实验要求:
vlan10网关sw1 vlan20网关R1 vlan30/40网关sw2
vlan50/60网关R2 vlan40与vlan50都可以访问vlan60
但两个vlan在2层互相隔离 sw3 为DHCP服务器
实现全网vlan互通
思路与步骤:
实验 VLAN DHCP ACL RIP 配置
思路与配置:
1.配置SW1:创建vlan10和vlan20
将0端口加入vlan10 2和3端口加入vlan20
vlanif10 ip:192.168.10.254 255.255.255.0
vlanif20 ip:192.168.20.2 255.255.255.0
2.配置SW2:创建vlan30 40 50 60
将5端口加入vlan30 4端口加入vlan40
将1和2端口加入vlan50 1和6端口加入vlan60
vlanif30ip:192.168.30.254 255.255.255.0
vlanif40ip:192.168.40.254 255.255.255.0
vlanif530ip:192.168.50.2 255.255.255.0
vlanif60ip:192.168.60.24 255.255.255.0
3.配置R1: 配置0端口ip:192.168.20.254 255.255.255.0
配置1端口ip:192.168.12.1 255.255.255.0
配置2端口ip:192.168.100.254 255.255.255.0
4.配置R2: 配置0端口ip:192.168.50.254 255.255.255.0
配置1端口ip:192.168.12.2 255.255.255.0
配置2端口ip:192.168.60.254 255.255.255.0
5.配置SW3 创建vlan100
将1端口加入vlan100
vlanif100ip:192.168.100.1 255.255.255.0
6.配置SW1 创建RIP
rip
version 2
network 192.168.10.0
network 192.168.20.0
7.配置R1 创建RIP
rip
version 2
network 192.168.12.0
network 192.168.20.0
network 192.168.100.0
8.配置SW2 创建RIP
rip
version 2
network 192.168.30.0
network 192.168.40.0
network 192.168.50.0
network 192.168.60.0
9.配置R2 创建RIP
rip
version 2
network 192.168.12.0
network 192.168.50.0
network 192.168.60.0
10.配置sw3 创建RIP
rip
version 2
network 192.168.100.0
如果手动配置pc机的ip 此就可以全网互通
11.配置SW3的地址池:系统模式下 dhcp enable
ip pool vlan10
network 192.168.10.0 mask 255.255.255.0
gateway-list 192.168.10.254
dns-list 1.1.1.1
lease day 3
ip pool vlan20
network 192.168.20.0 mask 255.255.255.0
gateway-list 192.168.20.254
dns-list 1.1.1.1
lease day 3
ip pool vlan30
network 192.168.30.0 mask 255.255.255.0
gateway-list 192.168.30.254
dns-list 1.1.1.1
lease day 3
ip pool vlan40
network 192.168.40.0 mask 255.255.255.0
gateway-list 192.168.40.254
dns-list 1.1.1.1
lease day 3
ip pool vlan50
network 192.168.50.0 mask 255.255.255.0
gateway-list 192.168.50.254
dns-list 1.1.1.1
lease day 3
进入vlan100端口 选择全局模式
interface g0/0/0
dhcp select global
12.配置SW1:开启中继 dhcp enable
interface vlanif 10
dhcp select relay
dhcp relay sever-ip 192.168.100.1
13.配置R1:开启中继 dhcp enable
interface g0/0/0
dhcp select relay
dhcp relay sever-ip 192.168.100.1
14.配置SW2:开启中继 dhcp enable
interface vlanif 30
dhcp select relay
dhcp relay sever-ip 192.168.100.1
interface vlanif 40
dhcp select relay
dhcp relay sever-ip 192.168.100.1
15.配置R2:开启中继 dhcp enable
interface g0/0/0
dhcp select relay
dhcp relay sever-ip 192.168.100.1
interface g0/0/2
dhcp select relay
dhcp relay sever-ip 192.168.100.1
16.此时在个pc机上选择dhcp获取:通过ipconfig查取ip
pc1:
pc2:
pc3:
pc4:
pc5:
17.配置SW2 配置ACL 让pc4与pc2隔离
acl name pc4-2 advance
rule 5 deny ip sourse 192.168.40.253 0.0.0.0 destiation 192.168.50.253 0.0.0.0
quit
interface e0/0/4
traffic-fliter inbound acl name pc4-2
18.手动配置sever1的 ip192.168.60.1 255.255.255.0
网关 192.168.60.254
##除了pc4与pc2不通之外 此时全网所有pc机互通