小型单元网络实现
IP划分：
外网:172.1.1.0/24
172.1.2.0/24
内网：基于192.168.3.0/24的子网划分
综合办公楼：192.168.3.00 000000 /26（192.168.3.0-192.168.3.63）
综合一楼：192.168.3.0000 0000 /28（.0-.15） vlan10
综合二楼：192.168.3.0001 0000 /28（.16-.31） vlan20
综合三楼：192.168.3.0010 0000 /28（.32-.47） vlan30
综合楼预留地址：192.168.3.0011 0000 /28（.48-.63）
女生公寓： 192.168.3.01 000000 /26（192.168.3.64-192.168.3.127）
女生一楼： 192.168.3.01 000 000 /29（.64-.71） vlan 40
女生二楼： 192.168.3.01 001 000 /29（.72-.79） vlan 50
女生三楼： 192.168.3.01 010 000 /29（.80-.87） vlan 60
女生四楼： 192.168.3.01 011 000 /29（.88-.95） vlan 70
女生五楼： 192.168.3.01 100 000 /29（.96-.103） vlan 80
女生六楼： 192.168.3.01 101 000 /29（.104-.111）vlan 90
女生公寓预留地址：192.168.3.0111 0 000 /29（.112-.127）
男生公寓： 192.168.3.10 000000 /26（192.168.3.128-192.168.3.191）
男生一楼：192.168.3.10 000 000 /29（.128-.135） vlan 100
男生二楼：192.168.3.10 001 000 /29（.136-.143） vlan 110
男生三楼：192.168.3.10 010 000 /29（.144-.151） vlan 120
男生四楼：192.168.3.10 011 000 /29（.152-.159） vlan 130
男生五楼：192.168.3.10 100 000 /29（.160-.167） vlan 140
男生六楼：192.168.3.10 101 000 /29（.168-.175） vlan 150
男生公寓预留地址：192.168.3.10 11 0 000 /28（.176-.191）
业务管理： 192.168.3.110 00000 /27（192.168.3.192-192.168.3.223）
HTTP管理一：192.168.3.110 00 000 /29（.192-.199） vlan 300
FTP 管理二：192.168.3.110 01 000 /29（.200-.207） vlan 310
DNS 管理三：192.168.3.110 10 000 /29（.208-.215） vlan 320
管理预留地址：192.168.3.110 11 000 /29（.216-.223）
vlanif200： 192.168.3.1110 0000/28（.224-.239）
vlanif210： 192.168.3.11110 000/29（.240-.247）
内网总预留地址： 192.168.3.11111 000/29（.248-.255）
undo info-center enable // 关闭自动弹出的信息
LSW2：
- LSW1，LSW2之间链路做聚合
[LSW1]interface Eth-Trunk 1
[LSW1-Eth-Trunk1]mode manual load-balance
[LSW1-Eth-Trunk1]trunkport GigabitEthernet 0/0/2 0/0/22
[LSW2]interface Eth-Trunk 1
[LSW2-Eth-Trunk1]mode manual load-balance
[LSW2-Eth-Trunk1]trunkport GigabitEthernet 0/0/2 0/0/22
综合办公楼：
LSW5：
[LSW5]vlan 10
[LSW5-vlan10]q
[LSW5]interface GigabitEthernet 0/0/1
[LSW5-GigabitEthernet0/0/1]port link-type access
[LSW5-GigabitEthernet0/0/1]port default vlan 10
[LSW5-GigabitEthernet0/0/1]q
[LSW5]interface GigabitEthernet 0/0/5
[LSW5-GigabitEthernet0/0/5]port link-type trunk
[LSW5-GigabitEthernet0/0/5]port trunk allow-pass vlan all
LSW6：
[LSW6]vlan 20
[LSW6-vlan20]q
[LSW6]interface GigabitEthernet 0/0/1
[LSW6-GigabitEthernet0/0/1]port link-type access
[LSW6-GigabitEthernet0/0/1]port default vlan 20
[LSW6-GigabitEthernet0/0/1]q
[LSW6]interface GigabitEthernet 0/0/6
[LSW6-GigabitEthernet0/0/6]port link-type trunk
[LSW6-GigabitEthernet0/0/6]port trunk allow-pass vlan all
LSW7：
[LSW7]vlan 30
[LSW7-vlan20]q
[LSW7]interface GigabitEthernet 0/0/1
[LSW7-GigabitEthernet0/0/1]port link-type access
[LSW7-GigabitEthernet0/0/1]port default vlan 30
[LSW7-GigabitEthernet0/0/1]q
[LSW7]interface GigabitEthernet 0/0/7
[LSW7-GigabitEthernet0/0/6]port link-type trunk
[LSW7-GigabitEthernet0/0/6]port trunk allow-pass vlan all
LSW2：
[LSW2]vlan batch 10 20 30 200
[LSW2]interface Vlanif200
[LSW2-Vlanif200]ip address 192.168.3.225 255.255.255.240
[LSW2]interface GigabitEthernet 0/0/5
[LSW2-GigabitEthernet0/0/5]port link-type trunk
[LSW2-GigabitEthernet0/0/5]port trunk allow-pass vlan all
[LSW2-GigabitEthernet0/0/5]int vlanif 10
[LSW2-Vlanif10]ip address 192.168.3.14 28
[LSW2-Vlanif10]q
[LSW2]interface GigabitEthernet 0/0/6
[LSW2-GigabitEthernet0/0/6]port link-type trunk
[LSW2-GigabitEthernet0/0/6]port trunk allow-pass vlan all
[LSW2-GigabitEthernet0/0/6]int vlanif 20
[LSW2-Vlanif20]ip address 192.168.3.30 28
[LSW2-Vlanif20]q
[LSW2]interface GigabitEthernet 0/0/7
[LSW2-GigabitEthernet0/0/7]port link-type trunk
[LSW2-GigabitEthernet0/0/7]port trunk allow-pass vlan all
[LSW2-GigabitEthernet0/0/7]int vlanif 30
[LSW2-Vlanif30]ip address 192.168.3.46 28
[LSW2]interface GigabitEthernet 0/0/2
[LSW2-GigabitEthernet0/0/2]port link-type trunk
[LSW2-GigabitEthernet0/0/2]port trunk allow-pass vlan all
[LSW2-GigabitEthernet0/0/2]q
[LSW2]interface GigabitEthernet 0/0/22
[LSW2-GigabitEthernet0/0/22]port link-type trunk
[LSW2-GigabitEthernet0/0/22]port trunk allow-pass vlan all
[LSW2-GigabitEthernet0/0/22]q
[LSW2]ip route-static 0.0.0.0 0.0.0.0 192.168.3.238
测试：
LSW1核心交换机：
[LSW1]vlan batch 10 20 30 200 210
[LSW1]dhcp enable
Info: The operation may take a few seconds. Please wait for a moment.done.
[LSW1]int vlanif 10
[LSW1-Vlanif10]ip address 192.168.3.14 28
[LSW1-Vlanif10]dhcp select interface
[LSW1-Vlanif10]dhcp server dns-list 114.114.114.114 8.8.8.8
[LSW1]int vlanif 20
[LSW1-Vlanif20]ip address 192.168.3.30 28
[LSW1-Vlanif20]dhcp select interface
[LSW1-Vlanif20]dhcp server dns-list 114.114.114.114 8.8.8.8
[LSW1-Vlanif20]q
[LSW1]int vlanif 30
[LSW1-Vlanif30]ip address 192.168.3.46 28
[LSW1-Vlanif30]dhcp select interface
[LSW1-Vlanif30]dhcp server dns-list 114.114.114.114 8.8.8.8
[LSW1-Vlanif30]q
[LSW1]int vlanif 200
[LSW1-Vlanif200]ip address 192.168.3.238 28
[LSW1-Vlanif200]q
[LSW1]interface GigabitEthernet 0/0/2
[LSW1-GigabitEthernet0/0/2]port link-type trunk
[LSW1-GigabitEthernet0/0/2]port trunk allow-pass vlan all
[LSW1-GigabitEthernet0/0/2]q
[LSW1]interface GigabitEthernet 0/0/22
[LSW1-GigabitEthernet0/0/22]port link-type trunk
[LSW1-GigabitEthernet0/0/22]port trunk allow-pass vlan all
[LSW1-GigabitEthernet0/0/22]q
[LSW1]interface GigabitEthernet 0/0/1
[LSW1-GigabitEthernet0/0/1]port link-type access
[LSW1-GigabitEthernet0/0/1]port default vlan 210
[LSW1-GigabitEthernet0/0/1]q
[LSW1]int vlanif 210
[LSW1-Vlanif210]ip address 192.168.3.246 28
[LSW1]ip route-static 0.0.0.0 0.0.0.0 192.168.3.241
R1出口路由的配置：
[R1]interface GigabitEthernet0/0/0
[R1-GigabitEthernet0/0/0]ip address 192.168.3.241 29
[R1]ip route-static 192.168.3.14 255.255.255.240 192.168.3.246
[R1]ip route-static 192.168.3.30 255.255.255.240 192.168.3.246
[R1]ip route-static 192.168.3.46 255.255.255.240 192.168.3.246
[R1]ip route-static 192.168.3.238 255.255.255.240 192.168.3.246
测试：
nat：
[R1-acl-basic-2000]rule permit source 192.168.3.0 0.0.0.255
[R1-acl-basic-2000]q
[R1]interface GigabitEthernet0/0/1
[R1-GigabitEthernet0/0/1]ip address 172.1.1.1 24
[R1-GigabitEthernet0/0/1]nat address-group 1 172.1.1.5 172.1.1.10
[R1-GigabitEthernet0/0/1]nat outbound 2000 address-group 1 no-pat
测试：
地址静态绑定，打印机场景。
[LSW1]dhcp snooping en
[LSW1]vlan 10
[LSW1-vlan10]dhcp snooping enable
[LSW1-vlan10]ip source check user-bind en
测试：
女生公寓部分：
LSW8：
[LSW8]vlan 40
[LSW8-vlan40]q
[LSW8]interface GigabitEthernet 0/0/1
[LSW8-GigabitEthernet0/0/1]port link-type access
[LSW8-GigabitEthernet0/0/1]port default vlan 40
[LSW8-GigabitEthernet0/0/1]q
[LSW8]interface GigabitEthernet 0/0/8
[LSW8-GigabitEthernet0/0/8]port link-type trunk
[LSW8-GigabitEthernet0/0/8]port trunk allow-pass vlan all
LSW9：
[LSW9]vlan 50
[LSW9-vlan50]q
[LSW9]interface GigabitEthernet 0/0/1
[LSW9-GigabitEthernet0/0/1]port link-type access
[LSW9-GigabitEthernet0/0/1]port default vlan 50
[LSW9-GigabitEthernet0/0/1]q
[LSW9]interface GigabitEthernet 0/0/9
[LSW9-GigabitEthernet0/0/9]port link-type trunk
[LSW9-GigabitEthernet0/0/9]port trunk allow-pass vlan all
LSW10:
[LSW10]vlan 60
[LSW10-vlan60]q
[LSW10]interface GigabitEthernet 0/0/1
[LSW10-GigabitEthernet0/0/1]port link-type access
[LSW10-GigabitEthernet0/0/1]port default vlan 60
[LSW10-GigabitEthernet0/0/1]q
[LSW10]interface GigabitEthernet 0/0/10
[LSW10-GigabitEthernet0/0/10]port link-type trunk
[LSW10-GigabitEthernet0/0/10]port trunk allow-pass vlan all
LSW11:
[LSW11]vlan 70
[LSW11-vlan70]q
[LSW11]interface GigabitEthernet 0/0/1
[LSW11-GigabitEthernet0/0/1]port link-type access
[LSW11-GigabitEthernet0/0/1]port default vlan 70
[LSW11-GigabitEthernet0/0/1]q
[LSW11]interface GigabitEthernet 0/0/11
[LSW11-GigabitEthernet0/0/11]port link-type trunk
[LSW11-GigabitEthernet0/0/11]port trunk allow-pass vlan all
LSW12:
[LSW12]vlan 80
[LSW12-vlan80]q
[LSW12]interface GigabitEthernet 0/0/1
[LSW12-GigabitEthernet0/0/1]port link-type access
[LSW12-GigabitEthernet0/0/1]port default vlan 80
[LSW12-GigabitEthernet0/0/1]q
[LSW12]interface GigabitEthernet 0/0/12
[LSW12-GigabitEthernet0/0/12]port link-type trunk
[LSW12-GigabitEthernet0/0/12]port trunk allow-pass vlan all
LSW13:
[LSW13]vlan 90
[LSW13-vlan90]q
[LSW13]interface GigabitEthernet 0/0/1
[LSW13-GigabitEthernet0/0/1]port link-type access
[LSW13-GigabitEthernet0/0/1]port default vlan 90
[LSW13-GigabitEthernet0/0/1]q
[LSW13]interface GigabitEthernet 0/0/13
[LSW13-GigabitEthernet0/0/13]port link-type trunk
[LSW13-GigabitEthernet0/0/13]port trunk allow-pass vlan all
LSW3:
[LSW3]vlan batch 40 50 60 70 80 90 200
[LSW3-Vlanif200]ip address 192.168.3.226 28
[LSW3-Vlanif200]q
[LSW3]int g 0/0/8
[LSW3-GigabitEthernet0/0/8]port link-type trunk
[LSW3-GigabitEthernet0/0/8]port trunk allow-pass vlan
[LSW3-GigabitEthernet0/0/8]port trunk allow-pass vlan all
[LSW3-GigabitEthernet0/0/8]int vlanif40
[LSW3-Vlanif40]ip address 192.168.3.70 29
[LSW3]int g 0/0/9
[LSW3-GigabitEthernet0/0/9]port link-type trunk
[LSW3-GigabitEthernet0/0/9]port trunk allow-pass vlan all
[LSW3-GigabitEthernet0/0/9]int vlanif50
[LSW3-Vlanif50]ip address 192.168.3.78 29
[LSW3]interface GigabitEthernet 0/0/10
[LSW3-GigabitEthernet0/0/10]port link-type trunk
[LSW3-GigabitEthernet0/0/10]port trunk allow-pass vlan all
[LSW3-GigabitEthernet0/0/10]int vlanif60
[LSW3-Vlanif60]ip address 192.168.3.86 29
[LSW3-Vlanif60]q
[LSW3]interface GigabitEthernet 0/0/11
[LSW3-GigabitEthernet0/0/11]port link-type trunk
[LSW3-GigabitEthernet0/0/11]port trunk allow-pass vlan all
[LSW3-GigabitEthernet0/0/11]int vlanif 70
[LSW3-Vlanif70]ip address 192.168.3.94 29
[LSW3-Vlanif70]q
[LSW3]interface GigabitEthernet 0/0/12
[LSW3-GigabitEthernet0/0/12]port link-type trunk
[LSW3-GigabitEthernet0/0/12]port trunk allow-pass vlan all
[LSW3-GigabitEthernet0/0/12]int vlanif 80
[LSW3-Vlanif80]ip address 192.168.3.102 29
[LSW3-Vlanif80]q
[LSW3]interface GigabitEthernet 0/0/13
[LSW3-GigabitEthernet0/0/13]port link-type trunk
[LSW3-GigabitEthernet0/0/13]port trunk allow-pass vlan all
[LSW3-GigabitEthernet0/0/13]int vlanif 90
[LSW3-Vlanif90]ip address 192.168.3.110 29
[LSW3-Vlanif90]q
[LSW3]interface GigabitEthernet 0/0/3
[LSW3-GigabitEthernet0/0/3]port link-type trunk
[LSW3-GigabitEthernet0/0/3]port trunk allow-pass vlan all
[LSW3-GigabitEthernet0/0/3]q
[LSW3]interface GigabitEthernet 0/0/23
[LSW3-GigabitEthernet0/0/23]port link-type trunk
[LSW3-GigabitEthernet0/0/23]port trunk allow-pass vlan all
[LSW3]ip route-static 0.0.0.0 0.0.0.0 192.168.3.238
测试：
LSW1核心交换机：
[LSW1]vlan batch 40 50 60 70 80 90
interface Vlanif40
ip address 192.168.3.70 255.255.255.248
[LSW1-Vlanif40]dhcp select interface
[LSW1-Vlanif40]dhcp server dns-list 114.114.114.114 8.8.8.8
[LSW1-Vlanif40]q
[LSW1]int vlanif 50
interface Vlanif50
ip address 192.168.3.78 255.255.255.248
[LSW1-Vlanif50]dhcp select interface
[LSW1-Vlanif50]dhcp server dns-list 114.114.114.114 8.8.8.8
[LSW1-Vlanif50]q
[LSW1]int vlanif 60
[LSW1-Vlanif60]ip address 192.168.3.86 29
[LSW1-Vlanif60]dhcp select interface
[LSW1-Vlanif60]dhcp server dns-list 114.114.114.114 8.8.8.8
[LSW1-Vlanif60]q
[LSW1]int vlanif 70
[LSW1-Vlanif70]ip address 192.168.3.94 29
[LSW1-Vlanif70]dhcp select interface
[LSW1-Vlanif70]dhcp server dns-list 114.114.114.114 8.8.8.8
[LSW1-Vlanif70]q
[LSW1]int vlanif 80
[LSW1-Vlanif80]ip address 192.168.3.102 29
[LSW1-Vlanif80]dhcp select interface
[LSW1-Vlanif80]dhcp server dns-list 114.114.114.114 8.8.8.8
[LSW1-Vlanif80]q
[LSW1]int vlanif 90
[LSW1-Vlanif90]ip address 192.168.3.110 29
[LSW1-Vlanif90]dhcp select interface
[LSW1-Vlanif90]dhcp server dns-list 114.114.114.114 8.8.8.8
[LSW1-Vlanif90]q
[LSW1]interface GigabitEthernet 0/0/3
[LSW1-GigabitEthernet0/0/3]port link-type trunk
[LSW1-GigabitEthernet0/0/3]port trunk allow-pass vlan all
[LSW1-GigabitEthernet0/0/3]q
[LSW1]interface GigabitEthernet 0/0/23
[LSW1-GigabitEthernet0/0/23]port link-type trunk
[LSW1-GigabitEthernet0/0/23]port trunk allow-pass vlan all
R1出口路由的配置：
[AR1]ip route-static 192.168.3.70 255.255.255.248 192.168.3.246
[AR1]ip route-static 192.168.3.78 255.255.255.248 192.168.3.246
[AR1]ip route-static 192.168.3.86 255.255.255.248 192.168.3.246
[AR1]ip route-static 192.168.3.94 255.255.255.248 192.168.3.246
[AR1]ip route-static 192.168.3.102 255.255.255.248 192.168.3.246
[AR1]ip route-static 192.168.3.110 255.255.255.248 192.168.3.246
测试：
ospf:
AR1：
[AR1]ospf 1
[AR1-ospf-1]area 0
[AR1-ospf-1-area-0.0.0.0]network 172.1.1.0 0.0.0.255
AR2：
[AR2-GigabitEthernet0/0/0]ip address 172.1.2.1 24
[AR2-GigabitEthernet0/0/0]q
[AR2]ospf 1
[AR2-ospf-1]area 0
[AR2-ospf-1-area-0.0.0.0]network 172.1.1.0 0.0.0.255
[AR2-ospf-1-area-0.0.0.0]network 172.1.2.0 0.0.0.255
http，ftp，dns服务器部分：
LSW20：
[LSW20]vlan batch 300 310 320
[LSW20]int
[LSW20]interface g
[LSW20]interface GigabitEthernet 0/0/1
[LSW20-GigabitEthernet0/0/1]port link-type access
[LSW20-GigabitEthernet0/0/1]port default vlan 300
[LSW20-GigabitEthernet0/0/1]int g 0/0/2
[LSW20-GigabitEthernet0/0/2]port link-type access
[LSW20-GigabitEthernet0/0/2]port default vlan 310
[LSW20-GigabitEthernet0/0/2]int g 0/0/3
[LSW20-GigabitEthernet0/0/3]port link-type access
[LSW20-GigabitEthernet0/0/3]port default vlan 320
[LSW20-GigabitEthernet0/0/3]q
[LSW20]int g 0/0/10
[LSW20-GigabitEthernet0/0/10]port link-type trunk
[LSW20-GigabitEthernet0/0/10]port trunk allow-pass vlan all
[LSW20-GigabitEthernet0/0/10]int g 0/0/20
[LSW20-GigabitEthernet0/0/20]port link-type trunk
[LSW20-GigabitEthernet0/0/20]port trunk allow-pass vlan all
LSW1：
[LSW1]int g 0/0/10
[LSW1-GigabitEthernet0/0/10]port link-type trunk
[LSW1-GigabitEthernet0/0/10]port trunk allow-pass vlan all
[LSW1-GigabitEthernet0/0/10]int g 0/0/20
[LSW1-GigabitEthernet0/0/20]port link-type trunk
[LSW1-GigabitEthernet0/0/20]port trunk allow-pass vlan all
[LSW1]vlan batch 300 310 320
[LSW1-Vlanif320]int vlanif 300
[LSW1-Vlanif300]ip address 192.168.3.198 29
[LSW1-Vlanif300]int vlanif 310
[LSW1-Vlanif310]ip address 192.168.3.206 29
[LSW1-Vlanif310]int vlanif 320
[LSW1-Vlanif320]ip address 192.168.3.214 29
dns：
http：
ftp:
用Client3测试：
http：
ftp:
telnet:
[AR1]user-interface vty 0 4
[AR1-ui-vty0-4]authentication-mode aaa
[AR1]aaa
[AR1-aaa]local-user xiao privilege level 15 password cipher 22060503
[AR1-aaa]local-user xiao service-type telnet
[AR1-acl-adv-3000]rule deny tcp source 192.168.3.64 0.0.0.192 destination 192.16
8.3.241 0.0.0.0 destination-port eq 23
[AR1]int GigabitEthernet 0/0/1
[AR1-GigabitEthernet0/0/1]traffic-filter inbound acl 3000
测试：
