三层架构综合实验

1.channel
[sw1]int Eth-Trunk 0
[sw1-Eth-Trunk0]int g0/0/6
[sw1-GigabitEthernet0/0/6]eth-trunk 0
[sw1-GigabitEthernet0/0/6]int g0/0/3
[sw1-GigabitEthernet0/0/3]eth-trunk 0

[sw2]int Eth-Trunk 0
[sw2-Eth-Trunk0]int g0/0/3
[sw2-GigabitEthernet0/0/3]eth-trunk 0
[sw2-GigabitEthernet0/0/3]int g0/0/6
[sw2-GigabitEthernet0/0/6]eth-trunk 0

2.vlan
1)创建vlan
[sw1]vlan 2
[sw2]vlan 2
[sw3]vlan 2
[sw4]vlan 2
2）调trunk
[sw1]int g0/0/2
[sw1-GigabitEthernet0/0/2]port link-type trunk
[sw1-GigabitEthernet0/0/3]int g0/0/5
[sw1-GigabitEthernet0/0/5]port link-type trunk
[sw1]int Eth-Trunk 0
[sw1-Eth-Trunk0]port link-type trunk

[sw2]int Eth-Trunk 0
[sw2-Eth-Trunk0]port link-type trunk
[sw2-Eth-Trunk0]int g0/0/2
[sw2-GigabitEthernet0/0/2]port link-type trunk
[sw2-GigabitEthernet0/0/2]int g0/0/4
[sw2-GigabitEthernet0/0/4]port link-type trunk

[sw3]int e0/0/1
[sw3-Ethernet0/0/1]port link-type trunk
[sw3-Ethernet0/0/1]int e0/0/4
[sw3-Ethernet0/0/4]port link-type trunk
[sw3-Ethernet0/0/4]int e0/0/3
[sw3-Ethernet0/0/3]port link-type access

[sw4]int e0/0/1
[sw4-Ethernet0/0/1]port link-type trunk
[sw4-Ethernet0/0/1]int e0/0/5
[sw4-Ethernet0/0/5]port link-type trunk
[sw4-Ethernet0/0/5]int e0/0/3
[sw4-Ethernet0/0/3]port link-type access

3)划分vlan
[sw1-Eth-Trunk0]port trunk allow-pass vlan 1 to 2
[sw1-GigabitEthernet0/0/2]port trunk allow-pass vlan 1 to 2
[sw1-GigabitEthernet0/0/5]port trunk allow-pass vlan 1 to 2

[sw2-Eth-Trunk0]port trunk allow-pass vlan 1 to 2
[sw2-GigabitEthernet0/0/4]port trunk allow-pass vlan 1 to 2
[sw2-GigabitEthernet0/0/2]port trunk allow-pass vlan 1 to 2

[sw3-Ethernet0/0/3]port default vlan 2
[sw3-Ethernet0/0/1]port trunk allow-pass vlan 1 to 2
[sw3-Ethernet0/0/4]port trunk allow-pass vlan 1 to 2

[sw4-Ethernet0/0/3]port default vlan 2
[sw4-Ethernet0/0/1]port trunk allow-pass vlan 1 to 2
[sw4-Ethernet0/0/5]port trunk allow-pass vlan 1 to 2

3.生成树协议（STP)
1）激活
[sw1]stp mode mstp
[sw1]stp region-configuration
[sw1-mst-region]region-name a
[sw1-mst-region]instance 1 vlan 1
[sw1-mst-region]instance 2 vlan 2
[sw1-mst-region]active region-configuration

[sw2]stp mode mstp
[sw2]stp region-configuration
[sw2-mst-region]region-name a
[sw2-mst-region]instance 1 vlan 1
[sw2-mst-region]instance 2 vlan 2
[sw2-mst-region]active region-configuration

[sw3]stp mode mstp
[sw3]stp region-configuration
[sw3-mst-region]region-name a
[sw3-mst-region]instance 1 vlan 1
[sw3-mst-region]instance 2 vlan 2
[sw3-mst-region]active region-configuration

[sw4]stp mode mstp
[sw4]stp region-configuration
[sw4-mst-region]region-name a
[sw4-mst-region]instance 1 vlan 1
[sw4-mst-region]instance 2 vlan 2
[sw4-mst-region]active region-configuration

2)选角色
[sw1]stp instance 1 root primary 当组一的根
[sw1]stp instance 2 root secondary 做组二的备份根
[sw2]stp instance 1 root secondary
[sw2]stp instance 2 root primary

调接入层
[sw3]port-group group-member e0/0/2 to e0/0/3
[sw3-port-group]stp edged-port enable

[sw4]port-group group-member e0/0/2 to e0/0/3
[sw4-port-group]stp edged-port enable

4 、svi
[sw1]int Vlanif 1
[sw1-Vlanif1]ip address 172.16.1.1 25
[sw1]int Vlanif 2
[sw1-Vlanif2]ip address 172.16.1.129 25

[sw2]int Vlanif 1
[sw2-Vlanif1]ip address 172.16.1.2 25
[sw2]int Vlanif 2
[sw2-Vlanif2]ip address 172.16.1.130 25

5.虚拟网关
[sw1]interface Vlanif 1
[sw1-Vlanif1]vrrp vrid 1 virtual-ip 172.16.1.126 定义虚拟网关
[sw1]int Vlanif 2
[sw1-Vlanif2]vrrp vrid 1 virtual-ip 172.16.1.254
[sw1-Vlanif1]vrrp vrid 1 priority 101
调整优先级我是master
[sw1-Vlanif1]vrrp vrid 1 track int g0/0/1 reduced 2
上行链路追踪，优先级改为2

[sw2]int Vlanif 1
[sw2-Vlanif1]vrrp vrid 1 virtual-ip 172.16.1.126
[sw2]int Vlanif 2
[sw2-Vlanif2]vrrp vrid 1 virtual-ip 172.16.1.254
[sw2-Vlanif2]vrrp vrid 1 priority 101
[sw2-Vlanif2]vrrp vrid 1 track int g0/0/1 reduced 2

6.DHCP 池塘 配置一条就跳太麻烦了，就写文档吧~~
SW1：
dchp enable
ip pool v1
network 172.16.1.0 mask 25
gateway-list 172.16.1.126 虚拟的
dns-list 114.114.114.114
ip poo v2
network 172.16.1.128 mask 25
gateway-list 172.16.1.254
dns-list 114.114.114.114
int vlanif 1
dhcp select global
int vlanif 2
dhcp select global

SW2：
dchp enable
ip pool v1
network 172.16.1.0 mask 25
gateway-list 172.16.1.126 虚拟的
dns-list 114.114.114.114
ip poo v2
network 172.16.1.128 mask 25
gateway-list 172.16.1.254
dns-list 114.114.114.114
int vlanif 1
dhcp select global
int vlanif 2
dhcp select global

7.路由器
1）地址
[ISP]int l0
[ISP-LoopBack0]ip address 2.2.2.2 24
[ISP-GigabitEthernet0/0/0]ip address 12.1.1.2 24

[R1]int g0/0/0
[R1-GigabitEthernet0/0/0]ip address 12.1.1.1 24
[R1-GigabitEthernet0/0/0]int g0/0/1
[R1-GigabitEthernet0/0/1]ip address 172.16.0.1 30
R1-GigabitEthernet0/0/1]int g0/0/2
[R1-GigabitEthernet0/0/2]ip address 172.16.0.5 30

[sw1]vlan 99
[sw1]int Vlanif 99
[sw1-Vlanif99]ip address 172.16.0.2 30
[sw1-Vlanif99]int g0/0/1
[sw1-GigabitEthernet0/0/1]port link-type access
[sw1-GigabitEthernet0/0/1]port default vlan 99

[sw2]vlan 99
[sw2]int Vlanif 99
[sw2-Vlanif99]ip address 172.16.0.6 30
[sw2-Vlanif99]int g0/0/1
[sw2-GigabitEthernet0/0/1]port link-type access
[sw2-GigabitEthernet0/0/1]port default vlan 99

2）动态
R5:
ospf 1 router-id 1.1.1.1
area 0
network 172.16.0.0 0.0.255.255

SW1:
还要宣告AVI接口
ospf 1 router-id 1.1.1.11
area 0
netwrok 172.16.0.2 0.0.255.255
area 1
netwrok 172.16.1.1 0.0.0.0
netwrok 172.16.1.129 0.0.0.0

Sw2:
ospf 1 router-id 2.2.2.2
area 0
netwrok 172.16.0.6 0.0.255.255
area 1
netwrok 172.16.1.2 0.0.0.0
netwrok 172.16.1.130 0.0.0.0



3)解决不停发包
Sw1:
int ospf 1
silent-intterface all
undo silent-interface eth-trunk 0
undo silent-interface vlanif 1
undo silent-interface vlanif 99
4)汇总
Sw 2:
int ospf 1
silent-intterface all
undo silent-interface vlanif 1
undo silent-interface vlanif 99
undo silent-interface eth-trunk 0

Sw1:
ospf 1
area 1
abr-summary 1 172.16.1.0 255.255.255.0
q
ip router-satic 172.16.1.0 255.255.255.0 null 0

Sw2:
ospf 1
area 1
abr-summary 1 172.16.1.0 255.255.255.0
q
ip router-satic 172.16.1.0 255.255.255.0 null 0

4）访问外网
[R1]ip route-static 0.0.0.0 0 12.1.1.2
[R1]acl 2000
[R1-acl-basic-2000]rule permit source 172.16.0.0 0.0.255.255
[R1-acl-basic-2000]q
[R1]int g0/0/0
[R1-GigabitEthernet0/0/0]nat outbound 2000
[R1-GigabitEthernet0/0/0]q
[R1]ospf 1
[R1-ospf-1]default-route-advertise

检测：




用PC4上网模拟SW4宕机