中小型企业网络架构实验

                             中小型企业网络架构综合实验

 一、实验目的：

         熟练掌握中小型企业网络架构的基本配置和原理

 

 二、实验器材：

         华为交换机10台、华为路由器5台、主机若干

三、实验要求：

1.r1 g0/0/0所连子网为192.168.1.0/24,这个子网需要分割为4个小网段，分别给四个部门的主机来使用，其中销售部90台主机，生产部50台主机，财务部15台主机，人事部26台主机。
2.规划sw1,sw2,sw3三台交换机的mstp协议，让vlan10、vlan20的主机使用sw1做为根网桥，使用sw2为备用根网桥，vlan30、vlan40使用sw2做为根网桥，使用sw1为备用根网桥
3.vlan10-vlan40可以通过r1进行通信，并通过r1从dhcp服务器获得IP地址
4.sw10 g0/0/1所连子网为192.168.2.0/24,这个子网需要分割为4个小网段，分别给四个部门的主机来使用，其中IT部60台主机，研发部30台主机，培训部6台主机，人事部2台主机。
5.规划sw4,sw5,sw6三台交换机的mstp协议，让vlan50、vlan60的主机使用sw3做为根网桥，使用sw1为备用根网桥，vlan70、vlan80使用sw1做为根网桥，使用sw3为备用根网桥
6.配置sw10为dhcp服务器，为所有网段分配IP地址
7.vlan50-vlan80使用sw10进行访问
8.r2的g0/0/0所连子网为192.168.3.0/24,这个子网需要分割为4个小网段，分别给四个部门的
主机来使用，其中天部28台主机，地部29台主机，人部59台主机，仙部99台主机。
9.规划sw7,sw8,sw9三台交换机的mstp协议，让vlan90、vlan100的主机使用sw2做为根网桥，使用sw3为备用根网桥，vlan110、vlan120使用sw3做为根网桥，使用sw2为备用根网桥.
10.vlan80-vlan120可以通过r2进行通信，并通过r2从dhcp服务器获得IP地址.
11.为r3,r4,r5设置适当的静态路由，确保全网互通,并在设置静态路由的时候适当的进行IP汇总。

四、实验拓扑图

五、实验步骤：

1）、路由器R1配置信息：

[V200R003C00]
#
 sysname r1

dhcp enable
#
aaa 
 authentication-scheme default
 authorization-scheme default
 accounting-scheme default
 domain default 
 domain default_admin 
 local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
 local-user admin service-type http
#
firewall zone Local
 priority 15

interface GigabitEthernet0/0/0
#
interface GigabitEthernet0/0/0.1
 dot1q termination vid 10
 ip address 192.168.1.126 255.255.255.128 
 arp broadcast enable
 dhcp select relay
 dhcp relay server-ip 192.168.7.2
#
interface GigabitEthernet0/0/0.2
 dot1q termination vid 20
 ip address 192.168.1.190 255.255.255.192 
 arp broadcast enable
 dhcp select relay
 dhcp relay server-ip 192.168.7.2
#
interface GigabitEthernet0/0/0.3
 dot1q termination vid 30
 ip address 192.168.1.193 255.255.255.224 
 arp broadcast enable
 dhcp select relay
 dhcp relay server-ip 192.168.7.2
#
interface GigabitEthernet0/0/0.4
 dot1q termination vid 40
 ip address 192.168.1.254 255.255.255.224 
 arp broadcast enable
 dhcp select relay
 dhcp relay server-ip 192.168.7.2
#
interface GigabitEthernet0/0/1
 ip address 192.168.6.1 255.255.255.0 
#
interface NULL0
#
rip 1
 network 192.168.1.0
 network 192.168.6.0
2）、路由器R3配置信息：

interface GigabitEthernet0/0/0
 ip address 192.168.6.2 255.255.255.0 
#
interface GigabitEthernet0/0/1
 ip address 192.168.4.1 255.255.255.0 
#
interface NULL0
#
rip 1
 network 192.168.6.0
 network 192.168.4.0

3）、交换机SW1配置信息：

#
sysname s1
#
vlan batch 10 20 30 40
#
stp instance 1 priority 4096
stp instance 2 priority 8192
#
stp region-configuration
 region-name abc
 instance 1 vlan 10 20 
 instance 2 vlan 30 40 
 active region-configuration
#
interface Ethernet0/0/1
 port link-type access
 port default vlan 10
#
interface Ethernet0/0/2
 port link-type access
 port default vlan 20
#
interface Ethernet0/0/3
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
#
interface Ethernet0/0/4
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
#
port-group 1
 group-member Ethernet0/0/3
 group-member Ethernet0/0/4
四）、交换机SW2配置信息：
sysname s2
#
vlan batch 10 20 30 40
#
stp instance 1 priority 4096
stp instance 2 priority 8192
#
stp region-configuration
 region-name abc
 instance 1 vlan 30 40 
 instance 2 vlan 10 20 
 active region-configuration
#
interface Ethernet0/0/1
 port link-type access
 port default vlan 30
#
interface Ethernet0/0/2
 port link-type access
 port default vlan 40
#
interface Ethernet0/0/3
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
#
interface Ethernet0/0/4
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
#
port-group 2
 group-member Ethernet0/0/3
 group-member Ethernet0/0/4
五）、交换机SW3配置信息：

#
sysname s3
#
vlan batch 10 20 30 40

#
stp region-configuration
 region-name abc

#
interface Ethernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
#
interface Ethernet0/0/2
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
#
interface Ethernet0/0/3
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094

六）、路由器R4配置信息：

[V200R003C00]
#
 sysname r4
#
interface GigabitEthernet0/0/0
 ip address 192.168.4.2 255.255.255.0 
#
interface GigabitEthernet0/0/1
 ip address 192.168.5.1 255.255.255.0 
#
interface GigabitEthernet2/0/0
 ip address 192.168.7.1 255.255.255.0 

#
rip 1
 network 192.168.4.0
 network 192.168.5.0
 network 192.168.7.0
七）、三层交换机SW10的配置信息：

sysname s10
#
vlan batch 50 60 70 80

#
dhcp enable
#
ip pool v1
 gateway-list 192.168.1.126 
 network 192.168.1.0 mask 255.255.255.128 
 excluded-ip-address 192.168.1.1 192.168.1.2 
 dns-list 8.8.8.8 
#
ip pool v2
 gateway-list 192.168.1.190 
 network 192.168.1.128 mask 255.255.255.192 
 dns-list 8.8.8.8 
#
ip pool v3
 gateway-list 192.168.1.222 
 network 192.168.1.192 mask 255.255.255.224 
 dns-list 8.8.8.8 
#
ip pool v4
 gateway-list 192.168.1.254 
 network 192.168.1.224 mask 255.255.255.224 
 dns-list 8.8.8.8 
#
ip pool v9
 gateway-list 192.168.3.254 
 network 192.168.3.224 mask 255.255.255.224 
 dns-list 8.8.8.8 
#
ip pool v10
 gateway-list 192.168.3.222 
 network 192.168.3.192 mask 255.255.255.224 
 dns-list 8.8.8.8 
#
ip pool v11
 gateway-list 192.168.3.190 
 network 192.168.3.128 mask 255.255.255.192 
 dns-list 8.8.8.8 
#
ip pool v12
 gateway-list 192.168.3.126 
 network 192.168.3.0 mask 255.255.255.128 
 excluded-ip-address 192.168.3.1 192.168.3.2 
 dns-list 8.8.8.8 
#
interface Vlanif2
 ip address 192.168.7.2 255.255.255.0 
 dhcp select global
#
interface Vlanif50
 ip address 192.168.2.126 255.255.255.128 
 dhcp select interface
 dhcp server excluded-ip-address 192.168.2.1 192.168.2.2 
 dhcp server dns-list 8.8.8.8 
#
interface Vlanif60
 ip address 192.168.2.190 255.255.255.192 
 dhcp select interface
 dhcp server dns-list 8.8.8.8 
#
interface Vlanif70
 ip address 192.168.2.222 255.255.255.224 
 dhcp select interface
 dhcp server dns-list 8.8.8.8 
#
interface Vlanif80
 ip address 192.168.2.254 255.255.255.224 
 dhcp select interface
 dhcp server dns-list 8.8.8.8 
#
interface MEth0/0/1
#
interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
#
interface GigabitEthernet0/0/2
 port link-type access
 port default vlan 2
#
rip 1
 network 192.168.2.0
 network 192.168.7.0

#
port-group trunk
八）、路由器R4的配置信息：

#
interface GigabitEthernet0/0/0
 ip address 192.168.4.2 255.255.255.0 
#
interface GigabitEthernet0/0/1
 ip address 192.168.5.1 255.255.255.0 
#
interface GigabitEthernet2/0/0
 ip address 192.168.7.1 255.255.255.0 

#
rip 1
 network 192.168.4.0
 network 192.168.5.0
 network 192.168.7.0

九）、交换机SW4的配置信息：

#
sysname s4
#
vlan batch 50 60 70 80
#
stp instance 1 priority 4096
stp instance 2 priority 8192

#
stp region-configuration
 region-name bbb
 instance 1 vlan 70 80 
 instance 2 vlan 50 60 
 active region-configuration

#
interface Ethernet0/0/1
 port link-type access
 port default vlan 50
#
interface Ethernet0/0/2
 port link-type access
 port default vlan 60
#
interface Ethernet0/0/3
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
#
interface Ethernet0/0/4
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094

#
port-group 1
 group-member Ethernet0/0/3
 group-member Ethernet0/0/4

十）、交换机SW5的配置信息：

#
sysname s5
#
vlan batch 50 60 70 80

#
stp region-configuration
 region-name bbb

#
interface Ethernet0/0/1
 port link-type access
 port default vlan 70
#
interface Ethernet0/0/2
 port link-type access
 port default vlan 80
#
interface Ethernet0/0/3
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
#
interface Ethernet0/0/4
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094

#
port-group 1
 group-member Ethernet0/0/3
 group-member Ethernet0/0/4

十一）、交换机SW6的配置信息：

#
sysname s6
#
vlan batch 50 60 70 80
#
stp instance 1 priority 4096
stp instance 2 priority 8192

#
stp region-configuration
 region-name bbb
 instance 1 vlan 50 60 
 instance 2 vlan 70 80 
 active region-configuration

#
interface Ethernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
#
interface Ethernet0/0/2
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
#
interface Ethernet0/0/3
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094

#
port-group 1
 group-member Ethernet0/0/1
 group-member Ethernet0/0/2
 group-member Ethernet0/0/3

十二）、路由器R2配置信息：

 sysname r2
#
dhcp enable

#
interface GigabitEthernet0/0/0.1
 dot1q termination vid 90
 ip address 192.168.3.254 255.255.255.224 
 arp broadcast enable
 dhcp select relay
 dhcp relay server-ip 192.168.7.2
#
interface GigabitEthernet0/0/0.2
 dot1q termination vid 100
 ip address 192.168.3.222 255.255.255.224 
 arp broadcast enable
 dhcp select relay
 dhcp relay server-ip 192.168.7.2
#
interface GigabitEthernet0/0/0.3
 dot1q termination vid 110
 ip address 192.168.3.190 255.255.255.192 
 arp broadcast enable
 dhcp select relay
 dhcp relay server-ip 192.168.7.2
#
interface GigabitEthernet0/0/0.4
 dot1q termination vid 120
 ip address 192.168.3.126 255.255.255.128 
 arp broadcast enable
 dhcp select relay
 dhcp relay server-ip 192.168.7.2
#
interface GigabitEthernet0/0/1
 ip address 192.168.8.2 255.255.255.0 
#
interface NULL0
#
rip 1
 network 192.168.3.0
 network 192.168.8.0

十三）、路由器R5的配置信息：

#
interface GigabitEthernet0/0/0
 ip address 192.168.8.1 255.255.255.0 
#
interface GigabitEthernet0/0/1
 ip address 192.168.5.2 255.255.255.0 
#
interface NULL0
#
rip 1
 network 192.168.8.0
 network 192.168.5.0

十四）、交换机SW9的配置信息：

#
sysname s9
#
vlan batch 90 100 110 120
#
stp instance 1 priority 4096
stp instance 2 priority 8192
#
stp region-configuration
 region-name aaa
 instance 1 vlan 90 100 
 instance 2 vlan 110 120 
 active region-configuration
#
interface Ethernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
#
interface Ethernet0/0/2
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
#
interface Ethernet0/0/3
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094

#
port-group 3
 group-member Ethernet0/0/1
 group-member Ethernet0/0/2
 group-member Ethernet0/0/3

十五）交换机SW7的配置信息：

#
sysname s7
#
vlan batch 90 100 110 120
#
stp region-configuration
 region-name aaa
#
interface Ethernet0/0/1
 port link-type access
 port default vlan 90
#
interface Ethernet0/0/2
 port link-type access
 port default vlan 100
#
interface Ethernet0/0/3
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
#
interface Ethernet0/0/4
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094

#
port-group 1
 group-member Ethernet0/0/3
 group-member Ethernet0/0/4

十六）、交换机SW8的配置信息：

#
sysname s8
#
vlan batch 90 100 110 120
#
stp instance 1 priority 4096
stp instance 2 priority 8192

#
stp region-configuration
 region-name aaa
 instance 1 vlan 110 120 
 instance 2 vlan 90 100 
 active region-configuration

#
interface Ethernet0/0/1
 port link-type access
 port default vlan 110
#
interface Ethernet0/0/2
 port link-type access
 port default vlan 120
#
interface Ethernet0/0/3
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
#
interface Ethernet0/0/4
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094

#
port-group 2
 group-member Ethernet0/0/3
 group-member Ethernet0/0/4

六、实验总结：

     1）、在实验过程中，DHCP服务器的配置及DHCP中继代理容易出错；

     2）、在对三个子网划分的过程中，网络号和子网掩码的配置要注意；设置的网关要和两边的网段的网关要一致；

     3）、路由的配置可用rip动态路由，也可用静态路由(IP地址汇总）配置