三层架构综合实验

最新推荐文章于 2022-09-04 15:14:39 发布

木枯らし吹く道

最新推荐文章于 2022-09-04 15:14:39 发布

阅读量174

点赞数

本文链接：https://blog.csdn.net/landandwind/article/details/119006314

版权

实验要求

内网IP地址172.16.0.0/16，合理分配
SW1/2之间互为备份
VRRP/STP/VLAN/TRUNK均使用
所以pc均使用dhcp获取地址

实验配置

1.配置Eth-trunk

[sw1]int Eth-Trunk 0
[sw1]int g0/0/2
[sw1-GigabitEthernet0/0/2]eth-trunk 0
[sw1]int g0/0/3
[sw1-GigabitEthernet0/0/3]eth-trunk 0

[sw2]int eth-trunk 0
[sw2]int g0/0/2
[sw2-GigabitEthernet0/0/2]eth-trunk 0
[sw2-GigabitEthernet0/0/2]int g0/0/3
[sw2-GigabitEthernet0/0/3]eth-trunk 0

2.配置Trunk干道

[sw1]port-group group-member g0/0/4 to g0/0/5
[sw1-port group]port link-type trunk 
[sw1-GigabitEthernet0/0/4]port link-type trunk
[sw1-GigabitEthernet0/0/5]port link-type trunk
[sw1-port group]port trunk allow-pass vlan 1 2

[sw2]port-group group-member g0/0/4 to g0/0/5
[sw2-port group]port link-type trunk 
[sw2-GigabitEthernet0/0/4]port link-type trunk
[sw2-GigabitEthernet0/0/5]port link-type trunk
[sw2-port group]port trunk allow-pass vlan 1 2

[sw3]port-group group-member g0/0/1 to g0/0/2
[sw3-port group]port link-type trunk 
[sw3-GigabitEthernet0/0/1]port link-type trunk
[sw3-GigabitEthernet0/0/2]port link-type trunk
[sw3-port group]port trunk allow-pass vlan 1 2

[sw4]port-group group-member g0/0/1 to g0/0/2
[sw4-port group]port link-type trunk 
[sw4-GigabitEthernet0/0/1]port link-type trunk
[sw4-GigabitEthernet0/0/2]port link-type trunk
[sw4-port group]port trunk allow-pass vlan 1 2

3.创建并划分vlan

在每个交换机上创建vlan2，并在sw3和sw4的E0/0/1和E0/0/2接口设置为接入模式并且划分vlan

4.生成树协议

[sw1]stp enable
[sw1]stp region-configuration 
[sw1-mst-region]region-name a
[sw1-mst-region]instance 1 vlan 1
[sw1-mst-region]instance 2 vlan 2
[sw1-mst-region]active region-configuration 
Info: This operation may take a few seconds. Please wait for a moment...done.
[sw1-mst-region]qu
[sw1]stp instance 1 root primary
[sw1]stp instance 2 root secondary 

[sw2]stp region-configuration 
[sw2-mst-region]reg	
[sw2-mst-region]region-name  a
[sw2-mst-region]instance 1 vlan 1
[sw2-mst-region]instance 2 vlan 2
[sw2-mst-region]active region-configuration 
Info: This operation may take a few seconds. Please wait for a moment...done.
[sw2-mst-region]qu
[sw2]stp instance 2 root primary
[sw2]stp instance 1 root secondary

[sw3]stp enable
[sw3]stp region-configuration 
[sw3-mst-region]region-name a
[sw3-mst-region]instance 1 vlan 1
[sw3-mst-region]instance 2 vlan 2
[sw3-mst-region]active region-configuration 

[sw4]stp enable
[sw4]stp region-configuration 	
[sw4-mst-region]region-name a
[sw4-mst-region]instance 1 vlan 1
[sw4-mst-region]instance 2 vlan 2
[sw4-mst-region]active region-configuration

5.配置SVI

[sw1]int vlan 1
[sw1-Vlanif2]ip address 172.16.2.1 24
[sw1-Vlanif2]int vlan 2
[sw1-Vlanif3]ip address 172.16.3.1 24

[sw2]int vlan 1
[sw2-Vlanif2]ip address 172.16.2.2 24
[sw2-Vlanif2]int vlan 2
[sw2-Vlanif3]ip address 172.16.3.2 24

6.VRRP配置

[sw1]int vlanif 1
[sw1-Vlanif1]vrrp vrid 1 virtual-ip 172.16.2.254
[sw1-Vlanif1]vrrp vrid 1 priority 101
[sw1-Vlanif1]vrrp vrid 1 track int g0/0/1
[sw1-Vlanif1]int vlanif 2
[sw1-Vlanif2]vrrp vrid 2 virtual-ip 172.16.3.254
[sw1-Vlanif2]vrrp vrid 2 track int g0/0/1

[sw2]int vlanif 1
[sw2-Vlanif1]vrrp vrid 2 virtual-ip 172.16.2.254
[sw2-Vlanif1]vrrp vrid 2 track int g0/0/1
[sw2-Vlanif1]int vlanif 2
[sw2-Vlanif2]vrrp vrid 2 virtual-ip 172.16.3.254
[sw2-Vlanif2]vrrp vrid 2 priority 101
[sw2-Vlanif2]vrrp vrid 2 track int g0/0/1

7.dhcp配置

[sw1]dhcp enable
Info: The operation may take a few seconds. Please wait for a moment.done.
[sw1]ip pool v1
Info:It's successful to create an IP address pool.
[sw1-ip-pool-v1]network 172.16.1.0 mask 24
[sw1-ip-pool-v1]gateway-list 172.16.1.254
[sw1-ip-pool-v1]dns-list 114.114.114.114
[sw1-ip-pool-v1]qu
[sw1]ip pool v2
Info:It's successful to create an IP address pool.
[sw1-ip-pool-v2]network 172.16.2.0 mask 24
[sw1-ip-pool-v2]gateway-list 172.16.2.254
[sw1-ip-pool-v2]dns-list 114.114.114.114
[sw1-ip-pool-v2]q
[sw1]int vlanif 1
[sw1-Vlanif2]dhcp select global
[sw1-Vlanif2]int vlanif 2
[sw1-Vlanif3]dhcp select global

[sw2]dhcp enable
Info: The operation may take a few seconds. Please wait for a moment.done.
[sw2]ip pool v1
Info:It's successful to create an IP address pool.
[sw2-ip-pool-v1]network 172.16.2.0 mask 24
[sw2-ip-pool-v1]gateway-list 172.16.2.254
[sw2-ip-pool-v1]dns-list 114.114.114.114
[sw2-ip-pool-v1]ip pool v2
Info:It's successful to create an IP address pool.
[sw2-ip-pool-v2]network 172.16.3.0 mask 24
[sw2-ip-pool-v2]gateway-list 172.16.3.254
[sw2-ip-pool-v2]dns-list 114.114.114.114
[sw2-ip-pool-v2]q
[sw2]int vlan 1
[sw2-Vlanif2]dhcp select global
[sw2-Vlanif2]int vlan 2
[sw2-Vlanif3]dhcp select global

8.核心层配置

[sw1]vlan 10
[sw1-vlan10]int vlan 10
[sw1-Vlanif10]ip address 172.16.10.1 24
[sw1-Vlanif10]int g0/0/1
[sw1-GigabitEthernet0/0/1]port link-type access
[sw1-GigabitEthernet0/0/1]port default vlan 10
[sw1-GigabitEthernet0/0/1]qu
[sw1]ip route-static 0.0.0.0 0 172.16.10.2

[sw2]vlan 20
[sw2-vlan20]int vlan 20
[sw2-Vlanif20]ip address 172.16.20.1 24
[sw2-Vlanif20]int g0/0/1
[sw2-GigabitEthernet0/0/1]port link-type access
[sw2-GigabitEthernet0/0/1]port default vlan 20
[sw2-GigabitEthernet0/0/1]ip route-static 0.0.0.0 0 172.16.20.2

[Huawei]sysname R1
[R1]int g0/0/1
[R1-GigabitEthernet0/0/1]ip address 172.16.10.2 24
[R1-GigabitEthernet0/0/1]int g0/0/2
[R1-GigabitEthernet0/0/2]ip address 172.16.20.2 24
[R1-GigabitEthernet0/0/2]q
[R1]ip route-static 172.16.2.0 24 172.16.20.1
[R1]ip route-static 172.16.2.0 24 172.16.10.1
[R1]ip route-static 172.16.3.0 24 172.16.10.1
[R1]ip route-static 172.16.3.0 24 172.16.20.1

[R1]int g0/0/0
[R1-GigabitEthernet0/0/0]ip address 12.1.1.1 24

[Huawei]sysname R2
[R2]int g0/0/0
[R2-GigabitEthernet0/0/0]ip address 12.1.1.2 24
[R2-GigabitEthernet0/0/0]int loopback 0
[R2-LoopBack0]ip address 1.1.1.1 24
 
设置访问控制列表，将流量放出去
[R1]acl number 2000
[R1-acl-basic-2000]rule 1 permit source 172.16.0.0 0.0.255.255
[R1-acl-basic-2000]int g0/0/0
[R1-GigabitEthernet0/0/0]nat outbound 2000
[R1-GigabitEthernet0/0/0]q
[R1]ip route-static 0.0.0.0 0 12.1.1.2