三层架构实验

实验需求

1.内网IP地址172.16.0.0/16 合理分配

2.sw1/2之间互为备份

3.VRRP/STP/VLAN/TRUNK均使用

4.所有PC通过DHCP获取IP地址

实验拓扑

实验过程

按以下方法配置IP

 

1.给交换机配置vlan

[sw1]vlan 2

[sw2]vlan 2

[sw3]vlan 2

[sw4]vlan 2

2.配置vlan接口和trunk干道

SW3：

[sw3-Ethernet0/0/3]port link-type access

[sw3-Ethernet0/0/3]port default vlan 2

[sw3]port-group group-member e0/0/1 e0/0/4
[sw3-port-group]port link-type trunk
[sw3-Ethernet0/0/1]port link-type trunk 
[sw3-Ethernet0/0/4]port link-type trunk
[sw3-port-group]port trunk allow-pass vlan 2
[sw3-Ethernet0/0/1]port trunk allow-pass vlan 2
[sw3-Ethernet0/0/4]port trunk allow-pass vlan 2

SW4：

[sw4-Ethernet0/0/3]port link-type access

[sw4-Ethernet0/0/3]port default vlan 2

[sw4]port-group group-member e0/0/1 e0/0/4
[sw4-port-group]port link-type trunk
[sw4-Ethernet0/0/1]port link-type trunk 
[sw4-Ethernet0/0/4]port link-type trunk
[sw4-port-group]port trunk allow-pass vlan 2
[sw4-Ethernet0/0/1]port trunk allow-pass vlan 2
[sw4-Ethernet0/0/4]port trunk allow-pass vlan 2

SW1：

[sw1]port-group group-member g0/0/2 g0/0/3
[sw1-port-group]port link-type trunk 
[sw1-GigabitEthernet0/0/2]port link-type trunk 
[sw1-GigabitEthernet0/0/3]port link-type trunk 
[sw1-port-group]port trunk allow-pass vlan 2
[sw1-GigabitEthernet0/0/2]port trunk allow-pass vlan 2
[sw1-GigabitEthernet0/0/3]port trunk allow-pass vlan 2

SW2：

[sw2]port-group group-member g0/0/2 g0/0/3
[sw2-port-group]port link-type trunk 
[sw2-GigabitEthernet0/0/2]port link-type trunk 
[sw2-GigabitEthernet0/0/3]port link-type trunk 
[sw2-port-group]port trunk allow-pass vlan 2
[sw2-GigabitEthernet0/0/2]port trunk allow-pass vlan 2
[sw2-GigabitEthernet0/0/3]port trunk allow-pass vlan 2

3.配置SW1和SW2之间的通道

SW1：
[sw1]int Eth-Trunk 0
[sw1-Eth-Trunk0]int g0/0/4
[sw1-GigabitEthernet0/0/4]eth-trunk 0

[sw1-GigabitEthernet0/0/4]int g0/0/5
[sw1-GigabitEthernet0/0/5]eth-trunk 0

SW2：

[sw2]int Eth-Trunk 0
[sw2-Eth-Trunk0]int g0/0/4
[sw2-GigabitEthernet0/0/4]eth-trunk 0

[sw2-GigabitEthernet0/0/4]int g0/0/5
[sw2-GigabitEthernet0/0/5]eth-trunk 0

4.配置STP生成树

SW1：

[sw1]stp mode mstp         
[sw1]stp enable
[sw1]stp region-configuration    
[sw1-mst-region]region-name a  
[sw1-mst-region]instance 1 vlan 1    
[sw1-mst-region]instance 2 vlan 2
[sw1-mst-region]active region-configuration

 

SW2：

[sw2]stp mode mstp         
[sw2]stp enable
[sw2]stp region-configuration    
[sw2-mst-region]region-name a  
[sw2-mst-region]instance 1 vlan 1    
[sw2-mst-region]instance 2 vlan 2
[sw2-mst-region]active region-configuration

 

SW3：

[sw3]stp mode mstp         
[sw3]stp enable
[sw3]stp region-configuration    
[sw3-mst-region]region-name a  
[sw3-mst-region]instance 1 vlan 1    
[sw3-mst-region]instance 2 vlan 2
[sw3-mst-region]active region-configuration

 

SW4：

[sw4]stp mode mstp         
[sw4]stp enable
[sw4]stp region-configuration    
[sw4-mst-region]region-name a  
[sw4-mst-region]instance 1 vlan 1    
[sw4-mst-region]instance 2 vlan 2
[sw4-mst-region]active region-configuration

 

5.给SW1和SW2配置SVI，使其可以配置IP

SW1：

[sw1]interface vlan1
[sw1-Vlanif1]ip address 172.16.1.1 24

[sw1]interface vlan2    
[sw1-Vlanif2]ip address 172.16.2.1 24

SW2：

[sw2]interface vlan1
[sw2-Vlanif1]ip address 172.16.1.2 24

[sw2]interface vlan2    
[sw2-Vlanif2]ip address 172.16.2.2 24

6.配置VRRP实现网关冗余

SW1：

[sw1-Vlanif1]vrrp vrid 1 virtual-ip 172.16.1.250
[sw1-Vlanif1]vrrp vrid 1 priority 105
[sw1-Vlanif1]vrrp vrid 1 track int g0/0/1 reduce 10

[sw1-Vlanif2]vrrp vrid 1 virtual-ip 172.16.2.250

SW2：

[sw2-Vlanif2]vrrp vrid 1 virtual-ip 172.16.2.250
[sw2-Vlanif2]vrrp vrid 1 priority 105
[sw2-Vlanif2]vrrp vrid 1 track int g0/0/1 reduce 10

[sw2-Vlanif1]vrrp vrid 1 virtual-ip 172.16.1.250

7.在SW1、SW2上开启DHCP

SW1：

[sw1]dhcp enable   
[sw1]ip pool v1
[sw1-ip-pool-v1]network 172.16.1.250 ma 24
[sw1-ip-pool-v1]gateway-list 172.16.1.250
[sw1-ip-pool-v1]dns-list 114.114.114.114 8.8.8.8
[sw1-ip-pool-v1]q
[sw1]int vlan1
[sw1-Vlanif1]dhcp select global 
[sw1]ip pool v2
[sw1-ip-pool-v2]network 172.16.2.250 ma 24
[sw1-ip-pool-v2]gateway-list 172.16.2.250
[sw1-ip-pool-v2]dns-list 114.114.114.114 8.8.8.8
[sw1]int vlan2
[sw1-Vlanif2]dhcp select global 

SW2：

[sw2]dhcp enable   
[sw2]ip pool v1
[sw2-ip-pool-v1]network 172.16.1.250 ma 24
[sw2-ip-pool-v1]gateway-list 172.16.1.250
[sw2-ip-pool-v1]dns-list 114.114.114.114 8.8.8.8
[sw2-ip-pool-v1]q
[sw2]int vlan1
[sw2-Vlanif1]dhcp select global 
[sw2]ip pool v2
[sw2-ip-pool-v2]network 172.16.2.250 ma 24
[sw2-ip-pool-v2]gateway-list 172.16.2.250
[sw2-ip-pool-v2]dns-list 114.114.114.114 8.8.8.8
[sw2]int vlan2
[sw2-Vlanif2]dhcp select global 

8.配置骨干IP，因为交换机不能配IP，所以将三层交换机接口改为虚拟接口

SW1：

[sw1]vlan 3
[sw1]int vlan3 
[sw1-Vlanif3]ip address 172.16.0.2 30
[sw1]interface g0/0/1
[sw1-GigabitEthernet0/0/1]port link-type access
[sw1-port-group-default]port default vlan 3

SW2：

[sw2]vlan 3
[sw2]int vlan3 
[sw2-Vlanif3]ip address 172.16.0.6 30
[sw2]interface g0/0/1
[sw2-GigabitEthernet0/0/1]port link-type access
[sw2-port-group-default]port default vlan 3

9.配置路由器IP并设置到外网的缺省

R1：

[r1]int g0/0/0
[r1-GigabitEthernet0/0/0]ip add 12.1.1.1 24

[r1-GigabitEthernet0/0/0]int lo0           
[r1-LoopBack0]ip add 1.1.1.1 24

R2:

[r2]int g0/0/0
[r2-GigabitEthernet0/0/0]ip add 12.1.1.2 24
[r2-GigabitEthernet0/0/0]int g0/0/1
[r2-GigabitEthernet0/0/1]ip add 172.16.0.1 30
[r2-GigabitEthernet0/0/1]int g0/0/2
[r2-GigabitEthernet0/0/2]ip add 172.16.0.5 30

[r2]ip route-static 0.0.0.0 0 12.1.1.1

10.将三层交换机看做路由器，对内网配置OSPF

SW1：

[sw1]ospf 1 router-id 1.1.1.1
[sw1-ospf-1]area 0
[sw1-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.255.255

 

SW2：

[sw2]ospf 1 router-id 2.2.2.2
[sw2-ospf-1]area 0
[sw2-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.255.255

 

R2:

[r2]ospf 1 router-id 3.3.3.3

[r2-ospf-1]area 0

[r2-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.255.255

[r2-ospf-1]default-route-advertise always 

 

11.配置NAT

[r2]acl 2000
[r2-acl-basic-2000]rule permit source 172.16.0.0 0.0.255.255
[r2-acl-basic-2000]int g0/0/0    
[r2-GigabitEthernet0/0/0]nat outbound 2000

实验检测

1.查看PC是否分配到了IP

PC1：

 PC2：

PC3：

 

PC4：

 

2.用PC1连续pingR1的环回，中途关闭SW1看能否连通