企业网络实训案例.docx

实验九典型企业网络实训案例实验目的：1 能够叙述企业网络规划设计的主要流程、注意事项；2 能清晰表达在企业网络建设中可能用到的主要技术以及实现方法；3 能利用前面所学的知识和技能，初步学会网络的设计与规划。实验内容：如图1，一个中型企业的XX通信公司，大约200名员工，公司分为5个部门，人事部、财务部、销售部、市场部、技术部。现在要设计一个网络，要求如下：1 公司内部要有内网，使各部门员工的终端能够实现连通。2 所有公司员工都能访问远程分支机构。3 公司财务部的数据很重要，要有一定的安全措施。4 按表格里的内容划分VLAN。5 SW1作为核心交换机，配置VTP域，域名为company，SW25作为接入层交换机，要求能够自己学习核心交换机上的VLAN信息。6 配置交换机之间的Trunk链路，保证能够进行跨交换机之间的VLAN通信。7 配置生成树协议，手工选举核心交换机为STP根桥。8 配置单区域的OSPF动态路由协议。9 验证：相同VLAN的主机之间是否能通信；不同VLAN之间的主机是否能通信；主机能否ping通自己的网关；主机是否能与远程分支机构的主机通信。图1 网络拓扑图1 配置步骤1.配置各交换机的VLANSW1#vlan databaseSW1(vlan)#vlan 30 name technicVLAN 30 added: Name: technicSW1(vlan)#vlan 40 name HRVLAN 40 added: Name: HRSW1(vlan)#vlan 50 name financialVLAN 50 added: Name: financialSW1(vlan)#vlan 10 name salesVLAN 10 added: Name: salesSW1(vlan)#vlan 20 name marketingVLAN 20 added: Name: marketingSW1(vlan)#exitAPPLY completed. SW2配置vlanSW2(vlan)#vlan 10VLAN 10 added: Name: VLAN0010SW2(vlan)#vlan 20VLAN 20 added: Name: VLAN0020SW2(vlan)#exit,其他的按照相同办法创建vlan2. 将各接口划分到指定的vlan中SW1(config)#int f0/6SW1(config-if)#switchport access vlan 50SW1(config-if)#exitSW1(config)#int f0/7SW1(config-if)#switchport access vlan 50SW1(config-if)#exitSW1(config)#int f0/11SW1(config-if)#switchport access vlan 10SW1(config-if)#exitSW1(config)#int f0/21SW1(config-if)#switchport access vlan 20 SW1(config-if)#exit其余按照相同方法将各接口划分到指定的VLAN中3.配置交换机的VTPSW1(config)#vtp domain companyChanging VTP domain name from NULL to company SW1(config)#vtp mode server SW2(config)#vtp domain companyChanging VTP domain name from NULL to companySW2(config)#vtp mode clientSW3(config)#vtp domain companyChanging VTP domain name from NULL to companySW3(config)#vtp mode clientSetting device to VTP CLIENT mode.SW4(config)#vtp domain companyChanging VTP domain name from NULL to companySW4(config)#vtp mode clientSetting device to VTP CLIENT mode.SW5(config)#vtp domain companyChanging VTP domain name from NULL to companySW5(config)#vtp mode clientSetting device to VTP CLIENT mode.4.交换机互连接口的trunk模式 SW1(config)#int f0/1SW1(config-if)#switchport mode trunk SW1(config-if)#exit SW1(config)#int f0/2 SW1(config-if)#switchport mode trunk SW1(config-if)# %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/2, changed state to down %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/2, changed state to upSW1(config-if)#exitSW1(config)#int f0/3SW1(config-if)#switchport mode trunkSW1(config-if)#%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/3, changed state to down%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/3, changed state to upSW1(config-if)#exitSW1(config)#int f0/4SW1(config-if)#switchport mode trunkSW1(config-if)#%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/4, changed state to down%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/4, changed state to upSW1(config-if)#exitSW1(config)#int f0/5SW1(config-if)#switchport mode trunkSW1(config-if)#%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/5, changed state to down%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/5, changed state to upSW1(config-if)#exitSW2(config)#int f0/2SW2(config-if)#switchport mode trunkSW2(config-if)#exitSW2(config)#其余的Trunk模式按照相同的方法配置.5. 设置Switch1为根桥，在switch15上设置RSTP快速生成树协议并配置链路类型.SW1#configure terminalEnter configuration commands, one per line. End with CNTL/Z.SW1(config)#spanning-tree vlan 10,20,30,40,50 root primarySW1(config)#spanning-tree mode rapid-pvstSW1(config)#intface range fa0/2-5SW1(config-if-range)#duplex full%LINK-5-CHANGED: Interface FastEthernet0/2, changed state to down%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/2, changed state to down%LINK-5-CHANGED: Interface FastEthernet0/3, changed state to down%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/3, changed state to down%LINK-5-CHANGED: Interface FastEthernet0/4, changed state to down%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/4, changed state to down%LINK-5-CHANGED: Interface FastEthernet0/5, changed state to down%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/5, changed state to downswitch2(config)#spanning-tree mode rapid-pvstSwitch2(config)#interface range fa0/2Switch2(config-if-range)#duplex fullSwitch2(config-if-range)#spanning-tree link-type point-to-pointswitch3(config)#spanning-tree mode rapid-pvstSwitch3(config)#interface range fa0/3Switch3(config-if-range)#duplex fullSwitch3(config-if-range)#spanning-tree link-type point-to-point其余按照相同方法配置.6.设置路由器的子接口R1(config)#int f0/0R1(config-if)#no sh%LINK-5-CHANGED: Interface FastEthernet0/0, changed state to up%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to upR1(config)#int fa0/0.1%LINK-5-CHANGED: Interface FastEthernet0/0.1, changed state to up%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0.1, changed state to upR1(config-subif)#encapsulation dot1Q 10R1(config-subif)#ip add 192.168.10.1 255.255.255.0R1(config-subif)#no shR1(config-subif)#exitR1(config)#int fa0/0.2LINK-5-CHANGED: Interface FastEthernet0/0.2, changed state to up%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0.2, changed state to upR1(config-subif)#encapsulation dot1Q 30R1(config-subif)#ip add 192.168.11.1 255.255.255.0R1(config-subif)#no shR1(config-subif)#exitR1(config)#7. 配置单区域OSPF动态路由协议R1(config)#router ospf 1R1(config-router)#network 192.168.10.0 0.0.0.255 area 0R1(config-router)#network 192.168.20.0 0.0.0.255 area 0R1(config-router)#network 192.168.11.0 0.0.0.255 area 0R1(config-router)#exitR1(config)#R2(config)#int f0/1R2(config-if)#ip add 192.168.20.2 255.255.255.0R2(config-if)#no shR2(config)#router ospf 1R2(config-router)#network 192.168.20.0 0.0.0.255 area 0R2(config-router)#exitRouter(config)#8.配置计算机的IP地址总经理IP:192.168.11.161 副总经理ip：192.168.11.162 同属一个vlan50销售部ip：192.168.10.2 vlan10 市场部ip：192.168.10.131 vlan209.验证（1）相同vlan之间的通信：用总经理的ping副总经理PCping 192.168.11.162PC Pinging 192.168.11.162 with 32 bytes of data:Reply from 192.168.11.162: bytes=32 time=14ms TTL=128Reply from 192.168.11.162: bytes=32 time=11ms TTL=128Reply from 192.168.11.162: bytes=32 time=1ms TTL=128Reply from 192.168.11.162: bytes=32 time=4ms TTL=128Ping statistics for 192.168.11.162: Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),Approximate round trip times in milli-seconds: Minimum = 1ms, Maximum = 14ms, Average = 7ms(2)不同vlan之间的通信。销售部ping市场部PCping 192.168.10.131Ping 192.168.10.131with 32 bytes of data:Request timed out.Request timed out.Request timed out.Request timed out.Ping statistics for 192.168.11.162:Packets: Sent = 4, Received