校园网络设计实施资料发.docx
《校园网络设计实施资料发.docx》由会员分享,可在线阅读,更多相关《校园网络设计实施资料发.docx(40页珍藏版)》请在冰豆网上搜索。
校园网络设计实施资料发
实验二:
单个交换机vlan的划分
拓扑图:
附交换机配置:
sys
Entersystemview,returnuserviewwithCtrl+Z.
[Huawei]sysnameSwitch1
[Switch1]vlanbatch23
Info:
Thisoperationmaytakeafewseconds.Pleasewaitforamoment...done.
[Switch1]interfaceEthernet0/0/1
[Switch1-Ethernet0/0/1]portlink-typeaccess
[Switch1-Ethernet0/0/1]portdefaultvlan2
[Switch1-Ethernet0/0/1]quit
[Switch1]interfaceEthernet0/0/2
[Switch1-Ethernet0/0/2]portlink-typeaccess
[Switch1-Ethernet0/0/2]portdefaultvlan3
[Switch1-Ethernet0/0/2]interfaceEthernet0/0/3
[Switch1-Ethernet0/0/3]portlink-typeaccess
[Switch1-Ethernet0/0/3]portdefaultvlan2
[Switch1-Ethernet0/0/3]interfaceEthernet0/0/4
[Switch1-Ethernet0/0/4]portlink-typeaccess
[Switch1-Ethernet0/0/4]portdefaultvlan3
[Switch1-Ethernet0/0/4]quit
实验三:
VTPserver交换机配置
Switch1的配置:
sys
Entersystemview,returnuserviewwithCtrl+Z.
[Huawei]sysnameSwitch1
[Switch1]vlanbatch23
Info:
Thisoperationmaytakeafewseconds.Pleasewaitforamoment...done.
[Switch1]interfaceEthernet0/0/1
[Switch1-Ethernet0/0/1]portlink-typeaccess
[Switch1-Ethernet0/0/1]portdefaultvlan2
[Switch1-Ethernet0/0/1]quit
[Switch1]interfaceEthernet0/0/2
[Switch1-Ethernet0/0/2]portlink-typeaccess
[Switch1-Ethernet0/0/2]portdefaultvlan3
[Switch1]interfaceEthernet0/0/3
[Switch1-Ethernet0/0/3]portlink-typetrunk
[Switch1-Ethernet0/0/3]porttrunkallow-passvlan23
[Switch1-Ethernet0/0/3]quit
[Switch1]
Switch2的配置与Switch1的配置相同
#
实验四:
单臂路由的配置
交换机配置请参照上一个实验。
附路由器配置:
[Router1]vlanbatch23
Info:
Thisoperationmaytakeafewseconds.Pleasewaitforamoment...done.
[Router1]interfaceGigabitEthernet0/0/0.2
[Router1-GigabitEthernet0/0/0.2]control-vid2dot1q-termination
[Router1-GigabitEthernet0/0/0.2]dot1qterminationvid2
[Router1-GigabitEthernet0/0/0.2]ipaddress192.168.3.124
[Router1-GigabitEthernet0/0/0.2]quit
[Router1]interfaceGigabitEthernet0/0/0.3
[Router1-GigabitEthernet0/0/0.2]control-vid3dot1q-termination
[Router1-GigabitEthernet0/0/0.2]dot1qterminationvid3
[Router1-GigabitEthernet0/0/0.2]ipaddress192.168.4.124
[Router1-GigabitEthernet0/0/0.2]quit
实验五:
路由器的NAT配置
附路由器配置:
system-view
Entersystemview,returnuserviewwithCtrl+Z.
[Router1]vlanbatch23
Info:
Thisoperationmaytakeafewseconds.Pleasewaitforamoment...done.
[Router1]interfaceGigabitEthernet0/0/0.2
[Router1-GigabitEthernet0/0/0.2]control-vid2dot1q-termination
[Router1-GigabitEthernet0/0/0.2]dot1qterminationvid2
[Router1-GigabitEthernet0/0/0.2]ipaddress192.168.3.124
[Router1-GigabitEthernet0/0/0.2]quit
[Router1]interfaceGigabitEthernet0/0/0.3
[Router1-GigabitEthernet0/0/0.2]control-vid3dot1q-termination
[Router1-GigabitEthernet0/0/0.2]dot1qterminationvid3
[Router1-GigabitEthernet0/0/0.2]ipaddress192.168.4.124
[Router1-GigabitEthernet0/0/0.2]quit
[Router1]nataddress-group1202.1.5.1202.1.5.5
[Router1-GigabitEthernet0/0/1]ipaddress202.1.5.224
[Router1-GigabitEthernet0/0/1]
May6201316:
49:
17-08:
00Router1%%01IFNET/4/LINK_STATE(l)[0]:
Thelineprotoco
lIPontheinterfaceGigabitEthernet0/0/1hasenteredtheUPstate.
实验六:
拓扑图:
实验结果:
1、pc1(192.168.3.3)可以ping通外网终端机pc3(202.1.5.3)
Pc2(192.168.4.3)可以ping通外网终端机pc3(202.1.5.3)
2、外网终端机pc3可以ping通内网终端机pc1(192.168.3.3)和pc2(192.168.4.3)
实验代码:
Switch1:
sys
Entersystemview,returnuserviewwithCtrl+Z.
[Huawei]sysnameSwitch1
[Switch1]vlanbatch23
Info:
Thisoperationmaytakeafewseconds.Pleasewaitforamoment...done.
[Switch1]interfaceEthernet0/0/1
[Switch1-Ethernet0/0/1]portlink-typeaccess
[Switch1-Ethernet0/0/1]portdefaultvlan2
[Switch1-Ethernet0/0/1]quit
[Switch1]interfaceEthernet0/0/2
[Switch1-Ethernet0/0/2]portlink-typeaccess
[Switch1-Ethernet0/0/2]portdefaultvlan3
[Switch1]interfaceEthernet0/0/3
[Switch1-Ethernet0/0/22]portlink-typetrunk
[Switch1-Ethernet0/0/22]porttrunkallow-passvlan23
[Switch1-Ethernet0/0/22]quit
[Switch1]
Switch2:
system-view
Entersystemview,returnuserviewwithCtrl+Z.
[Huawei]sysnameSwitch2
[Switch2]vlanbatch23
Info:
Thisoperationmaytakeafewseconds.Pleasewaitforamoment...done.
[Switch2]interfaceEthernet0/0/1
[Switch2-Ethernet0/0/1]portlink-typetrunk
[Switch2-Ethernet0/0/1]porttrunkallow-passvlan23
[Switch2-Ethernet0/0/1]interfaceEthernet0/0/22
[Switch2-Ethernet0/0/22]portlink-typetrunk
[Switch2-Ethernet0/0/22]porttrunkallow-passvlan23
[Switch2-Ethernet0/0/22]q
[Switch2]
Router1
sys
Entersystemview,returnuserviewwithCtrl+Z.
[Huawei]sysnameRouter1
[Router1]vlan
[Router1]vlanbatch23
Info:
Thisoperationmaytakeafewseconds.Pleasewaitforamoment...done.
[Router1]interfaceGigabitEthernet0/0/0.2
[Router1-GigabitEthernet0/0/0.2]control-vid2dot1q-termination
[Router1-GigabitEthernet0/0/0.2]dot1qterminationvid2
[Router1-GigabitEthernet0/0/0.2]ipaddress192.168.3.124
[Router1-GigabitEthernet0/0/0.2]q
[Router1]interfaceGigabitEthernet0/0/0.3
[Router1-GigabitEthernet0/0/0.3]
[Router1-GigabitEthernet0/0/0.3]control-vid3dot1q-termination
[Router1-GigabitEthernet0/0/0.3]dot1qterminationvid3
[Router1-GigabitEthernet0/0/0.3]ipaddress192.168.4.124
[Router1]interfaceGigabitEthernet0/0/1
[Router1-GigabitEthernet0/0/1]ipaddress192.168.5.324
[Router1-GigabitEthernet0/0/1]q
[Router1]iproute-static202.1.5.324192.168.5.1
[Router1]
Switch3
sys
Entersystemview,returnuserviewwithCtrl+Z.
[Huawei]sysnameSwitch3
[Switch3]vlanbatch23
Info:
Thisoperationmaytakeafewseconds.Pleasewaitforamoment...done.
[Switch3]interfaceVlanif2
[Switch3-Vlanif2]ipaddress192.168.5.124
[Switch3-Vlanif2]q
[Switch3]interfaceVlanif3
[Switch3-Vlanif3]ipaddress202.1.5.124
[Switch3-Vlanif3]q
[Switch3]interfaceGigabitEthernet0/0/1
[Switch3-GigabitEthernet0/0/1]portlink-typeaccess
[Switch3-GigabitEthernet0/0/1]portdefaultvlan2
[Switch3-GigabitEthernet0/0/1]interfaceGigabitEthernet0/0/2
[Switch3-GigabitEthernet0/0/2]portlink-typeaccess
[Switch3-GigabitEthernet0/0/2]portdefaultvlan3
[Switch3-GigabitEthernet0/0/2]q
[Switch3]iproute-static192.168.0.016192.168.5.3
注意事项:
路由器与交换机相连ping不通的原因,路由器发送的包是ethernet格式数据包。
交换机端口配置为vlantrunk模式则需要vlan标签,故无法ping通。
解决方法:
1、交换机端口模式改为acces并允许vlan通过。
2、工作模式仍为trunk,另增加pvid对应vlan号并允许allow通过该vlan。
实验八动态路由的配置:
拓扑图:
实验结果:
实验代码:
Switch3
sys
Entersystemview,returnuserviewwithCtrl+Z.
[Huawei]sysnameSwitch3
[Switch3]vlanbatch234
Info:
Thisoperationmaytakeafewseconds.Pleasewaitforamoment...done.
[Switch3]interfaceVlanif2
[Switch3-Vlanif2]ipaddress192.168.5.124
[Switch3-Vlanif2]q
[Switch3]interfaceVlanif3
[Switch3-Vlanif3]ipaddress202.1.5.124
[Switch3-Vlanif3]q
[Switch3]interfaceVlanif4
[Switch3-Vlanif2]ipaddress192.168.6.124
[Switch3]interfaceGigabitEthernet0/0/1
[Switch3-GigabitEthernet0/0/1]portlink-typeaccess
[Switch3-GigabitEthernet0/0/1]portdefaultvlan2
[Switch3-GigabitEthernet0/0/1]interfaceGigabitEthernet0/0/2
[Switch3-GigabitEthernet0/0/2]portlink-typeaccess
[Switch3-Ethernet0/0/2]portdefaultvlan3
[Switch3-GigabitEthernet0/0/2]q
[Switch3]interfaceGigabitEthernet0/0/1
[Switch3-Ethernet0/0/1]portlink-typeaccess
[Switch3-Ethernet0/0/1]portdefaultvlan4
[Switch3]rip
[Switch3-rip-1]network192.168.6.0
[Switch3-rip-1]network192.168.5.0
Router2
sys
Entersystemview,returnuserviewwithCtrl+Z.
[Huawei]sysnameRouter2
[Router2]vlanbatch23
Info:
Thisoperationmaytakeafewseconds.Pleasewaitforamoment...done.
[Router2]interfaceGigabitEthernet0/0/0
[Router2-GigabitEthernet0/0/0]ipaddress192.168.6.324
[Router2-GigabitEthernet0/0/0]q
[Router2]interfaceSerial0/0/0
[Router2-Serial0/0/0]ipaddress192.168.7.124
[Router2]rip
[Router2-rip-1]network192.168.7.0
[Router2-rip-1]q
Router3
sys
Entersystemview,returnuserviewwithCtrl+Z.
[Huawei]sysnameRouter3
[Router3]vlanbatch23
Info:
Thisoperationmaytakeafewseconds.Pleasewaitforamoment...done.
[Router3]interfaceSerial0/0/0
[Router3-Serial0/0/0]ipaddress192.168.7.324
[Router3-Serial0/0/0]q
[Router3]interfaceEthernet0/0/1
[Router3-Ethernet0/0/1]ipaddress192.168.8.124
[Router3-Ethernet0/0/1]q
[Router3]rip
[Router3-rip-1]network192.168.7.0
实验八,校园网搭建
实验结果:
学生一区和学生二区可分别和学生三区通信,学生一区和二区之间不能相互通信
学生区路由器路由表:
NAT技术:
在学生区路由器上面做NAT
ACL控制访问列表,分别在学生区路由器和中心交换机上做ACL,使学生一区和二区之间不可通信,学生区和教师区不可相互访问,学生区和教师区都可访问图文中心。
学生区、教学区和图文中心都可以访问服务器和外部主机
边界路由器路由表:
外部路由器路由表:
实验代码:
学生区:
Switch1:
system-view
Entersystemview,returnuserviewwithCtrl+Z.
[Huawei]sysnameSwitch1
[Switch1]vlan2
[Switch1-vlan2]q
[Switch1]interfaceEthernet0/0/1
[Switch1-Ethernet0/0/1]portlink-typeaccess
[Switch1-Ethernet0/0/1]portdefaultvlan2
[Switch1-Ethernet0/0/1]q
[Switch1]interfaceEthernet0/0/19
[Switch1-Ethernet0/0/19]portlink-typetrunk
[Switch1-Ethernet0/0/19]porttrunkallow-passvlanall
[Switch1-Ethernet0/0/19]q
Switch2:
system-view
Entersystemview,returnuserviewwithCtrl+Z.
[Huawei]sysnameSwitch2
[Switch2]vlan3
[Switch2-vlan3]q
[Switch2]interfaceEthernet0/0/1
[Switch2-Ethernet0/0/1]portlink-typeaccess
[Switch2-Ethernet0/0/1]portdefaultvlan3
[Switch2-Ethernet0/0/1]q
[Switch2]interfaceEthernet0/0/20
[Switch2-Ethernet0/0/20]portlink-typetrunk
[Switch2-Ethernet0/0/20]porttrunkallow-passvlanall
[Switch2-Ethernet0/0/20]q
Switch3:
system-view
Entersystemview,returnuserviewwithCtrl+Z.
[Huawei]sysnameSwitch3
[Switch3]vlan4
[Switch3-vlan4]q
[Switch3]interfaceEthernet0/0/1
[Switch3-Ethernet0/0/1]portlink-typeaccess
[Switch3-Ethernet0/0/1]portdefaultvlan4
[Switch3-Ethernet0/0/1]q
[Switch3]interfaceEthernet0/0/2