三层交换机多VLAN+NAT上网实验(有拓扑和配置文件)

1、三层交换机多 VLAN+NATt 网实验配置（有拓扑和配置文件） Fe0/0/24 说明： 适用中心三层交换机划多 VLAN（间不能互访），VLAN 通过路由 NAT 上网 配置文件如下： router1#showrun Buildingconfiguration. Currentconfiguration:745bytes! version12.4 servicetimestampsdebugdatetimemsecservicetimestampslogdatetimemsecnoservicepassword-encryption hostnamerouteribo

2、ot-start-markerboot-end-marker! s1/0 1 /24 三层交换机 创建vlan10vlan20 Fe1/1/24 Fe1/3 Fe1/4 VLAN20 fl PC1 IP:0/24 GW PC1 IP:0/24 GW ! noaaanew-modelmemory-sizeiomem5! ! ipcefinterfaceFastEthernet0/0noipaddressshutdownduplexautospeedauto!

3、interfaceSerial1/0 ipaddressserialrestart-delay0! interfaceSerial1/1noipaddressshutdown serialrestart-delay0! interfaceSerial1/2noipaddressshutdownserialrestart-delay0! interfaceSerial1/3noipaddressshutdownserialrestart-delay0! noiphttpserver! control-planelinecon0lineaux0 lin

4、evty04! ! End router2#showrun Buildingconfiguration. Currentconfiguration:989bytes! version12.4 servicetimestampsdebugdatetimemsecservicetimestampslogdatetimemsecnoservicepassword-encryption! hostnamerouter2 ! boot-start-marker boot-end-marker ! ! noaaanew-model memory-sizeiomem5! ! ipcefinterfaceFa

5、stEthernet0/0 ipaddressipnatinside ipvirtual-reassembly speed100full-duplex! interfaceSerial1/0 ipaddressipnatoutside ipvirtual-reassemblyserialrestart-delay0interfaceSerial1/1 noipaddress shutdown serialrestart-delay0! interfaceSerial1/2 noipaddress sh

6、utdown serialrestart-delay0! interfaceSerial1/3 noipaddress shutdown serialrestart-delay0 ! iphttpserver iproute! ! ipnatinsidesourcelist101interfaceSerial1/0overload! access-list101permitip55anycontrol-planelinecon0 lineaux0 linevty04sw1#showrun

7、Buildingconfiguration. Currentconfiguration:1284bytes! version12.4 servicetimestampsdebugdatetimemsecservicetimestampslogdatetimemsecnoservicepassword-encryption! hostnamesw1 ! boot-start-marker boot-end-marker! ! noaaanew-model memory-sizeiomem5! ! ipcefinterfaceFastEthernet1/0! interfaceFastEthern

8、et1/1 noswitchport ipaddress! interfaceFastEthernet1/2 ! interfaceFastEthernet1/3 switchportaccessvlan10 vlan-iddot1q10exit-vlan-config! ! interfaceFastEthernet1/4 switchportaccessvlan20! interfaceFastEthernet1/5interfaceFastEthernet1/6 interfaceFastEthernet1/7interfaceFastEt

9、hernet1/8! interfaceFastEthernet1/9! interfaceFastEthernet1/10! interfaceFastEthernet1/11! interfaceFastEthernet1/12! interfaceFastEthernet1/13! interfaceFastEthernet1/14! interfaceFastEthernet1/15! interfaceVlan1noipaddress! interfaceVlan10 ipaddressipaccess-group101in! int

10、erfaceVlan20 ipaddress! noiphttpserver iprouteaccess-list101denyip5555access-list101permitipanyanycontrol-plane! linecon0 lineaux0 linevty04Endpc1#showrun Buildingconfiguration. Currentconfiguration:385bytes! ver

11、sion12.2 servicetimestampsdebuguptimeservicetimestampsloguptimenoservicepassword-encryption! hostnamepc1! ! ipsubnet-zero noiproutinginterfaceFastEthernet0/0 ipaddress0noiproute-cache speed100full-duplex ! ipdefault-gateway ipclasslessiphttpserver! ! linecon0 lineaux0 linevty04 pc2#showrun Buildingconfiguration. Currentconfiguration:385bytes! version12.2 servicetimestampsdebuguptimeservicetimestampsloguptimenoservicepassword-encryption! hostnamepc2! ! ipsubnet-zero noiproutingi