HCIP综合实验

1. 划分VLAN 

[sw1]vlan batch 2 3
[sw2]vlan batch 2 3
[sw3]vlan batch 2 3
[sw4]vlan batch 2 3

2.分别在SW1和SW2配置Eth - trunk

[sw1]interface Eth-Trunk 1
[sw1-Eth-Trunk1]trunkport GigabitEthernet 0/0/1
[sw1-Eth-Trunk1]trunkport GigabitEthernet 0/0/2

[sw2]interface Eth-Trunk 1	
[sw2-Eth-Trunk1]trunkport GigabitEthernet 0/0/1
[sw2-Eth-Trunk1]trunkport GigabitEthernet 0/0/2

再通过display eth-trunk 1 命令查看是否创建成功

3.划分接口

[sw3-GigabitEthernet0/0/1]port link-type access 
[sw3-GigabitEthernet0/0/1]port default vlan 2
[sw3-GigabitEthernet0/0/2]port link-type access
[sw3-GigabitEthernet0/0/2]port default vlan 3

[sw4-GigabitEthernet0/0/1]port link-type access
[sw4-GigabitEthernet0/0/1]port default vlan 2
[sw4-GigabitEthernet0/0/2]port link-type access 	
[sw4-GigabitEthernet0/0/2]port default  vlan 3

[sw1-GigabitEthernet0/0/5]port link-type trunk 
[sw1-GigabitEthernet0/0/5]port trunk allow-pass vlan 2 3

[sw2-GigabitEthernet0/0/5]port link-type trunk 	
[sw2-port-group-trunk]port trunk allow-pass vlan 2 3

[sw1]int g 0/0/3
[sw1-GigabitEthernet0/0/3]port link-type trunk
[sw1-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 3

[sw1]int g 0/0/4
[sw1-GigabitEthernet0/0/4]port link-type trunk
[sw1-GigabitEthernet0/0/4]port trunk allow-pass vlan 2 3

[sw3-GigabitEthernet0/0/3]port link-type trunk
[sw3-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 3

[sw2]interface GigabitEthernet 0/0/3
[sw2-GigabitEthernet0/0/3]port link-type trunk
[sw2-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 3

[sw4]int g 0/0/4
[sw4-GigabitEthernet0/0/4]port link-type trunk
[sw4-GigabitEthernet0/0/4]port trunk allow-pass vlan 2 3

 4.MSTP 配置

[sw1]stp enable 	
[sw1]stp mode mstp 
[sw1]stp region-configuration 
[sw1-mst-region]region-name aa	
[sw1-mst-region]revision-level  1	
[sw1-mst-region]instance 1 vlan 2
[sw1-mst-region]instance 2 vlan 3	
[sw1-mst-region]active region-configuration 

[sw2]stp enable 
[sw2]stp mode mstp 
[sw2]stp region-configuration 	
[sw2-mst-region]region-name aa	
[sw2-mst-region]revision-level 1	
[sw2-mst-region]instance 1 vlan 2
[sw2-mst-region]instance 2 vlan 3	
[sw2-mst-region]active region-configuration 

[sw1]stp instance 1 root primary 	
[sw1]stp instance 2 root secondary 

[sw2]stp instance 1 root secondary 	
[sw2]stp instance 2 root primary

5.SVI配置

[sw1]interface Vlanif 2	
[sw1-Vlanif2]ip address 172.16.2.1 24	
[sw1]interface Vlanif 3
[sw1-Vlanif3]ip address 172.16.3.1 24

[sw2]interface Vlanif 2	
[sw2-Vlanif2]ip address 172.16.2.2 24	
[sw2]interface Vlanif 3	
[sw2-Vlanif3]ip address 172.16.3.2 24

6.VRRP配置

[sw1]interface Vlanif2	
[sw1-Vlanif2]vrrp vrid 2 virtual-ip 172.16.2.254 	
[sw1-Vlanif2]vrrp vrid 2 priority 110	
[sw1]interface Vlanif 3
[sw1-Vlanif3]vrrp vrid 3 virtual-ip 172.16.3.254	
[sw1-Vlanif3]vrrp vrid 3 priority 100

[sw2]interface Vlanif 2
[sw2-Vlanif2]vrrp vrid 2 virtual-ip 172.16.2.254	
[sw2-Vlanif2]vrrp vrid 2 priority 100
[sw2-Vlanif2]interface Vlanif 3
[sw2-Vlanif3]vrrp vrid 3 virtual-ip 172.16.3.254
[sw2-Vlanif3]vrrp vrid 3 priority 110

7.DHCP配置

[sw1]dhcp enable
[sw1]interface Vlanif 2
[sw1-Vlanif2]dhcp select interface
[sw1-Vlanif2]dhcp server excluded-ip-address 172.16.2.11 172.16.2.20
[sw1]interface Vlanif 3
[sw1-Vlanif3]dhcp select interface
[sw1-Vlanif3]dhcp server excluded-ip-address 172.16.3.11 172.16.3.20

[sw2]dhcp enable
[sw2]interface Vlanif 2
[sw2-Vlanif2]dhcp select interface
[sw2-Vlanif2]dhcp server excluded-ip-address 172.16.2.11 172.16.2.20
[sw2]interface Vlanif 3
[sw2-Vlanif3]dhcp select interface
[sw2-Vlanif3]dhcp server excluded-ip-address 172.16.3.11 172.16.3.20

8.路由器r1接口IP配置

[r1]interface GigabitEthernet 0/0/0
[r1-GigabitEthernet0/0/0]ip address 172.16.1.1 30 
[r1]interface GigabitEthernet 0/0/1
[r1-GigabitEthernet0/0/1]ip address 172.16.1.5 30
[r1]interface GigabitEthernet 0/0/2
[r1-GigabitEthernet0/0/2]ip address 172.16.1.9 30

9.路由配置

[r1]ip route-static 0.0.0.0 0.0.0.0 172.16.1.2 

 10.NAT配置

[r1]acl number 2000
[r1-acl-basic-2000]rule 5 permit source 172.16.0.0 0.0.255.255
[r1]interface GigabitEthernet 0/0/0
[r1-GigabitEthernet0/0/0]nat outbound 2000

11.ISP路由器接口配置

[ISP]interface GigabitEthernet 0/0/0
[ISP-GigabitEthernet0/0/0] ip address 172.16.1.2 30 
[ISP]interface LoopBack 0
[ISP-LoopBack0] ip address 192.168.1.1 32

验证：