ensp项目练习

完整命令

1.创建vlan，配置接口模式
[sw1]vlan batch 10 20 30 50
[sw1]int g 0/0/1
[sw1-GigabitEthernet0/0/1]port link-type access 
[sw1-GigabitEthernet0/0/1]port default vlan 20
[sw1-GigabitEthernet0/0/1]int g 0/0/2
[sw1-GigabitEthernet0/0/2]port link-type trunk    
[sw1-GigabitEthernet0/0/2]port trunk allow-pass vlan all

[sw2]vlan batch 10 20 30 50
[sw2]int g 0/0/1
[sw2-GigabitEthernet0/0/1]port link-type access 
[sw2-GigabitEthernet0/0/1]port default vlan 20
[sw2-GigabitEthernet0/0/1]int g 0/0/2
[sw2-GigabitEthernet0/0/2]port link-type trunk    
[sw2-GigabitEthernet0/0/2]port trunk allow-pass vlan all

[sw3]vlan batch 10 20 30 50
[sw3]int g 0/0/1
[sw3-GigabitEthernet0/0/1]port link-type access
[sw3-GigabitEthernet0/0/1]port default vlan 30
[sw3-GigabitEthernet0/0/1]int g 0/0/2
[sw3-GigabitEthernet0/0/2]port link-type trunk
[sw3-GigabitEthernet0/0/2]port trunk allow-pass vlan all

[sw5]vlan batch 10 20 30 50
[sw5-GigabitEthernet0/0/5]port link-type access
[sw5-GigabitEthernet0/0/5]port default vlan 50
[sw5]port-group group-member g0/0/1 g0/0/2 g0/0/3    
[sw5-port-group]port link-type trunk 
[sw5-port-group]port trunk allow-pass vlan all

2.给每个vlanif添加ip地址
[sw5-Vlanif50]ip add 192.168.50.251 24
[sw5-Vlanif10]ip address 192.168.10.251 24
[sw5-Vlanif20]ip add 192.168.20.251 24
[sw5-Vlanif30]ip add 192.168.30.251 24

3.路由器开启DHCP
[R3-GigabitEthernet0/0/1]ip add 192.168.50.1 24
[R3]ip route-static 0.0.0.0 0 192.168.50.251  //添加静态路由
[R3]ip pool vlan10-pool   //创建ip地址池
[R3-ip-pool-vlan10]network 192.168.10.0 mask 24
[R3-ip-pool-vlan10-pool]gateway-list 192.168.10.254
[R3-ip-pool-vlan10-pool]dns-list 8.8.8.8
[R3-GigabitEthernet0/0/1]dhcp select global  //开启全局DHCP

[R3]ip pool vlan20-pool
[R3-ip-pool-vlan20-pool]network 192.168.20.0 mask 24
[R3-ip-pool-vlan20-pool]gateway-list 192.168.20.254
[R3-ip-pool-vlan20-pool]dns-list 8.8.8.8

[R3]ip pool vlan30-pool
[R3-ip-pool-vlan30-pool]network 192.168.30.0 mask 24
[R3-ip-pool-vlan30-pool]gateway-list 192.168.30.254
[R3-ip-pool-vlan30-pool]dns-list 8.8.8.8

4.交换机开启中继功能
[sw5]dhcp enable
[sw5-Vlanif10]dhcp select relay     
[sw5-Vlanif10]dhcp relay server-ip 192.168.50.1

[sw5-Vlanif20]dhcp select relay
[sw5-Vlanif20]dhcp relay server-ip 192.168.50.1

[sw5-Vlanif30]dhcp select relay    
[sw5-Vlanif30]dhcp relay server-ip 192.168.50.1

5.添加sw6,添加基础配置
[sw6]vlan batch 10 20 30 50    
[sw6]port-group group-member g0/0/1 to g0/0/3
[sw6-port-group]port link-type trunk
[sw6-port-group]port trunk allow-pass vlan all
[sw6]int g 0/0/6
[sw6-GigabitEthernet0/0/6]port link-type trunk
[sw6-GigabitEthernet0/0/6]port trunk allow-pass vlan all

//配置虚接口ip地址
[sw6]int vlan 10
[sw6-Vlanif10]ip address 192.168.10.252 24
[sw6-Vlanif10]int vlan 20
[sw6-Vlanif20]ip address 192.168.20.252 24
[sw6-Vlanif20]int vlan 30
[sw6-Vlanif30]ip address 192.168.30.252 24
[sw6-Vlanif30]int vlan 50
[sw6-Vlanif50]ip address 192.168.50.252 24

6.配置vrrp，虚拟路由冗余
[sw5]int vlan 10
//创建备份组，设置虚拟路由网关                                
[sw5-Vlanif10]vrrp vrid 10 virtual-ip 192.168.10.254
//设置优先级，vlan10,20的master主路由
[sw5-Vlanif10]vrrp vrid 10 priority 130
[sw5-Vlanif10]int vlan 20
[sw5-Vlanif20]vrrp vrid 20 virtual-ip 192.168.20.254
[sw5-Vlanif20]vrrp vrid 20 priority 130
//vlan30用默认优先级，做备份路由
[sw5-Vlanif20]int vlan 30
[sw5-Vlanif30]vrrp vrid 30 virtual-ip 192.168.30.254

[sw6]int vlan 10
[sw6-Vlanif10]vrrp vrid 10 virtual-ip 192.168.10.254
[sw6-Vlanif10]int vlan 20
[sw6-Vlanif20]vrrp vrid 20 virtual-ip 192.168.20.254
[sw6-Vlanif20]int vlan 30
[sw6-Vlanif30]vrrp vrid 30 virtual-ip 192.168.30.254
//设置优先级做vlan30的主路由    
[sw6-Vlanif30]vrrp vrid 30 priority 130

7.配置MSTP，多生成树协议，sw1，2，3，5，6相同配置
//开启区域配置
[sw5]stp region-configuration
//设置区域名称
[sw5-mst-region]region-name ntd    
//每个实例设置vlan
[sw5-mst-region]instance 5 vlan 50
[sw5-mst-region]instance 10 vlan 10
[sw5-mst-region]instance 20 vlan 20
[sw5-mst-region]instance 30 vlan 30
//激活区域配置
[sw5-mst-region]active region-configuration 

//配置优先级，sw5是vlan10，20的主根，vlan30，5的次根
[sw5]stp instance 10 priority 0
[sw5]stp instance 20 priority 0
[sw5]stp instance 30 priority 4096
[sw5]stp instance 5 priority 4096

[sw6]stp instance 10 priority 4096
[sw6]stp instance 20 priority 4096
[sw6]stp instance 30 priority 0
[sw6]stp instance 5 priority 0

[sw1-GigabitEthernet0/0/3]port link-type trunk 
[sw1-GigabitEthernet0/0/3]port trunk allow-pass vlan all
[sw2-GigabitEthernet0/0/3]port link-type trunk
[sw2-GigabitEthernet0/0/3]port trunk allow-pass vlan all
[sw3-GigabitEthernet0/0/3]port link-type trunk
[sw3-GigabitEthernet0/0/3]port trunk allow-pass vlan all

8、sw6开启dhcp中继
[sw6]int vlan 10
[sw6-Vlanif10]dhcp select     
[sw6-Vlanif10]dhcp relay server-ip 192.168.50.1
[sw6-Vlanif10]int vlan 20
[sw6-Vlanif20]dhcp select relay
[sw6-Vlanif20]dhcp relay server-ip 192.168.50.1
[sw6-Vlanif20]int vlan 30
[sw6-Vlanif30]dhcp select relay
[sw6-Vlanif30]dhcp relay server-ip 192.168.50.1

9.配置r1，r2
[r1]int g 0/0/2
[r1-GigabitEthernet0/0/2]ip address 100.1.1.1 29
[r1-GigabitEthernet0/0/2]int g 0/0/0
[r1-GigabitEthernet0/0/0]ip address 192.168.15.1 24
[r1-GigabitEthernet0/0/0]int g 0/0/1
[r1-GigabitEthernet0/0/1]ip add 192.168.16.1 24

[r2]int g 0/0/1
[r2-GigabitEthernet0/0/1]ip address 200.1.1.254 24
[r2-GigabitEthernet0/0/1]int g 0/0/0
[r2-GigabitEthernet0/0/0]ip add 100.1.1.2 29
//配置交换机设置虚接口
[sw5]int vlan 15
[sw5-Vlanif15]ip address 192.168.15.5 24    
[sw5-GigabitEthernet0/0/7]port link-type access
[sw5-GigabitEthernet0/0/7]port default vlan 15

[sw6]int vlan 16
[sw6-Vlanif16]ip address 192.168.16.6 24
[sw6-GigabitEthernet0/0/7]port link-type access
[sw6-GigabitEthernet0/0/7]port default vlan 16
//设置默认静态路由
[sw5]ip route-static 0.0.0.0 0 192.168.15.1
[sw6]ip route-static 0.0.0.0 0 192.168.16.1

10.配置浮动路由
//配置r1去往10，20，30网段浮动路由10，20主路由为15网段，
备份路由为16网段，30主路由为16网段，备份路由为15网段
[r1]ip route-static 192.168.10.0 24 192.168.15.5
[r1]ip route-static 192.168.10.0 24 192.168.16.6 preference 70
[r1]ip route-static 192.168.20.0 24 192.168.15.5
[r1]ip route-static 192.168.20.0 24 192.168.16.6 preference 70
[r1]ip route-static 192.168.30.0 24 192.168.16.6
[r1]ip route-static 192.168.30.0 24 192.168.15.5 preference 70

11.配置NAT+ACL
[r1]ip route-static 0.0.0.0 0 100.1.1.2
//创建公网地址组
[r1]nat address-group 1 100.1.1.3 100.1.1.5
//创建基本acl，定义规则，允许10.20.30网段通过
[r1]acl 2000
[r1-acl-basic-2000]rule 10 permit source 192.168.10.0 0.0.0.255
[r1-acl-basic-2000]rule 20 permit source 192.168.20.0 0.0.0.255
[r1-acl-basic-2000]rule 30 permit source 192.168.30.0 0.0.0.255
[r1]int g 0/0/2
//出接口添加acl 2000，公网IP地址组1
[r1-GigabitEthernet0/0/2]nat outbound 2000 address-group 1

12.上行接口跟踪
[sw5]int vlan 10
[sw5-Vlanif10]vrrp vrid 20 track int g0/0/7 reduced 50
[sw5]int vlan 20
[sw5-Vlanif20]vrrp vrid 20 track int g0/0/7 reduced 50
[sw6]int vlan 30
[sw6-Vlanif30]vrrp vrid 30 track int g0/0/7 reduced 50