目的:
跨越公网和私网实现全网互通。
部署拓扑图:
配置文件:
LSW1
sysname lsw1
vlan batch 11 to 12 1001
interface Vlanif11
ip address 10.1.11.1 255.255.255.0
interface Vlanif12
ip address 10.1.12.1 255.255.255.0
interface Vlanif1001
ip address 10.1.111.1 255.255.255.0
interface Eth-Trunk1
port link-type trunk
port trunk allow-pass vlan 2 to 4094
interface GigabitEthernet0/0/1
port link-type access
port default vlan 1001
interface GigabitEthernet0/0/2
eth-trunk 1
interface GigabitEthernet0/0/3
port link-type access
port default vlan 11
interface GigabitEthernet0/0/4
port link-type access
port default vlan 12
interface GigabitEthernet0/0/5
eth-trunk 1
ospf 110
area 0.0.0.0
network 10.1.111.0 0.0.0.255
network 10.1.11.0 0.0.0.255
network 10.1.12.0 0.0.0.255
LSW2
sysname lsw2
vlan batch 13 to 14 1002
interface Vlanif13
ip address 10.1.13.1 255.255.255.0
interface Vlanif14
ip address 10.1.14.1 255.255.255.0
interface Vlanif1002
ip address 10.1.112.1 255.255.255.0
interface Eth-Trunk1
port link-type trunk
port trunk allow-pass vlan 2 to 4094
interface GigabitEthernet0/0/1
eth-trunk 1
interface GigabitEthernet0/0/2
port link-type access
port default vlan 13
interface GigabitEthernet0/0/3
port link-type access
port default vlan 14
interface GigabitEthernet0/0/4
port link-type access
port default vlan 1002
interface GigabitEthernet0/0/5
eth-trunk 1
ospf 110
area 0.0.0.0
network 10.1.112.0 0.0.0.255
network 10.1.13.0 0.0.0.255
network 10.1.14.0 0.0.0.255
LSW8
sysname sw1
vlan batch 11 to 12
interface Ethernet0/0/1
port link-type access
port default vlan 11
interface GigabitEthernet0/0/1
port link-type access
port default vlan 11
LSW9
sysname sw2
vlan batch 11 to 12
interface Ethernet0/0/1
port link-type access
port default vlan 12
interface GigabitEthernet0/0/1
port link-type access
port default vlan 12
LSW10
sysname sw3
vlan batch 13 to 14
interface Ethernet0/0/1
port link-type access
port default vlan 13
interface GigabitEthernet0/0/1
port link-type access
port default vlan 13
LSW11
sysname sw4
vlan batch 13 to 14
interface Ethernet0/0/1
port link-type access
port default vlan 14
interface GigabitEthernet0/0/1
port link-type access
port default vlan 14
LSW12
sysname sw5
vlan batch 21 to 22
interface Ethernet0/0/1
port link-type access
port default vlan 21
interface Ethernet0/0/2
port link-type access
port default vlan 22
interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 21 to 22
AR1
sysname r1
interface GigabitEthernet0/0/0
ip address 202.2.2.1 255.255.255.0
interface GigabitEthernet0/0/1
ip address 202.2.12.1 255.255.255.0
AR2
sysname r2
acl number 3000
rule 5 permit ip source 10.1.0.0 0.0.0.255
interface GigabitEthernet0/0/0
ip address 202.2.12.2 255.255.255.0
nat outbound 3000
interface GigabitEthernet0/0/1
ip address 10.1.113.2 255.255.255.0
interface GigabitEthernet0/0/2
ip address 10.1.111.2 255.255.255.0
interface GigabitEthernet2/0/0
ip address 10.1.112.2 255.255.255.0
ospf 110 router-id 2.2.2.2
default-route-advertise
area 0.0.0.0
network 2.2.2.2 0.0.0.0
network 10.1.111.0 0.0.0.255
network 10.1.112.0 0.0.0.255
network 10.1.113.0 0.0.0.255
ip route-static 0.0.0.0 0.0.0.0 202.2.12.1
AR3
sysname r3
interface GigabitEthernet0/0/0
ip address 10.1.113.3 255.255.255.0
interface GigabitEthernet0/0/1
ip address 10.1.134.3 255.255.255.0
ospf 110 router-id 3.3.3.3
import-route rip 1 cost 100
area 0.0.0.0
network 3.3.3.3 0.0.0.0
network 10.1.113.0 0.0.0.255
rip 1
default-route originate
undo summary
version 2
network 10.0.0.0
import-route ospf 110 cost 0
AR4
sysname r4
interface GigabitEthernet0/0/0
ip address 10.1.134.4 255.255.255.0
interface GigabitEthernet0/0/1
ip address 10.1.145.4 255.255.255.0
interface GigabitEthernet0/0/2
interface GigabitEthernet0/0/2.21
dot1q termination vid 21
ip address 10.1.21.1 255.255.255.0
arp broadcast enable
interface GigabitEthernet0/0/2.22
dot1q termination vid 22
ip address 10.1.22.1 255.255.255.0
arp broadcast enable
ospf 110
import-route rip 1 cost 100
rip 1
undo summary
version 2
network 10.0.0.0
import-route ospf 110 cost 0
AR5
sysname r5
interface GigabitEthernet0/0/0
ip address 10.1.145.5 255.255.255.0
interface GigabitEthernet0/0/1
ip address 10.1.100.5 255.255.255.0
rip 1
undo summary
version 2
network 10.0.0.0
结果:
用所有PC ping PC1,看能否实现互通
PC2 ping PC1
PC3 ping PC1
PC4 ping PC1
PC5 ping PC1
PC6 ping PC1
PC7 ping PC1
SERVICE ping PC1