南宁做网站设计方案,企业网站建设cms系统,建个人网上银行登录入口,营销技巧五步推销法文章目录 综合实验1实验需求总部特性 分支8分支9 配置一、 基本配置#xff08;IP二层VLAN链路聚合#xff09;ACC_SWSW-S1SW-S2SW-Ser1SW-CoreSW8SW9DHCPISPGW 二、 单臂路由GW 三、 vlanifSW8SW9 四、 OSPFSW8SW9GW 五、 DHCPDHCPGW 六、 NAT缺省路由GW 七、 HTTPGW 综合实… 文章目录 综合实验1实验需求总部特性 分支8分支9 配置一、 基本配置IP二层VLAN链路聚合ACC_SWSW-S1SW-S2SW-Ser1SW-CoreSW8SW9DHCPISPGW 二、 单臂路由GW 三、 vlanifSW8SW9 四、 OSPFSW8SW9GW 五、 DHCPDHCPGW 六、 NAT缺省路由GW 七、 HTTPGW 综合实验1 实验需求
总部
1.除了SW8和SW9是三层交换机其他交换机均为二层交换机需要做链路聚合的线路图中已标出。所有交换机的接口模式按照图中标出的位置。 思考问题这个图中有环路么 2.GW为总部的出口设备使用单臂路由技术Vlan1020100的网关都在GW上。 3.总部、分支8、分支9之间互有专线连接。 目标GW、SW8、SW9之间建立ospf互相宣告互为邻居进程号200区域0达到企业内网全网互通。 4.在SW8和SW9建立的邻居中SW8的互联接口要永远为DR。 5.要求DHCP服务器在路由追踪PC8时路径中必须包含SW9。
特性
6.Vlan10,20的PC均由DHCP服务器提供IP地址DHCP服务器的地址池配置如下 Vlan10192.168.10.0/24 GW192.168.10.254 DNS8.8.8.8 租期8天。 Vlan20192.168.20.0/24 GW192.168.20.254 DNS8.8.8.8 租期8天。 PC2是老板的PC老板要求通过DHCP给他固定IP192.168.20.100/24其他与地址池一致。 由于员工区存在打印机需要排除掉192.168.10.240-254 192.168.20.240-254。 7.GW路由器使用NAT技术配置Easy-IP技术让内部设备可以上网 在Internet路由器上使用环回接口模拟公网地址让所有PC可以ping通100.1.1.1。 8.服务器区有一台HTTP服务器将其80端口发布到Internet网络在Internet路由器上使用telnet 70.1.1.1 80 来验证是否成功。
分支8
PC8配置静态IP使PC8可以通过总部GW上网ping 100.1.1.1。
分支9
PC9配置静态IP使PC9可以通过总部GW上网ping 100.1.1.1。
配置
一、 基本配置IP二层VLAN链路聚合
ACC_SW
[ACC_SW]vlan 200 [ACC_SW-Vlanif200]int g0/0/1 [ACC_SW-GigabitEthernet0/0/1]p l a [ACC_SW-GigabitEthernet0/0/1]p d v 200 [ACC_SW-GigabitEthernet0/0/1]int Eth-Trunk 1 [ACC_SW-Eth-Trunk1]mode lacp-static [ACC_SW-Eth-Trunk1]trunkport GigabitEthernet 0/0/2 to 0/0/3 [ACC_SW-Eth-Trunk1]p l t [ACC_SW-Eth-Trunk1]p t a v a
SW-S1
[SW-S1]vlan 10 [SW-S1]int g0/0/2 [SW-S1-GigabitEthernet0/0/2]p l t [SW-S1-GigabitEthernet0/0/2]p t a v a [SW-S1]int g0/0/1 [SW-S1-GigabitEthernet0/0/2]p l a [SW-S1-GigabitEthernet0/0/2]p d v 10
SW-S2
[SW-S2]vlan 20 [SW-S2]int g0/0/2 [SW-S2-GigabitEthernet0/0/2]p l t [SW-S2-GigabitEthernet0/0/2]p t a v a [SW-S2]int g0/0/1 [SW-S2-GigabitEthernet0/0/1]p l t [SW-S2-GigabitEthernet0/0/1]p t a v 20 [SW-S2-GigabitEthernet0/0/1]port trunk pvid vlan 20
SW-Ser1
[SW-Ser1]vlan 100 [SW-Ser1]int g0/0/1 [SW-Ser1-GigabitEthernet0/0/1]port hybrid pvid vlan 100 [SW-Ser1-GigabitEthernet0/0/1]port hybrid untagged vlan 100 [SW-Ser1-GigabitEthernet0/0/1]int g0/0/2 [SW-Ser1-GigabitEthernet0/0/2]port hybrid pvid vlan 100 [SW-Ser1-GigabitEthernet0/0/2]port hybrid untagged vlan 100 [SW-Ser1-GigabitEthernet0/0/2]int g0/0/3 [SW-Ser1-GigabitEthernet0/0/3]port hybrid tagged vlan 100
SW-Core
[SW-Core]vlan batch 10 20 100 200 201 202 [SW-Core]int g0/0/6 [SW-Core-GigabitEthernet0/0/6]p l t [SW-Core-GigabitEthernet0/0/6]p t a v a [SW-Core-GigabitEthernet0/0/6]int g0/0/7 [SW-Core-GigabitEthernet0/0/7]p l t [SW-Core-GigabitEthernet0/0/7]p t a v a [SW-Core-GigabitEthernet0/0/7]int g0/0/8 [SW-Core-GigabitEthernet0/0/8]port hybrid tagged vlan 100 [SW-Core-GigabitEthernet0/0/8]int g0/0/1 [SW-Core-GigabitEthernet0/0/1]p l a [SW-Core-GigabitEthernet0/0/1]p d v 201 [SW-Core-GigabitEthernet0/0/1]int g0/0/9 [SW-Core-GigabitEthernet0/0/9]p l a [SW-Core-GigabitEthernet0/0/9]p d v 202 [SW-Core]int Eth-Trunk 1 [SW-Core-Eth-Trunk1]mode lacp-static [SW-Core-Eth-Trunk1]trunkport GigabitEthernet 0/0/2 to 0/0/3 [SW-Core-Eth-Trunk1]p l t [SW-Core-Eth-Trunk1]p t a v a [SW-Core]int Eth-Trunk 2 [SW-Core-Eth-Trunk2]mode lacp-static [SW-Core-Eth-Trunk2]trunkport GigabitEthernet 0/0/4 to 0/0/5 [SW-Core-Eth-Trunk2]p l t [SW-Core-Eth-Trunk2]p t a v a [SW-Core]undo stp enable
SW8
[SW8]vlan batch 80 201 203 [SW8]int g0/0/1 [SW8-GigabitEthernet0/0/1]p l a [SW8-GigabitEthernet0/0/1]p d v 201 [SW8-GigabitEthernet0/0/1]int g0/0/2 [SW8-GigabitEthernet0/0/2]p l a [SW8-GigabitEthernet0/0/2]p d v 80 [SW8-GigabitEthernet0/0/2]int g0/0/3 [SW8-GigabitEthernet0/0/3]p l a [SW8-GigabitEthernet0/0/3]p d v 203
SW9
[SW9]vlan batch 90 202 203 [SW9]int g0/0/1 [SW9-GigabitEthernet0/0/1]p l a [SW9-GigabitEthernet0/0/1]p d v 202 [SW9-GigabitEthernet0/0/1]int g0/0/3 [SW9-GigabitEthernet0/0/3]p l a [SW9-GigabitEthernet0/0/3]p d v 203 [SW9-GigabitEthernet0/0/3]int g0/0/2 [SW9-GigabitEthernet0/0/2]p l a [SW9-GigabitEthernet0/0/2]p d v 90
DHCP
[DHCP]vlan batch 10 20 80 90 100 200 201 202 203 [DHCP]int g0/0/0 [DHCP-GigabitEthernet0/0/0]ip add 192.168.100.100 24 [DHCP]ip route-static 0.0.0.0 0.0.0.0 192.168.100.254
ISP
[Internet]int LoopBack 0 [Internet-LoopBack0]ip add 100.1.1.1 32 [Internet-LoopBack0]int g0/0/0 [Internet-GigabitEthernet0/0/0]ip add 60.30.1.1 29
GW
[GW]vlan batch 10 20 100 200 201 202 [GW]int Eth-Trunk 2 [GW-Eth-Trunk2]undo portswitch [GW-Eth-Trunk2]trunkport GigabitEthernet 0/0/0 to 0/0/1 [GW-Eth-Trunk2]mode lacp-static [GW]int loopback 0 [GW-LoopBack0]ip add 1.1.1.1 32
二、 单臂路由
GW
[GW]int Eth-trunk 2.10 [GW-Eth-Trunk2.10]d t v 10 [GW-Eth-Trunk2.10]ip add 192.168.10.254 24 [GW-Eth-Trunk2.10]a b e [GW-Eth-Trunk2.10]int Eth-trunk 2.20 [GW-Eth-Trunk2.20]d t v 20 [GW-Eth-Trunk2.20]ip add 192.168.20.254 24 [GW-Eth-Trunk2.20]a b e [GW-Eth-Trunk2.20]int Eth-trunk 2.100 [GW-Eth-Trunk2.100]d t v 100 [GW-Eth-Trunk2.100]ip add 192.168.100.254 24 [GW-Eth-Trunk2.100]a b e [GW-Eth-Trunk2.100]int Eth-trunk 2.200 [GW-Eth-Trunk2.200]description toISP [GW-Eth-Trunk2.200]d t v 200 [GW-Eth-Trunk2.200]ip add 60.30.1.2 29 [GW-Eth-Trunk2.200]a b e [GW-Eth-Trunk2.200]int Eth-trunk 2.201 [GW-Eth-Trunk2.201]description toSW8 [GW-Eth-Trunk2.201]d t v 201 [GW-Eth-Trunk2.201]ip add 192.168.201.1 24 [GW-Eth-Trunk2.201]a b e [GW-Eth-Trunk2.201]int Eth-trunk 2.202 [GW-Eth-Trunk2.202]d t v 202 [GW-Eth-Trunk2.202]ip add 192.168.202.1 24 [GW-Eth-Trunk2.202]a b e
三、 vlanif
SW8
[SW8]undo stp enable [SW8]int loopback 0 [SW8-LoopBack0]ip add 8.8.8.8 32 [SW8]int vlanif 201 [SW8-vlanif201]ip add 192.168.201.2 24 [SW8-vlanif201]int vlanif 80 [SW8-vlanif80]ip add 192.168.80.254 24
SW9
[SW9]undo stp enable [SW9]int loopback 0 [SW9-LoopBack0]ip add 9.9.9.9 32 [SW9]int vlanif 202 [SW9-vlanif202]ip add 192.168.202.2 24 [SW9-vlanif202]int vlanif 90 [SW9-vlanif90]ip add 192.168.90.254 24
四、 OSPF
SW8
[SW8]ospf 200 router-id 8.8.8.8 [SW8-ospf-200]area 0 [SW8-ospf-200-area-0.0.0.0]network 192.168.201.0 0.0.0.255 [SW8-ospf-200-area-0.0.0.0]network 192.168.203.0 0.0.0.255 [SW8-ospf-200-area-0.0.0.0]network 192.168.80.0 0.0.0.255 [SW8-ospf-200-area-0.0.0.0]network 8.8.8.8 0.0.0.0 [SW8]int vlanif 203 [SW8]ospf dr-priority 255 #永远为DR
SW9
[SW9]ospf 200 router-id 9.9.9.9 [SW9-ospf-200]area 0 [SW9-ospf-200-area-0.0.0.0]network 192.168.202.0 0.0.0.255 [SW9-ospf-200-area-0.0.0.0]network 192.168.203.0 0.0.0.255 [SW9-ospf-200-area-0.0.0.0]network 192.168.90.0 0.0.0.255 [SW9-ospf-200-area-0.0.0.0]network 9.9.9.9 0.0.0.0
GW
[GW]ospf 200 router-id 1.1.1.1 [GW-ospf-200]area 0 [GW-ospf-200-area-0.0.0.0]network 192.168.201.0 0.0.0.255 [GW-ospf-200-area-0.0.0.0]network 192.168.202.0 0.0.0.255 [GW-ospf-200-area-0.0.0.0]network 1.1.1.1 0.0.0.0 [GW-ospf-200-area-0.0.0.0]network 192.168.10.0 0.0.0.255 [GW-ospf-200-area-0.0.0.0]network 192.168.20.0 0.0.0.255 [GW-ospf-200-area-0.0.0.0]network 192.168.100.0 0.0.0.255 [GW]int Eth-trunk 2.201 [GW-Eth-Trunk2.201]ospf cost 3 #更改cost值用来改变路径
五、 DHCP
DHCP
[DHCP]dhcp enable [DHCP]ip pool VLAN10 [DHCP-ip-pool-VLAN10]network 192.168.10.0 mask 24 [DHCP-ip-pool-VLAN10]gateway-list 192.168.10.254 [DHCP-ip-pool-VLAN10]dns-list 8.8.8.8 [DHCP-ip-pool-VLAN10]lease day 8 [DHCP-ip-pool-VLAN10]excluded-ip-address 192.168.10.240 192.168.10.253 [DHCP-ip-pool-VLAN10]ip pool VLAN20 [DHCP-ip-pool-VLAN20]network 192.168.20.0 mask 24 [DHCP-ip-pool-VLAN20]gateway-list 192.168.20.254 [DHCP-ip-pool-VLAN20]dns-list 8.8.8.8 [DHCP-ip-pool-VLAN20]lease day 8 [DHCP-ip-pool-VLAN20]static-bind ip-address 192.168.20.100 mac-address 5489-9806-68e7 [DHCP-ip-pool-VLAN20]excluded-ip-address 192.168.20.240 192.168.20.253 [DHCP-ip-pool-VLAN20]int g0/0/0 [DHCP-g0/0/0]dhcp select global
GW
[GW]dhcp enable [GW]int Eth-Trunk 2.10 [GW-Eth-Trunk2.10]dhcp select relay [GW-Eth-Trunk2.10]dhcp relay server-ip 192.168.100.100 [GW-Eth-Trunk2.10]int Eth-Trunk 2.20 [GW-Eth-Trunk2.20]dhcp select relay [GW-Eth-Trunk2.20]dhcp relay server-ip 192.168.100.100
六、 NAT缺省路由
GW
[GW]acl 2000 [GW-acl-basic-2000]rule permit source any [GW]int Eth-Trunk 2.200 [GW-Eth-Trunk2.200]nat outbound 2000 [GW]ip route-static 0.0.0.0 0.0.0.0 60.30.1.1 SW8:ip route-static 0.0.0.0 0.0.0.0 192.168.201.1 SW9:ip route-static 0.0.0.0 0.0.0.0 192.168.202.1
七、 HTTP
GW
[GW]int Eth-Trunk 2.200 [GW-Eth-Trunk2.200]nat server protocol tcp global 70.1.1.1 80 inside 192.168.100.101 80 Internet:ip route-static 70.1.1.1 32 60.30.1.2
