cisco大型（单核心）网络综合实验

最新推荐文章于 2024-06-28 14:36:30 发布

weixin_33853827

最新推荐文章于 2024-06-28 14:36:30 发布

阅读量1.8k

点赞数 3

文章标签：网络操作系统运维

原文链接：http://blog.51cto.com/289780/58227

版权

【实验名称】 <?xml:namespace prefix = o ns = "urn:schemas-microsoft-com:office:office" />

大型（单核心）网络综合实验

【实验原型】

某大型企业全网建设（采用设备： RG-R<?xml:namespace prefix = st2 ns = "Tencent" />3662路由器、RG-S6806E多业务万兆核心路由交换机、RG-S3550-12SFP/GT全千兆三层路由交换机、RG-S<?xml:namespace prefix = st1 ns = "urn:schemas-microsoft-com:office:smarttags" />2126G/50G千兆安全智能堆叠交换机）

【实验目的】

在实验室环境根据具体真实网络建设搭建模拟环境进行综合应用实验，指导学员如何规划实施大型企业、校园网络建设规划

【预备知识】

交换路由基础，OSPF、802.1qvlan、NAT、SNMP、ACL访问控制、安全控制等

【背景描述】

为了加快并某集团的信息化建设，新的集团企业网将建设一个以集团办公自动化、电子商务、业务综合管理、多媒体视频会议、远程通讯、信息发布及查询为核心，以现代网络技术为依托，技术先进、扩展性强，将集团的各种办公室、多媒体会议室、控制中心的PC机、工作站、终端设备、控制系统用高速计算机网络连接起来，实现内、外沟通的现代化计算机网络系统。该网络系统是日后支持办公自动化、供应链管理以及各应用系统运行的基础设施，为了确保这些关键应用系统的正常运行、安全和发展，系统必须具备如下的特性：

1、采用先进的网络通信技术完成集团企业网的建设，实现各分公司的信息化；

2、在整个企业集团内实现所有部门的办公自动化，提高工作效率和管理服务水平；

3、在整个企业集团内实现资源共享、产品信息共享、实时新闻发布；

4、在整个企业集团内实现财务电算化；

5、在整个企业集团内实现集中式的供应链管理系统和客户服务关系管理系统

建设后的网络拓朴如下：

<?xml:namespace prefix = v ns = "urn:schemas-microsoft-com:vml" />

【实现功能】

实现内部网络VLAN划分，三层路由功能，并启用OSPF路由协议；病毒***防护、出口实现NAT地址转换，全网采用starview进行网络管理。

【实验拓扑】

【实验设备】

出口设备：R2624路由器 1台；核心设备：S68系列（或S65/S35系列设备）1台，配置千兆光纤接口 2块；汇聚设备：S3550-24 2台，每台配置1块千兆光纤接口；接入设备：S2126G二层交换机4台：实验PC：8台；终端用户的默认网关指向各自对应的vlan接口的ip地址。

【实验步骤】

实验配置分为：（以下配置默认在全局配置模式下进行）。

第一步：网络设备的基本配置；

第二步：ospf配置及其测试；

第三步：网络连通性测试；

第四步：NAT功能测试四部分

第一步基本配置

(1) S2126G-A1基本配置

hostname S2126G-A1

vlan 1

exit

vlan 10

！划分vlan10

exit

vlan 20

！划分vlan10

exit

vlan 30

！划分vlan10

exit

enable secret level 1 0 star

！设置telnet密码

enable secret level 15 0 star

!设置特权模式密码

interface range fastEthernet 0/1-3

switchport access vlan 10

exit

！将f0/1，f0/2和f0/3划分到vlan10里

interface range fastEthernet 0/4-6

switchport access vlan 20

exit

！将f0/4,f0/5和f0/6划分到vlan20里

interface range fastEthernet 0/7-9

switchport access vlan 30

exit

！将f0/7,f0/8和f0/9划分到vlan30里

interface fastEthernet 0/10

switchport mode trunk

exit

！将f0/10设置为trunk模式

end

S2126G-A1#

(2) S2126G-A2基本配置

hostname S2126G-A2

vlan 1

exit

vlan 10

exit

vlan 20

exit

vlan 30

exit

enable secret level 1 0 star

enable secret level 15 0 star

interface range fastEthernet 0/1-3

switchport access vlan 10

exit

interface range fastEthernet 0/4-6

switchport access vlan 20

exit

interface range fastEthernet 0/7-9

switchport access vlan 30

exit

interface fastEthernet 0/20

switchport mode trunk

exit

end

S2126G-A2#

(3) S2126G-B1基本配置

hostname S2126G-B1

vlan 1

exit

vlan 50

exit

vlan 60

exit

vlan 70

exit

enable secret level 1 0 star

enable secret level 15 0 star

interface range fastEthernet 0/1-3

switchport access vlan 50

exit

interface range fastEthernet 0/4-6

switchport access vlan 60

exit

interface range fastEthernet 0/7-9

switchport access vlan 70

exit

interface fastEthernet 0/10

switchport mode trunk

exit

(4) S2126G-B2基本配置

hostname S2126G-B2

vlan 1

exit

vlan 50

exit

vlan 60

exit

vlan 70

exit

enable secret level 1 0 star

enable secret level 15 0 star

interface range fastEthernet 0/1-3

switchport access vlan 50

exit

interface range fastEthernet 0/4-6

switchport access vlan 60

exit

interface range fastEthernet 0/7-9

switchport access vlan 70

exit

interface fastEthernet 0/20

switchport mode trunk

exit

(5) S3550-24-A基本配置

hostname S3550-24-A

vlan 1

exit

vlan 10

exit

vlan 20

exit

vlan 30

exit

vlan 100

exit

interface FastEthernet 0/1

switchport mode trunk

exit

interface FastEthernet 0/10

switchport mode trunk

exit

interface FastEthernet 0/20

switchport mode trunk

exit

interface Vlan 1

ip address 192.168.0.1 255.255.255.0

no shut

exit

!为交换机分配管理ip地址

interface Vlan 10

ip address 172.16.10.1 255.255.255.0

no shut

exit

!为vlan10分配ip地址

interface Vlan 20

ip address 172.16.20.1 255.255.255.0

no shut

exit

! 为vlan20分配ip地址

interface Vlan 30

ip address 172.16.30.1 255.255.255.0

no shut

exit

! 为vlan30分配ip地址

interface Vlan 100

ip address 192.168.128.44 255.255.255.248

no shut

exit

! 为vlan30分配ip地址

(6) S3550-24-B基本配置

hostname S3550-24-B

vlan 1

exit

vlan 50

exit

vlan 60

exit

vlan 70

exit

vlan 200

exit

enable secret level 1 0 star

enable secret level 15 0 star

interface FastEthernet 0/1

switchport mode trunk

exit

interface FastEthernet 0/10

switchport mode trunk

exit

interface FastEthernet 0/20

switchport mode trunk

exit

interface Vlan 1

ip address 192.168.0.2 255.255.255.0

no shut

exit

interface Vlan 50

ip address 172.18.50.1 255.255.255.0

no shut

exit

interface Vlan 60

ip address 172.18.60.1 255.255.255.0

no shut

exit

interface Vlan 70

ip address 172.18.70.1 255.255.255.0

no shut

exit

interface Vlan 200

ip address 192.168.129.44 255.255.255.248

no shut

exit

End

(7) S6806E-A基本配置

hostname S6806E-A

enable secret level 1 0 star

enable secret level 15 0 star

interface GigabitEthernet 4/1

switchport mode trunk

exit

interface GigabitEthernet 4/2

switchport mode trunk

exit

interface GigabitEthernet 4/10

switchport access vlan 300

exit

interface Vlan 1

ip address 192.168.0.3 255.255.255.0

no shut

exit

interface Vlan 100

ip address 192.168.128.45 255.255.255.248

no shut

exit

interface Vlan 200

ip address 192.168.129.45 255.255.255.248

no shut

exit

interface Vlan 300

ip address 192.168.86.17 255.255.255.240

no shut

exit

End

(8) R2624-A基本配置

hostname R2624-A

enable password star

interface FastEthernet0

ip address 192.168.86.30 255.255.255.240

no shut

ip nat inside

exit

interface FastEthernet1

ip address 210.96.100.85 255.255.255.252

no shut

ip nat outside

exit

line con 0

line aux 0

line vty 0 4

password star

end

第二步 ospf路由选择协议配置及测试

（1）S3550-24-A ospf路由协议配置

router ospf

!在路由器上启动ospf进程

area 0.0.0.0

network 172.16.10.0 255.255.255.0 area 0.0.0.0

！指定参与交换ospf更新的网络以及这些网络所属的区域

network 172.16.20.0 255.255.255.0 area 0.0.0.0

！指定参与交换ospf更新的网络以及这些网络所属的区域

network 172.16.30.0 255.255.255.0 area 0.0.0.0

！指定参与交换ospf更新的网络以及这些网络所属的区域

network 192.168.128.40 255.255.255.248 area 0.0.0.0

！指定参与交换ospf更新的网络以及这些网络所属的区域

end

（2）S3550-24-B ospf路由协议配置

router ospf

area 0.0.0.0

network 172.18.50.0 255.255.255.0 area 0.0.0.0

network 172.18.60.0 255.255.255.0 area 0.0.0.0

network 172.18.70.0 255.255.255.0 area 0.0.0.0

network 192.168.129.40 255.255.255.248 area 0.0.0.0

end

（3）S6806E ospf路由协议配置

router ospf

area 0.0.0.0

network 192.168.86.16 255.255.255.240 area 0.0.0.0

network 192.168.128.40 255.255.255.248 area 0.0.0.0

network 192.168.129.40 255.255.255.248 area 0.0.0.0

end

（4）R2624-A ospf路由协议配置

router ospf 1

！启动ospf进程并指定本地进程号

network 210.96.100.84 0.0.0.3 area 0.0.0.0

network 192.168.86.16 0.0.0.15 area 0.0.0.0

default-information originate always

！不管路由器是否存在缺省路由，总是向其它路由器公告缺省路由

end

（5）ospf验证

A) S3550-24-A# show ip route

！查看S3550-24-A路由表，以下路由信息除了直连路由外，都是通过ospf学习来的

Type: C - connected, S - static, R - RIP, O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2

Type Destination IP Next hop Interface Distance Metric Status

---- ------------------ --------------- --------- -------- -------- --------

O E2 0.0.0.0/0 192.168.128.45 VL100 110 1 Active

C 172.16.10.0/24 0.0.0.0 VL10 0 0 Active

C 172.16.20.0/24 0.0.0.0 VL20 0 0 Active

C 172.16.30.0/24 0.0.0.0 VL30 0 0 Active

O 172.18.50.0/24 192.168.128.45 VL100 110 3 Active

O 172.18.60.0/24 192.168.128.45 VL100 110 3 Active

O 172.18.70.0/24 192.168.128.45 VL100 110 3 Active

C 192.168.0.0/24 0.0.0.0 VL1 0 0 Active

O 192.168.86.16/28 192.168.128.45 VL100 110 2 Active

C 192.168.128.40/29 0.0.0.0 VL100 0 0 Active

O 192.168.129.40/29 192.168.128.45 VL100 110 2 Active

O 210.96.100.84/30 192.168.128.45 VL100 110 3 Active

S3550-24-A# show ip ospf neighbor

！查看S3550-24-A的邻居路由器。

Neighbor ID PriState DeadTime Address Interface

--------------- --- ---------------- -------- --------------- ----------

192.168.129.45 1 full/DR 00:00:32 192.168.128.45 VL100

S3550-24-A#

B) S3550-24-B# show ip route

！查看S3550-24-B路由表，以下路由信息除了直连路由外，都是通过ospf学习来的

Type: C - connected, S - static, R - RIP, O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2

Type Destination IP Next hop Interface Distance Metric Status

---- ------------------ --------------- --------- -------- -------- --------

O E2 0.0.0.0/0 192.168.129.45 VL200 110 1 Active

O 172.16.10.0/24 192.168.129.45 VL200 110 3 Active

O 172.16.20.0/24 192.168.129.45 VL200 110 3 Active

O 172.16.30.0/24 192.168.129.45 VL200 110 3 Active

C 172.18.50.0/24 0.0.0.0 VL50 0 0 Active

C 172.18.60.0/24 0.0.0.0 VL60 0 0 Active

C 172.18.70.0/24 0.0.0.0 VL70 0 0 Active

C 192.168.0.0/24 0.0.0.0 VL1 0 0 Active

O 192.168.86.16/28 192.168.129.45 VL200 110 2 Active

O 192.168.128.40/29 192.168.129.45 VL200 110 2 Active

C 192.168.129.40/29 0.0.0.0 VL200 0 0 Active

O 210.96.100.84/30 192.168.129.45 VL200 110 3 Active

S3550-24-B#show ip ospf neighbor

！查看S3550-24-B的邻居路由器。

Neighbor ID PriState DeadTime Address Interface

--------------- --- ---------------- -------- --------------- ----------

192.168.129.45 1 full/DR 00:00:35 192.168.129.45 VL200

C) S6806E-A# show ip route

！查看S6806E-A路由表，以下路由信息除了直连路由外，都是通过ospf学习来的。

Type: C - connected, S - static, R - RIP, B - BGP, P - policy

O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2

Type Destination IP Next hop Interface Distance Metric Status

---- ------------------ --------------- --------- -------- -------- --------

O E2 0.0.0.0/0 192.168.86.30 VL300 110 1 Active

O 172.16.10.0/24 192.168.128.44 VL100 110 2 Active

O 172.16.20.0/24 192.168.128.44 VL100 110 2 Active

O 172.16.30.0/24 192.168.128.44 VL100 110 2 Active

O 172.18.50.0/24 192.168.129.44 VL200 110 2 Active

O 172.18.60.0/24 192.168.129.44 VL200 110 2 Active

O 172.18.70.0/24 192.168.129.44 VL200 110 2 Active

C 192.168.0.0/24 0.0.0.0 VL1 0 0 Active

C 192.168.86.16/28 0.0.0.0 VL300 0 0 Active

C 192.168.128.40/29 0.0.0.0 VL100 0 0 Active

C 192.168.129.40/29 0.0.0.0 VL200 0 0 Active

O 210.96.100.84/30 192.168.86.30 VL300 110 2 Active

S6806E-A#show ip ospf neighbor

！查看S6806E-A的ospf邻居

Neighbor ID PriState DeadTime Address Interface

--------------- --- ---------------- -------- --------------- ----------

210.96.100.85 1 full/BDR 00:00:31 192.168.86.30 VL300

192.168.128.44 1 full/BDR 00:00:30 192.168.128.44 VL100

192.168.129.44 1 full/BDR 00:00:37 192.168.129.44 VL200

S6806E-A#

D) R2624-A#show ip route

！查看R2624-A路由表

Codes: C - connected, S - static, R - RIP

O - OSPF, IA - OSPF inter area

E1 - OSPF external type 1, E2 - OSPF external type 2

Gateway of last resort is 210.96.100.86 to network 0.0.0.0

192.168.86.0/28 is subnetted, 1 subnets

C 192.168.86.16 is directly connected, FastEthernet0

172.16.0.0/24 is subnetted, 3 subnets

O 172.16.30.0 [110/3] via 192.168.86.17, 00:43:05, FastEthernet0

O 172.16.20.0 [110/3] via 192.168.86.17, 00:43:05, FastEthernet0

O 172.16.10.0 [110/3] via 192.168.86.17, 00:43:05, FastEthernet0

172.18.0.0/24 is subnetted, 3 subnets

O 172.18.60.0 [110/3] via 192.168.86.17, 00:43:05, FastEthernet0

O 172.18.50.0 [110/3] via 192.168.86.17, 00:43:05, FastEthernet0

O 172.18.70.0 [110/3] via 192.168.86.17, 00:43:05, FastEthernet0

210.96.100.0/30 is subnetted, 1 subnets

C 210.96.100.84 is directly connected, FastEthernet1

192.168.128.0/29 is subnetted, 1 subnets

O 192.168.128.40 [110/2] via 192.168.86.17, 00:43:05, FastEthernet0

192.168.129.0/29 is subnetted, 1 subnets

O 192.168.129.40 [110/2] via 192.168.86.17, 00:43:05, FastEthernet0

S* 0.0.0.0/0 [1/0] via 210.96.100.86

R2624-A#show ip ospf neighbor

！查看R2624-A的ospf邻居

Neighbor ID Pri State Dead Time Address Interface

192.168.129.45 1 FULL/DR 00:00:36 192.168.86.17 FastEthernet0

R2624-A#

第三步基本连通性测试。包括网络连通性测试和不同vlan间用户通信连通性测试

（1）网络连通性测试

在S2126G-A1的vlan10内的用户，用户主机ip地址为172.16.10.195/24，网关为172.16.10.1。

D:\>ipconfig

Windows 2000 IP Configuration

Ethernet adapter 本地连接:

Connection-specific DNS Suffix . :

IP Address. . . . . . . . . . . . : 172.16.10.195

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 172.16.10.1

！在vlan10 里，ip地址为172.16.10.195主机为测试主机

D:\>ping 172.16.10.1

Pinging 172.16.10.1 with 32 bytes of data:

Reply from 172.16.10.1: bytes=32 time<10ms TTL=64

！测试到网关的连通性

D:\>ping 172.16.20.1

Pinging 172.16.20.1 with 32 bytes of data:

Reply from 172.16.20.1: bytes=32 time<10ms TTL=64

！测试到S3550-24-A vlan20svi口的连通性

D:\>ping 172.16.30.1

Pinging 172.16.30.1 with 32 bytes of data:

Reply from 172.16.30.1: bytes=32 time<10ms TTL=64

！测试到S3550-24-A vlan30svi口的连通性

D:\>ping 192.168.128.44

Pinging 192.168.128.44 with 32 bytes of data:

Reply from 192.168.128.44: bytes=32 time<10ms TTL=64

！测试到S3550-24-A vlan100svi口的连通性

D:\>ping 192.168.128.45

Pinging 192.168.128.45 with 32 bytes of data:

Reply from 192.168.128.45: bytes=32 time=2ms TTL=62

！测试到S6806E-A vlan100的svi口的连通性

D:\>ping 192.168.129.45

Pinging 192.168.129.45 with 32 bytes of data:

Reply from 192.168.129.45: bytes=32 time=1ms TTL=63

！测试到S6806E-A vlan200的svi口的连通性

D:\>ping 192.168.86.17

Pinging 192.168.86.17 with 32 bytes of data:

Reply from 192.168.86.17: bytes=32 time=1ms TTL=63

！测试到S6806E-A vlan300的svi口的连通性

D:\>ping 192.168.86.30

Pinging 192.168.86.30 with 32 bytes of data:

Reply from 192.168.86.30: bytes=32 time<10ms TTL=253

！测试到R2624-A f0口的连通性

D:\>ping 172.18.50.1

Pinging 172.18.50.1 with 32 bytes of data:

Reply from 172.18.50.1: bytes=32 time=1ms TTL=62

Reply from 172.18.50.1: bytes=32 time=2ms TTL=62

！测试到S3550-24-Bvlan50的svi口的连通性

D:\>ping 172.18.60.1

Pinging 172.18.60.1 with 32 bytes of data:

Reply from 172.18.60.1: bytes=32 time=1ms TTL=62

！测试到S3550-24-Bvlan60的svi口的连通性

D:\>ping 172.18.70.1

Pinging 172.18.70.1 with 32 bytes of data:

Reply from 172.18.70.1: bytes=32 time=1ms TTL=62

！测试到S3550-24-Bvlan 70的svi口的连通性

D:\>ping 192.168.129.44

Pinging 192.168.129.44 with 32 bytes of data:

Reply from 192.168.129.44: bytes=32 time<10ms TTL=62

！测试到S3550-24-B vlan 200的svi口的连通性

D:\>ping 210.96.100.85

Pinging 210.96.100.85 with 32 bytes of data:

Reply from 210.96.100.85: bytes=32 time=1ms TTL=253

！测试到R2624-A路由器F1口的连通性

（2）vlan间通信测试。在这里我们只举例测试vlan50里用户172.18.50.195与vlan10里用户172.16.10.179通行的连通性，其中主机指向各自的网关。由于不同vlan间用户通信测试方法相同，这里我们就举例说明。

D:\>ipconfig

Windows 2000 IP Configuration

Ethernet adapter 本地连接:

Connection-specific DNS Suffix . :

IP Address. . . . . . . . . . . . : 172.18.50.195

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 172.18.50.1

D:\>ping 172.18.50.1

Pinging 172.18.50.1 with 32 bytes of data:

Reply from 172.18.50.1: bytes=32 time<10ms TTL=64

！vlan50用户172.18.50.195测试到此网关的连通性

D:\>ping 192.168.86.30

Pinging 192.168.86.30 with 32 bytes of data:

Reply from 192.168.86.30: bytes=32 time<10ms TTL=253

！测试到网络的连通性

D:\>ping 172.16.10.179

Pinging 172.16.10.179 with 32 bytes of data:

Reply from 172.16.10.179: bytes=32 time<10ms TTL=125

！测试vlan50里的用户用户172.18.50.195到vlan10用户172.16.10.179的连通性

第四步 NAT功能配置及测试。NAT功能是通过在R2624-A上实现的。

(1) 在R2624-A上配置NAT功能

access-list 10 permit any

exit

ip nat inside source list 10 interface FastEthernet1 overload

！

interface FastEthernet0

ip nat inside

exit

interface FastEthernet1

ip nat outside

exit

（2）测试nat功能。如实验拓扑，在R2624-A F1口的对端放置pc模拟isp。通过内部主机172.18.50.195ping此主机210.96.100.86，在路由器上调试nat，通过查看相关调试信息测试nat功能。

R2624-A#debug ip nat

NAT events debugging is on

R2624-A#debug ip nat detailed

NAT detailed events debugging is on

R2624-A#debug ip nat packet

NAT packet flow events debugging is on

R2624-A#

！在R2624-A上开启NAT debug功能

D:\Documents and Settings\Administrator>ipconfig

Windows 2000 IP Configuration

Ethernet adapter 本地连接:

Connection-specific DNS Suffix . :

IP Address. . . . . . . . . . . . : 172.18.50.195

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 172.18.50.1

D:\ >ping 210.96.100.86

！客户机访问外部网络主机

Pinging 210.96.100.86 with 32 bytes of data:

Reply from 210.96.100.86: bytes=32 time=3ms TTL=125

2624-A#

IPNAT: I* icmp 210.96.100.85:512 -> 210.96.100.86:512 [5930, 60]

IPNAT: O icmp 210.96.100.86:512 -> 210.96.100.85:512 [21452, 60]

IPNAT: O* icmp 210.96.100.86:512 -> 172.18.50.195:512 [21452, 60]

IPNAT: I icmp 172.18.50.195:512 -> 210.96.100.86:512 [5931, 60]

IPNAT: I* icmp 210.96.100.85:512 -> 210.96.100.86:512 [5931, 60]

IPNAT: O icmp 210.96.100.86:512 -> 210.96.100.85:512 [21453, 60]

IPNAT: O* icmp 210.96.100.86:512 -> 172.18.50.195:512 [21453, 60]

！NAT相关信息，可以看到NAT成功

【问题与思考】

（1）理解NAT概念和原理；

（2）理解ospf路由协议原理；

【参考配置】

参考配置包括如下清单：

（1）R2624-A参考配置；

（2）S6806E-A参考配置；

（3）S3550-24-A参考配置；

（4）S3550-24-B参考配置；

（5）S2126G-A1参考配置；

（6）S2126G-A2参考配置；

（7）S2126G-B1参考配置；

（8）S2126G-B2参考配置

（1）R2624-A参考配置

R2624-A(config)#end

R2624-A#show run

Building configuration...

Current configuration:

version 6.14(2)

hostname "R2624-A"

enable password star

ip subnet-zero

interface FastEthernet0

ip address 192.168.86.30 255.255.255.240

ip nat inside

interface FastEthernet1

ip address 210.96.100.85 255.255.255.252

ip nat outside

interface FastEthernet2

no ip address

shutdown

interface FastEthernet3

no ip address

shutdown

interface Serial0

no ip address

interface Serial1

no ip address

router ospf 1

network 210.96.100.84 0.0.0.3 area 0.0.0.0

network 192.168.86.16 0.0.0.15 area 0.0.0.0

default-information originate always

ip nat inside source list 10 interface FastEthernet1 overload

ip classless

ip route 0.0.0.0 0.0.0.0 210.96.100.86

access-list 10 permit any

line con 0

line aux 0

line vty 0 4

password star

End

（2）S6806E-A参考配置

S6806E-A#show run

System software version : 2.41(2) Build Sep 19 2005 Rel

Building configuration...

Current configuration : 883 bytes

version 1.0

install 4 12sfp/gt

ip routing algorithm CRC32_UPPER

hostname S6806E-A

enable secret level 1 5 $2IOrJ%(3LMp]K*.4AxB^"[/QwNq&#Z1

enable secret level 15 5 $2knAxB^3glowNq&4h`@IOrJQimLMp]K

interface GigabitEthernet 4/1

switchport mode trunk

interface GigabitEthernet 4/2

switchport mode trunk

interface GigabitEthernet 4/10

switchport access vlan 300

interface Vlan 1

ip address 192.168.0.3 255.255.255.0

interface Vlan 100

ip address 192.168.128.45 255.255.255.248

interface Vlan 200

ip address 192.168.129.45 255.255.255.248

interface Vlan 300

ip address 192.168.86.17 255.255.255.240

router ospf

area 0.0.0.0

network 192.168.86.16 255.255.255.240 area 0.0.0.0

network 192.168.128.40 255.255.255.248 area 0.0.0.0

network 192.168.129.40 255.255.255.248 area 0.0.0.0

snmp-server community star ro

end

（3）S3550-24-B参考配置

S3550-24-B#show run

Building configuration...

Current configuration : 968 bytes

version 1.0

hostname S3550-24-B

vlan 1

vlan 50

vlan 60

vlan 70

vlan 200

enable secret level 1 5 $2gkE,1u3dhl&-8U4ein'.tjQfjo+/7R

enable secret level 15 5 $2G1X)sv3>H.Y*T74C,tZ[V/QD+S(\W&

interface FastEthernet 0/1

switchport mode trunk

interface FastEthernet 0/10

switchport mode trunk

interface FastEthernet 0/20

switchport mode trunk

interface Vlan 1

ip address 192.168.0.2 255.255.255.0

interface Vlan 50

ip address 172.18.50.1 255.255.255.0

interface Vlan 60

ip address 172.18.60.1 255.255.255.0

interface Vlan 70

ip address 172.18.70.1 255.255.255.0

interface Vlan 200

ip address 192.168.129.44 255.255.255.248

router ospf

area 0.0.0.0

network 172.18.50.0 255.255.255.0 area 0.0.0.0

network 172.18.60.0 255.255.255.0 area 0.0.0.0

network 172.18.70.0 255.255.255.0 area 0.0.0.0

network 192.168.129.40 255.255.255.248 area 0.0.0.0

snmp-server community star rw

end

（4）S3550-24-A参考配置

S3550-24-A#show run

Building configuration...

Current configuration : 968 bytes

version 1.0

hostname S3550-24-A

vlan 1

vlan 10

vlan 20

vlan 30

vlan 100

enable secret level 1 5 $29=G1X)3R:>H.Y*4_;C,tZ[Q0<D+S(\

enable secret level 15 5 $21u_;C,3-8U0<D+4.tj9=G1Q/7R:>H.

interface FastEthernet 0/1

switchport mode trunk

interface FastEthernet 0/10

switchport mode trunk

interface FastEthernet 0/20

switchport mode trunk

interface Vlan 1

ip address 192.168.0.1 255.255.255.0

interface Vlan 10

ip address 172.16.10.1 255.255.255.0

interface Vlan 20

ip address 172.16.20.1 255.255.255.0

interface Vlan 30

ip address 172.16.30.1 255.255.255.0

interface Vlan 100

ip address 192.168.128.44 255.255.255.248

router ospf

area 0.0.0.0

network 172.16.10.0 255.255.255.0 area 0.0.0.0

network 172.16.20.0 255.255.255.0 area 0.0.0.0

network 172.16.30.0 255.255.255.0 area 0.0.0.0

network 192.168.128.40 255.255.255.248 area 0.0.0.0

snmp-server community star rw

end

（7）S2126G-B1参考配置

S2126G-B1#show run

System software version : 1.61 Build Jun 17 2005 Release

Building configuration...

Current configuration : 800 bytes

version 1.0

hostname S2126G-B1

vlan 1

vlan 50

vlan 60

vlan 70

enable secret level 1 5 $29=G1X)3R:>H.Y*4_;C,tZ[Q0<D+S(\

enable secret level 15 5 $2Y*T7+.3tZ[V/,|4S(\W&-/QX)sv'~1

interface fastEthernet 0/1

switchport access vlan 50

interface fastEthernet 0/2

switchport access vlan 50

interface fastEthernet 0/3

switchport access vlan 50

interface fastEthernet 0/4

switchport access vlan 60

interface fastEthernet 0/5

switchport access vlan 60

interface fastEthernet 0/6

switchport access vlan 60

interface fastEthernet 0/7

switchport access vlan 70

interface fastEthernet 0/8

switchport access vlan 70

interface fastEthernet 0/9

switchport access vlan 70

interface fastEthernet 0/10

switchport mode trunk

end

S2126G-B1#

（6）S2126G-B2参考配置

S2126G-B2#show run

System software version : 1.61 Build Jun 17 2005 Release

Building configuration...

Current configuration : 800 bytes

version 1.0

hostname S2126G-B2

vlan 1

vlan 50

vlan 60

vlan 70

enable secret level 1 5 $29=G1X)3R:>H.Y*4_;C,tZ[Q0<D+S(\

enable secret level 15 5 $2Y*T7+.3tZ[V/,|4S(\W&-/QX)sv'~1

interface fastEthernet 0/1

switchport access vlan 50

interface fastEthernet 0/2

switchport access vlan 50

interface fastEthernet 0/3

switchport access vlan 50

interface fastEthernet 0/4

switchport access vlan 60

interface fastEthernet 0/5

switchport access vlan 60

interface fastEthernet 0/6

switchport access vlan 60

interface fastEthernet 0/7

switchport access vlan 70

interface fastEthernet 0/8

switchport access vlan 70

interface fastEthernet 0/9

switchport access vlan 70

interface fastEthernet 0/10

switchport mode trunk

end

S2126G-B2#

（7）S2126G-A1参考配置

S2126G-A1#show run

Building configuration...

Current configuration : 800 bytes

version 1.0

hostname S2126G-A1

vlan 1

vlan 10

vlan 20

vlan 30

enable secret level 1 5 $2@IOrJ%3mLMp]K*4nAxB^"[QowNq&#Z

enable secret level 15 5 $2-/-aeh3'~1'dfi4+.t{bckQ,|7zygl

interface fastEthernet 0/1

switchport access vlan 10

interface fastEthernet 0/2

switchport access vlan 10

interface fastEthernet 0/3

switchport access vlan 10

interface fastEthernet 0/4

switchport access vlan 20

interface fastEthernet 0/5

switchport access vlan 20

interface fastEthernet 0/6

switchport access vlan 20

interface fastEthernet 0/7

switchport access vlan 30

interface fastEthernet 0/8

switchport access vlan 30

interface fastEthernet 0/9

switchport access vlan 30

interface fastEthernet 0/10

switchport mode trunk

end

S2126G-A1#

（8）S2126G-A2参考配置

S2126G-A1#show run

Building configuration...

Current configuration : 800 bytes

version 1.0

hostname S2126G-A2

vlan 1

vlan 10

vlan 20

vlan 30

enable secret level 1 5 $2@IOrJ%3mLMp]K*4nAxB^"[QowNq&#Z

enable secret level 15 5 $2-/-aeh3'~1'dfi4+.t{bckQ,|7zygl

interface fastEthernet 0/1

switchport access vlan 10

interface fastEthernet 0/2

switchport access vlan 10

interface fastEthernet 0/3

switchport access vlan 10

interface fastEthernet 0/4

switchport access vlan 20

interface fastEthernet 0/5

switchport access vlan 20

interface fastEthernet 0/6

switchport access vlan 20

interface fastEthernet 0/7

switchport access vlan 30

interface fastEthernet 0/8

switchport access vlan 30

interface fastEthernet 0/9

switchport access vlan 30

interface fastEthernet 0/10

switchport mode trunk

end

S2126G-A2#

转载于:https://blog.51cto.com/289780/58227

weixin_33853827

关注

3
点赞
踩
7

收藏

觉得还不错? 一键收藏
0
评论
cisco大型（单核心）网络综合实验

【实验名称】大型（单核心）网络综合实验【实验原型】某大型企业全网建设（采用设备： RG-R3662路由器、RG-S6806E多业务万兆核心路由交换机、RG-S3550-12SFP/GT全千兆三层路由交换机、RG-S2126G/50G千兆安全智能堆叠交换机）【实验目的】在实验室环境根据具体真实网络建设搭...
复制链接

扫一扫