HCIP 交换

大家好，欢迎来到IT知识分享网。

实验内容

实验拓扑

实验过程 

创建vlan 

vlan batch 1 2

进入SW1与SW2的G0/0/23与G0/0/24接口配置eth-trunk 

[SW1]interface Eth-Trunk 0 [SW1]interface g0/0/23 [SW1-GigabitEthernet0/0/23]eth-trunk 0 [SW1-GigabitEthernet0/0/23]int g0/0/24 [SW1-GigabitEthernet0/0/24]eth-trunk 0 [SW2]int Eth-Trunk 0 [SW2]int g0/0/23 [SW2-GigabitEthernet0/0/23]eth-trunk 0 [SW2]int g0/0/24 [SW2-GigabitEthernet0/0/24]eth-trunk 0

交换机互连的链路类型调为trunk 

[SW1]port-group group-member GigabitEthernet 0/0/3 GigabitEthernet 0/0/4 Eth-Trunk 0 [SW1-port-group]port link-type trunk [SW1-GigabitEthernet0/0/3]port link-type trunk [SW1-GigabitEthernet0/0/4]port link-type trunk [SW1-Eth-Trunk0]port link-type trunk [SW1-port-group]port trunk allow-pass vlan 2 [SW1-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 [SW1-GigabitEthernet0/0/4]port trunk allow-pass vlan 2 [SW1-Eth-Trunk0]port trunk allow-pass vlan 2 [SW2]port-group group-member GigabitEthernet 0/0/3 GigabitEthernet 0/0/5 Eth-Trunk 0 [SW2-port-group]port link-type trunk [SW2-GigabitEthernet0/0/3]port link-type trunk [SW2-GigabitEthernet0/0/5]port link-type trunk [SW2-Eth-Trunk0]port link-type trunk [SW2-port-group]port trunk allow-pass vlan 2 [SW2-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 [SW2-GigabitEthernet0/0/5]port trunk allow-pass vlan 2 [SW2-Eth-Trunk0]port trunk allow-pass vlan 2 [SW3]port-group group-member GigabitEthernet 0/0/3 GigabitEthernet 0/0/5 [SW3-port-group]port link-type trunk [SW3-GigabitEthernet0/0/3]port link-type trunk [SW3-GigabitEthernet0/0/5]port link-type trunk [SW3-port-group]port trunk allow-pass vlan 2 [SW3-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 [SW3-GigabitEthernet0/0/5]port trunk allow-pass vlan 2 [SW4]port-group group-member GigabitEthernet 0/0/3 GigabitEthernet 0/0/4 [SW4-port-group]port link-type trunk [SW4-GigabitEthernet0/0/3]port link-type trunk [SW4-GigabitEthernet0/0/4]port link-type trunk [SW4-port-group]port trunk allow-pass vlan 2 [SW4-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 [SW4-GigabitEthernet0/0/4]port trunk allow-pass vlan 2

vlan的划分

[SW3]int g0/0/2 [SW3-GigabitEthernet0/0/2]port link-type access [SW3-GigabitEthernet0/0/2]port default vlan 2 [SW4]int g0/0/3 [SW4-GigabitEthernet0/0/2]port link-type access [SW4-GigabitEthernet0/0/2]port default vlan 2 [SW3]int g0/0/1 [SW3-GigabitEthernet0/0/2]port link-type access [SW3-GigabitEthernet0/0/2]port default vlan 1 [SW4]int g0/0/2 [SW4-GigabitEthernet0/0/2]port link-type access [SW4-GigabitEthernet0/0/2]port default vlan 1

在各台交换机上配置MSTP（各台交换机配置相同）

[SW4]stp mode mstp [SW4]stp enable [SW4]stp region-configuration [SW4-mst-region]region-name 100 [SW4-mst-region]instance 1 vlan 1 [SW4-mst-region]instance 2 vlan 2 [SW4-mst-region]active region-configuration

 在各台交换机上查看STP brief发现SW4为根

 接入层设备SW4为根，先需将根调整到汇聚层设备SW1上，根据分流需要，将组1的根调整到SW1,备根调整到SW2;将组2的根调整到SW2，备根调整到SW1

[SW1]stp instance 1 root primary [SW1]stp instance 2 root secondary [SW2]stp instance 1 root secondary [SW2]stp instance 2 root primary

配置完成后查看SW3与SW4的STP brief观察被阻塞接口 

 配置SVI

[SW1]interface vlan 1 [SW1-Vlanif1]ip add 172.16.1.1 25 [SW1-Vlanif1]int vlan 2 [SW1-Vlanif2]ip add 172.16.1.129 25 [SW2]int vlan 1 [SW2-Vlanif1]ip add 172.16.1.2 25 [SW2-Vlanif1]int vlan 2 [SW2-Vlanif2]ip add 172.16.1.130 25

配置VRRP（网关冗余）

[SW1]int vlan 1 [SW1-Vlanif1]vrrp vrid 1 virtual-ip 172.16.1.126 [SW1-Vlanif1]vrrp vrid 1 priority 120 [SW1-Vlanif1]vrrp vrid 1 track interface GigabitEthernet 0/0/1 reduced 30 [SW1]int vlan 2 [SW1-Vlanif2]vrrp vrid 1 virtual-ip 172.16.1.254 [SW2]int vlan 1 [SW2-Vlanif1]vrrp vrid 1 virtual-ip 172.16.1.126 [SW2]int vlan 2 [SW2-Vlanif2]vrrp vrid 1 virtual-ip 172.16.1.254 [SW2-Vlanif2]vrrp vrid 1 priority 120 [SW2-Vlanif2]vrrp vrid 1 track interface GigabitEthernet 0/0/2 reduced 30

DHCP 

[SW1]dhcp enable [SW1]ip pool v1 [SW1-ip-pool-v1]network 172.16.1.0 mask 25 [SW1-ip-pool-v1]gateway-list 172.16.1.126 [SW1-ip-pool-v1]dns-list 114.114.114.114 [SW1]ip pool v2 [SW1-ip-pool-v2]network 172.16.1.128 mask 25 [SW1-ip-pool-v2]gateway-list 172.16.1.254 [SW1-ip-pool-v2]dns-list 114.114.114.114 [SW1]int vlan 1 [SW1-Vlanif1]dhcp select global [SW1-Vlanif1]int vlan 2 [SW1-Vlanif2]dhcp select global [SW2]dhcp enable [SW2]ip pool v1 [SW2-ip-pool-v1] gateway-list 172.16.1.126 [SW2-ip-pool-v1] network 172.16.1.0 mask 255.255.255.128 [SW2-ip-pool-v1] dns-list 114.114.114.114 [SW2-ip-pool-v1]ip pool v2 [SW2-ip-pool-v2] gateway-list 172.16.1.254 [SW2-ip-pool-v2] network 172.16.1.128 mask 255.255.255.128 [SW2-ip-pool-v2] dns-list 114.114.114.114 [SW2]int vlan 1 [SW2-Vlanif1]dhcp select global [SW2-Vlanif1]int vlan 2 [SW2-Vlanif2]dhcp select global

配置路由器IP

[R1]int g0/0/1 [R1-GigabitEthernet0/0/1]ip add 172.16.0.2 30 [R1-GigabitEthernet0/0/1]int g0/0/2 [R1-GigabitEthernet0/0/2]ip add 172.16.0.6 30 [R1-GigabitEthernet0/0/2]int g0/0/0 [R1-GigabitEthernet0/0/0]ip add 12.1.1.1 24 [ISP]int g0/0/0 [ISP-GigabitEthernet0/0/0]ip add 12.1.1.2 24 [ISP-GigabitEthernet0/0/0]int lo 0 [ISP-LoopBack0]ip add 1.1.1.1 24

配置OSPF（三层链路做成Area0，底下部分做成Area1）

[R1]ospf 1 router-id 1.1.1.1 [R1-ospf-1]area 0 [R1-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.0.255 [SW1]ospf 1 router-id 2.2.2.2 [SW1-ospf-1]area 0 [SW1-ospf-1-area-0.0.0.0]network 172.16.0.1 0.0.0.0 [SW1-ospf-1]area 1 [SW1-ospf-1-area-0.0.0.1]network 172.16.1.1 0.0.0.0 [SW1-ospf-1-area-0.0.0.1]network 172.16.1.129 0.0.0.0 [SW2]ospf 1 router-id 3.3.3.3 [SW2-ospf-1]area 0 [SW2-ospf-1-area-0.0.0.0]network 172.16.0.5 0.0.0.0 [SW2-ospf-1]area 1 [SW2-ospf-1-area-0.0.0.1]network 172.16.1.2 0.0.0.0 [SW2-ospf-1-area-0.0.0.1]network 172.16.1.130 0.0.0.0 [SW1]ospf 1 [SW1-ospf-1]area 1 [SW1-ospf-1-area-0.0.0.1]abr-summary 172.16.1.0 255.255.255.0 [SW2]ospf 1 [SW2-ospf-1]area 1 [SW2-ospf-1-area-0.0.0.1]abr-summary 172.16.1.0 255.255.255.0

配置静默接口

[SW1]ospf 1 [SW1-ospf-1]silent-interface all [SW1-ospf-1]undo silent-interface GigabitEthernet 0/0/1 [SW1-ospf-1]undo silent-interface Eth-Trunk 0 [SW1-ospf-1]undo silent-interface Vlanif 1 [SW1-ospf-1]undo silent-interface Vlanif 100 [SW2]ospf 1 [SW2-ospf-1]silent-interface all [SW2-ospf-1]undo silent-interface GigabitEthernet 0/0/2 [SW2-ospf-1]undo silent-interface Eth-Trunk 0 [SW2-ospf-1]undo silent-interface Vlanif 100 [SW2-ospf-1]undo silent-interface Vlanif 1

NAT

[R1]ip route-static 0.0.0.0 0 12.1.1.2 [R1]ospf 1 [R1-ospf-1]default-route-advertise [R1]acl 2000 [R1-acl-basic-2000]rule permit source 172.16.0.0 0.0.255.255 [R1]int g0/0/0 [R1-GigabitEthernet0/0/0]nat outbound 2000

测试

 实验结束