HCIP-三层网络架构实验

HCIP-三层网络架构实验

实验要求具体如下
1、ISP公有地址,有环回;
2、内网IP地址172.16.0.0/16,合理分配;
3、SW1与SW2之间互为备份;
4、VLAN/Eth-Trunk/STP/SVI/VRRP技术均使用;
5、所有PC均通过DHCP自动获取IP地址;
6、PC1/3在Vlan1,PC2/4在Vlan2。
在这里插入图片描述

一、拓扑搭建

在这里插入图片描述

二、创建通道接口

LSW1

[LSW1]interface Eth-Trunk 0
[LSW1-Eth-Trunk0]int g0/0/23
[LSW1-GigabitEthernet0/0/23]e	
[LSW1-GigabitEthernet0/0/23]eth-trunk 0
Info: This operation may take a few seconds. Please wait for a moment...done.
[LSW1-GigabitEthernet0/0/23]int g0/0/24
[LSW1-GigabitEthernet0/0/24]eth-trunk 0

LSW2

[LSW2]interface Eth-Trunk 0
[LSW2-Eth-Trunk0]int g0/0/23
[LSW2-GigabitEthernet0/0/23]e	
[LSW2-GigabitEthernet0/0/23]eth-trunk 0
Info: This operation may take a few seconds. Please wait for a moment...done.
[LSW2-GigabitEthernet0/0/23]int g0/0/24
[LSW2-GigabitEthernet0/0/24]e	
[LSW2-GigabitEthernet0/0/24]eth-trunk 0

三、创建trunk干道

LSW1

[LSW1]port-group  group-member GigabitEthernet 0/0/2 to GigabitEthernet 0/0/3 Eth-Trunk 0	//将接口合并为组,统一操作,更快捷
[LSW1-port-group]po	
[LSW1-port-group]port link-t	
[LSW1-port-group]port link-type t	
[LSW1-port-group]port link-type trunk //自动添加接口类型到该组下的接口
[LSW1-GigabitEthernet0/0/2]port link-type trunk 
[LSW1-GigabitEthernet0/0/3]port link-type trunk 
[LSW1-Eth-Trunk0]port link-type trunk 
[LSW1-port-group]por	
[LSW1-port-group]port t	
[LSW1-port-group]port trunk al	
[LSW1-port-group]port trunk allow-pass v	
[LSW1-port-group]port trunk allow-pass vlan 2 
[LSW1-GigabitEthernet0/0/2]port trunk allow-pass vlan 2 
[LSW1-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 
[LSW1-Eth-Trunk0]port trunk allow-pass vlan 2 

LSW2

[LSW2]port-group group-member GigabitEthernet 0/0/2 to GigabitEthernet 0/0/3 Eth-Trunk 0
[LSW2-port-group]port link-t	
[LSW2-port-group]port link-type t	
[LSW2-port-group]port link-type trunk 
[LSW2-GigabitEthernet0/0/2]port link-type trunk 
[LSW2-GigabitEthernet0/0/3]port link-type trunk 
[LSW2-Eth-Trunk0]port link-type trunk 
[LSW2-port-group]port tran	
[LSW2-port-group]port trun	
[LSW2-port-group]port trunk al	
[LSW2-port-group]port trunk allow-pass v	
[LSW2-port-group]port trunk allow-pass vlan 2 
[LSW2-GigabitEthernet0/0/2]port trunk allow-pass vlan 2 
[LSW2-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 
[LSW2-Eth-Trunk0]port trunk allow-pass vlan 2 

LSW3

[LSW3]port-group group-member GigabitEthernet 0/0/1 to GigabitEthernet 0/0/2
[LSW3-port-group]port link-t	
[LSW3-port-group]port link-type t	
[LSW3-port-group]port link-type trunk 
[LSW3-GigabitEthernet0/0/1]port link-type trunk 
[LSW3-GigabitEthernet0/0/2]port link-type trunk 
[LSW3-port-group]port t	
[LSW3-port-group]port trunk al	
[LSW3-port-group]port trunk allow-pass v	
[LSW3-port-group]port trunk allow-pass vlan 2
[LSW3-GigabitEthernet0/0/1]port trunk allow-pass vlan 2
[LSW3-GigabitEthernet0/0/2]port trunk allow-pass vlan 2

LSW4

[LSW4]port-group group-member GigabitEthernet 0/0/1 to GigabitEthernet 0/0/2	
[LSW4-port-group]port l	
[LSW4-port-group]port link-t	
[LSW4-port-group]port link-type t	
[LSW4-port-group]port link-type trunk 
[LSW4-GigabitEthernet0/0/1]port link-type trunk 
[LSW4-GigabitEthernet0/0/2]port link-type trunk 
[LSW4-port-group]por	
[LSW4-port-group]port t	
[LSW4-port-group]port trunk al		
[LSW4-port-group]port trunk allow-pass v	
[LSW4-port-group]port trunk allow-pass vlan 2
[LSW4-GigabitEthernet0/0/1]port trunk allow-pass vlan 2
[LSW4-GigabitEthernet0/0/2]port trunk allow-pass vlan 2

四、VLAN的创建及接口划入

1、VLAN创建

LSW1

[LSW1]vlan 2
[LSW1-vlan2]
// 默认拥有vlan 1 且接口全为trunk

在这里插入图片描述

LSW2 :[LSW2]vlan 2

LSW3 :[LSW3]vlan 2

LSW4 :[LSW4]vlan 2

2、接口划入

LSW3

[LSW3]int e0/0/2 //连接PC2接口
[LSW3-Ethernet0/0/2]por	
[LSW3-Ethernet0/0/2]port link	
[LSW3-Ethernet0/0/2]port link-t	
[LSW3-Ethernet0/0/2]port link-type ac	
[LSW3-Ethernet0/0/2]port link-type access 
[LSW3-Ethernet0/0/2]por	
[LSW3-Ethernet0/0/2]port de	
[LSW3-Ethernet0/0/2]port default vlan 2

LSW4

[LSW4]int e0/0/2	//连接PC4接口
[LSW4-Ethernet0/0/2]port lin	
[LSW4-Ethernet0/0/2]port link-t	
[LSW4-Ethernet0/0/2]port link-type a	
[LSW4-Ethernet0/0/2]port link-type access 
[LSW4-Ethernet0/0/2]port de	
[LSW4-Ethernet0/0/2]port default v	
[LSW4-Ethernet0/0/2]port default vlan 2

五、STP生成树协议配置

1、配置STP

LSW1

[LSW1]stp mode mstp 
[LSW1]stp en	
[LSW1]stp enable //开启stp
[LSW1]stp re	
[LSW1]stp region-configuration 
[LSW1-mst-region]re	
[LSW1-mst-region]region-name a	//创建域名
[LSW1-mst-region]in	
[LSW1-mst-region]instance 1 vl	
[LSW1-mst-region]instance 1 vlan 1
[LSW1-mst-region]instance 2 vlan 2
[LSW1-mst-region]ac	
[LSW1-mst-region]active re	
[LSW1-mst-region]active region-configuration //激活配置
Info: This operation may take a few seconds. Please wait for a moment...done.	
[LSW1-mst-region]display stp b	
[LSW1-mst-region]display stp brief //查看生成树列表
 MSTID  Port                        Role  STP State     Protection
   0    GigabitEthernet0/0/1        DESI  DISCARDING      NONE
   0    GigabitEthernet0/0/2        DESI  DISCARDING      NONE
   0    GigabitEthernet0/0/3        DESI  DISCARDING      NONE
   0    Eth-Trunk0                  ROOT  FORWARDING      NONE
   1    GigabitEthernet0/0/1        DESI  DISCARDING      NONE
   1    GigabitEthernet0/0/2        DESI  DISCARDING      NONE
   1    GigabitEthernet0/0/3        DESI  DISCARDING      NONE
   1    Eth-Trunk0                  MAST  FORWARDING      NONE
   2    GigabitEthernet0/0/2        DESI  DISCARDING      NONE
   2    GigabitEthernet0/0/3        DESI  DISCARDING      NONE
   2    Eth-Trunk0                  MAST  FORWARDING      NONE

LSW2、LSW3、LSW4做出与LSW1统一配置----命令同LSW1

//如下命令直接Ctrl+c Ctrl+v 即可
stp mode mstp 
stp enable 
stp region-configuration 
region-name a		
instance 1 vlan 1
instance 2 vlan 2	
active region-configuration 
2、组1、组2互备

LSW1

[LSW1]stp instance 1 root primary 	//成为组1的主根
[LSW1]stp instance 2 root secondary	//成为组2的备份

LSW2

[LSW2]stp instance 1 root secondary 	//成为组1的备份
[LSW2]stp instance 2 root primary 		//成为组2的主根

六、在LSW1与LSW2上配置SVI

LSW1

[LSW1]interface vlan 1
[LSW1-Vlanif1]ip ad	
[LSW1-Vlanif1]ip address 172.16.1.1 25
[LSW1-Vlanif1]int vlan 2
[LSW1-Vlanif2]ip ad	
[LSW1-Vlanif2]ip address 172.16.1.129 25

LSW2

[LSW2]int vlan 1
[LSW2-Vlanif1]ip ad	
[LSW2-Vlanif1]ip address 172.16.1.2 25
[LSW2-Vlanif1]int vlan 2
[LSW2-Vlanif2]ip ad	
[LSW2-Vlanif2]ip address 172.16.1.130 25

在这里插入图片描述

  • 可见LSW1与LSW2之间的SVI已通

七、VRRP启用

LSW1

[LSW1]int vlan 1
[LSW1-Vlanif1]vrrp vrid 1 vir	
[LSW1-Vlanif1]vrrp vrid 1 virtual-ip 172.16.1.126
[LSW1-Vlanif1]vrrp vrid 1 priority 130	//修改优先级
[LSW1-Vlanif1]vrrp vrid 1 track interface GigabitEthernet 0/0/1 reduced 30	//上行链路追踪
[LSW1-Vlanif1]int vlan 2
[LSW1-Vlanif2]vrrp vrid 1 virtual-ip 172.16.1.254	//充当备份

LSW2

[LSW2]int vlan 1
[LSW2-Vlanif1]vrrp vrid 1 virtual-ip 172.16.1.126
[LSW2-Vlanif1]int vlan 2
[LSW2-Vlanif2]vrrp vrid 1 virtual-ip 172.16.1.254
[LSW2-Vlanif2]vrrp vrid 1 priority 120
[LSW2-Vlanif2]vrrp vrid 1 track interface GigabitEthernet 0/0/1 reduced 30

在这里插入图片描述

八、启用DHCP

LSW1

[LSW1]dhcp enable 
[LSW1]ip pool v1
[LSW1-ip-pool-v1]network 172.16.1.0 mask 25
[LSW1-ip-pool-v1]gateway-list 172.16.1.126
[LSW1-ip-pool-v1]dns-list  144.144.144.144 8.8.8.8

[LSW1]ip pool v2
[LSW1-ip-pool-v2]network 172.16.1.128 mask 25
[LSW1-ip-pool-v2]gateway-list 172.16.1.254	
[LSW1-ip-pool-v2]dns-list 144.144.144.144 8.8.8.8

[LSW1]int vlan 1
[LSW1-Vlanif1]dhcp select global 
[LSW1-Vlanif1]int vlan2
[LSW1-Vlanif2]dhcp select global 

LSW2

//命令与LSW1无异,略

在这里插入图片描述

  • DHCP启用成功

九、配置骨干IP

LSW1

[LSW1]vlan 10 //创建Vlan10

[LSW1]interface g0/0/1
[LSW1-GigabitEthernet0/0/1]port link-type access 
[LSW1-GigabitEthernet0/0/1]port default vlan 10
[LSW1]int vlan 10
[LSW1-Vlanif10]ip address 172.16.0.1 30

LSW2

[LSW2-vlan10]int vlan 10
[LSW2-Vlanif10]ip ad	
[LSW2-Vlanif10]ip address 172.16.0.5 30
[LSW2-Vlanif10]int g0/0/1
[LSW2-GigabitEthernet0/0/1]p	
[LSW2-GigabitEthernet0/0/1]port lin	
[LSW2-GigabitEthernet0/0/1]port link-t	
[LSW2-GigabitEthernet0/0/1]port link-type a	
[LSW2-GigabitEthernet0/0/1]port link-type access 
[LSW2-GigabitEthernet0/0/1]p	
[LSW2-GigabitEthernet0/0/1]port de	
[LSW2-GigabitEthernet0/0/1]port default vlan 10

R1

[R1]int g0/0/0
[R1-GigabitEthernet0/0/0]ip address 172.16.0.2 30

[R1-GigabitEthernet0/0/0]int g0/0/2
[R1-GigabitEthernet0/0/2]ip address 172.16.0.6 30

[R1-GigabitEthernet0/0/2]int g0/0/1
[R1-GigabitEthernet0/0/1]ip address 12.1.1.1 24
//
[R1]display ip routing-table 
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Routing Tables: Public
         Destinations : 13       Routes : 13       

Destination/Mask    Proto   Pre  Cost      Flags NextHop         Interface

       12.1.1.0/24  Direct  0    0           D   12.1.1.1        GigabitEthernet0/0/1
       12.1.1.1/32  Direct  0    0           D   127.0.0.1       GigabitEthernet0/0/1
     12.1.1.255/32  Direct  0    0           D   127.0.0.1       GigabitEthernet0/0/1
      127.0.0.0/8   Direct  0    0           D   127.0.0.1       InLoopBack0
      127.0.0.1/32  Direct  0    0           D   127.0.0.1       InLoopBack0
127.255.255.255/32  Direct  0    0           D   127.0.0.1       InLoopBack0
     172.16.0.0/30  Direct  0    0           D   172.16.0.2      GigabitEthernet0/0/0
     172.16.0.2/32  Direct  0    0           D   127.0.0.1       GigabitEthernet0/0/0
     172.16.0.3/32  Direct  0    0           D   127.0.0.1       GigabitEthernet0/0/0
     172.16.0.4/30  Direct  0    0           D   172.16.0.6      GigabitEthernet0/0/2
     172.16.0.6/32  Direct  0    0           D   127.0.0.1       GigabitEthernet0/0/2
     172.16.0.7/32  Direct  0    0           D   127.0.0.1       GigabitEthernet0/0/2
255.255.255.255/32  Direct  0    0           D   127.0.0.1       InLoopBack0

R2

[R2]int lo0
[R2-LoopBack0]ip address 1.1.1.1 24

[R2-LoopBack0]int g0/0/0
[R2-GigabitEthernet0/0/0]ip address 12.1.1.2 24

十、OPSF宣告

R1

[R1]ospf 1 router-id 1.1.1.1
[R1-ospf-1]area 0
[R1-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.0.255

LSW1

[LSW1]ospf 1 router-id 1.1.1.2
[LSW1-ospf-1]area 0
[LSW1-ospf-1-area-0.0.0.0]network 172.16.0.1 0.0.0.0
[LSW1-ospf-1-area-0.0.0.0]q
[LSW1-ospf-1]area 1
[LSW1-ospf-1-area-0.0.0.1]network 172.16.1.1 0.0.0.0
[LSW1-ospf-1-area-0.0.0.1]network 172.16.1.129 0.0.0.0

LSW2

[LSW2]ospf 1 router-id 2.2.2.2
[LSW2-ospf-1]area 0
[LSW2-ospf-1-area-0.0.0.0]network 172.16.0.5 0.0.0.0
[LSW2-ospf-1-area-0.0.0.0]q
[LSW2-ospf-1]area 1
[LSW2-ospf-1-area-0.0.0.1]network 172.16.1.2 0.0.0.0
[R1]display ip routing-table protocol ospf 
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Public routing table : OSPF
         Destinations : 2        Routes : 4        

OSPF routing table status : <Active>
         Destinations : 2        Routes : 4

Destination/Mask    Proto   Pre  Cost      Flags NextHop         Interface

     172.16.1.0/25  OSPF    10   2           D   172.16.0.1      GigabitEthernet0/0/0
                    OSPF    10   2           D   172.16.0.5      GigabitEthernet0/0/2
   172.16.1.128/25  OSPF    10   2           D   172.16.0.1      GigabitEthernet0/0/0
                    OSPF    10   2           D   172.16.0.5      GigabitEthernet0/0/2

OSPF routing table status : <Inactive>
         Destinations : 0        Routes : 0

//可见R1已学到下方两个网段
//汇总路由

[LSW1-ospf-1-area-0.0.0.1]abr-summary 172.16.1.0 255.255.255.0

[LSW2-ospf-1-area-0.0.0.1]abr-summary 172.16.1.0 255.255.255.0

//效果如下
[R1]display ip routing-table protocol ospf
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Public routing table : OSPF
         Destinations : 1        Routes : 1        

OSPF routing table status : <Active>
         Destinations : 1        Routes : 1

Destination/Mask    Proto   Pre  Cost      Flags NextHop         Interface

     172.16.1.0/24  OSPF    10   2           D   172.16.0.1      GigabitEthernet0/0/0
					OSPF	10	 2			 D	 172.16.0.5 	 GigabitEthernet0/0/2
OSPF routing table status : <Inactive>
         Destinations : 0        Routes : 0

[R1]

十一、配置LSW1、LSW2沉默接口

LSW1

[LSW1]ospf 1
[LSW1-ospf-1]silent-interface all	//沉默所有接口
[LSW1-ospf-1]undo silent-interface GigabitEthernet 0/0/1	//打开需要的
[LSW1-ospf-1]undo silent-interface Eth-Trunk 0	
[LSW1-ospf-1]undo silent-interface Vlanif 1
[LSW1-ospf-1]undo silent-interface Vlanif 10

LSW2


[LSW2-ospf-1]silent-interface ALL
[LSW2-ospf-1]undo silent-interface GigabitEthernet 0/0/1
[LSW2-ospf-1]undo silent-interface Eth-Trunk 0
[LSW2-ospf-1]undo silent-interface Vlanif 1
[LSW2-ospf-1]undo silent-interface Vlanif 10

十二、缺省路由及NAT配置

R1

[R1]ip route-static 0.0.0.0 0.0.0.0 12.1.1.2
[R1-ospf-1]default-route-advertise
[R1-ospf-1]acl 2000
[R1-acl-basic-2000]rule permit source 172.16.0.0  0.0.255.255
[R1-acl-basic-2000]int g0/0/1
[R1-GigabitEthernet0/0/1]nat outbound 2000

十三、验证

在这里插入图片描述

  • 本实验 -完
  • 0
    点赞
  • 2
    收藏
    觉得还不错? 一键收藏
  • 0
    评论

“相关推荐”对你有帮助么?

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值