下圖為綜合項目示例圖,詳細命令見圖下:
屏蔽垃圾信息
undo terminal monitor
undo terminal trapping
undo terminal logging
undo terminal debugging
save
給三層和普通交換機之間相連接的所有接口配置TRUNK
port-group 1
group-member g0/0/1 g0/0/2 g0/0/3 g0/0/4 g0/0/5
port link-type trunk
port trunk allow-pass vlan all
普通交換機,
vlan batch 10 20 30 40
interface Ethernet 0/0/1
port link-type access
port default vlan 10 20 30 40
interface Ethernet 0/0/2 .. 0/0/5
port link-type turnk ...
創建VLAN,三層交換機1
vlan batch 10 20 30 40
interface Vlanif 10
ip address 192.168.10.252 24
interface Vlanif 20
ip address 192.168.20.252 24
interface Vlanif 30
ip address 192.168.30.252 24
interface Vlanif 40
ip address 192.168.40.252 24
創建VLAN,三層交換機2
vlan batch 10 20 30 40
interface Vlanif 10
ip address 192.168.10.253 24
interface Vlanif 20
ip address 192.168.20.253 24
interface Vlanif 30
ip address 192.168.30.253 24
interface Vlanif 40
ip address 192.168.40.253 24
配置vrrp,給三層交換機配置,記得vrid要區別
in vl10
vrrp vrid 1 virtual-ip 192.168.10.254
vrrp vrid 1 priority 105
in vl20
vrrp vrid 2 virtual-ip 192.168.20.254
vrrp vrid 2 priority 105
in vl30
vrrp vrid 3 virtual-ip 192.168.30.254
in vl40
vrrp vrid 4 virtual-ip 192.168.40.254
給另一台三層交換機配置
in vl10
vrrp vrid 1 virtual-ip 192.168.10.254
in vl20
vrrp vrid 2 virtual-ip 192.168.20.254
in vl30
vrrp vrid 3 virtual-ip 192.168.30.254
vrrp vrid 3 priority 105
in vl40
vrrp vrid 4 virtual-ip 192.168.40.254
vrrp vrid 4 priority 105
三層交換,添加新的VLAN並配地址
三層LSW1
valn 50
interface Vlanif 50
ip address 192.168.50.2 24
interface GigabitEthernet 0/0/7
port link-type access
port default vlan 50
valn 70
interface Vlanif 70
ip address 192.168.70.2 24
interface GigabitEthernet 0/0/8
port link-type access
port default vlan 70
三層LSW2
valn 80
interface Vlanif 80
ip address 192.168.80.2 24
interface GigabitEthernet 0/0/7
port link-type access
port default vlan 80
valn 60
interface Vlanif 60
ip address 192.168.60.2 24
interface GigabitEthernet 0/0/8
port link-type access
port default vlan 60
路由器AR1
interface GigabitEthernet 0/0/0
ip address 192.168.50.1 24
interface GigabitEthernet 0/0/1
ip address 192.168.60.1 24
路由器AR2
interface GigabitEthernet 0/0/0
ip address 192.168.80.1 24
interface GigabitEthernet 0/0/1
ip address 192.168.70.1 24
動態路由:路由器,三層交換機都設置,所有連接的網段
ospf
area 0
network 192.168.10.0 0.0.0.255
network 192.168.20.0 0.0.0.255
network 192.168.30.0 0.0.0.255
network 192.168.40.0 0.0.0.255
network 192.168.60.0 0.0.0.255
network 192.168.80.0 0.0.0.255
新加交換機,代替外網
interface Vlanif 1
ip address 100.0.0.10 8
路由器設置:EasyIP
路由器AR1、AR2 acl+nat
acl 2000
rule permit source any
interface GigabitEthernet 0/0/2 進入外網接口
nat outbound 2000
對路由器設置,配置默認路由
ip route-static 0.0.0.0 0 100.0.0.10
(或者宣告路由,在ospf中宣告
default-route-advertise )
或者在兩台三層上設置下一跳地址
ip route-static 0.0.0.0 0 192.168.50.1
三層vrid 設置出錯刪除
in vl10
undo vrrp vrid 1
in vl20
undo vrrp vrid 2
in vl30
undo vrrp vrid 3
in vl40
undo vrrp vrid 4