Po company to build a network

Project requirements:
1. Different PC belonging to a different VLAN, as shown in FIG;
IP address is different VLAN 2: 192.168.XX.0 / 24, XX is the vlan number;
3. different VLAN hosts obtain IP addresses way for dHCP (except special needs)
gateway IP address of the host each VLAN, are: 192.168.XX.254 / 24;
4.vlan88 server where the web-server; gateway on SW5 is;
vlan66 to dhcp -server server is located; SW6 are on the gateway;
each host employed 5. other VLAN gateway uses a high-availability technology to enhance the gateway
redundancy and stability.
6. switches between the use of anti-loop technique, and can be implemented for each VLAN traffic load
balancing function. Meanwhile, each VLAN requires the host, the host is destined for the gateway, used for
forwarding path is optimal.
7. In the internal running OSPF, to ensure interoperability between different VLAN is.
Different VLAN belong to different regions.
Area while protecting web and dhcp server is not subject to external links and other areas
affecting links unstable.
8. The router's outlet R1 and R2, but will always R1 as a main outlet, failure
after, the network traffic will be automatically switched to R2. After the repair, it will be forwarded from R1 again.

9. A large number of hosts within the network there needs to access the Internet, requires the use of IP addresses the most economical
way to achieve Internet host within the network, but vlan 40 confidential part, can not access the Internet.

10. The external network user (client-1), can access the internal web server.

11. users outside the network (SW9), can remotely control all network devices within the network (not including the R1 / R2),
the remote access password are set HCIE.
(Within the network management IP address of each device belonging management VLAN 199)

12. users within the network, the only by all 20 devices vlan PC-2 in the remote management network login
not be other users.
Po company to build a network
sw1, sw2, sw3, sw4 added to create a corresponding interface vlan
DHCP enable
STP. 1 in Region Configuration vlan-20 is 10
in 2 vlan 30 40 Active SW1 - SW6 are disposed above command
SW5
STP STP in 4096 in. 1 2 PR PR 8192
STP REG Region-name. 1 -CON
in. 1 10 20 is VLAN
in VLAN 2 30 40
Active Region-CON

int Vlanif100
ip add 192.168.100.1 24
int Vlanif10
ip ad 192.168.10.251 24
vrrp vrid 1 virtual-ip 192.168.10.250
vrrp vrid 1 priority 200
dhcp select relay
dhcp relay server-ip 192.168.66.6
int Vlanif20
ip add 192.168.20.251 24
vrrp vrid 1 virtual-ip 192.168.20.250
vrrp vrid 1 priority 200
dhcp select relay
dhcp relay server-ip 192.168.66.6
interface Vlanif30
ip add 192.168.30.252 24
vrrp vrid 2 virtual-ip 192.168.30.250
dhcp select relay
dhcp relay server-ip 192.168.66.6
interface Vlanif40
ip add 192.168.40.252 24
vrrp vrid 2 virtual-ip 192.168.40.250
dhcp select relay
dhcp relay server-ip 192.168.66.6
ospf 1
area 0
network 192.168.100.0 0.0.0.255
area 10
network 192.168.10.0 0.0.0.255
area 20
network 192.168.20.0 0.0.0.255
sw6 dhcp enab
stp ins 1 pr 8192
stp ins 2 pr 4096
stp region-con
region-name 1
ins 1 vlan 10 20
ins 2 vlan 30 40
active region-configuration
int Vlanif10
ip add 192.168.10.252 255.255.255.0
vrrp vrid 1 virtual-ip 192.168.10.250
dhcp select relay
dhcp relay server-ip 192.168.66.6
int Vlanif20
ip add 192.168.20.252 255.255.255.0
vrrp vrid 1 virtual-ip 192.168.20.250
dhcp select relay
dhcp relay server-ip 192.168.66.6
interface Vlanif30
ip add 192.168.30.251 255.255.255.0
vrrp vrid 2 virtual-ip 192.168.30.250
vrrp vrid 2 priority 200
dhcp select relay
dhcp relay server-ip 192.168.66.6

sw6
dhcp enab
stp ins 1 pr 8192
stp ins 2 pr 4096
stp region-con
region-name 1
ins 1 vlan 10 20
ins 2 vlan 30 40
active region-configuration
int Vlanif10
ip add 192.168.10.252 255.255.255.0
vrrp vrid 1 virtual-ip 192.168.10.250
dhcp select relay
dhcp relay server-ip 192.168.66.6
int Vlanif20
ip add 192.168.20.252 255.255.255.0
vrrp vrid 1 virtual-ip 192.168.20.250
dhcp select relay
dhcp relay server-ip 192.168.66.6
interface Vlanif30
ip add 192.168.30.251 255.255.255.0
vrrp vrid 2 virtual-ip 192.168.30.250
vrrp vrid 2 priority 200
dhcp select relay
dhcp relay server-ip 192.168.66.6
int Vlanif66
ip add 192.168.66.1 24
int Vlanif100
ip add 192.168.100.2 24
int Vlanif40
ip add 192.168.40.251 24
vrrp vrid 2 virtual-ip 192.168.40.250
vrrp vrid 2 priority 200
ospf 1
area 0
network 192.168.100.0 0.0.0.255
area 30
network 192.168.30.0 0.0.0.255
area 40
network 192.168.40.0 0.0.0.255
area 66
network 192.168.66.0 0.0.0.255
dhcp select relay
dhcp relay server-ip 192.168.66.6

Guess you like

Origin blog.51cto.com/14459075/2430137