HCIP——网络三层架构实验
网络三层架构实验
一、搭建拓扑图，并且规划好IP地址
二、根据题目要求进行合理搭配
1、内网已经按照172.16.10.0/16分配
3、VRRP/STP/VLAN/DHCP均可使用
（1）STP
SW1
#
stp instance 1 root primary
stp instance 2 root secondary
#
cluster enable
ntdp enable
ndp enable
#
drop illegal-mac alarm
#
dhcp enable
#
diffserv domain default
#
stp region-configuration
region-name a
instance 1 vlan 1
instance 2 vlan 2
active region-configuration
#
drop-profile default
#
SW2
#
stp instance 1 root secondary
stp instance 2 root primary
#
cluster enable
ntdp enable
ndp enable
#
drop illegal-mac alarm
#
dhcp enable
#
diffserv domain default
#
stp region-configuration
region-name a
instance 1 vlan 1
instance 2 vlan 2
active region-configuration
#
drop-profile default
SW3
#
cluster enable
ntdp enable
ndp enable
#
drop illegal-mac alarm
#
diffserv domain default
#
stp region-configuration
region-name a
instance 1 vlan 1
instance 2 vlan 2
active region-configuration
#
drop-profile default
#
SW4
#
cluster enable
ntdp enable
ndp enable
#
drop illegal-mac alarm
#
diffserv domain default
#
stp region-configuration
region-name a
instance 1 vlan 1
instance 2 vlan 2
active region-configuration
#
drop-profile default
（2）VRRP
SW1
#
interface Vlanif1
ip address 172.16.2.253 255.255.255.0
vrrp vrid 1 virtual-ip 172.16.2.250
vrrp vrid 1 priority 110
vrrp vrid 1 track interface GigabitEthernet0/0/3 reduced 20
#
interface Vlanif2
ip address 172.16.3.253 255.255.255.0
vrrp vrid 1 virtual-ip 172.16.3.250
dhcp select global
#
SW2
#
interface Vlanif1
ip address 172.16.2.254 255.255.255.0
vrrp vrid 1 virtual-ip 172.16.2.250
#
interface Vlanif2
ip address 172.16.3.254 255.255.255.0
vrrp vrid 1 virtual-ip 172.16.3.250
vrrp vrid 1 priority 110
vrrp vrid 1 track interface GigabitEthernet0/0/3
dhcp select global
#
(3)VLAN和TRUNK干道
TRUNK干道允许VLAN1和VLAN2通过
SW1
#
interface Vlanif9
ip address 172.16.0.2 255.255.255.252
#
interface MEth0/0/1
#
interface Eth-Trunk0
port link-type trunk
port trunk allow-pass vlan 2
#
interface GigabitEthernet0/0/1
port hybrid tagged vlan 2
#
interface GigabitEthernet0/0/2
port hybrid tagged vlan 2
#
interface GigabitEthernet0/0/3
port link-type access
port default vlan 9
stp edged-port enable
#
SW2
#
interface Vlanif9
ip address 172.16.0.6 255.255.255.252
#
interface MEth0/0/1
#
interface Eth-Trunk0
port hybrid tagged vlan 2
#
interface GigabitEthernet0/0/1
port hybrid tagged vlan 2
#
interface GigabitEthernet0/0/2
port hybrid tagged vlan 2
#
interface GigabitEthernet0/0/3
port link-type access
port default vlan 9
stp edged-port enable
#
SW3
#
interface Ethernet0/0/1
port link-type access
port default vlan 2
stp edged-port enable
#
#
interface GigabitEthernet0/0/1
port hybrid tagged vlan 2
#
interface GigabitEthernet0/0/2
port hybrid tagged vlan 2
#
SW4
#
interface Ethernet0/0/2
port link-type access
port default vlan 2
stp edged-port enable
#
#
interface GigabitEthernet0/0/1
port hybrid tagged vlan 2
#
interface GigabitEthernet0/0/2
port hybrid tagged vlan 2
#
(4)DHCP
SW1
#
ip pool v1
gateway-list 172.16.2.250
network 172.16.2.0 mask 255.255.255.0
dns-list 114.114.114.114
#
ip pool v2
gateway-list 172.16.3.250
network 172.16.3.0 mask 255.255.255.0
dns-list 114.114.114.114
#
最后在端口去开启DHCP服务
dhcp select global
SW2
#
ip pool v1
gateway-list 172.16.2.250
network 172.16.2.0 mask 255.255.255.0
dns-list 114.114.114.114
#
ip pool v2
gateway-list 172.16.3.250
network 172.16.3.0 mask 255.255.255.0
dns-list 114.114.114.114
#
最后在端口去开启DHCP服务
dhcp select global
二、检验
所有PC都已经获得IP，并且互相PIng通
三、SW1和SW2互相备份
现在用PC1–ping–ISP客户端
这里看到已经通了
接下来将SW1关闭，在进行同样的操作
可以看到还是互通状态，说明SW1和SW2互为备份成功