(原创)双线路接入+无线AP,配置网络说明:1-**大厦有两条外线接入,主交换机4506采用策略路由的方式,金鹰大厦IP段分为两个大段为别为10.10.0.0 255.255.0.0此网段走电信外线出口,另一段10.20.0.0 255.255.0.0此网段走网通外线出口.2-A、B楼一楼大堂有无线AP的接入点,为方便无线用户的使用采用DHCP自动分配IP及DN S服务器,分配Vlan 130,网段为10.10.30.0 255.255.255.0走电信通道3-IP地址规划如图4-配置如下上传的缩略图4506核心交换机运行配置!version 12.2no service padservice timestamps debug uptimeservice timestamps log uptimeno service password-encryptionservice compress-config!hostname -4506!enable secret 5!ip subnet-zero!ip dhcp pool Airlannetwork 10.10.30.0 255.255.255.0default-router 10.10.30.1dns-server 202.96.209.5 202.96.209.6 202.96.209.133 lease 0 2!!no file verify autospanning-tree mode pvstspanning-tree extend system-idpower redundancy-mode redundant!!!vlan internal allocation policy ascending !interface GigabitEthernet1/1!interface GigabitEthernet1/2!interface GigabitEthernet2/1 description From SW-A1switchport trunk encapsulation dot1q switchport mode trunk!interface GigabitEthernet2/2 description From SW-A3switchport trunk encapsulation dot1q switchport mode trunk!interface GigabitEthernet2/3 description From SW-A6switchport mode trunk!interface GigabitEthernet2/4 description From SW-A9switchport mode trunk!interface GigabitEthernet2/5!interface GigabitEthernet2/6!interface GigabitEthernet2/7 description From SW-A12switchport mode trunk!interface GigabitEthernet2/8 description From SW-A15switchport mode trunk!interface GigabitEthernet2/9!interface GigabitEthernet2/10!interface GigabitEthernet2/11 description From SW-A18 switchport mode trunk!interface GigabitEthernet2/12 description From SW-A20 switchport mode trunk!interface GigabitEthernet2/13 !interface GigabitEthernet2/14 !interface GigabitEthernet2/15 !interface GigabitEthernet2/16 !interface GigabitEthernet2/17 !interface GigabitEthernet2/18 !interface GigabitEthernet3/1 description From SW-B1!interface GigabitEthernet3/2 description From SW-B3!interface GigabitEthernet3/3 description From SW-B6 switchport mode trunk!interface GigabitEthernet3/4 description From SW-B9 switchport mode trunk!interface GigabitEthernet3/5 !interface GigabitEthernet3/6 !interface GigabitEthernet3/7 description From SW-B12 switchport mode trunk!interface GigabitEthernet3/8description From SW-B15 switchport mode trunk!interface GigabitEthernet3/9!interface GigabitEthernet3/10!interface GigabitEthernet3/11 description From SW-B18 switchport mode trunk!interface GigabitEthernet3/12 description From SW-B20 switchport mode trunk!interface GigabitEthernet3/13!interface GigabitEthernet3/14!interface GigabitEthernet3/15!interface GigabitEthernet3/16!interface GigabitEthernet3/17!interface GigabitEthernet3/18!interface FastEthernet4/1 description To China_Telecomno switchportip address 10.1.1.2 255.255.255.0 !interface FastEthernet4/2 description To China_CNCno switchportip address 10.2.1.2 255.255.255.0 !interface FastEthernet4/3!interface FastEthernet4/4!interface FastEthernet4/5!interface FastEthernet4/6interface FastEthernet4/7 !interface FastEthernet4/8 !interface FastEthernet4/9 !interface FastEthernet4/10 !interface FastEthernet4/11 !interface FastEthernet4/12 !interface FastEthernet4/13 !interface FastEthernet4/14 !interface FastEthernet4/15 !interface FastEthernet4/16 !interface FastEthernet4/17 !interface FastEthernet4/18 !interface FastEthernet4/19 !interface FastEthernet4/20 !interface FastEthernet4/21 !interface FastEthernet4/22 !interface FastEthernet4/23 !interface FastEthernet4/24 !interface FastEthernet4/25 !interface FastEthernet4/26 !interface FastEthernet4/27 !interface FastEthernet4/28interface FastEthernet4/29 !interface FastEthernet4/30 !interface FastEthernet4/31 !interface FastEthernet4/32 !interface FastEthernet4/33 !interface FastEthernet4/34 !interface FastEthernet4/35 !interface FastEthernet4/36 !interface FastEthernet4/37 !interface FastEthernet4/38 !interface FastEthernet4/39 !interface FastEthernet4/40 !interface FastEthernet4/41 !interface FastEthernet4/42 !interface FastEthernet4/43 !interface FastEthernet4/44 !interface FastEthernet4/45 !interface FastEthernet4/46 !interface FastEthernet4/47 switchport access vlan 201 switchport mode access!interface FastEthernet4/48 switchport access vlan 101 switchport mode accessinterface Vlan1ip address 10.5.0.254 255.255.255.0 !interface Vlan50ip address 10.50.0.1 255.255.255.0 !interface Vlan101ip address 10.10.1.1 255.255.255.0 ip policy route-map China_Telecom !interface Vlan102ip address 10.10.2.1 255.255.255.0 ip policy route-map China_Telecom !interface Vlan103ip address 10.10.3.1 255.255.255.0 ip policy route-map China_Telecom !interface Vlan104ip address 10.10.4.1 255.255.255.0 ip policy route-map China_Telecom !interface Vlan105ip address 10.10.5.1 255.255.255.0 ip policy route-map China_Telecom !interface Vlan106ip address 10.10.6.1 255.255.255.0 ip policy route-map China_Telecom !interface Vlan107ip address 10.10.7.1 255.255.255.0 ip policy route-map China_Telecom !interface Vlan108ip address 10.10.8.1 255.255.255.0 ip policy route-map China_Telecom !interface Vlan109ip address 10.10.9.1 255.255.255.0 ip policy route-map China_Telecom !interface Vlan110ip policy route-map China_Telecom !interface Vlan111ip address 10.10.11.1 255.255.255.0 ip policy route-map China_Telecom !interface Vlan112ip address 10.10.12.1 255.255.255.0 ip policy route-map China_Telecom !interface Vlan113ip address 10.10.13.1 255.255.255.0 ip policy route-map China_Telecom !interface Vlan114ip address 10.10.14.1 255.255.255.0 ip policy route-map China_Telecom !interface Vlan115ip address 10.10.15.1 255.255.255.0 ip policy route-map China_Telecom !interface Vlan116ip address 10.10.16.1 255.255.255.0 ip policy route-map China_Telecom !interface Vlan117ip address 10.10.17.1 255.255.255.0 ip policy route-map China_Telecom !interface Vlan118ip address 10.10.18.1 255.255.255.0 ip policy route-map China_Telecom !interface Vlan119ip address 10.10.19.1 255.255.255.0 ip policy route-map China_Telecom !interface Vlan120ip address 10.10.20.1 255.255.255.0 ip policy route-map China_Telecom !interface Vlan121ip policy route-map China_Telecom !interface Vlan122ip address 10.10.22.1 255.255.255.0 ip policy route-map China_Telecom !interface Vlan123ip address 10.10.23.1 255.255.255.0 ip policy route-map China_Telecom !interface Vlan124ip address 10.10.24.1 255.255.255.0 ip policy route-map China_Telecom !interface Vlan125ip address 10.10.25.1 255.255.255.0 ip policy route-map China_Telecom !interface Vlan126ip address 10.10.26.1 255.255.255.0 ip policy route-map China_Telecom !interface Vlan127ip address 10.10.27.1 255.255.255.0 ip policy route-map China_Telecom !interface Vlan128ip address 10.10.28.1 255.255.255.0 ip policy route-map China_Telecom !interface Vlan129ip address 10.10.29.1 255.255.255.0 ip policy route-map China_Telecom !interface Vlan130ip address 10.10.30.1 255.255.255.0 ip policy route-map China_Telecom !interface Vlan201ip address 10.20.1.1 255.255.255.0 ip policy route-map China_CNC!interface Vlan202ip policy route-map China_CNC!interface Vlan203ip address 10.20.3.1 255.255.255.0 ip policy route-map China_CNC!interface Vlan204ip address 10.20.4.1 255.255.255.0 ip policy route-map China_CNC!interface Vlan205ip address 10.20.5.1 255.255.255.0 ip policy route-map China_CNC!interface Vlan206ip address 10.20.6.1 255.255.255.0 ip policy route-map China_CNC!interface Vlan207ip address 10.20.7.1 255.255.255.0 ip policy route-map China_CNC!interface Vlan208ip address 10.20.8.1 255.255.255.0 ip policy route-map China_CNC!interface Vlan209ip address 10.20.9.1 255.255.255.0 ip policy route-map China_CNC!interface Vlan210ip address 10.20.10.1 255.255.255.0 ip policy route-map China_CNC!interface Vlan211ip address 10.20.11.1 255.255.255.0 ip policy route-map China_CNC!interface Vlan212ip address 10.20.12.1 255.255.255.0 ip policy route-map China_CNC!interface Vlan213ip policy route-map China_CNC!interface Vlan214ip address 10.20.14.1 255.255.255.0 ip policy route-map China_CNC!interface Vlan215ip address 10.20.15.1 255.255.255.0 ip policy route-map China_CNC!interface Vlan216ip address 10.20.16.1 255.255.255.0 ip policy route-map China_CNC!interface Vlan217ip address 10.20.17.1 255.255.255.0 ip policy route-map China_CNC!interface Vlan218ip address 10.20.18.1 255.255.255.0 ip policy route-map China_CNC!interface Vlan219ip address 10.20.19.1 255.255.255.0 ip policy route-map China_CNC!interface Vlan220ip address 10.20.20.1 255.255.255.0 ip policy route-map China_CNC!interface Vlan221ip address 10.20.21.1 255.255.255.0 ip policy route-map China_CNC!interface Vlan222ip address 10.20.22.1 255.255.255.0 ip policy route-map China_CNC!interface Vlan223ip address 10.20.23.1 255.255.255.0 ip policy route-map China_CNC!interface Vlan224ip policy route-map China_CNC!interface Vlan225ip address 10.20.25.1 255.255.255.0ip policy route-map China_CNC!interface Vlan226ip address 10.20.26.1 255.255.255.0ip policy route-map China_CNC!interface Vlan227ip address 10.20.27.1 255.255.255.0ip policy route-map China_CNC!interface Vlan228ip address 10.20.28.1 255.255.255.0ip policy route-map China_CNC!interface Vlan229ip address 10.20.29.1 255.255.255.0ip policy route-map China_CNC!interface Vlan230ip address 10.20.30.1 255.255.255.0ip policy route-map China_CNC!ip route 0.0.0.0 0.0.0.0 10.1.1.1ip route 0.0.0.0 0.0.0.0 10.2.1.1no ip http server!!!access-list 1 permit 10.10.0.0 0.0.255.255 access-list 2 permit 10.20.0.0 0.0.255.255 !route-map China_Telecom permit 10 match ip address 1set ip next-hop 10.1.1.1!route-map China_CNC permit 10match ip address 2set ip next-hop 10.2.1.1!!!line con 0loginstopbits 1line vty 0 4password ****login!end-4506#show verCisco Internetwork Operating System SoftwareIOS (tm) Catalyst 4000 L3 Switch Software (cat4000-I9K91S-M), Version12.2(20)EWA, RELEASE SOFTWARE (fc1)Technical Support: /techsupportCopyright (c) 1986-2004 by cisco Systems, Inc.Compiled Wed 08-Sep-04 18:33 by kellythwImage text-base: 0x00000000, data-base: 0x012D5740ROM: 12.1(20r)EW1Dagobah Revision 95, Swamp Revision 29JinYing-4506 uptime is 2 days, 23 hours, 22 minutesSystem returned to ROM by reloadSystem image file is "bootflash:"This product contains cryptographic features and is subject to UnitedStates and local country laws governing import, export, transfer anduse. Delivery of Cisco cryptographic products does not implythird-party authority to import, export, distribute or use encryption.Importers, exporters, distributors and users are responsible forcompliance with U.S. and local country laws. By using this product youagree to comply with applicable laws and regulations. If you are unableto comply with U.S. and local laws, return this product immediately.A summary of U.S. laws governing Cisco cryptographic products may be found at: /wwl/export/crypto/tool/stqrg.htmlIf you require further assistance please contact us by sending email toexport@.cisco WS-C4506 (MPC8245) processor (revision 7) with 524288K bytes of memory. Processor board ID FOX0846039LMPC8245 CPU at 333Mhz, Supervisor IVLast reset from Reload62 Virtual Ethernet/IEEE 802.3 interface(s)48 FastEthernet/IEEE 802.3 interface(s)38 Gigabit Ethernet/IEEE 802.3 interface(s)403K bytes of non-volatile configuration memory.Configuration register is 0x2101-4506#show cdp neiCapability Codes: R - Router, T - Trans Bridge, B - Source Route BridgeS - Switch, H - Host, I - IGMP, r - Repeater, P - PhoneDevice ID Local Intrfce Holdtme Capability Platform Port IDSW-A9 Gig 2/4 151 S I WS-C2950G-Gig 0/2SW-B9 Gig 3/4 130 S I WS-C2950G-Gig 0/2SW-B3 Gig 3/2 125 S I WS-C2950G-Gig 0/2SW-A1 Gig 2/1 176 S I WS-C2950G-Gig 0/2SW-B1 Gig 3/1 155 S I WS-C2950G-Gig 0/2SW-A3 Gig 2/2 137 S I WS-C2950G-Gig 0/2SW-B6 Gig 3/3 126 S I WS-C2950G-Gig 0/2SW-A6 Gig 2/3 153 S I WS-C2950G-Gig 0/2SW-A18 Gig 2/11 177 S I WS-C2950G-Gig 0/2SW-B18 Gig 3/11 134 S I WS-C2950G-Gig 0/2SW-B12 Gig 3/7 136 S I WS-C2950G-Gig 0/2SW-B20 Gig 3/12 130 S I WS-C2950G-Gig 0/2SW-A20 Gig 2/12 159 S I WS-C2950G-Gig 0/2SW-A12 Gig 2/7 128 S I WS-C2950G-Gig 0/2SW-A15 Gig 2/8 133 S I WS-C2950G-Gig 0/2SW-B15 Gig 3/8 158 S I WS-C2950G-Gig 0/2JinYing-4506#show vtp statVTP Version : 2Configuration Revision : 6Maximum VLANs supported locally : 1005Number of existing VLANs : 67VTP Operating Mode : ServerVTP Domain Name : JVTP Pruning Mode : DisabledVTP V2 Mode : DisabledVTP Traps Generation : DisabledMD5 digest : 0xB9 0x33 0x8A 0x65 0x17 0xA6 0xCC 0xE8Configuration last modified by 10.5.0.254 at 9-19-05 01:45:14Local updater ID is 10.5.0.254 on interface Vl1 (lowest numbered VLAN interfa ce found)show runBuilding configuration...Current configuration : 1254 bytes!version 12.1no service padservice timestamps debug uptimeservice timestamps log uptimeno service password-encryption!hostname SW-A1!enable secret 5 $1$12pk$pfTIB4kK.uOBBQAK8SY.B. !ip subnet-zero!!spanning-tree mode pvstno spanning-tree optimize bpdu transmission spanning-tree extend system-id!!!!interface FastEthernet0/1!interface FastEthernet0/2!interface FastEthernet0/3!interface FastEthernet0/4!interface FastEthernet0/5!interface FastEthernet0/6!interface FastEthernet0/7!interface FastEthernet0/8!interface FastEthernet0/9!interface FastEthernet0/10!interface FastEthernet0/11!interface FastEthernet0/12!interface FastEthernet0/13!interface FastEthernet0/14!interface FastEthernet0/15!interface FastEthernet0/16!interface FastEthernet0/17!interface FastEthernet0/18!interface FastEthernet0/19!interface FastEthernet0/20!interface FastEthernet0/21!interface FastEthernet0/22!interface FastEthernet0/23!interface FastEthernet0/24!interface GigabitEthernet0/1!interface GigabitEthernet0/2 switchport mode trunk!interface Vlan1ip address 10.5.0.1 255.255.255.0 no ip route-cache!ip http server!line con 0line vty 0 4passwordloginline vty 5 15login!!endSW-A1#show verCisco Internetwork Operating System SoftwareIOS (tm) C2950 Software (C2950-I6Q4L2-M), Version 12.1(2 2)EA1, RELEASE SOFTWARE (fc1)Copyright (c) 1986-2004 by cisco Systems, Inc.Compiled Mon 12-Jul-04 08:18 by madisonImage text-base: 0x80010000, data-base: 0x8055C000 ROM: Bootstrap program is C2950 boot loaderSW-A1 uptime is 2 weeks, 5 days, 1 hour, 27 minutes System returned to ROM by power-onSystem image file is "flash:/c2950-i6q4l2-mz.121-22.EA1.bin"cisco WS-C2950G-24-EI (RC32300) processor (revision H0) wi th 20873K bytes of memory.Processor board ID FOC0852X11ELast reset from system-resetRunning Enhanced Image24 FastEthernet/IEEE 802.3 interface(s)2 Gigabit Ethernet/IEEE 802.3 interface(s)32K bytes of flash-simulated non-volatile configuration memor y.Base ethernet MAC Address: 00:0F:28:A5:9B:40 Motherboard assembly number: 73-7280-05Power supply part number: 34-0965-01Motherboard serial number:Power supply serial number:Model revision number: H0Motherboard revision number: A0Model number: WS-C2950G-24-EISystem serial number: FOC0852X11EConfiguration register is 0xFSW-A1#show flashDirectory of flash:/2 -rwx 273 Jan 01 1970 00:00:35 +00:00 env_vars3 -rwx 4276 Mar 01 1993 00:08:30 +00:00 vlan.dat4 -rwx 3081999 Mar 01 1993 00:06:06 +00:00 c2950-i6q4l2-mz.121-22.EA1.bin5 drwx 320 Mar 01 1993 00:00:22 +00:00 crashinfo7 -rwx 110 Mar 01 1993 00:01:42 +00:00 info8 -rwx 5 Mar 01 1993 00:09:34 +00:00 private-config.text9 drwx 2304 Mar 01 1993 00:04:20 +00:00 html84 -rwx 110 Mar 01 1993 00:04:31 +00:00 info.ver90 -rwx 1254 Mar 01 1993 00:09:34 +00:00 config.text7741440 bytes total (2343424 bytes free)SW-A1#show vtp statVTP Version : 2Configuration Revision : 6Maximum VLANs supported locally : 250Number of existing VLANs : 67VTP Operating Mode : ClientVTP Domain Name : JVTP Pruning Mode : DisabledVTP V2 Mode : DisabledVTP Traps Generation : DisabledMD5 digest : 0xB9 0x33 0x8A 0x65 0x17 0xA6 0xCC 0xE8Configuration last modified by 10.5.0.254 at 9-19-05 01:45:14SW-A1#exit无线APCurrent configuration : 2231 bytes!version 12.3no service padservice timestamps debug datetime msecservice timestamps log datetime msecservice password-encryption!hostname J-Ap-B-out!enable secret 5 !username secret 5ip subnet-zero!no aaa new-modeldot11 vlan-name vlan1 vlan 1dot11 vlan-name vlan130 vlan 130!!bridge irb!interface Dot11Radio0no ip addressno ip route-cache!ssid J-B-outvlan 130authentication openguest-mode!short-slot-timespeed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0station-role root!interface Dot11Radio0.1encapsulation dot1Q 1 nativeno ip route-cachebridge-group 1bridge-group 1 block-unknown-sourceno bridge-group 1 source-learningno bridge-group 1 unicast-floodingbridge-group 1 spanning-disabled!interface Dot11Radio0.130encapsulation dot1Q 130no ip route-cachebridge-group 130bridge-group 130 subscriber-loop-controlbridge-group 130 block-unknown-sourceno bridge-group 130 source-learningno bridge-group 130 unicast-floodingbridge-group 130 spanning-disabled!interface FastEthernet0no ip addressno ip route-cacheduplex auto!interface FastEthernet0.1encapsulation dot1Q 1 nativeno ip route-cachebridge-group 1no bridge-group 1 source-learningbridge-group 1 spanning-disabledinterface FastEthernet0.130encapsulation dot1Q 130no ip route-cachebridge-group 130no bridge-group 130 source-learningbridge-group 130 spanning-disabled!interface BVI1ip address 10.10.30.2 255.255.255.0no ip route-cache!ip default-gateway 10.10.30.1ip http serverno ip http secure-serverip http help-path /warp/public/779...onfig/help/eagip radius source-interface BVI1logging snmp-trap emergencieslogging snmp-trap alertslogging snmp-trap criticallogging snmp-trap errorslogging snmp-trap warningsbridge 1 route iplogging snmp-trap alertslogging snmp-trap criticallogging snmp-trap errorslogging snmp-trap warningsbridge 1 route ip!!!line con 0transport preferred alltransport output alllogin localtransport preferred alltransport input alltransport output allline vty 5 15logintransport preferred alltransport input alltransport output all!end连接无线AP,交换机的接口信息Switchport: EnabledAdministrative Mode: trunkOperational Mode: trunkAdministrative Trunking Encapsulation: dot1q Operational Trunking Encapsulation: dot1q Negotiation of Trunking: OnAccess Mode VLAN: 1 (default)Trunking Native Mode VLAN: 1 (default)Voice VLAN: noneAdministrative private-vlan host-association: none Administrative private-vlan mapping: none Administrative private-vlan trunk native VLAN: none Administrative private-vlan trunk encapsulation: dot1q Administrative private-vlan trunk normal VLANs: none Administrative private-vlan trunk private VLANs: none Operational private-vlan: noneTrunking VLANs Enabled: ALLPruning VLANs Enabled: 2-1001Capture Mode DisabledCapture VLANs Allowed: ALLProtected: falseUnknown unicast blocked: disabledUnknown multicast blocked: disabledAppliance trust: noneName: Fa0/24Switchport: EnabledAdministrative Mode: trunkOperational Mode: trunkAdministrative Trunking Encapsulation: dot1qOperational Trunking Encapsulation: dot1qNegotiation of Trunking: OnAccess Mode VLAN: 1 (default)Trunking Native Mode VLAN: 1 (default)Voice VLAN: noneAdministrative private-vlan host-association: noneAdministrative private-vlan mapping: noneAdministrative private-vlan trunk native VLAN: noneAdministrative private-vlan trunk encapsulation: dot1qAdministrative private-vlan trunk normal VLANs: noneAdministrative private-vlan trunk private VLANs: noneOperational private-vlan: noneTrunking VLANs Enabled: ALLPruning VLANs Enabled: 2-1001Capture Mode DisabledCapture VLANs Allowed: ALL最后:说明1.配置只是分段走外网并没有达到负载的要求2.将pc机分别设置成vlan 101 及vlan 201 后tracert www.16,达到分段出去的要求.3.无线AP下的pc只要设置为自动获得IP,便可分配到地址另外有一点应该要改一下,现在无线AP中是每一个AP都是一个SSID ,这样的话没有漫游的功能,如果将四个AP都设为同一个SSID,那么pc机是可以在四个AP内实现漫游功能的.当时没太搞过AP有点笨了,后来回来之后经过向人请教证实了这一点,如果以后有别的兄弟再配置无线AP就可以配成漫游的形式。