阅读下面的短文,回答问题 [When an IP packet arrives at a router, generally the router looks at the destination address of the packet, and forwards the packet to one of its network interfaces. The forwarding decision is usually done by looking up the destination address from another data structure called a forwarding table. The forwarding table is created by the router using the routing table and possible routing policies existing in the router. The router then creates a table where it lists which networks are accessible through which of the router’s network interfaces. An IP router looks at every IP packet individually and does the forwarding decision on a packet-by-packet basis. If something changes in the router’s routing table, a packet can take a different route from a preceding packet even if it has the same destination.] From the paragraph above,we can see that the router ( ) a forwarding table according to the routing table and possible routing policies existing in the router. When an IP packet arrives at a router, the ( ) part of packet is normally checked by the router. An IP router checks every IP Packet individually and makes the forwarding decision based on ( ).
A.is generating B.generate C.is generated D.generates A.forwarding table B.network interfaces C.routing policies D.destination address A.the destination address and network interfaces B.forwarding table and network interfaces C.the destination address and forward table D.routing policies and routing table
第1题:
试题四(共15分)
阅读以下说明,回答问题1至问题5,将解答填入答题纸对应的解答栏内。
【说明】
某公司两分支机构之间的网络配置如图4-1所示,为保护通信安全,在路由器router-a和router-b上配置IPSec安全策略,对192.168.8.0/24网段和 192.168.9.0/24网段之间的数据进行加密处理。
【问题1】(3分)
为建立两分支机构之间的通信,请完成下面的路由配置命令。
router-a (config) iproute 0.0.0.0 0.0.0.0 (1)
router-b(config)iproute 0.0.0.0 0.0.0.0 (2)
【问题2】(3分)
下面的命令是在路由器router-a中配置IPSec隧道。请完成下面的隧道配置命令。
router-a(config) crypto tunnel tun1 (设置IPSec隧道名称为tunl)
router-a(config-tunnel) peer address (3) (设置隧道对端IP地址,
router-a(config-tunnel)local address (4) 设置隧道本端IP地址)
router-a(config-tunnel) set auto-up (设置为自动协商)
router-a(config-tunnel) exit (退出隧道设置)
【问题3】(3分)
router-a 与 router-b之间采用预共享密钥“12345678”建立IPSec关联,请完成下面
配置router-a(config) cryptike key 12345678 address
router_a(config)cryt ike key 12345678 addresS (5)
router-b(config) crypt ike key 12345678 address (6)
【问题4】(3分)
下面的命令在路由器router-a中配置了相应的IPSec策略,请说明该策略的含义。
router-a(config) crypto policypl
router-a(config-policy) flow
192.168.8.0255.255.255.0192.168.9.0.255.255.255.255.0
ip tunnel tunl
router-a(config-policy)exit
【问题5】(3分)
下面的命令在路由器router-a中配置了相应的IPSec提议。
router-a(config) crypto ipsec proposal secpl
router-a(config-ipsec-prop) esp 3des shal
router-a(config-ipsecprop)exit
该提议表明:IPSec采用ESP报文,加密算法 (7) ,认证算法采用 (8) 。
第2题:
第3题:
2、在静态NAT转换中将IP地址192.168.1.7转换成IP地址200.8.7.3的命令是:
A.Router(config)#ip nat inside source static 192.168.1.7 200.8.7.3
B.Router#ip nat inside source static 192.168.1.7 200.8.7.3
C.Router(config)#ip nat inside source static 200.8.7.3 192.168.1.7
D.Router#ip nat inside source static 200.8.7.3 192.168.1.7
第4题:
第5题:
在静态NAT转换中将IP地址192.168.1.7转换成IP地址200.8.7.3的命令是:
A.Router(config)#ip nat inside source static 192.168.1.7 200.8.7.3
B.Router#ip nat inside source static 192.168.1.7 200.8.7.3
C.Router(config)#ip nat inside source static 200.8.7.3 192.168.1.7
D.Router#ip nat inside source static 200.8.7.3 192.168.1.7
第6题:
【单选题】能配置 IP 地址的提示符是
A.Router>
B.Router#
C.Router(config)#
D.Router(config-if)#