大型网络的整个安装与配置全过程_图文

1、说明这是一个比较综合的实例,从拓扑图上可以看出,它所包含的设备和技术。以下对这个例子作些说明。对于内部局域网,选用 Cisco 的 Catalyst 6506作为中心交换机,二级交换采用 Catalyst 3500,同时为了说 明 Trunk ,又加了一个 Catalyst 2900 作为三级交换,对于终端连接用了 Catalyst 1900交换机,这样就可 以在 Catalyst 6506与 Catalyst 3500之间以及 Catalyst 3500与 Catalyst 2900 之间建立 Trunk ,实现跨交 换机的 VLAN 。注:Catalyst 2900系列如果要实现 Trun

2、k ,软件必须是企业版的。对于外连上 , 主要是专线连接和拨号访问 , 当然种类比较多 . 包括了 DDN 、 ISDN、 Frame Relay、 E1 线路 等。本例给出设备的基本配置。对于多设备的连接问题 , 值得注意的是路由问题 , 本实例外连部分采用静态路由而内部局域网采用动态路由 . 在本例的帧中继配置中 , 运用了 IP Unnumbered ,可以节省地址资源 , 有兴趣可以注意一下。网络拓扑:VLAN 划分问题对于交换设备本例中划到 VLAN 1中 , 而对于外连设备的所有以太网端口 , 均划到 VLAN 2中 , 下面给出各 VLAN 的名称和网关地址 , 本例划分 8个

3、VLAN.VLAN ID VLAN Name GatewayVLAN 1 Bluestudy 1 /16VLAN 2 Bluestudy 2 /16VLAN 3 Bluestudy 3 /16VLAN 4 Bluestudy 4 /16VLAN 5 Bluestudy 5 /16VLAN 6 Bluestudy 6 /16VLAN 7 Bluestudy 7 /16VLAN 8 Bluestudy 8 /16中国思科华为3COM网络技术站 http:/www.Cisc

4、oH Catalyst 6506 的配置Enter password:enableEnter password:config tset system name Bluestudyset time 10/30/2000 9:30:00set passwordset enablepassset interface sc0 /16set ip route default set ip dns server 00set ip dns domain set ip dns enableset vtp domain bluestudy mode servers

5、et vlan 1 name Bluestudy 1set vlan 2 name Bluestudy 2set vlan 3 name Bluestudy 3set vlan 4 name Bluestudy 4set vlan 5 name Bluestudy 5set vlan 6 name Bluestudy 6中国思科华为3COM网络技术站 http:/www.CiscoHset vlan 7 name Bluestudy 7set vlan 8 name Bluestudy 8set port negotiation 2/1-8 enableset port name 2/1-8

6、GEC 802.1Q Trunkset trunk 2/1-8 desirable dot1qset port speed 2/1-8 1000set vlan 1 3/1-48对于 6506的交换机方面的配置只需做出 Trunk 即可 , 因为要实现跨交换机之间的虚网 , 下面配置 6506的路 由模块 , 因为 6506的路由模块现在与管理引擎模块集成在了一起 , 所以 , 默认命令是 :Session 15 ,详情请见 6506 路由设置 .Catalyst 6506RSM模块的配置(enable session 15Trying Router-15.Connected to Route

7、r-15.Escape character is ''.enableconfigure terminalhostname bluestudyenable password passwordline vty 0 6password secret_wordip domain-name ip name-server 00interface vlan 1ip address no shutdowninterface vlan 2ip address no shutdowninterface

8、vlan 3ip address no shutdowninterface vlan 4ip address no shutdowninterface vlan 5ip address no shutdowninterface vlan 6ip address no shutdowninterface vlan 7ip address no shutdowninterface vlan 8ip a

9、ddress no shutdownrouter ripversion 2network ip route 2ip route 3ip route 40 1 ip route 1ip route 1ip route 192.1

10、68.6.0 1copy running-config startup-configBuilding configuration.OK这里给出的是单纯的命令行 , 略去了一些默认状况的设置 .Catalyst 3500 的配置!version 12.0no service padservice timestamps debug uptimeservice timestamps log uptimeservice password-encryption!hostname bluestudy!enable password password!userna

11、me bluestudy password passwordusername test password password!省略端口的显示!interface GigabitEthernet0/1switchport trunk encapsulation dot1qswitchport mode trunk!interface GigabitEthernet0/2!interface VLAN1ip address ip helper-address 00ip directed-broadcastno ip route-cache!ip

12、 default-gateway interface Ethernet1/1(与 2900对接 switchport trunk encapsulation dot1qswitchport mode trunk!interface Ethernet1/2(与 1900 A对接 switchport access VLAN 3no shut!interface Ethernet1/3(与 1900 B对接 switchport access VLAN 4no shut!snmp-server engineID local 000000090200000216BE4E80 snmp

13、-server community public ROsnmp-server community private RWsnmp-server chassis-id 0x17(打开简单的网络管理,便于以后, Cisco 网管软件识别和管理 !line con 0login localtransport input nonestopbits 1line vty 0 4login localline vty 5 15login!endCatalyst 2900 的配置2900的配置与 3500的相似 , 命令如下hostname bluestudy!enable password password!

14、username bluestudy password passwordusername test password password!省略端口的显示!interface Ethernet0/1(与 3500对接 switchport trunk encapsulation dot1qswitchport mode trunk!interface VLAN1ip address ip helper-address 00ip directed-broadcastno ip route-cache!ip default-gateway 10.

15、1.0.1!interface Ethernet0/2(与 1900 C对接 switchport access VLAN 5no shut!interface Ethernet0/3(与 1900 D对接 switchport access VLAN 6no shut!snmp-server engineID local 000000090200000216BE4E80 snmp-server community public ROsnmp-server community private RWsnmp-server chassis-id 0x17!line con 0login local

16、transport input nonestopbits 1line vty 0 4login localline vty 5 15login!endCisco Catalyst 1900 的配置对于 1900的配置就相对容易得多了只需在 enable 状态下键入 Setup 就会进入配置向导 给出交换机的IP 地址 :掩码 :网关 :就可以了 , 另外应该打开简单的网络管理协议 SNMP snmp-server community public ROsnmp-server community private RW即可PIX 520A的基本

17、配置PIX Version 4.2(4nameif ethernet0 outside security0nameif ethernet1 inside security100enable password password encryptedpasswd password encryptedhostname pix_Afixup protocol ftp 21fixup protocol http 80fixup protocol smtp 25fixup protocol h323 1720fixup protocol rsh 514fixup protocol sqlnet 1521na

18、mesno failoverfailover timeout 0:00:00failover ip address outside failover ip address inside pager lines 24no logging consolelogging monitor debugginglogging buffered debuggingno logging traplogging facility 20interface ethernet0 autointerface ethernet1 autoip address outside 192.168.0

19、.1 52 ip address inside 3 arp timeout 14400nat (inside 0 52rip outside passiveno rip outside defaultno rip inside passiverip inside defaultroute outside route inside timeout xlate 3

20、:00:00 conn 1:00:00 udp 0:02:00timeout rpc 0:10:00 h323 0:05:00timeout uauth 0:05:00 absolutesnmp-server community public ROsnmp-server community private RWtelnet 00 55telnet timeout 15mtu outside 1500mtu inside 1500floodguard 0Cisco 2610A 的配置Current configuration:!version 11.3s

21、ervice timestamps debug uptimeservice timestamps log uptimeservice password-encryption!hostname 2610A!enable password password!username bluestudy password password no ip domain-lookup!interface Ethernet0/0ip address 52 no shut!interface Serial0/0ip address 255.25

22、5.255.252 no shut!interface Serial0/1no ip addressshutdown!ip route ip route !snmp-server community public ROsnmp-server community private RW !line con 0line aux 0line vty 0 4login local!no scheduler allocateendCisco 1603的配置Current con

23、figuration:!version 12.0service timestamps debug uptime service timestamps log uptimeno service password-encryption!hostname 1603!enable secret passwordenable password password!memory-size iomem 25ip subnet-zero!interface Serial0ip address 52 no ip directed-broadcast!interfa

24、ce Ethernet0ip address no ip unreachablesno ip directed-broadcast!ip classlessip route s0no ip http server!snmp-server community public RO snmp-server community private RW!line con 0password passwordtransport input noneline aux 0line vty 0 4password password

25、login!no scheduler allocateendPIX 520B的基本配置PIX Version 4.2(4nameif ethernet0 outside security0nameif ethernet1 inside security100enable password password encryptedpasswd password encryptedhostname pix520_Bfixup protocol ftp 21fixup protocol http 80fixup protocol smtp 25fixup protocol h323 1720fixup

26、protocol rsh 514fixup protocol sqlnet 1521namesno failoverfailover timeout 0:00:00failover ip address outside failover ip address inside pager lines 24no logging consoleno logging monitorno logging bufferedno logging traplogging facility 20interface ethernet0 autointerface ethernet1 au

27、toip address outside 7 48 ip address inside 2 arp timeout 14400global (outside 1 00nat (inside 1 0 0no rip outside passiveno rip outside defaultno rip inside passiveno rip inside defaultroute outside

28、8 timeout xlate 3:00:00 conn 1:00:00 udp 0:02:00 timeout rpc 0:10:00 h323 0:05:00timeout uauth 0:05:00 absoluteno snmp-server locationno snmp-server contactsnmp-server community publicno snmp-server enable trapstelnet 00 55telnet timeout 15mtu outside 1500mtu inside 1500floodgua

29、rd 0Cisco 2610B 的配置Current configuration:!version 11.3service timestamps debug uptimeservice timestamps log uptimeservice password-encryption!hostname 2610B!enable password password!username bluestudy password password no ip domain-lookup!interface Ethernet0/0ip address 8 48

30、 no shut!interface Serial0/0ip address 52 no shut!interface Serial0/1no ip addressshutdown!ip route !snmp-server community public ROsnmp-server community private RW !line con 0line aux 0line vty 0 4login local!no scheduler allocateendCisco 2610c 的

31、配置version 11.2service udp-small-serversservice tcp-small-servers!hostname 2610C!enable secret cisco!ip subnet-zerono ip domain-lookup!ip address-pool localisdn switch-type basic-net3interface Ethernet0ip address 1 !interface Serial0no ip addressencapsulation frame-relayframe-rela

32、y lmi-type ansi!interface Serial0.1 point-to-point description Frame Relay to bluestudy1 ip unnumbered Ethernet0frame-relay interface-dlci 10!interface Serial0.2 point-to-pointdescription Frame Relay to bluestudy2 ip unnumbered Ethernet0frame-relay interface-dlci 11!interface BRI1/0no ip addressshut

33、downisdn switch-type basic-net3!interface BRI1/1ip address 40 encapsulation ppptimeout absolute 60 0dialer idle-timeout 3600dialer-group 1isdn switch-type basic-net3peer default ip address pool defaultppp authentication chap pap callin!interface BRI1/2no ip addressencapsulat

34、ion pppshutdownisdn switch-type basic-net3!interface BRI1/3no ip addressencapsulation pppshutdownisdn switch-type basic-net3no peer default ip address!ip local pool default 4 ip http serverip classlessip route serial0.1 ip route 255.255.25

35、5.0 serial0.2 ip route !access-list 1 permit anydialer-list 1 protocol ip list 1line con 0password consoleloginline aux 0line vty 0 4password telnetlogin!endCisco 1720A 的配置version 11.2service udp-small-serversservice tcp-small-servershostname bluestudy1!enable secret cisco!ip

36、 subnet-zerono ip domain-lookup!interface Fastethernet0ip address !interface Serial0no ip addressencapsulation frame-relay!interface Serial0.1 point-to-point description Frame Relay to bluestudy ip unnumbered Ethernet0frame-relay interface-dlci 10!ip http serverip classless

37、ip route serial0.1 !line con 0password consoleloginline aux 0line vty 0 4password bluestudy1login!endCisco 1720B 的配置version 11.2service udp-small-serversservice tcp-small-servershostname bluestudy1!enable secret cisco!ip subnet-zerono ip domain-lookup!interface Fastethernet0ip address !interface Serial0no ip addressencapsulation frame-relay!interface Serial0.1 point-to-pointdescr