三层架构（小实验）

三层架构

一、分析题目：
在这个实验中，路由和交换都存在，所以先开始从交换做起，后坐路由。
分析交换中所用到的技术，按其先后顺序来做：
1、首先是配置Eth-Trunk
2、vlan trunk
3、stp
4、svi
5、vrrp
6、dhcp
路由中配置：配置IP地址，路由协议，测试，ACL,NAT

二、内网划分：
1、基于172.16.0.0/16划分内网
172.16.0.0/30 左骨干链路
172.16.0.4/30 右骨干链路
172.16.1.0 /26 VLAV1
172.16.2.0/26 VLAN2
交换：eth-trunk vlan trunk stp svi vrrp dhcp
路由：配置IP地址，路由协议，测试，ACL，NAT

开始搭建模型：

一、首先开始配置Eth-Trunk
LSW1：
[LSW1]int Eth-Trunk 0
[LSW1-Eth-Trunk0]int g0/0/2
[LSW1-GigabitEthernet0/0/2]eth-trunk 0
[LSW1-GigabitEthernet0/0/2]int g0/0/1
[LSW1-GigabitEthernet0/0/1]eth-trunk 0

LSW2；
[LSW2]int Eth-Trunk 0
[LSW2]int g0/0/2
[LSW2-GigabitEthernet0/0/2]eth-trunk 0
[LSW2-GigabitEthernet0/0/2]int g0/0/1
[LSW2-GigabitEthernet0/0/1]eth-trunk 0

二、 接下来创建VLAN（先创建VLAN）
LSW1:
[LSW1]vlan batch 1 to 2（创建VLAN）
[sw1]interface Eth-Trunk 0
[sw1-Eth-Trunk0]port link-type trunk
[sw1-Eth-Trunk0]port trunk allow-pass vlan 1 to 2
[sw1-Eth-Trunk0]q
[sw1-vlan3]q
[sw1]interface GigabitEthernet 0/0/5
[sw1-GigabitEthernet0/0/5]port link-type access
[sw1-GigabitEthernet0/0/5]port default vlan 3
[sw1]interface GigabitEthernet 0/0/3
[LSW1-GigabitEthernet0/0/3]p h t v 1 to 2
[sw1-GigabitEthernet0/0/3]int g 0/0/4
[LSW1-GigabitEthernet0/0/4]p h t v 1 to 2

LSW2；
[LSW2]vlan batch 1 to 2
[LSW2]vlan batch 4
[sw2]interface Eth-Trunk 0
[sw2-Eth-Trunk0]port link-type trunk
[sw2-Eth-Trunk0]port trunk allow-pass vlan 1 to 2
[sw2-Eth-Trunk0]int g 0/0/5
[sw2-GigabitEthernet0/0/5]port link-type access
[sw2-vlan4]q
[sw2]int GigabitEthernet 0/0/5
[sw2-GigabitEthernet0/0/5]port link-type a
[sw2-GigabitEthernet0/0/5]port default vlan 4
[sw2-GigabitEthernet0/0/5]q
[sw2]interface g 0/0/3
[sw2-GigabitEthernet0/0/3]port hybrid tagged vlan 1 to 2
[sw2-GigabitEthernet0/0/3]int g 0/0/4
[sw2-GigabitEthernet0/0/4]port hybrid tagged vlan 1 to 2

LSW3:
[sw3]int g 0/0/1
[LSW3-GigabitEthernet0/0/1]p h t v 1 to 2
[sw3-GigabitEthernet0/0/1]int g 0/0/2
[LSW3-GigabitEthernet0/0/2]p h t v 1 to 2
[sw3-GigabitEthernet0/0/2]int e 0/0/1
[sw3-Ethernet0/0/1]p l a (默认vlan1）
[sw3-Ethernet0/0/1]int e 0/0/2
[sw3-Ethernet0/0/2]p l a
[sw3-Ethernet0/0/2]port default vlan 2

LSW4:
[LSW4]vlan batch 1 to 2
sw4]int g 0/0/1
[LSW4-GigabitEthernet0/0/1]p h t v 1 to 2
[sw4-GigabitEthernet0/0/1]int g 0/0/2
[LSW4-GigabitEthernet0/0/2]p h t v 1 to 2
[sw4-GigabitEthernet0/0/2]int e 0/0/1
[sw4-Ethernet0/0/1]p l a
[sw4-Ethernet0/0/1]int e 0/0/2
[sw4-Ethernet0/0/2]p l a
[sw4-Ethernet0/0/2]port default vlan 2

三、STP
LSW1
[sw1]stp region-configuration
[sw1-mst-region]region-name haha
[sw1-mst-region]instance 1 vlan 1
[sw1-mst-region]instance 2 vlan 2
[sw1-mst-region]active region-configuration
[sw1-mst-region]q
[sw1]stp instance 1 root primary
[sw1]stp instance 2 root secondary

LSW 2
[sw2]stp region-configuration
[sw2-mst-region]region-name xixi
[sw2-mst-region]instance 1 vlan 1
[sw2-mst-region]instance 2 vlan 2
[sw2-mst-region]active region-configuration
Info: This operation may take a few seconds. Please wait for a moment…done.
[sw2-mst-region]q
[sw2]stp instance 1 root secondary
[sw2]stp instance 2 root primar

LSW3
[LSW3]stp re
[LSW3]stp region-configuration
[LSW3-mst-region]region-name ha
[LSW3-mst-region]instance 1 vlan 1
[LSW3-mst-region]instance 2 vlan 2
[LSW3-mst-region]active region-configuration

LSW4
[sw4]stp region-configuration
[sw4-mst-region]region-name xi
[sw4-mst-region]instance 1 vlan 1
[sw4-mst-region]instance 2 vlan 2
[sw4-mst-region]active region-configuration

四、配置SVI
LSW1
[LSW1]interface vlan 1
[LSW1-Vlanif1]ip address 172.16.1.1 24
[LSW1]interface vlan 2
[LSW1-Vlanif2]ip address 172.16.2.1 24

LSW2
[LSW2]interface vlan 1
[LSW2-Vlanif1]ip address 172.16.1.2 24

LSW2]interface vlan 2
[LSW2-Vlanif2]ip address 172.16.2.2 24

五、配置VRRP：
LSW1
[LSW1]interface vlan 1
[LSW1-Vlanif1]vrrp vrid 1 virtual-ip 172.16.1.254

[LSW1-Vlanif1]vrrp vrid 1 priority 120
[LSW1-Vlanif1]vrrp vrid 1 track int g 0/0/5 reduced 20
[LSW1]interface vlan 2
[LSW1-Vlanif2]vrrp vrid 2 virtual-ip 172.16.2.254
[LSW1-Vlanif2]vrrp vrid 2 priority 120
[LSW1-Vlanif2]vrrp vrid 2 track interface GigabitEthernet 0/0/5 reduced 20

LSW2:



六、配置DHCP
LSW1
[LSW1]dhcp enable
[LSW1]ip pool ha
[LSW1-ip-pool-ha]network 172.16.1.0 mask 255.255.255.0
[LSW1-ip-pool-ha]gateway-list 172.16.1.254
[LSW1-ip-pool-ha]dns-list 114.114.114.114 8.8.8.8
[LSW1-ip-pool-ha]q
[LSW1]ip pool xi
Info:It’s successful to create an IP address pool.
[LSW1-ip-pool-xi]network 172.16.2.0 mask 255.255.255.0
[LSW1-ip-pool-xi]gateway-list 172.16.2.254
[LSW1-ip-pool-xi]dns-list 114.114.114.114 8.8.8.8
[LSW1]int v1
[LSW1-Vlanif1]dhcp select global
[LSW1-Vlanif1]int v2
[LSW1-Vlanif2]dhcp select global

LSW2
[LSW2]dhcp enable
[LSW2]ip pool haha
[LSW2-ip-pool-haha]network 172.16.1.0 mask 255.255.255.0
[LSW2-ip-pool-haha]gateway-list 172.16.1.253
[LSW2-ip-pool-haha]dns-list 114.114.114.114 8.8.8.8
[LSW2-ip-pool-haha]q
[LSW2]ip pool xixi
[LSW2-ip-pool-xixi]network 172.16.2.0 mask 255.255.255.0
[LSW2-ip-pool-xixi]gateway-list 172.16.2.253
[LSW2-ip-pool-xixi]dns-list 114.114.114.114 8.8.8.8
[LSW2-ip-pool-xixi]q
[LSW2]int v1
[LSW2-Vlanif1]dhcp select global
[LSW2-Vlanif1]int v2
[LSW2-Vlanif2]dhcp select globa

配置完DHCP后看一下电脑是否能自动获取IP地址
PC1:

PC2:

PC3:

PC4:

七、下面开始配置IP地址：
R2：



R1：


八、配置路由：

R2：

LSW1:

LSW2:

R2:

然后开始用PC1 ping 12.1.1.1(正常是可以ping通的)