网络规划书范文.doc

网络规划书范文 网络拓扑图 一、IP地址规划请参考IP地址规划.xlsx 二、PKT拓扑文件需要Cisco PacketTracer5.3.3版本打开,VISIO文件使用MS VISIO软件打开 三、配置思路1.公司内网基本配置及搭建 （1）vlan MS_0enable vlandatabase vlan10vlan11vlan12vlan13vlan14exit configureterminal hostnameMS_0enable secretcisco usernameadmin passwordcisco vtp domain intra vtp modeserver spanning-tree vlan12,13,14root primaryspanning-tree vlan10,11root secondaryip routingline vty05login localexit int vlan10ip address172.16.0.1255.255.240.0int vlan11ip address172.16.32.1255.255.255.128int vlan12ip address172.16.32.129255.255.255.192int vlan13ip address172.16.32.193255.255.255.192int vlan14ip address172.16.33.1255.255.255.240exit int range gig0/1-2switchport trunkencapsulation dot1q switchport mode trunk exit int fa0/1no switchportip address172.16.33.17255.255.255.252exit MS_1enable configureterminal hostnameMS_1enable secretcisco usernameadmin passwordcisco vtp domain intra vtp mode client spanning-tree vlan10,11root primaryspanning-tree vlan12,13,14root secondaryip routingline vty05login localexit int vlan10ip address172.16.0.2255.255.240.0int vlan11ip address172.16.32.2255.255.255.128int vlan12ip address172.16.32.130255.255.255.192int vlan13ip address172.16.32.194255.255.255.192int vlan14ip address172.16.33.2255.255.255.240exit intrange gig0/1-2switchport trunkencapsulation dot1q switchport mode trunk exit int fa0/1no switchportip address172.16.33.21255.255.255.252exit switch0enable configureterminal hostnameswitch0enable secretcisco line vty05login passwordcisco exitvtpdomain intravtpmode clientip default172.16.32.193int vlan13ip address172.16.32.196255.255.255.192exit intrange fa0/1,fa0/2,fa0/3,fa0/4,fa0/6switchport modeaess spanning-tree portfastexit intrange gig1/1-2switchport mode trunkexit int fa0/1switchport aessvlan11int fa0/2switchport aessvlan10int fa0/3switchport aessvlan12int fa0/4switchport aessvlan13int fa0/6switchport aessvlan14exit switch1enable configureterminal hostnameswitch1enable secretcisco linevty05login passwordcisco exitvtpdomainintravtpmodeclientip default172.16.32.194spanning-tree vlan10-14priority40960int vlan13ip address172.16.32.197255.255.255.192exit intrange fa0/2,fa0/3,fa0/1switchportmodeaess spanning-tree portfastexit intrange gig1/1-2switchportmode trunkexit int fa0/1switchport aessvlan11int fa0/2switchport aessvlan10int fa0/3switchport aessvlan12exit （2）以太信道(链路聚合)MS_0/MS_1intrangefa0/3-4switchport trunkencapsulation dot1q switchportmodetrunkswitchport trunkallowed vlan10,11,12,13,14channel-protocol lacpchannel-group1mode activeexit intport-channel1switchport trunkencapsulation dot1q switchportmodetrunkswitchport trunkallowed vlan10,11,12,13,14 （3）NAT（PAT）、PPP（CHAP）、HDLC RT7enable configureterminal hostnameRT7enable secretcisco usernameadmin passwordcisco linevty05login localexitint gig6/0ip address172.16.33.18255.255.255.252ip natinside no shutdown int serial2/0encapsulation hdlcip address202.202.202.2255.255.255.252ip natoutside no shutdown exitip aess-list stnat permit172.16.0.00.0.15.0permit172.16.32.00.0.0.127permit172.16.32.1280.0.0.63permit172.16.32.1920.0.0.63permit172.16.33.00.0.0.15ip natinside sourcelist natinterface serial2/0overload ip route172.16.0.0255.255.192.0172.16.33.17RT8enable configureterminal hostnameRT8enable secretcisco usernameadmin passwordcisco username RT3password123linevty05login localexitint gig6/0ip address172.16.33.22255.255.255.252ip natinside no shutdown int serial2/0encapsulation pppppp authenticationchap ip address202.202.202.6255.255.255.252ip natoutside no shutdown exitip aess-list stnat permit172.16.0.00.0.15.0permit172.16.32.00.0.0.127permit172.16.32.1280.0.0.63permit172.16.32.1920.0.0.63permit172.16.33.00.0.0.15ip natinside sourcelist natinterface serial2/0overload ip route172.16.0.0255.255.192.0172.16.33.214)内网静态路由MS_0ip route0.0.0.00.0.0.0172.16.33.18ip route202.108.33.56255.255.255.248172.16.32.194ip route172.16.33.20255.255.255.252172.16.32.194MS_1ip route0.0.0.00.0.0.0172.16.33.22ip route61.135.181.160255.255.255.224172.16.32.193ip route172.16.33.16255.255.255.252172.16.33.193RT7ip route0.0.0.00.0.0.0202.202.202.1ip route202.108.33.5625