练习华为大型公司网络构建拓扑图

转载于:https://blog.51cto.com/13555524/2065007

此次练习的网络拓扑图，用于自己做笔记。

配置思路：

1. 从下到上
2. 先配置PC1-PC4、服务器的IP 地址、子网掩码、网关。
3. 创建所需vlan（所有交换机配置相同）
4. 配置链路状态（trunk、access）、加入所属vlan
5. 配置各端口IP地址
6. 配置VRRP（这里是三个网关相互冗余）
7. 配置动态路由（ospf）把R1-R4 、SW7设置为骨干区域

这是我大体思路。接下来是配置

1*首先配置各个PC和服务器的IP地址等。

PC1地址：192.168.10.1/24 网关：192.168.10.254

PC2地址：192.168.20.1/24 网关：192.168.20.254

PC3地址：192.168.10.2/24 网关：192.168.10.254

PC4地址：192.168.20.2/24 网关：192.168.20.254

服务器地址：192.168.70.1/24 网关：192.168.70.254

如图：

其它同理

2*在SW1-SW7上全部创建vlan10、vlan20

[SW1]vlan batch 10 20

其它同理

3*配置链路状态（trunk、access）、加入所属vlan

通常交换机与交换机之间用trunk，交换机与非交换机之间用access

先配置SW1:

[SW1]port-group group-member e0/0/13 e0/0/11
[SW1-port-group] port link-type trunk
[SW1-port-group] port trunk allow-pass vlan all

[SW1]int e0/0/1 
[SW1-Ethernet0/0/1]port link-type access 
[SW1-Ethernet0/0/1]port default vlan 10

 SW2:

[SW2]port-group group-member e0/0/11 e0/0/14
[SW2-port-group] port link-type trunk
[SW2-port-group] port trunk allow-pass vlan all

[SW2]int e0/0/1 
[SW2-Ethernet0/0/1]port link-type access 
[SW2-Ethernet0/0/1]port default vlan 20

SW3:

[SW3]port-group group-member e0/0/13 e0/0/11
[SW3-port-group] port link-type trunk
[SW3-port-group] port trunk allow-pass vlan all

[SW3]int e0/0/1 
[SW3-Ethernet0/0/1]port link-type access 
[SW3-Ethernet0/0/1]port default vlan 10

SW4:

[SW4]port-group group-member e0/0/11 e0/0/14
[SW4-port-group] port link-type trunk
[SW4-port-group] port trunk allow-pass vlan all

[SW4]int e0/0/1 
[SW4-Ethernet0/0/1]port link-type access 
[SW4-Ethernet0/0/1]port default vlan 20

SW5:

[SW5]port-group group-member g0/0/12 to g0/0/14   
[SW5-port-group]port link-type trunk 
[SW5-port-group]port trunk allow-pass vlan all

 

 

[SW5]port-group group-member g0/0/1 to g0/0/3
[SW5-port-group]port link-type access
[SW5-port-group]port default vlan 10

 SW6:

[SW6]port-group group-member g0/0/12 to g0/0/14   
[SW6-port-group]port link-type trunk 
[SW6-port-group]port trunk allow-pass vlan all

[SW6]port-group group-member g0/0/1 to g0/0/3
[SW6-port-group]port link-type access
[SW6-port-group]port default vlan 20

SW1-SW7创建vlan30 40 50 60 70:

[SW1]vlan batch 30 40 50 60 70（其它同理）

SW7:

[SW7]int e0/0/1
[SW7-Ethernet0/0/1]port link-type access
[SW7-Ethernet0/0/1]port default vlan 30

[SW7]int e0/0/2
[SW7-Ethernet0/0/2]port link-type access
[SW7-Ethernet0/0/2]port default vlan 40

[SW7]int e0/0/3
[SW7-Ethernet0/0/3]port link-type access
[SW7-Ethernet0/0/3]port default vlan 50

[SW7]int e0/0/4
[SW7-Ethernet0/0/4]port link-type access
[SW7-Ethernet0/0/4]port default vlan 60

4*配置各端口IP地址

R1:

[R1]int g0/0/0
[R1-GigabitEthernet0/0/0]ip address 192.168.10.253 24

[R1]int g0/0/1
[R1-GigabitEthernet0/0/1]ip address 192.168.20.252 24

[R1]int g0/0/2
[R1-GigabitEthernet0/0/2]ip address 192.168.30.1 24

R2：

[R2]int g0/0/0
[R2-GigabitEthernet0/0/0]ip address 192.168.10.251 24

[R2]int g0/0/1
[R2-GigabitEthernet0/0/1]ip address 192.168.20.251 24

[R2]int g0/0/2
[R2-GigabitEthernet0/0/2]ip address 192.168.40.1 24

R3：

[R3]int g0/0/0
[R3-GigabitEthernet0/0/0]ip address 192.168.10.252 24

[R3]int g0/0/1
[R3-GigabitEthernet0/0/1]ip address 192.168.20.253 24

[R3]int g0/0/2
[R3-GigabitEthernet0/0/2]ip address 192.168.50.1 24

SW7:

[SW7]int Vlanif 30
[SW7-Vlanif30]ip address 192.168.30.2 24

[SW7]int Vlanif 40
[SW7-Vlanif40]ip address 192.168.40.2 24

[SW7]int Vlanif 50
[SW7-Vlanif50]ip address 192.168.50.2 24

[SW7]int Vlanif 60
[SW7-Vlanif60]ip address 192.168.60.2 24

R4：

[R4]int g0/0/0
[R4-GigabitEthernet0/0/0]ip address 192.168.70.254 24

[R4]int g0/0/1
[R4-GigabitEthernet0/0/1]ip address 192.168.60.1 24

5*配置VRRP(虚拟网关)

R1:

[R1]interface GigabitEthernet0/0/0
[R1-GigabitEthernet0/0/0]vrrp vrid 1 virtual-ip 192.168.10.254    //指定虚拟网关为192.168.10.254
[R1-GigabitEthernet0/0/0]vrrp vrid 1 priority 150  //设置优先级150优先级越大越好

[R1]interface GigabitEthernet0/0/1
[R1-GigabitEthernet0/0/1]vrrp vrid 2 virtual-ip 192.168.20.254    //指定虚拟网关为192.168.20.254
[R1-GigabitEthernet0/0/1]vrrp vrid 2 priority 130  //设置优先级130优先级越大越好

R2:

[R2]interface GigabitEthernet0/0/0
[R2-GigabitEthernet0/0/0]vrrp vrid 1 virtual-ip 192.168.10.254   
[R2-GigabitEthernet0/0/0]vrrp vrid 1 priority 110  

[R2]interface GigabitEthernet0/0/1
[R2-GigabitEthernet0/0/1]vrrp vrid 2 virtual-ip 192.168.20.254   
[R2-GigabitEthernet0/0/1]vrrp vrid 2 priority 110  

R3:

[R3]interface GigabitEthernet0/0/0
[R3-GigabitEthernet0/0/0]vrrp vrid 1 virtual-ip 192.168.10.254   
[R3-GigabitEthernet0/0/0]vrrp vrid 1 priority 130  

[R3]interface GigabitEthernet0/0/1
[R3-GigabitEthernet0/0/1]vrrp vrid 2 virtual-ip 192.168.20.254   
[R3-GigabitEthernet0/0/1]vrrp vrid 2 priority 150  

此时查看下Master选举情况

R1:

[R1]dis vrrp brief 

 R2:

[R2]dis vrrp brief 

R3:

[R3]dis vrrp brief 

 7*配置动态路由（ospf）把R1-R4 、SW7设置为骨干区域

R1:

[R1]ospf 1
[R1-ospf-1]area 0 
[R1-ospf-1-area-0.0.0.0]network 192.168.10.0 0.0.0.255 
[R1-ospf-1-area-0.0.0.0]network 192.168.20.0 0.0.0.255 
[R1-ospf-1-area-0.0.0.0]network 192.168.30.0 0.0.0.255 

R2:

[R2]ospf 1
[R2-ospf-1]area 0
[R2-ospf-1-area-0.0.0.0]network 192.168.10.0 0.0.0.255 
[R2-ospf-1-area-0.0.0.0]network 192.168.20.0 0.0.0.255 
[R2-ospf-1-area-0.0.0.0]network 192.168.40.0 0.0.0.255 

R3:

[R3]ospf 1
[R3-ospf-1]area 0
[R3-ospf-1-area-0.0.0.0]network 192.168.10.0 0.0.0.255 
[R3-ospf-1-area-0.0.0.0]network 192.168.20.0 0.0.0.255 
[R3-ospf-1-area-0.0.0.0]network 192.168.50.0 0.0.0.255

R4:

[R4]ospf 1
[R4-ospf-1]area 0
[R4-ospf-1-area-0.0.0.0]network 192.168.60.0 0.0.0.255 
[R4-ospf-1-area-0.0.0.0]network 192.168.70.0 0.0.0.255 

SW7:

[SW7]ospf 1  
[SW7-ospf-1]area 0
[SW7-ospf-1-area-0.0.0.0]network 192.168.30.0 0.0.0.255
[SW7-ospf-1-area-0.0.0.0]network 192.168.40.0 0.0.0.255
[SW7-ospf-1-area-0.0.0.0]network 192.168.50.0 0.0.0.255
[SW7-ospf-1-area-0.0.0.0]network 192.168.60.0 0.0.0.255

此时全网互通！