这个项目主要实现思路关键点之独孤九剑：
Ip地址的规范
接口对应表的整理
主次关系的整理
分清楚什么是二层技术什么是三层技术
对于相同的预配置先在记事本写好，利用crt直接粘贴复制，这样节省时间和提高效率。
几种交换协议的一句话理解：
Vtp 是用来简化vlan 的配置，思科专有。公有GVRP.
Vtp 配置方法：两台交换机之间用trunk 相连，配置服务端与客户端，配置相同的密码，
域名，版本。服务器配置版本高于客户机。
Stp pvst mst 生成树，快速生成树，多生成树。
生成树是用来防止二层环路，三层环路用路由协议来防环。原理是通过阻塞一条链路来防环。
Pvst 工程中主要用来对不同vlan 做冗余备份。
Mst 是pvst 的升级版，通过不同实例给vlan 做冗余备分。
HSRR VRRP GLBP 是用来给网关提供冗余备份。
通过使作几个不同的组达到给不同vlan 提供冗余备份作用。
Ospf rip eigrp 将不同的vlan 的子网消息宣告出去。
如果trunk 有两线，一定要放到二层组中。
具体代码如下：
1）路由交换预配置
en
clock set 8:00:00 28 june 2016 \\记住这个在现实生活中非常重要，因为很多时间不对的话
查看日志信息可能会有问题
conf t
host r1
clock timezone GTM 8 \\设置时区
line c 0 \\进入控制台
logg sy \\日志同步,以免日志把正常输入打乱
no ip domain-lookup \\关掉域名解析功能,不然打错命令会等待30秒
enable password luliechu@123456 \\明文密码
enable secret luliechu@147258 \\密文密码更安全，同时明文密码无效
username luliechu privilege 3 secret luliechu@147258 \\本地用户名和密码并且赋予权限
line vty 0 4 \\开启远程终端
password luliechu@123456 \\vty密码
login local \\允许登录方式为本地用户验证
end
write \\保存配置命令
R2
en
clock set 8:00:00 28 june 2016
conf t
host r2
clock timezone GTM 8
line c 0
logg sy
no ip domain-lookup
enable password luliechu@123456
enable secret luliechu@147258
username luliechu privilege 3 secret luliechu@147258
line vty 0 4
password luliechu@123456
login local
end
write
IOU1
en
clock set 8:00:00 28 june 2016
conf t
host SW1
clock timezone GTM 8
line c 0
logg sy
no ip domain-lookup
enable password luliechu@123456
enable secret luliechu@147258
username luliechu privilege 3 secret luliechu@147258
line vty 0 4
password luliechu@123456
login local
end
write
IOU2
en
clock set 8:00:00 28 june 2016
conf t
host SW2
clock timezone GTM 8
line c 0
logg sy
no ip domain-lookup
enable password luliechu@123456
enable secret luliechu@147258
username luliechu privilege 3 secret luliechu@147258
line vty 0 4
password luliechu@123456
login local
end
write
IOU3
en
clock set 8:00:00 28 june 2016
conf t
host SW3
clock timezone GTM 8
line c 0
logg sy
no ip domain-lookup
enable password luliechu@123456
enable secret luliechu@147258
username luliechu privilege 3 secret luliechu@147258
line vty 0 4
password luliechu@123456
login local
end
write
IOU4
en
clock set 8:00:00 28 june 2016
conf t
host SW4
clock timezone GTM 8
line c 0
logg sy
no ip domain-lookup
enable password luliechu@123456
enable secret luliechu@147258
username luliechu privilege 3 secret luliechu@147258
line vty 0 4
password luliechu@123456
login local
end
write
IOU5
en
clock set 8:00:00 28 june 2016
conf t
host SW5
clock timezone GTM 8
line c 0
logg sy
no ip domain-lookup
enable password luliechu@123456
enable secret luliechu@147258
username luliechu privilege 3 secret luliechu@147258
line vty 0 4
password luliechu@123456
login local
end
write
IOU6
en
clock set 8:00:00 28 june 2016
conf t
host SW6
clock timezone GTM 8
line c 0
logg sy
no ip domain-lookup
enable password luliechu@123456
enable secret luliechu@147258
username luliechu privilege 3 secret luliechu@147258
line vty 0 4
password luliechu@123456
login local
end
write
2）将交换机所有需要加入到tr链路的端口加入进来
Iou1
//把所需使用vtp协议的端口线路更改为trunk模式
en
conf t
int rang f0/1-8
sw tr en d //在pt中不需要，真实环境和iou中都要加
sw mo tr
//创建vtp并把这台交换机设为server模式
conf t
vtp dom ccie
vtp mod server
vtp pruning // //在pt中不支持这命令，真实环境和iou中都支持这样节省带宽开销
End
//创建vlan
conf t
vlan 10
vlan 20
vlan 30
vlan 40
vlan 50
vlan 60
vlan 70
vlan 80
Vlan 100
End
//创建管理地址，方便管理员管理
conf t
int vlan 100
ip add 192.168.9.1 255.255.255.0
no shut
End
//设置vtp版本密码(为了安全起见)
conf t
vtp pass lu@123
vtp ver 2
End
//创建二层组，使用以太网端口聚合技术，实现高速负载分流
conf t
int rang f0/1-4
Channel-protocol lacp
channel-g 1 mode active
end
//Mst 是pvst 的升级版，通过不同实例给vlan 做冗余备分。创建了两个实例1 2，分别将vlan10-80加入到对应实例，并设置主从，实现不同实例的冗余备份
conf t
spanning-tree mode mst //在pt中不支持mst，只能用rstp来实现了，现实生活和iou上都支持
spanning-tree mst configu
instance 1 vlan 10,20,30,40
revision 1
instance 2 vlan 50,60,70,80
revision 1
exit
spanning-tree mst 1 root primary
spanning-tree mst 2 root secondary
End
En
Conf t
Spanning-tree mode rap
spanning-tree vlan 10,20,30,40 root primary
spanning-tree vlan 50,60,70,80 root seconday
End
//为不同vlan划分网关，实现不同vlan基于三层交换机的路由互通
conf t
int vlan 10
ip add 192.168.1.2 255.255.255.0
no shut
int vlan 20
ip add 192.168.2.2 255.255.255.0
no shut
int vlan 30
ip add 192.168.3.2 255.255.255.0
no shut
int vlan 40
ip add 192.168.4.2 255.255.255.0
no shut
int vlan 50
ip add 192.168.5.2 255.255.255.0
no shut
int vlan 60
ip add 192.168.6.2 255.255.255.0
no shut
int vlan 70
ip add 192.168.7.2 255.255.255.0
no shut
int vlan 80
ip add 192.168.8.2 255.255.255.0
no shut
End
//配置hsrp实现网关高可用性，sw1是vlan10，20,30,40-的主网关，是50,60,70,80 的备用网关。
Sw2是vlan50,60,70,80的主网关，是10，20,30,40 的备网关。
注意State is Active 为主网关
State is Standby 为备网关
conf t
int vlan 10
standby 10 ip 192.168.1.1
standby 10 priority 105
standby 10 preempt
standby 10 track g0/1
end
conf t
int vlan 20
standby 20 ip 192.168.2.1
standby 20 priority 105
standby 20 preempt
standby 20 track g0/1
end
conf t
int vlan 30
standby 30 ip 192.168.3.1
standby 30 priority 105
standby 30 preempt
standby 30 track g0/1
end
conf t
int vlan 40
standby 40 ip 192.168.4.1
standby 40 priority 105
standby 40 preempt
standby 40 track g0/1
end
conf t
int vlan 50
standby 50 ip 192.168.5.1
standby 50 priority 100
standby 50 preempt
standby 50 track g0/1
end
conf t
int vlan 60
standby 60 ip 192.168.6.1
standby 60 priority 100
standby 60 preempt
standby 60 track g0/1
end
conf t
int vlan 70
standby 70 ip 192.168.7.1
standby 70 priority 100
standby 70 preempt
standby 70 track g0/1
end
conf t
int vlan 80
standby 80 ip 192.168.8.1
standby 80 priority 100
standby 80 preempt
standby 80 track g0/1
end
write
3）配置dhcp
ip dhcp excluded-address 192.168.1.1
ip dhcp excluded-address 192.168.1.2
ip dhcp excluded-address 192.168.1.3
ip dhcp pool vlan10
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 202.96.128.86
Exit
ip dhcp excluded-address 192.168.2.1
ip dhcp excluded-address 192.168.2.2
ip dhcp excluded-address 192.168.2.3
ip dhcp pool vlan20
network 192.168.2.0 255.255.255.0
default-router 192.168.2.1
dns-server 202.96.128.86
exit
ip dhcp excluded-address 192.168.3.1
ip dhcp excluded-address 192.168.3.2
ip dhcp excluded-address 192.168.3.3
ip dhcp pool vlan30
network 192.168.3.0 255.255.255.0
default-router 192.168.3.1
dns-server 202.96.128.86
exit
ip dhcp excluded-address 192.168.4.1
ip dhcp excluded-address 192.168.4.2
ip dhcp excluded-address 192.168.4.3
ip dhcp pool vlan40
network 192.168.4.0 255.255.255.0
default-router 192.168.4.1
dns-server 202.96.128.86
exit
ip dhcp excluded-address 192.168.5.1
ip dhcp excluded-address 192.168.5.2
ip dhcp excluded-address 192.168.5.3
ip dhcp pool vlan50
network 192.168.5.0 255.255.255.0
default-router 192.168.5.1
dns-server 202.96.128.86
exit
ip dhcp excluded-address 192.168.6.1
ip dhcp excluded-address 192.168.6.2
ip dhcp excluded-address 192.168.6.3
ip dhcp pool vlan60
network 192.168.6.0 255.255.255.0
default-router 192.168.6.1
dns-server 202.96.128.86
ip dhcp excluded-address 192.168.7.1
ip dhcp excluded-address 192.168.7.2
ip dhcp excluded-address 192.168.7.3
ip dhcp pool vlan70
network 192.168.7.0 255.255.255.0
default-router 192.168.7.1
dns-server 202.96.128.86
exit
ip dhcp excluded-address 192.168.8.1
ip dhcp excluded-address 192.168.8.2
ip dhcp excluded-address 192.168.8.3
ip dhcp pool vlan80
network 192.168.8.0 255.255.255.0
default-router 192.168.8.1
dns-server 202.96.128.86
end