IP 相关问题13 --- 企业网三层架构

 实验要求：

1.内网IP地址172.16.0.0/16合理分配
2.SW1/2之间互为备份
3.VRRPSTPNLAN/TRUNK均使用
4.所有PC通过DHCP获取ip地址

 

配置汇聚层

连接核心层

[sw1]vlan 99
[sw1-vlan99]quit
[sw1]inter g0/0/5
[sw1-GigabitEthernet0/0/5]port link-type access 
[sw1-GigabitEthernet0/0/5]port default vlan 99
[sw1-GigabitEthernet0/0/5]quit
[sw1]interface vlanif 99
[sw1-Vlanif99]ip add 172.16.0.2 30
 
[sw2]vlan 99
[sw2-vlan99]qui
[sw2]inter g0/0/5
[sw2-GigabitEthernet0/0/5]port link-type access 
[sw2-GigabitEthernet0/0/5]port default vlan 99
[sw2-GigabitEthernet0/0/5]qui
[sw2]interface Vlanif 99
[sw2-Vlanif99]ip add 172.16.0.6 30

构建汇聚层之间的通道

[sw1]interface Eth-Trunk 0
[sw1-Eth-Trunk0]qui
[sw1]interface g0/0/4
[sw1-GigabitEthernet0/0/4]eth-trunk 0
[sw1-GigabitEthernet0/0/4]qui
[sw1]inter g0/0/3
[sw1-GigabitEthernet0/0/3]eth-trunk 0
 
[sw2]interface Eth-Trunk 0
[sw2-Eth-Trunk0]qui
[sw2]inter g0/0/4
[sw2-GigabitEthernet0/0/4]eth-trunk 0
[sw2-GigabitEthernet0/0/4]inter g0/0/3
[sw2-GigabitEthernet0/0/3]eth-trunk 0

在汇聚层创建SVI接口

[sw1]vlan batch 2 to 3
[sw1]interface Vlanif 2
[sw1-Vlanif2]ip add 172.16.1.1 24
[sw1-Vlanif2]qui
[sw1]interface Vlanif 3
[sw1-Vlanif3]ip add 172.16.2.1 24
 
[sw2]vlan batch 2 to 3
[sw2]interface Vlanif 2
[sw2-Vlanif2]ip add 172.16.1.2 24
[sw2-Vlanif2]qui
[sw2]interface Vlanif 3
[sw2-Vlanif3]ip add 172.16.2.2 24

[sw1]inter Eth-Trunk 0
[sw1-Eth-Trunk0]port link-type trunk 
[sw1-Eth-Trunk0]port trunk allow-pass vlan 2 to 3
 
[sw2]inter Eth-Trunk 0
[sw2-Eth-Trunk0]port link-type trunk 
[sw2-Eth-Trunk0]port trunk allow-pass vlan 2 to 3

在汇聚层配置MSTP生成树协议

[sw1]stp region-configuration #配置 Spanning Tree Protocol (STP) 区域参数
[sw1-mst-region]region-name a #指定区域名，所有设备应在一个域内
[sw1-mst-region]instance 2 vlan 2 #在域内创建组，并且将vlan2划分到该组内
[sw1-mst-region]instance 3 vlan 3
[sw1-mst-region]active region-configuration #激活区域配
[sw1-mst-region]quit
[sw1]stp instance 2 root primary #本交换机将在组2中扮演主根的角色
[sw1]stp instance 3 root secondary #本交换机将在组3中扮演备份主根的角色
 
[sw2]stp region-configuration 
[sw2-mst-region]region-name a
[sw2-mst-region]instance 2 vlan 2
[sw2-mst-region]instance 3 vlan 3
[sw2-mst-region]active region-configuration 
[sw2-mst-region]quit
[sw2]stp instance 2 root secondary 
[sw2]stp instance 3 root primary

[sw3]vlan batch 2 to 3
[sw3-mst-region]stp region-configuration 
[sw3-mst-region]region-name a
[sw3-mst-region]instance 2 vlan 2
[sw3-mst-region]instance 3 vlan 3
[sw3-mst-region]active region-configuration
 
[sw4]vlan batch 2 to 3
[sw4]stp region-configuration 
[sw4-mst-region]region-name a
[sw4-mst-region]instance 2 vlan 2
[sw4-mst-region]instance 3 vlan 3
[sw4-mst-region]active region-configuration

联通汇聚层和接入层

[sw1]inter g0/0/1
[sw1-GigabitEthernet0/0/1]port link-type trunk 
[sw1-GigabitEthernet0/0/1]port trunk allow-pass vlan 3
[sw1]inter g0/0/2	
[sw1-GigabitEthernet0/0/2]port link-type trunk 
[sw1-GigabitEthernet0/0/2]port trunk allow-pass vlan 2
 
[sw2]inter g0/0/1
[sw2-GigabitEthernet0/0/1]port link-type trunk 
[sw2-GigabitEthernet0/0/1]port trunk allow-pass vlan 2
[sw2-GigabitEthernet0/0/1]inter g0/0/2
[sw2-GigabitEthernet0/0/2]port link-type trunk 
[sw2-GigabitEthernet0/0/2]port trunk allow-pass vlan 3
 
[sw3]inter g0/0/2
[sw3-GigabitEthernet0/0/2]port link-type trunk 
[sw3-GigabitEthernet0/0/2]port trunk allow-pass vlan 2
[sw3-GigabitEthernet0/0/2]inter g0/0/1
[sw3-GigabitEthernet0/0/1]port link-type trunk 
[sw3-GigabitEthernet0/0/1]port trunk allow-pass vlan 2
 
[sw4]inter g0/0/1
[sw4-GigabitEthernet0/0/1]port link-type trunk 
[sw4-GigabitEthernet0/0/1]port trunk allow-pass vlan 3
[sw4-GigabitEthernet0/0/1]inter g0/0/2
[sw4-GigabitEthernet0/0/2]port link-type trunk 
[sw4-GigabitEthernet0/0/2]port trunk allow-pass vlan 3

配置接入层

[sw3]inter g0/0/4
[sw3-GigabitEthernet0/0/4]port link-type access 
[sw3-GigabitEthernet0/0/4]port default vlan 2
[sw3-GigabitEthernet0/0/4]inter g0/0/3
[sw3-GigabitEthernet0/0/3]port link-type access 
[sw3-GigabitEthernet0/0/3]port default vlan 2
 
[sw4]inter g0/0/3
[sw4-GigabitEthernet0/0/3]port link-type access 
[sw4-GigabitEthernet0/0/3]port default vlan 3
[sw4-GigabitEthernet0/0/3]inter g0/0/4
[sw4-GigabitEthernet0/0/4]port default vlan 3

在核心层和汇聚层上运行动态路由协议

[r1]ospf 1 router-id 1.1.1.1
[r1-ospf-1]area 0
[r1-ospf-1-area-0.0.0.0]network 172.16.0.1 0.0.0.0
[r1-ospf-1-area-0.0.0.0]network 172.16.0.5 0.0.0.0

[sw1]ospf 1 router-id 2.2.2.2
[sw1-ospf-1]area 0
[sw1-ospf-1-area-0.0.0.0]network 172.16.1.1 0.0.0.0
[sw1-ospf-1-area-0.0.0.0]network 172.16.2.1 0.0.0.0
[sw1-ospf-1-area-0.0.0.0]network 172.16.0.2 0.0.0.0
 
[sw2]ospf 1 router-id 3.3.3.3
[sw2-ospf-1]area 0
[sw2-ospf-1-area-0.0.0.0]network 172.16.0.6 0.0.0.0
[sw2-ospf-1-area-0.0.0.0]network 172.16.1.2 0.0.0.0
[sw2-ospf-1-area-0.0.0.0]network 172.16.2.2 0.0.0.0

配置网关冗余

[sw1]interface Vlanif 2
[sw1-Vlanif2]vrrp vrid 1 virtual-ip 172.16.1.250 #设定虚拟IP网关地址
[sw1-Vlanif2]vrrp vrid 1 priority 101 #将自己的优先级改大，以确保自己作为hello包的发送方
 
[sw2]interface Vlanif 3
[sw2-Vlanif3]vrrp vrid 1 virtual-ip 172.16.2.250

配置DHCP服务

[sw1]dhcp enable
[sw1-ip-pool-a]network 172.16.1.0 mask 24
[sw1-ip-pool-a]gateway-list 172.16.1.250
[sw1-ip-pool-a]qui
[sw1]ip pool b
[sw1-ip-pool-b]network 172.16.2.0 mask 24
[sw1-ip-pool-b]gateway-list 172.16.2.250
[sw1-Vlanif2]dhcp select global
[sw1-Vlanif2]interface vlanif 3
[sw1-Vlanif3]dhcp select global

配置NAT地址转换实现公网上网

[r1]acl 2000
[r1-acl-basic-2000]rule permit sour	
[r1-acl-basic-2000]rule permit source 172.16.0.0 0.0.255.255
[r1-acl-basic-2000]quit
[r1]inter g0/0/2
[r1-GigabitEthernet0/0/2]nat outbound 2000