2021-07-25

于 2021-07-25 16:17:06 发布
阅读量107 收藏 1
点赞数
版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
本文链接：https://blog.youkuaiyun.com/m0_52438027/article/details/119083184
版权

HCIP三层架构

在这里插入图片描述
在这里插入图片描述
创建通道接口
lsw1

[LSW1]interface Eth-Trunk 0
[LSW1-Eth-Trunk0]int g0/0/23
[LSW1-GigabitEthernet0/0/23]e	
[LSW1-GigabitEthernet0/0/23]eth-trunk 0
Info: This operation may take a few seconds. Please wait for a moment...done.
[LSW1-GigabitEthernet0/0/23]int g0/0/24
[LSW1-GigabitEthernet0/0/24]eth-trunk 0

lsw2

[LSW2]interface Eth-Trunk 0
[LSW2-Eth-Trunk0]int g0/0/23
[LSW2-GigabitEthernet0/0/23]e	
[LSW2-GigabitEthernet0/0/23]eth-trunk 0
Info: This operation may take a few seconds. Please wait for a moment...done.
[LSW2-GigabitEthernet0/0/23]int g0/0/24
[LSW2-GigabitEthernet0/0/24]e	
[LSW2-GigabitEthernet0/0/24]eth-trunk 0

创建trunk干道
lsw1

[LSW1]port-group  group-member GigabitEthernet 0/0/2 to GigabitEthernet 0/0/3 Eth-Trunk 0	//将接口合并为组，统一操作，更快捷
[LSW1-port-group]po	
[LSW1-port-group]port link-t	
[LSW1-port-group]port link-type t	
[LSW1-port-group]port link-type trunk //自动添加接口类型到该组下的接口
[LSW1-GigabitEthernet0/0/2]port link-type trunk 
[LSW1-GigabitEthernet0/0/3]port link-type trunk 
[LSW1-Eth-Trunk0]port link-type trunk 
[LSW1-port-group]por	
[LSW1-port-group]port t	
[LSW1-port-group]port trunk al	
[LSW1-port-group]port trunk allow-pass v	
[LSW1-port-group]port trunk allow-pass vlan 2 
[LSW1-GigabitEthernet0/0/2]port trunk allow-pass vlan 2 
[LSW1-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 
[LSW1-Eth-Trunk0]port trunk allow-pass vlan 2

lsw2

[LSW2]port-group group-member GigabitEthernet 0/0/2 to GigabitEthernet 0/0/3 Eth-Trunk 0
[LSW2-port-group]port link-t	
[LSW2-port-group]port link-type t	
[LSW2-port-group]port link-type trunk 
[LSW2-GigabitEthernet0/0/2]port link-type trunk 
[LSW2-GigabitEthernet0/0/3]port link-type trunk 
[LSW2-Eth-Trunk0]port link-type trunk 
[LSW2-port-group]port tran	
[LSW2-port-group]port trun	
[LSW2-port-group]port trunk al	
[LSW2-port-group]port trunk allow-pass v	
[LSW2-port-group]port trunk allow-pass vlan 2 
[LSW2-GigabitEthernet0/0/2]port trunk allow-pass vlan 2 
[LSW2-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 
[LSW2-Eth-Trunk0]port trunk allow-pass vlan 2

lsw3

[LSW3]port-group group-member GigabitEthernet 0/0/1 to GigabitEthernet 0/0/2
[LSW3-port-group]port link-t	
[LSW3-port-group]port link-type t	
[LSW3-port-group]port link-type trunk 
[LSW3-GigabitEthernet0/0/1]port link-type trunk 
[LSW3-GigabitEthernet0/0/2]port link-type trunk 
[LSW3-port-group]port t	
[LSW3-port-group]port trunk al	
[LSW3-port-group]port trunk allow-pass v	
[LSW3-port-group]port trunk allow-pass vlan 2
[LSW3-GigabitEthernet0/0/1]port trunk allow-pass vlan 2
[LSW3-GigabitEthernet0/0/2]port trunk allow-pass vlan 2

lsw4

[LSW4]port-group group-member GigabitEthernet 0/0/1 to GigabitEthernet 0/0/2	
[LSW4-port-group]port l	
[LSW4-port-group]port link-t	
[LSW4-port-group]port link-type t	
[LSW4-port-group]port link-type trunk 
[LSW4-GigabitEthernet0/0/1]port link-type trunk 
[LSW4-GigabitEthernet0/0/2]port link-type trunk 
[LSW4-port-group]por	
[LSW4-port-group]port t	
[LSW4-port-group]port trunk al		
[LSW4-port-group]port trunk allow-pass v	
[LSW4-port-group]port trunk allow-pass vlan 2
[LSW4-GigabitEthernet0/0/1]port trunk allow-pass vlan 2
[LSW4-GigabitEthernet0/0/2]port trunk allow-pass vlan 2

VLAN的创建及接口划入
lsw1

[LSW1]vlan 2

lsw2

[LSW2]vlan 2

lsw3

[LSW3]vlan 2


[LSW3]int e0/0/2 //连接PC2接口
[LSW3-Ethernet0/0/2]por	
[LSW3-Ethernet0/0/2]port link	
[LSW3-Ethernet0/0/2]port link-t	
[LSW3-Ethernet0/0/2]port link-type ac	
[LSW3-Ethernet0/0/2]port link-type access 
[LSW3-Ethernet0/0/2]por	
[LSW3-Ethernet0/0/2]port de	
[LSW3-Ethernet0/0/2]port default vlan 2

lsw4

[LSW4]vlan 2


[LSW4]int e0/0/2	//连接PC4接口
[LSW4-Ethernet0/0/2]port lin	
[LSW4-Ethernet0/0/2]port link-t	
[LSW4-Ethernet0/0/2]port link-type a	
[LSW4-Ethernet0/0/2]port link-type access 
[LSW4-Ethernet0/0/2]port de	
[LSW4-Ethernet0/0/2]port default v	
[LSW4-Ethernet0/0/2]port default vlan 2

配置STP
lsw1

[LSW1]stp mode mstp 
[LSW1]stp en	
[LSW1]stp enable //开启stp
[LSW1]stp re	
[LSW1]stp region-configuration 
[LSW1-mst-region]re	
[LSW1-mst-region]region-name a	//创建域名
[LSW1-mst-region]in	
[LSW1-mst-region]instance 1 vl	
[LSW1-mst-region]instance 1 vlan 1
[LSW1-mst-region]instance 2 vlan 2
[LSW1-mst-region]ac	
[LSW1-mst-region]active re	
[LSW1-mst-region]active region-configuration //激活配置
Info: This operation may take a few seconds. Please wait for a moment...done.	
[LSW1-mst-region]display stp b	
[LSW1-mst-region]display stp brief //查看生成树列表
 MSTID  Port                        Role  STP State     Protection
   0    GigabitEthernet0/0/1        DESI  DISCARDING      NONE
   0    GigabitEthernet0/0/2        DESI  DISCARDING      NONE
   0    GigabitEthernet0/0/3        DESI  DISCARDING      NONE
   0    Eth-Trunk0                  ROOT  FORWARDING      NONE
   1    GigabitEthernet0/0/1        DESI  DISCARDING      NONE
   1    GigabitEthernet0/0/2        DESI  DISCARDING      NONE
   1    GigabitEthernet0/0/3        DESI  DISCARDING      NONE
   1    Eth-Trunk0                  MAST  FORWARDING      NONE
   2    GigabitEthernet0/0/2        DESI  DISCARDING      NONE
   2    GigabitEthernet0/0/3        DESI  DISCARDING      NONE
   2    Eth-Trunk0                  MAST  FORWARDING      NONE

LSW2、LSW3、LSW4做出与LSW1统一配置----命令同LSW1


stp mode mstp 
stp enable 
stp region-configuration 
region-name a		
instance 1 vlan 1
instance 2 vlan 2	
active region-configuration

组1、组2互备
lsw1

[LSW1]stp instance 1 root primary 	//成为组1的主根
[LSW1]stp instance 2 root secondary	//成为组2的备份

lsw2

[LSW2]stp instance 1 root primary 	//成为组1的主根
[LSW2]stp instance 2 root secondary	//成为组2的备份

在LSW1与LSW2上配置SVI
lsw1

[LSW1]interface vlan 1
[LSW1-Vlanif1]ip ad	
[LSW1-Vlanif1]ip address 172.16.1.1 25
[LSW1-Vlanif1]int vlan 2
[LSW1-Vlanif2]ip ad	
[LSW1-Vlanif2]ip address 172.16.1.129 25

lsw2

[LSW2]int vlan 1
[LSW2-Vlanif1]ip ad	
[LSW2-Vlanif1]ip address 172.16.1.2 25
[LSW2-Vlanif1]int vlan 2
[LSW2-Vlanif2]ip ad	
[LSW2-Vlanif2]ip address 172.16.1.130 25

VRRP启用
lsw1

[LSW1]int vlan 1
[LSW1-Vlanif1]vrrp vrid 1 vir	
[LSW1-Vlanif1]vrrp vrid 1 virtual-ip 172.16.1.126
[LSW1-Vlanif1]vrrp vrid 1 priority 130	//修改优先级
[LSW1-Vlanif1]vrrp vrid 1 track interface GigabitEthernet 0/0/1 reduced 30	//上行链路追踪
[LSW1-Vlanif1]int vlan 2
[LSW1-Vlanif2]vrrp vrid 1 virtual-ip 172.16.1.254	//充当备份

lsw2

[LSW2]int vlan 1
[LSW2-Vlanif1]vrrp vrid 1 virtual-ip 172.16.1.126
[LSW2-Vlanif1]int vlan 2
[LSW2-Vlanif2]vrrp vrid 1 virtual-ip 172.16.1.254
[LSW2-Vlanif2]vrrp vrid 1 priority 120
[LSW2-Vlanif2]vrrp vrid 1 track interface GigabitEthernet 0/0/1 reduced 30

启用DHCP
lsw1

[LSW1]dhcp enable 
[LSW1]ip pool v1
[LSW1-ip-pool-v1]network 172.16.1.0 mask 25
[LSW1-ip-pool-v1]gateway-list 172.16.1.126
[LSW1-ip-pool-v1]dns-list  144.144.144.144 8.8.8.8

[LSW1]ip pool v2
[LSW1-ip-pool-v2]network 172.16.1.128 mask 25
[LSW1-ip-pool-v2]gateway-list 172.16.1.254	
[LSW1-ip-pool-v2]dns-list 144.144.144.144 8.8.8.8

[LSW1]int vlan 1
[LSW1-Vlanif1]dhcp select global 
[LSW1-Vlanif1]int vlan2
[LSW1-Vlanif2]dhcp select global

lsw2和lsw1一致

配置骨干IP
lsw1

[LSW1]vlan 10 //创建Vlan10

[LSW1]interface g0/0/1
[LSW1-GigabitEthernet0/0/1]port link-type access 
[LSW1-GigabitEthernet0/0/1]port default vlan 10
[LSW1]int vlan 10
[LSW1-Vlanif10]ip address 172.16.0.1 30

lsw2

[LSW2-vlan10]int vlan 10
[LSW2-Vlanif10]ip ad	
[LSW2-Vlanif10]ip address 172.16.0.5 30
[LSW2-Vlanif10]int g0/0/1
[LSW2-GigabitEthernet0/0/1]p	
[LSW2-GigabitEthernet0/0/1]port lin	
[LSW2-GigabitEthernet0/0/1]port link-t	
[LSW2-GigabitEthernet0/0/1]port link-type a	
[LSW2-GigabitEthernet0/0/1]port link-type access 
[LSW2-GigabitEthernet0/0/1]p	
[LSW2-GigabitEthernet0/0/1]port de	
[LSW2-GigabitEthernet0/0/1]port default vlan 10

r1

[R1]int g0/0/0
[R1-GigabitEthernet0/0/0]ip address 172.16.0.2 30

[R1-GigabitEthernet0/0/0]int g0/0/2
[R1-GigabitEthernet0/0/2]ip address 172.16.0.6 30

[R1-GigabitEthernet0/0/2]int g0/0/1
[R1-GigabitEthernet0/0/1]ip address 12.1.1.1 24
//
[R1]display ip routing-table 
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Routing Tables: Public
         Destinations : 13       Routes : 13       

Destination/Mask    Proto   Pre  Cost      Flags NextHop         Interface

       12.1.1.0/24  Direct  0    0           D   12.1.1.1        GigabitEthernet0/0/1
       12.1.1.1/32  Direct  0    0           D   127.0.0.1       GigabitEthernet0/0/1
     12.1.1.255/32  Direct  0    0           D   127.0.0.1       GigabitEthernet0/0/1
      127.0.0.0/8   Direct  0    0           D   127.0.0.1       InLoopBack0
      127.0.0.1/32  Direct  0    0           D   127.0.0.1       InLoopBack0
127.255.255.255/32  Direct  0    0           D   127.0.0.1       InLoopBack0
     172.16.0.0/30  Direct  0    0           D   172.16.0.2      GigabitEthernet0/0/0
     172.16.0.2/32  Direct  0    0           D   127.0.0.1       GigabitEthernet0/0/0
     172.16.0.3/32  Direct  0    0           D   127.0.0.1       GigabitEthernet0/0/0
     172.16.0.4/30  Direct  0    0           D   172.16.0.6      GigabitEthernet0/0/2
     172.16.0.6/32  Direct  0    0           D   127.0.0.1       GigabitEthernet0/0/2
     172.16.0.7/32  Direct  0    0           D   127.0.0.1       GigabitEthernet0/0/2
255.255.255.255/32  Direct  0    0           D   127.0.0.1       InLoopBack0

r2

[R2]int lo0
[R2-LoopBack0]ip address 1.1.1.1 24

[R2-LoopBack0]int g0/0/0
[R2-GigabitEthernet0/0/0]ip address 12.1.1.2 24

OPSF宣告
r1

[R1]ospf 1 router-id 1.1.1.1
[R1-ospf-1]area 0
[R1-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.0.255

lsw1

[LSW1]ospf 1 router-id 1.1.1.2
[LSW1-ospf-1]area 0
[LSW1-ospf-1-area-0.0.0.0]network 172.16.0.1 0.0.0.0
[LSW1-ospf-1-area-0.0.0.0]q
[LSW1-ospf-1]area 1
[LSW1-ospf-1-area-0.0.0.1]network 172.16.1.1 0.0.0.0
[LSW1-ospf-1-area-0.0.0.1]network 172.16.1.129 0.0.0.0

lsw2

[LSW2]ospf 1 router-id 2.2.2.2
[LSW2-ospf-1]area 0
[LSW2-ospf-1-area-0.0.0.0]network 172.16.0.5 0.0.0.0
[LSW2-ospf-1-area-0.0.0.0]q
[LSW2-ospf-1]area 1
[LSW2-ospf-1-area-0.0.0.1]network 172.16.1.2 0.0.0.0


[R1]display ip routing-table protocol ospf 
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Public routing table : OSPF
         Destinations : 2        Routes : 4        

OSPF routing table status : <Active>
         Destinations : 2        Routes : 4

Destination/Mask    Proto   Pre  Cost      Flags NextHop         Interface

     172.16.1.0/25  OSPF    10   2           D   172.16.0.1      GigabitEthernet0/0/0
                    OSPF    10   2           D   172.16.0.5      GigabitEthernet0/0/2
   172.16.1.128/25  OSPF    10   2           D   172.16.0.1      GigabitEthernet0/0/0
                    OSPF    10   2           D   172.16.0.5      GigabitEthernet0/0/2

OSPF routing table status : <Inactive>
         Destinations : 0        Routes : 0

//可见R1已学到下方两个网段


//汇总路由

[LSW1-ospf-1-area-0.0.0.1]abr-summary 172.16.1.0 255.255.255.0

[LSW2-ospf-1-area-0.0.0.1]abr-summary 172.16.1.0 255.255.255.0

配置LSW1、LSW2沉默接口
lsw1

[LSW1]ospf 1
[LSW1-ospf-1]silent-interface all	//沉默所有接口
[LSW1-ospf-1]undo silent-interface GigabitEthernet 0/0/1	//打开需要的
[LSW1-ospf-1]undo silent-interface Eth-Trunk 0	
[LSW1-ospf-1]undo silent-interface Vlanif 1
[LSW1-ospf-1]undo silent-interface Vlanif 10

lsw2


[LSW2-ospf-1]silent-interface ALL
[LSW2-ospf-1]undo silent-interface GigabitEthernet 0/0/1
[LSW2-ospf-1]undo silent-interface Eth-Trunk 0
[LSW2-ospf-1]undo silent-interface Vlanif 1
[LSW2-ospf-1]undo silent-interface Vlanif 10

缺省路由及NAT配置
r1

[R1]ip route-static 0.0.0.0 0.0.0.0 12.1.1.2
[R1-ospf-1]default-route-advertise
[R1-ospf-1]acl 2000
[R1-acl-basic-2000]rule permit source 172.16.0.0  0.0.255.255
[R1-acl-basic-2000]int g0/0/1
[R1-GigabitEthernet0/0/1]nat outbound 2000
m0_52438027
关注
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值