在这里插入代码片1000人校园区网设计
1、配置Eth-trunk实现链路冗余 vlan 900 管理WLAN
sys
undo in en
sysname JR-SW8
int Eth-Trunk 1
mode lacp-static
trunkport g0/0/1 0/0/2
port link-type trunk
port trunk allow-pass vlan 200 900
qu
vlan batch 200 900port-g g eth 0/0/2 eth 0/0/3
port link-type access
port default vlan 200
sys
sysname HX_SW1
int Eth-Trunk 1
trunkport g 0/0/2 0/0/5
port link-type trunk
port trunk allow-pass vlan 200 900
qu
vlan batch 10 20 30 40 200 900
sys
sysname JR_SW5
vlan batch 10 900
port group g e0/0/2 e0/0/3
port link-type access
port default vlan 10
int g 0/0/1
port link-type trunk
port trunk allow-pass vlan 10 900
q
sys
sysname JR_SW6
vlan batch 20 900
int e0/0/1
port link-type access
port default vlan20
q
int g0/0/1
port link-type trunk
port trunk allow-pass vlan 20 900
sys
sysname HJ_SW2
vlan batch 10 20 900
int g0/0/2
port link-type trunk
port trunk allow-pass vlan 10 900int g0/0/3
port-type trunk
port trunk allow-pass vlan 20 900int g0/0/1
port link-type trunk
port trunk allow-pass vlan 10 20 900
sys
sysname JR_SW7
undo in en
vlan batch 30 900
port-g g e0/0/1 to e0/0/22
port link-type access
port default vlan 30 int g0/0/1
port link-type trunk
port trunk allow-pass vlan 30 900
sys
sysname HJ_SW3
undo in en
vlan batch 30 900
qu
port-g g g0/0/1 g0/0/2
port link-type trunk
port trunk allow-pass vlan 30 900
qu
sys
sysname JR_SW9
undo in en
vlan batch 40 900
int e0/0/2
port link-type access
port default vlan 40
int g0/0/1
port link-type trunk
port trunk allow-pass vlan 40 900
sys
sysname HJ_SW4
vlan batch 40 900
port-g g g0/0/1 g0/0/2
port link-type trunk
port trunk allow-pass vlan 20 900
qu
vlan 800
int g0/0/0
port link-type trunk
port trunk allow-pass vlan 10 20 900int g0/0/3
port link-type trunk
port trunk allow-pass vlan 30 900int g0/0/4
port link-type trunk
port trunk allow-pass vlan 40 900int g0/0/24
port link-type access
port default vlan 800
qu
int vlan 10
ip add 192.168.10.1 24
1000人校园区网设计
1、配置Eth-trunk实现链路冗余 vlan 900 管理WLAN
sys
undo in en
sysname JR-SW8
int Eth-Trunk 1
mode lacp-static
trunkport g0/0/1 g/0/2
port link-type trunk vlan
port trunk allow-pass vlan 200 900
qu
vlan batch 200 900port-g g eth 0/0/2 eth 0/0/3
port link-type access
port default vlan 200
sys
sysname HX_SW1
int Eth-Trunk 1
trunkport g0/0/2 g0/0/5
port link-type trunk
port trunk allow-pass vlan 200 900
qu
vlan batch 10 20 30 40 200 900
sys
sysname JR_SW5
vlan batch 10 900
port group g e0/0/2 e0/0/3
port link-type access
port default vlan 10
int g 0/0/1
port link-type trunk
port trunk allow-pass vlan 10 900
q
sys
sysname JR_SW6
vlan batch 20 900
int g0/0/1
port link-type access
port default vlan20
q
int g0/0/1
port link-type trunk
port trunk allow-pass vlan 20 900
sys
sysname HJ_SW2
vlan batch 10 20 900
int g0/0/2
port link-type trunk
port allow-pass vlan 10 900int g0/0/3
port-type trunk
port trunk allow-pass vlan 20 900int g0/0/1
port link-type trunk
port trunk allow-pass vlan 10 20 900
sys
sysname JR_SW7
undo in en
vlan batch 30 900
port-g g e0/0/1 to e0/0/22
port link-type access
port default vlan 30 int g0/0/1
port link-type trunk
port trunk allow-pass vlan 30 900
sys
sysname HJ_SW3
undo in en
vlan batch 30 900
qu
port-g g g0/0/1 g0/0/2
port link-type trunk
port trunk allow-pass vlan 30 900
qu
sys
sysname JR_SW9
undo in en
vlan batch 40 900
int e0/0/2
port link-type access
port default vlan 40
int g0/0/1
port link-type trunk
port trunk allow-pass vlan 40 900
sys
sysname HJ_SW4
vlan batch 40 900
port-g g g0/0/1 g0/0/2
port link-type trunk
port trunk allow-pass vlan 20 900
qu
vlan 800
int g0/0/0
port link-type trunk
port trunk allow-pass vlan 10 20 900int g0/0/3
port link-type trunk
port trunk allow-pass vlan 30 900int g0/0/4
port link-type trunk
port trunk allow-pass vlan 40 900int g0/0/24
port link-type access
port default vlan 800
qu
int vlan 10
ip add 192.168.10.1 24
int vlan 20
ip add 192.168.20.1 24
int vlan 30
ip add 192.168.30.1 24
int vlan 40
ip add 192.168.40.1 24
int vlan 200
ip add 192.168.200.1 24
int vlan 800
ip add 192.168.254.2 24
DHCP enable
ip pool SYL_vlan10
network 192.168.10.0 mask 24
gateway-list 192.168.10.1
dns-list 114.114.114.114 8.8.8.8ip pool SYL_vlan20
network 192.168.20.0 mask 24
gateway-list 192.168.20.1
dns-list 114.114.114.114 8.8.8.8ip pool JXL_vlan30
network 192.168.30.0 mask 24
gateway-list 192.168.30.1
dns-list 114.114.114.114 8.8.8.8ip pool XZL_vlan40
network 192.168.40.0 mask 24
gateway-list 192.168.40.1
dns-list 114.114.114.114 8.8.8.8
int vlan 10
dhcp select globalint vlan 20
dhcp select globalint vlan 30
dhcp select globalint vlan 40
dhcp select global
int g4/0/0
ip add 192.168.254.1 24int g3/0/0
ip add 12.1.1.1 29int g0/0/1
ip add 13.1.1.1 29int g1/0/0
ip add 192.168.104.1 30int g2/0/0
ip add 192.168.105.1 30
qu
sysname YD_R2
int e0/0/0
ip add 12.1.1.6 29
int loo 0
ip add 9.9.9.9 24
description baidu
sysname LT_R3
int e0/0/0
ip add 13.1.1.6 29
int loo 0
ip add 9.9.9.9 24
sysname XXQ1_R4
int e0/0/1
ip add 192.168.104.2 30
int e0/0/0
ip add 192.168.100.1 24
sysname XXQ2_R5
int e0/0/0
ip add 192.168.105.2 30
int e0/0/1
ip add 192.168.150.1 24
sys
ospf 1 route-id 1.1.1.1
area 0
network 192.168.200.0 0.0.0.255
network 192.168.10.0 0.0.0.255
network 192.168.20.0 0.0.0.255
network 192.168.30.0 0.0.0.255
network 192.168.40.0 0.0.0.255
network 192.168.254.0 0.0.0.255
sys
ospf 1 route-id 2.2.2.2
area 0
network 192.168.254.0 0.0.0.255
network 192.168.104.1 0.0.0.0
network 192.168.105.1 0.0.0.0
sys
ospf 1 route-id 4.4.4.4
area 0
network 192.168.104.2 0.0.0.0
network 192.168.100.1 0.0.0.0
sys
ospf 1 route-id 5.5.5.5
area 0
network 192.168.105.2 0.0.0.0
network 192.168.150.1 0.0.0.0
ip route-static 0.0.0.0 0 192.168.254.1
sys
ip route-static 0.0.0.0 0 12.1.1.6
ip route-static 0.0.0.0 0 13.1.1.6 preference 70
acl 2000
rule 5 permit source 192.168.0.0 0.0.255.255
qu
int g3/0/0
nat server protocol tcp global curretn-intface www inside 192.168.200.10 www
nat outbound 2000
int g0/0/1
nat server protocol tcp global curretn-intface www inside 192.168.200.10 www
nat outbound 2000
sys
aaa
local-user aa privilege level 3 password cipher 123
local-user aa service-type telnet
qu
user-interface vty 0 4
protocol inbound telnet
telnet server enable
authentication-mode aaa
int vlan 900
ip add 192.168.255.1 24
sys
aaa
local-user aa privilege level 3 password cipher 123
local-user aa service-type telnet
qu
user-interface vty 0 4
protocol inbound telnet
telnet server enable
authentication-mode aaa
int vlan 900
ip add 192.168.255.8 24
qu
ip route-static 0.0.0.0 192.168.255.1
acl 3000
rule 5 permit ip source 192.168.40.0 0.0.0.255 destination 192.168.200.20 0
rule 10 deny ip source any destination 192.168.200.20 0
int Eth-Trunk1
traffic-filter outbound acl 3000
sys
acl 3001
rule permit ip destination 192.168.0.0 0.0.255.255
rule deny ip source 192.168.20.0 0.0.0.255
int g4/0/0
traffic-filter inbound acl 3001
snmp-agent sys-info version allo
snmp-agent community write 123
snmp-agent community read 456
DHCP enable
ip pool SYL_vlan10
network 192.168.10.0 mask 24
gateway-list 192.168.10.1
dns-list 114.114.114.114 8.8.8.8ip pool SYL_vlan20
network 192.168.20.0 mask 24
gateway-list 192.168.20.1
dns-list 114.114.114.114 8.8.8.8ip pool JXL_vlan30
network 192.168.30.0 mask 24
gateway-list 192.168.30.1
dns-list 114.114.114.114 8.8.8.8ip pool XZL_vlan40
network 192.168.40.0 mask 24
gateway-list 192.168.40.1
dns-list 114.114.114.114 8.8.8.8
int vlan 10
dhcp select globalint vlan 20
dhcp select globalint vlan 30
dhcp select globalint vlan 40
dhcp select global
int g4/0/0
ip add 192.168.254.1 24int g3/0/0
ip add 12.1.1.1 29int g0/0/1
ip add 13.1.1.1 29int g1/0/0
ip add 192.168.104.1 30int g2/0/0
ip add 192.168.105.1 30
qu
sysname YD_R2
int e0/0/0
ip add 12.1.1.6 29
int loo 0
ip add 9.9.9.9 24
description baidu
sysname LT_R3
int e0/0/0
ip add 13.1.1.6 29
loo 0
ip add 9.9.9.9 24
sysname XXQ1_R4
int e0/0/1
ip add 192.168.104.2 30
int e0/0/0
ip add 192.168.100.1 24
sysname XXQ2_R5
int e0/0/0
ip add 192.168.105.2 30
int e0/0/1
ip add 192.168.105.1 24
sys
ospf 1 route-id 1.1.1.1
area 0
network 192.168.200.0 0.0.0.255
network 192.168.10.0 0.0.0.255
network 192.168.20.0 0.0.0.255
network 192.168.30.0 0.0.0.255
network 192.168.40.0 0.0.0.255
network 192.168.254.0 0.0.0.255
sys
ospf 1 route-id 2.2.2.2
area 0
network 192.168.254.0 0.0.0.255
network 192.168.104.1 0.0.0.0
network 192.168.105.1 0.0.0.0
sys
ospf 1 route-id 4.4.4.4
area 0
network 192.168.104.2 0.0.0.0
network 192.168.100.1 0.0.0.0
sys
ospf 1 route-id 5.5.5.5
area 0
network 192.168.105.2 0.0.0.0
network 192.168.150.1 0.0.0.0
sys
ip route-static 0.0.0.0 0 12.1.1.6
ip route-static 0.0.0.0 0 13.1.1.6 preference 70
acl 2000
rule 5 permit source 192.168.0.0 0.0.255.255
qu
int g3/0/0
nat outbound 2000
int g 0/0/1p
int g3/0/0
nat server protocol tcp global curretn-intface www inside 192.168.200.10 www
nat outbound 2000
int g0/0/1
nat server protocol tcp global curretn-intface www inside 192.168.200.10 www
nat outbound 2000
sys
aaa
local-user aa privilege level 3 password cipher 123
local-user aa service-type telnet
qu
user-interface vty 0 4
protocol inbound telnet
authentication-mode aaa
q
telnet server enable
int vlan 900
ip add 192.168.255.1 24
sys
aaa
local-user aa privilege level 3 password cipher 123
local-user aa service-type telnet
qu
user-interface vty 0 4
protocol inbound telnet authentication-mode aaa
int vlan 900
ip add 192.168.255.8 24
qu
telnet server enable
ip route-static 0.0.0.0 0 192.168.255.1
acl 3000
rule 5 permit ip source 192.168.40.0 0.0.0.255 destination 192.168.200.20 0
rule 10 deny ip source any destination 192.168.200.20 0
int Eth-Trunk1
traffic-filter outbound acl 3000
sys
acl 3001
rule permit ip destination 192.168.0.0 0.0.255.255
rule deny ip source 192.168.20.0 0.0.0.255
int g4/0/0
traffic-filter inbound acl 3001
snmp-agent sys-info version allo
snmp-agent community write 123
snmp-agent community read 456