企业网三层架构实验

ISP:
sys
sys ISP
int l0
ip add 1.1.1.1 24
int g0/0/0
ip add 12.1.1.2 24

R1:

sys
sys R1
int g0/0/2
ip add 12.1.1.1 24
int g0/0/0
ip add 172.16.0.1 30
int g0/0/1
ip add 172.16.0.5 30
qu
rip 1
ver 2
network 172.16.0.0
qu
ip route-static 0.0.0.0 0 12.1.1.2
acl 2000
rule permit source 172.16.0.0 0.0.0.255
int g0/0/2
nat outbound 2000

LSW1:

sys
sys SW1
vlan batch 2 100
int Eth-Trunk 0
q
int e0/0/1
eth-trunk 0
int e0/0/2
eth-trunk 0
port-group group-member Ethernet 0/0/3 Ethernet 0/0/4 Eth-Trunk 0
port link-type trunk
port trunk allow-pass vlan all
qu
stp mode mstp
stp enable
stp region-configuration
region-name a 
instance 1 vlan 1
instance 2 vlan 2
active region-configuration
qu
stp instance 1 root primary
stp instance 2 root secondary
interface vlan 1 
ip add 172.16.0.129 26
vrrp vrid 1 virtual-ip 172.16.0.190
vrrp vrid 1 priority 120
vrrp vrid 1 track interface GigabitEthernet 0/0/1 reduced 30
interface vlan 2
ip add 172.16.0.193 26
vrrp vrid 1 virtual-ip 172.16.0.254
qu
int vlan 100
ip address 172.16.0.2 255.255.255.252
int g0/0/1
port link-type access
port default vlan 100
qu
rip 1
version 2
network 172.16.0.0
qu
ip route-static 0.0.0.0 0 172.16.0.1
dhcp enable
ip pool v1
network 172.16.0.128 mask 26
gateway-list 172.16.0.190
dns-list 8.8.8.8 
qu
ip pool v2
network 172.16.0.192 mask 26
gateway-list 172.16.0.254
dns-list 8.8.8.8
qu
int vlan 1
dhcp select global
int vlan 2
dhcp select global

LSW2:

sys
sys SW2
vlan batch 2 100
int e0/0/1
eth-trunk 0
int e0/0/2
eth-trunk 0
port-group group-member Ethernet 0/0/3 Ethernet 0/0/4 Eth-Trunk 0
port link-type trunk
port trunk allow-pass vlan all
qu
stp mode mstp
stp enable
stp region-configuration
region-name a 
instance 1 vlan 1
instance 2 vlan 2
active region-configuration 
qu
stp instance 1 root secondary
stp instance 2 root primary
interface vlan 1 
ip add 172.16.0.130 26
vrrp vrid 1 virtual-ip 172.16.0.190
interface vlan 2
ip add 172.16.0.194 26
vrrp vrid 1 virtual-ip 172.16.0.254
vrrp vrid 1 priority 120
vrrp vrid 1 track interface GigabitEthernet 0/0/1 reduced 30
qu
int vlan 100
ip address 172.16.0.6 255.255.255.252
interface GigabitEthernet0/0/1
port link-type access
port default vlan 100
qu
rip 1
version 2
network 172.16.0.0
qu
ip route-static 0.0.0.0 0 172.16.0.5
dhcp enable
ip pool v1
network 172.16.0.128 mask 26
gateway-list 172.16.0.190
dns-list 8.8.8.8 
qu
ip pool v2
network 172.16.0.192 mask 26
gateway-list 172.16.0.254
dns-list 8.8.8.8
qu
int vlan 1
dhcp select global
int vlan 2
dhcp select global

LSW3:

sys
sys SW3
vlan 2
qu
interface e0/0/2
port link-type access
port default vlan 2
port-group group-member Ethernet 0/0/3 Ethernet 0/0/4
port link-type trunk
port trunk allow-pass vlan all
qu
port-group group-member Ethernet 0/0/1 to Ethernet 0/0/2
stp edged-port enable
qu

LSW4:

sys
sys SW4
vlan 2
qu
interface e0/0/2
port link-type access
port default vlan 2
port-group group-member Ethernet 0/0/3 Ethernet 0/0/4
port link-type trunk
port trunk allow-pass vlan all
qu
port-group group-member Ethernet 0/0/1 to Ethernet 0/0/2
stp edged-port enable
qu

测试：

 

 

 PC1pingISP：