Mô hình trên GNS3 (Các Ruoter giả lập SW, các SW này không lưu được cấu hình)
Mô hình trên Packet
Cấu hình
Phân hoạch IP cho các phòng ban.
Phòng
Kinh Doanh 50 máy :
Ø Net 192.168.10.0 /26
Ø Subnetmask 255.255.255.192
Ø DefaultGetway 192.168.1.62 //(Range
192.168.10.1 – 62 )
Phòng
Kế toán có 30 máy :
Ø Net 192.168.10.64
/27
Ø Subnetmask 255.255.255.224
Ø DefaultGetway 192.168.1.94 // (Range 192.168.10.65 – 94 )
Phòng
nhân sự có 20 máy :
Ø Net 192.168.10.96 /27
Ø Subnetmask 255.255.255.224
Ø DefaultGetway 192.168.1.126 // (Range 192.168.10.97 – 126 )
Khu vực
dành cho SERVER :
Ø Net 192.168.10.128/29
Ø Subnetmask 255.255.255.248
Ø DefaultGetway 192.168.1.134 // (Range 192.168.10.129 – 134 )
Ip SERVER : 192.168.10.130
Khu vực dành cho ROUTER :
Ø Net 192.168.10.136/29
Ø Subnetmask 255.255.255.248
Ø DefaultGetway 192.168.1.142 //(Range
192.168.10.137 – 142 )
R1 :192.168.10.137
R2 :192.168.10.138
R3 :192.168.10.139
v Cấu hình VLAN.
SW5(config)#vtp mode server
SW5(config)#vtp domain chanhtinh
SW5(config)#vtp password 123
SW5(config)#interface range fastEthernet 0/1
-5
SW5(config-if-range)#switchport mode trunk
SW5#vlan database
SW5(vlan)#vlan 100 name KINHDOANH
SW5(vlan)#vlan 200 name NHANSU
SW5(vlan)#vlan 300 name KETOAN
SW4(config)#vtp mode transparent
SW4(config)#vtp domain chanhtinh
SW4(config)#vtp password 123
SW4(config)#interface range fastEthernet 0/1
-7
SW4(config-if-range)#switchport mode trunk
SW1(config)#vtp mode client
SW1(config)#vtp domain chanhtinh
SW1(config)#vtp password 123
SW1(config)#in fastEthernet 0/1 //cổng nối với SW4 //
SW1(config-if)#switchport mode trunk
SW1(config)#interface range f0/2 -5
SW1(config-if-range)#switchport mode access
SW1(config-if-range)#switchport access vlan
100
SW1(config-if-range)#exit
SW1(config)#interface range fastEthernet 0/6
-10
SW1(config-if-range)#sw mo acc
SW1(config-if-range)#sw acc vlan 200
SW1(config-if-range)#exit
SW1(config)#in ra f 0/11 -15
SW1(config-if-range)#sw mo acc
SW1(config-if-range)#sw acc vlan 300
SW1(config-if-range)#exit
Kiểm
tra & lưu (SW2_SW3 tương tự)
SW1#copy run start
SW1#show vlan
SW1#show vlan-sw
SW1#sho run ,sho
vtp st ,sho int tr ,sho vtp pa …
v Cấu hình Ether Channel trên
SW4, SW5.
SW5(config-if-range)#interface range
fastEthernet 0/1 -4 //cổng nối với SW4
//
SW5(config-if-range)#channel-group 1 mode on
SW4(config)#interface range fastEthernet 0/1
-4 //cổng nối với SW5 //
SW4(config-if-range)#channel-group 1 mode on
v Cấu hình Routing inter VLAN
trên R1.
R1(config)#in f0/0
R1(config-if)#no sh
R1(config-if)#exit
R1(config)#in f0/0.100
R1(config-subif)#encapsulation dot1Q
100
R1(config-subif)#ip address
192.168.10.62 255.255.255.192
R1(config-subif)#exit
R1(config)#in f0/0.200
R1(config-subif)#encapsulation dot1Q
200
R1(config-subif)#ip address 192.168.10.94
255.255.255.224
R1(config-subif)#exit
R1(config)#in f0/0.300
R1(config-subif)#encapsulation dot1Q
300
R1(config-subif)#ip address
192.168.10.126 255.255.255.224
R1(config-subif)#exit
v Cấu hình DHCP Server trên R1.
SW4 #show vlan \\ Xác định tên vlan
R1(config)#ip dhcp pool 100
R1(dhcp-config)#network 192.168.10.0 255.255.255.192
R1(dhcp-config)#default-router 192.168.10.62
R1(dhcp-config)#dns-server 8.8.8.8
R1(dhcp-config)#exit
R1(config)#ip dhcp pool 200
R1(dhcp-config)#network 192.168.10.64 255.255.255.224
R1(dhcp-config)#default-router 192.168.10.94
R1(dhcp-config)#dns-server 8.8.8.8
R1(dhcp-config)#exit
R1(config)#ip dhcp pool 300
R1(dhcp-config)#network 192.168.10.96 255.255.255.224
R1(dhcp-config)#default-router 192.168.10.126
R1(dhcp-config)#dns-server 8.8.8.8
R1(dhcp-config)#exit
v Cấu hình NAT overload trên R2
và R3.
R2(config)#access-list 1 permit any
R2(config)#ip nat inside source list 1 interface f0/0
overload
R2(config)#in f0/0 \\ Cổng nối với SW6\\
R2(config-if)#ip nat in
R2(config-if)#exit
R2(config)#in f 1/0 \\ Cổng ra bên ngoài WAN \\
R2(config-if)#ip nat outside
R2(config-if)#exit
R3 tt
v Cấu hình RIPv2 trên R1, R2 và
R3.
R1(config)#interface fastEthernet 0/1
R1(config-if)#ip address 192.168.10.137
255.255.255.248
R1(config-if)#no sh
R1(config-if)#exit
R1(config)# in f 1/0
R1(config-if)#no sh
R1(config-if)#ip address 192.168.10.129
255.255.255.248
R1(config-if)#exit
R1(config)#router
rip
R1(config-router)#version
2
R1(config-router)#network
192.168.10.0
R1(config-router)#network
192.168.10.64
R1(config-router)#network
192.168.10.96
R1(config-router)#network
192.168.10.128
R1(config-router)#network
192.168.10.136
R1(config-router)#no
auto-summary
R2(config)#in
f0/0
R2(config-if)#ip
address 192.168.10.138 255.255.255.248
R2(config-if)#no
sh
R2(config)#in
f0/1
R2(config-if)#no sh
R2(config-if)#ip
address dhcp
R2(config)#router
rip
R2(config-router)#version
2
R2(config-router)#network
192.168.10.136
R2(config-router)#no
auto-summary
R2(config-router)#default-information
originate
R3(config)#in
f0/0
R3(config-if)#ip
address 192.168.10.139 255.255.255.248
R3(config-if)#no
sh
R3(config)#in
f0/1
R3r(config-if)#no
sh
R3(config-if)#ip
address dhcp
R3(config)#router
rip
R3(config-router)#version
2
R3(config-router)#network
192.168.10.136
R3(config-router)#no
auto-summary
R3(config-router)#default-information
originate
v Cấu hình HSRP trên R2, R3
R2(config)#interface
f0/0
R2(config-if)#standby
1 ip 192.168.10.140
R2(config-if)#standby
1 priority 150
R2(config-if)#standby
1 preempt
Test ( chưa có HA tren Packet)
R1#sho run
Building configuration...
Current configuration : 1361 bytes
!
version 12.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname R1
!
ip dhcp pool vlan100
network 192.168.1.0 255.255.255.192
default-router 192.168.1.62
ip dhcp pool vlan200
network 192.168.1.64 255.255.255.224
default-router 192.168.1.94
ip dhcp pool vlan300
network 192.168.1.96 255.255.255.224
default-router 192.168.1.126
ip dhcp pool vlan192
network 192.168.1.128 255.255.255.248
default-router 192.168.1.129
!
spanning-tree mode pvst
!
interface FastEthernet0/0
no ip address
duplex auto
speed auto
!
interface FastEthernet0/0.100
encapsulation dot1Q 100
ip address 192.168.1.62 255.255.255.192
!
interface FastEthernet0/0.200
encapsulation dot1Q 200
ip address 192.168.1.94 255.255.255.224
!
interface FastEthernet0/0.300
encapsulation dot1Q 300
ip address 192.168.1.126 255.255.255.224
!
interface FastEthernet0/1
ip address 192.168.1.137 255.255.255.248
duplex auto
speed auto
!
interface FastEthernet1/0
no ip address
duplex auto
speed auto
shutdown
!
interface FastEthernet1/1
ip address 192.168.1.129 255.255.255.248
duplex auto
speed auto
!
interface Vlan1
no ip address
shutdown
!
router rip
version 2
network 192.168.1.0
no auto-summary
!
ip classless
R2#sho run
Building configuration...
Current configuration : 691 bytes
!
version 12.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname R2
!
spanning-tree mode pvst
!
interface FastEthernet0/0
ip address 192.168.1.138 255.255.255.248
ip nat inside
duplex auto
speed auto
!
interface FastEthernet0/1
ip address dhcp
ip nat outside
duplex auto
speed auto
!
interface Vlan1
no ip address
shutdown
!
router rip
version 2
network 192.168.1.0
default-information originate
no auto-summary
!
ip nat inside source list 1 interface FastEthernet0/1 overload
ip classless
!
!
access-list 1 permit any
R3#sho run
Building configuration...
Current configuration : 691 bytes
!
version 12.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname R3
!
spanning-tree mode pvst
!
interface FastEthernet0/0
ip address 192.168.1.139 255.255.255.248
ip nat inside
duplex auto
speed auto
!
interface FastEthernet0/1
ip address dhcp
ip nat outside
duplex auto
speed auto
!
interface Vlan1
no ip address
shutdown
!
router rip
version 2
network 192.168.1.0
default-information originate
no auto-summary
!
ip nat inside source list 1 interface FastEthernet0/1 overload
ip classless
!
!
access-list 1 permit any
!
trên GNS3