阅读以下说明,回答问题1至问题3,将解答填入答题纸对应的解答栏内。【说明】某私人别墅部署了一套有线网和无线网,覆盖所有房间和室外活动区域,别墅中拥有一套智能家居系统,其网络拓扑结构如图3-1所示。网络规划如表3-1所示。 【问题1】(3分,每空1分)现有无线网标准中,AP支持的802.11n标准,理论最高速度达到(1)Mbps.支持双频段工作模式,既可以工作在2.4GHz,也可以工作在(2)GHz。AP的工作模式有胖AP和瘦AP之分,在使用(3)统一管理AP,部署无线网络时,为了提高可管理性,AP应该选择瘦AP方式。(1)备选项A.11B.54C.300D.600 【问题2】(8分,每空2分)华为设备经常使用的ACL有基本ACL、高级ACL和二层ACL,其编号范围分别为(4)、(5)和(6)。使用报文的以太网帧头信息来定义规则,如根据源MAC地址、目的MAC地址、二层协议类型等的是(7)。(4)(5)(6)(7) 【问题3】(9分,每空1分)用户希望外来客人在连接无线网的时候,只能访问互联网,无法访问别墅的智能家居系统。来访客人可连接的无线ID是guest,限制该网段访问别墅的智能家居系统,允许访问互联网。别墅主人使用的无线ID是home,可访问所有网段,无限制。请根据描述,将下面的配置代码补充完整。R1基本配置、NAT及拨号上网配置略......[R1]interfaceGigabitEthernet0/0/1[R1-GigabitEthernet0/0/1]ipaddress(8)[R1-GigabitEthernet0/0/1]quit[R1]iproute-static192.168.8.021(9)[R1]iproute-static172.16.6.030172.16.5.2[R1]iproute-static0.0.0.00Dialer1…… AC的基本配置及AP注册管理配置略……[AC]dhcp(10)[AC]vlanbatch10102103104[AC-Vlanif10]ipaddress172.16.6.130[AC-Vlanif10]quit[AC]interfaceVlanif104[AC-Vlanif104]ipaddress192.168.12.25424[AC-Vlanif104]dhcpselect(11)[AC-Vlanif104]quit[AC]interfaceGigabitEthernet0/0/1[AC-GigabitEthernet0/0/1]portlink-typetrunk[AC-GigabitEthernet0/0/1]undoporttrunkallow-passvlan1[AC-GigabitEthernet0/0/1]porttrunkallow-passvlan10102103104[AC-GigabitEthernet0/0/1]quit[AC]iproute-static0.0.0.00172.16.6.2 SW1的基本配置略[SW1]vlanbatch910100to104[SW1]interfaceVlanif9[SW1-Vlanif9]ipaddress172.16.5.230[SW1-Vlanif9]quit[SW1-Vlanif10]ipaddress172.16.6.230[SW1-Vlanif10]quit[SW1]intVlanif100[SW1-Vlanif100]ipaddress192.168.8.25424[SW1-Vlanif100]quit[SW1]intVlanif101[SW1-Vlanif101]ipaddress192.168.9.25424[SW1-Vlanif101]quit[SW1]interfaceVlanif102[SW1-Vlanif102]ipaddress192.168.10.25424[SW1-Vlanif102]quit[SW1]interfaceVlanif103[SW1-Vlanif103]ipaddress192.168.11.25424[SW1-Vlanif103]quit[SW1]interfaceGigabitEthernet0/0/21[SW1-GigabitEthernet0/0/21]portlink-typetrunk[SW1-GigabitEthernet0/0/21]undoporttrunkallow-passvlan1[SW1-GigabitEthernet0/0/21]porttrunkallow-passvlan10102103104[SW1-GigabitEthernet0/0/21]quit[SW1]interfaceGigabitEthernet0/0/22[SW1-GigabitEthernet0/0/22]portlink-typeaccess[SW1-GigabitEthernet0/0/22]portdefaultvlan104[SW1-GigabitEthernet0/0/22]quit[SW1]interfaceGigabitEthernet0/0/23[SW1-GigabitEthernet0/0/23]portlink-typetrunk[SW1-GigabitEthernet0/0/23]undoporttrunkallow-passvlan1[SW1-GigabitEthernet0/0/23]porttrunkallow-passvlan100101[SW1]interfaceGigabitEthernet0/0/24[SW1-GigabitEthernet0/0/24]portlink-typeaccess[SW1-GigabitEthernet0/0/24]portdefaultvlan(12)[SW1-GigabitEthernet0/0/24]quit[SW1]acl3000[SW1-acl-adv-3000]ruledenyipsource192.168.11.00.0.0.255destination192.168.8.00.0.0.255[SW1-acl-adv-3000]rule10permitip[SW1-acl-adv-3000]quit[SW1]trafficclassifierc1[SW1-classifier-c1]if-matchacl(13)[SW1-classifier-c1]quit[SW1]trafficbehaviorb1[SW1-behavior-b1]deny[SW1-behavior-b1]quit[SW1]trafficpolicyp1[SW1-trafficpolicy-p1]classifier(14)behaviorb1[SW1-trafficpolicy-p1]quit[SW1]interfaceVlanif103[SW1-Vlanif103]traffic-policyp1(15)[SW1-Vlanif103]quit[SW1]iproute-static192.168.12.024(16)[SW1]iproute-static0.0.0.00172.16.5.1 …… (8)~(16)备选项:A.172.16.6.1B.interfaceC.172.16.5.130D.enableE.3000F.inboundG.172.16.5.2H.9I.c1
R1基本配置、NAT及拨号上网配置略......[R1]interface GigabitEthernet 0/0/1[R1-GigabitEthernet0/0/1]ip address 172.16.5.1 30[R1-GigabitEthernet0/0/1]quit[R1]ip route-static 192.168.8.0 21 172.16.5.2[R1]ip route-static 172.16.6.0 30 172.16.5.2[R1]ip route-static 0.0.0.0 0 Dialer 1…… AC的基本配置及AP注册管理配置略……[AC]dhcp enable[AC]vlan batch 10 102 103 104[AC-Vlanif10]ip address 172.16.6.1 30[AC-Vlanif10]quit[AC]interface Vlanif 104[AC-Vlanif104]ip address 192.168.12.254 24[AC-Vlanif104]dhcp select interface[AC-Vlanif104]quit[AC]interface GigabitEthernet 0/0/1[AC-GigabitEthernet0/0/1]port link-type trunk [AC-GigabitEthernet0/0/1]undo port trunk allow-pass vlan 1[AC-GigabitEthernet0/0/1]port trunk allow-pass vlan 10 102 103 104[AC-GigabitEthernet0/0/1]quit[AC]ip route-static 0.0.0.0 0 172.16.6.2 SW1的基本配置略[SW1]vlan batch 9 10 100 to 104[SW1]interface Vlanif 9[SW1-Vlanif9]ip address 172.16.5.2 30[SW1-Vlanif9]quit[SW1-Vlanif10]ip address 172.16.6.2 30[SW1-Vlanif10]quit[SW1]int Vlanif 100[SW1-Vlanif100]ip address 192.168.8.254 24[SW1-Vlanif100]quit[SW1]int Vlanif 101[SW1-Vlanif101]ip address 192.168.9.254 24[SW1-Vlanif101]quit[SW1]interface Vlanif 102[SW1-Vlanif102]ip address 192.168.10.254 24[SW1-Vlanif102]quit[SW1]interface Vlanif 103[SW1-Vlanif103]ip address 192.168.11.254 24[SW1-Vlanif103]quit[SW1]interface GigabitEthernet 0/0/21[SW1-GigabitEthernet0/0/21]port link-type trunk[SW1-GigabitEthernet0/0/21]undo port trunk allow-pass vlan 1[SW1-GigabitEthernet0/0/21]port trunk allow-pass vlan 10 102 103 104[SW1-GigabitEthernet0/0/21]quit[SW1]interface GigabitEthernet 0/0/22[SW1-GigabitEthernet0/0/22]port link-type access[SW1-GigabitEthernet0/0/22]port default vlan 104[SW1-GigabitEthernet0/0/22]quit[SW1]interface GigabitEthernet 0/0/23[SW1-GigabitEthernet0/0/23]port link-type trunk[SW1-GigabitEthernet0/0/23]undo port trunk allow-pass vlan 1[SW1-GigabitEthernet0/0/23]port trunk allow-pass vlan 100 101[SW1]interface GigabitEthernet 0/0/24[SW1-GigabitEthernet0/0/24]port link-type access[SW1-GigabitEthernet0/0/24]port default vlan 9[SW1-GigabitEthernet0/0/24]quit[SW1]acl 3000[SW1-acl-adv-3000]rule deny ip source 192.168.11.0 0.0.0.255 destination 192.168.8.0 0.0.0.255[SW1-acl-adv-3000]rule 10 permit ip[SW1-acl-adv-3000]quit[SW1]traffic classifier c1[SW1-classifier-c1]if-match acl 3000[SW1-classifier-c1]quit[SW1]traffic behavior b1[SW1-behavior-b1]deny [SW1-behavior-b1]quit[SW1]traffic policy p1[SW1-trafficpolicy-p1]classifier c1 behavior b1 [SW1-trafficpolicy-p1]quit[SW1]interface Vlanif 103[SW1-Vlanif103]traffic-policy p1 inbound[SW1-Vlanif103]quit[SW1]ip route-static 192.168.12.0 24 172.16.6.1[SW1]ip route-static 0.0.0.0 0 172.16.5.1 …… SW2的配置略 【问题1】(3分,每空1分)(1)D(2)5(3)AC或者无线控制器【问题2】(8分,每空2分)(4)2000~2999(5)3000~3999(6)4000~4999(7)二层ACL【问题3】(9分,每空1分)参考答案(8)~(16):CGDBHEIFA 【解析】 【问题1】解析:基础概念,具体参数如下表所示。 【问题2】解析:华为设备的ACL基础概念。访问控制列表可以分为基本访问控制列表和高级访问控制列表和二层访问控制列表 【问题3】解析:主要是能根据上下文找到关键词或者根据命令中的空,掌握参数。也可以根据备选项中的参数,逐个试验,找到正确的答案为止。