网络工程师TCNE阶段综合实验二详解

项目要求如下：

1.如图下所示蓝色区域为企业内网，红色区域为供应商网络；
2.运行MSTP协议，使得VLAN 10和vlan 20流量负载均衡；
3.SW1为vlan 10的主网关，SW1为vlan 20的备份网关；
4.SW2为vlan 20的主网关，SW2为vlan 10的备份网关；
5.DHCP服务器在vlan 66，网关在SW2上面；
6.企业内网运行静态路由协议或者OSPF路由协议；
7.PC1、PC2自动获取ip地址且可以与PC3互相ping通。

项目拓扑图如下：

第一步：配置基本网络；

SW1配置
sysname SW1
vlan batch 10 20 30 40 66
interface GigabitEthernet 0/0/1
port link-type trunk
port trunk allow-pass vlan all
interface GigabitEthernet 0/0/2
port link-type trunk
port trunk allow-pass vlan all
interface GigabitEthernet 0/0/3
port link-type access
port default vlan 30
interface Vlanif 30
ip address 192.168.30.2 24
SW2配置
sysname SW2
vlan batch 10 20 30 40 66
interface GigabitEthernet 0/0/1
port link-type trunk
port trunk allow-pass vlan all
interface GigabitEthernet 0/0/2
port link-type trunk
port trunk allow-pass vlan all
port link-type access
port default vlan 40
interface GigabitEthernet 0/0/3
port link-type access
port default vlan 66
interface GigabitEthernet 0/0/4
port link-type access
port default vlan 40
interface Vlanif 40
ip address 192.168.40.2 24
SW3配置
sysname SW3
vlan batch 10 20
interface Ethernet0/0/1
port link-type trunk
port trunk allow-pass vlan all
interface Ethernet0/0/2
port link-type trunk
port trunk allow-pass vlan all
interface Ethernet0/0/3
port link-type access
port default vlan 10
interface Ethernet0/0/4
port link-type access
port default vlan 20
R1配置
sysname R1
interface g0/0/0
ip address 192.168.30.1 24
interface g0/0/1
ip address 192.168.40.1 24
interface g0/0/2
ip address 100.1.1.2 24
quit
R2配置
sysname R2
interface g0/0/0
ip address 100.1.1.1 24
interface g0/0/1
ip address 200.1.1.254 24
quit

第二步：配置MSTP;

配置STP命令
SW1
stp region-configuration
region-name ntd
instance 10 vlan 10
instance 20 vlan 20
active region-configuration
quit
stp instance 10 priority 4096
stp instance 20 priority 8192
SW2
stp region-configuration
region-name ntd
instance 10 vlan 10
instance 20 vlan 20
active region-configuration
quit
stp instance 10 priority 8192
stp instance 20 priority 4096
SW3
stp region-configuration
region-name ntd
instance 10 vlan 10
instance 20 vlan 20
active region-configuration
quit

第三步：配置VRRP；

配置VRRP命令
SW1
interface Vlanif10
ip address 192.168.10.251 255.255.255.0
vrrp vrid 10 virtual-ip 192.168.10.250
vrrp vrid 10 priority 200
interface Vlanif20
ip address 192.168.20.251 255.255.255.0
vrrp vrid 10 virtual-ip 192.168.20.250
interface Vlanif66
ip address 192.168.66.251 255.255.255.0
SW2
interface Vlanif10
ip address 192.168.10.252 255.255.255.0
vrrp vrid 10 virtual-ip 192.168.10.250
interface Vlanif20
ip address 192.168.20.252 255.255.255.0
vrrp vrid 20 virtual-ip 192.168.20.250
vrrp vrid 10 priority 200
interface Vlanif66
ip address 192.168.66.252 255.255.255.0

第四步：配置DHCP;

配置DHCP命令
SW1
dhcp enable
interface Vlanif 10
dhcp select relay
dhcp relay server-ip 192.168.66.250
interface Vlanif 20
dhcp select relay
dhcp relay server-ip 192.168.66.250
SW2
dhcp enable
interface Vlanif 10
dhcp select relay
dhcp relay server-ip 192.168.66.250
interface Vlanif 20
dhcp select relay
dhcp relay server-ip 192.168.66.250
DHCP
sysname DHCP
dhcp enable
interface g0/0/0
ip address 192.168.66.250 24
dhcp select global
quit
ip pool p1
gateway-list 192.168.10.250
network 192.168.10.0 mask 255.255.255.0
excluded-ip-address 192.168.10.251 192.168.10.252
lease day 7 hour 0 minute 0
dns-list 8.8.8.8
ip pool p2
gateway-list 192.168.20.250
network 192.168.20.0 mask 255.255.255.0
excluded-ip-address 192.168.20.251 192.168.20.252
lease day 7 hour 0 minute 0
dns-list 8.8.8.8

第五步：配置OSPF;

配置OSPF命令
R1
ospf 1
area 0
network 192.168.30.0 0.0.0.255
network 192.168.40.0 0.0.0.255
ip route-static 0.0.0.0 0.0.0.0 100.1.1.1
SW1
ospf 1
area 0
network 192.168.10.0 0.0.0.255
network 192.168.20.0 0.0.0.255
network 192.168.30.0 0.0.0.255
network 192.168.66.0 0.0.0.255
SW2
ospf 1
area 0
network 192.168.10.0 0.0.0.255
network 192.168.20.0 0.0.0.255
network 192.168.40.0 0.0.0.255
network 192.168.66.0 0.0.0.255
DHCP
ospf 1
area 0
network 192.168.66.0 0.0.0.255

第六步：配置NAT；

配置NAT命令
acl number 2000
rule 10 permit source 192.168.0.0 0.0.255.255
interface GigabitEthernet0/0/2
nat outbound 2000

最后进行验证：

SW1上验证如下：

SW2上验证如下：

PC1验证如下：

项目实验完成！！！！