ROGS通用配置与调试.ppt

通用配置与调试 技术培训中心 修订记录 2 课程目标 掌握通用技术配置及调试 课程大纲 VLAN及VLAN间路由STPMSTP VRRP AP 静态路由RIPOSPF策略路由NATIPv6 4 实验一 VLAN及VLAN间路由 5 sw1 sw2 SW3 PC3Vlan10172 16 30 0 24 PC1Vlan10172 16 10 0 24 PC2Vlan20172 16 20 0 24 Fa0 1 Fa0 2 Fa0 24 Fa0 24 Fa0 1 Fa0 10 Fa0 1 VLAN及VLAN间路由 实验目标基于端口划分VLAN 实现二层交换机上不同VLAN相互隔离通过三层交换机或者单臂路由器实现VLAN间通信实验设备两台二层交换机 一台三层交换机 6 实验配置 7 Sw2 showrunVlan1vlan10nameoaVlan20namelabinterfacefa0 1switchportaccessvlan10interfacefa0 10switchportaccessvlan20interfacefa0 24switchportmodetrunkSW3的配置同SW2 Sw1 showrunVlan1vlan10nameoavlan20namelabinterfacevlan10ipadd172 16 10 254255 255 255 0interfacevlan20ipadd172 16 20 254255 255 255 0interfacerangefa0 1 2switchportmodetrunk 调试 8 sw2 shvlanVLANNameStatusPorts 1VLAN0001STATICFa0 2 Fa0 3 Fa0 4 Fa0 5Fa0 6 Fa0 7 Fa0 8 Fa0 9Fa0 11 Fa0 12 Fa0 13 Fa0 14Fa0 15 Fa0 16 Fa0 17 Fa0 18Fa0 19 Fa0 20 Fa0 21 Fa0 22Fa0 23 Fa0 24 Gi0 25 Gi0 26Gi0 27 Gi0 2810oaSTATICFa0 1 Fa0 2420labSTATICFa0 10 Fa0 24 红色部分为配置产生的结果 其中fa0 24是trunk 关联这个交换机上配置的所有vlan与vlan配置相关的信息还可以通过showinterfacestatus showinterfacetrunk命令显示 单臂路由 9 R1 sw1 PC1Vlan10172 16 10 0 24 PC2Vlan20172 16 20 0 24 Fa0 1 Fa0 24 Fa0 1 Fa0 10 实验配置 10 Sw1 showrunVlan1vlan10nameoa20namelabinterfacefa0 1switchportaccessvlan10interfacefa0 10switchportaccessvlan20interfacefa0 24switchportmodetrunk R1 showruninterfacefa0 1NoshutdownIntfa0 1 10Encapsulationdot1q10Ipadd172 16 10 254255 255 255 0Intfa0 1 20Encapsulationdot1q20Ipadd172 16 20 254255 255 255 0 实验二 STP 11 sw1 sw2 SW3 Fa0 1 Fa0 24 Fa0 24 Fa0 1 Fa0 23 Fa0 24 PC1Vlan10172 16 10 0 24 PC2Vlan20172 16 20 0 24 二 STP 实验目标配置STP 打破二层环路配置优先级 保证SW2 SW3分别成为主 备份根交换机在SW1连接用户的端口开启Portfast和BPDUGuard 加快收敛 防止潜在的环路实验设备一台二层交换机 两台三层交换机 12 实验配置 13 sw1sw1 config vlan10sw1 config vlan nameoasw1 config vlan20sw1 config vlan namelabsw1 config interfacefa0 1sw1 config FastEthernet0 1 switchportmodeaccesssw1 config FastEthernet0 1 switchportaccessvlan10sw1 config interfacefa0 10sw1 config FastEthernet0 10 switchportaccessvlan20sw1 config interfacerangefa0 23 24sw1 config if range switchportmodetrunksw1 config spanning treesw1 config interfacerangefa0 1 22sw1 config if range spanning treeportfastsw1 config if range spanning treebpduguardenable 实验配置 14 Sw2Sw2 config vlan10Sw2 config vlan nameoaSw2 config vlan20Sw2 config vlan namelabsw2 config intrangefa0 1 0 24sw2 config if range switchportmodetrunksw2 config spanning treesw2 config spanning treepriority4096Sw3Sw3 config vlan10Sw3 config vlan nameoaSw3 config vlan20Sw3 config vlan namelabSw3 config intrangefa0 1 0 24Sw3 config if range switchportmodetrunkSw3 config spanning treeSw3 config spanning treepriority8192 调试 15 Sw1 shspanning treeNospanningtreeinstanceexists Sw1 shmac address tableVlanMACAddressTypeInterface 10027 1365 33dbDYNAMICFastEthernet0 23Ruijie shmac address tableVlanMACAddressTypeInterface 10027 1365 33dbDYNAMICFastEthernet0 24 开启STP之前 由于环路 出现广播风暴 MAC表震荡 调试 16 sw2 shspanning treeStpVersion MSTP 当前配置的stp的模式SysStpStatus ENABLEDMaxAge 20HelloTime 2ForwardDelay 15BridgeMaxAge 20BridgeHelloTime 2BridgeForwardDelay 15MaxHops 20TxHoldCount 3PathCostMethod LongBPDUGuard DisabledBPDUFilter DisabledLoopGuardDef Disabled stp的相关参数设置 mst0vlansmap ALL vlan和实例的关联关系 缺省都在实例0中BridgeAddr 001a a942 2c2c 本机的macPriority 4096 本机的优先级TimeSinceTopologyChange 0d 0h 13m 35sTopologyChanges 3 拓扑变更信息DesignatedRoot 1000 001a a942 2c2c 根交换机的macRootCost 0RootPort 0 根端口 为0则说明本交换机是根CistRegionRoot 1000 001a a942 2c2c 实例0就是CISTCistPathCost 0 调试 17 sw1 shspanning treesummarySpanningtreeenabledprotocolmstpMST0vlansmap ALLRootIDPriority4096Address001a a942 2c2c 根交换机的优先级和macthisbridgeisrootHelloTime2secForwardDelay15secMaxAge20secBridgeIDPriority32768Address001a a90a f1ac 本机的优先级和macHelloTime2secForwardDelay15secMaxAge20secInterfaceRoleStsCostPrioTypeOperEdge Fa0 40BackBLK200000128P2pFalse 备份端口Fa0 38DesgFWD200000128P2pTrueFa0 24AltnBLK200000128P2pFalse 替代端口Fa0 23RootFWD200000128P2pFalse 根端口Fa0 2DesgFWD200000128P2pTrue 指定端口端口的角色和状态信息 实验三 MSTP VRRP AP 18 sw1 sw2 SW3 Fa0 1 Fa0 24 Fa0 24 Fa0 1 Fa0 23 Fa0 24 PC1Vlan10172 16 10 0 24 PC2Vlan20172 16 20 0 24 R1 Fa0 23 Fa0 23 Fa0 22 Fa0 22 Fa0 0 Fa0 1 10 1 1 0 30 10 1 1 4 30 Loopback192 168 1 1 24 实验三 MSTP VRRP AP 实验目标配置MSTP VRRP实现数据分流Vlan10访问192 168 1 0 24的路径sw1 sw2 R1 VLAN20访问192 168 1 0 24的路径sw1 sw3 R1 互为主备 且来回路径一致配置MSTP 保证VLAN10的主 备份根分别是SW2 SW3 VLAN20的主 备份根分别是SW3 SW2配置VRRP 保证VLAN10的主 备份网关是SW2 SW3 VLAN20的主 备份网关分别是SW3 SW2配置SW2和SW3的互联链路为AP实验设备一台二层交换机 两台三层交换机 一台路由器 19 实验配置 20 Sw1 showrunvlan1vlan10vlan20spanning treespanning treemstconfigurationinstance0vlan1 19 21 4094instance1vlan20interfaceFastEthernet0 1switchportaccessvlan10 interfaceFastEthernet0 10switchportaccessvlan20interfaceFastEthernet0 22 interfaceFastEthernet0 23switchportmodetrunk interfaceFastEthernet0 24switchportmodetrunk 实验配置 21 sw2 shrunvlan1vlan10vlan20vlan500 互联vlanspanning treespanning treemstconfigurationinstance0vlan1 19 21 4094instance1vlan20Spanning treemst0priority4096Spanning treemst1priority8192interfaceFastEthernet0 1switchportmodetrunk interfaceFastEthernet0 22noswitchportnoipproxy arpipaddress10 1 1 1255 255 255 252 interfaceFastEthernet0 23port group1 interfaceFastEthernet0 24port group1 interfaceAggregatePort1switchportmodetrunk interfaceVLAN10noipproxy arpipaddress172 16 10 252255 255 255 0vrrp10priority105vrrp10ip172 16 10 254vrrp10trackFastEthernet0 22 interfaceVLAN20noipproxy arpipaddress172 16 20 252255 255 255 0vrrp20ip172 16 20 254 interfaceVLAN500noipproxy arpipaddress10 1 1 9255 255 255 252 iproute192 168 1 0255 255 255 010 1 1 2iproute192 168 1 0255 255 255 010 1 1 1020 实验配置 22 sw3 shrunvlan1vlan10vlan20vlan500 互联vlanspanning treespanning treemstconfigurationinstance0vlan1 19 21 4094instance1vlan20Spanning treemst0priority8192Spanning treemst1priority4096interfaceFastEthernet0 1switchportmodetrunk interfaceFastEthernet0 22noswitchportnoipproxy arpipaddress10 1 1 5255 255 255 252 interfaceFastEthernet0 23port group1 interfaceFastEthernet0 24port group1 interfaceAggregatePort1switchportmodetrunk interfaceVLAN10noipproxy arpipaddress172 16 10 253255 255 255 0vrrp10ip172 16 10 254 interfaceVLAN20noipproxy arpipaddress172 16 20 252255 255 255 0vrrp20ip172 16 20 254vrrp20priority105vrrp20trackfa0 22 interfaceVLAN500noipproxy arpipaddress10 1 1 10255 255 255 252 iproute192 168 1 0255 255 255 010 1 1 6iproute192 168 1 0255 255 255 010 1 1 920 实验配置 23 R1 showrunIntfa0 0NoshutdownIpadd10 1 1 2255 255 255 252Intfa0 1NoshutdownIpadd10 1 1 6255 255 255 252Intloopback0Ipadd192 168 1 1255 255 255 0Iproute172 16 10 0255 255 255 010 1 1 1Iproute172 16 10 0255 255 255 010 1 1 520Iproute172 16 20 0255 255 255 010 1 1 5Iproute172 16 20 0255 255 255 010 1 1 120 调试 24 sw1 shspanning treemst0 MST0vlansmapped 1 19 21 4094BridgeAddr 001a a90a f1acPriority 32768TimeSinceTopologyChange 0d 0h 3m 18sTopologyChanges 3DesignatedRoot 1000 001a a942 2c2cRootCost 0RootPort 23 根端口CistRegionRoot 1000 001a a942 2c2cCistPathCost 200000sw1 shspanning treemst1 MST1vlansmapped 20BridgeAddr 001a a90a f1acPriority 32768TimeSinceTopologyChange 0d 0h 2m 49sTopologyChanges 3DesignatedRoot 1001 001a a942 36ecRootCost 200000RootPort 24 根端口 sw1 showspanning treeintfa0 23 MST0vlansmapped 1 19 21 4094PortState forwarding 状态PortPriority 128PortDesignatedRoot 1000 001a a942 2c2cPortDesignatedCost 0PortDesignatedBridge 1000 001a a942 2c2cPortDesignatedPort 8001PortForwardTransitions 2PortAdminPathCost 200000PortOperPathCost 200000Inconsistentstates normalPortRole rootPort 端口角色 MST1vlansmapped 20PortState discarding 状态PortPriority 128PortDesignatedRoot 1001 001a a942 36ecPortDesignatedCost 0PortDesignatedBridge 2001 001a a942 2c2cPortDesignatedPort 8001PortForwardTransitions 1PortAdminPathCost 200000PortOperPathCost 200000Inconsistentstates normalPortRole alternatePort 端口角色 调试 sw2 shvrrpbriefInterfaceGrpPritimerOwnPreStateMasteraddrGroupaddrVLAN10101053 PMaster172 16 10 252172 16 10 254VLAN20201003 PBackup172 16 20 253172 16 20 254Ruijie shaggregatePort1summaryAggregatePortMaxPortsSwitchPortModePorts Ag18EnabledTRUNKFa0 23 Fa0 24 25 实验四 RIP 26 sw1 SW2 Fa0 24 Fa0 24 R1 Fa0 23 Fa0 23 Fa0 1 10 1 1 0 30 10 1 1 4 30 Loopback192 168 1 1 24 Fa0 1 10 1 1 8 30 PC1Vlan10172 16 10 0 24 RIP 静态 四 RIP 实验目标配置RIP 使PC1能访问目标网络192 168 1 0 24在SW2上配置重发布 引入外部路由连接用户的端口配置为被动接口SW1 SW2之间的主路径是fa0 23 备份路径是fa0 24在SW1上配置offset list操纵接收和发送的路由的度量值实验设备两台三层交换机 一台路由器 27 配置 28 Sw1 showrunvlan1Vlan10Intvlan10Ipadd172 16 10 254255 255 255 0Inffa0 1Swithportaccessvlan10Intfa0 23NoshutdownIpadd10 1 1 1255 255 255 252Intfa0 24NoshutdownIpadd10 1 1 5255 255 255 252RouterripVersion2Noauto summaryNetwork10 0 0 0Network172 16 0 0Passive interfacevlan10Offset list10out5fa0 24Offst list10in5fa0 24 Sw2 showrunvlan1Intfa0 23NoshutdownIpadd10 1 1 2255 255 255 252Intfa0 24NoshutdownIpadd10 1 1 6255 255 255 252Intfa0 1NoshutdownIpadd10 1 1 10255 255 255 252RouterripVersion2Noauto summaryNetwork10 0 0 0Redistributestaticmetric1Iproute192 168 1 0255 255 255 010 1 1 9 配置 29 R1 showrunIntfa0 1NoshutdownIpadd10 1 1 9255 255 255 252Intloopback0Ipadd192 168 1 1255 255 255 0Iproute172 16 10 0255 255 255 010 1 1 10 五 OSPF 30 sw1 Fa0 24 R2 Fa0 1 Fa0 0 10 1 1 0 30 10 1 1 4 30 Fa0 24 10 1 1 8 30 172 16 0 0 24172 16 1 0 24 R1 SW2 Fa0 0 Fa0 1 192 168 0 0 24192 168 1 0 24 Area0 Area1 Area2 五 OSPF 实验目标配置OSPF 使得172 16网段的用户能访问192 168网段的用户在ABR上配置区域间路由汇总在ASBR上配置重发布 引入外部路由和缺省路由配置stub区域实验设备两台三层交换机 两台路由器 31 配置 32 SW1 showrunvlan1Vlan10Intvlan10Ipadd172 16 0 254255 255 255 0Intvlan20Ipadd172 16 1 254255 255 255 0Intfa0 24NoshutdownIpadd10 1 1 1255 255 255 252Intloopback0Ipadd1 1 1 1255 255 255 255Routerospf1Router id1 1 1 1Network172 16 0 00 0 0 255area1Network10 1 1 00 0 0 255area1Passive interfacedefaultNopaaive interfacefa0 24Area1stub R1 showrunIntfa0 0NoshutdownIpadd10 1 1 2255 255 255 252Intfa0 1NoshutdownIpadd10 1 1 6255 255 255 252IntLoopback0Ipadd1 1 1 2255 255 255 255Routerospf1Router id1 1 1 2Network10 1 1 20 0 0 0 0area1Network10 1 1 60 0 0 0area0Area1range172 16 0 0255 255 252 0Area1stub 配置 33 Sw2 showrunvlan1Vlan10Intvlan10Ipadd192 168 0 254255 255 255 0Intvlan20Ipadd192 168 1 254255 255 255 0Intfa0 24NoshutdownIpadd10 1 1 10255 255 255 252Intloopback0Ipadd1 1 1 4255 255 255 255Routerospf1Router id1 1 1 4Network192 168 0 00 0 255 255area2Network10 1 1 00 0 0 255area2Passive interfacedefaultNopaaive interfacefa0 24RedistributestaticsubnetsDefault informationoriginateIproute0 0 0 00 0 0 0192 168 0 2Iproute5 5 5 0255 255 255 0192 168 1 2 R2 showrunIntfa0 0NoshutdownIpadd10 1 1 9255 255 255 252Intfa0 1NoshutdownIpadd10 1 1 5255 255 255 252IntLoopback0Ipadd1 1 1 3255 255 255 255Routerospf1Router id1 1 1 3Network10 1 1 50 0 0 0 0area0Network10 1 9 60 0 0 0area2Area2range192 168 0 0255 255 252 0 调试 Ruijie showipospfneighborNeighborIDPriStateDeadTimeAddressInterface1 1 1 21Full DR00 00 4010 1 1 2FastEthernet0 23Ruijie shipospfdatabaseOSPFRouterwithID 1 1 1 1 ProcessID1 RouterLinkStates Area0 0 0 0 LinkIDADVRouterAgeSeq CkSumLinkcount1 1 1 11 1 1 13750 x800000030 x7eaf11 1 1 21 1 1 23760 x800000050 x78b01NetworkLinkStates Area0 0 0 0 LinkIDADVRouterAgeSeq CkSum10 1 1 21 1 1 24000 x800000010 xfb45 34 实验六 策略路由 35 sw1 SW2 Fa0 24 Fa0 24 Fa0 23 Fa0 23 10 1 1 0 30 10 1 1 4 30 PC2Vlan20172 16 20 0 24 PC1Vlan10172 16 10 0 24 PC3192 168 30 0 24 六 策略路由 实验目标正常情况下SW1的主出口是fa0 23 备份出口是fa0 24如果是172 16 10 0 24的用户数据 出口是fa0 24 备份出口是fa0 23配置策略路由 实现基于源控制数据的出口实验设备两台三层交换机 36 配置 37 Sw1 showrunvlan1Vlan10Intvlan10Ipadd172 16 10 254255 255 255 0Ippolicyroute mappbrVlan20Ipadd172 16 20 254255 255 255 0Intfa0 23NoswitchportIpadd10 1 1 1255 255 255 252Intfa0 24NoswitchportIpadd10 1 1 5255 255 255 252Iproute0 0 0 00 0 0 010 1 1 2Iproute0 0 0 00 0 0 010 1 1 620 Access list1permit172 16 10 00 0 0 255Access list100permit100172 16 10 00 0 0 255172 16 0 00 0 255 255Route mappbrdeny10Matchipadd100Route mappbrpermit20Matchipadd1Setipnext hop10 1 1 6 SW2 showrunIntfa0 1NoswitchportIpadd192 168 30 254255 255 255 0Intfa0 23NoswitchportIpadd10 1 1 2255 255 255 252Intfa0 24noswitchportIpadd10 1 1 6255 255 255 252Iproute172 16 0 0255 255 0 010 1 1 1Iproute172 16 0 0255 255 0 010 1 1 520 实验七 NAT 38 sw1 R1 Fa0 24 Fa0 0 SW2 10 1 1 0 30 61 154 28 0 24 PC1Vlan10172 16 10 0 24 RIP 静态 ServerWWWVlan20172 16 20 10 24 Fa0 1 Fa0 1 PC3Vlan10100 10 10 10 24 61 154 28 1 10 1 1 1 七 NAT 实验目标配置动态NAT 使得内部用户能够访问Internet配置静态NAT 使得能够用私网服务器对Internet提供服务实验设备一台交换机 两台路由器 39 配置 40 R1 showrunIntfa0 0NoshutdownIpadd10 1 1 2255 255 255 252IpnatinsideIntfa0 1NoshutdownIpadd61 154 28 2255 255 255 52IpnatoutsideIpnatpoolruijie61 154 28 3 61 254 28 99netmask255 255 255 0Ipnatinsidesourcelist1poolruijieIpnatinsidesourcestatic172 16 20 1061 154 28 100Access list1permit172 16 10 00 0 0 255IProute0 0 0 00 0 0 061 154 28 1Iproute172 16 0 0255 255 0 010 1 1 1 实验八IPv6 41 sw1 SW2 Fa0 24 10 1 1 0 30 PC1Vlan10172 16 10 0 24 Fa0 24 PC2Vlan20172 16 20 0 24 2001 1 64 2001 2 64 2001 10 64 2001 20 64 Area0 Area1 Area2 实验八 IPv6 实验目标之前有一张V4的网络 进行IPv6改造通过无状态地址分配技术自动分配地址静态路由OSPFv3手工隧道实验设备两台三层双栈交换机 42 静态路由配置 43 Sw1 showrunVlan1Vlan10Intvlan10Ipadd172 16 10 254255 255 255 0Ipv6enableIpv6add2001 10 1 64noipv6suppress raIntfa0 24NoswitchportIpadd10 1 1 1255 255 255 252Ipv6enableIpv6add2001 1 64Intfa0 1Switchportaccessvlan10Routerospf1Network172 16 10 00 0 0 255area1Network10 1 1 00 0 0 255area0Ipv6route2001 20 642001 2 Sw2 showrunVlan1Vlan20Intvlan20Ipadd172 16 20 254255 255 255 0Ipv6enableIpv6add2001 20 1 64noipv6suppress raIntfa0 24NoswitchportIpadd10 1 1 2255 255 255 252Ipv6enableIpv6add2001 2 64Intfa0 1Switchportaccessvlan20Routerospf1Network172 16 20 00 0 0 255area2Network10 1 1 00 0 0 25