实验3-大型(双核心)网络综合实验(共12页)

1、精选优质文档-倾情为你奉上实验三 大型（双核心）网络综合实验【实验名称】 大型（双核心）网络综合实验【实验原型】 某大型校园全网建设（采用设备： RG-WALL1500千兆防火墙、RG-S6810E、RG-S6806E多业务万兆核心路由交换机、RG-S3550-24千兆三层路由交换机、RG-S2126G/50G千兆安全智能堆叠交换机）【实验目的】 在实验室环境根据具体真实网络建设搭建模拟环境进行综合应用实验，指导学员如何规划实施大型企业、校园双核心网络建设规划【预备知识】 交换路由基础， OSPF动态路由、OSPF路由重分布、静态路由、生成树协议、端口镜像、802.1QVlan、Vlan三层路

2、由、防火墙、SNMP、ACL访问控制、安全控制等【背景描述】 某高校随着学校教学和学生网上应用的增长，校园网以光纤连接了全校近70栋楼宇，覆盖了90%的教学办公场所和75%的学生宿舍。共布有2万多个网络端口，其中约1.2万多个布线端口连通了网络设备，共接入计算机6千多台，有固定注册用户约6000人。原有网络设备已经无法满足新环境下的网络应用，因此该校决定重新规划建设校园网，并提出了如下的需求： 要适应学校的网络特点要求：用户数量庞大，网络应用复杂，不能在终端上限制网络用户行为，只能在网络设备上解决网络问题； 要能够达到轻载要求：低负载，高带宽，最简单，最有效； 要具有先进的技术性：支持线速转发

3、，具备高密度的万兆端口，核心设备支持T级以上的背板设计，硬件实现ACL、QoS、组播等功能； 要稳定、可靠：确保物理层、链路层、网络层、病毒环境下的稳定、可靠； 要有健壮的安全：不以牺牲网络性能为代价，实现病毒和攻击的防护、用户接入控制、路由协议安全； 要易于管理：具备网络拓朴发现、网络设备集中统一管理、性能监视和预警、分类查看管理事件的能力； 要能实现弹性扩展：包括背板带宽、交换容量、转发能力、端口密度、业务能力的可扩展。建设后的网络拓朴如下：【实现功能】 实现内部网络VLAN划分，VLAN三层路由功能；并启用OSPF路由协议、路由重分布，实现双链路冗余备份；病毒攻击防护、防扫描攻击、出口实

4、现地址转换、双出口负载均衡冗余备份、启用生成树协议避免环路；启用端口镜像对出口流量进行监控，全网采用starview进行网络管理。【实验拓扑】 【实验设备】 出口设备：RG-WALL 100（或1000） 1台；核心设备：S68系列（或S65/S35系列设备）2台，配置千兆光纤接口4块；汇聚设备：S3550-24 2台，每台配置2块千兆光纤接口 ； 接入设备：S2126G二层交换机4台； 实验PC：8台；【实验步骤】 实验配置分为：（以下配置默认在全局配置模式下进行 ）。第一步：网络设备的基本配置；第二步：ospf配置及其测试；第一步 基本配置(1) S2150G-A1基本配置hostname

5、 S2150G-A/交换机更名为S2150G-Avlan 1 !vlan 10 /创建VLAN10!vlan 20 /创建VLAN20!vlan 30 /创建VLAN30!interface range fastEthernet 0/1-10 /定义1-10 号端口 switchport access vlan 10 /将其加入VLAN10! interface range fastEthernet 0/11-20 /定义11-20 号端口 switchport access vlan 20 /将其加入VLAN20!interface range fastEthernet 0/21-30 /定

6、义21-30 号端口 switchport access vlan 30 /将其加入VLAN30 ! interface gigabitEthernet 1/1 /配置S2150G-A的上连光纤模块 switchport mode trunk /将其配置为TRUNK 模式S2150G-B与S2150G-A的配置内容基本相同，在此略过。(2) S3550-A1基本配置hostname S3550-A /交换机更名为S3550-Avlan 1!vlan 10 /创建VLAN10!vlan 20 /创建VLAN20!vlan 30 /创建VLAN30!vlan 1014 /创建VLAN1014!vl

7、an 1024 /创建VLAN1024 ! spanning-tree /启动生成树协议interface GigabitEthernet 0/1 /配置1号千兆端口 flowcontrol auto switchport mode trunk /设置为TRUNK模式 switchport trunk native vlan 4093 !interface GigabitEthernet 0/2 flowcontrol auto switchport mode trunk switchport trunk native vlan 4093!interface GigabitEthernet 0

8、/3 switchport mode trunk!interface Vlan 10 ip address 172.16.10.1 255.255.255.0 /配置VLAN10 的IP地址!interface Vlan 20 ip address 172.16.20.1 255.255.255.0 /配置VLAN20的IP地址!interface Vlan 30 ip address 172.16.30.1 255.255.255.0 /配置VLAN30 的IP地址!interface Vlan 1014 ip address 192.168.128.44 255.255.255.248 /

9、配置VLAN1014的IP地址!interface Vlan 1024 ip address 192.168.129.44 255.255.255.248 /配置VLAN1024 的IP地址S3550B的配置基本相同，在此略过。(3) S6810E-A基本配置hostname S6810E-A /交换机更名为S6810E-A! spanning-tree /启动生成树协议interface AggregatePort 1 /配置聚合端口 no switchport /将此端口转为三层接口 ip address 192.168.128.1 255.255.255.248 /配置1号聚合端口的IP

10、地址!interface GigabitEthernet 3/1 medium-type fiber /设置接口连接线缆为光纤线缆switchport mode trunk /设置为TRUNK模式 switchport trunk native vlan 4093!interface GigabitEthernet 3/2 medium-type fiber switchport mode trunk switchport trunk native vlan 4093!interface GigabitEthernet 3/11 no switchport /将此端口转为三层接口 port-g

11、roup 1 /将其加入1号聚合端口 !interface GigabitEthernet 3/12 no switchport /将此端口转为三层接口 port-group 1 /将其加入1号聚合端口!interface Vlan 1014 ip address 192.168.128.45 255.255.255.248 /设置VLAN1014的IP地址!interface Vlan 1016 ip address 192.168.128.67 255.255.255.248 /设置VLAN1016的IP地址S6810E-B的配置基本相同，在此略过。第二步：ospf配置(1) S3550A

12、的路由配置interface Vlan 1024 ip address 192.168.129.44 255.255.255.248 ip ospf cost 100 /设置此链路OSPF代价为100!router ospf /启用OSPF路由协议area 0.0.0.0 /区域0network 192.168.0.0 255.255.0.0 area 0.0.0.0 /公布本交换机的路由信息!(1) S6810E-A的路由配置interface AggregatePort 1 no switchport ip address 192.168.128.1 255.255.255.248 ip

13、ospf cost 1 /设置1号聚合端口的链路OSPF代价为1!interface Vlan 1016 ip address 192.168.128.67 255.255.255.248 ip ospf cost 60 /设置VLAN1016的链路OSPF代价为60!router ospf /启动OSPF路由协议area 0.0.0.0 /区域0network 192.168.0.0 255.255.0.0 area 0.0.0.0 /公布本交换机的路由信息!【问题与思考】1、 为什么把VLAN作为三层接口，这样做的好处是什么？2、 为什么把端口配置为TRUNK模式，这样做的好处是什么？ 【

14、参考配置】(1) S2150G-A 的参考配置专心-专注-专业S2150G-A#sh runBuilding configuration.Current configuration : 2083 bytes!version 1.0!hostname S2150G-Avlan 1!vlan 10!vlan 20!vlan 30!enable secret level 1 5 #E,1u_;Cq&-8U0<Dq'.tj9=Gq+/7R:>Henable secret level 15 5 #/-aehq1'dfimLqtbcknAq7zyglow!interfa

15、ce fastEthernet 0/1 switchport access vlan 10!interface fastEthernet 0/2 switchport access vlan 10! interface fastEthernet 0/3 switchport access vlan 10!interface fastEthernet 0/4 switchport access vlan 10!interface fastEthernet 0/5 switchport access vlan 10!interface fastEthernet 0/6 switchport acc

16、ess vlan 10!interface fastEthernet 0/7 switchport access vlan 10!interface fastEthernet 0/8 switchport access vlan 10!interface fastEthernet 0/9 switchport access vlan 10! interface fastEthernet 0/10 switchport access vlan 10!interface fastEthernet 0/11 switchport access vlan 20!interface fastEthern

17、et 0/12 switchport access vlan 20!interface fastEthernet 0/13 switchport access vlan 20!interface fastEthernet 0/14 switchport access vlan 20!interface fastEthernet 0/15 switchport access vlan 20!interface fastEthernet 0/16 switchport access vlan 20! interface fastEthernet 0/17 switchport access vla

18、n 20!interface fastEthernet 0/18 switchport access vlan 20!interface fastEthernet 0/19 switchport access vlan 20!interface fastEthernet 0/20 switchport access vlan 20!interface fastEthernet 0/21 switchport access vlan 30!interface fastEthernet 0/22 switchport access vlan 30!interface fastEthernet 0/

19、23 switchport access vlan 30! interface fastEthernet 0/24 switchport access vlan 30!interface fastEthernet 0/25 switchport access vlan 30!interface fastEthernet 0/26 switchport access vlan 30!interface fastEthernet 0/27 switchport access vlan 30!interface fastEthernet 0/28 switchport access vlan 30!

20、interface fastEthernet 0/29 switchport access vlan 30!interface fastEthernet 0/30 switchport access vlan 30! interface gigabitEthernet 1/1 switchport mode trunk!interface vlan 10!endS2150G-A#(2) S2150G-B 的参考配置S2150G-B#sh runBuilding configuration.Current configuration : 2061 bytes!version 1.0!hostna

21、me S2150G-Bvlan 1!vlan 50!vlan 60!vlan 70!enable secret level 1 5 #E,1u_;Cq&-8U0<Dq'.tj9=Gq+/7R:>Henable secret level 15 5 #/-aehq1'dfimLqtbcknAq7zyglow!interface fastEthernet 0/1 switchport access vlan 50!interface fastEthernet 0/2 switchport access vlan 50! interface fastEthernet

22、 0/3 switchport access vlan 50!interface fastEthernet 0/4 switchport access vlan 50!interface fastEthernet 0/5 switchport access vlan 50!interface fastEthernet 0/6 switchport access vlan 50!interface fastEthernet 0/7 switchport access vlan 50!interface fastEthernet 0/8 switchport access vlan 50!inte

23、rface fastEthernet 0/9 switchport access vlan 50! interface fastEthernet 0/10 switchport access vlan 50!interface fastEthernet 0/11 switchport access vlan 60!interface fastEthernet 0/12 switchport access vlan 60!interface fastEthernet 0/13 switchport access vlan 60!interface fastEthernet 0/14 switch

24、port access vlan 60!interface fastEthernet 0/15 switchport access vlan 60!interface fastEthernet 0/16 switchport access vlan 60! interface fastEthernet 0/17 switchport access vlan 60!interface fastEthernet 0/18 switchport access vlan 60!interface fastEthernet 0/19 switchport access vlan 60!interface

25、 fastEthernet 0/20 switchport access vlan 60!interface fastEthernet 0/21 switchport access vlan 70!interface fastEthernet 0/22 switchport access vlan 70!interface fastEthernet 0/23 switchport access vlan 70! interface fastEthernet 0/24 switchport access vlan 70!interface fastEthernet 0/25 switchport

26、 access vlan 70!interface fastEthernet 0/26 switchport access vlan 70!interface fastEthernet 0/27 switchport access vlan 70!interface fastEthernet 0/28 switchport access vlan 70!interface fastEthernet 0/29 switchport access vlan 70!interface fastEthernet 0/30 switchport access vlan 70! interface gig

27、abitEthernet 1/1 switchport mode trunk!endS2150G-B#(3) S3550-A的参考配置S3550-A#sh runSystem software version : 2.61 Build Aug 7 2005 ReleaseBuilding configuration.Current configuration : 997 bytes!version 1.0ip routing algorithm CRC32_UPPER!hostname S3550-Avlan 1!vlan 10!vlan 20!vlan 30!vlan 1014!vlan 1

28、024!enable secret level 1 5 #+/7R:>Hq,1u_;C,q-8U0<D+q.tj9=G1enable secret level 15 5 #tbcknAq7zyglowq-aehIq'dfimLM! spanning-tree interface GigabitEthernet 0/1 flowcontrol auto switchport mode trunk switchport trunk native vlan 4093!interface GigabitEthernet 0/2 flowcontrol auto switchport

29、 mode trunk switchport trunk native vlan 4093!interface GigabitEthernet 0/3 switchport mode trunk!interface Vlan 10 ip address 172.16.10.1 255.255.255.0 !interface Vlan 20 ip address 172.16.20.1 255.255.255.0 !interface Vlan 30 ip address 172.16.30.1 255.255.255.0 !interface Vlan 1014 ip address 192

30、.168.128.44 255.255.255.248 !interface Vlan 1024 ip address 192.168.129.44 255.255.255.248 ip ospf cost 100!router ospfarea 0.0.0.0network 192.168.0.0 255.255.0.0 area 0.0.0.0!endS3550-A#(4) S3550-B的参考配置S3550-B#sh runSystem software version : 2.61 Build Aug 7 2005 ReleaseBuilding configuration.Curre

31、nt configuration : 900 bytes!version 1.0ip routing algorithm CRC32_UPPER!hostname S3550-Bvlan 1!vlan 50!vlan 60!vlan 1016!vlan 1026!vlan 4093!enable secret level 1 5 #wNq&#Z1qIOrJ%(8qMpK*.tqxB"/7enable secret level 15 5 #Q8cgkE,qmdhl&-qPaein'.qbfjo+/!interface GigabitEthernet 0/1 sw

32、itchport mode trunk switchport trunk native vlan 4093!interface GigabitEthernet 0/2 switchport mode trunk switchport trunk native vlan 4093!interface GigabitEthernet 0/3 switchport mode trunk!interface Vlan 50 ip address 172.18.50.1 255.255.255.0 !interface Vlan 60 ip address 172.18.60.1 255.255.255

33、.0 !interface Vlan 1016 ip address 192.168.128.66 255.255.255.248 ip ospf cost 60!interface Vlan 1026 ip address 192.168.129.66 255.255.255.248 !interface Vlan 4093!router ospfarea 0.0.0.0network 192.168.0.0 255.255.0.0 area 0.0.0.0!endS3550-B#(5) S6810E-A的参考配置S6810E-A#sh runSystem software version

34、: 2.41(2) Build Sep 19 2005 RelBuilding configuration.Current configuration : 936 bytes!version 1.0install 3 12sfp/gtip routing algorithm CRC32_UPPER!hostname S6810E-Aenable secret level 1 5 #.Y*T7+.qtZV/,|qS(W&-/qX)sv'1enable secret level 15 5 #-aehIq'dfimLMqbcknAxqzyglowN! spanning-tre

35、e interface AggregatePort 1 no switchport ip address 192.168.128.1 255.255.255.248 ip ospf cost 1!interface GigabitEthernet 3/1 medium-type fiberswitchport mode trunk switchport trunk native vlan 4093!interface GigabitEthernet 3/2 medium-type fiberswitchport mode trunk switchport trunk native vlan 4093!interface GigabitEthernet 3/11 no switchport port-group 1 !interface GigabitEthernet 3/12 no switchport port-group 1 !interface Vlan 1014 ip addre