我有個發小朋友家裏在北京拆遷了,家裏拿到一大筆鉅額財富(曹真他媽羨慕!!)。朋友是學服裝設計的就想要開一家服裝設計生產公司,來設計並銷售服裝。朋友知道我是學習網絡工程的,懷着忙腔熱血找我來給他設計網絡架構。我當時想拒絕的,由於我也是半吊子,東西懂得不是不少,我本着試試的態度答應給他作個網絡架構拓撲。朋友告訴我他公司規模仍是比較大的,有銷售部、財務部、採購部、綜合辦、生產研發部、質管部、庫房以及售後服務部。朋友告訴我員工的電腦沒必要要買太好的每臺電腦預算在3000元左右就能夠。服務器
英特爾(Intel) i5 7500 酷睿四核 盒裝CPU處理器 1399元
技嘉(GIGABYTE)H110M-DS2V主板 (Intel H110/LGA 1151) 389元
酷獸(CUSO) DDR4 8G 2133臺式機內存條8g 499元(如今顯卡真貴了,原先才300多)
銘速HD6450 2GD3戰鬥版625/1066MHZ 2G半高顯卡刀卡獨立顯卡2G 標準機箱版 155 元
西部數據(WD) 1TB西數藍盤64MB7200轉1T臺式機電腦機械硬盤正品行貨送配件 287元
鑫谷(Segotep)額定500W 核動力-超級戰艦F7電源(雙管正激架構/主動式PFC/寬幅/背線/靜音風扇/電腦電源)199元
金河田(Golden field) 金河田 啓航至尚A1臺式機電腦玻璃機箱遊戲水冷ATX 黑色半測透 109元
山澤(SAMZHE)DY-01 電腦主機國標電源線 品字尾三孔電源鏈接線 適用電腦主機顯示器電飯煲 直插1.8米 17元
TCL T22M1 21.5英寸TN面板FHD全高清LED背光電腦液晶電腦顯示器 518元
pc機加顯示是總金額3500元。性能仍是不錯的。網絡
華爲(HUAWEI) S5700-28C-SI 24口全千兆三層交換機 含單交流電源+4端口千兆SFP 6臺 單臺價格7835元
華爲(HAUWEI)AR3260-S 高端企業級集成路由器 2臺 單臺價格20087元架構
一、vlan分配(讓各個部門在二層上電腦是隔離的)
二、交換機的冗餘備份。
三、捆綁鏈路(增大帶寬,實現備份冗餘鏈路)
四、vrrp實現路由器的備份冗餘
五、三層交換機看成DHCp使用
六、使用acl的nat,轉換內網ip爲外網ip。ide
部門 | 網關 | 所屬vlan |
---|---|---|
財務部 | 192.168.10.254 | vlan10 |
綜合辦 | 192.168.20.254 | vlan20 |
售後服務部 | 192.168.30.254 | vlan30 |
庫房 | 192.168.40.254 | vlan40 |
質管部 | 192.168.50.254 | vlan50 |
生產研發部 | 192.168.60.254 | vlan60 |
採購部 | 192.168.70.254 | vlan70 |
銷售部 | 192.168.80.254 | vlan80 |
所屬vlan | 網關 | dns地址 | 地址池網段 |
---|---|---|---|
vlan10 | 192.168.10.254 | 8.8.8.8 | 192.168.10.0/24 |
vlan20 | 192.168.20.254 | 8.8.8.8 | 192.168.20.0/24 |
vlan30 | 192.168.30.254 | 8.8.8.8 | 192.168.30.0/24 |
vlan40 | 192.168.40.254 | 8.8.8.8 | 192.168.40.0/24 |
vlan50 | 192.168.50.254 | 8.8.8.8 | 192.168.50.0/24 |
vlan60 | 192.168.60.254 | 8.8.8.8 | 192.168.60.0/24 |
vlan70 | 192.168.70.254 | 8.8.8.8 | 192.168.70.0/24 |
vlan80 | 192.168.80.254 | 8.8.8.8 | 192.168.80.0/24 |
a、建立vlan10-80
b、售後服務部access模式劃入vlan30、庫房access模式劃入vlan40
c、其餘鏈路爲trunk中繼模式性能
<Huawei>undo terminal monitor //關閉終端監控 <Huawei>system-view //進入系統模式 [Huawei]sysname SW3 //修更名稱爲SW3 [SW3]vlan batch 10 20 30 40 50 60 70 80 //建立vlan10-80 [SW3]int g0/0/1 //進入g0/0/1接口 [SW3-GigabitEthernet0/0/1]port link-type access //設置模式爲接入模式 [SW3-GigabitEthernet0/0/1]port default vlan 30 //加入vlan30 [SW3-GigabitEthernet0/0/1]quit //退出 [SW3]int g0/0/1 //進入g0/0/2接口 [SW3-GigabitEthernet0/0/2]port link-type access //設置模式爲接入模式 [SW3-GigabitEthernet0/0/2]port default vlan 40 //加入vlan40 [SW3-GigabitEthernet0/0/2]quit //退出 [SW3]port-group group-member g0/0/3 to g0/0/5 //把g0/0/3到g0/0/5加入組中 [SW3-port-group]port link-type trunk 把組設置爲中繼模式 [SW3-port-group]port trunk allow-pass vlan all //設置屬於全部vlan [SW3-port-group]quit //退出
配置結果學習
a、建立vlan10-80
b、質管部access模式劃入vlan50、生產研發部access模式劃入vlan60
c、其餘鏈路爲trunk中繼模式ui
<Huawei>undo terminal monitor //關閉終端監控 <Huawei>system-view //進入系統模式 [Huawei]sysname SW4 //修更名稱爲SW4 [SW4]vlan batch 10 20 30 40 50 60 70 80 //建立vlan10-80 [SW4]int g0/0/1 //進入g0/0/1接口 [SW4-GigabitEthernet0/0/1]port link-type access //設置模式爲接入模式 [SW4-GigabitEthernet0/0/1]port default vlan 50 //加入vlan50 [SW4-GigabitEthernet0/0/1]quit //退出 [SW4]int g0/0/1 //進入g0/0/2接口 [SW4-GigabitEthernet0/0/2]port link-type access //設置模式爲接入模式 [SW4-GigabitEthernet0/0/2]port default vlan 60 //加入vlan60 [SW4-GigabitEthernet0/0/2]quit //退出 [SW4]port-group group-member g0/0/3 to g0/0/5 //把g0/0/3到g0/0/5加入組中 [SW4-port-group]port link-type trunk //把組設置爲中繼模式 [SW4-port-group]port trunk allow-pass vlan all //設置屬於全部vlan [SW4-port-group]quit //退出
配置結果設計
a、建立vlan10-80
b、財務部access模式劃入vlan十、綜合辦access模式劃入vlan20
c、其餘鏈路爲trunk中繼模式3d
<Huawei>undo terminal monitor //關閉終端監控 <Huawei>system-view //進入系統模式 [Huawei]sysname SW1 //修更名稱爲SW1 [SW1]vlan batch 10 20 30 40 50 60 70 80 //建立vlan10-80 [SW1]int g0/0/4 //進入g0/0/4接口 [SW1-GigabitEthernet0/0/4]port link-type access //設置模式爲接入模式 [SW1-GigabitEthernet0/0/4]port default vlan 10 //加入vlan10 [SW1-GigabitEthernet0/0/4]int g0/0/5 //進入g0/0/5接口 [SW1-GigabitEthernet0/0/5]port link-type access //設置模式爲接入模式 [SW1-GigabitEthernet0/0/5]port default vlan 20 //加入vlan10 [SW1-GigabitEthernet0/0/5]quit //退出 [SW1]port-group group-member g0/0/2 g0/0/1 g0/0/3 g0/0/7 g0/0/6 //將g0/0/1-3和g0/0/6-7加入一個組 [SW1-port-group]port link-type trunk //給組設置爲中繼模式 [SW1-port-group]port trunk allow-pass vlan all //讓組加入全部vlan [SW1-port-group]quit //退出
a、建立vlan10-80
b、銷售部access模式劃入vlan80、採購部access模式劃入vlan70
c、其餘鏈路爲trunk中繼模式code
<Huawei>undo terminal monitor //關閉終端監控 <Huawei>system-view //進入系統模式 [Huawei]sysname SW2 //修更名稱爲SW2 [SW2]vlan batch 10 20 30 40 50 60 70 80 //建立vlan10-80 [SW2]int g0/0/4 //進入g0/0/4接口 [SW2-GigabitEthernet0/0/4]port link-type access //設置模式爲接入模式 [SW2-GigabitEthernet0/0/4]port default vlan 80 //加入vlan80 [SW2-GigabitEthernet0/0/4]int g0/0/5 //進入g0/0/5接口 [SW2-GigabitEthernet0/0/5]port link-type access //設置模式爲接入模式 [SW2-GigabitEthernet0/0/5]port default vlan 70 //加入vlan70 [SW2-GigabitEthernet0/0/5]quit //退出 [SW2]port-group group-member g0/0/2 g0/0/1 g0/0/3 g0/0/7 g0/0/6 //將g0/0/1-3和g0/0/6-7加入一個組 [SW2-port-group]port link-type trunk //給組設置爲中繼模式 [SW2-port-group]port trunk allow-pass vlan all //讓組加入全部vlan [SW2-port-group]quit //退出
a、在0/0/2父端口上使用單臂路由設置網關
b、如表,並設置vrrp,設置它爲vlan10-40的主路由
子接口 | 所屬vlan | 網關 | vrrp優先級 | 虛擬網關 |
---|---|---|---|---|
g0/0/2.10 | vlan10 | 192.168.10.254 | 200 | 192.168.10.250 |
g0/0/2.20 | vlan20 | 192.168.20.254 | 200 | 192.168.20.250 |
g0/0/2.30 | vlan30 | 192.168.30.254 | 200 | 192.168.30.250 |
g0/0/2.40 | vlan40 | 192.168.40.254 | 200 | 192.168.40.250 |
c、在0/0/1父端口上使用單臂路由設置網關 d、如表,並設置vrrp,設置它爲vlan50-80的副路由 |
子接口 | 所屬vlan | 網關 | vrrp優先級 | 虛擬網關 |
---|---|---|---|---|---|
g0/0/1.50 | vlan50 | 192.168.50.254 | 150 | 192.168.50.250 | |
g0/0/1.60 | vlan60 | 192.168.60.254 | 150 | 192.168.60.250 | |
g0/0/1.70 | vlan70 | 192.168.70.254 | 150 | 192.168.70.250 | |
g0/0/1.80 | vlan80 | 192.168.80.254 | 150 | 192.168.80.250 |
e、設置g0/0/0的ip地址:爲192.168.66.1/24
f、由於有dhcp服務器,與各個部門不在一個網段,因此每一個部門的網關都須要設置一下dhcp中繼,(dhcp IP地址192.168.99.1)
g、設置ospf,區域爲0區域,宣告網關192.168.66.0 0.0.0.25五、192.168.40.0 0.0.0.25五、192.168.10.0 0.0.0.25五、192.168.20.0 0.0.0.25五、192.168.30.0 0.0.0.25五、192.168.50.0 0.0.0.25五、192.168.60.0 0.0.0.25五、192.168.70.0 0.0.0.25五、192.168.80.0 0.0.0.255
<Huawei>undo terminal monitor //關閉終端監控 <Huawei>system-view //進入系統模式 [Huawei]sysname R1 //更更名稱爲R1 [R1]dhcp enable //開啓dhcp功能 [R1]int g0/0/2.10 //進入子端口g0/0/2.10 [R1-GigabitEthernet0/0/2.10]dot1q termination vid 10 //設置端口模式爲802.1q,加入vlan10 [R1-GigabitEthernet0/0/2.10]ip add 192.168.10.254 24 //設置vlan10 網關 [R1-GigabitEthernet0/0/2.10]arp broadcast enable //開啓arp廣播 [R1-GigabitEthernet0/0/2.10]vrrp vrid 1 virtual-ip 192.168.10.250 //開啓並設置虛擬網關爲192.168.10.250 ,虛擬組號爲1 [R1-GigabitEthernet0/0/2.10]vrrp vrid 1 priority 200 //設置優先級爲200 [R1-GigabitEthernet0/0/2.10]vrrp vrid 1 track interface GigabitEthernet 0/0/0 reduced 150 //設置端口跟蹤,跟蹤g0/0/0若是端口斷開優先級下降150 [R1-GigabitEthernet0/0/2.10]dhcp select relay //選擇dhcp中繼模式 [R1-GigabitEthernet0/0/2.10]dhcp relay server-ip 192.168.99.1 //設置中繼dhcp服務器爲192.168.99.1 [R1-GigabitEthernet0/0/2.10]quit //退出 [R1]int g0/0/2.20 //進入子端口g0/0/2.20 [R1-GigabitEthernet0/0/2.20]dot1q termination vid 20 //設置端口模式爲802.1q,加入vlan20 [R1-GigabitEthernet0/0/2.20]ip add 192.168.20.254 24 //設置vlan20 網關 [R1-GigabitEthernet0/0/2.20]arp broadcast enable //開啓arp廣播 [R1-GigabitEthernet0/0/2.20]vrrp vrid 2 virtual-ip 192.168.20.250 //開啓並設置虛擬網關爲192.168.20.250 ,虛擬組號爲2 [R1-GigabitEthernet0/0/2.20]vrrp vrid 2 priority 200 //設置優先級爲200 [R1-GigabitEthernet0/0/2.20]vrrp vrid 2 track interface g0/0/0 reduced 150 //設置端口跟蹤,跟蹤g0/0/0若是端口斷開優先級下降150 [R1-GigabitEthernet0/0/2.20]dhcp select relay //選擇dhcp中繼模式 [R1-GigabitEthernet0/0/2.20]dhcp relay server-ip 192.168.99.1 //設置中繼dhcp服務器爲192.168.99.1 [R1-GigabitEthernet0/0/2.20]quit //退出 [R1]int g0/0/2.30 //進入子端口g0/0/2.30 [R1-GigabitEthernet0/0/2.30]dot1q termination vid 30 //設置端口模式爲802.1q,加入vlan30 [R1-GigabitEthernet0/0/2.30]ip add 192.168.30.254 24 //設置vlan30 網關 [R1-GigabitEthernet0/0/2.30]arp broadcast enable //開啓arp廣播 [R1-GigabitEthernet0/0/2.30]vrrp vrid 3 virtual-ip 192.168.30.250//開啓並設置虛擬網關爲192.168.30.250 ,虛擬組號爲3 [R1-GigabitEthernet0/0/2.30]vrrp vrid 3 priority 200 //設置優先級爲200 [R1-GigabitEthernet0/0/2.30]vrrp vrid 3 track interface g0/0/0 reduced 150//設置端口跟蹤,跟蹤g0/0/0若是端口斷開優先級下降150 [R1-GigabitEthernet0/0/2.30]dhcp select relay //選擇dhcp中繼模式 [R1-GigabitEthernet0/0/2.30]dhcp relay server-ip 192.168.99.1 //設置中繼dhcp服務器爲192.168.99.1 [R1-GigabitEthernet0/0/2.30]quit //退出 [R1]int g0/0/2.40 //進入子端口g0/0/2.40 [R1-GigabitEthernet0/0/2.40]dot1q termination vid 40 //設置端口模式爲802.1q,加入vlan40 [R1-GigabitEthernet0/0/2.40]ip add 192.168.40.254 24 //設置vlan40 網關 [R1-GigabitEthernet0/0/2.40]arp broadcast enable //開啓arp廣播 [R1-GigabitEthernet0/0/2.40]vrrp vrid 4 virtual-ip 192.168.40.250 //開啓並設置虛擬網關爲192.168.40.250 ,虛擬組號爲4 [R1-GigabitEthernet0/0/2.40]vrrp vrid 4 priority 200 //設置優先級爲200 [R1-GigabitEthernet0/0/2.40]vrrp vrid 4 track interface g0/0/0 reduced 150 //設置端口跟蹤,跟蹤g0/0/0若是端口斷開優先級下降150 [R1-GigabitEthernet0/0/2.40]dhcp select relay //選擇dhcp中繼模式 [R1-GigabitEthernet0/0/2.40]dhcp relay server-ip 192.168.99.1 //設置中繼dhcp服務器爲192.168.99.1 [R1-GigabitEthernet0/0/2.40]quit //退出 [R1]int g0/0/1.50 //進入子端口g0/0/1.50 [R1-GigabitEthernet0/0/1.50]dot1q termination vid 50 //設置端口模式爲802.1q,加入vlan50 [R1-GigabitEthernet0/0/1.50]ip add 192.168.50.254 24 //設置vlan50 網關 [R1-GigabitEthernet0/0/1.50]arp broadcast enable //開啓arp廣播 [R1-GigabitEthernet0/0/1.50]vrrp vrid 5 virtual-ip 192.168.50.250 //開啓並設置虛擬網關爲192.168.50.250 ,虛擬組號爲5 [R1-GigabitEthernet0/0/1.50]vrrp vrid 5 priority 150 //設置優先級爲150 [R1-GigabitEthernet0/0/1.50]vrrp vrid 5 track interface g0/0/0 reduced 100 //設置端口跟蹤,跟蹤g0/0/0若是端口斷開優先級下降100 [R1-GigabitEthernet0/0/1.50]dhcp select relay //選擇dhcp中繼模式 [R1-GigabitEthernet0/0/1.50]dhcp relay server-ip 192.168.99.1 //設置中繼dhcp服務器爲192.168.99.1 [R1-GigabitEthernet0/0/1.50]quit //退出 [R1]int g0/0/1.60 //進入子端口g0/0/1.60 [R1-GigabitEthernet0/0/1.60]dot1q termination vid 60 //設置端口模式爲802.1q,加入vlan60 [R1-GigabitEthernet0/0/1.60]ip add 192.168.60.254 24 //設置vlan60 網關 [R1-GigabitEthernet0/0/1.60]arp broadcast enable //開啓arp廣播 [R1-GigabitEthernet0/0/1.60]vrrp vrid 6 virtual-ip 192.168.60.250 //開啓並設置虛擬網關爲192.168.60.250 ,虛擬組號爲6 [R1-GigabitEthernet0/0/1.60]vrrp vrid 6 priority 150 //設置優先級爲150 [R1-GigabitEthernet0/0/1.60]vrrp vrid 6 track interface g0/0/0 reduced 100//設置端口跟蹤,跟蹤g0/0/0若是端口斷開優先級下降100 [R1-GigabitEthernet0/0/1.60]dhcp select relay //選擇dhcp中繼模式 [R1-GigabitEthernet0/0/1.60]dhcp relay server-ip 192.168.99.1//設置中繼dhcp服務器爲192.168.99.1 [R1-GigabitEthernet0/0/1.60]quit //退出 [R1]int g0/0/1.70 //進入子端口g0/0/1.70 [R1-GigabitEthernet0/0/1.70]dot1q termination vid 70 //設置端口模式爲802.1q,加入vlan70 [R1-GigabitEthernet0/0/1.70]ip add 192.168.70.254 24 //設置vlan70 網關 [R1-GigabitEthernet0/0/1.70]arp broadcast enable //開啓arp廣播 [R1-GigabitEthernet0/0/1.70]vrrp vrid 7 virtual-ip 192.168.70.250//開啓並設置虛擬網關爲192.168.70.250 ,虛擬組號爲7 [R1-GigabitEthernet0/0/1.70]vrrp vrid 7 priority 150 //設置優先級爲150 [R1-GigabitEthernet0/0/1.70]vrrp vrid 7 track interface g0/0/0 reduced 100 //設置端口跟蹤,跟蹤g0/0/0若是端口斷開優先級下降100 [R1-GigabitEthernet0/0/1.70]dhcp select relay //選擇dhcp中繼模式 [R1-GigabitEthernet0/0/1.70]dhcp relay server-ip 192.168.99.1 //設置中繼dhcp服務器爲192.168.99.1 [R1-GigabitEthernet0/0/1.70]quit //退出 [R1]int g0/0/1.80 //進入子端口g0/0/1.80 [R1-GigabitEthernet0/0/1.80]dot1q termination vid 80 //設置端口模式爲802.1q,加入vlan80 [R1-GigabitEthernet0/0/1.80]ip add 192.168.80.254 24 //設置vlan80 網關 [R1-GigabitEthernet0/0/1.80]arp broadcast enable //開啓arp廣播 [R1-GigabitEthernet0/0/1.80]vrrp vrid 8 virtual-ip 192.168.80.250 //開啓並設置虛擬網關爲192.168.80.250 ,虛擬組號爲8 [R1-GigabitEthernet0/0/1.80]vrrp vrid 8 priority 150 //設置優先級爲150 [R1-GigabitEthernet0/0/1.80]vrrp vrid 8 track interface g0/0/0 reduced 100 //設置端口跟蹤,跟蹤g0/0/0若是端口斷開優先級下降100 [R1-GigabitEthernet0/0/1.80]dhcp select relay //選擇dhcp中繼模式 [R1-GigabitEthernet0/0/1.80]dhcp relay server-ip 192.168.99.1 //設置中繼dhcp服務器爲192.168.99.1 [R1-GigabitEthernet0/0/1.80]quit//退出 [R1]int g0/0/0 //進入端口g0/0/0 [R1-GigabitEthernet0/0/0]ip add 192.168.66.1 24 //設置ip [R1-GigabitEthernet0/0/0]quit //退出 [R1]ospf 1 //開啓並進入ospf,進程號1 [R1-ospf-1]area 0 //區域爲0 [R1-ospf-1-area-0.0.0.0]network 192.168.66.0 0.0.0.255 //宣告192.168.66.0網段 [R1-ospf-1-area-0.0.0.0]network 192.168.40.0 0.0.0.255//宣告192.168.40.0網段 [R1-ospf-1-area-0.0.0.0]network 192.168.10.0 0.0.0.255//宣告192.168.10.0網段 [R1-ospf-1-area-0.0.0.0]network 192.168.20.0 0.0.0.255//宣告192.168.20.0網段 [R1-ospf-1-area-0.0.0.0]network 192.168.30.0 0.0.0.255//宣告192.168.30.0網段 [R1-ospf-1-area-0.0.0.0]network 192.168.50.0 0.0.0.255//宣告192.168.50.0網段 [R1-ospf-1-area-0.0.0.0]network 192.168.60.0 0.0.0.255//宣告192.168.60.0網段 [R1-ospf-1-area-0.0.0.0]network 192.168.70.0 0.0.0.255//宣告192.168.70.0網段 [R1-ospf-1-area-0.0.0.0]network 192.168.80.0 0.0.0.255//宣告192.168.80.0網段 [R1-ospf-1-area-0.0.0.0]quit //退出 [R1-ospf-1]quit //退出
驗證[R1]display current-configuration
//常看全部配置
a、在0/0/2父端口上使用單臂路由設置網關
b、如表,並設置vrrp,設置它爲vlan10-40的副路由
子接口 | 所屬vlan | 網關 | vrrp優先級 | 虛擬網關 |
---|---|---|---|---|
g0/0/2.10 | vlan10 | 192.168.10.253 | 150 | 192.168.10.250 |
g0/0/2.20 | vlan20 | 192.168.20.253 | 150 | 192.168.20.250 |
g0/0/2.30 | vlan30 | 192.168.30.253 | 150 | 192.168.30.250 |
g0/0/2.40 | vlan40 | 192.168.40.253 | 150 | 192.168.40.250 |
c、在0/0/1父端口上使用單臂路由設置網關 d、如表,並設置vrrp,設置它爲vlan50-80的主路由 |
子接口 | 所屬vlan | 網關 | vrrp優先級 | 虛擬網關 |
---|---|---|---|---|---|
g0/0/1.50 | vlan50 | 192.168.50.253 | 200 | 192.168.50.250 | |
g0/0/1.60 | vlan60 | 192.168.60.253 | 200 | 192.168.60.250 | |
g0/0/1.70 | vlan70 | 192.168.70.253 | 200 | 192.168.70.250 | |
g0/0/1.80 | vlan80 | 192.168.80.253 | 200 | 192.168.80.250 |
e、設置g0/0/0的ip地址:爲192.168.88.1/24
f、由於有dhcp服務器,與各個部門不在一個網段,因此每一個部門的網關都須要設置一下dhcp中繼,(dhcp IP地址192.168.99.1)
g、設置ospf,區域爲0區域,宣告網關192.168.88.0 0.0.0.25五、192.168.40.0 0.0.0.25五、192.168.10.0 0.0.0.25五、192.168.20.0 0.0.0.25五、192.168.30.0 0.0.0.25五、192.168.50.0 0.0.0.25五、192.168.60.0 0.0.0.25五、192.168.70.0 0.0.0.25五、192.168.80.0 0.0.0.255
<Huawei>undo terminal monitor //關閉終端監控 <Huawei>system-view //進入系統模式 [Huawei]sysname R2 //更更名稱爲R2 [R2]dhcp enable //開啓dhcp功能 [R2]int g0/0/2.10 //進入子端口g0/0/2.10 [R2-GigabitEthernet0/0/2.10]dot1q termination vid 10 //設置端口模式爲802.1q,加入vlan10 [R2-GigabitEthernet0/0/2.10]ip add 192.168.10.253 24 //設置vlan10 網關 [R2-GigabitEthernet0/0/2.10]arp broadcast enable //開啓arp廣播 [R2-GigabitEthernet0/0/2.10]vrrp vrid 1 virtual-ip 192.168.10.250 //開啓並設置虛擬網關爲192.168.10.250 ,虛擬組號爲1 [R2-GigabitEthernet0/0/2.10]vrrp vrid 1 priority 150 //設置優先級爲150 [R2-GigabitEthernet0/0/2.10]vrrp vrid 1 track interface GigabitEthernet 0/0/0 reduced 100 //設置端口跟蹤,跟蹤g0/0/0若是端口斷開優先級下降100 [R2-GigabitEthernet0/0/2.10]dhcp select relay //選擇dhcp中繼模式 [R2-GigabitEthernet0/0/2.10]dhcp relay server-ip 192.168.99.1 //設置中繼dhcp服務器爲192.168.99.1 [R2-GigabitEthernet0/0/2.10]quit //退出 [R2]int g0/0/2.20 //進入子端口g0/0/2.20 [R2-GigabitEthernet0/0/2.20]dot1q termination vid 20 //設置端口模式爲802.1q,加入vlan20 [R2-GigabitEthernet0/0/2.20]ip add 192.168.20.253 24 //設置vlan20 網關 [R2-GigabitEthernet0/0/2.20]arp broadcast enable //開啓arp廣播 [R2-GigabitEthernet0/0/2.20]vrrp vrid 2 virtual-ip 192.168.20.250 //開啓並設置虛擬網關爲192.168.20.250 ,虛擬組號爲2 [R2-GigabitEthernet0/0/2.20]vrrp vrid 2 priority 150 //設置優先級爲150 [R2-GigabitEthernet0/0/2.20]vrrp vrid 2 track interface g0/0/0 reduced 100 //設置端口跟蹤,跟蹤g0/0/0若是端口斷開優先級下降100 [R2-GigabitEthernet0/0/2.20]dhcp select relay //選擇dhcp中繼模式 [R2-GigabitEthernet0/0/2.20]dhcp relay server-ip 192.168.99.1 //設置中繼dhcp服務器爲192.168.99.1 [R2-GigabitEthernet0/0/2.20]quit //退出 [R2]int g0/0/2.30 //進入子端口g0/0/2.30 [R2-GigabitEthernet0/0/2.30]dot1q termination vid 30 //設置端口模式爲802.1q,加入vlan30 [R2-GigabitEthernet0/0/2.30]ip add 192.168.30.253 24 //設置vlan30 網關 [R2-GigabitEthernet0/0/2.30]arp broadcast enable //開啓arp廣播 [R2-GigabitEthernet0/0/2.30]vrrp vrid 3 virtual-ip 192.168.30.250//開啓並設置虛擬網關爲192.168.30.250 ,虛擬組號爲3 [R2-GigabitEthernet0/0/2.30]vrrp vrid 3 priority 150 //設置優先級爲150 [R2-GigabitEthernet0/0/2.30]vrrp vrid 3 track interface g0/0/0 reduced 100//設置端口跟蹤,跟蹤g0/0/0若是端口斷開優先級下降100 [R2-GigabitEthernet0/0/2.30]dhcp select relay //選擇dhcp中繼模式 [R2-GigabitEthernet0/0/2.30]dhcp relay server-ip 192.168.99.1 //設置中繼dhcp服務器爲192.168.99.1 [R2-GigabitEthernet0/0/2.30]quit //退出 [R2]int g0/0/2.40 //進入子端口g0/0/2.40 [R2-GigabitEthernet0/0/2.40]dot1q termination vid 40 //設置端口模式爲802.1q,加入vlan40 [R2-GigabitEthernet0/0/2.40]ip add 192.168.40.253 24 //設置vlan40 網關 [R2-GigabitEthernet0/0/2.40]arp broadcast enable //開啓arp廣播 [R2-GigabitEthernet0/0/2.40]vrrp vrid 4 virtual-ip 192.168.40.250 //開啓並設置虛擬網關爲192.168.40.250 ,虛擬組號爲4 [R2-GigabitEthernet0/0/2.40]vrrp vrid 4 priority 150 //設置優先級爲150 [R2-GigabitEthernet0/0/2.40]vrrp vrid 4 track interface g0/0/0 reduced 100 //設置端口跟蹤,跟蹤g0/0/0若是端口斷開優先級下降100 [R2-GigabitEthernet0/0/2.40]dhcp select relay //選擇dhcp中繼模式 [R2-GigabitEthernet0/0/2.40]dhcp relay server-ip 192.168.99.1 //設置中繼dhcp服務器爲192.168.99.1 [R2-GigabitEthernet0/0/2.40]quit //退出 [R2]int g0/0/1.50 //進入子端口g0/0/1.50 [R2-GigabitEthernet0/0/1.50]dot1q termination vid 50 //設置端口模式爲802.1q,加入vlan50 [R2-GigabitEthernet0/0/1.50]ip add 192.168.50.253 24 //設置vlan50 網關 [R2-GigabitEthernet0/0/1.50]arp broadcast enable //開啓arp廣播 [R2-GigabitEthernet0/0/1.50]vrrp vrid 5 virtual-ip 192.168.50.250 //開啓並設置虛擬網關爲192.168.50.250 ,虛擬組號爲5 [R2-GigabitEthernet0/0/1.50]vrrp vrid 5 priority 200 //設置優先級爲200 [R2-GigabitEthernet0/0/1.50]vrrp vrid 5 track interface g0/0/0 reduced 150 //設置端口跟蹤,跟蹤g0/0/0若是端口斷開優先級下降150 [R2-GigabitEthernet0/0/1.50]dhcp select relay //選擇dhcp中繼模式 [R2-GigabitEthernet0/0/1.50]dhcp relay server-ip 192.168.99.1 //設置中繼dhcp服務器爲192.168.99.1 [R2-GigabitEthernet0/0/1.50]quit //退出 [R2]int g0/0/1.60 //進入子端口g0/0/1.60 [R2-GigabitEthernet0/0/1.60]dot1q termination vid 60 //設置端口模式爲802.1q,加入vlan60 [R2-GigabitEthernet0/0/1.60]ip add 192.168.60.253 24 //設置vlan60 網關 [R2-GigabitEthernet0/0/1.60]arp broadcast enable //開啓arp廣播 [R2-GigabitEthernet0/0/1.60]vrrp vrid 6 virtual-ip 192.168.60.250 //開啓並設置虛擬網關爲192.168.60.250 ,虛擬組號爲6 [R2-GigabitEthernet0/0/1.60]vrrp vrid 6 priority 200 //設置優先級爲200 [R2-GigabitEthernet0/0/1.60]vrrp vrid 6 track interface g0/0/0 reduced 150//設置端口跟蹤,跟蹤g0/0/0若是端口斷開優先級下降150 [R2-GigabitEthernet0/0/1.60]dhcp select relay //選擇dhcp中繼模式 [R2-GigabitEthernet0/0/1.60]dhcp relay server-ip 192.168.99.1//設置中繼dhcp服務器爲192.168.99.1 [R2-GigabitEthernet0/0/1.60]quit //退出 [R2]int g0/0/1.70 //進入子端口g0/0/1.70 [R2-GigabitEthernet0/0/1.70]dot1q termination vid 70 //設置端口模式爲802.1q,加入vlan70 [R2-GigabitEthernet0/0/1.70]ip add 192.168.70.253 24 //設置vlan70 網關 [R2-GigabitEthernet0/0/1.70]arp broadcast enable //開啓arp廣播 [R2-GigabitEthernet0/0/1.70]vrrp vrid 7 virtual-ip 192.168.70.250//開啓並設置虛擬網關爲192.168.70.250 ,虛擬組號爲7 [R2-GigabitEthernet0/0/1.70]vrrp vrid 7 priority 200 //設置優先級爲200 [R2-GigabitEthernet0/0/1.70]vrrp vrid 7 track interface g0/0/0 reduced 150 //設置端口跟蹤,跟蹤g0/0/0若是端口斷開優先級下降150 [R2-GigabitEthernet0/0/1.70]dhcp select relay //選擇dhcp中繼模式 [R2-GigabitEthernet0/0/1.70]dhcp relay server-ip 192.168.99.1 //設置中繼dhcp服務器爲192.168.99.1 [R2-GigabitEthernet0/0/1.70]quit //退出 [R2]int g0/0/1.80 //進入子端口g0/0/1.80 [R2-GigabitEthernet0/0/1.80]dot1q termination vid 80 //設置端口模式爲802.1q,加入vlan80 [R2-GigabitEthernet0/0/1.80]ip add 192.168.80.253 24 //設置vlan80 網關 [R2-GigabitEthernet0/0/1.80]arp broadcast enable //開啓arp廣播 [R2-GigabitEthernet0/0/1.80]vrrp vrid 8 virtual-ip 192.168.80.250 //開啓並設置虛擬網關爲192.168.80.250 ,虛擬組號爲8 [R2-GigabitEthernet0/0/1.80]vrrp vrid 8 priority 200//設置優先級爲200 [R2-GigabitEthernet0/0/1.80]vrrp vrid 8 track interface g0/0/0 reduced 150 //設置端口跟蹤,跟蹤g0/0/0若是端口斷開優先級下降150 [R2-GigabitEthernet0/0/1.80]dhcp select relay //選擇dhcp中繼模式 [R2-GigabitEthernet0/0/1.80]dhcp relay server-ip 192.168.99.1 //設置中繼dhcp服務器爲192.168.99.1 [R2-GigabitEthernet0/0/1.80]quit//退出 [R2]int g0/0/0 //進入端口g0/0/0 [R2-GigabitEthernet0/0/0]ip add 192.168.88.1 24 //設置ip [R2-GigabitEthernet0/0/0]quit //退出 [R2]ospf 1 //開啓並進入ospf,進程號1 [R2-ospf-1]area 0 //區域爲0 [R2-ospf-1-area-0.0.0.0]network 192.168.88.0 0.0.0.255 //宣告192.168.88.0網段 [R2-ospf-1-area-0.0.0.0]network 192.168.40.0 0.0.0.255//宣告192.168.40.0網段 [R2-ospf-1-area-0.0.0.0]network 192.168.10.0 0.0.0.255//宣告192.168.10.0網段 [R2-ospf-1-area-0.0.0.0]network 192.168.20.0 0.0.0.255//宣告192.168.20.0網段 [R2-ospf-1-area-0.0.0.0]network 192.168.30.0 0.0.0.255//宣告192.168.30.0網段 [R2-ospf-1-area-0.0.0.0]network 192.168.50.0 0.0.0.255//宣告192.168.50.0網段 [R2-ospf-1-area-0.0.0.0]network 192.168.60.0 0.0.0.255//宣告192.168.60.0網段 [R2-ospf-1-area-0.0.0.0]network 192.168.70.0 0.0.0.255//宣告192.168.70.0網段 [R2-ospf-1-area-0.0.0.0]network 192.168.80.0 0.0.0.255//宣告192.168.80.0網段 [R2-ospf-1-area-0.0.0.0]quit //退出 [R2-ospf-1]quit //退出
驗證[R2]display current-configuration
//常看全部配置
a、它的做用是起單層路由器的做用
b、設置5個vlan 分別爲valn6六、vlan8八、vlan9九、vlan77爲聯通使用、vlan55爲電信使用。
所屬vlan | ip設置 |
---|---|
valn66 | 192.168.66.2/24 |
vlan88 | 192.168.88.2/24 |
vlan99 | 192.168.99.2/24 |
vlan77 | 192.168.77.1/24 |
vlan55 | 192.168.55.1/24 |
c、設置ospf,區域爲0區域,宣告網關192.168.66.0 0.0.0.255 、192.168.88.0 0.0.0.25五、192.168.99.0 0.0.0.25五、192.168.77.0 0.0.0.25五、192.168.55.0 0.0.0.255
<Huawei>undo terminal monitor //關閉終端監控 <Huawei>system-view //進入系統模式 [Huawei]sysname SW5 //更更名稱爲SW5 [SW5]vlan batch 66 88 99 77 55 //建立vlan5五、6六、7七、8八、99 [SW5]int vlanif 66 //進入vlan66 [SW5-Vlanif66]ip add 192.168.66.2 24 //設置vlan66的網關ip [SW5-Vlanif66]int vlanif 88 //進入vlan88 [SW5-Vlanif88]ip add 192.168.88.2 24 //設置vlan88的網關ip [SW5-Vlanif88]int vlanif 99 //進入vlan99 [SW5-Vlanif99]ip add 192.168.99.2 24 //設置vlan99的網關ip [SW5-Vlanif99]int vlanif 77 //進入vlan77 [SW5-Vlanif77]ip add 192.168.77.1 24 //設置vlan77的網關ip [SW5-Vlanif77]int vlanif 55 //進入vlan55 [SW5-Vlanif55]ip add 192.168.55.1 24 //設置vlan55的網關ip [SW5-Vlanif55]quit //退出 [SW5]int g0/0/3 //進入端口g0/0/3 [SW5-GigabitEthernet0/0/3]port link-type access //設置接入模式 [SW5-GigabitEthernet0/0/3]port default vlan 66//劃入vlan66 [SW5-GigabitEthernet0/0/3]quit//退出 [SW5]int g0/0/4 //進入端口g0/0/4 [SW5-GigabitEthernet0/0/4]port link-type access //設置接入模式 [SW5-GigabitEthernet0/0/4]port default vlan 88//劃入vlan88 [SW5-GigabitEthernet0/0/4]quit//退出 [SW5]int g0/0/5 //進入端口g0/0/5 [SW5-GigabitEthernet0/0/5]port link-type access //設置接入模式 [SW5-GigabitEthernet0/0/5]port default vlan 99//劃入vlan99 [SW5-GigabitEthernet0/0/5]quit //退出 [SW5]int g0/0/1 //進入端口g0/0/1 [SW5-GigabitEthernet0/0/1]port link-type access //設置接入模式 [SW5-GigabitEthernet0/0/1]port default vlan 77 //劃入vlan77 [SW5-GigabitEthernet0/0/1]int g0/0/2 //進入端口g0/0/2 [SW5-GigabitEthernet0/0/2]port link-type access //設置接入模式 [SW5-GigabitEthernet0/0/2]port default vlan 55 //劃入vlan55 [SW5-GigabitEthernet0/0/2]quit //退出 [SW5]ospf 1 //開啓並進入ospf,進程號1 [SW5-ospf-1]area 0 ]area 0 //區域爲0 [SW5-ospf-1-area-0.0.0.0]network 192.168.66.0 0.0.0.255 //宣告192.168.66.0網段 [SW5-ospf-1-area-0.0.0.0]network 192.168.77.0 0.0.0.255 //宣告192.168.77.0網段 [SW5-ospf-1-area-0.0.0.0]network 192.168.55.0 0.0.0.255//宣告192.168.55.0網段 [SW5-ospf-1-area-0.0.0.0]network 192.168.88.0 0.0.0.255//宣告192.168.88.0網段 [SW5-ospf-1-area-0.0.0.0]network 192.168.99.0 0.0.0.255//宣告192.168.99.0網段 [SW5-ospf-1-area-0.0.0.0]quit //退出 [SW5-ospf-1]quit //退出
驗證:[SW5]display current-configuration //常看全部配置
a、這個三層交換機是公司的dhcp服務器
b、建立vlan99,並設置vlan99的ip地址
c、並開啓dhcp功能,建立vlan10-80的地址池
d、把g0/0/1劃入vlan99,在端口上開啓dhcp全局模式
e、設置ospf,區域爲0區域,宣告網關192.168.99.0 0.0.0.255
<Huawei>undo terminal monitor //關閉終端監控 <Huawei>system-view //進入系統模式 [Huawei]sysname SW6 //更更名稱爲SW6 [SW6]vlan 99 //建立vlan99 [SW6-vlan99]quit //退出 [SW6]int vlanif 99 //進入vlan99 [SW6-Vlanif99]ip add 192.168.99.1 24 //設置vlan99的ip [SW6-Vlanif99]quit //退出 [SW6]int g0/0/1 //進入g0/0/1端口 [SW6-GigabitEthernet0/0/1]port link-type access //設置接入模式 [SW6-GigabitEthernet0/0/1]port default vlan 99 //劃入vlan99 [SW6-GigabitEthernet0/0/1]quit //退出 [SW6]dhcp enable //開啓dhcp功能 [SW6]ip pool vlan10 //建立地址池vlan10 [SW6-ip-pool-vlan10]network 192.168.10.0 mask 255.255.255.0 //設置網段 [SW6-ip-pool-vlan10]gateway-list 192.168.10.250 //設置vlan10網關 [SW6-ip-pool-vlan10]dns-list 8.8.8.8 //設置dns地址 [SW6-ip-pool-vlan10]quit //退出 [SW6]ip pool vlan20 //建立地址池vlan20 [SW6-ip-pool-vlan20]network 192.168.20.0 mask 255.255.255.0 //設置網段 [SW6-ip-pool-vlan20]gateway-list 192.168.20.250 //設置vlan20網關 [SW6-ip-pool-vlan20]dns-list 8.8.8.8 //設置dns地址 [SW6-ip-pool-vlan20]quit //退出 [SW6]ip pool vlan30 //建立地址池vlan30 [SW6-ip-pool-vlan30]network 192.168.30.0 mask 255.255.255.0 //設置網段 [SW6-ip-pool-vlan30]gateway-list 192.168.30.250 //設置vlan30網關 [SW6-ip-pool-vlan30]dns-list 8.8.8.8 //設置dns地址 [SW6-ip-pool-vlan30]quit //退出 [SW6]ip pool vlan40 //建立地址池vlan40 [SW6-ip-pool-vlan40]network 192.168.40.0 mask 255.255.255.0 //設置網段 [SW6-ip-pool-vlan40]gateway-list 192.168.40.250 //設置vlan40網關 [SW6-ip-pool-vlan40]dns-list 8.8.8.8 //設置dns地址 [SW6-ip-pool-vlan40]quit //退出 [SW6]ip pool vlan50 //建立地址池vlan50 [SW6-ip-pool-vlan50]network 192.168.50.0 mask 255.255.255.0 //設置網段 [SW6-ip-pool-vlan50]gateway-list 192.168.50.250 //設置vlan50網關 [SW6-ip-pool-vlan50]dns-list 8.8.8.8 //設置dns地址 [SW6-ip-pool-vlan50]quit //退出 [SW6]ip pool vlan60 //建立地址池vlan60 [SW6-ip-pool-vlan60]network 192.168.60.0 mask 255.255.255.0 //設置網段 [SW6-ip-pool-vlan60]gateway-list 192.168.60.250 //設置vlan60網關 [SW6-ip-pool-vlan60]dns-list 8.8.8.8 //設置dns地址 [SW6-ip-pool-vlan60]quit //退出 [SW6]ip pool vlan70 //建立地址池vlan70 [SW6-ip-pool-vlan70]network 192.168.70.0 mask 255.255.255.0 //設置網段 [SW6-ip-pool-vlan70]gateway-list 192.168.70.250 //設置vlan70網關 [SW6-ip-pool-vlan70]dns-list 8.8.8.8 //設置dns地址 [SW6-ip-pool-vlan70]quit //退出 [SW6]ip pool vlan80 //建立地址池vlan80 [SW6-ip-pool-vlan80]network 192.168.80.0 mask 255.255.255.0 //設置網段 [SW6-ip-pool-vlan80]gateway-list 192.168.80.250 //設置vlan70網關 [SW6-ip-pool-vlan80]dns-list 8.8.8.8 //設置dns地址 [SW6-ip-pool-vlan80]quit //退出 [SW6]int vlanif 99 //進入vlan99 [SW6-Vlanif99]dhcp select global //開啓dhcp全局模式 [SW6-Vlanif99]quit //退出 [SW6]ospf 1 //開啓並進入ospf,進程號1 [SW6-ospf-1]area 0 //區域爲0 [SW6-ospf-1-area-0.0.0.0]network 192.168.99.0 0.0.0.255 //宣告192.168.99.0網段 [SW6-ospf-1-area-0.0.0.0]quit //退出 [SW6-ospf-1]quit //退出
驗證:[SW6]display current-configuration //查詢全部配置
最近一段時間感冒了(很是嚴重o_O),沒時間寫博客了,斷了一個星期,也不知道寫那些東西了。也沒什麼思路,想寫一些對本身有用的東西,但是遲遲不知道寫什麼。有個朋友想建立公司,因而我就給朋友做了個拓撲,我這技術估計純屬給朋友段亂的吧。。呵呵。。