目录
实验要求:
1、全网可达;
2、拓扑中所需地址全部基于192.168.0.0/24划分所得;
3、静态路由(不许使用其他动态);
4、R1环回需要汇总。
实验过程
(1)划分网段配置IP、环回(网段划分如上图所示)
(2)配置vlan
[Lsw1]vlan 2
[Lsw1]vlan 3
[Lsw1-Ethernet0/0/2]port link-type access
[Lsw1-Ethernet0/0/2]port default vlan 2
[Lsw1-Ethernet0/0/3]port link-type access
[Lsw1-Ethernet0/0/3]port default vlan 3
Lsw2:
[Lsw2]vlan 2
[Lsw2]vlan 3
[Lsw2-Ethernet0/0/2]port link-type access
[Lsw2-Ethernet0/0/2]port default vlan 2
[Lsw2-Ethernet0/0/3]port link-type access
[Lsw2-Ethernet0/0/3]port default vlan 3
(3)
Trunk 干道
Lsw1:
[lsw1-Ethernet0/0/4]port link-type trunk
[lsw1-Ethernet0/0/4]port trunk allow-pass vlan 2 to 3
Lsw2:
[lsw2-Ethernet0/0/1]port link-type trunk
[lsw2-Ethernet0/0/1]port trunk allow-pass vlan 2 to 3
(3)路由子接口
[r4]interface GigabitEthernet 0/0/2.1
[r4-GigabitEthernet0/0/2.1]dot1q termination vid 2
[r4-GigabitEthernet0/0/2.1]ip address 192.168.0.129
[r4GigabitEthernet0/0/2.1]arp broadcast enable
[r4]interface GigabitEthernet 0/0/2.2
[r4-GigabitEthernet0/0/2.2]dot1q termination vid 3
[r4-GigabitEthernet0/0/2.2]ip address 192.168.0.145
[r4GigabitEthernet0/0/2.2]arp broadcast enable
(4)在R4上配置DHCP
[r4]ip pool xixi
[r4-ip-pool-xixi]network 192.168.0.128 m
[r4-ip-pool-xixi]network 192.168.0.128 mask 255.255.255.240
[r4-ip-pool-xixi]gateway-list 192.168.0.129
[r4-ip-pool-xixi]dns-list 8.8.8.8
[r4]ip pool haha
[r4-ip-pool-haha]network 192.168.0.144 mask 255.255.255.240
[r4-ip-pool-haha]gateway-list 192.168.0.145
[r4-ip-pool-haha]dn
[r4-ip-pool-haha]dns-list 8.8.8.8
[r4]interface GigabitEthernet 0/0/2.1
[r4-GigabitEthernet0/0/2.1]dhcp select global
[r4]interface GigabitEthernet 0/0/2.2
[r4-GigabitEthernet0/0/2.2]dhcp select global
(4)在路由器上写静态路由
[r1]ip route-static
(5)R1防环
[r1] ip route-static 192.168.0.0 28 NULL 0
(6)写缺省路由
[r1] ip route-static 0.0.0.0 0 192.168.0.18
[r1] ip route-static 0.0.0.0 0 192.168.0.97
[r2] ip route-static 0.0.0.0 0 192.168.0.34
[r3] ip route-static 0.0.0.0 0 192.168.0.65
[r4] ip route-static 0.0.0.0 0 192.168.0.81
[r5] ip route-static 0.0.0.0 0 100.1.1.2
(7) 浮动静态
[r3] ip route-static 0.0.0.0 0 192.168.0.50 peference 61
(8)NAT
[r5] acl 2000
[r5-acl-basic-2000] rule 1 permit source any
验证: