网络实例综合实验一、拓扑图：配置：二、三层交换机SWA配置快播,qvod,百度影音,下载: /SWA(config)#vlan 10SWA(config)#vlan 20SWA(config)#vlan 30SWA(config)#vlan 40SWA(config)#vlan 50SWA(config)#vlan 60SWA(config)#spanning-treeSWA(config)#spanning-tree mst configuration SWA(config-mst)#name ruijieSWA(config-mst)#reversion 1SWA(config-mst)#instance 10 vlan 10,20,30SWA(config-mst)#instance 20 vlan 40,50,60SWA(config)#spanning-tree mst 10 priority 4096 SWA(config)# spanning-tree mst 20 priority 8192 SWA(config)#interface range fa0/12-13SWA(config-if-range)#portgroup 1 onSWA(config)#interface agg 1SWA(config-if)#switchport mode trunkSWA(config)#int vlan 10SWA(config-if)#ip add 172.16.1.1 255.255.255.0 SWA(config)#int vlan 20SWA(config-if)#ip add 172.16.2.1 255.255.255.0 SWA(config)#int vlan 30SWA(config-if)#ip add 172.16.3.1 255.255.255.0 SWA(config)#int vlan 40SWA(config-if)#ip add 172.16.4.1 255.255.255.0 SWA(config)#int vlan 50SWA(config-if)#ip add 172.16.5.1 255.255.255.0 SWA(config)#int vlan 60SWA(config-if)#ip add 172.16.6.1 255.255.255.0 SWA(config)#int vlan 10SWA(config-if)#vrrp 10 ip 172.16.1.254SWA(config-if)#vrrp 10 pri 120SWA(config)#int vlan 20SWA(config-if)#vrrp 20 ip 172.16.2.254SWA(config-if)#vrrp 20 pri 120SWA(config)#int vlan 30SWA(config-if)#vrrp 30 ip 172.16.3.254SWA(config-if)#vrrp 30 pri 120SWA(config)#int vlan 40SWA(config-if)#vrrp 40 ip 172.16.4.254SWA(config)#int vlan 50SWA(config-if)#vrrp 50 ip 172.16.5.254SWA(config)#int vlan 60SWA(config-if)#vrrp 60 ip 172.16.6.254SWA(config)#int fa0/1SWA(config-if)#no switchportSWA(config-if)#ip add 10.1.1.14 255.255.255.252SWA(config-if)#no shutdownSWA(config)#int range fa0/2-3SWA(config-if-range)#switchport mode trunkSWA(config)#router ospf 10SWA(config-router)#router-id 4.4.4.4SWA(config-router)#network 172.16.1.0 0.0.0.255 area 0 SWA(config-router)#network 172.16.2.0 0.0.0.255 area 0 SWA(config-router)#network 172.16.3.0 0.0.0.255 area 0 SWA(config-router)#network 172.16.4.0 0.0.0.255 area 0 SWA(config-router)#network 172.16.5.0 0.0.0.255 area 0 SWA(config-router)#network 172.16.6.0 0.0.0.255 area 0 SWA(config-router)#network 10.1.1.12 0.0.0.3 area 0三、三层交换机SWB配置SWBconfig)#SWB(config)#vlan 10SWB(config)#vlan 20SWB(config)#vlan 30SWB(config)#vlan 40SWB(config)#vlan 50SWB(config)#vlan 60SWB(config)#spanning-treeSWB(config)#spanning-tree mst configurationSWB(config-mst)#name ruijieSWB(config-mst)#reversion 1SWB(config-mst)#instance 10 vlan 10,20,30SWB(config-mst)#instance 20 vlan 40,50,60SWB(config)#spanning-tree mst 20 priority 4096SWB(config)# spanning-tree mst 10 priority 8192SWB(config)#interface range fa0/12-13SWB(config-if-range)#portgroup 1 onSWB(config)#interface agg 1SWB(config-if)#switchport mode trunkSWB(config)#int vlan 10SWB(config-if)#ip add 172.16.1.2 255.255.255.0 SWB(config)#int vlan 20SWB(config-if)#ip add 172.16.2.2 255.255.255.0 SWB(config)#int vlan 30SWB(config-if)#ip add 172.16.3.2 255.255.255.0 SWB(config)#int vlan 40SWB(config-if)#ip add 172.16.4.2 255.255.255.0 SWB(config)#int vlan 50SWB(config-if)#ip add 172.16.5.2 255.255.255.0 SWB(config)#int vlan 60SWB(config-if)#ip add 172.16.6.2 255.255.255.0 SWB(config)#int vlan 10SWB(config-if)#vrrp 10 ip 172.16.1.254SWB(config)#int vlan 20SWB(config-if)#vrrp 20 pri 120SWB(config)#int vlan 30SWB(config-if)#vrrp 30 ip 172.16.3.254SWB(config)#int vlan 40SWB(config-if)#vrrp 40 ip 172.16.4.254SWB(config-if)#vrrp 40 prio 120SWB(config)#int vlan 50SWB(config-if)#vrrp 50 ip 172.16.5.254SWB(config-if)#vrrp 50 prio 120SWB(config)#int vlan 60SWB(config-if)#vrrp 60 ip 172.16.6.254SWB(config-if)#vrrp 60 prio 120SWB(config)#int fa0/1SWB(config-if)#no switchportSWB(config-if)#ip add 10.1.1.18 255.255.255.252 SWB(config-if)#no shutdownSWB(config)#int range fa0/2-3SWB(config-if-range)#switchport mode trunkSWB(config)#router ospf 10SWB(config-router)#router-id 5.5.5.5SWB(config-router)#network 172.16.1.0 0.0.0.255 area 0 SWB(config-router)#network 172.16.2.0 0.0.0.255 area 0 SWB(config-router)#network 172.16.3.0 0.0.0.255 area 0 SWB(config-router)#network 172.16.4.0 0.0.0.255 area 0 SWB(config-router)#network 172.16.5.0 0.0.0.255 area 0 SWB(config-router)#network 172.16.6.0 0.0.0.255 area 0 SWB(config-router)#network 10.1.1.16 0.0.0.3 area 0四、二层交换机SWC配置SWCconfig)#SWC(config)#vlan 10SWC(config)#vlan 20SWC(config)#vlan 30SWC(config)#vlan 40SWC(config)#vlan 50SWC(config)#vlan 60SWC(config)#spanning-treeSWC(config)#spanning-tree mst configurationSWC(config-mst)#name ruijieSWC(config-mst)#reversion 1SWC(config-mst)#instance 10 vlan 10,20,30SWC(config-mst)#instance 20 vlan 40,50,60SWC(config)#inter range fa0/1-2SWC(config-if-range)#sw mo tr五、二层交换机SWD配置SWDconfig)#SWD(config)#SWD(config)#vlan 10SWD(config)#vlan 20SWD(config)#vlan 30SWD(config)#vlan 40SWD(config)#vlan 50SWD(config)#vlan 60SWD(config)#spanning-treeSWD(config)#spanning-tree mst configuration SWD(config-mst)#name ruijieSWD(config-mst)#reversion 1SWD(config-mst)#instance 10 vlan 10,20,30SWD(config-mst)#instance 20 vlan 40,50,60SWD(config)#inter range fa0/1-2SWD(config-if-range)#sw mo tr六、路由器R1配置R1(config)#int s1/2R1(config-if)#ip add 10.1.1.1 255.255.255.252R1(config-if)#no shR1(config-if)#int fa0/0R1(config-if)#ip add 210.1.1.28 255.255.255.240 R1(config-if)#no shR1(config-if)#router ripR1(config-router)#network 10.0.0.0R1(config-router)#version 2R1(config-router)#no auto-summaryR1(config-router)#default-information origR1(config)#ip router 0.0.0.0 0.0.0.0 210.1.1.29七、路由器R2配置R2(config)#int s1/2R2(config-if)#ip add 10.1.1.2 255.255.255.252R2(config-if)#no shR2(config)#int fa0/0R2(config-if)#ip add 10.1.1.5 255.255.255.252R2(config)#int fa0/1R2(config-if)#ip add 10.1.1.9 255.255.255.252R2(config)#router ripR2(config-router)#network 10.0.0.0R2(config-router)#version 2R2(config-router)#no auto-summaryR2(config-router)#redis ospf 10 met 2R2(config)#router ospf 10R2(config-router)#router-id 1.1.1.1R2(config-router)#network 10.1.1.4 0.0.0.3 ar 0R2(config-router)#network 10.1.1.8 0.0.0.3 area 0 R2(config-router)#redis rip subnets metric 50八、路由器R3配置R3(config)#int fa0/0R3(config-if)#ip add 10.1.1.6 255.255.255.252R3(config)#int fa0/1R3(config-if)#ip add 10.1.1.13 255.255.255.252R3(config)#int s1/2R3(config-if)#ip add 10.1.1.21 255.255.255.252R3(config)#router ospf 10R3(config-router)#router-id 2.2.2.2R3(config-router)#network 10.1.1.4 0.0.0.3 ar 0R3(config-router)#network 10.1.1.12 0.0.0.3 area 0 R3(config-router)#network 10.1.1.20 0.0.0.3 area 0九、路由器R4配置R4(config)#R4(config)#int fa0/0R4(config-if)#ip add 10.1.1.10 255.255.255.252R4(config)#int fa0/1R4(config-if)#ip add 10.1.1.17 255.255.255.252R4(config)#int s1/2R4(config-if)#ip add 10.1.1.22 255.255.255.252R4(config)#router ospf 10R4(config-router)#router-id 2.2.2.2R4(config-router)#network 10.1.1.8 0.0.0.3 ar 0R4(config-router)#network 10.1.1.16 0.0.0.3 area 0R4(config-router)#network 10.1.1.20 0.0.0.3 area 0十、PPP配置R1(config)#username R2 passwd 123R1(config)#int s1/2R1(config)#enc pppR1(config-if)#ppp auth chapR2(config)#username R1 passwd 123R2(config)#int s1/2R2(config)#enc pppR3(config)#username R4 passwd 123R3(config)#int s1/2R3(config-if)#enc pppR3(config-if)#ppp auth papR4(config)#int s1/2R4(config-if)#ppp pap sent-username R4 password 123十二、NAT配置R1(config)#int fa0/0R1(config-if)#ip nat outsideR1(config)#int s1/2R1(config-if)#ip nat insideR1(config)#ip nat pool pool1 210.1.1.17 210.1.1.18 netmask 255.255.255.240R1(config)#ip nat pool pool2 210.1.1.19 210.1.1.20 netmask 255.255.255.240R1(config)#ip nat pool pool3 210.1.1.21 210.1.1.22 netmask 255.255.255.240R1(config)#ip nat pool pool4 210.1.1.23 210.1.1.25 netmask 255.255.255.240R1(config)#ip nat pool pool5 210.1.1.27 210.1.1.27 netmask 255.255.255.240R1(config)#access-list 10 permit 172.16.1.0 0.0.0.255R1(config)#access-list 11 permit 172.16.2.0 0.0.0.255R1(config)#access-list 12 permit 172.16.3.0 0.0.0.255R1(config)#access-list 13 permit 172.16.4.0 0.0.0.255R1(config)#access-list 13 permit 172.16.5.0 0.0.0.255R1(config)#access-list 140 deny ip 172.16.6.0 0.0.0.255 172.17.5.0 0.0.0.255R1(config)#access-list 140 permit ip any anyR1(config)#ip nat inside source list 10 pool pool1R1(config)#ip nat inside source list 11 pool pool2R1(config)#ip nat inside source list 12 pool pool3R1(config)#ip nat inside source list 13 pool pool4R1(config)#ip nat inside source list 14 pool pool5R1(config)#ip nat inside static tcp 172.16.1.10 80 210.1.1.26 80R1(config)#ip nat inside static tcp 172.16.1.11 20 210.1.1.26 20R1(config)#ip nat inside static tcp 172.16.1.11 21 210.1.1.26 21R1(config)#ip nat inside static tcp 172.16.1.12 1433 210.1.1.26 1433十三、VPN配置R1(config)#access-list 110 permit ip 172.16.6.0 0.0.0.255 172.17.5.0 0.0.0.255R1(config)#crypto isakmp policy 110R1(isakmp-policy)#authentication pre-shareR1(isakmp-policy)#hash md5R1(config)#crypto isakmp key 0 123 address 210.1.1.29R1(config)#crypto ipsec transform-set vpn1 ah-md5-hmac esp-desesp-md5-hmacR1(config)#crypto map map1 10 ipsec-isakmpR1(config-map)# peer 210.1.1.29R1(config-map)#set transform-set vpn1R1(config-map)#match address 110R1(config)#interface Serial 1/2R1(config-if)#crypto map map1R1#sh crypto isakmp saR1#sh crypto ipsec sa。