简单园区网拓扑实验

1.实验拓扑

2.实验要求

1、按照图示的VLAN及IP地址需求，完成相关配置

2、要求SW1为VLAN 2/3的主根及主网关

SW2为vlan 20/30的主根及主网关

SW1和SW2互为备份

3、可以使用super vlan

4、上层通过静态路由协议完成数据通信过程

5、AR1为企业出口路由器

6、要求全网可达

3.实验分析

1.对于接入层设备sw3以及sw4需要配置vlan以及在每个接口放通vlan，在0/0/1和0/0/2接口为access干道，在0/0/3和0/0/4接口为trunk干道需要放通所有vlan

2.配置IP：对于汇聚层设备，sw1和sw2分别为vlan2 3以及vlan20 30的网关所以需要采用vlanif接口进行配置使其具有三层功能

3.链路聚合：sw1和sw2中间的两条链路采用链路聚合技术，vlanif接口配ip

4.生成树协议：SW1为VLAN 2/3的主根及主网关，SW2为vlan 20/30的主根及主网关，所以这里需要采用mstp多生成树协议

5.上层链路通信使用rip协议，r1为企业路由器出口，r1以下的网络都为内网网络，做到全网可通此时需要采用nat技术

4.实验配置

（1）划分vlan以及配置接口

sw3

复制代码

[sw3]vlan batch 2 3 20 30
[sw3]interface GigabitEthernet  0/0/1
[sw3]port link-type access
[sw3]port default vlan 2 
[sw3]interface GigabitEthernet  0/0/2
[sw3]port link-type access
[sw3]port default vlan 3
[sw3]interface GigabitEthernet  0/0/3
[sw3]port link-type trunk 
[sw3]port trunk allow-pass vlan 2 3 20 30
[sw3]interface GigabitEthernet  0/0/4
[sw3]port link-type trunk 
[sw3]port trunk allow-pass vlan 2 3 20 30

sw4

复制代码

[sw4]vlan batch 2 3 20 30
[sw4]interface GigabitEthernet  0/0/1
[sw4]port link-type access
[sw4]port default vlan 20 
[sw4]interface GigabitEthernet  0/0/2
[sw4]port link-type access
[sw4]port default vlan 30
[sw4]interface GigabitEthernet  0/0/3
[sw4]port link-type trunk 
[sw4]port trunk allow-pass vlan 2 3 20 30
[sw4]interface GigabitEthernet  0/0/4
[sw4]port link-type trunk 
[sw4]port trunk allow-pass vlan 2 3 20 30

（2）vlanIF配置ip网关

sw1

复制代码

[r1]vlan batch 2 3 20 30 101
[sw1]interface Vlanif 2
[sw1-Vlanif2]ip add 10.0.2.1 24
[sw1]int g0/0/3
[sw1-GigabitEthernet0/0/3]po li t
[sw1-GigabitEthernet0/0/3]po t al v 2 3 20 30
[sw1]interface Vlanif 101
[sw1-Vlanif101]ip add 10.0.0.9 30
[sw1]interface Vlanif 3
[sw1-Vlanif3]ip add 10.0.3.1 24
[sw1]int g0/0/4
[sw1-GigabitEthernet0/0/4]po li t
[sw1-GigabitEthernet0/0/4]po t al v 2 3 20 30

sw2

复制代码

[sw2]vlan batch 2 3 20 30 101
[sw2]interface Vlanif 20
[sw2-Vlanif2]ip add 10.0.20.1 24
[sw2]int g0/0/3
[sw2-GigabitEthernet0/0/3]po li t
[sw2-GigabitEthernet0/0/3]po t al v 2 3 20 30
[sw2]interface Vlanif 101
[sw2-Vlanif101]ip add 10.0.0.10 30
[sw2]interface Vlanif 30
[sw2-Vlanif3]ip add 10.0.30.1 24
[sw2]int g0/0/4
[sw2-GigabitEthernet0/0/4]po li t
[sw2-GigabitEthernet0/0/4]po t al v 2 3 20 30

（3）生成树协议

复制代码

[sw1]stp mode mstp
[sw1]stp enable 
[sw1]stp region-configuration 
[sw1-mst-region]region-name hcip 
[sw1-mst-region]instance 1 vlan 2 3 
[sw1-mst-region]instance 2 vlan 20 30
[sw1-mst-region]active region-configuration 
[sw1]stp instance 1 root primary
[sw1]stp instance 2 root secondary

[sw2]stp mode mstp
[sw2]stp enable 
[sw2]stp region-configuration 
[sw2-mst-region]region-name hcip 
[sw2-mst-region]instance 1 vlan 2 3 
[sw2-mst-region]instance 2 vlan 20 30
[sw2-mst-region]active region-configuration 
[sw2]stp instance 2 root primary
[sw2]stp instance 1 root secondary

[sw3]stp mode mstp
[sw3]stp enable 
[sw3]stp region-configuration 
[sw3-mst-region]region-name hcip 
[sw3-mst-region]instance 1 vlan 2 3 
[sw3-mst-region]instance 2 vlan 20 30
[sw3-mst-region]active region-configuration 

[sw4]stp mode mstp
[sw4]stp enable 
[sw4]stp region-configuration 
[sw4-mst-region]region-name hcip 
[sw4-mst-region]instance 1 vlan 2 3 
[sw4-mst-region]instance 2 vlan 20 30
[sw4-mst-region]active region-configuration

（4）链路聚合

汇聚层设备sw1以及sw2之间需要链路聚合

复制代码

[sw1]interface e	
[sw1]interface Eth-Trunk 0
[sw1-Eth-Trunk0]trunkport GigabitEthernet 0/0/1 to 0/0/2
[sw1-Eth-Trunk0]port link-type trunk 
[sw1-Eth-Trunk0]port trunk allow-pass vlan 2 3 20 30 101

[sw2]interface e	
[sw2]interface Eth-Trunk 0
[sw2-Eth-Trunk0]trunkport GigabitEthernet 0/0/1 to 0/0/2
[sw2-Eth-Trunk0]port link-type trunk 
[sw2-Eth-Trunk0]port trunk allow-pass vlan 2 3 20 30 101

（5）配置上层网络

sw1

复制代码

[sw1]vlan batch 99
[sw1]interface v	
[sw1]interface Vlanif 99
[sw1-Vlanif99]ip add 10.0.0.1 30 
[sw1]int g0/0/5
[sw1-GigabitEthernet0/0/5]po li a
[sw1-GigabitEthernet0/0/5]po de v 99
[sw1-GigabitEthernet0/0/4]int g0/0/4
[sw1-GigabitEthernet0/0/4]po li t
[sw1-GigabitEthernet0/0/4]po t al v 2 3 20 30
[sw1-GigabitEthernet0/0/4]int g0/0/3
[sw1-GigabitEthernet0/0/3]po li t
[sw1-GigabitEthernet0/0/3]po t al v 2 3 20 30

sw2

复制代码

[sw2]vlan batch 100
[sw2]interface v	
[sw2]interface Vlanif 100
[sw2-Vlanif99]ip add 10.0.0.5 30 
[sw2]int g0/0/5
[sw2-GigabitEthernet0/0/5]po li a
[sw2-GigabitEthernet0/0/5]po de v 100
[sw2-GigabitEthernet0/0/4]int g0/0/4
[sw2-GigabitEthernet0/0/4]po li t
[sw2-GigabitEthernet0/0/4]po t al v 2 3 20 30
[sw2-GigabitEthernet0/0/4]int g0/0/3
[sw2-GigabitEthernet0/0/3]po li t
[sw2-GigabitEthernet0/0/3]po t al v 2 3 20 30

复制代码

[r1]int g0/0/1
[r1-GigabitEthernet0/0/1]ip add 10.0.0.2 30
[r1-GigabitEthernet0/0/1]int g0/0/2
[r1-GigabitEthernet0/0/2]ip add 10.0.0.6 30
[r1-GigabitEthernet0/0/2]int g0/0/0
[r1-GigabitEthernet0/0/0]ip add 202.1.1.1 30

ISP

复制代码

[ISP]int g0/0/0
[ISP-GigabitEthernet0/0/0]ip add 202.1.1.2 30
[ISP]int LoopBack 1
[ISP-LoopBack1]ip add 100.100.100.100 24

（6）rip协议

使上层网络能够通讯

sw1

复制代码

[sw1]rip 1
[sw1-rip-1]vers	
[sw1-rip-1]version 2
[sw1-rip-1]network 10.0.0.0
[sw1]ip route-static 0.0.0.0 0 10.0.0.2

sw2

复制代码

[sw2]rip 1
[sw2-rip-1]vers	
[sw2-rip-1]version 2
[sw2-rip-1]network 10.0.0.0
[sw2]ip route-static 0.0.0.0 0 10.0.0.6

复制代码

[r1]rip 1
[r1-rip-1]net	
[r1-rip-1]network 10.0.0.0
[r1-rip-1]network 202.1.1.0

验证

（7）NAT

使内网能够访问外网

复制代码

[r1]ip route-static 0.0.0.0 0 202.1.1.2
[r1]acl 2000
[r1-acl-basic-2000]rule permit source 10.0.0.0 0.0.255.255
[r1-acl-basic-2000]int g0/0/0
[r1-GigabitEthernet0/0/0]nat outbound 2000

验证

5.实验结果验证

此时断开rw3的0/0/3接口

此时pc1还能访问