื ืืืื ืืึธ. ืขืก ืืื ืืืื ืฆื ืืืืขืจืงื ืึทื ืขืก ืืืขื ื ืื ืืืื ืืขืืืขื ืฆื ืึทืจืืืขืจืคืืจื ืื ืืขืจืคืืืกืื ืฆื ืืืืึทื ืืืื ืึทืืึท ืึท ืืืืึทื ืืื ื ืืฉื ืืืฉืืคื. ืขืก ืืื ืคึฟืึทืจ ืืขื ืฆืืืขืง ืึทื ืืื ืืขืจ ืขืจืฉื ืกืขืืึทืคึผ ืึทืืข ืื ืืืืึทื ื ื ืืืืืง ืคึฟืึทืจ ืึธืคึผืขืจืึทืฆืืข ืืขื ืขื ืืืฉืืคื.
E. ืืืืฃ ืืึทืฉืืืืขื SW1, ืืขืื ืึท ืฉืืึธืก ืคึฟืึทืจ 1 ืืื ืื ืืืื ืื ืคึผืึทืจืึธื ืืื ืื ืงืขืจืขืงืืื ืฆืืืื ืืึธื ืืื 30 ืกืขืงืื ืืขืก
ืืืจ ืงืขื ืขื ืืึธื ืืึธืก ืืื ืื ืคืืืืขื ืืข ืืึทืคึฟืขื:
// ะะปะพะบะธัะพะฒะบะฐ ะฝะฐ 60ั; ะะพะฟััะบะธ: 2; ะ ัะตัะตะฝะธะต: 30ั
SW1#login block-for 60 attempts 2 within 30
ืืืจ ืงืขื ื ืืืื ืงืึธื ืืจืึธืืืจื ืื ืกืขืืืื ืืก ืืื ืืืื:
SW1#show login
...
If more than 2 login failures occur in 30 seconds or less,
logins will be disabled for 60 seconds.
...
ืืืขื ืขืก ืืื ืงืืืจ ืืขืจืงืืขืจื ืึทื ื ืึธื ืฆืืืื ื ืื ืืขืจืึธืื ืคืจืืืื ืืื 30 ืกืขืงืื ืืขืก ืึธืืขืจ ืืืืื ืืงืขืจ, ืื ืคืืืืงืืื ืฆื ืึทืจืืึทื ืืึธืืืจื ืืืขื ืืืื ืืคืืขืฉืืขืื ืคึฟืึทืจ 60 ืกืขืงืื ืืขืก.
2. ืึทืืข ืืขืืืืกืขืก ืืืื ืืืื ืืึทื ืืืืฉืึทืืึทื ืืืจื SSH ืืืขืจืกืืข 2
ืึผืื ืืืืืืืกืึทื ืฆื ืืืื ืฆืืืจืืืืขื ืืืจื SSH ืืืขืจืกืืข 2, ืืืจ ืืืื ืขืจืฉืืขืจ ืงืึทื ืคืืืืขืจ ืื ืืืกืจืืื, ืึทืืื ืคึฟืึทืจ ืื ืคืึธืจืืืืฉืึทื ืึทื ืฆืืืขืงื, ืืืจ ืืืขืื ืขืจืฉืืขืจ ืงืึทื ืคืืืืขืจ ืื ืขืงืืืืคึผืืขื ื ืืื ืคืึทืืจืืง ืกืขืืืื ืืก.
ืืืจ ืงืขื ืขื ืืืืฉื ืื ืคึผืึทื ืืงืืฉืขืจ ืืืขืจืกืืข ืืื ืืืื:
// ะฃััะฐะฝะพะฒะธัั ะฒะตััะธั SSH ะฒะตััะธะธ 2
Router(config)#ip ssh version 2
Please create RSA keys (of at least 768 bits size) to enable SSH v2.
Router(config)#
ืืขืจ ืกืืกืืขื ืืขื ืืืจ ืฆื ืฉืึทืคึฟื RSA ืฉืืืกืืขื ืคึฟืึทืจ SSH ืืืขืจืกืืข 2. ืืืื ืื ืขืฆื ืคืื ืื ืงืืื ืกืืกืืขื, ืืืจ ืงืขื ืขื ืืึทืื RSA ืฉืืืกืืขื ืืื ืื ืคืืืืขื ืืข ืืึทืคึฟืขื:
// ะกะพะทะดะฐะฝะธะต RSA ะบะปััะตะน
Router(config)#crypto key generate rsa
% Please define a hostname other than Router.
Router(config)#
ืืขืจ ืกืืกืืขื ืืื ื ืืฉื ืืึธืื ืื ืืึทืคึฟืขื ืขืงืกืึทืงืืืืึทื ืืืืึทื ืื ืืึธืกืื ืึทืืข ืืื ื ืืฉื ืืฉืืื ืืืฉื. ื ืึธื ืืฉืึทื ืืื ื ืื ืืึธืกืื ืึทืืข, ืืืจ ืืึทืจืคึฟื ืฆื ืฉืจืืึทืื ืื ืฉืืืกื ืืืจ ืืึทืคึฟืขื ืืืืืขืจ:
Router(config)#hostname R1
R1(config)#crypto key generate rsa
% Please define a domain-name first.
R1(config)#
ืืืฆื ืื ืกืืกืืขื ืงืขื ื ืืฉื ืืึธืื ืืืจ ืฆื ืฉืึทืคึฟื RSA ืฉืืืกืืขื ืืืืึทื ืคืื ืื ืคืขืื ืคืื ืึท ืคืขืื ื ืึธืืขื. ืืื ื ืึธื ืื ืกืืึธืืื ื ืื ืคืขืื ื ืึธืืขื, ืขืก ืืืขื ืืืื ืืขืืืขื ืฆื ืฉืึทืคึฟื RSA ืฉืืืกืืขื. RSA ืฉืืืกืืขื ืืืื ืืืื ืืคึผืืืช 768 ืืืฅ ืืึทื ื ืคึฟืึทืจ SSH ืืืขืจืกืืข 2 ืฆื ืึทืจืืขืื:
R1(config)#ip domain-name wsrvuz19.ru
R1(config)#crypto key generate rsa
How many bits in the modulus [512]: 1024
% Generating 1024 bit RSA keys, keys will be non-exportable...[OK]
ืืื ืึท ืจืขืืืืืึทื, ืขืก ืืืจื ืก ืืืืก ืึทื ืคึฟืึทืจ SSHv2 ืฆื ืึทืจืืขืื ืขืก ืืื ื ืืืืืง:
- ืืืืฉื ืืึธืกืื ืึทืืข;
- ืืืืฉื ืคืขืื ื ืึธืืขื;
- ืืืฉืขื ืขืจืืื RSA ืฉืืืกืืขื.
ืืขืจ ืคืจืืขืจืืืงืขืจ ืึทืจืืืงื ืืึธื ืืขืืืืื ืืื ืฆื ืืืืฉื ืื ืืึธืกืื ืึทืืข ืืื ืื ืคืขืื ื ืึธืืขื ืืืืฃ ืึทืืข ืืขืืืืกืขืก, ืึทืืื ืืฉืขืช ืืืจ ืคืึธืจืืขืฆื ืฆื ืงืึทื ืคืืืืขืจ ืื ืงืจืึทื ื ืืขืืืืกืขืก, ืืืจ ื ืึธืจ ืืึทืจืคึฟื ืฆื ืืืฉืขื ืขืจืืื RSA ืฉืืืกืืขื:
RTR1(config)#crypto key generate rsa
How many bits in the modulus [512]: 1024
% Generating 1024 bit RSA keys, keys will be non-exportable...[OK]
SSH ืืืขืจืกืืข 2 ืืื ืึทืงืืืื, ืึธืืขืจ ืื ืืขืืืืกืขืก ืืขื ืขื ื ืืฉื ืืึธืจ ืงืึทื ืคืืืืขืจื. ืื ืืขืฆืืข ืฉืจืื ืืืขื ืืืื ืืึทืฉืืขืืืงื ืืืืจืืืึทื ืงืึทื ืกืึธืืื:
// ะะตัะตั
ะพะด ะบ ะฝะฐัััะพะนะบะต ะฒะธัััะฐะปัะฝัั
ะบะพะฝัะพะปะตะน
R1(config)#line vty 0 4
// ะ ะฐะทัะตัะตะฝะธะต ัะดะฐะปะตะฝะฝะพะณะพ ะฟะพะดะบะปััะตะฝะธั ัะพะปัะบะพ ะฟะพ ะฟัะพัะพะบะพะปั SSH
RTR1(config-line)#transport input ssh
RTR1(config-line)#exit
ืืื ืืขื ืคืจืืขืจืืืงื ืึทืจืืืงื, ืื AAA ืืึธืืขื ืืื ืงืึทื ืคืืืืขืจื, ืืื ืึธืืขื ืืึทืงืืืฉืึทื ืืื ืืขืืืขื ืืึทืฉืืืื ืืืืฃ ืืืืจืืืึทื ืงืึทื ืกืึธืืื ื ืืฆื ืึท ืืืืข ืืึทืืึทืืืืก, ืืื ืืขืจ ืืึทื ืืฆืขืจ, ื ืึธื ืึธืืขื ืืึทืงืืืฉืึทื, ืืื ืฆื ืืื ืืืื ืืื ืคึผืจืืืืืืืืฉื ืืึธืืข. ืื ืกืืืคึผืืึทืกื ืคึผืจืึธืืข ืคืื โโSSH ืคืึทื ืืงืฉืึทื ืึทืืืื ืืื ืฆื ืคึผืจืืืืจื ืฆื ืคืึทืจืืื ืื ืฆื ืืืื ืืืืืขื ืข ืืืกืจืืื. RTR1 ืืื ืึท ืืืคึผืืึทืงืง ืืื IP ืึทืืจืขืก 1.1.1.1, ืืืจ ืงืขื ืขื ืคึผืจืืืืจื ืงืึทื ืขืงืืื ื ืฆื ืืขื ืึทืืจืขืก:
//ะะพะดะบะปััะตะฝะธะต ะฟะพ ssh
RTR1(config)#do ssh -l wsrvuz19 1.1.1.1
Password:
RTR1#
ื ืึธื ืืขื ืฉืืืกื -l ืึทืจืืึทื ืื ืืึธืืื ืคืื ืื ืืืืืกืืื ื ืืึทื ืืฆืขืจ, ืืื ืืขืืึธืื ืืขืจ ืคึผืึทืจืึธื. ื ืึธื ืึธืืขื ืืึทืงืืืฉืึทื, ืืขืจ ืืึทื ืืฆืขืจ ืืืืื ืกืืืืืฉืื ืฆื ืคึผืจืืืืืืืืฉื ืืึธืืข, ืืืึธืก ืืืื ืึทื SSH ืืื ืงืึทื ืคืืืืขืจื ืจืืืืืง.
ืืงืืจ: www.habr.com