Mô hình trên Packet
Cấu hình
Phân hoạch IP cho các phòng ban.
Phòng
Kinh Doanh 50 máy :
Ø Net 192.168.10.0 /26
Ø Subnetmask 255.255.255.192
Ø DefaultGetway 192.168.1.62 //(Range
192.168.10.1 – 62 )
Phòng
Kế toán có 30 máy :
Ø Net 192.168.10.64
/27
Ø Subnetmask 255.255.255.224
Ø DefaultGetway 192.168.1.94 // (Range 192.168.10.65 – 94 )
Phòng
nhân sự có 20 máy :
Ø Net 192.168.10.96 /27
Ø Subnetmask 255.255.255.224
Ø DefaultGetway 192.168.1.126 // (Range 192.168.10.97 – 126 )
Khu vực
dành cho SERVER :
Ø Net 192.168.10.128/29
Ø Subnetmask 255.255.255.248
Ø DefaultGetway 192.168.1.134 // (Range 192.168.10.129 – 134 )
Ip SERVER : 192.168.10.130
Khu vực dành cho ROUTER :
Ø Net 192.168.10.136/29
Ø Subnetmask 255.255.255.248
Ø DefaultGetway 192.168.1.142 //(Range
192.168.10.137 – 142 )
R1 :192.168.10.137
R2 :192.168.10.138
R3 :192.168.10.139
v Cấu hình VLAN.
SW5(config)#vtp mode server
SW5(config)#vtp domain chanhtinh
SW5(config)#vtp password 123
SW5(config)#interface range fastEthernet 0/1
-5
SW5(config-if-range)#switchport mode trunk
SW5#vlan database
SW5(vlan)#vlan 100 name KINHDOANH
SW5(vlan)#vlan 200 name NHANSU
SW5(vlan)#vlan 300 name KETOAN
SW4(config)#vtp mode transparent
SW4(config)#vtp domain chanhtinh
SW4(config)#vtp password 123
SW4(config)#interface range fastEthernet 0/1
-7
SW4(config-if-range)#switchport mode trunk
SW1(config)#vtp mode client
SW1(config)#vtp domain chanhtinh
SW1(config)#vtp password 123
SW1(config)#in fastEthernet 0/1 //cổng nối với SW4 //
SW1(config-if)#switchport mode trunk
SW1(config)#interface range f0/2 -5
SW1(config-if-range)#switchport mode access
SW1(config-if-range)#switchport access vlan
100
SW1(config-if-range)#exit
SW1(config)#interface range fastEthernet 0/6
-10
SW1(config-if-range)#sw mo acc
SW1(config-if-range)#sw acc vlan 200
SW1(config-if-range)#exit
SW1(config)#in ra f 0/11 -15
SW1(config-if-range)#sw mo acc
SW1(config-if-range)#sw acc vlan 300
SW1(config-if-range)#exit
Kiểm
tra & lưu (SW2_SW3 tương tự)
SW1#copy run start
SW1#show vlan
SW1#show vlan-sw
SW1#sho run ,sho
vtp st ,sho int tr ,sho vtp pa …
v Cấu hình Ether Channel trên
SW4, SW5.
SW5(config-if-range)#interface range
fastEthernet 0/1 -4 //cổng nối với SW4
//
SW5(config-if-range)#channel-group 1 mode on
SW4(config)#interface range fastEthernet 0/1
-4 //cổng nối với SW5 //
SW4(config-if-range)#channel-group 1 mode on
v Cấu hình Routing inter VLAN
trên R1.
R1(config)#in f0/0
R1(config-if)#no sh
R1(config-if)#exit
R1(config)#in f0/0.100
R1(config-subif)#encapsulation dot1Q
100
R1(config-subif)#ip address
192.168.10.62 255.255.255.192
R1(config-subif)#exit
R1(config)#in f0/0.200
R1(config-subif)#encapsulation dot1Q
200
R1(config-subif)#ip address 192.168.10.94
255.255.255.224
R1(config-subif)#exit
R1(config)#in f0/0.300
R1(config-subif)#encapsulation dot1Q
300
R1(config-subif)#ip address
192.168.10.126 255.255.255.224
R1(config-subif)#exit
v Cấu hình DHCP Server trên R1.
SW4 #show vlan \\ Xác định tên vlan
R1(config)#ip dhcp pool 100
R1(dhcp-config)#network 192.168.10.0 255.255.255.192
R1(dhcp-config)#default-router 192.168.10.62
R1(dhcp-config)#dns-server 8.8.8.8
R1(dhcp-config)#exit
R1(config)#ip dhcp pool 200
R1(dhcp-config)#network 192.168.10.64 255.255.255.224
R1(dhcp-config)#default-router 192.168.10.94
R1(dhcp-config)#dns-server 8.8.8.8
R1(dhcp-config)#exit
R1(config)#ip dhcp pool 300
R1(dhcp-config)#network 192.168.10.96 255.255.255.224
R1(dhcp-config)#default-router 192.168.10.126
R1(dhcp-config)#dns-server 8.8.8.8
R1(dhcp-config)#exit
v Cấu hình NAT overload trên R2
và R3.
R2(config)#access-list 1 permit any
R2(config)#ip nat inside source list 1 interface f0/0
overload
R2(config)#in f0/0 \\ Cổng nối với SW6\\
R2(config-if)#ip nat in
R2(config-if)#exit
R2(config)#in f 1/0 \\ Cổng ra bên ngoài WAN \\
R2(config-if)#ip nat outside
R2(config-if)#exit
R3 tt
v Cấu hình RIPv2 trên R1, R2 và
R3.
R1(config)#interface fastEthernet 0/1
R1(config-if)#ip address 192.168.10.137
255.255.255.248
R1(config-if)#no sh
R1(config-if)#exit
R1(config)# in f 1/0
R1(config-if)#no sh
R1(config-if)#ip address 192.168.10.129
255.255.255.248
R1(config-if)#exit
R1(config)#router
rip
R1(config-router)#version
2
R1(config-router)#network
192.168.10.0
R1(config-router)#network
192.168.10.64
R1(config-router)#network
192.168.10.96
R1(config-router)#network
192.168.10.128
R1(config-router)#network
192.168.10.136
R1(config-router)#no
auto-summary
R2(config)#in
f0/0
R2(config-if)#ip
address 192.168.10.138 255.255.255.248
R2(config-if)#no
sh
R2(config)#in
f0/1
R2(config-if)#no sh
R2(config-if)#ip
address dhcp
R2(config)#router
rip
R2(config-router)#version
2
R2(config-router)#network
192.168.10.136
R2(config-router)#no
auto-summary
R2(config-router)#default-information
originate
R3(config)#in
f0/0
R3(config-if)#ip
address 192.168.10.139 255.255.255.248
R3(config-if)#no
sh
R3(config)#in
f0/1
R3r(config-if)#no
sh
R3(config-if)#ip
address dhcp
R3(config)#router
rip
R3(config-router)#version
2
R3(config-router)#network
192.168.10.136
R3(config-router)#no
auto-summary
R3(config-router)#default-information
originate
v Cấu hình HSRP trên R2, R3
R2(config)#interface
f0/0
R2(config-if)#standby
1 ip 192.168.10.140
R2(config-if)#standby
1 priority 150
R2(config-if)#standby
1 preempt
Test ( chưa có HA tren Packet)
R1#sho run
Building configuration...
Current configuration : 1361 bytes
!
version 12.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname R1
!
ip dhcp pool vlan100
network 192.168.1.0 255.255.255.192
default-router 192.168.1.62
ip dhcp pool vlan200
network 192.168.1.64 255.255.255.224
default-router 192.168.1.94
ip dhcp pool vlan300
network 192.168.1.96 255.255.255.224
default-router 192.168.1.126
ip dhcp pool vlan192
network 192.168.1.128 255.255.255.248
default-router 192.168.1.129
!
spanning-tree mode pvst
!
interface FastEthernet0/0
no ip address
duplex auto
speed auto
!
interface FastEthernet0/0.100
encapsulation dot1Q 100
ip address 192.168.1.62 255.255.255.192
!
interface FastEthernet0/0.200
encapsulation dot1Q 200
ip address 192.168.1.94 255.255.255.224
!
interface FastEthernet0/0.300
encapsulation dot1Q 300
ip address 192.168.1.126 255.255.255.224
!
interface FastEthernet0/1
ip address 192.168.1.137 255.255.255.248
duplex auto
speed auto
!
interface FastEthernet1/0
no ip address
duplex auto
speed auto
shutdown
!
interface FastEthernet1/1
ip address 192.168.1.129 255.255.255.248
duplex auto
speed auto
!
interface Vlan1
no ip address
shutdown
!
router rip
version 2
network 192.168.1.0
no auto-summary
!
ip classless
R2#sho run
Building configuration...
Current configuration : 691 bytes
!
version 12.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname R2
!
spanning-tree mode pvst
!
interface FastEthernet0/0
ip address 192.168.1.138 255.255.255.248
ip nat inside
duplex auto
speed auto
!
interface FastEthernet0/1
ip address dhcp
ip nat outside
duplex auto
speed auto
!
interface Vlan1
no ip address
shutdown
!
router rip
version 2
network 192.168.1.0
default-information originate
no auto-summary
!
ip nat inside source list 1 interface FastEthernet0/1 overload
ip classless
!
!
access-list 1 permit any
R3#sho run
Building configuration...
Current configuration : 691 bytes
!
version 12.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname R3
!
spanning-tree mode pvst
!
interface FastEthernet0/0
ip address 192.168.1.139 255.255.255.248
ip nat inside
duplex auto
speed auto
!
interface FastEthernet0/1
ip address dhcp
ip nat outside
duplex auto
speed auto
!
interface Vlan1
no ip address
shutdown
!
router rip
version 2
network 192.168.1.0
default-information originate
no auto-summary
!
ip nat inside source list 1 interface FastEthernet0/1 overload
ip classless
!
!
access-list 1 permit any
!
trên GNS3
Không có nhận xét nào:
Đăng nhận xét