CCIERSN1MCWord文档格式.docx

1、Sw2:50 VLAN_BB2Sw3Sw4RackYYSw1:VLAN Name Status Ports 1 default active F0/7,F0/8,F0/9,F0/11,F0/12,F0/13,F0/14Fa0/15,Fa0/17 Fa0/18,Gi0/1,Gi0/2 40 VLAN_BB1 active Fa0/4, Fa0/10 55 VLAN_55 active Fa0/5 60 VLAN_BB3 active Fa0/6 100 VLAN_100 active Fa0/1, Fa0/2 200 VLAN_200 active RackYYSw2:1 default act

2、ive F0/4,F0/5,F0/7,F0/8,F0/9,F0/11,F0/12,F0/13,F0/14,F0/16,F0/17F0/18,Gi0/1,Gi0/2 50 VLAN_BB2 active F0/6, F0/10 100 VLAN_100 active F0/1, F0/2 200 VLAN_200 active Po10 RackYYSw3:1 default active F0/1,F0/2,F0/3,F0/4 F0/5, F0/6, F0/7,F0/8,F0/9,F0/11,F0/12,F0/13, F0/14, F0/15, F0/16,F0/17,F0/18,Gi0/1,

3、Gi0/2 60 VLAN_BB3 active Fa0/10 RackYYSw4:1 default active F0/1,F0/2,F0/3,F0/4,F0/5,F0/6,F0/7,F0/8,F0/9,F0/10F0/11,F0/12F0/13,F0/14,F0/15,F0/16,F0/17,F0/18,Gi0/1,Gi0/2 Verify: show vlan brief When u done, u must verify careful.做完的时候，可以仔细核对下，注意大小写,我做的时候只要是二层的端口全使用Swithport mode access 1.3 Port-channe

4、l between Sw1 a Sw2 Sw1 and Sw2 layer 3 Ether channel use port-channel 21 only Assign YY.YY.100.1/24 to Sw1 Port-channel 21 Assign YY.YY.100.2/24 to Sw2 Port-channel 21 ensure interface F0/23 and F0/24 are channel member for both Switch Do not reply on PAgP or LACP to facilitate the connection Verif

5、y layer 2 and layer 3 connectivity via the channel linkinterface range FastEthernet0/23-24 shutdown no Switchport channel-group 21 mode on no shutdown interface Port-channel21 ip address YY.YY.100.1 255.255.255.0 ip address YY.YY.100.2 255.255.255.0 show vtp status; show etherchannel summary; show e

6、therchannel port-channel;1.4 Port-channel between Sw1-Sw3 and Sw2-Sw4 Sw1-Sw3 Sw2-Sw4 layer 2 Ether-channels use port 10 only F0/19 and F0/20 are members of the switches On Sw2 and Sw4 assign all interface in the EC as static-access port on VLAN_200 unconditional enable PAGP to facility the connecti

7、on verify layer 2 connectivity via the channel linkinterface range FastEthernet0/19-20 Switchport trunk encapsulation isl Switchport mode trunk channel-group 10 mode desirable Switchport mode access Switchport access VLAN 200 show etherchannel portchannel;结合下面的VLAN,可以看到Sw2和Sw4的po10也在VLAN200,在你做敲chan

8、nel-group 10 mode desirable之前先Switchport access VLAN 200,要不在VLAN的表中会看不到po10. 在做完的时候一定要Show一下.看看 Port-channel起来了没 1.5 Catalyst layer 3 configuration Configure Sw1 and Sw2 IP address as outlined n diagram Connectivity to R3 uses route ports R1 and R2 are members of vlan 100 on Sw1 and Sw21.6 Configure

9、 Sw3 and Sw4 IP addressing Configure VLAN_200 in Sw1 with IP address YY.YY.34.1/24 Configure VLAN_200 in Sw2 with IP address YY.YY.43.1/24 Verify the connectivity between Sw1 and Sw2VLAN 100 YY.YY.12.254/24 VLAN 200 YY.YY.34.1/24 VLAN 100 YY.YY.21.254/24 VLAN 200 YY.YY.43.1/24 VLAN 200 YY.YY.34.254/

10、24 VLAN 200 YY.YY.43.254/24 ip routing interface VLAN100 ip address YY.YY.12.254 255.255.255.0 interface VLAN200 ip address sYY.YY.34.1 255.255.255.0 ip address YY.YY.21.254 255.255.255.0 ip address YY.YY.43.1 255.255.255.0 ip address YY.YY.34.254 255.255.255.0 ip address YY.YY.43.254 255.255.255.0

11、show ip interface brief; show ip route interface FastEthernet0/3 ip address YY.YY.13.2 255.255.255.0 ip address YY.YY.31.2 255.255.255.0 show interface status;1.7Catalyst feature Cofigure Sw1-F0/1 so that the interface will stop forwarding unicast traffic if the input rate exceeds 65 Mbpsinterface F

12、a0/1 Storm-control unicast level 55.00 show storm-control unicast 1.8 Catalyst tunning Cofigure the amount of tine a neighbou should hold CDP information sent by Sw2 before discarding it to 2 minutescdp holdtime 120 show cdp 1.9 Catalyst Feature Configure Sw1 to control and block the flood of unknow

13、n Multicast traffic on the interface F0/5interface Fa0/5 Switchport block multicast Ip Igmp snooping 或者ip cgmp enable show interface interface-id switchport 第二部分：IGP和BGPIGP2.1 OSPF Bbackbones The link between Sw1 and Sw2 All interface in VLAN_100 on Sw1 Sw2 R1 and R2 R3 G0/0 and G0/1 and the fa0/3 o

14、n Sw1 and Sw2 Loop back 0 interface on Sw1 Sw2 R2 and R3 Verifying that all OSPF neighbor have built their adjacenciesRackYYR1:Router ospf YY network YY.YY.12.1 0.0.0.0 area 0 network YY.YY.21.1 0.0.0.0 area 0 RackYYR2:network YY.YY.2.2 0.0.0.0 area 0 network YY.YY.12.2 0.0.0.0 area 0 network YY.YY.

15、21.2 0.0.0.0 area 0 network YY.YY.7.7 0.0.0.0 area 0 network YY.YY.12.254 0.0.0.0 area 0 network YY.YY.13.2 0.0.0.0 area 0 network YY.YY.100.1 0.0.0.0 area 0 network YY.YY.8.8 0.0.0.0 area 0 network YY.YY.21.254 0.0.0.0 area 0 network YY.YY.31.2 0.0.0.0 area 0 network YY.YY.100.2 0.0.0.0 area 0 Rack

16、YYR3:network YY.YY3.3 0.0.0.0 area 0 network YY.YY.13.1 0.0.0.0 area 0 network YY.YY.31.1 0.0.0.0 area 0 show ip ospf interface brief; show ip ospf neighbor 2.2 OSPF over NBMA OSPF area 11 consist of the follow interface and attributes The Frame Relay network between R3 R4 R5 Loop back 0 on R4 and R

17、5 VLAN_55 Ensure there is no DR/BDRinterface s0/0/0.3 ip ospf network point-to-multipoint non-broadcast network YY.YY.11.3 0.0.0.0 area 11 nei YY.YY.11.4 nei YY.YY.11.5 RackYYR4:interface s0/0/0.4 network YY.YY.4.4 0.0.0.0 area 11 network YY.YY.11.4 0.0.0.0 area 11 RackYYR5:interface s0/0/0.5 ip os

18、net point-to-multipoint non-broadcast network YY.YY.5.5 0.0.0.0 area 11 network YY.YY.11.5 0.0.0.0 area 11 network YY.YY.55.254 0.0.0.0 area 11 2.3 OSPF ASBR and RIP version 2 Configure R4 to receive RIP v2 routes from Backbone 1 When properly configured you will receives RIP v2 routes in the class

19、B address range 199.172.Z.Z Configure R4 so that the external RIP routes are injected into area 11 and appear throughout that OSPF domain Ensure external routes originates from Autonomous Systems Boundary Routers （ASBR） outside area 11 cannot be flooded within the area Permit OSPF type-3 routes into

20、 area 11（在R5上看）ip prefix-list fbb1 per 199.172.0.0/16 le 32 Router rip version 2 no auto-summary network 150.1.0.0 distribute-list prefix fbb1 in Fa0/0 redistribute rip metric-type 1 subnets area 11 nssa show ip protocol; show ip route rip; show ip ospf; show ip route ospf;2.4 Area 34 and Area 43 OS

21、PF area 34 consists of the VLAN_200 interfaces on Sw1 and Sw3 and loopback 0 in Sw3 OSPF area 43 consists of the VLAN_200 interfaces on Sw2 and Sw4 and loopback 0 in Sw4network YY.YY.34.1 0.0.0.0 area 34 network YY.YY.43.1 0.0.0.0 area 43 network YY.YY.9.9 0.0.0.0 area 34 network YY.YY.34.254 0.0.0.

22、0 area 34 network YY.YY.10.10 0.0.0.0 area 43 network YY.YY.43.254 0.0.0.0 area 43 2.5 OSPF ABR Static routes are not permitted for this question inject a default route into area 0 area 11 area 34 area 43 Use fewest number of steps or commands to completes thisarea 11 nssa default-information-origin

23、ate default-information originate always show ip ospf database 2.6 OSPF Summary Add the following interface on R2 to Area 0 Loopback 22 180.88.22.254/24 Loopback 32 180.88.32.254/24 Loopback 47 180.88.47.254/24 Summarize the above address into a single route Your summary route must be compact and no

24、t waste address space Verify the Summary is in the OSPF routing table on R5 and you can ping all the host address R3、Sw 1、Sw2都要做区域间汇总。int lo22 ip address 180.88.22.254 255.255.255.0 int lo32 ip address 180.88.32.254 255.255.255.0 int lo47 ip address 180.88.47.254 255.255.255.0 network 180.88.0.0 0.0.63.255