三层架构实验

实验要求

实验步骤

配置交换机

[sw1]int Eth-Trunk 0

[sw1-Eth-Trunk0]q

[sw1]int g0/0/23

[sw1-GigabitEthernet0/0/23]eth-trunk 0

[sw1-GigabitEthernet0/0/23]int g0/0/24

[sw1-GigabitEthernet0/0/24]eth-trunk 0

[sw2]int Eth-Trunk 0

[sw2-Eth-Trunk0]q

[sw2]int g0/0/23

[sw2-GigabitEthernet0/0/23]eth-trunk 0

[sw2-GigabitEthernet0/0/23]int g0/0/24

[sw2-GigabitEthernet0/0/24]eth-trunk 0

3.做trunk干道

[sw1]port-group group-member GigabitEthernet 0/0/2 to GigabitEthernet 0/0/3 Eth-Trunk 0

[sw1-port-group]port link-type trunk

[sw1-port-group]port trunk allow-pass vlan 1 to 2

[sw2]port-group group-member GigabitEthernet 0/0/2 to GigabitEthernet 0/0/3 Eth-Trunk 0

[sw2-port-group]port link-type trunk

[sw2-port-group]port trunk allow-pass vlan 1 to 2

[sw3]port-group group-member GigabitEthernet 0/0/1 to GigabitEthernet 0/0/2

[sw3-port-group]port link-type trunk

[sw3-port-group]port trunk allow-pass vlan

[sw4]port-group group-member GigabitEthernet 0/0/1 to GigabitEthernet 0/0/2

[sw4-port-group]port link-type trunk

1. vlan划分配置

创建

[sw1]vlan 2

[sw1-vlan2]q

[sw2]vlan 2

[sw3]vlan 2

[sw4]vlan 2

[sw4-port-group]port trunk allow-pass vlan 2

接口划入

[sw3]int Eth0/0/2

[sw3-Ethernet0/0/2]port link-type access

[sw3-Ethernet0/0/2]port default vlan 2

[sw4]int e0/0/2

[sw4-Ethernet0/0/2]p l a

[sw4-Ethernet0/0/2]p d vlan 2

5.STP

（1）配置stp

[sw1]stp mode mstp

[sw1]stp enable

[sw1]stp region-configuration

[sw1-mst-region]region-name a

[sw1-mst-region]instance 1 vlan 1

[sw1-mst-region]instance 2 vlan 2

[sw1-mst-region]active region-configuration

[sw2]stp mode mstp

[sw2]stp enable

[sw2]stp region-configuration

[sw2-mst-region]region-name a

[sw2-mst-region]instance 1 vlan 1

[sw2-mst-region]instance 2 vlan 2

[sw2-mst-region]active region-configuration

[sw3]stp mode mstp

[sw3]stp enable

[sw1]stp region-configuration

[sw3-mst-region]region-name a

[sw3-mst-region]instance 1 vlan 1

[sw3-mst-region]instance 2 vlan 2

[sw3-mst-region]active region-configuration

[sw4]stp mode mstp

[sw4]stp enable

[sw4]stp region-configuration

[sw4-mst-region]region-name a

[sw4-mst-region]instance 1 vlan 1

[sw4-mst-region]instance 2 vlan 2

[sw4-mst-region]active region-configuration

6.sw1和sw2之间互相备份：

[sw1]stp instance 1 root primary

[sw1]stp instance 2 root secondary

[sw2]stp instance 1 root s

[sw2]stp instance 2 root primary

[sw3]port-group group-member Ethernet 0/0/1 to Ethernet 0/0/2

[sw3-port-group]stp edged-port enable

[sw4]port-group group-member Ethernet 0/0/1 to Ethernet 0/0/2

[sw4-port-group]stp edged-port enable

7.启动SVI

[sw1]interface vlan 1

[sw1-Vlanif1]ip ad 172.16.1.1 25

[sw1]interface vlan 2

[sw1-Vlanif2]ip ad 172.16.1.129 25

[sw2]interface vlan 1

[sw2-Vlanif1]ip ad 172.16.1.2 25

[sw2]interface vlan 2

[sw2-Vlanif2]ip ad 172.16.1.130 25

8.虚拟接口当网关需要在虚拟接口做

[sw1]interface vlan 1

[sw1-Vlanif1]vrrp vrid 1 virtual-ip 172.16.1.126

[sw1-Vlanif1]vrrp vrid 1 priority 120

[sw1-Vlanif1]vrrp vrid 1 track interface GigabitEthernet 0/0/1 reduced 30

[sw1]interface vlan 2

[sw1-Vlanif2]vrrp vrid 1 virtual-ip 172.16.1.254

[sw1-Vlanif2]

[sw2]interface vlan 1

[sw2-Vlanif1]vrrp vrid 1 virtual-ip 172.16.1.126

[sw2]interface vlan 2

[sw2-Vlanif2]vrrp vrid 1 vir

[sw2-Vlanif2]vrrp vrid 1 virtual-ip 172.16.1.254

[sw2-Vlanif2]vrrp vrid 1 priority 120

[sw2-Vlanif2]vrrp vrid 1 track interface GigabitEthernet 0/0/1 reduced 30

9.启用DHCP

[sw1]dhcp enable

[sw1]ip pool v1

[sw1-ip-pool-v1]network 172.16.1.0 mask 25

[sw1-ip-pool-v1]gateway-list 172.16.1.126

[sw1-ip-pool-v1]dns-list 114.114.114.114 8.8.8.8

[sw1]ip pool v2

[sw1-ip-pool-v1]network 172.16.1.128 mask 25

[sw1-ip-pool-v1]gateway-list 172.16.1.254

[sw1-ip-pool-v1]dns-list 114.114.114.114 8.8.8.8

[sw1]int vlan 1

[sw1-Vlanif1]dhcp select global

[sw1-Vlanif1]int vlan 2

[sw1-Vlanif2]dhcp select global

[sw2]dhcp enable

[sw2]ip pool v1

[sw2-ip-pool-v1]network 172.16.1.0 mask 25

[sw2-ip-pool-v1]gateway-list 172.16.1.126

[sw2-ip-pool-v1]dns-list 114.114.114.114 8.8.8.8

[sw2]ip pool v2

[sw2-ip-pool-v1]network 172.16.1.128 mask 25

[sw2-ip-pool-v1]gateway-list 172.16.1.254

[sw2-ip-pool-v1]dns-list 114.114.114.114 8.8.8.8

[sw2]int vlan 1

[sw2-Vlanif1]dhcp select global

[sw2-Vlanif1]int vlan 2

[sw2-Vlanif2]dhcp select global

10.配置路由

sw1]vlan 100

[sw1-vlan100]q

[sw1]int g0/0/1

[sw1-GigabitEthernet0/0/1]po l a （port link-type access）

[sw1-GigabitEthernet0/0/1]p d vlan 100

[sw1-GigabitEthernet0/0/1]int vlan 100

[sw1-Vlanif100]ip ad 172.16.0.1 30

[sw2]vlan 100

[sw2-vlan100]int vlan 100

[sw2-Vlanif100]ip ad 172.16.0.5 30

[sw2-Vlanif100]int g0/0/1

[sw2-GigabitEthernet0/0/1]p l a

[sw2-GigabitEthernet0/0/1]p d vlan 100

[r2]int g0/0/0

[r2-GigabitEthernet0/0/0]ip ad 172.16.0.2 30

[r2-GigabitEthernet0/0/0]int g0/0/2

[r2-GigabitEthernet0/0/2]ip ad 172.16.0.6 30

[r2-GigabitEthernet0/0/2]int g0/0/1

[r2-GigabitEthernet0/0/1]ip ad 12.1.1.1 24

[r1]int lo0

[r1-LoopBack0]ip ad 1.1.1.1 24

[r1-LoopBack0]int g0/0/0

[r1-GigabitEthernet0/0/0]ip ad 12.1.1.2 24

11.ospf

[r2]ospf 1 router-id 1.1.1.1

[r2-ospf-1]area 0

[r2-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.0.255

[sw1]ospf 1 router-id 1.1.1.2

[sw1-ospf-1]area 0

[sw1-ospf-1-area-0.0.0.0]network 172.16.0.1 0.0.0.0

[sw1-ospf-1-area-0.0.0.0]q

[sw1-ospf-1]area 1

[sw1-ospf-1-area-0.0.0.1]network 172.16.1.1 0.0.0.0

[sw1-ospf-1-area-0.0.0.1]network 172.16.1.129 0.0.0.0

[sw2]ospf 1 router-id 2.2.2.2

[sw2-ospf-1]area 0

[sw2-ospf-1-area-0.0.0.0]network 172.16.0.5 0.0.0.0

[sw2-ospf-1-area-0.0.0.0]q

[sw2-ospf-1]area 1

[sw2-ospf-1-area-0.0.0.1]network 172.16.1.2 0.0.0.0

[sw2-ospf-1-area-0.0.0.1]network 172.16.1.130 0.0.0.0

汇总：

[sw1]ospf 1

[sw1-ospf-1]area 1

[sw1-ospf-1-area-0.0.0.1]abr-summary 172.16.1.0 255.255.255.0

[sw2]ospf 1

[sw2-ospf-1]area 1

[sw2-ospf-1-area-0.0.0.1]abr-summary 172.16.1.0 255.255.255.0

[sw1]ospf 1

[sw1-ospf-1]silent-interface all

[sw1-ospf-1]undo silent-interface GigabitEthernet 0/0/1

[sw1-ospf-1]undo silent-interface Eth-Trunk 0

[sw1-ospf-1]undo silent-interface vlanif 1

[sw1-ospf-1]undo silent-interface vlanif 100

[sw2]ospf 1

[sw2-ospf-1]silent-interface all

[sw2-ospf-1]undo silent-interface GigabitEthernet 0/0/1

[sw2-ospf-1]undo silent-interface Eth-Trunk 0

[sw2-ospf-1]undo silent-interface vlanif 1

[sw2-ospf-1]undo silent-interface vlanif 100

12.nat

[r2]acl 2000

[r2-acl-basic-2000]rule permit source 172.16.0.0 0.0.255.255

[r2-acl-basic-2000]int g0/0/1

[r2-GigabitEthernet0/0/1]nat outbound 2000

实验结果