企业三层架构

interface Eth-Trunk 0  
q
interface GigabitEthernet 0/0/3  
eth-trunk 0
int g0/0/4
eth-trunk 0
 
 
interface Eth-Trunk 0  
q
interface GigabitEthernet 0/0/3  
eth-trunk 0
int g0/0/4
eth-trunk 0






vlan 2
port-group group-member g0/0/1 g0/0/2 Eth-Trunk 0
p l t 
port trunk allow-pass vlan 2
 
port-group group-member g0/0/1 g0/0/2
p l t
port trunk allow-pass vlan 2
int e0/0/2
port link-type access
port default vlan 2




stp mode mstp
stp enable 
stp region-configuration 
region-name a    
instance 1 vlan 1
instance 2 vlan 2
active region-configuration  
stp instance 1 root primary     
stp instance 2 root secondary   
 
stp instance 2 root primary     
stp instance 1 root secondary



int vlan 1
ip address 172.16.1.1 255.255.255.128
vrrp vrid 1 virtual-ip 172.16.1.126  
vrrp vrid 1 priority 110
vrrp vrid 1 track interface GigabitEthernet0/0/5 reduced 15 
int vlan 2
 ip address 172.16.1.129 255.255.255.128
 vrrp vrid 1 virtual-ip 172.16.1.254
 
 
int vlan 1
ip address 172.16.1.2 255.255.255.128
vrrp vrid 1 virtual-ip 172.16.1.126
 
int vlan 2
ip address 172.16.1.130 255.255.255.128
 vrrp vrid 1 virtual-ip 172.16.1.254
vrrp vrid 1 priority 110
vrrp vrid 1 track interface GigabitEthernet0/0/5 reduced 15
 
 
int e0/0/2
stp edged-port enable


ip pool v1
gateway-list 172.16.1.126
network 172.16.1.0 mask 255.255.255.128
dhcp select global
 
ip pool v2
gateway-list 172.16.1.254
network 172.16.1.128 mask 255.255.255.128
dhcp select global




vlan 100
int vlan 100
ip address 172.16.0.2 255.255.255.252
int g0/0/5
port link-type access
port default vlan 100
ip route-static 0.0.0.0 0.0.0.0 172.16.0.1 
 
ip route-static 0.0.0.0 0.0.0.0 172.16.0.5
 
ip route-static 0.0.0.0 0.0.0.0 12.1.1.2
ip route-static 172.16.1.0 255.255.255.0 172.16.0.2
ip route-static 172.16.1.0 255.255.255.0 172.16.0.6
acl 2000
rule 5 permit source 172.16.0.0 0.0.255.255 
int g0/0/0
nat outbound 2000