綜合實驗1

實驗需求

總部

1.除了SW8和SW9是三層交換機，其他交換機均為二層交換機，需要做鏈路聚合的線路圖中已標(biāo)出。所有交換機的接口模式按照圖中標(biāo)出的位置。
思考問題：這個圖中有環(huán)路么？
2.GW為總部的出口設(shè)備，使用單臂路由技術(shù)，Vlan10，20，100的網(wǎng)關(guān)都在GW上。
3.總部、分支8、分支9之間互有專線連接。
目標(biāo)：GW、SW8、SW9之間建立ospf，互相宣告互為鄰居，進程號200，區(qū)域0，達到企業(yè)內(nèi)網(wǎng)全網(wǎng)互通。
4.在SW8和SW9建立的鄰居中，SW8的互聯(lián)接口要永遠為DR。
5.要求DHCP服務(wù)器在路由追蹤PC8時，路徑中必須包含SW9。

特性

6.Vlan10,20的PC均由DHCP服務(wù)器提供IP地址，DHCP服務(wù)器的地址池配置如下：
Vlan10：192.168.10.0/24 GW：192.168.10.254 DNS：8.8.8.8 租期：8天。
Vlan20：192.168.20.0/24 GW：192.168.20.254 DNS：8.8.8.8 租期：8天。
PC2是老板的PC，老板要求通過DHCP給他固定IP：192.168.20.100/24，其他與地址池一致。
由于員工區(qū)存在打印機，需要排除掉192.168.10.240-254 ， 192.168.20.240-254。
7.GW路由器使用NAT技術(shù)，配置Easy-IP技術(shù)讓內(nèi)部設(shè)備可以上網(wǎng)
在Internet路由器上使用環(huán)回接口模擬公網(wǎng)地址，讓所有PC可以ping通100.1.1.1。
8.服務(wù)器區(qū)有一臺HTTP服務(wù)器，將其80端口發(fā)布到Internet網(wǎng)絡(luò)，在Internet路由器上使用telnet 70.1.1.1 80 來驗證是否成功。

分支8

PC8配置靜態(tài)IP使PC8可以通過總部GW上網(wǎng)，ping 100.1.1.1。

分支9

PC9配置靜態(tài)IP使PC9可以通過總部GW上網(wǎng)，ping 100.1.1.1。

配置

一、 基本配置（IP+二層VLAN+鏈路聚合）

ACC_SW

[ACC_SW]vlan 200
[ACC_SW-Vlanif200]int g0/0/1
[ACC_SW-GigabitEthernet0/0/1]p l a
[ACC_SW-GigabitEthernet0/0/1]p d v 200
[ACC_SW-GigabitEthernet0/0/1]int Eth-Trunk 1
[ACC_SW-Eth-Trunk1]mode lacp-static
[ACC_SW-Eth-Trunk1]trunkport GigabitEthernet 0/0/2 to 0/0/3
[ACC_SW-Eth-Trunk1]p l t
[ACC_SW-Eth-Trunk1]p t a v a

SW-S1

[SW-S1]vlan 10
[SW-S1]int g0/0/2
[SW-S1-GigabitEthernet0/0/2]p l t
[SW-S1-GigabitEthernet0/0/2]p t a v a
[SW-S1]int g0/0/1
[SW-S1-GigabitEthernet0/0/2]p l a
[SW-S1-GigabitEthernet0/0/2]p d v 10

SW-S2

[SW-S2]vlan 20
[SW-S2]int g0/0/2
[SW-S2-GigabitEthernet0/0/2]p l t
[SW-S2-GigabitEthernet0/0/2]p t a v a
[SW-S2]int g0/0/1
[SW-S2-GigabitEthernet0/0/1]p l t
[SW-S2-GigabitEthernet0/0/1]p t a v 20
[SW-S2-GigabitEthernet0/0/1]port trunk pvid vlan 20

SW-Ser1

[SW-Ser1]vlan 100
[SW-Ser1]int g0/0/1
[SW-Ser1-GigabitEthernet0/0/1]port hybrid pvid vlan 100
[SW-Ser1-GigabitEthernet0/0/1]port hybrid untagged vlan 100
[SW-Ser1-GigabitEthernet0/0/1]int g0/0/2
[SW-Ser1-GigabitEthernet0/0/2]port hybrid pvid vlan 100
[SW-Ser1-GigabitEthernet0/0/2]port hybrid untagged vlan 100
[SW-Ser1-GigabitEthernet0/0/2]int g0/0/3
[SW-Ser1-GigabitEthernet0/0/3]port hybrid tagged vlan 100

SW-Core

[SW-Core]vlan batch 10 20 100 200 201 202
[SW-Core]int g0/0/6
[SW-Core-GigabitEthernet0/0/6]p l t
[SW-Core-GigabitEthernet0/0/6]p t a v a
[SW-Core-GigabitEthernet0/0/6]int g0/0/7
[SW-Core-GigabitEthernet0/0/7]p l t
[SW-Core-GigabitEthernet0/0/7]p t a v a
[SW-Core-GigabitEthernet0/0/7]int g0/0/8
[SW-Core-GigabitEthernet0/0/8]port hybrid tagged vlan 100
[SW-Core-GigabitEthernet0/0/8]int g0/0/1
[SW-Core-GigabitEthernet0/0/1]p l a
[SW-Core-GigabitEthernet0/0/1]p d v 201
[SW-Core-GigabitEthernet0/0/1]int g0/0/9
[SW-Core-GigabitEthernet0/0/9]p l a
[SW-Core-GigabitEthernet0/0/9]p d v 202
[SW-Core]int Eth-Trunk 1
[SW-Core-Eth-Trunk1]mode lacp-static
[SW-Core-Eth-Trunk1]trunkport GigabitEthernet 0/0/2 to 0/0/3
[SW-Core-Eth-Trunk1]p l t
[SW-Core-Eth-Trunk1]p t a v a
[SW-Core]int Eth-Trunk 2
[SW-Core-Eth-Trunk2]mode lacp-static
[SW-Core-Eth-Trunk2]trunkport GigabitEthernet 0/0/4 to 0/0/5
[SW-Core-Eth-Trunk2]p l t
[SW-Core-Eth-Trunk2]p t a v a
[SW-Core]undo stp enable

SW8

[SW8]vlan batch 80 201 203
[SW8]int g0/0/1
[SW8-GigabitEthernet0/0/1]p l a
[SW8-GigabitEthernet0/0/1]p d v 201
[SW8-GigabitEthernet0/0/1]int g0/0/2
[SW8-GigabitEthernet0/0/2]p l a
[SW8-GigabitEthernet0/0/2]p d v 80
[SW8-GigabitEthernet0/0/2]int g0/0/3
[SW8-GigabitEthernet0/0/3]p l a
[SW8-GigabitEthernet0/0/3]p d v 203

SW9

[SW9]vlan batch 90 202 203
[SW9]int g0/0/1
[SW9-GigabitEthernet0/0/1]p l a
[SW9-GigabitEthernet0/0/1]p d v 202
[SW9-GigabitEthernet0/0/1]int g0/0/3
[SW9-GigabitEthernet0/0/3]p l a
[SW9-GigabitEthernet0/0/3]p d v 203
[SW9-GigabitEthernet0/0/3]int g0/0/2
[SW9-GigabitEthernet0/0/2]p l a
[SW9-GigabitEthernet0/0/2]p d v 90

DHCP

[DHCP]vlan batch 10 20 80 90 100 200 201 202 203
[DHCP]int g0/0/0
[DHCP-GigabitEthernet0/0/0]ip add 192.168.100.100 24
[DHCP]ip route-static 0.0.0.0 0.0.0.0 192.168.100.254

ISP

[Internet]int LoopBack 0
[Internet-LoopBack0]ip add 100.1.1.1 32
[Internet-LoopBack0]int g0/0/0
[Internet-GigabitEthernet0/0/0]ip add 60.30.1.1 29

GW

[GW]vlan batch 10 20 100 200 201 202
[GW]int Eth-Trunk 2
[GW-Eth-Trunk2]undo portswitch
[GW-Eth-Trunk2]trunkport GigabitEthernet 0/0/0 to 0/0/1
[GW-Eth-Trunk2]mode lacp-static
[GW]int loopback 0
[GW-LoopBack0]ip add 1.1.1.1 32

二、 單臂路由

GW

[GW]int Eth-trunk 2.10
[GW-Eth-Trunk2.10]d t v 10
[GW-Eth-Trunk2.10]ip add 192.168.10.254 24
[GW-Eth-Trunk2.10]a b e
[GW-Eth-Trunk2.10]int Eth-trunk 2.20
[GW-Eth-Trunk2.20]d t v 20
[GW-Eth-Trunk2.20]ip add 192.168.20.254 24
[GW-Eth-Trunk2.20]a b e
[GW-Eth-Trunk2.20]int Eth-trunk 2.100
[GW-Eth-Trunk2.100]d t v 100
[GW-Eth-Trunk2.100]ip add 192.168.100.254 24
[GW-Eth-Trunk2.100]a b e
[GW-Eth-Trunk2.100]int Eth-trunk 2.200
[GW-Eth-Trunk2.200]description toISP
[GW-Eth-Trunk2.200]d t v 200
[GW-Eth-Trunk2.200]ip add 60.30.1.2 29
[GW-Eth-Trunk2.200]a b e
[GW-Eth-Trunk2.200]int Eth-trunk 2.201
[GW-Eth-Trunk2.201]description toSW8
[GW-Eth-Trunk2.201]d t v 201
[GW-Eth-Trunk2.201]ip add 192.168.201.1 24
[GW-Eth-Trunk2.201]a b e
[GW-Eth-Trunk2.201]int Eth-trunk 2.202
[GW-Eth-Trunk2.202]d t v 202
[GW-Eth-Trunk2.202]ip add 192.168.202.1 24
[GW-Eth-Trunk2.202]a b e

三、 vlanif

SW8

[SW8]undo stp enable
[SW8]int loopback 0
[SW8-LoopBack0]ip add 8.8.8.8 32
[SW8]int vlanif 201
[SW8-vlanif201]ip add 192.168.201.2 24
[SW8-vlanif201]int vlanif 80
[SW8-vlanif80]ip add 192.168.80.254 24

SW9

[SW9]undo stp enable
[SW9]int loopback 0
[SW9-LoopBack0]ip add 9.9.9.9 32
[SW9]int vlanif 202
[SW9-vlanif202]ip add 192.168.202.2 24
[SW9-vlanif202]int vlanif 90
[SW9-vlanif90]ip add 192.168.90.254 24

四、 OSPF

SW8

[SW8]ospf 200 router-id 8.8.8.8
[SW8-ospf-200]area 0
[SW8-ospf-200-area-0.0.0.0]network 192.168.201.0 0.0.0.255
[SW8-ospf-200-area-0.0.0.0]network 192.168.203.0 0.0.0.255
[SW8-ospf-200-area-0.0.0.0]network 192.168.80.0 0.0.0.255
[SW8-ospf-200-area-0.0.0.0]network 8.8.8.8 0.0.0.0
[SW8]int vlanif 203
[SW8]ospf dr-priority 255 #永遠為DR

SW9

[SW9]ospf 200 router-id 9.9.9.9
[SW9-ospf-200]area 0
[SW9-ospf-200-area-0.0.0.0]network 192.168.202.0 0.0.0.255
[SW9-ospf-200-area-0.0.0.0]network 192.168.203.0 0.0.0.255
[SW9-ospf-200-area-0.0.0.0]network 192.168.90.0 0.0.0.255
[SW9-ospf-200-area-0.0.0.0]network 9.9.9.9 0.0.0.0

GW

[GW]ospf 200 router-id 1.1.1.1
[GW-ospf-200]area 0
[GW-ospf-200-area-0.0.0.0]network 192.168.201.0 0.0.0.255
[GW-ospf-200-area-0.0.0.0]network 192.168.202.0 0.0.0.255
[GW-ospf-200-area-0.0.0.0]network 1.1.1.1 0.0.0.0
[GW-ospf-200-area-0.0.0.0]network 192.168.10.0 0.0.0.255
[GW-ospf-200-area-0.0.0.0]network 192.168.20.0 0.0.0.255
[GW-ospf-200-area-0.0.0.0]network 192.168.100.0 0.0.0.255
[GW]int Eth-trunk 2.201
[GW-Eth-Trunk2.201]ospf cost 3 #更改cost值用來改變路徑

五、 DHCP

DHCP

[DHCP]dhcp enable
[DHCP]ip pool VLAN10
[DHCP-ip-pool-VLAN10]network 192.168.10.0 mask 24
[DHCP-ip-pool-VLAN10]gateway-list 192.168.10.254
[DHCP-ip-pool-VLAN10]dns-list 8.8.8.8
[DHCP-ip-pool-VLAN10]lease day 8
[DHCP-ip-pool-VLAN10]excluded-ip-address 192.168.10.240 192.168.10.253
[DHCP-ip-pool-VLAN10]ip pool VLAN20
[DHCP-ip-pool-VLAN20]network 192.168.20.0 mask 24
[DHCP-ip-pool-VLAN20]gateway-list 192.168.20.254
[DHCP-ip-pool-VLAN20]dns-list 8.8.8.8
[DHCP-ip-pool-VLAN20]lease day 8
[DHCP-ip-pool-VLAN20]static-bind ip-address 192.168.20.100 mac-address 5489-9806-68e7
[DHCP-ip-pool-VLAN20]excluded-ip-address 192.168.20.240 192.168.20.253
[DHCP-ip-pool-VLAN20]int g0/0/0
[DHCP-g0/0/0]dhcp select global

GW

[GW]dhcp enable
[GW]int Eth-Trunk 2.10
[GW-Eth-Trunk2.10]dhcp select relay
[GW-Eth-Trunk2.10]dhcp relay server-ip 192.168.100.100
[GW-Eth-Trunk2.10]int Eth-Trunk 2.20
[GW-Eth-Trunk2.20]dhcp select relay
[GW-Eth-Trunk2.20]dhcp relay server-ip 192.168.100.100

六、 NAT+缺省路由

GW

[GW]acl 2000
[GW-acl-basic-2000]rule permit source any
[GW]int Eth-Trunk 2.200
[GW-Eth-Trunk2.200]nat outbound 2000
[GW]ip route-static 0.0.0.0 0.0.0.0 60.30.1.1
SW8:ip route-static 0.0.0.0 0.0.0.0 192.168.201.1
SW9:ip route-static 0.0.0.0 0.0.0.0 192.168.202.1

七、 HTTP

GW

[GW]int Eth-Trunk 2.200
[GW-Eth-Trunk2.200]nat server protocol tcp global 70.1.1.1 80 inside 192.168.100.101 80
Internet:ip route-static 70.1.1.1 32 60.30.1.2