園區網配置簡談

 昨天上論壇看到有人發了個圖，我看了下這個圖基本包涵了na np的交換配置，一時手癢就配置了下，我配的隻是簡要的，有的細節沒有配置大家看時想想要自己應該怎麼配？

<a target="_blank" href="http://blog.51cto.com/attachment/201011/172147755.png"></a>

我們把tftp省略了，其他的照舊

電信：interface Loopback0

 ip address 1.1.1.1 255.255.255.0

!

interface Serial0/0

 ip address 172.16.1.1 255.255.255.0

 serial restart-delay 0

 no fair-queue

網通;interface Loopback0

 ip address 2.2.2.2 255.255.255.0

 ip address 172.16.2.2 255.255.255.0

r1；

interface Loopback0

 ip address 3.3.3.3 255.255.255.0

 ip address 172.16.1.3 255.255.255.0

interface Ethernet1/0

 ip address 192.168.1.3 255.255.255.0

 half-duplex

interface Ethernet1/1

 ip address 192.168.2.3 255.255.255.0

!         

interface Ethernet1/2

 ip address 192.168.3.3 255.255.255.0

interface Ethernet1/3

 ip address 192.168.4.3 255.255.255.0

router ospf 10

 router-id 3.3.3.3

 log-adjacency-changes

 network 3.3.3.3 0.0.0.0 area 0

 network 172.16.1.0 0.0.0.255 area 0

 network 192.168.1.0 0.0.0.255 area 0

 network 192.168.2.0 0.0.0.255 area 0

 network 192.168.3.0 0.0.0.255 area 0

 network 192.168.4.0 0.0.0.255 area 0

ip route 0.0.0.0 0.0.0.0 172.16.1.1

ip nat pool NAT 172.16.1.10 172.16.1.80 netmask 255.255.255.0

ip nat pool vlan10 172.16.1.80 172.16.1.100 netmask 255.255.0.0

ip nat pool vlan20 172.16.1.110 172.16.1.120 netmask 255.255.255.0

ip nat inside source list 1 pool NAT

ip nat inside source list 2 pool NAT

ip nat inside source list 3 pool vlan10 overload

ip nat inside source list 4 pool vlan20 overload

access-list 1 permit 192.168.10.0 0.0.0.255

access-list 2 permit 192.168.20.0 0.0.0.255

access-list 3 permit any

access-list 4 permit any

r2;interface Loopback0

 ip address 4.4.4.4 255.255.255.0

 ip address 172.16.2.4 255.255.255.0

 ip address 192.168.1.4 255.255.255.0

 ip address 192.168.2.4 255.255.255.0

 ip address 192.168.5.4 255.255.255.0

 ip address 192.168.6.4 255.255.255.0

 router-id 4.4.4.4

 network 4.4.4.4 0.0.0.0 area 0

 network 192.168.5.0 0.0.0.255 area 0

 network 192.168.6.0 0.0.0.255 area 0

 default-information originate

ip http server

ip route 0.0.0.0 0.0.0.0 172.16.2.2

ip route 172.16.0.0 255.255.0.0 172.16.1.1

ip route 172.16.0.0 255.255.0.0 172.16.2.2

ip nat pool NATT 172.16.2.10 172.16.2.50 netmask 255.255.255.0

ip nat pool vlan20 172.16.2.89 172.16.2.123 netmask 255.255.0.0

ip nat inside source list 1 pool NATT

ip nat inside source list 2 pool NATT

ip nat inside source list 3 pool vlan20 overload

access-list 3 permit 192.168.6.0 0.0.0.255

sw1:

spanning-tree uplinkfast

spanning-tree backbonefast

spanning-tree vlan 10 priority 8192

spanning-tree vlan 20 priority 16384

spanning-tree vlan 30 priority 8192

spanning-tree vlan 40 priority 16384

 ip address 5.5.5.5 255.255.255.0

interface Port-channel1

 switchport mode trunk

interface FastEthernet0/0

 ip address 192.168.3.5 255.255.255.0

 duplex auto

 speed auto

interface FastEthernet0/1

 ip address 192.168.5.5 255.255.255.0

interface FastEthernet1/1

 channel-group 1 mode on

interface FastEthernet1/2

interface FastEthernet1/3

interface FastEthernet1/4

interface FastEthernet1/5

interface Vlan10

 ip address 192.168.10.254 255.255.255.0

 standby 11 ip 192.168.10.1

 standby 11 priority 150

 standby 11 preempt

interface Vlan20

 ip address 192.168.20.254 255.255.255.0

ip default-gateway  指向彙聚層路由     實行切換 實作高可用性

 standby 12 ip 192.168.20.1

 standby 12 preempt

interface Vlan30

 ip address 192.168.30.254 255.255.255.0

 standby 11 ip 192.168.30.1

interface Vlan40

 ip address 192.168.40.254 255.255.255.0

 standby 12 ip 192.168.40.1

 router-id 5.5.5.5

 network 5.5.5.5 0.0.0.0 area 1

 network 192.168.10.0 0.0.0.255 area 1

 network 192.168.20.0 0.0.0.255 area 1

ip route 0.0.0.0 0.0.0.0 172.16.1.3

ip route 0.0.0.0 0.0.0.0 3.3.3.3

ip route 0.0.0.0 0.0.0.0 192.168.3.3

ip route 172.16.0.0 255.255.0.0 172.16.1.3

sw2;spanning-tree uplinkfast

spanning-tree vlan 10 priority 16384

spanning-tree vlan 20 priority 8192

spanning-tree vlan 30 priority 16384

spanning-tree vlan 40 priority 8192

 ip address 6.6.6.6 255.255.255.0

 ip address 192.168.4.6 255.255.255.0

 ip address 192.168.6.6 255.255.255.0

 no switchport

 ip address 192.168.7.6 255.255.255.0

interface FastEthernet1/6

 ip address 192.168.10.252 255.255.255.0

 ip address 192.168.20.252 255.255.255.0

 standby 12 priority 150

 ip address 192.168.30.252 255.255.255.0

 ip address 192.168.40.252 255.255.255.0

 router-id 6.6.6.6

 network 6.6.6.6 0.0.0.0 area 2

 network 192.168.7.0 0.0.0.255 area 3

 network 192.168.30.0 0.0.0.255 area 2

 network 192.168.40.0 0.0.0.255 area 2

ip route 0.0.0.0 0.0.0.0 192.168.6.4

接入層交換機1：

interface FastEthernet1/0

 switchport access vlan 10

 spanning-tree portfast

接入層交換機2：interface FastEthernet1/5

 switchport access vlan 20

<a target="_blank" href="http://blog.51cto.com/attachment/201011/173415607.png"></a>

<a target="_blank" href="http://blog.51cto.com/attachment/201011/173459893.png"></a>

 注意：要在路由3 4 5 6注入預設路由否則流量不知道前往那走，

如sw5注入兩條預設路由到3   4  在3 4 上做pbr 做流量均衡

我直接是show run  複制的，對不起大家了，有空再好好寫！

Router1 S0/0 &lt;----&gt; Router3 S0/0 

Router2 S0/0 &lt;----&gt; Router4 S0/0 

Router3 E1/0 &lt;----&gt; Router4 E1/0 

Router3 E1/1 &lt;----&gt; Router4 E1/1 

Router3 E1/2 &lt;----&gt; Router5 F0/0 ip 

Router3 E1/3 &lt;----&gt; Router6 F0/0 

Router4 E1/2 &lt;----&gt; Router5 F0/1 ip

Router4 E1/3 &lt;----&gt; Router6 F0/1 

Router5 F1/1 &lt;----&gt; Router6 F1/1 

Router5 F1/2 &lt;----&gt; Router6 F1/2 trunk hrsp

Router5 F1/3 &lt;----&gt; Router8 F1/3 

Router5 F1/4 &lt;----&gt; Router8 F1/5 

Router5 F1/5 &lt;----&gt; Router9 F1/5 

Router6 F1/4 &lt;----&gt; Router8 F1/4 

Router6 F1/6 &lt;----&gt; Router9 F1/6 

Router6 F1/3 &lt;----&gt; Router7 F1/3  dhcp

Router8 F1/0 &lt;----&gt; VPCS V0/1 

VPCS V0/2 &lt;----&gt; Router9 F1/0 

這是接口連接配接表，用小凡做的

本文轉自q狼的誘惑 51CTO部落格，原文連結：http://blog.51cto.com/liangrui/420948，如需轉載請自行聯系原作者