HCIP-三层网络架构实验
实验要求具体如下
1、ISP公有地址,有环回;
2、内网IP地址172.16.0.0/16,合理分配;
3、SW1与SW2之间互为备份;
4、VLAN/Eth-Trunk/STP/SVI/VRRP技术均使用;
5、所有PC均通过DHCP自动获取IP地址;
6、PC1/3在Vlan1,PC2/4在Vlan2。
一、拓扑搭建
二、创建通道接口
LSW1
[LSW1]interface Eth-Trunk 0
[LSW1-Eth-Trunk0]int g0/0/23
[LSW1-GigabitEthernet0/0/23]e
[LSW1-GigabitEthernet0/0/23]eth-trunk 0
Info: This operation may take a few seconds. Please wait for a moment...done.
[LSW1-GigabitEthernet0/0/23]int g0/0/24
[LSW1-GigabitEthernet0/0/24]eth-trunk 0
LSW2
[LSW2]interface Eth-Trunk 0
[LSW2-Eth-Trunk0]int g0/0/23
[LSW2-GigabitEthernet0/0/23]e
[LSW2-GigabitEthernet0/0/23]eth-trunk 0
Info: This operation may take a few seconds. Please wait for a moment...done.
[LSW2-GigabitEthernet0/0/23]int g0/0/24
[LSW2-GigabitEthernet0/0/24]e
[LSW2-GigabitEthernet0/0/24]eth-trunk 0
三、创建trunk干道
LSW1
[LSW1]port-group group-member GigabitEthernet 0/0/2 to GigabitEthernet 0/0/3 Eth-Trunk 0 //将接口合并为组,统一操作,更快捷
[LSW1-port-group]po
[LSW1-port-group]port link-t
[LSW1-port-group]port link-type t
[LSW1-port-group]port link-type trunk //自动添加接口类型到该组下的接口
[LSW1-GigabitEthernet0/0/2]port link-type trunk
[LSW1-GigabitEthernet0/0/3]port link-type trunk
[LSW1-Eth-Trunk0]port link-type trunk
[LSW1-port-group]por
[LSW1-port-group]port t
[LSW1-port-group]port trunk al
[LSW1-port-group]port trunk allow-pass v
[LSW1-port-group]port trunk allow-pass vlan 2
[LSW1-GigabitEthernet0/0/2]port trunk allow-pass vlan 2
[LSW1-GigabitEthernet0/0/3]port trunk allow-pass vlan 2
[LSW1-Eth-Trunk0]port trunk allow-pass vlan 2
LSW2
[LSW2]port-group group-member GigabitEthernet 0/0/2 to GigabitEthernet 0/0/3 Eth-Trunk 0
[LSW2-port-group]port link-t
[LSW2-port-group]port link-type t
[LSW2-port-group]port link-type trunk
[LSW2-GigabitEthernet0/0/2]port link-type trunk
[LSW2-GigabitEthernet0/0/3]port link-type trunk
[LSW2-Eth-Trunk0]port link-type trunk
[LSW2-port-group]port tran
[LSW2-port-group]port trun
[LSW2-port-group]port trunk al
[LSW2-port-group]port trunk allow-pass v
[LSW2-port-group]port trunk allow-pass vlan 2
[LSW2-GigabitEthernet0/0/2]port trunk allow-pass vlan 2
[LSW2-GigabitEthernet0/0/3]port trunk allow-pass vlan 2
[LSW2-Eth-Trunk0]port trunk allow-pass vlan 2
LSW3
[LSW3]port-group group-member GigabitEthernet 0/0/1 to GigabitEthernet 0/0/2
[LSW3-port-group]port link-t
[LSW3-port-group]port link-type t
[LSW3-port-group]port link-type trunk
[LSW3-GigabitEthernet0/0/1]port link-type trunk
[LSW3-GigabitEthernet0/0/2]port link-type trunk
[LSW3-port-group]port t
[LSW3-port-group]port trunk al
[LSW3-port-group]port trunk allow-pass v
[LSW3-port-group]port trunk allow-pass vlan 2
[LSW3-GigabitEthernet0/0/1]port trunk allow-pass vlan 2
[LSW3-GigabitEthernet0/0/2]port trunk allow-pass vlan 2
LSW4
[LSW4]port-group group-member GigabitEthernet 0/0/1 to GigabitEthernet 0/0/2
[LSW4-port-group]port l
[LSW4-port-group]port link-t
[LSW4-port-group]port link-type t
[LSW4-port-group]port link-type trunk
[LSW4-GigabitEthernet0/0/1]port link-type trunk
[LSW4-GigabitEthernet0/0/2]port link-type trunk
[LSW4-port-group]por
[LSW4-port-group]port t
[LSW4-port-group]port trunk al
[LSW4-port-group]port trunk allow-pass v
[LSW4-port-group]port trunk allow-pass vlan 2
[LSW4-GigabitEthernet0/0/1]port trunk allow-pass vlan 2
[LSW4-GigabitEthernet0/0/2]port trunk allow-pass vlan 2
四、VLAN的创建及接口划入
1、VLAN创建
LSW1
[LSW1]vlan 2
[LSW1-vlan2]
// 默认拥有vlan 1 且接口全为trunk
LSW2 :[LSW2]vlan 2
LSW3 :[LSW3]vlan 2
LSW4 :[LSW4]vlan 2
2、接口划入
LSW3
[LSW3]int e0/0/2 //连接PC2接口
[LSW3-Ethernet0/0/2]por
[LSW3-Ethernet0/0/2]port link
[LSW3-Ethernet0/0/2]port link-t
[LSW3-Ethernet0/0/2]port link-type ac
[LSW3-Ethernet0/0/2]port link-type access
[LSW3-Ethernet0/0/2]por
[LSW3-Ethernet0/0/2]port de
[LSW3-Ethernet0/0/2]port default vlan 2
LSW4
[LSW4]int e0/0/2 //连接PC4接口
[LSW4-Ethernet0/0/2]port lin
[LSW4-Ethernet0/0/2]port link-t
[LSW4-Ethernet0/0/2]port link-type a
[LSW4-Ethernet0/0/2]port link-type access
[LSW4-Ethernet0/0/2]port de
[LSW4-Ethernet0/0/2]port default v
[LSW4-Ethernet0/0/2]port default vlan 2
五、STP生成树协议配置
1、配置STP
LSW1
[LSW1]stp mode mstp
[LSW1]stp en
[LSW1]stp enable //开启stp
[LSW1]stp re
[LSW1]stp region-configuration
[LSW1-mst-region]re
[LSW1-mst-region]region-name a //创建域名
[LSW1-mst-region]in
[LSW1-mst-region]instance 1 vl
[LSW1-mst-region]instance 1 vlan 1
[LSW1-mst-region]instance 2 vlan 2
[LSW1-mst-region]ac
[LSW1-mst-region]active re
[LSW1-mst-region]active region-configuration //激活配置
Info: This operation may take a few seconds. Please wait for a moment...done.
[LSW1-mst-region]display stp b
[LSW1-mst-region]display stp brief //查看生成树列表
MSTID Port Role STP State Protection
0 GigabitEthernet0/0/1 DESI DISCARDING NONE
0 GigabitEthernet0/0/2 DESI DISCARDING NONE
0 GigabitEthernet0/0/3 DESI DISCARDING NONE
0 Eth-Trunk0 ROOT FORWARDING NONE
1 GigabitEthernet0/0/1 DESI DISCARDING NONE
1 GigabitEthernet0/0/2 DESI DISCARDING NONE
1 GigabitEthernet0/0/3 DESI DISCARDING NONE
1 Eth-Trunk0 MAST FORWARDING NONE
2 GigabitEthernet0/0/2 DESI DISCARDING NONE
2 GigabitEthernet0/0/3 DESI DISCARDING NONE
2 Eth-Trunk0 MAST FORWARDING NONE
LSW2、LSW3、LSW4做出与LSW1统一配置----命令同LSW1
//如下命令直接Ctrl+c Ctrl+v 即可
stp mode mstp
stp enable
stp region-configuration
region-name a
instance 1 vlan 1
instance 2 vlan 2
active region-configuration
2、组1、组2互备
LSW1
[LSW1]stp instance 1 root primary //成为组1的主根
[LSW1]stp instance 2 root secondary //成为组2的备份
LSW2
[LSW2]stp instance 1 root secondary //成为组1的备份
[LSW2]stp instance 2 root primary //成为组2的主根
六、在LSW1与LSW2上配置SVI
LSW1
[LSW1]interface vlan 1
[LSW1-Vlanif1]ip ad
[LSW1-Vlanif1]ip address 172.16.1.1 25
[LSW1-Vlanif1]int vlan 2
[LSW1-Vlanif2]ip ad
[LSW1-Vlanif2]ip address 172.16.1.129 25
LSW2
[LSW2]int vlan 1
[LSW2-Vlanif1]ip ad
[LSW2-Vlanif1]ip address 172.16.1.2 25
[LSW2-Vlanif1]int vlan 2
[LSW2-Vlanif2]ip ad
[LSW2-Vlanif2]ip address 172.16.1.130 25
- 可见LSW1与LSW2之间的SVI已通
七、VRRP启用
LSW1
[LSW1]int vlan 1
[LSW1-Vlanif1]vrrp vrid 1 vir
[LSW1-Vlanif1]vrrp vrid 1 virtual-ip 172.16.1.126
[LSW1-Vlanif1]vrrp vrid 1 priority 130 //修改优先级
[LSW1-Vlanif1]vrrp vrid 1 track interface GigabitEthernet 0/0/1 reduced 30 //上行链路追踪
[LSW1-Vlanif1]int vlan 2
[LSW1-Vlanif2]vrrp vrid 1 virtual-ip 172.16.1.254 //充当备份
LSW2
[LSW2]int vlan 1
[LSW2-Vlanif1]vrrp vrid 1 virtual-ip 172.16.1.126
[LSW2-Vlanif1]int vlan 2
[LSW2-Vlanif2]vrrp vrid 1 virtual-ip 172.16.1.254
[LSW2-Vlanif2]vrrp vrid 1 priority 120
[LSW2-Vlanif2]vrrp vrid 1 track interface GigabitEthernet 0/0/1 reduced 30
八、启用DHCP
LSW1
[LSW1]dhcp enable
[LSW1]ip pool v1
[LSW1-ip-pool-v1]network 172.16.1.0 mask 25
[LSW1-ip-pool-v1]gateway-list 172.16.1.126
[LSW1-ip-pool-v1]dns-list 144.144.144.144 8.8.8.8
[LSW1]ip pool v2
[LSW1-ip-pool-v2]network 172.16.1.128 mask 25
[LSW1-ip-pool-v2]gateway-list 172.16.1.254
[LSW1-ip-pool-v2]dns-list 144.144.144.144 8.8.8.8
[LSW1]int vlan 1
[LSW1-Vlanif1]dhcp select global
[LSW1-Vlanif1]int vlan2
[LSW1-Vlanif2]dhcp select global
LSW2
//命令与LSW1无异,略
- DHCP启用成功
九、配置骨干IP
LSW1
[LSW1]vlan 10 //创建Vlan10
[LSW1]interface g0/0/1
[LSW1-GigabitEthernet0/0/1]port link-type access
[LSW1-GigabitEthernet0/0/1]port default vlan 10
[LSW1]int vlan 10
[LSW1-Vlanif10]ip address 172.16.0.1 30
LSW2
[LSW2-vlan10]int vlan 10
[LSW2-Vlanif10]ip ad
[LSW2-Vlanif10]ip address 172.16.0.5 30
[LSW2-Vlanif10]int g0/0/1
[LSW2-GigabitEthernet0/0/1]p
[LSW2-GigabitEthernet0/0/1]port lin
[LSW2-GigabitEthernet0/0/1]port link-t
[LSW2-GigabitEthernet0/0/1]port link-type a
[LSW2-GigabitEthernet0/0/1]port link-type access
[LSW2-GigabitEthernet0/0/1]p
[LSW2-GigabitEthernet0/0/1]port de
[LSW2-GigabitEthernet0/0/1]port default vlan 10
R1
[R1]int g0/0/0
[R1-GigabitEthernet0/0/0]ip address 172.16.0.2 30
[R1-GigabitEthernet0/0/0]int g0/0/2
[R1-GigabitEthernet0/0/2]ip address 172.16.0.6 30
[R1-GigabitEthernet0/0/2]int g0/0/1
[R1-GigabitEthernet0/0/1]ip address 12.1.1.1 24
//
[R1]display ip routing-table
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Routing Tables: Public
Destinations : 13 Routes : 13
Destination/Mask Proto Pre Cost Flags NextHop Interface
12.1.1.0/24 Direct 0 0 D 12.1.1.1 GigabitEthernet0/0/1
12.1.1.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/0/1
12.1.1.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/0/1
127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0
127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0
127.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0
172.16.0.0/30 Direct 0 0 D 172.16.0.2 GigabitEthernet0/0/0
172.16.0.2/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/0/0
172.16.0.3/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/0/0
172.16.0.4/30 Direct 0 0 D 172.16.0.6 GigabitEthernet0/0/2
172.16.0.6/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/0/2
172.16.0.7/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/0/2
255.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0
R2
[R2]int lo0
[R2-LoopBack0]ip address 1.1.1.1 24
[R2-LoopBack0]int g0/0/0
[R2-GigabitEthernet0/0/0]ip address 12.1.1.2 24
十、OPSF宣告
R1
[R1]ospf 1 router-id 1.1.1.1
[R1-ospf-1]area 0
[R1-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.0.255
LSW1
[LSW1]ospf 1 router-id 1.1.1.2
[LSW1-ospf-1]area 0
[LSW1-ospf-1-area-0.0.0.0]network 172.16.0.1 0.0.0.0
[LSW1-ospf-1-area-0.0.0.0]q
[LSW1-ospf-1]area 1
[LSW1-ospf-1-area-0.0.0.1]network 172.16.1.1 0.0.0.0
[LSW1-ospf-1-area-0.0.0.1]network 172.16.1.129 0.0.0.0
LSW2
[LSW2]ospf 1 router-id 2.2.2.2
[LSW2-ospf-1]area 0
[LSW2-ospf-1-area-0.0.0.0]network 172.16.0.5 0.0.0.0
[LSW2-ospf-1-area-0.0.0.0]q
[LSW2-ospf-1]area 1
[LSW2-ospf-1-area-0.0.0.1]network 172.16.1.2 0.0.0.0
[R1]display ip routing-table protocol ospf
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Public routing table : OSPF
Destinations : 2 Routes : 4
OSPF routing table status : <Active>
Destinations : 2 Routes : 4
Destination/Mask Proto Pre Cost Flags NextHop Interface
172.16.1.0/25 OSPF 10 2 D 172.16.0.1 GigabitEthernet0/0/0
OSPF 10 2 D 172.16.0.5 GigabitEthernet0/0/2
172.16.1.128/25 OSPF 10 2 D 172.16.0.1 GigabitEthernet0/0/0
OSPF 10 2 D 172.16.0.5 GigabitEthernet0/0/2
OSPF routing table status : <Inactive>
Destinations : 0 Routes : 0
//可见R1已学到下方两个网段
//汇总路由
[LSW1-ospf-1-area-0.0.0.1]abr-summary 172.16.1.0 255.255.255.0
[LSW2-ospf-1-area-0.0.0.1]abr-summary 172.16.1.0 255.255.255.0
//效果如下
[R1]display ip routing-table protocol ospf
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Public routing table : OSPF
Destinations : 1 Routes : 1
OSPF routing table status : <Active>
Destinations : 1 Routes : 1
Destination/Mask Proto Pre Cost Flags NextHop Interface
172.16.1.0/24 OSPF 10 2 D 172.16.0.1 GigabitEthernet0/0/0
OSPF 10 2 D 172.16.0.5 GigabitEthernet0/0/2
OSPF routing table status : <Inactive>
Destinations : 0 Routes : 0
[R1]
十一、配置LSW1、LSW2沉默接口
LSW1
[LSW1]ospf 1
[LSW1-ospf-1]silent-interface all //沉默所有接口
[LSW1-ospf-1]undo silent-interface GigabitEthernet 0/0/1 //打开需要的
[LSW1-ospf-1]undo silent-interface Eth-Trunk 0
[LSW1-ospf-1]undo silent-interface Vlanif 1
[LSW1-ospf-1]undo silent-interface Vlanif 10
LSW2
[LSW2-ospf-1]silent-interface ALL
[LSW2-ospf-1]undo silent-interface GigabitEthernet 0/0/1
[LSW2-ospf-1]undo silent-interface Eth-Trunk 0
[LSW2-ospf-1]undo silent-interface Vlanif 1
[LSW2-ospf-1]undo silent-interface Vlanif 10
十二、缺省路由及NAT配置
R1
[R1]ip route-static 0.0.0.0 0.0.0.0 12.1.1.2
[R1-ospf-1]default-route-advertise
[R1-ospf-1]acl 2000
[R1-acl-basic-2000]rule permit source 172.16.0.0 0.0.255.255
[R1-acl-basic-2000]int g0/0/1
[R1-GigabitEthernet0/0/1]nat outbound 2000
十三、验证
- 本实验 -完