Routerimiz himoyasini - M. A. Sattarov, D. Q. Bekmuratov kompyuter

|
M. A. Sattarov, D. Q. Bekmuratov kompyuter
|
bet | 17/19 | Sana | 15.01.2024 | Hajmi | 2,07 Mb. | | #137865 |
Bog'liq 61b198dd982d63.85766431Routerimiz himoyasini sozlang. Buni amalga oshirish uchun, Security bo’limi va " Security Mode" punktiga o'ting, WPA2 Personal-ni tanlang. WPA2 Enterpriseni tanlashning hojati yo'q, chunki uning ishi uchun biz qilmagan server radiusiga muhtojmiz. Shifrlash algoritmi AESdan ajralib qoladi va kod so'zini kiritadi. Men Habrni namoyish qildingan.
3 qurilmani (smartfon, noutbuk va kompyuter) qo'shing. Keyin rj-45 uchun ulagichlarni Wi-Fi antennasiga almashtiring (smartfonda, standart antennaga).
Config ko'rinishida rouerga o'rnatilgan sozlamalarni o'rnating. Ushbu operatsiya barcha qurilmalarda bajarilishi kerak.
Har qanday kompyuterning ish stoliga o'ting va buyruq xohishini oching.
Router tomonidan chiqarilgan qurilmalar manzillarini tekshiring. Buning uchun ipconfig buyrug'ini kiriting.
Displeyda ko'rinib turganidek, router 192.168.0.100 dan 192.168.0.150 gacha manzillarni taqdim etadi.
Ping buyrug'i yordamida har qanday qurilmadan tarmoq ishlashini tekshirib ko'ramiz. Biz router manzilini (192.168.0.1) va oq adresni (120.120.0.1)
manzilga 2 ta manzilga yuboramiz, ya'ni qurilmaning Internetga kirishini tekshiramiz.
Demak, hammasi ishlayapti.
Natijada 2-variantdagi rasmda ifodalangandek Wi-Fi tarmog'iga ega bo'ldik.
Topshiriq №1 (variant №3)
Oldingi laboratoriya ishlaridan tugagan loyihani oching.
Dasturning ish joyida kirish nuqtasini yarating va uni kalitga ulang. Agar so'ralsa, kirish nuqtasi sozlanishi (Port 0 - jismoniy port va Port 1 simsiz)
Simsiz kirish nuqtasi uchun boshqa VLANni yarating.
Router 0 VLAN-4 sozlamalariga qo'shing va Internetga kirish uchun ruxsat ro'yxatiga qo'shing.
Biz buni oldingi amaliyotda (VLAN va PAT) qilganimiz uchun bunga batafsil to’xtalmaymiz, ammo qurilmadagi barcha buyruqlarni ro'yxatdan o’tkazamiz.
Switch
Switch>en Switch#conf t
Switch(config)#vlan 4
Switch(config-vlan)#name Wi-Fi Switch(config-vlan)#exit Switch(config)#interface FastEthernet0/5 Switch(config-if)#switchport access vlan 4
Router (subinterface)
Router>en Router#conf t
Router(config)#int fa0/1.4
Router(config-subif)#encapsulation dot1Q 4
Router(config-subif)#ip address 192.168.4.1
255.255.255.0
Router(config-subif)#no shutdown Router(config-subif)#end
Router (DHCP (Dynamic Host Configuration Protocol - Dinamik Xost Konfiguratsiya Protokoli). Kompyuterlar avtomatik tarzda TCP / IP tarmog'ida ishlash uchun zarur bo'lgan IP-manzilini va boshqa parametrlarini olish imkonini beruvchi tarmoq protokoli)
Router#conf t
Router(config)#ip dhcp pool Wi-Fi-pool Router(dhcp-config)#network 192.168.4.0
255.255.255.0
Router(dhcp-config)#default-router 192.168.4.1 Router(dhcp-config)#exit
Router(config)#ip dhcp excluded-address 192.168.4.1 Router(config)#end
Bu yerga batafsil to'xtalib o'tamaymiz, chunki biz bu parametr bilan oldindan tanishmaganmiz.
Router(config)#ip dhcp pool Wi-Fi-pool – DHCP manzillarini yaratish. Router(dhcp-config)#network 192.168.4.0 255.255.255.0 – dhcp ni malga oshiruvchi tarmoq va uning maskasi
Router(dhcp-config)#default-router 192.168.4.1 – router adresi Router(config)#ip dhcp excluded-address 192.168.4.1 – yo'riqchining manzilini dhcp orqali taqsimlashdan chetda qoldirish
Router (access list)
Router(config)#ip access-list standard HABRAHABR Router(config-std-nacl)#permit 192.168.4.0
0.0.0.255
Router(config-std-nacl)#exit
Router(config)#int fa0/1.4 Router(config-subif)#ip nat inside Router(config-subif)#end
Packet Tracer ish maydoniga smartfon qo'shing va kompyuter, server va internetni pleylistga qo'shing, ya'ni 192.168.2.2, 192.168.3.2, 120.120.53.1.
Ko’rinib turganidek, hammasi ishlayapti.
|
| |