2024网络建设与运维赛题-网络配置VRF教程-上

项目简介:

某集团公司原在北京建立了总公司，后在上海建立了分公司，又在长沙建立了办事处。集团全网采用路由协议进行互联互通。
总公司、分公司、办事处、Internet的网络结构详见拓扑图。编号为SW1、SW2、SW3的设备作为总公司核心交换机；编号FW1的设备作为总公司互联网出口防火墙；编号为FW2的设备作为分公司互联网出口防火墙；编号为RT1的设备作为互联网出口路由器；编号为RT2的设备作为办事处路由器；编号为AC1的设备作为无线控制器，通过与办事处AP1配合实现所属区域无线覆盖。

本次使用设备：神州数码产品线

- 三层交换机：CS6200-28X-Pro

网络设备IP地址分配表

设备名称    设备接口    IP地址

SW1-BR	Loopback2	10.0.1.2/32
	Vlan2017	10.0.254.2/30
	Vlan2018	10.0.254.9/30
SW1-IN	Loopback3	20.0.1.3/32
	Vlan3013	20.0.255.1/30
	Vlan3014	20.0.255.13/30
	Vlan3015	20.0.255.21/30
SW2-BR	Loopback2	10.0.2.2/32
	Vlan2017	10.0.254.6/30
	Vlan2018	10.0.254.13/30
SW2-IN	Loopback3	20.0.2.3/32
	Vlan3013	20.0.255.14/30
	Vlan3014	20.0.255.17/30
	Vlan3015	20.0.255.25/30
SW3-BR	Loopback2	10.0.3.2/32
	Vlan2017	10.0.254.10/30
	Vlan2018	10.0.254.14/30
SW3-IN	Loopback3	20.0.3.3/32
	Vlan3013	20.0.255.10/30
	Vlan3014	20.0.255.18/30
	Vlan3015	20.0.255.29/30

SW-VRF的创建请参考我的其他文章“2024网络建设与运维赛题-交换配置教程”

本部分分为上下两篇，本篇为上。

SW1-BR配置

SW1(config)#interface loopback 2
SW1(config-if-loopback2)#ip vrf forwarding Branch                               
 Interface IP address removed due to enabling VRF Branch                        
SW1(config-if-loopback2)#ip address 10.0.1.2 255.255.255.255                    
SW1(config-if-loopback2)#exit                                                   
SW1(config)#vlan 2017-2018                                                      
SW1(config)#interface vlan 2017
SW1(config-if-vlan2017)#ip vrf forwarding Branch                                
 Interface IP address removed due to enabling VRF Branch                        
SW1(config-if-vlan2017)#ip address 10.0.254.2 255.255.255.252                   
SW1(config-if-vlan2017)#interface vlan 2018
SW1(config-if-vlan2018)#ip vrf forwarding Branch                                
 Interface IP address removed due to enabling VRF Branch                        
SW1(config-if-vlan2018)#ip address 10.0.254.9 255.255.255.252                   
SW1(config-if-vlan2018)#exit

SW1-IN配置

SW1(config)#interface loopback 3
SW1(config-if-loopback3)#ip vrf forwarding Internet                             
 Interface IP address removed due to enabling VRF Internet                      
SW1(config-if-loopback3)#ip add 20.0.1.3 255.255.255.255                        
SW1(config-if-loopback3)#exit                                                   
SW1(config)#vlan 3013-3015                                                      
SW1(config)#interface vlan 3013
SW1(config-if-vlan3013)#ip vrf forwarding Internet                              
 Interface IP address removed due to enabling VRF Internet                      
SW1(config-if-vlan3013)#ip address 20.0.255.1 255.255.255.252                   
SW1(config-if-vlan3013)#interface vlan 3014
SW1(config-if-vlan3014)#ip vrf forwarding Internet                              
 Interface IP address removed due to enabling VRF Internet                      
SW1(config-if-vlan3014)#ip address 20.0.255.13 255.255.255.252                  
SW1(config-if-vlan3014)#interface vlan 3015
SW1(config-if-vlan3015)#ip vrf forwarding Internet                              
 Interface IP address removed due to enabling VRF Internet                      
SW1(config-if-vlan3015)#ip address 20.0.255.21 255.255.255.252                  
SW1(config-if-vlan3015)#exit 

SW2-BR配置

SW2(config)#interface loopback 2
SW2(config-if-loopback2)#ip vrf forwarding Branch                               
 Interface IP address removed due to enabling VRF Branch                        
SW2(config-if-loopback2)#ip address 10.0.2.2 255.255.255.255                    
SW2(config-if-loopback2)#exit                                                   
SW2(config)#vlan 2017-2018                                                      
SW2(config)#interface vlan 2017
SW2(config-if-vlan2017)#ip vrf forwarding Branch                                
 Interface IP address removed due to enabling VRF Branch                        
SW2(config-if-vlan2017)#ip address 10.0.254.6 255.255.255.252                   
SW2(config-if-vlan2017)#interface vlan 2018
SW2(config-if-vlan2018)#ip vrf forwarding Branch                                
 Interface IP address removed due to enabling VRF Branch                        
SW2(config-if-vlan2018)#ip address 10.0.254.13 255.255.255.252                   
SW2(config-if-vlan2018)#exit

SW2-IN配置

SW2(config)#interface loopback 3
SW2(config-if-loopback3)#ip vrf forwarding Internet                             
 Interface IP address removed due to enabling VRF Internet                      
SW2(config-if-loopback3)#ip add 20.0.2.3 255.255.255.255                        
SW2(config-if-loopback3)#exit                                                   
SW2(config)#vlan 3013-3015                                                      
SW2(config)#interface vlan 3013
SW2(config-if-vlan3013)#ip vrf forwarding Internet                              
 Interface IP address removed due to enabling VRF Internet                      
SW2(config-if-vlan3013)#ip address 20.0.255.14 255.255.255.252                   
SW2(config-if-vlan3013)#interface vlan 3014
SW2(config-if-vlan3014)#ip vrf forwarding Internet                              
 Interface IP address removed due to enabling VRF Internet                      
SW2(config-if-vlan3014)#ip address 20.0.255.17 255.255.255.252                  
SW2(config-if-vlan3014)#interface vlan 3015
SW2(config-if-vlan3015)#ip vrf forwarding Internet                              
 Interface IP address removed due to enabling VRF Internet                      
SW2(config-if-vlan3015)#ip address 20.0.255.25 255.255.255.252                  
SW2(config-if-vlan3015)#exit 

SW3-BR配置

SW3(config)#interface loopback 2
SW3(config-if-loopback2)#ip vrf forwarding Branch                               
 Interface IP address removed due to enabling VRF Branch                        
SW3(config-if-loopback2)#ip address 10.0.3.2 255.255.255.255                    
SW3(config-if-loopback2)#exit                                                   
SW3(config)#vlan 2017-2018                                                      
SW3(config)#interface vlan 2017
SW3(config-if-vlan2017)#ip vrf forwarding Branch                                
 Interface IP address removed due to enabling VRF Branch                        
SW3(config-if-vlan2017)#ip address 10.0.254.10 255.255.255.252                   
SW3(config-if-vlan2017)#interface vlan 2018
SW3(config-if-vlan2018)#ip vrf forwarding Branch                                
 Interface IP address removed due to enabling VRF Branch                        
SW3(config-if-vlan2018)#ip address 10.0.254.14 255.255.255.252                   
SW3(config-if-vlan2018)#exit

SW3-IN配置

SW3(config)#interface loopback 3
SW3(config-if-loopback3)#ip vrf forwarding Internet                             
 Interface IP address removed due to enabling VRF Internet                      
SW3(config-if-loopback3)#ip add 20.0.3.3 255.255.255.255                        
SW3(config-if-loopback3)#exit                                                   
SW3(config)#vlan 3013-3015                                                      
SW3(config)#interface vlan 3013
SW3(config-if-vlan3013)#ip vrf forwarding Internet                              
 Interface IP address removed due to enabling VRF Internet                      
SW3(config-if-vlan3013)#ip address 20.0.255.10 255.255.255.252                   
SW3(config-if-vlan3013)#interface vlan 3014
SW3(config-if-vlan3014)#ip vrf forwarding Internet                              
 Interface IP address removed due to enabling VRF Internet                      
SW3(config-if-vlan3014)#ip address 20.0.255.18 255.255.255.252                  
SW3(config-if-vlan3014)#interface vlan 3015
SW3(config-if-vlan3015)#ip vrf forwarding Internet                              
 Interface IP address removed due to enabling VRF Internet                      
SW3(config-if-vlan3015)#ip address 20.0.255.29 255.255.255.252                  
SW3(config-if-vlan3015)#exit