综合实验1

实验需求

总部

1.除了SW8和SW9是三层交换机，其他交换机均为二层交换机，需要做链路聚合的线路图中已标出。所有交换机的接口模式按照图中标出的位置。
思考问题：这个图中有环路么？
2.GW为总部的出口设备，使用单臂路由技术，Vlan10，20，100的网关都在GW上。
3.总部、分支8、分支9之间互有专线连接。
目标：GW、SW8、SW9之间建立ospf，互相宣告互为邻居，进程号200，区域0，达到企业内网全网互通。
4.在SW8和SW9建立的邻居中，SW8的互联接口要永远为DR。
5.要求DHCP服务器在路由追踪PC8时，路径中必须包含SW9。

特性

6.Vlan10,20的PC均由DHCP服务器提供IP地址，DHCP服务器的地址池配置如下：
Vlan10：192.168.10.0/24 GW：192.168.10.254 DNS：8.8.8.8 租期：8天。
Vlan20：192.168.20.0/24 GW：192.168.20.254 DNS：8.8.8.8 租期：8天。
PC2是老板的PC，老板要求通过DHCP给他固定IP：192.168.20.100/24，其他与地址池一致。
由于员工区存在打印机，需要排除掉192.168.10.240-254 ， 192.168.20.240-254。
7.GW路由器使用NAT技术，配置Easy-IP技术让内部设备可以上网
在Internet路由器上使用环回接口模拟公网地址，让所有PC可以ping通100.1.1.1。
8.服务器区有一台HTTP服务器，将其80端口发布到Internet网络，在Internet路由器上使用telnet 70.1.1.1 80 来验证是否成功。

分支8

PC8配置静态IP使PC8可以通过总部GW上网，ping 100.1.1.1。

分支9

PC9配置静态IP使PC9可以通过总部GW上网，ping 100.1.1.1。

配置

一、 基本配置（IP+二层VLAN+链路聚合）

ACC_SW

[ACC_SW]vlan 200
[ACC_SW-Vlanif200]int g0/0/1
[ACC_SW-GigabitEthernet0/0/1]p l a
[ACC_SW-GigabitEthernet0/0/1]p d v 200
[ACC_SW-GigabitEthernet0/0/1]int Eth-Trunk 1
[ACC_SW-Eth-Trunk1]mode lacp-static
[ACC_SW-Eth-Trunk1]trunkport GigabitEthernet 0/0/2 to 0/0/3
[ACC_SW-Eth-Trunk1]p l t
[ACC_SW-Eth-Trunk1]p t a v a

SW-S1

[SW-S1]vlan 10
[SW-S1]int g0/0/2
[SW-S1-GigabitEthernet0/0/2]p l t
[SW-S1-GigabitEthernet0/0/2]p t a v a
[SW-S1]int g0/0/1
[SW-S1-GigabitEthernet0/0/2]p l a
[SW-S1-GigabitEthernet0/0/2]p d v 10

SW-S2

[SW-S2]vlan 20
[SW-S2]int g0/0/2
[SW-S2-GigabitEthernet0/0/2]p l t
[SW-S2-GigabitEthernet0/0/2]p t a v a
[SW-S2]int g0/0/1
[SW-S2-GigabitEthernet0/0/1]p l t
[SW-S2-GigabitEthernet0/0/1]p t a v 20
[SW-S2-GigabitEthernet0/0/1]port trunk pvid vlan 20

SW-Ser1

[SW-Ser1]vlan 100
[SW-Ser1]int g0/0/1
[SW-Ser1-GigabitEthernet0/0/1]port hybrid pvid vlan 100
[SW-Ser1-GigabitEthernet0/0/1]port hybrid untagged vlan 100
[SW-Ser1-GigabitEthernet0/0/1]int g0/0/2
[SW-Ser1-GigabitEthernet0/0/2]port hybrid pvid vlan 100
[SW-Ser1-GigabitEthernet0/0/2]port hybrid untagged vlan 100
[SW-Ser1-GigabitEthernet0/0/2]int g0/0/3
[SW-Ser1-GigabitEthernet0/0/3]port hybrid tagged vlan 100

SW-Core

[SW-Core]vlan batch 10 20 100 200 201 202
[SW-Core]int g0/0/6
[SW-Core-GigabitEthernet0/0/6]p l t
[SW-Core-GigabitEthernet0/0/6]p t a v a
[SW-Core-GigabitEthernet0/0/6]int g0/0/7
[SW-Core-GigabitEthernet0/0/7]p l t
[SW-Core-GigabitEthernet0/0/7]p t a v a
[SW-Core-GigabitEthernet0/0/7]int g0/0/8
[SW-Core-GigabitEthernet0/0/8]port hybrid tagged vlan 100
[SW-Core-GigabitEthernet0/0/8]int g0/0/1
[SW-Core-GigabitEthernet0/0/1]p l a
[SW-Core-GigabitEthernet0/0/1]p d v 201
[SW-Core-GigabitEthernet0/0/1]int g0/0/9
[SW-Core-GigabitEthernet0/0/9]p l a
[SW-Core-GigabitEthernet0/0/9]p d v 202
[SW-Core]int Eth-Trunk 1
[SW-Core-Eth-Trunk1]mode lacp-static
[SW-Core-Eth-Trunk1]trunkport GigabitEthernet 0/0/2 to 0/0/3
[SW-Core-Eth-Trunk1]p l t
[SW-Core-Eth-Trunk1]p t a v a
[SW-Core]int Eth-Trunk 2
[SW-Core-Eth-Trunk2]mode lacp-static
[SW-Core-Eth-Trunk2]trunkport GigabitEthernet 0/0/4 to 0/0/5
[SW-Core-Eth-Trunk2]p l t
[SW-Core-Eth-Trunk2]p t a v a
[SW-Core]undo stp enable

SW8

[SW8]vlan batch 80 201 203
[SW8]int g0/0/1
[SW8-GigabitEthernet0/0/1]p l a
[SW8-GigabitEthernet0/0/1]p d v 201
[SW8-GigabitEthernet0/0/1]int g0/0/2
[SW8-GigabitEthernet0/0/2]p l a
[SW8-GigabitEthernet0/0/2]p d v 80
[SW8-GigabitEthernet0/0/2]int g0/0/3
[SW8-GigabitEthernet0/0/3]p l a
[SW8-GigabitEthernet0/0/3]p d v 203

SW9

[SW9]vlan batch 90 202 203
[SW9]int g0/0/1
[SW9-GigabitEthernet0/0/1]p l a
[SW9-GigabitEthernet0/0/1]p d v 202
[SW9-GigabitEthernet0/0/1]int g0/0/3
[SW9-GigabitEthernet0/0/3]p l a
[SW9-GigabitEthernet0/0/3]p d v 203
[SW9-GigabitEthernet0/0/3]int g0/0/2
[SW9-GigabitEthernet0/0/2]p l a
[SW9-GigabitEthernet0/0/2]p d v 90

DHCP

[DHCP]vlan batch 10 20 80 90 100 200 201 202 203
[DHCP]int g0/0/0
[DHCP-GigabitEthernet0/0/0]ip add 192.168.100.100 24
[DHCP]ip route-static 0.0.0.0 0.0.0.0 192.168.100.254

ISP

[Internet]int LoopBack 0
[Internet-LoopBack0]ip add 100.1.1.1 32
[Internet-LoopBack0]int g0/0/0
[Internet-GigabitEthernet0/0/0]ip add 60.30.1.1 29

GW

[GW]vlan batch 10 20 100 200 201 202
[GW]int Eth-Trunk 2
[GW-Eth-Trunk2]undo portswitch
[GW-Eth-Trunk2]trunkport GigabitEthernet 0/0/0 to 0/0/1
[GW-Eth-Trunk2]mode lacp-static
[GW]int loopback 0
[GW-LoopBack0]ip add 1.1.1.1 32

二、 单臂路由

GW

[GW]int Eth-trunk 2.10
[GW-Eth-Trunk2.10]d t v 10
[GW-Eth-Trunk2.10]ip add 192.168.10.254 24
[GW-Eth-Trunk2.10]a b e
[GW-Eth-Trunk2.10]int Eth-trunk 2.20
[GW-Eth-Trunk2.20]d t v 20
[GW-Eth-Trunk2.20]ip add 192.168.20.254 24
[GW-Eth-Trunk2.20]a b e
[GW-Eth-Trunk2.20]int Eth-trunk 2.100
[GW-Eth-Trunk2.100]d t v 100
[GW-Eth-Trunk2.100]ip add 192.168.100.254 24
[GW-Eth-Trunk2.100]a b e
[GW-Eth-Trunk2.100]int Eth-trunk 2.200
[GW-Eth-Trunk2.200]description toISP
[GW-Eth-Trunk2.200]d t v 200
[GW-Eth-Trunk2.200]ip add 60.30.1.2 29
[GW-Eth-Trunk2.200]a b e
[GW-Eth-Trunk2.200]int Eth-trunk 2.201
[GW-Eth-Trunk2.201]description toSW8
[GW-Eth-Trunk2.201]d t v 201
[GW-Eth-Trunk2.201]ip add 192.168.201.1 24
[GW-Eth-Trunk2.201]a b e
[GW-Eth-Trunk2.201]int Eth-trunk 2.202
[GW-Eth-Trunk2.202]d t v 202
[GW-Eth-Trunk2.202]ip add 192.168.202.1 24
[GW-Eth-Trunk2.202]a b e

三、 vlanif

SW8

[SW8]undo stp enable
[SW8]int loopback 0
[SW8-LoopBack0]ip add 8.8.8.8 32
[SW8]int vlanif 201
[SW8-vlanif201]ip add 192.168.201.2 24
[SW8-vlanif201]int vlanif 80
[SW8-vlanif80]ip add 192.168.80.254 24

SW9

[SW9]undo stp enable
[SW9]int loopback 0
[SW9-LoopBack0]ip add 9.9.9.9 32
[SW9]int vlanif 202
[SW9-vlanif202]ip add 192.168.202.2 24
[SW9-vlanif202]int vlanif 90
[SW9-vlanif90]ip add 192.168.90.254 24

四、 OSPF

SW8

[SW8]ospf 200 router-id 8.8.8.8
[SW8-ospf-200]area 0
[SW8-ospf-200-area-0.0.0.0]network 192.168.201.0 0.0.0.255
[SW8-ospf-200-area-0.0.0.0]network 192.168.203.0 0.0.0.255
[SW8-ospf-200-area-0.0.0.0]network 192.168.80.0 0.0.0.255
[SW8-ospf-200-area-0.0.0.0]network 8.8.8.8 0.0.0.0
[SW8]int vlanif 203
[SW8]ospf dr-priority 255 #永远为DR

SW9

[SW9]ospf 200 router-id 9.9.9.9
[SW9-ospf-200]area 0
[SW9-ospf-200-area-0.0.0.0]network 192.168.202.0 0.0.0.255
[SW9-ospf-200-area-0.0.0.0]network 192.168.203.0 0.0.0.255
[SW9-ospf-200-area-0.0.0.0]network 192.168.90.0 0.0.0.255
[SW9-ospf-200-area-0.0.0.0]network 9.9.9.9 0.0.0.0

GW

[GW]ospf 200 router-id 1.1.1.1
[GW-ospf-200]area 0
[GW-ospf-200-area-0.0.0.0]network 192.168.201.0 0.0.0.255
[GW-ospf-200-area-0.0.0.0]network 192.168.202.0 0.0.0.255
[GW-ospf-200-area-0.0.0.0]network 1.1.1.1 0.0.0.0
[GW-ospf-200-area-0.0.0.0]network 192.168.10.0 0.0.0.255
[GW-ospf-200-area-0.0.0.0]network 192.168.20.0 0.0.0.255
[GW-ospf-200-area-0.0.0.0]network 192.168.100.0 0.0.0.255
[GW]int Eth-trunk 2.201
[GW-Eth-Trunk2.201]ospf cost 3 #更改cost值用来改变路径

五、 DHCP

DHCP

[DHCP]dhcp enable
[DHCP]ip pool VLAN10
[DHCP-ip-pool-VLAN10]network 192.168.10.0 mask 24
[DHCP-ip-pool-VLAN10]gateway-list 192.168.10.254
[DHCP-ip-pool-VLAN10]dns-list 8.8.8.8
[DHCP-ip-pool-VLAN10]lease day 8
[DHCP-ip-pool-VLAN10]excluded-ip-address 192.168.10.240 192.168.10.253
[DHCP-ip-pool-VLAN10]ip pool VLAN20
[DHCP-ip-pool-VLAN20]network 192.168.20.0 mask 24
[DHCP-ip-pool-VLAN20]gateway-list 192.168.20.254
[DHCP-ip-pool-VLAN20]dns-list 8.8.8.8
[DHCP-ip-pool-VLAN20]lease day 8
[DHCP-ip-pool-VLAN20]static-bind ip-address 192.168.20.100 mac-address 5489-9806-68e7
[DHCP-ip-pool-VLAN20]excluded-ip-address 192.168.20.240 192.168.20.253
[DHCP-ip-pool-VLAN20]int g0/0/0
[DHCP-g0/0/0]dhcp select global

GW

[GW]dhcp enable
[GW]int Eth-Trunk 2.10
[GW-Eth-Trunk2.10]dhcp select relay
[GW-Eth-Trunk2.10]dhcp relay server-ip 192.168.100.100
[GW-Eth-Trunk2.10]int Eth-Trunk 2.20
[GW-Eth-Trunk2.20]dhcp select relay
[GW-Eth-Trunk2.20]dhcp relay server-ip 192.168.100.100

六、 NAT+缺省路由

GW

[GW]acl 2000
[GW-acl-basic-2000]rule permit source any
[GW]int Eth-Trunk 2.200
[GW-Eth-Trunk2.200]nat outbound 2000
[GW]ip route-static 0.0.0.0 0.0.0.0 60.30.1.1
SW8:ip route-static 0.0.0.0 0.0.0.0 192.168.201.1
SW9:ip route-static 0.0.0.0 0.0.0.0 192.168.202.1

七、 HTTP

GW

[GW]int Eth-Trunk 2.200
[GW-Eth-Trunk2.200]nat server protocol tcp global 70.1.1.1 80 inside 192.168.100.101 80
Internet:ip route-static 70.1.1.1 32 60.30.1.2