三层交换机配置实例.doc

三层交换机配置实例注意，为防止VTP出错，建议多保存，VTP在最后配置这个拓扑图主要实现以下功能： 配置VTP域,减轻管理员工作量,配置PVST,避免环路的产生，做好DHCP中继，使不同vlan中PC能够动态获取IP地址，设置以太网通道，增加数据流量，三层交换机配置路由功能,使不同vlan 之间的通信， 大体配置和思路如下：1，IP规划：3550-1 vlan1 :192.168.1.1 255.255.255.0 3550-1 vlan2 :192.168.2.1 255.255.255.0 3550-1 vlan3 :192.168.3.1 255.255.255.0 3550-1 vlan4 :192.168.4.1 255.255.255.03550-2 vlan1 :192.168.1.2 255.255.255.0 3550-2 vlan2 :192.168.2.2 255.255.255.03550-2 vlan3 :192.168.3.2 255.255.255.03550-2 vlan4 :192.168.4.2 255.255.255.0 3550-2 f0/7 192.168.5.1 255.255.255.0R1 f0/1 :192.168.5.2 255.255.255.0 R1 f0/2 :192.168.6.1 255.255.255.0 R2 f0/1 :192.168.6.2 255.255.255.0 R2 f0/2.1 :192.168.7.1 255.255.255.0 R2 f0/2.2 :192.168.8.1 255.255.255.0DHCP :192.168.1.3 255.255.255.0 192.168.1.1 PC1:192.168.2.3 255.255.255.0 192.168.2.1 PC2:192.168.3.3 255.255.255.0 192.168.3.2PC3:192.168.4.3 255.255.255.0 192.168.4.2 PC4:192.168.7.2 255.255.255.0 192.168.7.1PC5:192.168.8.2 255.255.255.0 192.168.8.12，线缆规划：SW1的f0/1端口连接3550-1 f0/1端口f0/2端口连接3550-2 f0/1端口f0/3端口连接DHCP服务器，属于Vlan 1;SW2的f0/1端口连接3550-1 f0/2端口f0/2端口连接3550-2 f0/2端口f0/3端口连接PC1机，属于Vlan 2;SW3的f0/1端口连接3550-1 f0/3端口f0/2端口连接3550-2 f0/3端口f0/3端口连接PC2机，属于Vlan 3;SW4的f0/1端口连接3550-1 f0/4端口f0/2端口连接3550-2 f0/4端口f0/3端口连接PC3机，属于Vlan 4;3550-1 f0/5 端口连接3550-2 f0/5 3550-1 f0/6 端口连接3550-2 f0/63550-2 f0/7 端口连接 R1 f0/1 R1 f0/2端口连接 R2 f0/1 R2 f0/2端口连接 SW5 f0/24SW5 f0/1 端口连接 PC4 SW5 f0/2 端口连接 PC53，VTP配置：VTP 的域名 VTP 的密码 配置两台3550为VTP server 模式 配置其他交换机为client模式4，STP 配置：设置3550-1是Vlan1-Vlan2 的生成树根网桥 设置3550-2是Vlan3-Vlan4 的生成树根网桥在接入层交换机上配置速端口和上行速链路5，三层交换机的配置：在其中一台交换机上划分Vlan; 在三层交换机上配置各个Vlan的IP地址，配置两台三层交换机之间的以太网通道（EthernetChannel）配置3550-2交换机的路由接口 在三层交换机上配置RIP协议6，路由器的配置配置路由器接口的IP地址 配置路由器的RIP协议 在R2上配置单臂路由 7，配置SW5 在SW5上划分Vlan 将PC4；PC5添加进去好了，规划完了，下面我们开始命令行配置吧：3550-1的配置如下：配置交换机的三层路由功能3550-1#config terminal3550-1#ip routing / 启用三层路由功能配置VTP域：3550-1enable3550-1#config terminal3550-1#vtp domain benet / 创建VTP域3550-1#vtp password 123 / VTP域的密码3550-1#vtp pruning / 起用VTP修剪(模拟器VTP修剪关闭，本条命令可以不做)3550-1#vtp mode server / 配置交换机为vtp server模式3550-1#exit / 返回下一级配置VLAN3550-1#vlan database / 进入vlan数据库3550-1#vlan 1 name vlan1 / 创建vlan 1 3550-1#vlan 2 name vlan2 / 创建vlan 2 3550-1#vlan 3 name vlan3 / 创建vlan 33550-1#vlan 4 name vlan4 / 创建vlan 43550-1#exit配置vlan IP地址：3550-1#config terminal 3550-1#interface vlan1 3550-1#ip address 192.168.1.1 255.255.255.0 3550-1#exit3550-1#interface vlan23550-1#ip address 192.168.2.1 255.255.255.03550-1#exit3550-1#interface vlan33550-1#ip address 192.168.3.1 255.255.255.03550-1#exit3550-1#interface vlan43550-1#ip address 192.168.4.1 255.255.255.03550-1#exit配置RIP协议：3550-1#config terminal3550-1#ip routing3550-1#router rip3550-1#network 192.168.1.03550-1#network 192.168.2.03550-1#network 192.168.3.03550-1#network 192.168.4.0配置PVST:3550-1#spanning-tree vlan vlan1 root primary /配置vlan1的根网桥3550-1#spanning-tree vlan vlan2 root primary /配置vlan2的根网桥3550-1#spanning-tree vlan vlan3 root secondary3550-1#spanning-tree vlan vlan4 root secondary3550-1#interface range fastEthernet 0/5 6 /进入一定端口 3550-1#channel-group 1 mode on /配置以太网通道配置DHCP中继（模拟器可能不支持，可以不做）：3550-1#interface vlan vlan103550-1#ip helper-address 192.168.1.33550-1#interface vlan vlan203550-1#ip helper-address 192.168.1.33550-2的配置如下：配置交换机的三层路由功能3550-2#config terminal 3550-2#ip routing 配置VTP域：3550-2enable3550-2#config terminal 3550-2#vtp domain benet 3550-2#vtp password 123 3550-2#vtp pruning 3550-2#vtp mode server 3550-2#exit 配置vlan IP地址：3550-2#config terminal 3550-2#interface vlan1 3550-2#ip address 192.168.1.2 255.255.255.0 3550-2#exit3550-2#interface vlan23550-2#ip address 192.168.2.2 255.255.255.03550-2#exit3550-2#interface vlan33550-2#ip address 192.168.3.2 255.255.255.03550-2#exit3550-2#interface vlan43550-2#ip address 192.168.4.2 255.255.255.03550-2#interface f0/73550-2#no switchport3550-2#ip address 192.168.5.1 255.255.255.03550-2#no shotdown3550-2#exit配置RIP协议：3550-2#config terminal3550-2#router rip3550-1#network 192.168.1.03550-1#network 192.168.2.03550-1#network 192.168.3.03550-1#network 192.168.4.03550-1#network 192.168.5.0配置PVST:3550-2#spanning-tree vlan vlan3 root primary 3550-2#spanning-tree vlan vlan4 root primary3550-2#spanning-tree vlan vlan1 root secondary3550-2#spanning-tree vlan vlan2 root secondary 3550-2#interface range fastEthernet 0/5 6 3550-2#channel-group 1 mode on 配置DHCP中继：3550-2#interface vlan vlan33550-2#ip helper-address 192.168.1.33550-2#interface vlan vlan43550-2#ip helper-address 192.168.1.3配置交换机：Sw1#config terminalSw1#vtp domain benetSw1#vtp password 123Sw1#vtp mode clientSw1#vtp pruningSw1#interface f0/1Sw1#switchport mode trunkSw1#exitSw1#interface f0/2Sw1#switchport mode trunkSw1#exitSw1#interface f0/3Sw1#switchport access vlan 1Sw1#spanning-tree portfast /端口速链路Sw1#exitSw1#spanning-tree uplinkfast /上行速端口Sw2#config terminalSw2#vtp domain benetSw2#vtp password 123Sw2#vtp mode clientSw1#vtp pruningSw2#interface f0/1Sw2#switchport mode trunkSw2#exitSw2#interface f0/2Sw2#switchport mode trunkSw2#exitSw2#interface f0/3Sw2#switchport access vlan 2Sw2#spanning-tree portfast Sw2#exitSw2#spanning-tree uplinkfast Sw3#config terminalSw3#vtp domain benetSw3#vtp password 123Sw3#vtp mode clientSw1#vtp pruningSw3#interface f0/1Sw3#switchport mode trunkSw3#exitSw3#interface f0/2Sw3#switchport mode trunkSw3#exitSw3#interface f0/3Sw3#switchport access vlan 3Sw3#spanning-tree portfastSw3#exitSw3#spanning-tree uplinkfast Sw4#config terminalSw4#vtp domain benetSw4#vtp password 123Sw4#vtp mode clientSw1#vtp pruningSw4#interface f0/1Sw4#switchport mode trunkSw4#exitSw4#interface f0/2Sw4#switchport mode trunkSw4#exitSw4#interface f0/3Sw4#switchport access vlan 4Sw4#spanning-tree portfast Sw4#exitSw4#spanning-tree uplinkfast Sw5 enableSw5#config terminalSw5#interface f0/24Sw5#switchport mode trunkSw5#endSw5#vlan databaseSw5#vlan 1 valn1Sw5#vlan 2 valn2Sw5#exitSw5#config terminalSw5#interface f0/1Sw5#switchport access vlan1Sw5#interface f0/2Sw5#switchport access vlan2路由器的配置：R1enableR1#config terminalR1#interface f0/1R1#ip address 192.168.5.2 255.255.255.0R1#no shotdownR1#interface f0/2R1#ip address 192.168.6.1 255.255.255.0R1#no shotdownR1#exitR1#router ripR1#network 192.168.5.0R1#router ripR1#network 192.168.6.0R2enableR2#config terminalR2#interface f0/1R2#ip address 192.168.6.2 255.255.255.0R1#no shotdownR1#exitR1#interface f0/2R1#no shotdownR1#