经典的三层网络案例分析...

经典的三层网络案例分析

经典的三层网络案例分析。目的：让不同的vlan 之间可以互相通讯。 IP规划 vlna ID ip网段 vlan网关 vlan 1 172.16.1.0/24 172.16.1.7-9 vlan 2 172.16.2.0/24 172.16.2.252-254 vlan 3 172.16.3.0/24 172.16.3.252-254 vlan 4 172.16.4.0/24 172.16.4.252-254 vlan 5 172.16.5.0/24 172.16.5.252-254 vlan 6 172.16.6.0/24 172.16.6.252-254 vlan 7 172.16.7.0/24 172.16.7.252-254 vlan 8 172.16.8.0/24 172.16.8.252-254 vlan 9 172.16.9.0/24 172.16.9.252-254 拓朴图见最后面路由器配置一、cisco路由器配置： Enable Configure terminal Service password-encryption Hostname cisco1721 Enable secret 654321 Enable password 123456 ip subnet-zero ip name-server 202.96.134.133 202.96.172.218 interface fastethernet 0 ip address 61.142.221.5 255.255.255.240 speed auto no shutdown interface serial 0 ip unnumbered fastethernet 0 encapsulation ppp no fair-queue bandwidth 2048 no shutdown exit ip classless ip route 0.0.0.0 0.0.0.0 serial 0 no ip http server line con 0 line aux 0 line vty 0 4 password 12345678 login no scheduler allocate end copy running-config startup-config reload 请注意NAT等是在防火墙设置的．交换机配置一、Catalyst 4006-s3交换机配置： Enable Configure terminal service pad service password-encryption hostname c4006-s3 enable password 123456. Enable secret 654321 Ip subnet-zero Ip name-server 172.16.8.1 172.16.8.2 ip routing Exit Vlan database Vtp mode server Vtp domain centervtp Vlan 2 name vlan2 Vlan 3 name vlan3 Vlan 4 name vlan4 Vlan 5 name vlan5 Vlan 6 name vlan6 Vlan 7 name vlan7 Vlan 8 name vlan8 Vlan 9 name vlan9 Exit Configure terminal Interface port-channel 1 Interface gigabitethernet 2/1 channel-group 1 mode on Interface gigabitethernet 2/2 channel-group 1 mode on Interface gigabitethernet 2/1 switchport mode trunk switchport trunk encapsulation dotlq switchport trunk allowed vlan all interface gigabitethernet 2/3 switchport mode trunk switchport trunk encapsulation dotlq switchport trunk allowed vlan all interface gigabitethernet 2/4 switchport mode trunk switchport trunk encapsulation dotlq switchport trunk allowed vlan all interface gigbitethernet 2/5 switchport mode trunk switchport trunk encapsulation dotlq switchport trunk allowed vlan all interface gigbitethernet 2/6 switchport mode trunk switchport trunk encapsulation dotlq switchprot trunk allowed vlan all interface gigbitethernet 2/7 switchport access vlan 9 no shutdown interface range gigabitethernet 2/8 – 20 switchport mode access switchport access vlan 8 no shutdown spanning-tree portfast interface gigabitethernet 3/1 switchport mode trunk switchport trunk encapsulation dotlq switchport trunk allowed vlan all interface gigabitethernet 3/2 switchport mode trunk switchport trunk encapsulation dotlq switchport trunk allowed vlan all spanning-tree vlan 1-9 root primary spanning-tree backbonefast interface vlan 1 ip address 172.16.1.7 255.255.255.0 no shutdown standby 1 ip 172.16.1.9 standby 1 priority 110 preempt interface vlan 2 ip address 172.16.2.252 255.255.255.0 no shutdown standby 2 ip 172.16.2.254 standby 2 priority 110 preempt interface vlan 3 ip address 172.16.3.252 255.255.255.0 no shutdown standby 3 ip 172.16.3.254 standby 3 priority 110 preempt interface vlan 4 ip address 172.16.4.252 255.255.255.0 no shutdown standby 4 ip 172.16.4.254 standby 4 priority 110 preempt interface vlan 5 ip address 172.16.5.252 255.255.255.0 no shutdown standby 5 ip 172.16.5.254 standby 5 priority 110 preempt interface vlan 6 ip address 172.16.6.252 255.255.255.0 no shutdown standby 6 ip 172.16.6.254 standby 6 priority 110 preempt interface vlan 7 ip address 172.16.7.252 255.255.255.0 no shutdown standby 7 ip 172.16.7.254 standby 7 priority 110 preempt interface vlan 8 ip address 172.16.8.252 255.255.255.0 no shutdown standby 8 ip 172.16.8.254 standby 8 priority 110 preempt interface vlan 9 ip address 172.16.9.252 255.255.255.0 no shutdown standby 9 ip 172.16.9.254 standby 9 priority 110 preempt exit ip classless ip route 0.0.0.0 0.0.0.0 172.16.9.250 line con 0 line aux 0 line vty 0 15 password 12345678 login end copy running-config startup-config reload 二、Catalyst 3550-12T交换机配置： Enable Configure terminal service pad service password-encryption hostname c3550-12t enable password 123456 enable secret 654321 ip subnet-zero ip name-server 172.16.8.1. 172.16.8.2 ip routing exit vlan database vtp mode server vtp domain centervtp vlan 2 name vlan2 vlan 3 name vlan3 vlan 4 name vlan4 vlan 5 name vlan5 vlan 6 name vlan6 vlan 7 name vlan7 vlan 8 name vlan8 vlan 9 name vlan9 exit configure terminal interface port-channel 1 interface gigabitethernet 0/1 channel-group 1 mode on interface gigabitethernet 0/2 channel-group 1 mode on exit interface gigabitethernet 0/1 switchport mode trunk switchport encapsulation dotlq swithchport trunk allowed vlan all interface gigabitethernet 0/3 switchport mode trunk switchport trunk encapsulation dotlq swithcport trunk allowed vlan all interface gigabitethernet 0/4 switchport mode trunk switchport trunk encapsulation dotlq switchport trunk allowed vlan all interface gigabitethernet 0/5 switchport mode trunk switchport trunk encapsulation dotlq switchport trunk allowed vlan all interface gigabitethernet 0/6 switchport mode trunk switchport trunk encapsulation dotlq switchport trunk allowed vlan all interface gigabitethernet 0/7 switchport access vlan 9 no shutdown interface range gigabitethernet 0/8 – 10 switchport mode access switchport access vlan 8 no shutdown spanning-tree portfast interface gigabitethernet 0/11 switchport mode trunk switchport trunk encapsulation dotlq swithcprot trunk allowed vlan all interface gigabitethernet 0/12 switchport mode trunk switchport trunk encapsulation dotlq switchport trunk allowed vlan all spanning-tree vlan 1-9 root secondary spanning-tree backbonefast interface vlan 1 ip address 172.16.1.8 255.255.255.0 no shutdown standby 1 ip 172.16.1.9 standby 1 priority 100 preempt interface vlan 2 ip address 172.16.2.253 255.255.255.0 no shutdown standby 2 ip 172.16.2.254 standby 2 priority 100 preempt interface vlan 3 ip address 172.16.3.253 255.255.255.0 not shutdown standby 3 ip 172.16.3.254 standby 3 priority 100 preempt interface vlan 4 ip address 172.16.4.253 255.255.255.0 no shutdown standby 4 ip 172.16.4.254 standby 4 priority 100 preempt interface vlan 5 ip addess 172.16.5.253 255.255.255.0 no shutdown standby 5 ip 172.16.5.253 standby 5 priority 100 preempt interface vlan 6 ip address 172.16.6.253 255.255.255.0 no shutdown standby 6 ip 172.16.6.254 standby 6 priority 100 preempt interface vlan 7 ip address 172.16.7.253 255.255.255.0 no shutdown standby 7 ip 172.16.7.254 standby 7 priority 100 preempt interface vlan 8 ip address 172.16.8.253 255.255.255.0 no shutdown standby 8 ip 172.16.8.254 standby 8 priority 100 preempt interface vlan 9 ip address 172.16.9.253 255.255.255.0 no shutdown standby 9 ip 172.16.9.254 standby 9 priority 100 preempt exit ip classless ip route 0.0.0.0 0.0.0.0 172.16.9.250 ip http server line con 0 line aux 0 line vty 0 15 password 12345678 login end copy running-config statup-config reload 三、Catalyst 2950-24 vlan2 交换机配置： Enable Configure terminal Service pad Service password-encryption Hostname c2950-241 Enable password 123456 Enable secret 654321 Ip subnet-zero Interface vlan 1 Ip address 172.16.1.1 255.255.255.0 management No shutdown Ip default-gateway 172.16.1.9 Ip name-server 172.16.8.1 172.16.8.2 exit Vlan database Vtp mode client Vtp domain centervtp Exit Configure terminal Interface range fastethernet 0/1 – 20 Switchport mode access Switchport accesss vlan 2 No shutdown Spanning-tree portfast Spanning-tree uplinkfast Spanning-tree backbonefast Interface gigabitethernet 0/1 Switchport mode trunk Switchport trunk encapculation dotlq Switchport trunk allowed vlan all Spanning-tree cost 10 Interface gigabitethernet 0/2 Switchport mode trunk Switchport trunk encapculation dotlq Switchport trunk allowed vlan all Spanning-tree cost 20 Exit Line con 0 Line aux 0 Line vty 0 15 Password 12345678 Login End Copy running-config statup-config Reload 四、catalyst 2950-24 vlan 3 交换机配置： enable configure terminal service pad service password-encryption hostname c2950-242 enable password 123456 enable secret 654321 ip subnet-zero interface vlan 1 ip address 172.16.1.2 255.255.255.0 management no shutdown ip default-gateway 172.16.1.9 ip name-server 172.16.8.1 172.16.8.2 exit vlan database vtp domain centervtp vtp mode client exit configure terminal interface range fastethernet 0/1 – 20 switchport mode access switchport access vlan 3 no shutdown spanning-tree portfast spanning-tree uplinefast spanning-tree backbonefast interface gigabitethernet 0/1 switchport mode trunk switchport trunk encapsulation dotlq switchport trunk allowed vlan all spanning-tree cost 10 interface gigabitethernet 0/2 switchport mode trunk switchport trunk encapsulation dotlq switchport trunk allowed vlan all spanning-tree cost 20 exit line con 0 line aux 0 line vty 0 15 password 12345678 login end copy running-config startup-config reload 其它交换机配置类似。有什么不对的对方大家指出来，共同进步。18 80

[此贴子已经被作者于2005-1-19 9:23:48编辑过]