一、实验拓扑
二、实验要求
1、内网IP地址使用172.16.0.0/16;
2、SW1和SW2之间互为备份;
3、VRRP/MSTP/VLAN/eth-trunk均使用;
4、所有PC均通过DHCP获取IP地址;
5、ISP只配置IP地址;
6、所有电脑可以正常访问ISP路由器环回
三、实验思路
1、配置路由器IP地址以及ISP
2、创建VLAN,配置汇聚层的三层交换机各个VLAN网关,以及OSPF协议
3、配置链路聚合
4、配置MSTP
5、配置VRRP
6、配置DHCP,下发IP地址
7、配置NAT技术(注意缺省)
四、实验步骤
1、配置路由器IP地址以及ISP
R1:
[Huawei]sy R1
[R1]int g 0/0/0
[R1-GigabitEthernet0/0/0]ip address 12.0.0.1 24
[R1-GigabitEthernet0/0/0]int g 0/0/1
[R1-GigabitEthernet0/0/1]ip address 172.16.0.129 26
[R1-GigabitEthernet0/0/1]int g 0/0/2
[R1-GigabitEthernet0/0/2]ip address 172.16.0.193 26
R2:
[R2]sys ISP
[ISP]int g 0/0/0
[ISP-GigabitEthernet0/0/0]ip address 12.0.0.2 24
[ISP-GigabitEthernet0/0/0]int l 0
[ISP-LoopBack0]ip address 2.2.2.1 24
2、创建VLAN,配置汇聚层的三层交换机各个VLAN网关及接口类型,及OSPF协议
SW1:
[Huawei]sy SW1
[SW1]vlan 10
[SW1-vlan10] vlan 2
[SW1-vlan2]vlan 3
[SW1-vlan3]q
[SW1]int Vlanif 10
[SW1-Vlanif10]ip address 172.16.0.130 26
[SW1-Vlanif10]int vlanif 2
[SW1-Vlanif2]ip address 172.16.0.1 26
[SW1-Vlanif2] int vlanif 3
[SW1-Vlanif3]ip address 172.16.0.65 26
[SW1]int g 0/0/5
[SW1-GigabitEthernet0/0/5]p l a
[SW1-GigabitEthernet0/0/5]port default vlan 10
[SW1]int g 0/0/3
[SW1-GigabitEthernet0/0/3]p l t
[SW1-GigabitEthernet0/0/3]p t a v 2 3
[SW1]int g 0/0/4
[SW1-GigabitEthernet0/0/4]p l t
[SW1-GigabitEthernet0/0/4]p t a v 2 3
OSPF协议:
[SW1]ospf 1 router-id 2.2.2.2
[SW1-ospf-1]area 0
[SW1-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.255.255
SW2:
[Huawei]sy SW2
[SW2]vlan 20
[SW2-vlan20]vlan 2
[SW2-vlan2]vlan 3
[SW2-vlan3]q
[SW2]int vlanif 20
[SW2-Vlanif20]ip address 172.16.0.194 26
[SW2-Vlanif20]int vlanif 2
[SW2-Vlanif2]ip address 172.16.0.2 26
[SW2-Vlanif2]int vlanif 3
[SW2-Vlanif3]ip address 172.16.0.66 26
[SW2]int g 0/0/5
[SW2-GigabitEthernet0/0/5]p l a
[SW2-GigabitEthernet0/0/5]p d v 20
[SW2-GigabitEthernet0/0/5]int g 0/0/3
[SW2-GigabitEthernet0/0/3]p l t
[SW2-GigabitEthernet0/0/3]p t a v 2 3
[SW2]int g 0/0/4
[SW2-GigabitEthernet0/0/4]p l t
[SW2-GigabitEthernet0/0/4]p t a v 2 3
OSPF协议:
[SW2]ospf router-id 3.3.3.3
[SW2-ospf-1]area 0
[SW2-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.255.255
SW3:
[Huawei]SY SW3
[SW3]vlan b 2 3
Info: This operation may take a few seconds. Please wait for a moment...done.
[SW3]int g 0/0/3
[SW3-GigabitEthernet0/0/3]p l t
[SW3-GigabitEthernet0/0/3]p l t
[SW3-GigabitEthernet0/0/3]p t a v
[SW3-GigabitEthernet0/0/3]p t a v 2 3
[SW3-GigabitEthernet0/0/3]int g 0/0/4
[SW3-GigabitEthernet0/0/4]p l t
[SW3-GigabitEthernet0/0/4]p l t
[SW3-GigabitEthernet0/0/4]p t a v 2 3
[SW3-GigabitEthernet0/0/4]int g 0/0/1
[SW3-GigabitEthernet0/0/1]p l a
[SW3-GigabitEthernet0/0/1]p d v 2
[SW3-GigabitEthernet0/0/1]int g 0/0/2
[SW3-GigabitEthernet0/0/2]p l a
[SW3-GigabitEthernet0/0/2]p d v 3
SW4:
[Huawei]sy SW4
[SW4]vlan b 2 3
Info: This operation may take a few seconds. Please wait for a moment...done.
[SW4]int GigabitEthernet 0/0/3
[SW4-GigabitEthernet0/0/3]p l t
[SW4-GigabitEthernet0/0/3]p t a v 2 3
[SW4-GigabitEthernet0/0/3]int GigabitEthernet 0/0/4
[SW4-GigabitEthernet0/0/4]p l t
[SW4-GigabitEthernet0/0/4]p t a v 2 3
[SW4-GigabitEthernet0/0/4]int GigabitEthernet 0/0/1
[SW4-GigabitEthernet0/0/1]p l a
[SW4-GigabitEthernet0/0/1]
[SW4-GigabitEthernet0/0/1]p l a
[SW4-GigabitEthernet0/0/1]p d v 2
[SW4]p l t
[SW4-GigabitEthernet0/0/1]p d v 2
[SW4-GigabitEthernet0/0/1]int g 0/0/2
[SW4-GigabitEthernet0/0/2]p l a
[SW4-GigabitEthernet0/0/2]p d v 3
R1:
[R1]ospf 1 rou
[R1]ospf 1 router-id 1.1.1.1
[R1-ospf-1]area 0
[R1-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.255.255
3、配置链路聚合
SW1:
[SW1]interface Eth-Trunk 0
[SW1-Eth-Trunk0]mode lacp-static
[SW1-Eth-Trunk0]trunkport GigabitEthernet 0/0/1 0/0/2
[SW1-Eth-Trunk0]p l t
[SW1-Eth-Trunk0]p t a v 2 3 10 20
[SW1-Eth-Trunk0]max active-linknumber 2
[SW1-Eth-Trunk0]least active-linknumber 1
[SW1]int g 0/0/1
[SW1-GigabitEthernet0/0/1]lacp priority 100
[SW1-GigabitEthernet0/0/1]int g 0/0/2
[SW1-GigabitEthernet0/0/2]lacp priority 200
SW2:
[SW2]int Eth-Trunk 0
[SW2-Eth-Trunk0]mode lacp-static
[SW2-Eth-Trunk0]trunkport GigabitEthernet 0/0/1 0/0/2
[SW2-Eth-Trunk0]p l t
[SW2-Eth-Trunk0]p t a v 2 3 10 20
4、配置MSTP
SW1:
[SW1]stp enable
[SW1]stp mode mstp
[SW1]stp region-configuration
[SW1-mst-region]region-name aa
[SW1-mst-region]instance 1 vlan 2
[SW1-mst-region]instance 2 vlan 3
[SW1-mst-region]active region-configuration
开启边缘端口,以及保护
[SW1]int g 0/0/5
[SW1-GigabitEthernet0/0/5]stp edged-port enable
[SW1-GigabitEthernet0/0/5]q
[SW1]stp bpdu-protection
SW2:
[SW2]stp enable
[SW2]stp mode mstp
[SW2]stp region-configuration
[SW2-mst-region]instance 1 v 2
[SW2-mst-region]instance 2 v 3
[SW2-mst-region]active region-configuration
开启边缘端口以及保护:
[SW2]int g 0/0/5
[SW2-GigabitEthernet0/0/5]stp edged-port enable
[SW2-GigabitEthernet0/0/5]q
[SW2]stp bpdu-protection
SW3:
[SW3]stp enable
[SW3]stp mode mstp
[SW3]stp region-configuration
[SW3-mst-region]instance 1 v 2
[SW3-mst-region]instance 2 v 3
[SW3-mst-region]active region-configuration
SW4:
[SW4]stp enable
[SW4]stp mode mstp
[SW4]stp region-configuration
[SW4-mst-region]instance 1 v 2
[SW4-mst-region]instance 2 v 3
[SW4-mst-region]active region-configuration
查看SW1,SW2的生成树
5、配置VRRP
SW1:
[SW1]int vlanif 2
[SW1-Vlanif2]vrrp vrid 1 virtual-ip 172.16.0.62
[SW1-Vlanif2]vrrp vrid 1 priority 120
[SW1-Vlanif2]int vlanif 3
[SW1-Vlanif3]vrrp vrid 2 virtual-ip 172.16.0.126
[SW1-Vlanif2]vrrp vrid 1 track interface Vlanif 10 reduced 30
SW2:
[SW2]int vlanif 2
[SW2-Vlanif2]vrrp vrid 1 virtual-ip 172.16.0.62
[SW2-Vlanif3]vrrp vrid 2 virtual-ip 172.16.0.126
[SW2-Vlanif3]vrrp vrid 2 priority 120
[SW2-Vlanif2]vrrp vrid 1 virtual-ip 172.16.0.62
查看SW1,SW2的VRRP
当SW1的g0/0/5 shutdown后:
SW2的两个网关都会变为主网关
6、配置DHCP,下发IP地址
SW1:
VLAN2:
[SW1]dhcp enable
Info: The operation may take a few seconds. Please wait for a moment.done.
[SW1]ip pool aa
Info:It's successful to create an IP address pool.
[SW1-ip-pool-aa]network 172.16.0.0 mask 26
[SW1-ip-pool-aa]gateway-list 172.16.0.62
[SW1-ip-pool-aa]dns-list 114.114.114.114
[SW1-ip-pool-aa]q
[SW1]int vlanif 2
[SW1-Vlanif2]dhcp select global
VLAN3:
[SW1]ip pool bb
Info:It's successful to create an IP address pool.
[SW1-ip-pool-bb]network 172.16.0.64 mask 26
[SW1-ip-pool-bb]gateway-list 172.16.0.126
[SW1-ip-pool-bb]dns-list 114.114.114.114
[SW1-ip-pool-bb]q
[SW1]int Vlanif 3
[SW1-Vlanif3]dhcp select global
SW2:
VLAN2:
[SW2]dhcp enable
Info: The operation may take a few seconds. Please wait for a moment.done.
[SW2]ip pool aa
Info:It's successful to create an IP address pool.
[SW2-ip-pool-aa]network 172.16.0.0 mask 26
[SW2-ip-pool-aa]gateway-list 172.16.0.62
[SW2-ip-pool-aa]dns-list 8.8.8.8
[SW2-ip-pool-aa]q
[SW2]int Vlanif 2
[SW2-Vlanif2]dhcp select global
VLAN3:
[SW2]ip pool bb
Info:It's successful to create an IP address pool.
[SW2-ip-pool-bb]network 172.16.0.64 mask 26
[SW2-ip-pool-bb]gateway-list 172.16.0.126
[SW2-ip-pool-bb]dns-list 8.8.8.8
[SW2-ip-pool-bb]q
[SW2]int vlanif 3
[SW2-Vlanif3]dhcp select global
PC获取地址情况:
7、配置NAT技术
R1:
[R1]acl 2000:
[R1-acl-basic-2000]rule permit source 172.16.0.0 0.0.255.255
[R1-acl-basic-2000]q
[R1]int g 0/0/0
[R1-GigabitEthernet0/0/0]nat outbound 2000
[R1]ip route-static 0.0.0.0 0.0.0.0 12.0.0.2
(1)动配置缺省
SW1:
[SW1]ip route-static 0.0.0.0 0 172.16.0.129
SW2:
[SW2]ip route-static 0.0.0.0 0 172.16.0.193
(2)边界路由器自动下发缺省
[R1-ospf-1]default-route-advertise
PC1pingISP环回: