Laboratoriya ishi korxona va tashkilot axborot komunikatsiya tizimlarida vpn tarmoq qurish

14.3. Laboratoriya ishining bajarilish tartibi

14.3.1. CPT dasturida VPN (Virtual Private Network) tarmoqni qurish uchun dastlab

3 router, 2 kompyuter (pc) va 1 laptop olamiz va ularni bir-biri bilan o’zaro aloqa kabeli orqali ulab chiqiladi:



14.2-rasm

14.3.2. Dastlab routerlarga IP address sozlamalari kiritiladi. Buning uchun 1-router ga «console» kabeli orqali laptop0 ulab olinadi:

14.3-rasm
14.3.3. Quyidagi komandalar kiritiladi:
enable
configure terminal
interface FastEthernet 0/0
no shutdown
ip address 192.168.1.1 255.255.255.0; exit
interface FastEthernet 0/1
no shutdown
ip address 1.0.0.2 255.0.0.0; exit

14.4-rasm
14.3.4. Huddi shu tariqa 2-router ga ulanib quyidagi komandalar kiritiladi:
enable
configure terminal
interface FastEthernet 0/0
no shutdown
ip address 192.168.2.1 255.255.255.0; exit
interface FastEthernet 0/1
no shutdown
ip address 2.0.0.2 255.0.0.0; exit



14.5-rasm
14.3.5. 3-router ga «console» kabeli orqali ulanib quyidagi komandalar kiritiladi:
enable
configure terminal
interface FastEthernet 0/0
no shutdown
ip address 1.0.0.1 255.0.0.0
exit
interface FastEthernet 0/1
no shutdown
ip address 2.0.0.1 255.0.0.0; exit



14.6-rasm

14.3.6. 1-router da statik marshrut sozlamalari sozlanadi. Buning uchun quyidagi komandalar kiritiladi:

ip route 0.0.0.0 0.0.0.0 1.0.0.1



14.7-rasm
14.3.7. 2-router da shu tariqa statik marshrut sozlamasi kiritiladi. Buning uchun quyidagi komanda kiritiladi:
ip route 0.0.0.0 0.0.0.0 2.0.0.1

14.8-rasm
14.3.8. 1-kompyuter (pc) ga IP address sozlamalari kiritiladi:
IP address 192.168.1.2
Maska 255.255.255.0
Asosiy shlyuz 192.168.1.1

14.9-rasm
14.3.9. 2-kompyuter (pc) ga IP address sozlamalari kiritiladi:
IP address 192.168.2.2
Maska 255.255.255.0
Asosiy shlyuz 192.168.2.1

14.10-rasm
14.3.10. VPN sozlamalarini kiritish uchun 1-router ga ulanib quyidagi komandalar kiritiladi:
interface tunel 1
ip address 172.16.1.1 255.0.0.0
tunel source FastEthernet 0/1
tunel destination 2.0.0.2
no shutdown
exit
ip route 192.168.2.0 255.255.255.0 172.16.1.2



14.11-rasm
14.3.11. VPN sozlamalarini kiritish uchun 2-router ga ulanib quyidagi komandalar kiritiladi:
interface tunel 2
ip address 172.16.1.2 255.0.0.0
tunel source FastEthernet 0/1
tunel destination 1.0.0.2
no shutdown
exit
ip route 192.168.1.0 255.255.255.0 172.16.1.1



14.12-rasm
14.3.12. Yo’qoridagilar alamga oshirilganidan keyin VPN tarmoq tiklanadi. Keyingi bosqichda kompyuterlar o’rtasida xabar (ping) yuborib tekshiriladi:

14.13-rasm
Yuqoridagi rasmda (14.13-rasm) VPN tarmoq orasida paketlar almashinuvi ifodalandgan.