思科中型公司网络规划(下)

测试

  1. PC1,PC2,PC3和PC5都能够自动获取到相应的IP地址,在IP参数里包括网关和DNS服务器的IP(用ipconfig /all命令检查)。

  2. PC1,PC2,PC3,PC5都能够访问www.707.com。

  3. 只有pc3才能ftp主机IP为192.168.5.3的服务器,其他电脑不行。

  4. PC1,pc2,PC3,PC5都能够ping 通外网ip(5.5.5.5)。

  5. 用tracert 5.5.5.5命令跟踪,结果应该如下:

​ PC1和PC5—vlan10:

​ C:>tracert -d 5.5.5.5

Tracing route to 5.5.5.5 over a maximum of 30 hops

1 <1 ms <1 ms <1 ms 192.168.59.3

2 <1 ms <1 ms <1 ms 172.16.1.1

3 29 ms 29 ms 29 ms 5.5.5.5

Trace complete.

​ PC2—vlan20:

​ C:>tracert –d 5.5.5.5

Tracing route to 201.1.2.1 over a maximum of 30 hops

1 <1 ms <1 ms <1 ms 192.168.60.2

2 <1 ms <1 ms <1 ms 172.17.1.1

3 28 ms 29 ms 29 ms 5.5.5.5

Trace complete.

​ PC3—vlan30:

​ C:>tracert –d 5.5.5.5

Tracing route to 201.1.2.1 over a maximum of 30 hops

1 <1 ms <1 ms <1 ms 192.168.61.2

2 <1 ms <1 ms <1 ms 172.17.1.1

3 28 ms 29 ms 29 ms 5.5.5.5

Trace complete.

若不是以上结果,则转以下“基础测试”,分析找出问题并解决问题。再执行本步骤,直至PC1、PC5、PC2及PC3的跟踪结果完全正确。

5+、当以上1-5点测试完成后,做以下扩展测试:

扩展测试:

1、手工shutdown L交换机跟踪的接口g0/1,再在PC1、PC2、PC3和PC5上跟踪到5.5.5.5的逐级路由情况(用tracert –d 5.5.5.5命令)。

路径跟踪:

PC1和PC5—vlan10:

​ C:>tracert –d 5.5.5.5

Tracing route to 5.5.5.5 over a maximum of 30 hops

1 <1 ms <1 ms <1 ms 192.168.59.2

2 <1 ms <1 ms <1 ms 172.17.1.1

3 29 ms 29 ms 29 ms 5.5.5.5

Trace complete.

​ PC2—vlan20:

​ C:>tracert –d 5.5.5.5

Tracing route to 5.5.5. over a maximum of 30 hops

1 <1 ms <1 ms <1 ms 192.168.60.2

2 <1 ms <1 ms <1 ms 172.17.1.1

3 28 ms 29 ms 29 ms 5.5.5.5

Trace complete.

​ PC3—vlan30:

​ C:>tracert –d 5.5.5.5

Tracing route to 201.1.2.1 over a maximum of 30 hops

1 <1 ms <1 ms <1 ms 192.168.61.2

2 <1 ms <1 ms <1 ms 172.17.1.1

3 28 ms 29 ms 29 ms 5.5.5.5

Trace complete.

注意:若是3550交换机做standby(vrrp),没有端口跟踪(track)功能,因此无法展现此扩展功能。

若Vlan 10(PC1和PC5)的跟踪路径为:192.168.1.3—192.168.1.2----172.17.1.1—5.5.5.5,则可以漏写track(端口跟踪)命令,则需在L交换机上增加track命令:

L(config )#interface vlan 10

L(config )#standby 10 track GigabitEthernet0/1

若还有问题,请查配置手册查看相应处理细节。

  1. 以上测试任务都完成后,外网PC4能够通过222.1.1.5的IP访问内网中的WEB服务器。

基础测试:

[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-IZfEbWnc-1689850766048)(C:\Users\潘博裕\AppData\Roaming\Typora\typora-user-images\image-20230720175140936.png)]

1、MSTP的理解与测试:

2005-L#show spanning-tree

VLAN0001

Spanning tree enabled protocol ieee

Root ID Priority 32769

​ Address 0002.17D9.D07B

​ Cost 19

​ Port 2(FastEthernet0/2)

​ Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 32769 (priority 32768 sys-id-ext 1)

​ Address 00D0.977C.ED52

​ Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

​ Aging Time 20

Interface Role Sts Cost Prio.Nbr Type


Fa0/1 Altn BLK 19 128.1 P2p

Fa0/2 Root FWD 19 128.2 P2p

Fa0/3 Desg FWD 19 128.3 P2p

VLAN0010

Spanning tree enabled protocol ieee

Root ID Priority 24586

​ Address 00D0.977C.ED52

​ This bridge is the root

​ Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 24586 (priority 24576 sys-id-ext 10)

​ Address 00D0.977C.ED52

​ Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

​ Aging Time 20

Interface Role Sts Cost Prio.Nbr Type


Fa0/1 Desg FWD 19 128.1 P2p

Fa0/2 Desg FWD 19 128.2 P2p

Fa0/3 Desg FWD 19 128.3 P2p

VLAN0020

Spanning tree enabled protocol ieee

Root ID Priority 24596

​ Address 0002.17D9.D07B

​ Cost 19

​ Port 2(FastEthernet0/2)

​ Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 28692 (priority 28672 sys-id-ext 20)

​ Address 00D0.977C.ED52

​ Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

​ Aging Time 20

Interface Role Sts Cost Prio.Nbr Type


Fa0/1 Desg FWD 19 128.1 P2p

Fa0/2 Root FWD 19 128.2 P2p

Fa0/3 Desg FWD 19 128.3 P2p

VLAN0030

Spanning tree enabled protocol ieee

Root ID Priority 8222

​ Address 0002.17D9.D07B

​ Cost 19

​ Port 2(FastEthernet0/2)

​ Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 28702 (priority 28672 sys-id-ext 30)

​ Address 00D0.977C.ED52

​ Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

​ Aging Time 20

Interface Role Sts Cost Prio.Nbr Type


Fa0/1 Desg FWD 19 128.1 P2p

Fa0/2 Root FWD 19 128.2 P2p

Fa0/3 Altn BLK 19 128.3 P2p

2006-R#show spanning-tree

VLAN0001

Spanning tree enabled protocol ieee

Root ID Priority 32769

​ Address 0002.17D9.D07B

​ This bridge is the root

​ Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 32769 (priority 32768 sys-id-ext 1)

​ Address 0002.17D9.D07B

​ Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

​ Aging Time 20

Interface Role Sts Cost Prio.Nbr Type


Fa0/3 Desg FWD 19 128.3 P2p

Fa0/1 Desg FWD 19 128.1 P2p

Fa0/2 Desg FWD 19 128.2 P2p

VLAN0010

Spanning tree enabled protocol ieee

Root ID Priority 24586

​ Address 00D0.977C.ED52

​ Cost 19

​ Port 2(FastEthernet0/2)

​ Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 28682 (priority 28672 sys-id-ext 10)

​ Address 0002.17D9.D07B

​ Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

​ Aging Time 20

Interface Role Sts Cost Prio.Nbr Type


Fa0/3 Desg FWD 19 128.3 P2p

Fa0/1 Desg FWD 19 128.1 P2p

Fa0/2 Root FWD 19 128.2 P2p

VLAN0020

Spanning tree enabled protocol ieee

Root ID Priority 24596

​ Address 0002.17D9.D07B

​ This bridge is the root

​ Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 24596 (priority 24576 sys-id-ext 20)

​ Address 0002.17D9.D07B

​ Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

​ Aging Time 20

Interface Role Sts Cost Prio.Nbr Type


Fa0/3 Desg FWD 19 128.3 P2p

Fa0/1 Desg FWD 19 128.1 P2p

Fa0/2 Desg FWD 19 128.2 P2p

VLAN0030

Spanning tree enabled protocol ieee

Root ID Priority 8222

​ Address 0002.17D9.D07B

​ This bridge is the root

​ Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 8222 (priority 8192 sys-id-ext 30)

​ Address 0002.17D9.D07B

​ Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

​ Aging Time 20

Interface Role Sts Cost Prio.Nbr Type


Fa0/3 Desg FWD 19 128.3 P2p

Fa0/1 Desg FWD 19 128.1 P2p

Fa0/2 Desg FWD 19 128.2 P2p

2007-cangku#show spanning-tree

VLAN0001

Spanning tree enabled protocol ieee

Root ID Priority 32769

​ Address 0002.17D9.D07B

​ Cost 19

​ Port 4(FastEthernet0/4)

​ Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 32769 (priority 32768 sys-id-ext 1)

​ Address 000C.CFD9.2624

​ Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

​ Aging Time 20

Interface Role Sts Cost Prio.Nbr Type


Fa0/4 Root FWD 19 128.4 P2p

Fa0/3 Desg FWD 19 128.3 P2p

VLAN0010

Spanning tree enabled protocol ieee

Root ID Priority 24586

​ Address 00D0.977C.ED52

​ Cost 19

​ Port 3(FastEthernet0/3)

​ Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 32778 (priority 32768 sys-id-ext 10)

​ Address 000C.CFD9.2624

​ Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

​ Aging Time 20

Interface Role Sts Cost Prio.Nbr Type


Fa0/4 Altn BLK 19 128.4 P2p

Fa0/3 Root FWD 19 128.3 P2p

Fa0/1 Desg FWD 19 128.1 P2p

VLAN0020

Spanning tree enabled protocol ieee

Root ID Priority 24596

​ Address 0002.17D9.D07B

​ Cost 19

​ Port 4(FastEthernet0/4)

​ Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 32788 (priority 32768 sys-id-ext 20)

​ Address 000C.CFD9.2624

​ Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

​ Aging Time 20

Interface Role Sts Cost Prio.Nbr Type


Fa0/4 Root FWD 19 128.4 P2p

Fa0/2 Desg FWD 19 128.2 P2p

Fa0/3 Altn BLK 19 128.3 P2p

2008-bonggong#show spanning-tree

VLAN0001

Spanning tree enabled protocol ieee

Root ID Priority 32769

​ Address 0002.17D9.D07B

​ Cost 19

​ Port 3(FastEthernet0/3)

​ Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 32769 (priority 32768 sys-id-ext 1)

​ Address 00D0.BAC0.267A

​ Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

​ Aging Time 20

Interface Role Sts Cost Prio.Nbr Type


Fa0/4 Altn BLK 19 128.4 P2p

Fa0/3 Root FWD 19 128.3 P2p

VLAN0010

Spanning tree enabled protocol ieee

Root ID Priority 24586

​ Address 00D0.977C.ED52

​ Cost 19

​ Port 4(FastEthernet0/4)

​ Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 32778 (priority 32768 sys-id-ext 10)

​ Address 00D0.BAC0.267A

​ Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

​ Aging Time 20

Interface Role Sts Cost Prio.Nbr Type


Fa0/4 Root FWD 19 128.4 P2p

Fa0/2 Desg FWD 19 128.2 P2p

Fa0/3 Altn BLK 19 128.3 P2p

VLAN0030

Spanning tree enabled protocol ieee

Root ID Priority 8222

​ Address 0002.17D9.D07B

​ Cost 19

​ Port 3(FastEthernet0/3)

​ Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 12318 (priority 12288 sys-id-ext 30)

​ Address 00D0.BAC0.267A

​ Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

​ Aging Time 20

Interface Role Sts Cost Prio.Nbr Type


Fa0/1 Desg FWD 19 128.1 P2p

Fa0/4 Desg FWD 19 128.4 P2p

Fa0/3 Root FWD 19 128.3 P2p

mst 1的生成树(红色线条连接部分),L为根桥。

[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-qhrxvLTg-1689850766049)(file:///C:/Users/潘博裕/AppData/Local/Temp/msohtmlclip1/01/clip_image004.jpg)]

mst 2的生成树(红色线条连接部分),R为根桥。

[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-h8njXCi2-1689850766049)(file:///C:/Users/潘博裕/AppData/Local/Temp/msohtmlclip1/01/clip_image006.jpg)]

2、测试vrrp:

正常情况下,应为:

2005-L# show standby brief

​ P indicates configured to preempt.

​ |

Interface Grp Pri P State Active Standby Virtual IP

Vl10 10 100 P Active local 192.168.59.2 192.168.59.1

Vl20 20 99 P Standby 192.168.60.2 local 192.168.60.1

Vl30 30 99 P Standby 192.168.61.2 local 192.168.61.1

2006-R# show standby brief

​ P indicates configured to preempt.

​ |

Interface Grp Pri P State Active Standby Virtual IP

Vl10 10 99 P Standby 192.168.59.3 local 192.168.59.1

Vl20 20 100 P Active local 192.168.60.3 192.168.60.1

Vl30 30 100 P Active local 192.168.61.3 192.168.61.1

3、 查看路由表

R1路由器:

R1#show ip route ospf

O 192.168.5.0 [110/2] via 172.16.1.2, 01:01:59, GigabitEthernet0/0

O 192.168.59.0 [110/6] via 172.16.1.2, 01:01:49, GigabitEthernet0/0

​ [110/6] via 172.17.1.2, 01:01:49, GigabitEthernet0/1

O 192.168.60.0 [110/6] via 172.16.1.2, 01:01:49, GigabitEthernet0/0

​ [110/6] via 172.17.1.2, 01:01:49, GigabitEthernet0/1

O 192.168.61.0 [110/6] via 172.16.1.2, 01:01:49, GigabitEthernet0/0

​ [110/6] via 172.17.1.2, 01:01:49, GigabitEthernet0/1

L交换机:

2005-L#show ip route ospf

​ 1.0.0.0/32 is subnetted, 1 subnets

O 1.1.1.1 [110/2] via 172.16.1.1, 01:02:17, GigabitEthernet0/1

​ 172.17.0.0/24 is subnetted, 1 subnets

O 172.17.1.0 [110/2] via 172.16.1.1, 01:02:17, GigabitEthernet0/1

​ 201.1.1.0/30 is subnetted, 1 subnets

O 201.1.1.0 [110/65] via 172.16.1.1, 01:02:17, GigabitEthernet0/1

​ 222.1.1.0/29 is subnetted, 1 subnets

O 222.1.1.0 [110/2] via 172.16.1.1, 01:02:17, GigabitEthernet0/1

O*E2 0.0.0.0/0 [110/1] via 172.16.1.1, 01:02:17, GigabitEthernet0/1

2006-R#show ip route ospf

​ 1.0.0.0/32 is subnetted, 1 subnets

O 1.1.1.1 [110/2] via 172.17.1.1, 01:02:37, GigabitEthernet0/1

​ 172.16.0.0/24 is subnetted, 1 subnets

O 172.16.1.0 [110/2] via 172.17.1.1, 01:02:37, GigabitEthernet0/1

O 192.168.5.0 [110/3] via 172.17.1.1, 01:02:37, GigabitEthernet0/1

​ 201.1.1.0/30 is subnetted, 1 subnets

O 201.1.1.0 [110/65] via 172.17.1.1, 01:02:37, GigabitEthernet0/1

​ 222.1.1.0/29 is subnetted, 1 subnets

O 222.1.1.0 [110/2] via 172.17.1.1, 01:02:37, GigabitEthernet0/1

O*E2 0.0.0.0/0 [110/1] via 172.17.1.1, 01:02:37, GigabitEthernet0/1

1.1, 01:02:17, GigabitEthernet0/1

O*E2 0.0.0.0/0 [110/1] via 172.16.1.1, 01:02:17, GigabitEthernet0/1

2006-R#show ip route ospf

​ 1.0.0.0/32 is subnetted, 1 subnets

O 1.1.1.1 [110/2] via 172.17.1.1, 01:02:37, GigabitEthernet0/1

​ 172.16.0.0/24 is subnetted, 1 subnets

O 172.16.1.0 [110/2] via 172.17.1.1, 01:02:37, GigabitEthernet0/1

O 192.168.5.0 [110/3] via 172.17.1.1, 01:02:37, GigabitEthernet0/1

​ 201.1.1.0/30 is subnetted, 1 subnets

O 201.1.1.0 [110/65] via 172.17.1.1, 01:02:37, GigabitEthernet0/1

​ 222.1.1.0/29 is subnetted, 1 subnets

O 222.1.1.0 [110/2] via 172.17.1.1, 01:02:37, GigabitEthernet0/1

O*E2 0.0.0.0/0 [110/1] via 172.17.1.1, 01:02:37, GigabitEthernet0/1

  • 1
    点赞
  • 2
    收藏
    觉得还不错? 一键收藏
  • 打赏
    打赏
  • 0
    评论
为了规划一个中型园区网络,需要考虑以下几个方面: 1. 网络拓扑 中型园区网络的拓扑可以采用星型、环型或者混合型拓扑。在选择拓扑的时候,需要考虑到网络的稳定性、可扩展性和管理复杂度。 2. 网络设备 中型园区网络需要包括路由器、交换机、防火墙和服务器等设备。在选择网络设备的时候,需要考虑到网络规模、业务需求和预算等因素。 3. 网络安全 中型园区网络的安全是非常重要的,需要采取一系列措施来保护网络安全。这些措施包括防火墙、入侵检测系统、加密技术等。 4. 网络管理 中型园区网络的管理需要采用专业的网络管理软件和工具。这些软件和工具可以帮助管理员实时监控网络运行状况,及时处理故障和提高网络性能。 5. 业务需求 中型园区网络规划需要考虑到业务需求,包括网络带宽、数据存储、应用程序等。需要根据业务需求来确定网络的带宽、存储容量和应用程序等。 6. 扩展性 中型园区网络规划需要保证网络的扩展性。当园区规模扩大或者业务需求增加时,网络需要能够及时扩展,保证网络的可靠性和稳定性。 基于以上几个方面,可以规划一个中型园区网络。首先,可以采用星型拓扑,使用多个交换机连接到一个核心路由器,保证网络的稳定性和可扩展性。其次,网络设备可以选择思科或华为等品牌的设备,保证网络的性能和可靠性。再次,网络安全可以采用防火墙和入侵检测系统等措施,保护网络的安全。网络管理可以采用Zabbix或Nagios等网络管理软件,帮助管理员实时监控网络运行状况。业务需求可以根据实际情况来确定,保证网络的带宽、存储容量和应用程序等。最后,网络的扩展性需要考虑到园区的规模和业务需求,选择合适的网络设备和拓扑,保证网络的可靠性和稳定性。
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包

打赏作者

潘博裕

你的鼓励将是我创作的最大动力

¥1 ¥2 ¥4 ¥6 ¥10 ¥20
扫码支付:¥1
获取中
扫码支付

您的余额不足,请更换扫码支付或充值

打赏作者

实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值