三层交换技术

最新推荐文章于 2024-07-12 17:49:34 发布

a_sshead

最新推荐文章于 2024-07-12 17:49:34 发布

阅读量105

点赞数

文章标签：网络协议网络安全

本文链接：https://blog.csdn.net/a_sshead/article/details/118766250

版权

配置了多个交换机的VLAN、接口类型、OSPF路由，并进行了全网可达性测试。配置包括VLAN接口IP地址、Trunk接口、DHCP服务器及静默接口。路由器R1配置了静态默认路由和ACL，实现内外网访问。

摘要由CSDN通过智能技术生成

我的拓扑图：

SW1：

[sw1]vlan batch 2 3 11 41 100 //创建vlan

[sw1]interface GigabitEthernet 0/0/2     //允许vlan 2 3通过
[sw1-GigabitEthernet0/0/2]port link-type trunk 
[sw1-GigabitEthernet0/0/2]port trunk allow-pass vlan 2 3  

[sw1]interface GigabitEthernet 0/0/3     //允许vlan 2通过
[sw1-GigabitEthernet0/0/3]port link-type trunk 
[sw1-GigabitEthernet0/0/3]port trunk allow-pass vlan 2  


[sw1]interface Vlanif 41     //设置互联vlan
[sw1-Vlanif41]ip address 10.1.41.1 24



[sw1]interface GigabitEthernet 0/0/1
[sw1-GigabitEthernet0/0/1]port link-type access 
[sw1-GigabitEthernet0/0/1]port default vlan 11

[sw1]interface Vlanif 11
[sw1-Vlanif11]ip address 10.1.11.2 24



[sw1]interface  Vlanif 2
[sw1-Vlanif2]ip address 10.1.2.254 24

[sw1]interface Vlanif 3
[sw1-Vlanif3]ip address 10.1.3.254 24

[sw1]interface Vlanif 2         //dhcp下放地址
[sw1-Vlanif2]dhcp select interface 
[sw1-Vlanif2]dhcp server dns-list 8.8.8.8

[sw1]interface Vlanif 3
[sw1-Vlanif3]dhcp select interface 
[sw1-Vlanif3]dhcp server dns-list 8.8.8.8


[sw1]interface g0/0/5
[sw1-GigabitEthernet0/0/5]port link-type trunk 
[sw1-GigabitEthernet0/0/5]port trunk allow-pass vlan 100

[sw1]interface Vlanif 100
[sw1-Vlanif100]ip address 10.1.100.254 24


[sw1]ospf 1 router-id 11.11.11.11
[sw1-ospf-1]area 0
[sw1-ospf-1-area-0.0.0.0]network 10.1.41.0 0.0.0.255
[sw1-ospf-1-area-0.0.0.0]network 10.1.11.0 0.0.0.255

[sw1-ospf-1]area 1
[sw1-ospf-1-area-0.0.0.1]network 10.1.2.0 0.0.0.255
[sw1-ospf-1-area-0.0.0.1]network 10.1.3.0 0.0.0.255

[sw1-ospf-1]area 3
[sw1-ospf-1-area-0.0.0.3]network 10.1.100.0 0.0.0.255


[sw1]ospf 1           //静默接口配置，消除网关ospf hello的洪泛
[sw1-ospf-1]silent-interface Vlanif 2
[sw1-ospf-1]silent-interface Vlanif 3
[sw1-ospf-1]silent-interface Vlanif 100

SW2：

//创建vlan
[sw2]vlan batch 2 3   

//配置access，将接口划入vlan
[sw2]int g0/0/2          
[sw2-GigabitEthernet0/0/2]port link-type access 
[sw2-GigabitEthernet0/0/2]port default vlan 2

[sw2]int g0/0/3
[sw2-GigabitEthernet0/0/3]port link-type access 
[sw2-GigabitEthernet0/0/3]port default vlan 3


//配置trunk，允许vlan 2 3通过
[sw2]interface GigabitEthernet 0/0/1        
[sw2-GigabitEthernet0/0/1]port link-type trunk 
[sw2-GigabitEthernet0/0/1]port trunk allow-pass vlan 2 3

SW3：



[sw3]vlan 2  //创建vlan

[sw3]int g0/0/1    //将接口划入vlan中
[sw3-GigabitEthernet0/0/1]port link-type access 
[sw3-GigabitEthernet0/0/1]port default vlan 2


[sw3]interface GigabitEthernet 0/0/3    //允许vlan 2 通过
[sw3-GigabitEthernet0/0/3]port link-type trunk 
[sw3-GigabitEthernet0/0/3]port trunk allow-pass vlan 2

SW４：

[sw4]vlan batch 4 5 14 41 200 //创建vlan

[sw4]interface GigabitEthernet 0/0/1     //允许vlan 4 通过
[sw4-GigabitEthernet0/0/1]port link-type trunk 
[sw4-GigabitEthernet0/0/1]port trunk allow-pass vlan 4 

[sw4]interface GigabitEthernet 0/0/3     //允许vlan 4　5通过


[sw4-GigabitEthernet0/0/3]port link-type trunk 
[sw4-GigabitEthernet0/0/3]port trunk allow-pass vlan 4　5 


[sw4]interface Vlanif 41     //设置互联vlan
[sw4-Vlanif41]ip address 10.1.41.4 24


[sw4]interface GigabitEthernet 0/0/2
[sw4-GigabitEthernet0/0/2]port link-type access 
[sw4-GigabitEthernet0/0/2]port default vlan 14

[sw4]interface Vlanif 14
[sw4-Vlanif14]ip address 10.1.14.4 24



[sw4]interface Vlanif 4
[sw4-Vlanif4]ip address 10.1.4.254 24

[sw4]interface Vlanif 5
[sw4-Vlanif5]ip address 10.1.5.254 24


[sw4]interface Vlanif 4     //创建dhcp下放地址
[sw4-Vlanif4]dhcp select interface 
[sw4-Vlanif4]dhcp server dns-list 8.8.8.8

[sw4]interface Vlanif 45    //创建dhcp下放地址
[sw4-Vlanif5]dhcp select interface 
[sw4-Vlanif5]dhcp server dns-list 8.8.8.8


[sw4]interface g0/0/5
[sw4-GigabitEthernet0/0/5]port link-type trunk 
[sw4-GigabitEthernet0/0/5]port trunk allow-pass vlan 200

[sw4]interface Vlanif 100
[sw4-Vlanif100]ip address 10.1.200.254 24


[sw4]ospf 1 router-id 4.4.4.4
[sw4-ospf-1]area 0
[sw4-ospf-1-area-0.0.0.0]network 10.1.41.0 0.0.0.255
[sw4-ospf-1-area-0.0.0.0]network 10.1.14.0 0.0.0.255

[sw4-ospf-1]area 2
[sw4-ospf-1-area-0.0.0.2]network 10.1.4.0 0.0.0.255
[sw4-ospf-1-area-0.0.0.2]network 10.1.5.0 0.0.0.255


[sw4-ospf-1]area 4
[sw4-ospf-1-area-0.0.0.4]network 10.1.200.0 0.0.0.255


[sw44]ospf 1           //静默接口配置，消除网关ospf hello的洪泛
[sw4-ospf-1]silent-interface Vlanif 4
[sw4-ospf-1]silent-interface Vlanif 5
[sw4-ospf-1]silent-interface Vlanif 200

SW５：

[sw5]vlan 4

[sw5]interface GigabitEthernet 0/0/2
[sw5-GigabitEthernet0/0/2]port link-type access 
[sw5-GigabitEthernet0/0/2]port default vlan 4


[sw5]interface GigabitEthernet 0/0/1
[sw5-GigabitEthernet0/0/1]port link-type trunk 
[sw5-GigabitEthernet0/0/1]port trunk allow-pass vlan 4

SW６：



[sw6]vlan batch 4 5

[sw6]interface GigabitEthernet 0/0/1
[sw6-GigabitEthernet0/0/1]port link-type access 
[sw6-GigabitEthernet0/0/1]port default vlan 5

[sw6-GigabitEthernet0/0/1]int g0/0/2
[sw6-GigabitEthernet0/0/2]port link-type access 
[sw6-GigabitEthernet0/0/2]port default vlan 4


[sw6]interface GigabitEthernet 0/0/3
[sw6-GigabitEthernet0/0/3]port link-type trunk 
[sw6-GigabitEthernet0/0/3]port trunk allow-pass vlan 4 5

SW7：

[sw7]vlan batch 100 200

[sw7]interface GigabitEthernet 0/0/3
[sw7-GigabitEthernet0/0/3]port link-type access 
[sw7-GigabitEthernet0/0/3]port default vlan 100

[sw7]interface GigabitEthernet 0/0/4
[sw7-GigabitEthernet0/0/4]port link-type access  
[sw7-GigabitEthernet0/0/4]port default vlan 200

[sw7]interface GigabitEthernet 0/0/1
[sw7-GigabitEthernet0/0/1]port link-type trunk  
[sw7-GigabitEthernet0/0/1]port trunk allow-pass vlan 100

[sw7]interface GigabitEthernet 0/0/2
[sw7-GigabitEthernet0/0/2]port link-type trunk  
[sw7-GigabitEthernet0/0/2]port trunk allow-pass vlan 200

R1：

[R1]interface GigabitEthernet 0/0/1
[R1-GigabitEthernet0/0/1]ip address 10.1.11.1 24

[R1]interface GigabitEthernet 0/0/2
[R1-GigabitEthernet0/0/2]ip address 10.1.14.1 24


[R1-ospf-1]area 0
[R1-ospf-1-area-0.0.0.0]network 10.1.11.0 0.0.0.255
[R1-ospf-1-area-0.0.0.0]network 10.1.14.0 0.0.0.255

[R1]ip route-static 0.0.0.0 0 100.1.1.2    //配置缺省
[R1-ospf-1]default-route-advertise     //下放缺省


[R1]acl  2000    //配置规则，使内网可以访问外网，达到全网可达
[R1-acl-basic-2000]rule permit source 10.1.0.0 0.0.255.255

[R1]interface GigabitEthernet 0/0/0    //调用规则访问外网
[R1-GigabitEthernet0/0/0]nat outbound 2000


//远程映射
[R1-GigabitEthernet0/0/0]nat server protocol tcp global current-interface 80 ins
ide 10.1.100.1 80
Warning:The port 80 is well-known port. If you continue it may cause function fa
ilure.
Are you sure to continue?[Y/N]:y

R2：

[R2]interface GigabitEthernet 0/0/0
[R2-GigabitEthernet0/0/1]ip address 100.1.1.2 30

[R2]interface GigabitEthernet 0/0/1
[R2-GigabitEthernet0/0/2]ip address 200.1.1.1 24

[R2]interface LoopBack 0
[R2-LoopBack0]ip address 2.2.2.2 24

全网可达测试：