客户的网络拓扑图
1.基本的网络情况
2.用户vlan2000172.18.0.0/16
集客AP的认证在172.18.0.254
秒开缓存172.18.0.250
3.核心和路由之间走的是三层协义,以130.130.1.1为路由,130.130.1.2为核心交换机,核心交换机的静态路由为0.0.0.00.0.0.0130.130.1.1
路由回显为核心为172.18.0.0255.255.0.0130.130.1.2
4.同时路由和核心交换之间架设了panabit的流控,用的是网桥模式
5.AP的IP地址和用户的IP地址不是同一个网段
AP分了vlan 10 10.10.0.1 ,vlan 20 20.10.0.1 依次类推
用户和缓存是同一个vlan 2000
6.缓存镜像口和命中口的配置
observe-port 1 interface XGigabitEthernet2/0/15 ---设置监控口
interface XGigabitEthernet2/0/15 -- 接缓存镜像口,设置trunk
port link-type trunk
port trunk allow-pass vlan 2 to 4094
interface XGigabitEthernet2/0/13 ---接缓存命中口,设置trunk
port link-type trunk
port trunk allow-pass vlan 2 to 4094
解决思路:
1.用户的地址是由vlan 2000 DHCP来分配,和AP没有关联,AP只是一个交换机的作用。
2.缓存管理界面的配置
2.1进入命中口配置界面,将VLAN ID号填写 2000
2.2 镜像口中网络拓扑类型选择 “跨路由”,网络选项 选择 “加入vlan层”
2.3用户是通过vlan 2000的网关 来回包,所以在缓存中需要设置 目标网络为用户172.18.0.0,网关是172.18.0.1
以上是vlanlf 2000的配置,交换机学习并记录在路由表,通过在缓存中设置静态路由,通过目标网络172.18.0.0的指引,回包给VLAN下的用户,就可以命中了。
以下内容为三层交换机配置信息:
dis cu
!Software Version V200R008C00SPC500
#
sysname S12708
#
vlan batch 10 20 26 30 40 50 60 70 80 90
vlan batch 100 1000 2000 4000
#
telnet server enable
#0.25
clock timezone UTC add 00:00:00
#
observe-port 1 interface XGigabitEthernet2/0/15
observe-port 2 interface XGigabitEthernet2/0/14
#
dhcp enable
#
diffserv domain default
#
drop-profile default
#
vlan 10
description donglinli
vlan 20
description haipai
vlan 30
description guohui
vlan 40
description chanpei
vlan 50
description hengdong
vlan 60
description hongliguangdian
vlan 1000
description guanli
vlan 2000
description APguanli
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password irreversible-cipher %^%#`rEB6+m0@0mxp82TAhrU,:ULXpp%-!YQ2@FPghO.]i<=,!aPU,i['oQs3j+1%^%#
local-user admin service-type http
local-user jxztkj password irreversible-cipher %^%#Drxf+*A#!K@@m.5Xl&qP#Mi6)Vz>w2PMaj&=rmk-/A}&1qHDYW4~t'L}t[JC%^%#
local-user jxztkj privilege level 15
local-user jxztkj service-type telnet terminal ssh http
local-user tonghc password irreversible-cipher %^%#ORwYNsW!h.E]tsXfXY0CcD.G8UT@$/R,GR%^%#
local-user tonghc privilege level 15
local-user tonghc service-type telnet terminal ssh
#
interface Vlanif1
ip address 10.200.0.1 255.255.255.0
#
interface Vlanif10
ip address 10.10.0.1 255.255.254.0
dhcp select interface
dhcp server dns-list 220.248.192.12 220.248.192.13
#
interface Vlanif20
ip address 10.20.0.1 255.255.240.0
dhcp select interface
dhcp server dns-list 220.248.192.12 220.248.192.13
#
interface Vlanif26
ip address 10.17.6.252 255.255.255.0
#
interface Vlanif30
ip address 10.30.0.1 255.255.254.0
dhcp select interface
dhcp server dns-list 220.248.192.12 220.248.192.13
#
interface Vlanif40
ip address 10.40.0.1 255.255.240.0
dhcp select interface
dhcp server dns-list 220.248.192.12 220.248.192.13
#
interface Vlanif50
ip address 10.50.0.1 255.255.254.0
dhcp select interface
dhcp server dns-list 220.248.192.12 220.248.192.13
#
interface Vlanif60
ip address 10.60.0.1 255.255.254.0
dhcp select interface
dhcp server dns-list 220.248.192.12 220.248.192.13
#
interface Vlanif70
ip address 10.70.0.1 255.255.254.0
dhcp select interface
dhcp server dns-list 220.248.192.12 220.248.192.13
#
interface Vlanif80
ip address 10.80.0.1 255.255.254.0
dhcp select interface
dhcp server dns-list 220.248.192.12 220.248.192.13
#
interface Vlanif90
ip address 10.90.0.1 255.255.254.0
dhcp select interface
dhcp server dns-list 220.248.192.12 220.248.192.13
#
interface Vlanif100
ip address 10.18.255.253 255.255.255.0
#
interface Vlanif1000
ip address 130.130.0.1 255.255.255.0
#
interface Vlanif2000
ip address 172.18.0.1 255.255.0.0
dhcp select interface
dhcp server excluded-ip-address 172.18.0.2 172.18.0.254
dhcp server dns-list 220.248.192.12 220.248.192.13
#
interface Vlanif4000
ip address 172.19.0.1 255.255.240.0
dhcp select interface
dhcp server dns-list 220.248.192.12 220.248.192.13
#
interface Ethernet0/0/0
#
interface GigabitEthernet1/0/0
port link-type trunk
port trunk allow-pass vlan 10 20 2000
stp edged-port enable
#
interface GigabitEthernet1/0/1
port link-type trunk
port trunk allow-pass vlan 10 20 2000
stp edged-port enable
#
interface GigabitEthernet1/0/2
port link-type trunk
port trunk allow-pass vlan 20 2000
stp edged-port enable
port-mirroring to observe-port 2 inbound
port-mirroring to observe-port 2 outbound
#
interface GigabitEthernet1/0/3
port link-type trunk
port trunk allow-pass vlan 20 30 40 50 60 70 80 90 2000
stp edged-port enable
port-mirroring to observe-port 2 inbound
port-mirroring to observe-port 2 outbound
#
interface GigabitEthernet1/0/4
port link-type trunk
port trunk allow-pass vlan 20 30 40 50 60 70 80 90 2000
stp edged-port enable
port-mirroring to observe-port 2 inbound
port-mirroring to observe-port 2 outbound
#
interface GigabitEthernet1/0/5
port link-type trunk
port trunk allow-pass vlan 20 30 40 50 60 70 80 90 2000
stp edged-port enable
port-mirroring to observe-port 2 inbound
port-mirroring to observe-port 2 outbound
#
interface GigabitEthernet1/0/6
port link-type trunk
port trunk allow-pass vlan 20 30 40 50 60 70 80 90 2000
stp edged-port enable
port-mirroring to observe-port 2 inbound
port-mirroring to observe-port 2 outbound
#
interface GigabitEthernet1/0/7
port link-type trunk
port trunk allow-pass vlan 20 30 40 50 60 70 80 90 2000
stp edged-port enable
port-mirroring to observe-port 2 inbound
port-mirroring to observe-port 2 outbound
#
interface GigabitEthernet1/0/8
port link-type trunk
port trunk allow-pass vlan 30 2000
stp edged-port enable
port-mirroring to observe-port 2 inbound
port-mirroring to observe-port 2 outbound
#
interface GigabitEthernet1/0/9
port link-type trunk
port trunk allow-pass vlan 30 2000
stp edged-port enable
port-mirroring to observe-port 2 inbound
port-mirroring to observe-port 2 outbound
#
interface GigabitEthernet1/0/10
port link-type trunk
port trunk allow-pass vlan 20 30 40 50 60 70 80 90 2000
stp edged-port enable
port-mirroring to observe-port 2 inbound
port-mirroring to observe-port 2 outbound
#
interface GigabitEthernet1/0/11
port link-type trunk
port trunk allow-pass vlan 10 20 30 40 50 60 70 80 90 2000
stp edged-port enable
port-mirroring to observe-port 2 inbound
port-mirroring to observe-port 2 outbound
#
interface GigabitEthernet1/0/12
port link-type access
port default vlan 1000
stp edged-port enable
#
interface GigabitEthernet1/0/13
port link-type trunk
port trunk allow-pass vlan 2 to 4094
stp edged-port enable
port-mirroring to observe-port 2 inbound
port-mirroring to observe-port 2 outbound
#
interface GigabitEthernet1/0/14
#
interface GigabitEthernet1/0/15
#
interface GigabitEthernet1/0/16
#
interface GigabitEthernet1/0/17
#
interface GigabitEthernet1/0/18
#
interface GigabitEthernet1/0/19
#
interface GigabitEthernet1/0/20
#
interface GigabitEthernet1/0/21
#
interface GigabitEthernet1/0/22
#
interface GigabitEthernet1/0/23
#
interface GigabitEthernet1/0/24
#
interface GigabitEthernet1/0/25
port link-type access
port default vlan 1000
#
interface GigabitEthernet1/0/26
#
interface GigabitEthernet1/0/27
#
interface GigabitEthernet1/0/28
#
interface GigabitEthernet1/0/29
#
interface GigabitEthernet1/0/30
#
interface GigabitEthernet1/0/31
#
interface GigabitEthernet1/0/32
#
interface GigabitEthernet1/0/33
#
interface GigabitEthernet1/0/34
#
interface GigabitEthernet1/0/35
#
interface GigabitEthernet1/0/36
#
interface GigabitEthernet1/0/37
#
interface GigabitEthernet1/0/38
#
interface GigabitEthernet1/0/39
#
interface GigabitEthernet1/0/40
#
interface GigabitEthernet1/0/41
#
interface GigabitEthernet1/0/42
#
interface GigabitEthernet1/0/43
#
interface GigabitEthernet1/0/44
port link-type access
port default vlan 2000
#
interface GigabitEthernet1/0/45
#
interface GigabitEthernet1/0/46
port link-type access
port default vlan 1000
#
interface GigabitEthernet1/0/47
port link-type access
port default vlan 1000
#
interface XGigabitEthernet2/0/0
undo portswitch
ip address 130.130.1.2 255.255.255.0
port-mirroring to observe-port 1 inbound
port-mirroring to observe-port 1 outbound
#
interface XGigabitEthernet2/0/1
#
interface XGigabitEthernet2/0/2
port link-type trunk
port trunk allow-pass vlan 2 to 4094
stp edged-port enable
port-mirroring to observe-port 2 inbound
port-mirroring to observe-port 2 outbound
#
interface XGigabitEthernet2/0/3
port link-type trunk
port trunk allow-pass vlan 2 to 4094
stp edged-port enable
port-mirroring to observe-port 2 inbound
port-mirroring to observe-port 2 outbound
#
interface XGigabitEthernet2/0/4
port link-type trunk
port trunk allow-pass vlan 20 30 40 50 60 70 80 90 100 2000
port-mirroring to observe-port 2 inbound
port-mirroring to observe-port 2 outbound
#
interface XGigabitEthernet2/0/5
port link-type trunk
port trunk allow-pass vlan 20 30 40 50 60 70 80 90 100 2000
port-mirroring to observe-port 2 inbound
port-mirroring to observe-port 2 outbound
#
interface XGigabitEthernet2/0/6
port link-type trunk
port trunk allow-pass vlan 20 30 40 50 60 70 80 90 100 2000
port-mirroring to observe-port 2 inbound
port-mirroring to observe-port 2 outbound
#
interface XGigabitEthernet2/0/7
port link-type trunk
port trunk allow-pass vlan 20 30 40 50 60 70 80 90 100 2000
port-mirroring to observe-port 2 inbound
port-mirroring to observe-port 2 outbound
#
interface XGigabitEthernet2/0/8
port link-type trunk
port trunk allow-pass vlan 20 30 40 50 60 70 80 90 100 2000
port-mirroring to observe-port 2 inbound
port-mirroring to observe-port 2 outbound
#
interface XGigabitEthernet2/0/9
port link-type trunk
port trunk allow-pass vlan 20 30 40 50 60 70 80 90 100 2000
port-mirroring to observe-port 2 inbound
port-mirroring to observe-port 2 outbound
#
interface XGigabitEthernet2/0/10
port link-type access
port default vlan 1000
#
interface XGigabitEthernet2/0/11
port link-type access
port default vlan 1000
#
interface XGigabitEthernet2/0/12
port link-type access
port default vlan 2000
#
interface XGigabitEthernet2/0/13
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
interface XGigabitEthernet2/0/14
#
interface XGigabitEthernet2/0/15
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
interface NULL0
#
arp static 172.18.0.250 001b-21bb-e802 vid 2000 interface XGigabitEthernet2/0/13
arp static 172.18.0.254 40e0-b401-d14c vid 2000 interface XGigabitEthernet2/0/12
#
ip route-static 0.0.0.0 0.0.0.0 130.130.1.1
ip route-static 6.7.8.0 255.255.255.0 172.18.0.254
#
stelnet server enable
ssh user tonghc
ssh user tonghc authentication-type password
ssh user tonghc service-type stelnet
#
mac-address static 001b-21bb-e802 XGigabitEthernet2/0/13 vlan 2000
mac-address static 40e0-b401-d14c XGigabitEthernet2/0/12 vlan 2000
#
user-interface con 0
user-interface vty 0 4
authentication-mode aaa
protocol inbound all
user-interface vty 16 20
#
wlan
wlan work-group default
#
return