课设实验一

课设实验一 园区网配置

直接上图

步骤：
1、依照拓扑图进行分工，需要6台PC
2、幸运的分到了SW1
3、配置命令如下
int g0/0
description to_SW3_g0/0
no switchport
ip add 13.1.1.1 24
vlan 10,20
int g0/1-0/2
switchport mode trunk
switchport trunk allowed vlan add 10,20

int vlan 10
ip add 192.168.10.252 24
vrrp 10 ip 192.168.10.254
vrrp 10 priority 120
int vlan 20
ip add 192.168.20.252 24
vrrp 20 ip 192.168.20.254
vrrp 20 priority 120

ip route 192.168.100.0 24 13.1.1.2
ip route 192.168.200.0 24 13.1.1.2
ip route 0.0.0.0 0.0.0.0 192.168.10.253

spanning-tree mst instance 0 priority 8192
spanning-tree enable

配置ACL
SW1(config)#ip access-list extended 1001
SW1(config-ext-nacl)#deny ip 192.168.10.0 0.0.0.255 192.168.20.0 0.0.0.255
SW1(config-ext-nacl)#deny ip 192.168.20.0 0.0.0.255 192.168.10.0 0.0.0.255
SW1(config-ext-nacl)#permit ip any any
SW1(config-ext-nacl)#int vlan10
SW1(config-if-vlan10)#ip access-group 1001 in
SW1(config-if-vlan10)#int vlan20
SW1(config-if-vlan20)#ip access-group 1001 in
SW1(config-if-vlan20)#end

全部的配置命令，可以参考
SW3:
int g0/0
description to_SW1_g0/0
no switchport
ip add 13.1.1.2 24
int g0/1
description to_SW2_g0/0
no switchport
ip add 23.1.1.2 24
vlan 100,200
int vlan 100
ip add 192.168.100.254
int vlan 200
ip add 192.168.200.254
int g0/3
swithport access vlan 100
int g0/4
switchport access vlan 200
ip route 192.168.10.0 24 13.1.1.1 10
ip route 192.168.10.0 24 23.1.1.1
ip route 192.168.20.0 24 13.1.1.1 10
ip route 192.168.20.0 24 23.1.1.1

SW1
int g0/0
description to_SW3_g0/0
no switchport
ip add 13.1.1.1 24
vlan 10,20
int g0/1-0/2
switchport mode trunk
switchport trunk allowed vlan add 10,20
int vlan 10
ip add 192.168.10.252 24
vrrp 10 ip 192.168.10.254
vrrp 10 priority 120
int vlan 20
ip add 192.168.20.252 24
vrrp 20 ip 192.168.20.254
vrrp 20 priority 120
ip route 192.168.100.0 24 13.1.1.2
ip route 192.168.200.0 24 13.1.1.2
ip route 0.0.0.0 0.0.0.0 192.168.10.253
spanning-tree mst instance 0 priority 8192
spanning-tree enable

SW2
int g0/0
description to_SW3_g0/0
no switchport
ip add 23.1.1.1 24
int g0/4
description to_RT1_g0/1
no switchport
ip add 21.1.1.1 24
vlan 10,20
int g0/1-0/2
switchport mode trunk
switchport trunk allowed vlan add 10,20
int vlan 10
ip add 192.168.10.253 24
vrrp 10 ip 192.168.10.254
vrrp 10 priority 150
int vlan 20
ip add 192.168.20.253 24
vrrp 20 ip 192.168.20.254
vrrp 20 priority 150
ip route 192.168.100.0 24 23.1.1.2
ip route 192.168.200.0 24 23.1.1.2
ip route 0.0.0.0 0.0.0.0 21.1.1.2
spanning-tree mst instance 0 priority 4096
spanning-tree enable

SW4
vlan 10,20
int g0/0-0/1
switchport mode trunk
switchport trunk allowed vlan add 10,20
int g0/3
switchport access vlan 10
int g0/4
swtichport access vlan 20
spanning-tree enable

RT1
int g0/0
description to_Internet_g0/0
no switchport
ip add 202.102.10.2 24
ip nat outside
int g0/1
description t0_SW2_g0/4
no switchport
ip add 21.1.1.2 24
ip nat inside
ip access-list standard acl_nat
permit 192.168.10.0 0.0.0.255
permit 192.168.20.0 0.0.0.255
permit 21.1.1.0 0.0.0.255
ip nat pool nat_pl 202.102.10.3 202.102.10.5 255.255.255.0
ip nat inside source list acl_nat pool nat_pl overload
ip route 192.168.10.0 24 21.1.1.1
ip route 192.168.20.0 24 21.1.1.1
ip route 0.0.0.0 0.0.0.0 202.102.10.2

**Internet: **
int g0/0
description to_RT1
no switchport
ip add 202.102.10.1 24
int loopback 0
ip add 202.102.1.1 24

通用配置：
enable password 0 xx ///配置enable 密码
telnet server enable //开启telnet 服务