Top

  1. 基础交换网络设计
  2. 内网优化
  3. 连接外网服务器

1 基础交换网络设计

1.1 需求

1）公司有三个部门，为确保通信安全，每个部门都处于独立的广播域

2）每个 部门的 IP 地址规划为： 192.168.xx.0/24

3）每个 部门的主机均通过为 DHCP 服务器获取 IP 地址，并且每个部门的网关 IP 地址为 192.168.xx.254

1.2 方案

使用 eNSP 搭建实验环境，如图 - 1 所示。

CASE - 图1

图 - 1

1.3 步骤

实现此案例需要按照如下步骤进行。

步骤一：配置二层交换机

  3. 1.  <Huawei>undo terminal monitor
  4. 2.  <Huawei>system-view
  5. 3.  \[Huawei\]sysname sw1
  7. 5.  \[sw1\]vlan batch 10 20 30  50
  9. 7.  \[sw1\]interface e0/0/1
  10. 8.  \[sw1-Ethernet0/0/1\]port link-type access 
  11. 9.  \[sw1-Ethernet0/0/1\]port default vlan 10
  13. 11.  \[sw1\]interface e0/0/2
  14. 12.  \[sw1-Ethernet0/0/2\]port link-type trunk 
  15. 13.  \[sw1-Ethernet0/0/2\]port trunk allow-pass vlan all
  16. 14.  <Huawei>undo terminal monitor
  17. 15.  <Huawei>system-view
  18. 16.  \[Huawei\]sysname sw2
  20. 18.  \[sw2\]vlan batch 10 20 30  50
  22. 20.  \[sw2\]interface e0/0/1
  23. 21.  \[sw2-Ethernet0/0/1\]port link-type access 
  24. 22.  \[sw2-Ethernet0/0/1\]port default vlan 20
  26. 24.  \[sw2\]interface e0/0/2
  27. 25.  \[sw2-Ethernet0/0/2\]port link-type trunk
  28. 26.  \[sw2-Ethernet0/0/2\]port trunk allow-pass vlan all
  29. 27.  <Huawei>undo terminal monitor
  30. 28.  <Huawei>system-view
  31. 29.  \[Huawei\]sysname sw3
  33. 31.  \[sw3\]vlan batch 10 20 30  50
  35. 33.  \[sw3\]interface e0/0/1
  36. 34.  \[sw3-Ethernet0/0/1\]port link-type access 
  37. 35.  \[sw3-Ethernet0/0/1\]port default vlan 30
  39. 37.  \[sw3\]interface e0/0/2
  40. 38.  \[sw3-Ethernet0/0/2\]port link-type trunk
  41. 39.  \[sw3-Ethernet0/0/2\]port trunk allow-pass vlan all

步骤二：配置三层交换机

  3. 1.  <Huawei>undo terminal monitor
  4. 2.  <Huawei>system-view
  5. 3.  \[Huawei\]sysname sw5
  7. 5.  \[sw5\]vlan batch 10 20 30 50
  9. 7.  \[sw5\]port-group group-member g0/0/1 to g0/0/3
  10. 8.  \[sw5-port-group\]port link-type trunk
  11. 9.  \[sw5-port-group\]port trunk allow-pass vlan all
  13. 11.  \[sw5\]interface g0/0/5
  14. 12.  \[sw5-GigabitEthernet0/0/5\]port link-type access
  15. 13.  \[sw5-GigabitEthernet0/0/5\]port default vlan 50
  17. 15.  \[sw5\]int Vlanif 10
  18. 16.  \[sw5-Vlanif10\]ip address 192.168.10.251 24
  19. 17.  \[sw5\]int Vlanif 20
  20. 18.  \[sw5-Vlanif20\]ip address 192.168.20.251 24
  21. 19.  \[sw5\]int Vlanif 30
  22. 20.  \[sw5-Vlanif30\]ip address 192.168.30.251 24
  23. 21.  \[sw5\]int Vlanif 50
  24. 22.  \[sw5-Vlanif50\]ip address 192.168.50.251 24

步骤三：配置 DHCP 服务器

  3. 1.  <Huawei>undo terminal monitor
  4. 2.  <Huawei>system-view
  5. 3.  \[Huawei\]sysname dhcp
  7. 5.  \[dhcp\]dhcp enable
  9. 7.  \[dhcp\]ip pool vlan10
  10. 8.  \[dhcp-ip-pool-vlan10\]network 192.168.10.0 mask 24
  11. 9.  \[dhcp-ip-pool-vlan10\]gateway-list 192.168.10.254
  12. 10.  \[dhcp\]ip pool vlan20
  13. 11.  \[dhcp-ip-pool-vlan20\]network 192.168.20.0 mask 24
  14. 12.  \[dhcp-ip-pool-vlan20\]gateway-list 192.168.20.254
  15. 13.  \[dhcp\]ip pool vlan30
  16. 14.  \[dhcp-ip-pool-vlan30\]network 192.168.30.0 mask 24
  17. 15.  \[dhcp-ip-pool-vlan30\]gateway-list 192.168.30.254
  19. 17.  \[dhcp\]int g0/0/0
  20. 18.  \[dhcp-GigabitEthernet0/0/0\]ip address 192.168.50.1 24
  21. 19.  \[dhcp-GigabitEthernet0/0/0\]dhcp select global
  23. 21.  \[dhcp\]ip route-static 0.0.0.0 0 192.168.50.251

步骤四：配置 DHCP 中继代理

  3. 1.  \[sw5\]dhcp enable
  5. 3.  \[sw5\]int Vlanif 10
  6. 4.  \[sw5-Vlanif10\]dhcp select relay
  7. 5.  \[sw5-Vlanif10\]dhcp relay server-ip 192.168.50.1
  9. 7.  \[sw5\]int Vlanif 20
  10. 8.  \[sw5-Vlanif20\]dhcp select relay
  11. 9.  \[sw5-Vlanif20\]dhcp relay server-ip 192.168.50.1
  13. 11.  \[sw5\]int Vlanif 30
  14. 12.  \[sw5-Vlanif30\]dhcp select relay
  15. 13.  \[sw5-Vlanif30\]dhcp relay server-ip 192.168.50.1

步骤四：测试客户机

使用 ipconfig 命令测试

2 内网优化

2.1 问题

1）所有部门中都使用了网关冗余技术，为了增强网关稳定性和冗余性

2）交换机之间存在很多冗余链路，必须防止环路的发生，并且能够提高链路的利用率

3）要求每个部门的主机访问其他主机时，使用的都是最优的转发路径

2.2 方案

使用 eNSP 搭建实验环境，如图 - 2 所示。

CASE - 图2

图 - 2

2.3 步骤

实现此案例需要按照如下步骤进行。

1）配置 sw6

  3. 1.  <Huawei>undo terminal monitor
  4. 2.  <Huawei>system-view
  5. 3.  \[Huawei\]sysname sw6
  7. 5.  \[sw6\]vlan batch 10 20 30  50
  9. 7.  \[sw6\]port-group group-member gi0/0/1 to gi0/0/3 gi0/0/6
  10. 8.  \[sw6-port-group\]port link-type trunk
  11. 9.  \[sw6-port-group\]port trunk allow-pass vlan all
  13. 11.  \[sw6\]int Vlanif 10
  14. 12.  \[sw6-Vlanif10\]ip address 192.168.10.252 24
  15. 13.  \[sw6\]int Vlanif 20
  16. 14.  \[sw6-Vlanif20\]ip address 192.168.20.252 24
  17. 15.  \[sw6\]int Vlanif 30
  18. 16.  \[sw6-Vlanif30\]ip address 192.168.30.252 24

2）配置 sw5

  3. 1.  \[sw5\]int g0/0/6
  4. 2.  \[sw5-GigabitEthernet0/0/6\]port link-type trunk
  5. 3.  \[sw5-GigabitEthernet0/0/6\]port trunk allow-pass vlan all

3）配置 sw1/sw2/sw3 与 sw6 相连的端口为 trunk 模式

  3. 1.  \[sw1\]int e0/0/3
  4. 2.  \[sw1-Ethernet0/0/3\]port link-type trunk
  5. 3.  \[sw1-Ethernet0/0/3\]port trunk allow-pass vlan all
  7. 5.  \[sw2\]int e0/0/3
  8. 6.  \[sw2-Ethernet0/0/3\]port link-type trunk
  9. 7.  \[sw2-Ethernet0/0/3\]port trunk allow-pass vlan all
  11. 9.  \[sw3\]int e0/0/3
  12. 10.  \[sw3-Ethernet0/0/3\]port link-type trunk
  13. 11.  \[sw3-Ethernet0/0/3\]port trunk allow-pass vlan all

4）配置 VRRP 协议

  3. 1.  \[sw5\]int Vlanif 10
  4. 2.  \[sw5-Vlanif10\]vrrp vrid 10 virtual-ip 192.168.10.254
  5. 3.  \[sw5-Vlanif10\]vrrp vrid 10 priority 200
  7. 5.  \[sw5\]int Vlanif 20
  8. 6.  \[sw5-Vlanif20\]vrrp vrid 20 virtual-ip 192.168.20.254
  9. 7.  \[sw5-Vlanif20\]vrrp vrid 20 priority 200
  11. 9.  \[sw5\]int Vlanif 30
  12. 10.  \[sw5-Vlanif30\]vrrp vrid 10 virtual-ip 192.168.30.254
  14. 14.  \[sw6\]int Vlanif 10
  15. 15.  \[sw6-Vlanif10\]vrrp vrid 10 virtual-ip 192.168.10.254
  17. 17.  \[sw6\]int Vlanif 20
  18. 18.  \[sw6-Vlanif20\]vrrp vrid 20 virtual-ip 192.168.20.254
  20. 20.  \[sw6\]int Vlanif 30
  21. 21.  \[sw6-Vlanif30\]vrrp vrid 30 virtual-ip 192.168.30.254
  22. 22.  \[sw6-Vlanif30\]vrrp vrid 30 priority 200

5）验证 VRRP 状态

  3. 1.  \[sw5\]display vrrp brief                 //查看VRRP协议信息
  4. 2.  VRID  State        Interface                Type     Virtual IP     
  5. 3.  \-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-
  6. 4.  10    Master       Vlanif10                 Normal   192.168.10.254 
  7. 5.  20    Master       Vlanif20                 Normal   192.168.20.254 
  8. 6.  30    Backup       Vlanif30                 Normal   192.168.30.254 
  10. 9.  \[sw6\]display vrrp brief 
  11. 10.  VRID  State        Interface                Type     Virtual IP     
  12. 11.  \-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-
  13. 12.  10    Backup       Vlanif10                 Normal   192.168.10.254 
  14. 13.  20    Backup       Vlanif20                 Normal   192.168.20.254 
  15. 14.  30    Master       Vlanif30                 Normal   192.168.30.254 
  16. 15.  \-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-

5）配置 SW6 为 vlan10/20/30 的 DHCP 中继

  3. 1.  \[sw6\]dhcp enable
  5. 3.  \[sw6\]int Vlanif 10
  6. 4.  \[sw6-Vlanif10\]dhcp select relay
  7. 5.  \[sw6-Vlanif10\]dhcp relay server-ip 192.168.50.1
  9. 7.  \[sw6\]int Vlanif 20
  10. 8.  \[sw6-Vlanif20\]dhcp select relay
  11. 9.  \[sw6-Vlanif20\]dhcp relay server-ip 192.168.50.1
  13. 11.  \[sw6\]int Vlanif 30
  14. 12.  \[sw6-Vlanif30\]dhcp select relay
  15. 13.  \[sw6-Vlanif30\]dhcp relay server-ip 192.168.50.1
  17. 15.  \[sw6\]int Vlanif 50
  18. 16.  \[sw6-Vlanif50\]ip address 192.168.50.252 24

6）sw1/sw2/sw3/sw5/sw6 MSTP 基本配置

  3. 1.      stp region-configuration
  4. 2.      region-name ntd
  5. 3.      instance 10 vlan 10
  6. 4.      instance 20 vlan 20
  7. 5.      instance 30 vlan 30
  8. 6.      active region-configuration

7）指定每个生成树实例的主根网桥和备份根网桥

  3. 1.  \[sw5\]stp instance 10 priority 0
  4. 2.  \[sw5\]stp instance 20 priority 0
  5. 3.  \[sw5\]stp instance 30 priority 4096
  7. 5.  \[sw6\]stp instance 10 priority 4096
  8. 6.  \[sw6\]stp instance 20 priority 4096
  9. 7.  \[sw6\]stp instance 30 priority 0

3 连接外网服务器

3.1 问题

1）公司有一个出口设备 R1，连接一台外网的 Web 服务器

2）内网大量主机都需要访问这台外网的 Web 服务器

3.2 方案

使用 eNSP 搭建实验环境，如图 - 3 所示。

CASE - 图3

图 - 3

3.3 步骤

实现此案例需要按照如下步骤进行。

1）配置 sw5

  3. 1.  \[sw5\]vlan 15
  4. 2.  \[sw5\]int g0/0/7
  5. 3.  \[sw5-GigabitEthernet0/0/7\]port link-type access
  6. 4.  \[sw5-GigabitEthernet0/0/7\]port default vlan 15
  7. 5.  \[sw5\]int Vlanif 15
  8. 6.  \[sw5-Vlanif15\]ip address 192.168.15.5 24
  10. 8.  \[sw5\]ip route-static 0.0.0.0 0 192.168.15.1

2）配置 sw6

  3. 1.  \[sw6\]vlan 16
  4. 2.  \[sw6-vlan16\]q
  5. 3.  \[sw6\]int g0/0/7
  6. 4.  \[sw6-GigabitEthernet0/0/7\]port link-type access
  7. 5.  \[sw6-GigabitEthernet0/0/7\]port default vlan 16
  8. 6.  \[sw6-GigabitEthernet0/0/7\]quit
  9. 7.  \[sw6\]int vlanif 16
  10. 8.  \[sw6-Vlanif16\]ip address 192.168.16.6 24
  11. 9.  \[sw6-Vlanif16\]quit
  13. 11.  \[sw6\]ip route-static 0.0.0.0 0 192.168.16.1

3）配置 r1

  3. 1.  <Huawei>undo terminal monitor 
  4. 2.  <Huawei>system-view
  5. 3.  \[Huawei\]sysname r1
  6. 4.  \[r1\]interface g0/0/0
  7. 5.  \[r1-GigabitEthernet0/0/0\]ip address 192.168.15.1 24
  9. 7.  \[r1-\]interface g0/0/1
  10. 8.  \[r1-GigabitEthernet0/0/1\]ip address 192.168.16.1 24
  12. 10.  \[r1-\]interface g0/0/2
  13. 11.  \[r1-GigabitEthernet0/0/2\]ip address 100.1.1.1 24
  15. 13.  \[r1\]ip route-static 192.168.10.0 24 192.168.15.5 
  16. 14.  \[r1\]ip route-static 192.168.10.0 24 192.168.16.6 preference 100
  17. 15.  \[r1\]ip route-static 192.168.20.0 24 192.168.15.5
  18. 16.  \[r1\]ip route-static 192.168.20.0 24 192.168.16.6 preference 100
  20. 18.  \[r1\]ip route-static 192.168.30.0 24 192.168.16.6 
  21. 19.  \[r1\]ip route-static 192.168.30.0 24 192.168.15.5 preference 100
  23. 21.  \[r1\]ip route-static 200.1.1.0 24 100.1.1.2

4）配置 r2

  3. 1.  <Huawei>undo terminal monitor
  4. 2.  <Huawei>system-view
  5. 3.  \[Huawei\]sysname r2
  6. 4.  \[r2\]interface g0/0/2
  7. 5.  \[r2-GigabitEthernet0/0/2\]ip address 100.1.1.2 24
  9. 7.  \[r2-\]interface g0/0/1
  10. 8.  \[r2-GigabitEthernet0/0/1\]ip address 200.1.1.254 24
  12. 10.  \[r2\]ip route-static 192.168.0.0 16 100.1.1.1

5）配置外网服务器，如图 - 4 所示。

CASE - 图4

图 - 4
https://tts.tmooc.cn/ttsPage/NTD/NTDTN202109/TCNA/DAY07/CASE/01/index.html