青鸟第七章实验步骤.doc

第七章设备配置信息如下：Sw1：sw1ensw1#config tsw1(config)#enable password testbenetsw1(config)#username benet password testsw1(config)#access-list 1 permit 10.255.1.0 0.0.0.255sw1(config)#line vty 0 4sw1(config-line)#login localsw1(config-line)#access-class 1 insw1(config-line)#exitsw1(config)#in vlan 1sw1(config-if)#ip add 10.255.50.1 255.255.255.0sw1(config-if)#no shsw1(config)#in range f0/14 - 15sw1(config-if-range)#switchport mode trunksw1(config-if-range)#channel-group 1 mode onsw1(config-if-range)#exitsw1(config)#in f0/0sw1(config-if)#no switchport sw1(config-if)#ip add 10.255.0.50 255.255.255.252sw1(config-if)#no shsw1(config-if)#exitsw1(config)#ip route 10.64.0.0 255.192.0.0 10.255.0.49sw1(config)#ip route 10.64.0.0 255.192.0.0 10.255.50.2 50sw1(config)#endsw1#vlan database sw1(vlan)#vlan 2 nasw1(vlan)#vlan 2 name serverVLAN 2 added: Name: serversw1(vlan)#vlan 50 name network VLAN 50 added: Name: networksw1(vlan)#exitAPPLY completed.Exiting.sw1#config t sw1(config)#in f0/1sw1(config-if)#switchport mode trunksw1(config-if)#switchport trunk allowed vlan romove2-1001 sw1(config-if)#swsw1(config-if)#switchport tsw1(config-if)#switchport trunk allsw1(config-if)#switchport trunk allowed vlan add 2sw1(config-if)#switchport trunk allowed vlan add 50sw1#config tsw1(config)#in vlan 2sw1(config-if)#ip add 10.0.0.1 255.255.255.0sw1(config-if)#no shsw1(config-if)#in vlan 50sw1(config-if)#ip add 10.255.1.1 255.255.255.0sw1(config-if)#no shsw1(config-if)#in vlan 2sw1(config-if)#standby 2 ip 10.0.0.254sw1(config-if)#standby 2 priority 150sw1(config-if)#standby 2 preempt sw1(config-if)#standby 2 track f0/1 100sw1(config)#in vlan 50sw1(config-if)#standby 50 ip 10.255.1.254sw1(config-if)#standby 50 preemptsw1(config-if)#exitsw1(config)#spanning-tree vlan 2 root primary sw1(config)#spanning-tree vlan 20 root secondarySw2:Sw2enSw2#config tsw2(config)#enable password testbenetsw2(config)#username benet password testsw2(config)#access-list 1 permit 10.255.1.0 0.0.0.255sw2(config)#line vty 0 4sw2(config-line)#login localsw2(config-line)#access-class 1 insw2(config-line)#exitsw2(config)#in vlan 1sw2(config-if)#ip add 1.255.50.2 255.255.255.0 sw2(config-if)#no shsw2(config-if)#exitsw2(config)#in range f0/14 - 15sw2(config-if-range)#switchport mode trunksw2(config-if-range)#channel-group 1 mode onsw2(config-if-range)#exitsw2(config)#in f0/0sw2(config)#no switchportsw2(config-if)#ip add 10.255.0.54 255.255.255.252sw2(config-if)#no shsw2(config-if)#exitsw2(config)#ip route 10.64.0.0 255.192.0.0 10.255.0.53sw2(config)#ip route 10.64.0.0 255.192.0.0 10.255.50.1 50sw2#vlan database sw2(vlan)#vlan 2 nasw2(vlan)#vlan 2 name serverVLAN 2 added: Name: serversw1(vlan)#vlan 50 name network VLAN 50 added: Name: networksw1(vlan)#exitAPPLY completed.Exiting.Sw2#config t Sw2(config)#in f0/1Sw2(config-if)#switchport mode trunkSw2(config-if)#switchport trunk allowed vlan romove2-1001 Sw2(config-if)#switchport trunk allowed vlan add 2Sw2(config-if)#switchport trunk allowed vlan add 50sw2(config)#in vlan 2sw2(config-if)#ip add sw2(config-if)#ip add 10.0.0.2 255.255.255.0sw2(config-if)#no shsw2(config-if)#in vlan 50sw2(config-if)#ip add 10.255.1.2 255.255.255.0sw2(config-if)#no shsw2(config-if)#in vlan 2sw2(config-if)#standby 2 ip 10.0.0.254sw2(config-if)#standby 2 preempt sw2(config-if)#in vlan 50sw2(config-if)#standby 50 ip 10.255.1.254sw2(config-if)#standby 50 priority 150 sw2(config-if)#standby 50 preempt sw2(config-if)#standby 50 track f0/1 100sw2(config-if)#exitsw2(config)#spanning-tree vlan 2 root secondary sw2(config)#spanning-tree vlan 50 root primarySw3:Sw3enSw3#config tSw3(config)#enable password testbenetSw3(config)#username benet password testSw3(config)#access-list 1 permit 10.255.1.0 0.0.0.255Sw3(config)#line vty 0 4Sw3(config-line)#login localSw3(config-line)#access-class 1 in sw3(config-line)#exitsw3(config)#in vlan 1sw3(config-if)#ip add 10.255.100.1 255.255.255.0sw3(config-if)#no shsw3(config-if)#exitsw3(config)#in f0/0sw3(config-if)#no switchportsw3(config-if)#ip add 10.255.0.49 255.255.255.252sw3(config-if)#no shsw3(config-if)#exitsw3(config)#in f0/1sw3(config-if)#no switchportsw3(config-if)#ip add 10.255.0.53 255.255.255.252sw3(config-if)#no shsw3(config-if)#exitsw3#vlan database sw3(vlan)#vlan 550 name ssl-bd01VLAN 550 added: Name: ssl-bd01sw3(vlan)#vlan 551 name ssl-bd02VLAN 551 added: Name: ssl-bd02sw3(vlan)#vtp serversw3(vlan)#vtp domain benetsw3(vlan)#vtp password testsw3(vlan)#vtp pruning sw3(vlan)#exitsw3#config t sw3(config)#in range f0/14 - 15sw3(config-if-range)#switchport mode trunksw3(config-if-range)#exitsw3(config)#in f0/14sw3(config-if)#switchport trunk allowed vlan remove 2-1001sw3(config-if)#switchport trunk allowed vlan add 550sw3(config-if)#in f0/15sw3(config-if)#switchport trunk allowed vlan remove 2-1001sw3(config-if)#switchport trunk allowed vlan add 551 sw3(config-if)#exitsw3(config)#in vlan 550sw3(config-if)#ip add 10.80.255.254 255.255.0.0sw3(config-if)#no shsw3(config-if)#in vlan 551 sw3(config-if)#ip add 10.81.255.254 255.255.0.0sw3(config-if)#no shsw3#config tsw3(config)#access-list 100 deny icmp any 10.255.0.0 0.0.255.255sw3(config)#access-list 100 permit ip 10.80.0.0 0.0.255.255 host 10.0.0.10sw3(config)#$ 100 permit icmp 10.80.0.0 0.0.255.255 host 10.80.255.254sw3(config)#access-list 100 deny ip any 10.0.0.0 0.255.255.255sw3(config)#access-list 100 permit ip any anysw3(config)#access-list 101 deny icmp any 10.255.0.0 0.0.255.255sw3(config)#access-list 101 permit ip 10.81.0.0 0.0.255.255 host 10.0.0.10 sw3(config)#$ 101 permit icmp 10.81.0.0 0.0.255.255 host 10.81.255.254sw3(config)#access-list 101 deny ip any 10.0.0.0 0.255.255.255 sw3(config)#access-list 101 permit ip any anysw3(config)#in vlan 550sw3(config-if)#ip access-group 100 insw3(config-if)#in vlan 551sw3(config-if)#ip access-group 101 inSw4:Sw4enSw4#config tSw4(config)#enable password testbenetSw4(config)#username benet password testSw4(config)#access-list 1 permit 10.255.1.0 0.0.0.255Sw4(config)#line vty 0 4Sw4(config-line)#login localSw4(config-line)#access-class 1 inSw4(config-line)#exitSw4(config)#no ip routingsw4(config)#in vlan 1sw4(config-if)#ip add 10.255.50.55 255.255.255.0sw4(config-if)#no sh sw4(config-if)#exitsw4#vlan dasw4(vlan)#vlan 2 name serverVLAN 2 added: Name: serversw4(vlan)#vlan 50 name networkVLAN 50 added: Name: networksw4(vlan)#exitsw4#config tsw4(config)#in f0/0sw4(config-if)#switchport mode trunksw4(config-if)#switchport trunk allowed vlan remove 2-1001sw4(config-if)#switchport trunk allowed vlan add 2,50 sw4(config-if)#in f0/1sw4(config-if)#switchport mode trunk sw4(config-if)#switchport trunk allowed vlan remove 2-1001sw4(config-if)#switchport trunk allowed vlan add 2,50 sw4(config-if)#in f0/15sw4(config-if)#switchport access vlan 2sw4(config-if)#in f0/14sw4(config-if)#switchport access vlan 50Sw5:Sw5enSw5#config tSw5(config)#enable password testbenetSw5(config)#username benet password testSw5(config)#access-list 1 permit 10.255.1.0 0.0.0.255Sw5(config)#line vty 0 4Sw5(config-line)#login localSw5(config-line)#access-class 1 inSw5(config-line)#exitSw5(config)#no ip routingsw5(config)#in vlan 1sw5(config-if)#ip add 10.255.100.80 255.255.255.sw5(config-if)#no shsw5(config-if)#exitsw5#vlan database sw5(vlan)#vtp csw5(vlan)#vtp clientsw5(vlan)#vtp domain benetsw5(vlan)#vtp password testsw5#config tsw5(config)#in f0/14sw5(config-if)#switchport mode trunk sw5(config-if)#switchport trunk allowed vlan remove 2-1001sw5(config-if)#switchport trunk allowed vlan add 550sw5(config)#in f0/0sw5(config-if)#switchport mode trunk