园区网实验

关注

原创最新推荐文章于 2026-09-11 00:16:05 发布 304 阅读 AI 写同款· GEO 优化 ›

【HCIP园区网综合拓扑实验】配置步骤与详解（已施工完毕） 1、先从交换机下手，将与PC连接的交换机SW3、SW4的VLAN相关配置先配好，然后再配置交换机间相连的配置（SW1、SW2），然后配置三层交换机（交换机与路由器之间的链路配置）2、在配置路由器的接口ip地址、自己的环回接口、还有静态路由。1、按照图示的VLAN及IP地址需求，完成相关配置。4、在交换机网络中，配置STP协议，防止链路成环。2、要求SW1为VLAN 2/3的主根及主网关。5、设置交换机的主根和主网关，以及它们的备份。3、在SW1和SW2间的链路配置链路聚合。实验拓扑图如上图所示。阅读详情

1.四个交换机配置vlan2，3，20，30

vlan batch 2 3 20 30

2.接口分配到对应vlan中

sw3：

[sw3]int g0/0/1
[sw3-GigabitEthernet0/0/1]port link-type access
[sw3-GigabitEthernet0/0/1]port default vlan 2
[sw3-GigabitEthernet0/0/1]int g0/0/2
[sw3-GigabitEthernet0/0/2]port link-type access
[sw3-GigabitEthernet0/0/2]port default vlan 3
[sw3-GigabitEthernet0/0/2]int g0/0/3
[sw3-GigabitEthernet0/0/3]port link-type trunk
[sw3-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 3 20 30
[sw3-GigabitEthernet0/0/3]int g0/0/4
[sw3-GigabitEthernet0/0/4]port link-type trunk
[sw3-GigabitEthernet0/0/4]port trunk allow-pass vlan 2 3 20 30

sw4：

[sw4-GigabitEthernet0/0/1]port link-type access
[sw4-GigabitEthernet0/0/1]port default vlan 20
[sw4-GigabitEthernet0/0/1]int g0/0/2
[sw4-GigabitEthernet0/0/2]port link-type access
[sw4-GigabitEthernet0/0/2]port default vlan 30
[sw4-GigabitEthernet0/0/2]int g0/0/3
[sw4-GigabitEthernet0/0/3]port link-type trunk
[sw4-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 3 20 30
[sw4-GigabitEthernet0/0/3]int g0/0/4
[sw4-GigabitEthernet0/0/4]port link-type trunk
[sw4-GigabitEthernet0/0/4]port trunk allow-pass vlan 2 3 20 30

sw1：

[sw1]int g0/0/3
[sw1-GigabitEthernet0/0/3]port link-type trunk
[sw1-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 3 20 30
[sw1-GigabitEthernet0/0/3]int g0/0/4
[sw1-GigabitEthernet0/0/4]port link-type trunk
[sw1-GigabitEthernet0/0/4]port trunk allow-pass vlan 2 3 20 30
[sw1-GigabitEthernet0/0/4]q

sw2：

[sw2]int g0/0/3
[sw2-GigabitEthernet0/0/3]port link-type trunk
[sw2-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 3 20 30
[sw2-GigabitEthernet0/0/3]int g0/0/4
[sw2-GigabitEthernet0/0/4]port link-type trunk
[sw2-GigabitEthernet0/0/4]port trunk allow-pass vlan 2 3 20 30

sw1和sw2中间需要配置链路聚合

[sw1]int Eth-Trunk 0
[sw1-Eth-Trunk0]trunkport GigabitEthernet 0/0/1 to 0/0/2
[sw1-Eth-Trunk0]port link-type trunk
[sw1-Eth-Trunk0]port trunk allow-pass vlan 2 3 20 30

sw2同上

2.配置mstp

sw1：

[sw1]stp region-configuration
[sw1-mst-region]region-name aa
[sw1-mst-region]revision-level 100
[sw-4mst-region]instance 1 vlan 2 3
[sw1-mst-region]instance 2 vlan 20 30
[sw1-mst-region]active region-configuration

[sw1]stp instance 1 root primary

[sw1]stp instance 2 root secondary

sw2：

[sw2]stp region-configuration
[sw2-mst-region] region-name aa
[sw2-mst-region] revision-level 100
[sw2-mst-region] instance 1 vlan 2 to 3
[sw2-mst-region] instance 2 vlan 20 30
[sw2-mst-region] active region-configuration
[sw2]stp instance 1 root secondary
[sw2]stp instance 2 root primary

sw3：

[sw3]stp region-configuration
[sw3-mst-region]region-name aa
[sw3-mst-region]revision-level 100
[sw3-mst-region]instance 1 vlan 2 3
[sw3-mst-region]instance 2 vlan 20 30
[sw3-mst-region]active region-configuration

sw4：

[sw4]stp region-configuration
[sw4-mst-region] region-name aa
[sw4-mst-region] revision-level 100
[sw4-mst-region] instance 1 vlan 2 to 3
[sw4-mst-region] instance 2 vlan 20 30
[sw4-mst-region] active region-configuration

3.配置vrrp

[sw1]interface Vlanif 2
[sw1-Vlanif2]ip address 10.0.2.1 24
[sw1-Vlanif2]vrrp vrid 1 virtual-ip 10.0.2.254
[sw1-Vlanif2]vrrp vrid 1 priority 120
[sw1-Vlanif2]vrrp vrid 1 preempt-mode timer delay 20
[sw1-Vlanif2]vrrp vrid 1 track interface GigabitEthernet 0/0/5 reduced 30
[sw1]interface Vlanif 3
[sw1-Vlanif3]ip address 10.0.3.1 24
[sw1-Vlanif3]vrrp vrid 1 virtual-ip 10.0.3.254
[sw1-Vlanif3]vrrp vrid 1 priority 120
[sw1-Vlanif3]vrrp vrid 1 preempt-mode timer delay 20
[sw1-Vlanif3]vrrp vrid 1 track interface GigabitEthernet 0/0/5 reduced 30
[sw1]interface Vlanif 20
[sw1-Vlanif20]ip address 10.0.20.1 24
[sw1-Vlanif20]vrrp vrid 1 virtual-ip 10.0.20.254
[sw1]int Vlanif 30
[sw1-Vlanif30]ip address 10.0.30.1 24
[sw1-Vlanif30]vrrp vrid 1 virtual-ip 10.0.30.254

[sw2]interface Vlanif 2
[sw2-Vlanif2]ip address 10.0.2.2 24
[sw2-Vlanif2]vrrp vrid 1 virtual-ip 10.0.2.254
[sw2]interface Vlanif 3
[sw2-Vlanif3]ip address 10.0.3.2 24
[sw2-Vlanif3]vrrp vrid 1 virtual-ip 10.0.3.254
[sw2]interface Vlanif 20
[sw2-Vlanif20]ip address 10.0.20.2 24
[sw2-Vlanif20]vrrp vrid 1 virtual-ip 10.0.20.254
[sw2-Vlanif20]vrrp vrid 1 priority 120
[sw2-Vlanif20]vrrp vrid 1 preempt-mode timer delay 20
[sw2-Vlanif20]vrrp vrid 1 track interface GigabitEthernet 0/0/5 reduced 30
[sw2]interface Vlanif 30
[sw2-Vlanif30]ip address 10.0.30.2 24
[sw2-Vlanif30]vrrp vrid 1 virtual-ip 10.0.30.254
[sw2-Vlanif30]vrrp vrid 1 priority 120
[sw2-Vlanif30]vrrp vrid 1 preempt-mode timer delay 20
[sw2-Vlanif30]vrrp vrid 1 track interface GigabitEthernet 0/0/5 reduced 30

4.配置dhcp池

[sw1]dhcp enable
[sw1]ip pool vlan2
[sw1-ip-pool-vlan2]network 10.0.2.0 mask 24
[sw1-ip-pool-vlan2]gateway-list 10.0.2.254
[sw1-ip-pool-vlan2]dns-list 8.8.8.8
[sw1-ip-pool-vlan2]excluded-ip-address 10.0.2.1 10.0.2.128

打开dhcp

[sw1]interface Vlanif 2
[sw1-Vlanif2]dhcp select global
[sw1]interface Vlanif 3
[sw1-Vlanif3]dhcp select global
[sw1]interface Vlanif 20
[sw1-Vlanif20]dhcp select global
[sw1]interface Vlanif 30
[sw1-Vlanif30]dhcp select global

5.完成上层数据通信

[sw1]vlan 11
[sw1]interface g0/0/5
[sw1-GigabitEthernet0/0/5]port link-type access
[sw1-GigabitEthernet0/0/5]port default vlan 11
[sw1]interface Vlanif 11
[sw1-Vlanif11]ip address 10.0.11.1 30

[sw1]ospf 1
[sw1-ospf-1]area 0
[sw1-ospf-1-area-0.0.0.0]network 10.0.2.1 0.0.0.0
[sw1-ospf-1-area-0.0.0.0]network 10.0.3.1 0.0.0.0
[sw1-ospf-1-area-0.0.0.0]network 10.0.3.1 0.0.0.0
[sw1-ospf-1-area-0.0.0.0]network 10.0.11.1 0.0.0.0
[sw1-ospf-1-area-0.0.0.0]network 10.0.20.1 0.0.0.0
[sw1-ospf-1-area-0.0.0.0]network 10.0.30.1 0.0.0.0

[sw1-ospf-1-area-0.0.0.0]network 10.0.13.1 0.0.0.0

[sw1-ospf-1]silent-interface Vlanif 2
[sw1-ospf-1]silent-interface Vlanif 3
[sw1-ospf-1]silent-interface Vlanif 20
[sw1-ospf-1]silent-interface Vlanif 30

[sw1]vlan 13
[sw1]int Eth-Trunk 0
[sw1-Eth-Trunk0]port trunk allow-pass vlan 13
[sw1-Vlanif13]ip address 10.0.13.1 30

[sw2]vlan 12
[sw2]int g0/0/5
[sw2-GigabitEthernet0/0/5]port link-type access
[sw2-GigabitEthernet0/0/5]port default vlan 12
[sw2-GigabitEthernet0/0/5]q
[sw2]interface Vlanif 12
[sw2-Vlanif12]ip address 10.0.12.1 30
[sw2-ospf-1-area-0.0.0.0]network 10.0.2.2 0.0.0.0
[sw2-ospf-1-area-0.0.0.0]network 10.0.3.2 0.0.0.0
[sw2-ospf-1-area-0.0.0.0]network 10.0.20.2 0.0.0.0
[sw2-ospf-1-area-0.0.0.0]network 10.0.30.2 0.0.0.0
[sw2-ospf-1-area-0.0.0.0]network 10.0.13.2 0.0.0.0

[sw2-ospf-1-area-0.0.0.0]network 10.0.12.1 0.0.0.0

[sw2-ospf-1]silent-interface Vlanif 2
[sw2-ospf-1]silent-interface Vlanif 3
[sw2-ospf-1]silent-interface Vlanif 20
[sw2-ospf-1]silent-interface Vlanif 30
[sw2]vlan 13
[sw2]int Eth-Trunk 0
[sw2-Eth-Trunk0]port trunk allow-pass vlan 13
[sw2-Vlanif13]ip address 10.0.13.2 30

ar1配置：

[AR1]int g0/0/1
[AR1-GigabitEthernet0/0/1]ip address 10.0.11.2 30
[AR1-GigabitEthernet0/0/1]int g0/0/2
[AR1-GigabitEthernet0/0/2]ip address 10.0.12.2 30
[AR1]ospf
[AR1-ospf-1]area 0
[AR1-ospf-1-area-0.0.0.0]network 10.0.11.2 0.0.0.0
[AR1-ospf-1-area-0.0.0.0]network 10.0.12.2 0.0.0.0

[AR1]int g0/0/0
[AR1-GigabitEthernet0/0/0]ip address 202.1.1.1 30

[AR1]ip route-static 0.0.0.0 0 202.1.1.2
[AR1]ospf 1
[AR1-ospf-1]default-route-advertise

[AR1]acl 2000
[AR1-acl-basic-2000]ru
[AR1-acl-basic-2000]rule p
[AR1-acl-basic-2000]rule permit s
[AR1-acl-basic-2000]rule permit source 10.0.0.0 0.0.255.255
[AR1-acl-basic-2000]q
[AR1]int
[AR1]interface g0/0/0
[AR1-GigabitEthernet0/0/0]n
[AR1-GigabitEthernet0/0/0]nat ou
[AR1-GigabitEthernet0/0/0]nat outbound 2000

isp配置：
[ISP]int g0/0/0
[ISP-GigabitEthernet0/0/0]ip address 202.1.1.2 30
[ISP-GigabitEthernet0/0/0]q
[ISP]interface LoopBack 0
[ISP-LoopBack0]ip address 100.100.100.100 32

8.验证：