企业网三层架构

企业网三层架构搭建

先划分IP
R1与SW1:172.16.0.0/30
R2与SW2:172.16.0.4/30
vlan 2:172.16.1.0/25
vlan 3:172.16.1.128/25
R2
interface Loopback0 配置IP
ip address 1.1.1.1 255.255.255.0
interface FastEthernet0/0
ip address 12.1.1.1 255.255.255.0
R1
interface FastEthernet0/0 配置IP
ip address 12.1.1.2 255.255.255.0
interface FastEthernet0/1
ip address 172.16.0.1 255.255.255.252
interface FastEthernet1/0
ip address 172.16.0.5 255.255.255.252
router eigrp 100 eigrp协议
redistribute static 重发布；就是下放缺省
network 172.16.0.0
auto-summary
interface f0/0 外网接口
ip nat outside
interface f0/1 内网接口
ip nat inside
interface f1/0
ip nat inside
ip route 0.0.0.0 0.0.0.0 12.1.1.1 静态路由指向外网
access-list 1 permit 172.16.0.0 0.0.255.255 抓取内网流量
ip nat inside source list 1 interface FastEthernet0/0 overload 把内网流量转化为从f0/0口出
SW1
ip routing 先打开路由功能
interface range f0/2-3
channel-group 1 mode on 做channel
interface Port-channel 1
switchport trunk encapsulation dot1q
switchport mode trunk 此接口为trunk
interface FastEthernet0/1 配置IP
no switchport
ip address 172.16.0.2 255.255.255.252
ip summary-address eigrp 100 172.16.0.0 255.255.252.0 vlan2和vlan3的汇总
vtp domain ccna 做vtp
vtp passwd 123
vtp mode server
vlan 2 创建vlan
vlan 3
interface FastEthernet0/5
switchport trunk native vlan 2 vlan 2为native vlan
interface FastEthernet0/6
switchport trunk native vlan 3 vlan 3 为native vlan
spanning-tree vlan 2 root priority 做vlan 2 的主根
spanning-tree vlan 3 root secondary vlan 3 的备份根
interface Vlan2
ip address 172.16.1.1 255.255.255.128
standby 1 ip 172.16.1.126 虚拟网关地址
standby 1 priority 101 优先级高一点
standby 1 preempt 开启抢占
standby 1 track FastEthernet0/1 上行链路追踪
router eigrp 100 eigrp协议
network 172.16.0.0
auto-summary
interface Vlan3
ip address 172.16.1.129 255.255.255.128
standby 1 ip 172.16.1.254 虚拟网关地址
standby 1 preempt
standby 1 track FastEthernet0/1
ip dhcp pool v2
network 172.16.1.0 255.255.255.128
default-router 172.16.1.126
dns-server 8.8.8.8
ip dhcp pool v3
network 172.16.1.128 255.255.255.128
default-router 172.16.1.254
dns-server 8.8.8.8
SW2 配置基本和SW1一样
SW3
interface FastEthernet0/1 做DTP
switchport mode dynamic desirable
interface FastEthernet0/2
switchport mode dynamic desirable
interface FastEthernet0/3 把接口划入vlan
switchport mode access
switchport access vlan 2
interface FastEthernet0/4
switchport mode access
switchport access vlan 3
SW4,SW5配置和SW3基本一样
配置到这里就完了，大家有什么问题可以评论里问