实验要求:划分VLAN:目的两个:隔离广播域;增强安全性
配置三层交换机,配置DHCP,配置静态路由,配置nat使网段能上网,配置ospf
拓扑图
SW1基础配置
SW1
system-view
sysname SW1
vlan batch 2 to 5
interface g0/0/1
port link-type trunk
port trunk allow-pass vlan 2 to 3
interface g0/0/2
port link-type trunk
port trunk allow-pass vlan 2 to 3
display vlan
SW2配置
SW2
system-view
sysname SW2
vlan 2
interface e0/0/1
port link-type access
port default vlan 2
quit
vlan 3
interface e0/0/2
port link-type access
port default vlan 3
quit
interface g0/0/1
port link-type trunk
port trunk allow-pass vlan 2 to 3
SW3配置
SW3
system-view
sysname SW3
vlan 2
interface e0/0/1
port link-type access
port default vlan 2
quit
vlan 3
interface e0/0/2
port link-type access
port default vlan 3
quit
interface g0/0/2
port link-type trunk
port trunk allow-pass vlan 2 to 3
配置pc和服务器
服务器设置8.8.8.8地址用于pc机上网
pc1
pc2
pc3
pc4
测试vlan
实现同VLAN能互相访问,不同VLAN不能访问
配置三层交换机
SW1
三层vlan
interface Vlanif2
ip address 192.168.2.254 24
interface Vlanif3
ip address 192.168.3.254 24
配置DHCP
dhcp enable
ip pool vlan2
network 192.168.2.0 mask 24
gateway-list 192.168.2.254
dns-list 8.8.8.8
excluded-ip-address 192.168.2.200 192.168.2.253
quit
interface Vlanif 2
dhcp select global
ip pool vlan3
network 192.168.3.0 mask 24
gateway-list 192.168.3.254
dns-list 8.8.8.8
excluded-ip-address 192.168.3.200 192.168.3.253
quit
interface Vlanif 3
dhcp select global
三层交换机--路由器:配置ACCESS模式,要创建一个新的vlan
vlan 40
quit
interface g0/0/3
port link-type access
port default vlan 40
quit
interface Vlanif 40
ip address 192.168.40.254 24
三层交换机上网:默认路由
路由器R1的配置
R1路由器配置
system-view
sysname R1
interface g0/0/0
ip address 192.168.40.9 24
静态路由
[R1]ip route-static 192.168.2.0 24 192.168.40.254
[R1]ip route-static 192.168.3.0 24 192.168.40.254
#配置静态路由192.168.2.0/3.0为目的地址,下一条地址为192.168.40.254
配置NAT,使得PC能够上网
interface GigabitEthernet0/0/2
ip address 8.8.8.9 24
ip route-static 0.0.0.0 0.0.0.0 8.8.8.8
acl 2000
rule permit
quit
interface g0/0/2
测试ping通外网
把pc设置成DHCP
在命令行里查看DHCP自动分配的ip(ipconfig)
同样ping通同网段
测试pc能ping通8.8.8.8 上网
pc1
pc2
pc3
pc4
配置ospf
交换机--路由器配置ospf
ospf是动态路由:学习路由信息 维护路由信息 选最佳路径
路由器R1的配置
ospf 1
area 0
network 192.168.40.0 0.0.0.255
添加配置:默认路由下发
ospf 1
default-route-advertise
交换机SW1的配置
ospf 1
area 0
network 192.168.40.0 0.0.0.255
ospf的七种状态
ospf的五种报文