目录一、拓扑图 (2)二、设备配置 (2)1 .配置以太网通道 (2)2.封装端口f0/3-4 (3)3. 配置vlan2-5 (4)4. 配置vtp (5)5.配置vlan间路由 (6)6. 生成树协议 (7)7. DHCP服务器配置 (8)8.配置Rip 协议 (12)9. 测试内容 (14)10. 扩展内容 (16)三、项目总结 (19)项目答辩目的：设计并实现小型局域网的网络架构一、拓扑图二、设备配置1 .配置以太网通道Multilayer Switch0配置：Multilayer Switch0(config)#int range f0/1-2Multilayer Switch0(config-if-range)#channel-protocol lacp Multilayer Switch0(config-if-range)#channel-group 1 mode active Multilayer Switch0(config-if-range)#exitMultilayer Switch0(config)#int port-channel 1Multilayer Switch0(config-if)#switchport trunk encapsulation dot1q Multilayer Switch0(config-if)#switchport mode trunkMultilayer Switch1配置：Multilayer Switch1(config)#int range f0/1-2Multilayer Switch1(config-if-range)#channel-protocol lacpMultilayer Switch1(config-if-range)#channel-group 1 mode active Multilayer Switch1(config-if-range)#exitMultilayer Switch1(config)#int port-channel 1Multilayer Switch1(config-if)#switchport trunk encapsulation dot1q Multilayer Switch1(config-if)#switchport mode trunk2.封装端口f0/3-4Multilayer Switch0配置：Multilayer Switch0(config)#int range f0/3-4Multilayer Switch0(config-if-range)#switchport trunk encapsulation dot1qMultilayer Switch0(config-if-range)#switchport mode trunkMultilayer Switch1配置：Multilayer Switch1(config)#int range f0/3-4Multilayer Switch1(config-if-range)#switchport trunk encapsulation dot1q Multilayer Switch1(config-if-range)#switchport mode trunk3. 配置vlan2-5Multilayer Switch0配置：Multilayer switch0#vlan databaseMultilayer switch0(vlan)#vlan 2Multilayer switch0(vlan)#vlan 3Multilayer switch0(vlan)#vlan 4Multilayer switch0(vlan)#vlan 54. 配置vtpMultilayer Switch0配置：Multilayer switch0(config)#vtp domain net Multilayer switch0(config)#vtp mode server Multilayer switch0(config)#vtp password 123 Multilayer switch0(config)#vtp version 2Multilayer Switch1配置：Multilayer switch1(config)#vtp domain net Multilayer switch1(config)#vtp mode client Multilayer switch1(config)#vtp password 123 Multilayer switch1(config)#vtp version 2通过vtp学习到的vlan信息：Switch0-3 vtp 配置：（以switch1为例）switch1(config)#vtp domain netswitch1(config)#vtp mode clientswitch1(config)#vtp password 123switch1(config)#vtp version 2通过vtp学习到的vlan信息：5.配置vlan间路由Multilayer Switch0配置：Vlan 2Multilayer switch0(config)#int vlan 2Multilayer switch0(config-if)#ip add 192.168.2.254 255.255.255.0 Multilayer switch0(config-if)#no shutVlan 3Multilayer switch0(config)#int vlan 3Multilayer switch0(config-if)#ip add 192.168.3.254 255.255.255.0 Multilayer switch0config-if)#no shutVlan 4Multilayer switch0(config)#int vlan 4Multilayer switch0(config-if)#ip add 192.168.4.254 255.255.255.0 Multilayer switch0(config-if)#no shutVlan 5Multilayer switch0(config)#int vlan 5Multilayer switch0(config-if)#ip add 192.168.5.254 255.255.255.0 Multilayer switch0(config-if)#no shutMultilayer Switch1配置：Vlan 2Multilayer switch1(config)#int vlan 2Multilayer switch1(config-if)#ip add 192.168.2.253 255.255.255.0 Multilayer switch1(config-if)#no shutVlan 3Multilayer switch1(config)#int vlan 3Multilayer switch1(config-if)#ip add 192.168.3.253 255.255.255.0 Multilayer switch1(config-if)#no shutVlan 4Multilayer switch1(config)#int vlan 4Multilayer switch1(config-if)#ip add 192.168.4.253 255.255.255.0 Multilayer switch1(config-if)#no shutVlan 5Multilayer switch1(config)#int vlan 5Multilayer switch1(config-if)#ip add 192.168.5.253 255.255.255.0 Multilayer switch1(config-if)#no shut6. 生成树协议Multilayer Switch0配置：Multilayer Switch0(config)#spanning-tree vlan 2 rout primary Multilayer Switch0(config)#spanning-tree vlan 3 rout primaryMultilayer Switch0(config)#spanning-tree vlan 4 rout secondary Multilayer Switch0(config)#spanning-tree vlan 5 rout secondaryMultilayer Switch1配置：Multilayer Switch1(config)#spanning-tree vlan 2 rout secondary Multilayer Switch1(config)#spanning-tree vlan 3 rout secondary Multilayer Switch1(config)#spanning-tree vlan 4 rout primary Multilayer Switch1(config)#spanning-tree vlan 5 rout primary7. DHCP服务器配置Multilayer Switch0配置：Vlan 2:Multilayer Switch0(config)#ip dhcp pool vlan2Multilayer Switch0(dhcp-config)#default-router 192.168.2.254 Multilayer Switch0(dhcp-config)#network 192.168.2.0 255..255.255.0 Multilayer Switch0(dhcp-config)#dns-server 202.196.0.1Vlan 3Multilayer Switch0(config)#ip dhcp pool vlan3Multilayer Switch0(dhcp-config)#default-router 192.168.3.254 Multilayer Switch0(dhcp-config)#network 192.168.3.0 255..255.255.0 Multilayer Switch0(dhcp-config)#dns-server 202.196.0.1Vlan 4Multilayer Switch0(config)#ip dhcp pool vlan4Multilayer Switch0(dhcp-config)#default-router 192.168.4.254 Multilayer Switch0(dhcp-config)#network 192.168.4.0 255..255.255.0 Multilayer Switch0(dhcp-config)#dns-server 202.196.0.1Vlan 5Multilayer Switch0(config)#ip dhcp pool vlan5Multilayer Switch0(dhcp-config)#default-router 192.168.5.254 Multilayer Switch0(dhcp-config)#network 192.168.5.0 255..255.255.0 Multilayer Switch0(dhcp-config)#dns-server 202.196.0.1Multilayer Switch0(config)#ip dhcp excluded-address 192.168.2.254 Multilayer Switch0(config)#ip dhcp excluded-address 192.168.3.254 Multilayer Switch0(config)#ip dhcp excluded-address 192.168.4.254Multilayer Switch0(config)#ip dhcp excluded-address 192.168.5.254 Multilayer Switch0(config)#ip dhcp excluded-address 192.168.2.254 Multilayer Switch0(config)#ip dhcp excluded-address 192.168.3.253 Multilayer Switch0(config)#ip dhcp excluded-address 192.168.4.253 Multilayer Switch0(config)#ip dhcp excluded-address 192.168.5.253Multilayer Switch1配置：Vlan 2:Multilayer Switch1(config)#ip dhcp pool vlan2Multilayer Switch1(dhcp-config)#default-router 192.168.2.253 Multilayer Switch1(dhcp-config)#network 192.168.2.0 255..255.255.0 Multilayer Switch1(dhcp-config)#dns-server 202.196.0.1Vlan 3Multilayer Switch1(config)#ip dhcp pool vlan3Multilayer Switch1(dhcp-config)#default-router 192.168.3.253 Multilayer Switch1(dhcp-config)#network 192.168.3.0 255..255.255.0 Multilayer Switch1(dhcp-config)#dns-server 202.196.0.1Vlan 4Multilayer Switch1(config)#ip dhcp pool vlan4Multilayer Switch1(dhcp-config)#default-router 192.168.4.253 Multilayer Switch1(dhcp-config)#network 192.168.4.0 255..255.255.0 Multilayer Switch1(dhcp-config)#dns-server 202.196.0.1Vlan 5Multilayer Switch1(config)#ip dhcp pool vlan5Multilayer Switch1(dhcp-config)#default-router 192.168.5.253Multilayer Switch1(dhcp-config)#network 192.168.5.0 255..255.255.0 Multilayer Switch1(dhcp-config)#dns-server 202.196.0.1Multilayer Switch1(config)#ip dhcp excluded-address 192.168.2.254 Multilayer Switch1(config)#ip dhcp excluded-address 192.168.3.254 Multilayer Switch1(config)#ip dhcp excluded-address 192.168.4.254 Multilayer Switch1(config)#ip dhcp excluded-address 192.168.5.254 Multilayer Switch1(config)#ip dhcp excluded-address 192.168.2.253 Multilayer Switch1(config)#ip dhcp excluded-address 192.168.3.253 Multilayer Switch1(config)#ip dhcp excluded-address 192.168.4.253 Multilayer Switch1(config)#ip dhcp excluded-address 192.168.5.253动态获取主机ip如下：Pc0：Pc1：Pc2：Pc3:8.配置Rip 协议Multilayer Switch0配置：Multilayer Switch0(config)#int f0/24Multilayer Switch0(config-if)#no switchportMultilayer Switch0(config-if)#ip add 10.1.1.1 255.255.255.0Multilayer Switch0(config)#router ripMultilayer Switch0(config-router)#version 2Multilayer Switch0(config-router)#no auto-summary Multilayer Switch0(config-router)#network 192.168.2.0 Multilayer Switch0(config-router)#network 192.168.3.0 Multilayer Switch0(config-router)#network 192.168.4.0 Multilayer Switch0(config-router)#network 192.168.5.0 Multilayer Switch0(config-router)#network 10.1.1.0Multilayer Switch1配置：Multilayer Switch1(config)#int f0/24Multilayer Switch1(config-if)#no switchportMultilayer Switch1(config-if)#ip add 10.2.2.1 255.255.255.0Multilayer Switch1(config-if)#no shutMultilayer Switch1(config)#router ripMultilayer Switch1(config-router)#version 2 Multilayer Switch1(config-router)#no auto-summary Multilayer Switch1(config-router)#network 192.168.2.0 Multilayer Switch1(config-router)#network 192.168.3.0 Multilayer Switch1(config-router)#network 192.168.4.0 Multilayer Switch1(config-router)#network 192.168.5.0 Multilayer Switch1(config-router)#network 10.2.2.0Router0配置：Router0(config)#int f0/0Router0(config-if)#ip add 10.1.1.2 255.255.255.0 Router0(config-if)#no shutRouter0(config)#int f0/1Router0(config-if)#ip add 10.2.2.2 255.255.255.0 Router0(config-if)#no shutRouter0(config)#int s1/0Router0(config-if)#ip add 172.16.1.1 255.255.255.0 Router0(config-if)#no shutRouter0(config)#router ripRouter0(config-router)#version 2Router0(config-router)#no auto-summaryRouter0(config-router)#network 10.1.1.0Router0(config-router)#network 10.2.2.0Router0(config-router)#network 172.16.1.0Router1配置：Router1(config)#int s1/0Router1(config-if)#ip add 172.16.1.2 255.255.255.0 Router1(config-if)#no shutRouter1(config)#int f0/0Router1(config-if)#ip add 200.200.200.200 255.255.255.0 Router1(config-if)#no shutRouter1(config)#router ripRouter1(config-router)#version 2Router1(config-router)#no auto-summaryRouter1(config-router)#network 200.200.200.0Router1(config-router)#network 172.16.1.09. 测试内容内网互通内外互通Pc3 192.168.5.1 ping:Pc2 192.168.4.1Pc1 192.168.3.110. 扩展内容（1）配置内部web服务器Router(config)#access-list 101 permit ip 192.168.5.0 0.0.0.255 any Router(config)#access-list 101 deny ip any anyRouter(config)#int s1/0Router(config-if)#ip access-group 101 outPc3 192.168.5.1 ping：Pc0 192.168.2.1 ping：（2）专用通道Switch0(config)#int f0/3Switch0(config-if)#no switchport access vlan 2Pc1 192.168.3.1 ping :Pc2 192.168.4.1 ping:Pc3 192.168.5.1 ping :（3）设置特定主机远程登录核心交换机Multilayer Switch0配置：Multilayr switch0(config)#enable password 123 Multilayr switch0(config)#line vty 0 4Multilayr switch0(config-line)#password 123Multilayr switch0(config-line)#loginACL配置如下：Multilayr switch0(config)#laccess-list 102 permit tcp 192.168.3.0 0.0.0.255 host 192.168.3.254 eq telnetMultilayr switch0(config)#laccess-list 102 deny tcp any any eq telnetMultilayr switch0(config)#access-list 102 permit ip any anyMultilayr switch0(config)#int range vlan 2-5Multilayr switch0(config-if)#ip access-group 102 inTelnet测试结果：Pc1 192.168.3.1 telnet:Pc3 192.168.5.1 telnet:Multilayer Switch1配置：Multilayr switch1(config)#enable password 123Multilayr switch1(config)#line vty 0 4Multilayr switch1(config-line)#password 123Multilayr switch1(config-line)#loginACL配置如下：Multilayr switch1(config)#laccess-list 103 permit tcp 192.168.3.0 0.0.0.255 host 192.168.3.253 eq telnetMultilayr switch1(config)#laccess-list 103 deny tcp any any eq telnetMultilayr switch1(config)#access-list 103 permit ip any anyMultilayr switch1(config)#int range vlan 2-5Multilayr switch1(config-if)#ip access-group 103 in三、项目总结为期7天的实训即将结束，在这7天里，我们学到了很多东西，也掌握了很多新的知识技能，主要包括VLAN创建、使能密码的设置，远程访问控制配置、中继链路的原理与配置、动态路由协RIP的原理与配置、单臂路由的原理与配置、DHCP协议的原理与配置、访问控制链表ACL的原理与配置、以太网通道及VTP协议的原理与配置、生成树STP协议的原理与配置。