cisco真实网络做出来的阶段综合实验

1、黑膺红客基地黑膺红客基地讲师讲师:best:best超亮哥超亮哥用户需求分析用户需求分析 公司办公大楼网络作为办公所依托的重要资源，为公司提供办公自动化、计算机管理、资源共享及信息交流等全方位的服务 目前的信息点数大约200个 要求网络的可靠性高，有冗余备份设计 要求网络的性能能满足高效的办公要求 能够连接外部网络拓扑图拓扑图设备清单设备清单1CISCO WS-C3550-24-EMI Cisco 3550系列三层交换机，24个10/100M端口，2个1000M光纤接口插槽，8.8G的交换矩阵22WS-C2950G-24-EI快速以太网交换机，交换方式:存储-转发；背板带宽（Gbps）:8.8

2、；端口数:24；模块化插槽数:2 103Cisco 2621XM模块化路由器，可选广域接口WIC卡；固定局域网接口:10/100Base-T/TX 2个；支持扩展模块插槽数:3；支持VPN；内置防火墙1设计方案设计方案 在交换机上配置VLAN，控制广播流量 交换机之间配置Trunk连接，实现不同交换机上的VLAN互通 配置2台三层交换机之间的EthernetChannel，实现三层交换机之间的高速互通 配置VTP，实现单一平台管理VLAN 配置STP，实现负载分担 在三层交换机上配置VLAN间路由VLANVLAN的划分的划分 根据用户的需求，在交换机上配置3个VLAN，分别为VLAN24 VL

3、AN 1为管理VLANIPIP地址的分配地址的分配VLAN IDIP地址范围网关地址VLAN 2/24/24/24VLAN 3/24/24/24VLAN 4/24/24/24IPIP地址的分配地址的分配路由接口IP地址3层交换机上的路由接口/24路由器f0/0接口/24路由器f0/1接口0/24端口的规划端口的规划端口的规划端口的规划端口的规划

4、端口的规划交换机名端口号隶属的VLANSW-2L-1Port 110VLAN 2Port 1120VLAN 3SW-2L-2Port 110VLAN 2Port 1120VLAN 4SW-2L-3Port 110VLAN 3Port 1120VLAN 4VTPVTP VTP域名为benet 密码为123 启用修剪 配置2台3层交换机为VTP的server模式 配置2层交换机为VTP的client模式STPSTP 设置SW-3L-A是VLAN 23的生成树根网桥 设置SW-3L-B是VLAN 4的生成树根网桥 在2层交换机上配置速端口与上行速链路三层交换三层交换 在3层交换机上配置各VLAN的I

5、P地址 配置两台3层交换机之间的EthernetChannel 配置3层交换机的路由接口 在3层交换机上配置RIP路由协议测试方法测试方法 主机之间ping，验证各主机之间是否连通 查看各交换机上的VLAN信息，验证VLAN学习是否正确 查看交换机上的STP信息，验证STP根网桥是否正确 主机之间长ping时，断开上连链路，验证数据是否负载分担路由器的配置路由器的配置 配置路由器接口的IP地址 配置路由器启动RIP路由协议 配置路由器上的默认路由，指向1/24详细配置详细配置-SW-3L-A-show adjacency detail-SW-3L-A-show adjacenc

6、y detailSW-3L-A#show adjacency detailProtocol Interface AddressIP FastEthernet0/24 (8) 0 packets, 0 bytes epoch 0 sourced in sev-epoch 24 Encap length 14 000B461587200011BBBE8F800800 ARPIP Vlan2 (6) 0 packets, 0 bytes epoch 0 sourced in sev-epoch 24 Encap length 14 00181824CC800

7、011BBBE8F800800 ARPIP Vlan2 (6) 0 packets, 0 bytes epoch 0 sourced in sev-epoch 24 Encap length 14 00E04C00CD4F0011BBBE8F800800 ARPIP Vlan2 (6)Protocol Interface Address 0 packets, 0 bytes epoch 0 sourced in sev-epoch 24 Encap length 14 00E04C51881F0011BBBE8F800800 ARPIP Vlan3

8、(6) 0 packets, 0 bytes epoch 0 sourced in sev-epoch 24 Encap length 14 00181824CC800011BBBE8F800800 ARPIP Vlan3 (6) 0 packets, 0 bytes epoch 0 sourced in sev-epoch 24 Encap length 14 00112F7C74D70011BBBE8F800800 ARPIP Vlan3 (6) 0 packets, 0 bytes详细配置详细配置-SW-3L-A-show

9、 adjacency detail-SW-3L-A-show adjacency detailProtocol Interface Address epoch 0 sourced in sev-epoch 24 Encap length 14 000B2F0918120011BBBE8F800800 ARPIP Vlan4 (6) 0 packets, 0 bytes epoch 0 sourced in sev-epoch 24 Encap length 14 00181824CC800011BBBE8F800800 ARPIP Vlan4 (6)

10、 0 packets, 0 bytes epoch 0 sourced in sev-epoch 24 Encap length 14 000B2F0918050011BBBE8F800800 ARPIP Vlan4 (6) 0 packets, 0 bytes epoch 0 sourced in sev-epoch 24 Encap length 14 000B2F09210F0011BBBE8F800800 ARP详细配置详细配置-SW-3L-A-show adjacency detail-SW-3L-A-show adjacency detailSW-3L-A#s

11、how ip cefPrefix Next Hop Interface/0 FastEthernet0//32 receive/24 attached FastEthernet0/24/32 receive FastEthernet0/24/32 receive FastEthernet0/24/32 attached FastEthernet0/2455/32 receive FastEthernet0/24/24 a

12、ttached Vlan2/32 receive Vlan2/32 receive Vlan2/32 attached Vlan2/32 attached Vlan2/32 attached Vlan255/32 receive Vlan2/24 attached Vlan3/32 receive Vlan3/32 receive Vlan3/32 attached Vlan3

13、/32 attached Vlan3/32 attached Vlan355/32 receive Vlan3/24 attached Vlan4Prefix Next Hop Interface/32 receive Vlan4/32 receive Vlan4/32 attached Vlan4/32 attached Vlan4/32 attached Vlan455/3

14、2 receive Vlan4/4 drop/24 receive55/32 receive详细配置详细配置-SW-3L-A-show -SW-3L-A-show ipip cefcefSW-3L-A#show ip routeCodes: C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type

15、1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static routeGateway of last resort is

16、 to network /24 is subnetted, 1 subnetsC is directly connected, FastEthernet0/24C /24 is directly connected, Vlan2C /24 is directly connected, Vlan3C /24 is directly connected, Vlan4S* /0 1/0 via SW-3L-A-show SW

17、-3L-A-show ipip route routeSW-3L-A#show runBuilding configuration.Current configuration : 2610 bytes!version 12.2no service padservice timestamps debug uptimeservice timestamps log uptimeno service password-encryption!hostname SW-3L-A!no aaa new-modelip subnet-zeroip routing!no file verify autospann

18、ing-tree mode pvstspanning-tree extend system-idspanning-tree vlan 2-3 priority 24576!vlan internal allocation policy ascending!interface Port-channel1 switchport trunk encapsulation dot1q switchport mode trunk!interface FastEthernet0/1 switchport trunk encapsulation dot1q switchport mode trunk chan

19、nel-group 1 mode on!SW-3L-A-show runSW-3L-A-show runinterface FastEthernet0/2 switchport trunk encapsulation dot1q switchport mode trunk channel-group 1 mode on!interface FastEthernet0/3 switchport trunk encapsulation dot1q switchport mode trunk!interface FastEthernet0/4 switchport trunk encapsulati

20、on dot1q switchport mode trunk!interface FastEthernet0/5 switchport trunk encapsulation dot1q switchport mode trunk!interface FastEthernet0/6 switchport mode dynamic desirable!interface FastEthernet0/7 switchport mode dynamic desirable!interface FastEthernet0/8 switchport mode dynamic desirable!inte

21、rface FastEthernet0/9 switchport mode dynamic desirable!interface FastEthernet0/10 switchport mode dynamic desirable!interface FastEthernet0/11 switchport mode dynamic desirable!interface FastEthernet0/12 switchport mode dynamic desirableSW-3L-A-show runSW-3L-A-show runinterface FastEthernet0/13 swi

22、tchport mode dynamic desirable!interface FastEthernet0/14 switchport mode dynamic desirable!interface FastEthernet0/15 switchport mode dynamic desirable!interface FastEthernet0/16 switchport mode dynamic desirable!interface FastEthernet0/17 switchport mode dynamic desirable!interface FastEthernet0/1

23、8 switchport mode dynamic desirable!interface FastEthernet0/19 switchport mode dynamic desirable!interface FastEthernet0/20 switchport mode dynamic desirable!interface FastEthernet0/21 switchport mode dynamic desirable!interface FastEthernet0/22 switchport mode dynamic desirable!interface FastEthern

24、et0/23 switchport mode dynamic desirable!interface FastEthernet0/24 no switchport ip address !interface GigabitEthernet0/1 switchport mode dynamic desirable!interface GigabitEthernet0/2 switchport mode dynamic desirable!SW-3L-A-show runSW-3L-A-show runinterface Vlan1 no ip ad

25、dress shutdown!interface Vlan2 ip address !interface Vlan3 ip address !interface Vlan4 ip address !router rip version 2 network network network network no auto-summary!ip classle

26、ssip route ip http serverip http secure-server!control-plane!line con 0 logging synchronousline vty 0 4 loginline vty 5 15 login!endSW-3L-A-show runSW-3L-A-show runSW-3L-B-show runSW-3L-B-show runSW-3L-2#show runBuilding configuration.Current configuration : 2654 bytes!vers

27、ion 12.1no service padservice timestamps debug uptimeservice timestamps log uptimeno service password-encryption!hostname SW-3L-2!ip subnet-zeroip routing!no ip domain-lookup!spanning-tree mode pvstspanning-tree extend system-idspanning-tree vlan 4 priority 24576!interface Port-channel1 switchport t

28、runk encapsulation dot1q switchport mode trunk!SW-3L-B-show runSW-3L-B-show runinterface FastEthernet0/1 switchport trunk encapsulation dot1q switchport mode trunk channel-group 1 mode on!interface FastEthernet0/2 switchport trunk encapsulation dot1q switchport mode trunk channel-group 1 mode on!int

29、erface FastEthernet0/3 switchport trunk encapsulation dot1q switchport mode trunk!interface FastEthernet0/4 switchport trunk encapsulation dot1q switchport mode trunk!interface FastEthernet0/5 switchport trunk encapsulation dot1q switchport mode trunk!interface FastEthernet0/6 switchport mode dynami

30、c desirable!interface FastEthernet0/7 switchport mode dynamic desirable!interface FastEthernet0/8 switchport mode dynamic desirable!interface FastEthernet0/9 switchport mode dynamic desirable!interface FastEthernet0/10 switchport mode dynamic desirableSW-3L-B-show runSW-3L-B-show runinterface FastEt

31、hernet0/12 switchport mode dynamic desirable!interface FastEthernet0/13 switchport mode dynamic desirable!interface FastEthernet0/14 switchport mode dynamic desirable!interface FastEthernet0/15 switchport mode dynamic desirable!interface FastEthernet0/16 switchport mode dynamic desirable!interface F

32、astEthernet0/17 switchport mode dynamic desirable!interface FastEthernet0/18 switchport mode dynamic desirable!interface FastEthernet0/19 switchport mode dynamic desirable!interface FastEthernet0/20 switchport mode dynamic desirable!interface FastEthernet0/21 switchport mode dynamic desirable!interf

33、ace FastEthernet0/22 switchport mode dynamic desirable!interface FastEthernet0/23 switchport mode dynamic desirable!interface FastEthernet0/24 switchport mode dynamic desirableSW-3L-B-show runSW-3L-B-show runinterface GigabitEthernet0/1 switchport mode dynamic desirable!interface GigabitEthernet0/2

34、switchport mode dynamic desirable!interface Vlan1 no ip address shutdown!interface Vlan2 ip address !interface Vlan3 ip address !interface Vlan4 ip address !router rip version 2 network network network

35、 no auto-summary!ip classlessip http server!line con 0 logging synchronousline vty 0 4 loginline vty 5 15 login!endSW-3L-B-show runSW-3L-B-show runSW-3L-2#show ip routeCodes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA -

36、OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area * - candidate default, U - per-user static route, o - ODR P - periodic downloaded stat

37、ic routeGateway of last resort is not set /24 is subnetted, 1 subnetsR 120/1 via , 00:00:14, Vlan2 120/1 via , 00:00:11, Vlan3 120/1 via , 00:00:20, Vlan4R /8 120/2 via , 00:00:20, Vlan4 120/2 via , 00:00:14, Vlan2 1

38、20/2 via , 00:00:11, Vlan3C /24 is directly connected, Vlan2C /24 is directly connected, Vlan3C /24 is directly connected, Vlan4SW-3L-B-show SW-3L-B-show ipip route routeSW-3L-2#show ip cefPrefix Next Hop Interface/32 receive/8 V

39、lan4 Vlan2 Vlan3/24 Vlan2 Vlan3 Vlan4/24 attached Vlan2/32 receive/32 Vlan2/32 receive/32 Vlan2/32 Vlan255/32 receive

40、/24 attached Vlan3/32 receive/32 Vlan3/32 receive/32 Vlan355/32 receive/24 attached Vlan4/32 receivePrefix Next Hop InterfaceSW-3L-B-show SW-3L-B-show ipip cefcef /32 192.168.3.

41、1 Vlan4 /32 receive /32 Vlan4 /32 Vlan4 55/32 receive /4 drop /24 receive 55/32 receiveSW-3L-B-show SW-3L-B-show ipip cefcefSW-3L-2#show adj detailProtocol Interface AddressIP Vlan4 (5) 0 pa

42、ckets, 0 bytes 000B2F09180500181824CC800800 ARP 03:58:35 Epoch: 0IP Vlan2 (17) 0 packets, 0 bytes 0011BBBE8F8000181824CC800800 ARP 03:47:37 Epoch: 0IP Vlan2 (5) 0 packets, 0 bytes 00E04C00CD4F00181824CC800800 ARP 03:58:34 Epoch: 0IP Vlan4 (17) 0 packets, 0 bytes 0011

43、BBBE8F8000181824CC800800 ARP 03:48:00 Epoch: 0SW-3L-B-show SW-3L-B-show adjadj detail detailIP Vlan3 (17) 0 packets, 0 bytesProtocol Interface Address 0011BBBE8F8000181824CC800800 ARP 03:20:24 Epoch: 0IP Vlan2 (5) 0 packets, 0 bytes 00E04C51881F00181824CC800800 ARP 03:47:44 Epo

44、ch: 0IP Vlan3 (5) 0 packets, 0 bytes 000B2F09181200181824CC800800 ARP 04:00:54 Epoch: 0IP Vlan4 (5) 0 packets, 0 bytes 000B2F09210F00181824CC800800 ARP 03:40:41 Epoch: 0SW-3L-B-show SW-3L-B-show adjadj detail detailVLAN Name Status Ports- - - -1 default active Fa0/5, Fa0/6, Fa0

45、/7, Fa0/8 Fa0/9, Fa0/10, Fa0/11, Fa0/12 Fa0/13, Fa0/14, Fa0/15, Fa0/16 Fa0/17, Fa0/18, Fa0/19, Fa0/20 Fa0/21, Fa0/22, Fa0/23, Fa0/24 Gi0/1, Gi0/22 VLAN0002 active3 VLAN0003 active4 VLAN0004 active1002 fddi-default act/unsup1003 trcrf-default act/unsup1004 fddinet-default act/unsup1005 trbrf-default

46、act/unsupSW-3L-B-show SW-3L-B-show vlanvlan bribriSW-3L-2#show vtp statusVTP Version : 2Configuration Revision : 3Maximum VLANs supported locally : 1005Number of existing VLANs : 8VTP Operating Mode : ServerVTP Domain Name : benetVTP Pruning Mode : EnabledVTP V2 Mode : EnabledVTP Traps Generation :

47、DisabledMD5 digest : 0 x9E 0 x94 0 x4A 0 x95 0 x2E 0 xC7 0 xA6 0 xDFConfiguration last modified by at 3-1-93 00:04:38Local updater ID is on interface Vl2 (lowest numbered VLAN interface found)SW-3L-B-show SW-3L-B-show vtpvtp status statusSwitch#show runBuilding configuration.Curr

48、ent configuration:!version 12.0no service padservice timestamps debug uptimeservice timestamps log uptimeno service password-encryption!hostname Switch!enable secret 5 $1$rO.F$py/5Sc5Wt5EQ.qIhxhXos0!SW-2L-1SW-2L-1-show run-show runspanning-tree uplinkfast!spanning-tree vlan 2 priority 4068spanning-t

49、ree vlan 3 priority 4068ip subnet-zero!interface FastEthernet0/1 switchport access vlan 2!interface FastEthernet0/2 switchport access vlan 2!interface FastEthernet0/3 switchport access vlan 2!interface FastEthernet0/4 switchport access vlan 2!interface FastEthernet0/5 switchport access vlan 2SW-2L-1

50、SW-2L-1-show run-show runinterface FastEthernet0/6 switchport access vlan 2!interface FastEthernet0/7 switchport access vlan 2!interface FastEthernet0/8 switchport access vlan 2!interface FastEthernet0/9 switchport access vlan 2!interface FastEthernet0/10 switchport access vlan 2!interface FastEther

51、net0/11 switchport access vlan 3!interface FastEthernet0/12 switchport access vlan 3!interface FastEthernet0/13 switchport access vlan 3SW-2L-1SW-2L-1-show run-show runinterface FastEthernet0/14 switchport access vlan 3!interface FastEthernet0/15 switchport access vlan 3!interface FastEthernet0/16 s

52、witchport access vlan 3!interface FastEthernet0/17 switchport access vlan 3!interface FastEthernet0/18 switchport access vlan 3!interface FastEthernet0/19 switchport access vlan 3!interface FastEthernet0/20 switchport access vlan 3!interface FastEthernet0/21!interface FastEthernet0/22SW-2L-1SW-2L-1-

53、show run-show runinterface FastEthernet0/23 switchport access vlan 2 switchport trunk encapsulation dot1q switchport mode trunk!interface FastEthernet0/24 switchport trunk encapsulation dot1q switchport mode trunk!interface VLAN1 ip address no ip directed-broadcast no ip rout

54、e-cache!interface VLAN2 ip address no ip directed-broadcast no ip route-cache shutdownSW-2L-1SW-2L-1-show run-show runinterface VLAN3 ip address 4 no ip directed-broadcast no ip route-cache shutdown!interface VLAN4 ip address 28 255.25

55、5.255.0 no ip directed-broadcast no ip route-cache shutdown!line con 0 transport input none stopbits 1line vty 0 4 password benet loginline vty 5 15 login!endSW-2L-1SW-2L-1-show run-show run Switch#show vtp status VTP Version : 2 Configuration Revision : 3 Maximum VLANs supported locally : 68 Number

56、 of existing VLANs : 8 VTP Operating Mode : Client VTP Domain Name : benet VTP Pruning Mode : Enabled VTP V2 Mode : Enabled VTP Traps Generation : Disabled MD5 digest : 0 x9E 0 x94 0 x4A 0 x95 0 x2E 0 xC7 0 xA6 0 xDF Configuration last modified by at 3-1-93 00:04:38SW-2L-1SW-2L-1-show -show

57、vtpvtp status statusSwitch#show vlan briefVLAN Name Status Ports- - - -1 default active Fa0/21, Fa0/222 VLAN0002 active Fa0/1, Fa0/2, Fa0/3, Fa0/4, Fa0/5, Fa0/6, Fa0/7, Fa0/8, Fa0/9, Fa0/103 VLAN0003 active Fa0/11, Fa0/12, Fa0/13, Fa0/14, Fa0/15, Fa0/16, Fa0/17, Fa0/18, Fa0/19, Fa0/204 VLAN0004 acti

58、ve1002 fddi-default active1003 trcrf-default active1004 fddinet-default active1005 trbrf-default activeSW-2L-1SW-2L-1-show -show vlanvlan brief briefSW-2L-2#show runBuilding configuration.Current configuration : 2046 bytes!version 12.1no service padservice timestamps debug uptimeservice timestamps l

59、og uptimeno service password-encryption!hostname SW-2L-2!ip subnet-zero!spanning-tree mode pvstno spanning-tree optimize bpdu transmissionspanning-tree extend system-idspanning-tree uplinkfastSW-2L-SW-2L-2-show run2-show runinterface FastEthernet0/1 switchport access vlan 2 no ip address!interface F

60、astEthernet0/2 switchport access vlan 2 no ip address!interface FastEthernet0/3 switchport access vlan 2 no ip address!interface FastEthernet0/4 switchport access vlan 2 no ip address!interface FastEthernet0/5 switchport access vlan 2 no ip addressSW-2L-SW-2L-2-show run2-show run switchport access v