当前位置： 首页 > article >正文

简单园区网拓扑实验

article 2024/12/29 10:25:19

1.实验拓扑

2.实验要求

1、按照图示的VLAN及IP地址需求，完成相关配置
2、要求SW1为VLAN 2/3的主根及主网关
SW2为vlan 20/30的主根及主网关
SW1和SW2互为备份
3、可以使用super vlan
4、上层通过静态路由协议完成数据通信过程
5、AR1为企业出口路由器
6、要求全网可达

3.实验分析

1.对于接入层设备sw3以及sw4需要配置vlan以及在每个接口放通vlan，在0/0/1和0/0/2接口为access干道，在0/0/3和0/0/4接口为trunk干道需要放通所有vlan

2.配置IP：对于汇聚层设备，sw1和sw2分别为vlan2 3以及vlan20 30的网关所以需要采用vlanif接口进行配置使其具有三层功能

3.链路聚合：sw1和sw2中间的两条链路采用链路聚合技术，vlanif接口配ip

4.生成树协议：SW1为VLAN 2/3的主根及主网关，SW2为vlan 20/30的主根及主网关，所以这里需要采用mstp多生成树协议

5.上层链路通信使用rip协议，r1为企业路由器出口，r1以下的网络都为内网网络，做到全网可通此时需要采用nat技术

4.实验配置

（1）链路聚合

汇聚层设备sw1以及sw2之间需要链路聚合

[sw1]interface e	
[sw1]interface Eth-Trunk 0
[sw1-Eth-Trunk0]trunkport GigabitEthernet 0/0/1 to 0/0/2
[sw1-Eth-Trunk0]port link-type trunk 
[sw1-Eth-Trunk0]port trunk allow-pass vlan 2 3 20 30 101

[sw2]interface e	
[sw2]interface Eth-Trunk 0
[sw2-Eth-Trunk0]trunkport GigabitEthernet 0/0/1 to 0/0/2
[sw2-Eth-Trunk0]port link-type trunk 
[sw2-Eth-Trunk0]port trunk allow-pass vlan 2 3 20 30 101

（2）划分vlan以及配置接口

sw3

[sw3]vlan batch 2 3 20 30
[sw3]interface GigabitEthernet  0/0/1
[sw3]port link-type access
[sw3]port default vlan 2 
[sw3]interface GigabitEthernet  0/0/2
[sw3]port link-type access
[sw3]port default vlan 3
[sw3]interface GigabitEthernet  0/0/3
[sw3]port link-type trunk 
[sw3]port trunk allow-pass vlan 2 3 20 30
[sw3]interface GigabitEthernet  0/0/4
[sw3]port link-type trunk 
[sw3]port trunk allow-pass vlan 2 3 20 30

sw4

[sw4]vlan batch 2 3 20 30
[sw4]interface GigabitEthernet  0/0/1
[sw4]port link-type access
[sw4]port default vlan 20 
[sw4]interface GigabitEthernet  0/0/2
[sw4]port link-type access
[sw4]port default vlan 30
[sw4]interface GigabitEthernet  0/0/3
[sw4]port link-type trunk 
[sw4]port trunk allow-pass vlan 2 3 20 30
[sw4]interface GigabitEthernet  0/0/4
[sw4]port link-type trunk 
[sw4]port trunk allow-pass vlan 2 3 20 30

（3）vlanIF配置ip网关

sw1

[r1]vlan batch 2 3 20 30 101
[sw1]interface Vlanif 2
[sw1-Vlanif2]ip add 10.0.2.1 24
[sw1]int g0/0/3
[sw1-GigabitEthernet0/0/3]po li t
[sw1-GigabitEthernet0/0/3]po t al v 2 3 20 30
[sw1]interface Vlanif 101
[sw1-Vlanif101]ip add 10.0.0.9 30
[sw1]interface Vlanif 3
[sw1-Vlanif3]ip add 10.0.3.1 24
[sw1]int g0/0/4
[sw1-GigabitEthernet0/0/4]po li t
[sw1-GigabitEthernet0/0/4]po t al v 2 3 20 30

sw2

[sw2]vlan batch 2 3 20 30 101
[sw2]interface Vlanif 20
[sw2-Vlanif2]ip add 10.0.20.1 24
[sw2]int g0/0/3
[sw2-GigabitEthernet0/0/3]po li t
[sw2-GigabitEthernet0/0/3]po t al v 2 3 20 30
[sw2]interface Vlanif 101
[sw2-Vlanif101]ip add 10.0.0.10 30
[sw2]interface Vlanif 30
[sw2-Vlanif3]ip add 10.0.30.1 24
[sw2]int g0/0/4
[sw2-GigabitEthernet0/0/4]po li t
[sw2-GigabitEthernet0/0/4]po t al v 2 3 20 30

（4）生成树协议

[sw1]stp mode mstp
[sw1]stp enable 
[sw1]stp region-configuration 
[sw1-mst-region]region-name hcip 
[sw1-mst-region]instance 1 vlan 2 3 
[sw1-mst-region]instance 2 vlan 20 30
[sw1-mst-region]active region-configuration 
[sw1]stp instance 1 root primary
[sw1]stp instance 2 root secondary
[sw1]int g0/0/3
[sw1-GigabitEthernet0/0/3]stp root-protection
[sw1-GigabitEthernet0/0/4]stp root-protection
[sw1-GigabitEthernet0/0/4]int e 0
[sw1-Eth-Trunk0]stp root-protection

[sw2]stp mode mstp
[sw2]stp enable 
[sw2]stp region-configuration 
[sw2-mst-region]region-name hcip 
[sw2-mst-region]instance 1 vlan 2 3 
[sw2-mst-region]instance 2 vlan 20 30
[sw2-mst-region]active region-configuration 
[sw2]stp instance 2 root primary
[sw2]stp instance 1 root secondary
[sw2-GigabitEthernet0/0/3]int g0/0/3
[sw2-GigabitEthernet0/0/3]stp root-protection
[sw2-GigabitEthernet0/0/3]int g0/0/4
[sw2-GigabitEthernet0/0/4]stp root-protection
[sw2-GigabitEthernet0/0/4]int e 0
[sw2-Eth-Trunk0]stp root-protection

[sw3]stp mode mstp
[sw3]stp enable 
[sw3]stp region-configuration 
[sw3-mst-region]region-name hcip 
[sw3-mst-region]instance 1 vlan 2 3 
[sw3-mst-region]instance 2 vlan 20 30
[sw3-mst-region]active region-configuration 
[sw3]int g0/0/1
[sw3-GigabitEthernet0/0/1]stp edged-port enable 
[sw3-GigabitEthernet0/0/1]stp bpdu-filter enable 
[sw3-GigabitEthernet0/0/1]int g0/0/2
[sw3-GigabitEthernet0/0/2]stp edged-port enable 
[sw3-GigabitEthernet0/0/2]stp bpdu-filter enable 
[sw3]stp bpdu-protection
[sw4]stp mode mstp
[sw4]stp enable 
[sw4]stp region-configuration 
[sw4-mst-region]region-name hcip 
[sw4-mst-region]instance 1 vlan 2 3 
[sw4-mst-region]instance 2 vlan 20 30
[sw4-mst-region]active region-configuration 
[sw4]int g0/0/1
[sw4-GigabitEthernet0/0/1]stp edged-port enable 
[sw4-GigabitEthernet0/0/1]stp bpdu-filter enable 
[sw4-GigabitEthernet0/0/1]int g0/0/2
[sw4-GigabitEthernet0/0/2]stp edged-port enable 
[sw4-GigabitEthernet0/0/2]stp bpdu-filter enable 
[sw4]stp bpdu-protection

（5）VRRP

[sw1-Vlanif2]vrrp vrid 1 virtual-ip 10.0.2.254
[sw1-Vlanif2]vrrp vrid 1 priority 120
[sw1-Vlanif2]vrrp vrid 1 preempt-mode timer delay 20
[sw1-Vlanif2]vrrp vrid 1 track interface GigabitEthernet0/0/5
[sw1-Vlanif3]vrrp vrid 1 virtual-ip 10.0.3.254
[sw1-Vlanif3]vrrp vrid 1 priority 120
[sw1-Vlanif3]vrrp vrid 1 preempt-mode timer delay 20
[sw1-Vlanif3]vrrp vrid 1 track interface GigabitEthernet0/0/5
[sw1-Vlanif20]vrrp vrid 1 virtual-ip 10.0.20.254
[sw1-Vlanif30]vrrp vrid 1 virtual-ip 10.0.30.254

[sw2-Vlanif2]vrrp vrid 1 virtual-ip 10.0.2.254
[sw2-Vlanif3]vrrp vrid 1 virtual-ip 10.0.3.254
[sw2-Vlanif20]vrrp vrid 1 virtual-ip 10.0.20.254
[sw2-Vlanif20]vrrp vrid 1 priority 120
[sw2-Vlanif20]vrrp vrid 1 preempt-mode timer delay 20
[sw2-Vlanif20]vrrp vrid 1 track interface GigabitEthernet0/0/5
[sw2-Vlanif30]vrrp vrid 1 virtual-ip 10.0.30.254
[sw2-Vlanif30]vrrp vrid 1 priority 120
[sw2-Vlanif30]vrrp vrid 1 preempt-mode timer delay 20
[sw2-Vlanif30]vrrp vrid 1 track interface GigabitEthernet0/0/5

 

 

（6）配置上层网络

sw1

[sw1]vlan batch 99
[sw1]interface v	
[sw1]interface Vlanif 99
[sw1-Vlanif99]ip add 10.0.0.1 30 
[sw1]int g0/0/5
[sw1-GigabitEthernet0/0/5]po li a
[sw1-GigabitEthernet0/0/5]po de v 99
[sw1-GigabitEthernet0/0/4]int g0/0/4
[sw1-GigabitEthernet0/0/4]po li t
[sw1-GigabitEthernet0/0/4]po t al v 2 3 20 30
[sw1-GigabitEthernet0/0/4]int g0/0/3
[sw1-GigabitEthernet0/0/3]po li t
[sw1-GigabitEthernet0/0/3]po t al v 2 3 20 30

sw2

[sw2]vlan batch 100
[sw2]interface v	
[sw2]interface Vlanif 100
[sw2-Vlanif99]ip add 10.0.0.5 30 
[sw2]int g0/0/5
[sw2-GigabitEthernet0/0/5]po li a
[sw2-GigabitEthernet0/0/5]po de v 100
[sw2-GigabitEthernet0/0/4]int g0/0/4
[sw2-GigabitEthernet0/0/4]po li t
[sw2-GigabitEthernet0/0/4]po t al v 2 3 20 30
[sw2-GigabitEthernet0/0/4]int g0/0/3
[sw2-GigabitEthernet0/0/3]po li t
[sw2-GigabitEthernet0/0/3]po t al v 2 3 20 30

r1

[r1]int g0/0/1
[r1-GigabitEthernet0/0/1]ip add 10.0.0.2 30
[r1-GigabitEthernet0/0/1]int g0/0/2
[r1-GigabitEthernet0/0/2]ip add 10.0.0.6 30
[r1-GigabitEthernet0/0/2]int g0/0/0
[r1-GigabitEthernet0/0/0]ip add 202.1.1.1 30

ISP

[ISP]int g0/0/0
[ISP-GigabitEthernet0/0/0]ip add 202.1.1.2 30
[ISP]int LoopBack 1
[ISP-LoopBack1]ip add 100.100.100.100 24

（7）rip协议

使上层网络能够通讯

sw1

[sw1]rip 1
[sw1-rip-1]vers	
[sw1-rip-1]version 2
[sw1-rip-1]network 10.0.0.0
[sw1]ip route-static 0.0.0.0 0 10.0.0.2

sw2

[sw2]rip 1
[sw2-rip-1]vers	
[sw2-rip-1]version 2
[sw2-rip-1]network 10.0.0.0
[sw2]ip route-static 0.0.0.0 0 10.0.0.6

r1

[r1]rip 1
[r1-rip-1]net	
[r1-rip-1]network 10.0.0.0
[r1-rip-1]network 202.1.1.0

验证 

 （8）NAT

使内网能够访问外网

r1

[r1]ip route-static 0.0.0.0 0 202.1.1.2
[r1]acl 2000
[r1-acl-basic-2000]rule permit source 10.0.0.0 0.0.255.255
[r1-acl-basic-2000]int g0/0/0
[r1-GigabitEthernet0/0/0]nat outbound 2000

验证

5.实验结果验证 

 此时断开rw3的0/0/3接口

 此时pc1还能访问


http://www.kler.cn/a/456230.html

相关文章：

  • Browser Use：AI智能体自动化操作浏览器的开源工具
  • Python-网络爬虫
  • 【信息系统项目管理师】第13章：项目资源管理-基础和过程 考点梳理
  • Windows Powershell实战指南（未完成）
  • “拍卖认证平台”：网上拍卖系统的诚信体系建设
  • 邮箱手机号脱敏
  • Android OpenGl（二） Shader
  • 基于C#了解垃圾回收机制
  • Faster R-CNN
  • 【intellij idea 创建springBoot 搭配mybatis oracle】
  • C# 简单使用NModbus
  • 5.系统学习-PyTorch与多层感知机
  • JavaFX FXML模式下的布局
  • 尚硅谷Vue3入门到实战 —— 01 创建 VUe3工程
  • unity中Timeline动画的播放和播放中如何判断播放结束
  • springboot整合log4j2日志框架1
  • 25秋招面试总结
  • Kotlin快速入门
  • 惠州市政数局局长杨伟斌：惠州市公共数据授权运营模式探索
  • 雷池 WAF 搭配阿里云 CDN 使用教程
  • javaEE-多线程案例-单例模式
  • 深度学习：从原理到搭建基础模型
  • RabbitMQ HAProxy 负载均衡
  • 应对TensorFlow导入Keras时发生的错误问题
  • SPI实验 LED数码管
  • 用三种安全思维重新审视零信任网络