交换综合实验.docx
- 文档编号:4835870
- 上传时间:2023-05-07
- 格式:DOCX
- 页数:35
- 大小:38.24KB
交换综合实验.docx
《交换综合实验.docx》由会员分享,可在线阅读,更多相关《交换综合实验.docx(35页珍藏版)》请在冰点文库上搜索。
交换综合实验
实验拓扑:
实验要求:
1.core-1与core-2的相互接口做成ethernetchannel1,并将Ethernetchannel6设置成trunk模式
2.ED-SW与Core-1,Core-2互连的接口也设置成trunk模式
3.把所有交换机的vtp模式设置成transparent.在所有的交换机上添加vlan64、65、66、67、95
4.设置Core-1为vlan1、64、65的STP主根,为vlan66、67、95的备份根
5.设置Core-2为vlan66、67、95的STP主根,为vlan1、64、65的备份根
6.core-1的f0/2-5port划分到vlan64
core-1的f0/6-10port划分到vlan65
core-1的f0/11-15port划分到vlan66
core-1的f0/16-18port划分到vlan67
把这些port设置成生成树快速转发模式,启用bpduguard.
启用vlan64、65端口的port-security功能,限制每个端口只能学习5个mac地址.
7.core-2的f0/2-5port划分到vlan64
core-2的f0/6-10port划分到vlan65
core-2的f0/11-15port划分到vlan66
core-2的f0/16–18port划分到vlan67
把这些port设置成生成树快速转发模式,禁止这些port收发BPDU信息
设置这些port只接收1M/s的broadcast数据包,2M/s的multicast数据包
8.ed-sw的f0/1-5port划分到vlan64
ed-sw的f0/6-10port划分到vlan65
ed-sw的f0/11-15port划分到vlan66
ed-sw的f0/16-18port划分到vlan67
9.ED-SW上启用Uplinkfast
10.core-1与core-2的每个vlan接口都做HSRP
core-1设置成vlan64、65主用设备
core-2设置成vlan66、67、95主用设备
虚拟的IP地址为:
10.9.xx.254/24,xx为vlan号
11.
Core-1F1/0:
10.9.96.2/30
Core-1Lo0:
10.9.96.201/32
Core-2F1/0:
10.9.96.6/30
Core-2Lo0:
10.9.96.202/32
R1:
F0/0:
10.9.96.1/30
R1:
F0/1:
10.9.96.5/30
R1:
Lo0:
10.9.96.203/32
R1、R2、core-1、core-2启用eigrp路由协议,使所有网络互通
12.R1上启用DHCPServer功能,为以下网段提供DHCP服务:
10.9.64.0/24
10.9.65.0/24
10.9.66.0/24
10.9.67.0/24
保留10.9.xx.1–20,10.9.xx.201–254,xx为vlan号
DNSServer:
10.9.100.203
Default-gateway:
10.9.xxx.254
Domain-name:
并在core-1,core-2的各个vlan端口上应用DHCP广播重定向功能,重定向到10.9.100.201这台DHCPServer,使DHCPServer能够正常为PC提供地址服务
13.启用ED-SWvlan64-65的ipdhcpsnooping功能,并只允许从ED-SW的F0/23–24回来的dhcpreply数据包
14.QOS设定
a)优先传输512kb/svoice流量,并启用RTP头部压缩
b)保障传输100kb/s语音信令流量
c)限制传输200kb/shttp流量,此类流量内部使用WFQ队列机制
d)限制传输100kb/sftp流量
e)剩余带宽给其他流量使用,并用WRED来管理拥塞。
此流量类型所有出去的IP包优先级设定为0
实验答案:
R1#shrunning-config
Buildingconfiguration...
Currentconfiguration:
2087bytes
!
version12.3
servicetimestampsdebugdatetimemsec
servicetimestampslogdatetimemsec
noservicepassword-encryption
!
hostnameR1
!
boot-start-marker
boot-end-marker
!
!
nonetwork-clock-participateslot1
nonetwork-clock-participatewic0
noaaanew-model
ipsubnet-zero
ipcef
!
!
ipdhcpexcluded-address10.9.64.110.9.64.20
ipdhcpexcluded-address10.9.64.20110.9.64.254
ipdhcpexcluded-address10.9.65.110.9.65.20
ipdhcpexcluded-address10.9.65.20110.9.65.254
ipdhcpexcluded-address10.9.66.110.9.66.20
ipdhcpexcluded-address10.9.66.20110.9.66.254
ipdhcpexcluded-address10.9.67.110.9.67.20
ipdhcpexcluded-address10.9.67.20110.9.67.254
!
ipdhcppoolvlan64
network10.9.64.0255.255.255.0
default-router10.9.64.254
domain-name
!
ipdhcppoolvlan65
network10.9.65.0255.255.255.0
default-router10.9.65.254
domain-name
!
ipdhcppoolvlan66
network10.9.66.0255.255.255.0
default-router10.9.66.254
domain-name
!
ipdhcppoolvlan67
network10.9.67.0255.255.255.0
default-router10.9.67.254
domain-name
!
!
class-mapmatch-allhttp
matchprotocolhttp
class-mapmatch-anysignal
matchipprecedence3
matchdscpaf31
class-mapmatch-allftp
matchprotocolftp
class-mapmatch-anyvoice
matchipprecedence5
matchdscpef
!
policy-mapQOS_set
classvoice
priority512
compressheaderiprtp
classsignal
bandwidth100
classftp
police100000conform-actiontransmitexceed-actiondrop
classhttp
bandwidth200
classclass-default
setprecedence0
!
interfaceLoopback0
ipaddress10.9.96.203255.255.255.255
!
interfaceFastEthernet0/0
ipaddress10.9.96.1255.255.255.252
duplexauto
speedauto
!
interfaceFastEthernet0/1
ipaddress10.9.96.5255.255.255.252
duplexauto
speedauto
service-policyoutputQOS_set
!
routereigrp100
network10.9.96.00.0.0.255
noauto-summary
!
noiphttpserver
ipclassless
!
linecon0
lineaux0
linevty04
!
!
end
core1#shrun
Buildingconfiguration...
Currentconfiguration:
5797bytes
!
version12.2
noservicepad
servicetimestampsdebugdatetimemsec
servicetimestampslogdatetimemsec
noservicepassword-encryption
!
hostnamecore1
!
!
noaaanew-model
!
ipsubnet-zero
iprouting
!
!
vtpdomaincipon
vtpmodetransparent
!
!
!
!
!
!
spanning-treemodepvst
spanning-treeetherchannelguardmisconfig
spanning-treeextendsystem-id
spanning-treevlan1,64-65priority24576
spanning-treevlan66-67,95priority28672
!
vlaninternalallocationpolicyascending
!
vlan2-10,20,30,55,64-67,88,95
!
interfaceLoopback0
ipaddress10.9.96.201255.255.255.255
!
interfacePort-channel1
switchporttrunkencapsulationdot1q
switchportmodetrunk
switchportnonegotiate
!
interfacePort-channel2
switchporttrunkencapsulationdot1q
switchportmodetrunk
switchportnonegotiate
!
interfaceFastEthernet0/1
noswitchport
ipaddress10.9.96.2255.255.255.252
!
interfaceFastEthernet0/2
switchportaccessvlan64
switchportmodeaccess
switchportport-securitymaximum5
switchportport-security
spanning-treeportfast
spanning-treebpduguardenable
!
interfaceFastEthernet0/3
switchportaccessvlan64
switchportmodeaccess
switchportport-securitymaximum5
switchportport-security
spanning-treeportfast
spanning-treebpduguardenable
!
interfaceFastEthernet0/4
switchportaccessvlan64
switchportmodeaccess
switchportport-securitymaximum5
switchportport-security
spanning-treeportfast
spanning-treebpduguardenable
!
interfaceFastEthernet0/5
switchportaccessvlan64
switchportmodeaccess
switchportport-securitymaximum5
switchportport-security
spanning-treeportfast
spanning-treebpduguardenable
!
interfaceFastEthernet0/6
switchportaccessvlan65
switchportmodeaccess
switchportport-securitymaximum5
switchportport-security
spanning-treeportfast
spanning-treebpduguardenable
!
interfaceFastEthernet0/7
switchportaccessvlan65
switchportmodeaccess
switchportport-securitymaximum5
switchportport-security
spanning-treeportfast
spanning-treebpduguardenable
!
interfaceFastEthernet0/8
switchportaccessvlan65
switchportmodeaccess
switchportport-securitymaximum5
switchportport-security
spanning-treeportfast
spanning-treebpduguardenable
!
interfaceFastEthernet0/9
switchportaccessvlan65
switchportmodeaccess
switchportport-securitymaximum5
switchportport-security
spanning-treeportfast
spanning-treebpduguardenable
!
interfaceFastEthernet0/10
switchportaccessvlan65
switchportmodeaccess
switchportport-securitymaximum5
switchportport-security
spanning-treeportfast
spanning-treebpduguardenable
!
interfaceFastEthernet0/11
switchportaccessvlan66
switchportmodeaccess
spanning-treeportfast
spanning-treebpduguardenable
!
interfaceFastEthernet0/12
switchportaccessvlan66
switchportmodeaccess
spanning-treeportfast
spanning-treebpduguardenable
!
interfaceFastEthernet0/13
switchportaccessvlan66
switchportmodeaccess
spanning-treeportfast
spanning-treebpduguardenable
!
interfaceFastEthernet0/14
switchportaccessvlan66
switchportmodeaccess
spanning-treeportfast
spanning-treebpduguardenable
!
interfaceFastEthernet0/15
switchportaccessvlan66
switchportmodeaccess
spanning-treeportfast
spanning-treebpduguardenable
!
interfaceFastEthernet0/16
switchportaccessvlan67
switchportmodeaccess
spanning-treeportfast
spanning-treebpduguardenable
!
interfaceFastEthernet0/17
switchportaccessvlan67
switchportmodeaccess
spanning-treeportfast
spanning-treebpduguardenable
!
interfaceFastEthernet0/18
switchportaccessvlan67
switchportmodeaccess
spanning-treeportfast
spanning-treebpduguardenable
!
interfaceFastEthernet0/19
switchportmodedynamicdesirable
!
interfaceFastEthernet0/20
switchportmodedynamicdesirable
!
interfaceFastEthernet0/21
switchporttrunkencapsulationdot1q
switchportmodetrunk
switchportnonegotiate
channel-group2modeactive
!
interfaceFastEthernet0/22
switchporttrunkencapsulationdot1q
switchportmodetrunk
switchportnonegotiate
channel-group2modeactive
!
interfaceFastEthernet0/23
switchporttrunkencapsulationdot1q
switchportmodetrunk
switchportnonegotiate
channel-group1modeactive
!
interfaceFastEthernet0/24
switchporttrunkencapsulationdot1q
switchportmodetrunk
switchportnonegotiate
channel-group1modeactive
!
interfaceGigabitEthernet0/1
switchportmodedynamicdesirable
!
interfaceGigabitEthernet0/2
switchportmodedynamicdesirable
!
interfaceVlan1
noipaddress
shutdown
!
interfaceVlan64
ipaddress10.9.64.1255.255.255.0
iphelper-address10.9.96.1
standby64ip10.9.64.254
standby64priority105
standby64preempt
standby64trackFastEthernet0/1
!
interfaceVlan65
ipaddress10.9.65.1255.255.255.0
iphelper-address10.9.96.1
standby65ip10.9.65.254
standby65priority105
standby65preempt
standby65trackFastEthernet0/1
!
interfaceVlan66
ipaddress10.9.66.1255.255.255.0
iphelper-address10.9.96.1
standby66ip10.9.66.254
standby66preempt
standby66trackFastEthernet0/1
!
interfaceVlan67
ipaddress10.9.67.1255.255.255.0
iphelper-address10.9.96.1
standby67ip10.9.67.254
standby67preempt
standby67trackFastEthernet0/1
!
interfaceVlan95
ipaddress10.9.95.1255.255.255.0
standby95ip10.9.95.254
standby95preempt
standby95trackFastEthernet0/1
!
routereigrp100
noauto-summary
network10.9.64.00.0.0.255
network10.9.65.00.0.0.255
network10.9.66.00.0.0.255
network10.9.67.00.0.0.255
network10.9.95.00.0
- 配套讲稿:
如PPT文件的首页显示word图标,表示该PPT已包含配套word讲稿。双击word图标可打开word文档。
- 特殊限制:
部分文档作品中含有的国旗、国徽等图片,仅作为作品整体效果示例展示,禁止商用。设计者仅对作品中独创性部分享有著作权。
- 关 键 词:
- 交换 综合 实验