实验九 典型企业网络实训案例.docx

实验九典型企业网络实训案例实验目的：1 能够叙述企业网络规划设计的主要流程、注意事项；2 能清晰表达在企业网络建设中可能用到的主要技术以及实现方法；3 能利用前面所学的知识和技能，初步学会网络的设计与规划。实验内容：如图1，一个中型企业的XX通信公司，大约200名员工，公司分为5个部门，人事部、财务部、销售部、市场部、技术部。现在要设计一个网络，要求如下：1 公司内部要有内网，使各部门员工的终端能够实现连通。2 所有公司员工都能访问远程分支机构。3 公司财务部的数据很重要，要有一定的安全措施。4 按表格里的内容划分VLAN。5 SW1作为核心交换机，配置VTP域，域名为company，SW25作为接入层交换机，要求能够自己学习核心交换机上的VLAN信息。6 配置交换机之间的Trunk链路，保证能够进行跨交换机之间的VLAN通信。7 配置生成树协议，手工选举核心交换机为STP根桥。8 配置单区域的OSPF动态路由协议。9 验证：相同VLAN的主机之间是否能通信；不同VLAN之间的主机是否能通信；主机能否ping通自己的网关；主机是否能与远程分支机构的主机通信。图1 网络拓扑图1 配置步骤1.Trunk模式设置Switch#conf tEnter configuration commands, one per line. End with CNTL/Z.Switch(config)#hostname switch1switch1(config)#interface fa 0/2switch1(config-if)#switchport mode trunkswitch1(config-if)#%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/2, changed state to down%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/2, changed state to upswitch1(config-if)#exitswitch1(config)#interface fa 0/3switch1(config-if)#switchport mode trunkswitch1(config-if)#%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/3, changed state to down%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/3, changed state to upswitch1(config-if)#exitswitch1(config)#interface fa 0/4switch1(config-if)#switchport mode trunkswitch1(config-if)#%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/4, changed state to down%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/4, changed state to upswitch1(config-if)#exitswitch1(config)#interface fa 0/5switch1(config-if)#switchport mode trunkswitch1(config-if)#%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/5, changed state to down%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/5, changed state to upswitch1(config-if)#exitswitch1(config)#Switch#conf tEnter configuration commands, one per line. End with CNTL/Z.Switch(config)#hostname Switch2Switch2(config)#interface fa0/2Switch2(config-if)#switchport mode trunkSwitch2(config-if)#exitSwitch2(config)#SwitchenSwitch#conf tEnter configuration commands, one per line. End with CNTL/Z.Switch(config)#hostname Switch 3 % Invalid input detected at marker.Switch(config)#hostname Switch3Switch3(config)#interface f0/3Switch3(config-if)#switchport mode trunkSwitch3(config-if)#exitSwitch3(config)#SwitchenSwitch#conf tEnter configuration commands, one per line. End with CNTL/Z.Switch(config)#hostname Switch4Switch4(config)#interface fa0/4Switch4(config-if)#switchport mode trunkSwitch4(config-if)#exitSwitch4(config)#SwitchenSwitch#conf tEnter configuration commands, one per line. End with CNTL/Z.Switch(config)#hostname Switch5Switch5(config)#interface fa 0/5Switch5(config-if)#switchport mode trunkSwitch5(config-if)#exitSwitch5(config)#2.配置交换机VTPswitch1(config)#vtp domain companyChanging VTP domain name from NULL to companyswitch1(config)#vtp mode serverDevice mode already VTP SERVER.switch1(config)#Switch2(config)#vtp domain companyDomain name already set to company.Switch2(config)#vtp mode clientSetting device to VTP CLIENT mode.Switch2(config)#Switch3(config)#vtp mode clientSetting device to VTP CLIENT mode.Switch3(config)#Switch4(config)#vtp domain companyDomain name already set to company.Switch4(config)#vtp mode clientSetting device to VTP CLIENT mode.Switch4(config)#Switch5(config)#vtp domain companyDomain name already set to company.Switch5(config)#vtp mode clientSetting device to VTP CLIENT mode.Switch5(config)#3.配置各交换机VLANswitch1#vlan database% Warning: It is recommended to configure VLAN from config mode, as VLAN database mode is being deprecated. Please consult user documentation for configuring VTP/VLAN in config mode.switch1(vlan)#vlan 30 name technicVLAN 30 added: Name: technicswitch1(vlan)#vlan 40 name HRVLAN 40 added: Name: HRswitch1(vlan)#vlan 50 name financialVLAN 50 added: Name: financialswitch1(vlan)#vlan 10 name salesVLAN 10 added: Name: salesswitch1(vlan)#vlan 20 name marketingVLAN 20 added: Name: marketingswitch1(vlan)#exitAPPLY completed.4.将各接口划分到指定的vlan中switch1(config)#int fa 0/6switch1(config-if)#switchport access vlan 50 .5.设置Switch1为根桥，并在switch15上设置RSTP快速生成树协议switch1#conf tEnter configuration commands, one per line. End with CNTL/Z.switch1(config)#spanning-tree vlan 10,20,30,40,50 root primaryswitch1(config)#spanning-tree mode rapid-pvstswitch2(config)#spanning-tree mode rapid-pvstswitch3(config)#spanning-tree mode rapid-pvstswitch4(config)#spanning-tree mode rapid-pvstswitch5(config)#spanning-tree mode rapid-pvst6.switch15配置链路类型switch1(config)#interface range fa0/2-5switch1(config-if-range)#duplex fullswitch1(config-if-range)#%LINK-5-CHANGED: Interface FastEthernet0/2, changed state to down%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/2, changed state to down%LINK-5-CHANGED: Interface FastEthernet0/3, changed state to down%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/3, changed state to down%LINK-5-CHANGED: Interface FastEthernet0/4, changed state to down%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/4, changed state to down%LINK-5-CHANGED: Interface FastEthernet0/5, changed state to down%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/5, changed state to downswitch1(config-if-range)#spanning-tree link-type point-to-pointSwitch2(config)#interface range fa0/2Switch2(config-if-range)#duplex fullSwitch2(config-if-range)#%LINK-5-CHANGED: Interface FastEthernet0/2, changed state to up%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/2, changed state to upSwitch2(config-if-range)#spanning-tree link-type point-to-pointSwitch3(config)#interface range fa0/3Switch3(config-if-range)#duplex fullSwitch3(config-if-range)#%LINK-5-CHANGED: Interface FastEthernet0/3, changed state to up%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/3, changed state to upSwitch3(config-if-range)#spanning-tree link-type point-tp-point % Invalid input detected at marker.Switch3(config-if-range)#spanning-tree link-type point-to-pointSwitch4(config)#interface range fa0/4Switch4(config-if-range)#duplex fullSwitch4(config-if-range)#%LINK-5-CHANGED: Interface FastEthernet0/4, changed state to up%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/4, changed state to upSwitch4(config-if-range)#spanning-tree link-type point-to-pointSwitch5(config)#interface range fa0/5Switch5(config-if-range)#duplex fullSwitch5(config-if-range)#%LINK-5-CHANGED: Interface FastEthernet0/5, changed state to up%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/5, changed state to upSwitch5(config-if-range)#spanning-tree link-type point-to-point7.设置路由器子接口R1(config)#int fa0/0R1(config-if)#no sh%LINK-5-CHANGED: Interface FastEthernet0/0, changed state to up%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to upR1(config-if)#exitR1(config)#int fa0/0.1%LINK-5-CHANGED: Interface FastEthernet0/0.1, changed state to up%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0.1, changed state to upR1(config-subif)#encapsulation dot1Q 10 /封装vlan10 dot1Q信息R1(config-subif)#ip add 192.168.10.1 255.255.255.0R1(config-subif)#no shR1(config-subif)#exitR1(config)#int fa0/0.2%LINK-5-CHANGED: Interface FastEthernet0/0.2, changed state to up%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0.2, changed state to upR1(config-subif)#encapsulation dot1Q 30 /封装vlan30 dot1Q信息R1(config-subif)#ip add 192.168.11.1 255.255.255.0R1(config-subif)#no shR1(config-subif)#exitR1(config)#int fa0/1R1(config-if)#ip add 192.168.20.1 255.255.255.0%LINK-5-CHANGED: Interface FastEthernet0/1, changed state to upR1(config-if)#no sh8.配置单区域OSPF动态路由协议R1(config)#router ospf 1R1(config-router)#network 192.168.10.0 0.0.0.255 area 0R1(config-router)#network 192.168.20.0 0.0.0.255 area 0R1(config-router)#network 192.168.11.0 0.0.0.255 area 0R1(config-router)#exitR1(config)#R2(config)#int fa 0/1R2(config-if)#ip add 192.168.20.2 255.255.255.0R2(config-if)#no sh%LINK-5-CHANGED: Interface FastEthernet0/1, changed state to up%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to upR2(config-if)#R2(config)#router ospf 1R2(config-router)#network 192.168.20.0 0.0.0.255 area 0R2(config-router)#exitRouter(config)#9.配置测试计算机基本IP等信息（前面已经将交换机接口划分到了指定vlan中）总经理PC：ip:192.168.11.162 vlan 50副总经理PC：ip:192.168.11.163 vlan 50用户1 PC：ip:192.168.10.2 vlan 10用户2 PC：ip:192.168.10.130 vlan 20用户3 PC：ip:192.168.20.10 远程分支机构用户PC10.验证：1.相同vlan之间通信：在总经理PC上ping副总经理PCPCping 192.168.11.163Pinging 192.168.11.163 with 32 bytes of data:Reply from 192.168.11.163: bytes=32 time=11ms TTL=128Reply from 192.168.11.163: bytes=32 time=0ms TTL=128Reply from 192.168.11.163: bytes=32 time=0ms TTL=128Reply from 192.168.11.163: bytes=32 time=0ms TTL=128Ping statistics for 192.168.11.163: Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),Approximate round trip times in milli-seconds: Minimum = 0ms, Maximum = 11ms, Average = 2ms2.不同vlan之间通信：在用户1 PC上ping总经理PCPCping 192.168.11.162Pinging 192.168.11.162 with 32 bytes of data:Request timed out.Request timed out.Request timed out.Request timed out.Ping statistics for 192.168.11.162:Packets: Sent = 4, Received = 0, Lost = 4 (100% loss)3.主机ping自己的网关：用户2 PC (vlan20)ping自己网关(192.168.10.129)PCping 192.168.10.129Pinging 192.168.10.129 with 32 bytes of data:Reply from 192.168.10.129: bytes=32 time=18ms TTL=128Reply from 192.168.10.129: bytes=3