配置路由器 交换机 接口 vlan的ip地址.doc

网络构建1 配置路由器 交换机 接口 vlan的ip地址2根据拓扑图所示，将所有交换机接口加入到不同的VLANRGS2628-1RGS2628-1(config)#vl 10 RGS2628-1(config-vlan)#vl 20 RGS2628-1(config-vlan)#vl 30 RGS2628-1(config-vlan)#ex RGS2628-1(config)#int ra RGS2628-1(config)#int range f1/3-8 RGS2628-1(config-if-range)#sw mo acc RGS2628-1(config-if-range)#sw acc vl 10 RGS2628-1(config-if-range)#ex RGS2628-1(config)#int range f1/9-13 RGS2628-1(config-if-range)#sw mo acc RGS2628-1(config-if-range)#sw acc vl 20 RGS2628-1(config-if-range)#ex RGS2628-1(config)#int range f1/14-18 RGS2628-1(config-if-range)#sw mo acc RGS2628-1(config-if-range)#sw acc vl 30 RGS2628-1(config-if-range)#ex RGS2628-2 RGS2628-2(config)#vl 70 RGS2628-2(config-vlan)#vl 80 RGS2628-2(config-vlan)#ex RGS2628-2(config)#int ra RGS2628-2(config)#int range f0/1-10 RGS2628-2(config-if-range)#sw mo accRGS2628-2(config-if-range)#sw acc vl 70 RGS2628-2(config-vlan)#ex RGS2628-2(config)#int range f0/11-20 RGS2628-2(config-if-range)#sw mo accRGS2628-2(config-if-range)#sw acc vl 80 3 配置二层 三层交换机RGS2628-1(config)#int r f1/22-23 RGS2628-1(config-if-range)#sw mo trunk RGS2628-1(config-if-range)#exRGS5750-1RGS5750-1(config)#vl 10 RGS5750-1(config-vlan)#vl 20 RGS5750-1(config-vlan)#vl 30 RGS5750-1(config-vlan)#vl 40 RGS5750-1(config-vlan)#vl 50RGS5750-1(config-vlan)#vl 100 RGS5750-1(config-vlan)#ex RGS5750-1(config-vlan)int vl 10 RGS5750-1(config-if-VLAN 10)#ip add 172.16.10.1 255.255.255.0 RGS5750-1(config-if-VLAN 10)#no shutdown RGS5750-1(config-if-VLAN 10)#ex RGS5750-1(config)#int vl 20 RGS5750-1(config-if-VLAN 20)#ip add 172.16.20.1 255.255.255.0 RGS5750-1(config-if-VLAN 20)#no shutdown RGS5750-1(config)#int vl 30 RGS5750-1(config-if-VLAN 30)#ip add 172.16.30.1 255.255.255.0 RGS5750-1(config-if-VLAN 30)#no shutdownRGS5750-1(config)#int vl 40 RGS5750-1(config-if-VLAN 40)#ip add 172.16.40.1 255.255.255.0 RGS5750-1(config-if-VLAN 40)#no shutdownRGS5750-1(config)#int vl 50 RGS5750-1(config-if-VLAN 50)#ip add 172.16.50.1 255.255.255.0 RGS5750-1(config-if-VLAN 50)#no shutdownRGS5750-1 (config)# int vlan 100RGS5750-1 (config-if)# ip address 172.16.100.1 255.255.255.0 RGS5750-1(config-if-VLAN 50)#no shutdownRGS5750-1 (config)# int f0/20RGS5750-1 (config-if)# switchport access vlan 100RGS5750-1 (config)# int f0/24RGS5750-1 (config-if)# switchport access vlan 40 RGS5750-2RGS5750-2(config)#vl 10 RGS5750-2(config-vlan)#vl 20 RGS5750-2(config-vlan)#vl 30 RGS5750-2(config-vlan)#vl 40 RGS5750-2(config-vlan)#vl 50 RGS5750-2(config-vlan)#vl 100RGS5750-2(config-vlan)#ex RGS5750-2(config-vlan)int vl 10 RGS5750-2(config-if-VLAN 10)#ip add 172.16.10.2 255.255.255.0 RGS5750-2(config-if-VLAN 10)#no shutdown RGS5750-2(config-if-VLAN 10)#ex RGS5750-2(config)#int vl 20 RGS5750-2(config-if-VLAN 20)#ip add 172.16.20.2 255.255.255.0 RGS5750-2(config-if-VLAN 20)#no shutdown RGS5750-2(config)#int vl 30 RGS5750-2(config-if-VLAN 30)#ip add 172.16.30.2 255.255.255.0 RGS5750-2(config-if-VLAN 30)#no shutdownRGS5750-2(config)#int vl 40 RGS5750-2(config-if-VLAN 40)#ip add 172.16.40.2 255.255.255.0 RGS5750-2(config-if-VLAN 40)#no shutdownRGS5750-2(config)#int vl 50 RGS5750-2(config-if-VLAN 50)#ip add 172.16.50.2 255.255.255.0 RGS5750-2(config-if-VLAN 50)#no shutdownRGS5750-2 (config)# int vlan 100RGS5750-2 (config-if)# ip address 172.16.100.2 255.255.255.0 RGS5750-2(config-if-VLAN 50)#no shutdownRGS5750-2(config)# int f0/20RGS5750-2(config-if)# switchport access vlan 100 4 vsu RGS5750-1(config)#switch virtual domain 1RGS5750-1 (config-vs-domain)# switch 1RGS5750-1 (config-vs-domain)# switch 1 priority 200 优先级高的机箱为主机箱RGS5750-1 (config-vs-domain)# exitRGS5750-1(config)# vsl-aggregateport 1RGS5750-1 (config-vsl-ap-1)# port-member interface GigabitEthernet 0/1 如果是光千口后面要加上 RGS5750-1 (config-vsl-ap-1)# port-member interface GigabitEthernet 0/2RGS5750-1 (config-vsl-ap-1)# exitRGS5750-2 (config)# switch virtual domain 1 /domaind id 必须一致RGS5750-2 (config-vs-domain)# switch 2 /第二台设备必须更改ID为2RGS5750-2 (config-vs-domain)# switch 2 priority 150RGS5750-2 (config-vs-domain)# exitRGS5750-2 (config)# vsl-aggregateport 1RGS5750-2 (config-vsl-ap-1)# port-member interface GigabitEthernet 0/1RGS5750-2 (config-vsl-ap-1)# port-member interface GigabitEthernet 0/2RGS5750-2 (config-vsl-ap-1)# exitRGS5750-1(config)# wrRGS5750-1(config)# switch convert mode virtual /转换为VSU模式Are you sure to convert switch to virtual modeyes/no：yesDo you want to recovery“config.text”from“virtual_switch.text”yes/no：yesRGS5750-2(config)# wrRGS5750-2(config)#switch convert mode virtual /转换为VSU模式Are you sure to convert switch to virtual modeyes/no：yesDo you want to recovery“config.text”from“virtual_switch.text”yes/no：yes 5 单臂路由实现VLAN间的路由RSR20-1(config)#int f0/1.2 RSR20-1(config-subif)#enc RSR20-1(config-subif)#encapsulation d RSR20-1(config-subif)#encapsulation dot1Q 70 RSR20-1(config-subif)#ip add 192.168.1.1 255.255.255.0 RSR20-1(config-subif)#no sh RSR20-1(config-subif)#no shutdown RSR20-1(config-subif)#ex RSR20-1(config)#int f0/1.2 RSR20-1(config-subif)#encapsulation dot1Q 80 RSR20-1(config-subif)#ip add 192.168.2.1 255.255.255.0 RSR20-1(config-subif)#no shutdown RSR20-1(config-subif)#ex RSR20-1(config)# 6 OSPF RIP路由 ，分区域，路由重分布，指定网络设备RIDRSR20-1(config)#router rip RSR20-1(config-router)#ve 2 RSR20-1(config-router)#no auto-summary RSR20-1(config-router)#net 192.168.1.0 RSR20-1(config-router)#net 192.168.2.0 RSR20-1(config-router)#exRSR20-1(config)#router ospf 1RSR20-1(config-router)#router-id 3.3.3.3RSR20-1(config-router)#net 1.1.1.1 0.0.0.0 area 1RSR20-1(config-router)#net 10.0.0.19 0.0.0.0 area 1RSR20-1(config-router)#redistribute rip metric 20 metric-type 1 subnets 将rip发布到ospf 类型为 E1 开销为20RSR20-3(config)#router ospf 1 RSR20-3(config-router)#router-id 3.3.3.3 RSR20-3(config-router)#network 172.16.1.1 0.0.0.0 area 0RSR20-3(config-router)#net 10.0.0.18 0.0.0.0 area 1RSR20-3(config-router)#net 3.3.3.3 0.0.0.0 area 0 RSR20-3(config-router)#exit RGS5750-1(config)#router ospf 1 RGS5750-1(config-router)#router-id 4.4.4.4 RGS5750-1(config-router)#network 172.16.1.3 0.0.0.0 area 0 RGS5750-1(config-router)#net 4.4.4.4 0.0.0.0 area 0 RGS5750-1(config-router)#net 172.16.10.1 0.0.0.0 area 0 RGS5750-1(config-router)#net 172.16.20.1 0.0.0.0 area 0 RGS5750-1(config-router)#net 172.16.30.1 0.0.0.0 area 0 RGS5750-1(config-router)#net 172.16.40.1 0.0.0.0 area 0 RGS5750-1(config-router)#net 172.16.50.1 0.0.0.0 area 0 RGS5750-1(config-router)#net 172.16.100.1 0.0.0.0 area 0 RGS5750-1(config-router)#exit RGS5750-2(config)#router ospf 1 RGS5750-2(config-router)#router-id 5.5.5.5 RGS5750-2(config-router)#network 172.16.1.4 0.0.0.0 area 0 RGS5750-2(config-router)#net 5.5.5.5 0.0.0.0 area 0 RGS5750-2(config-router)#net 172.16.10.2 0.0.0.0 area 0 RGS5750-2(config-router)#net 172.16.20.2 0.0.0.0 area 0 RGS5750-2(config-router)#net 172.16.30.2 0.0.0.0 area 0 RGS5750-2(config-router)#net 172.16.40.2 0.0.0.0 area 0 RGS5750-2(config-router)#net 172.16.50.2 0.0.0.0 area 0 RGS5750-2(config-router)#net 172.16.100.2 0.0.0.0 area 0 RGS5750-2(config-router)#exit 7 配置帧中继网络RSR20-2(config)# frame-relay switchingRSR20-2(config)# int s1/0RSR20-2(config-if)# no ip addressRSR20-2(config-if)# encapsulation frame-relay ietfRSR20-2(config-if)# frame-relay lmi-type ansi RSR20-2(config-if)# frame-relay intf-type dceRSR20-2(config-if)# frame-relay route 102 interface s2/0 101RSR20-2(config)# int s2/0RSR20-2(config-if)# no ip addressRSR20-2(config-if)# encapsulation frame-relay ietfRSR20-2(config-if)# frame-relay lmi-type ansiRSR20-2(config-if)# frame-relay intf-type dceRSR20-2(config-if)# frame-relay route 101 interface s1/0 102RSR20-1(config)# int s2/0RSR20-1(config)# ip ospf network ? broadcast Specify OSPF broadcast multi-access network non-broadcast Specify OSPF NBMA network point-to-multipoint Specify OSPF point-to-multipoint network 采用网到多点 point-to-point Specify OSPF point-to-point network RSR20-1(config-if)# ip addr 10.0.0.19 255.255.255.248RSR20-1(config-if)# encapsulation frame-relay ietfRSR20-1(config-if)# frame-relay lmi-type ansiRSR20-1(config-if)# frame-relay interface-dlci 101 RSR20-3(config)# int s2/0RSR20-3(config-if)# ip addr 10.0.0.18 255.255.255.248RSR20-3(config-if)# encapsulation frame-relay ietfRSR20-3(config-if)# frame-relay lmi-type ansiRSR20-3(config-if)# frame-relay interface-dlci 102 8 路由器设置DHCP功能。给二个子网分配地址，前10个及图上有的不分配RSR20-1(config)# service dhcpRSR20-1(config)# ip dhcp pool vlan70RSR20-1(dhcp-config)# network 192.168.1.0 255.255.255.0RSR20-1(dhcp-config)# default-router 192.168.1.1RSR20-1(dhcp-config)# exitRSR20-1(config)# ip dhcp pool vlan80RSR20-1(dhcp-config)# network 192.168.2.0 255.255.255.0RSR20-1(dhcp-config)# default-router 192.168.2.1RSR20-1(dhcp-config)# exitRSR20-1(config)# ip dhcp excluded-address 192.168.1.1 192.168.1.10RSR20-1(config)# ip dhcp excluded-address 192.168.2.1 192.168.2.10RSR20-1(config)# ip dhcp excluded-address 192.168.1.253 192.168.1.254 9 路由更新采用基于接口的MD5验证。RSR20-1(config)# int s2/0RSR20-1(config-if)# ip ospf authentication message-digestRSR20-1(config-if)# ip ospf message-digest-key 1 md5 ruijieRSR20-3(config)# int s2/0RSR20-3(config-if)# ip ospf authentication message-digestRSR20-3(config-if)# ip ospf message-digest-key 1 md5 ruijieRSR20-3(config)# int f0/1RSR20-3(config-if)# ip ospf authentication message-digestRSR20-3(config-if)# ip ospf message-digest-key 1 md5 ruijieRGS5750-1(config)#int f0/1RGS5750-1(config-if)# ip ospf authentication message-digestRGS5750-1(config-if)# ip ospf message-digest-key 1 md5 ruijieRGS5750-2(config)#int f0/1RGS5750-2(config-if)# ip ospf authentication message-digestRGS5750-2(config-if)# ip ospf message-digest-key 1 md5 ruijie 10 防止dhcp 无赖攻击 配置DHCP 中继RGS5750-1 (config)# service dhcp RGS5750-1 (config)#ip helper-address 172.16.100.253 配置DHCP 中继，指明DHCP服务器RGS5750-1 (config)# ip dhcp snooping 开DHCP 监听功能RGS5750-1 (config)# int f0/20 RGS5750-1 (config-if)# ip dhcp snooping trust 配置F0/20为trust 端口RGS5750-1 (config)# int f0/21RGS5750-1 (config-if)# ip dhcp snooping trust 配置F0/21为trust 端口RGS5750-2 (config)# service dhcp RGS5750-2 (config)#ip helper-address 172.16.100.253 配置DHCP 中继，指明DHCP服务器RGS5750-2 (config)# ip dhcp snooping 开DHCP 监听功能RGS5750-2 (config)# int f0/20 RGS5750-2(config-if)# ip dhcp snooping trust 配置F0/20为trust 端口RGS5750-2 (config)# int f0/21RGS5750-2 (config-if)# ip dhcp snooping trust 配置F0/21为trust 端口RGS5750-2 (config)# int f0/24RGS5750-2 (config-if)# ip dhcp snooping trust 配置F0/24为trust 端口11 链路聚合。基于原MAC地址的均衡负载。RGS5750-1 (config)# int range fa0/23-24RGS5750-1 (config-if-range)# port-group 1 将端口Fa0/23-24加入聚合端口1，同时创建该聚合端口。RGS5750-1 (config)# int aggregateport 1RGS5750-1 (config-if)# switchport mode trunk 将聚合端口设置障为TRUNKRGS5750-1 (config-if)# exitRGS5750-1 (config)#aggregateport load-balance src-mac 设置聚合端口的负载平衡方式为源MAC进行。默认是依据源和目地RGS5750-1 (config)# exitRGS5750-2 (config)# int range fa0/23-24RGS5750-2 (config-if-range)# port-group 1 将端口Fa0/23-24加入聚合端口1，同时创建该聚合端口。RGS5750-2 (config)# int aggregateport 1RGS5750-2 (config-if)# switchport mode trunk 将聚合端口设置障为TRUNKRGS5750-2 (config-if)# exitRGS5750-2 (config)#aggregateport load-balance src-mac