中等規(guī)模公司網(wǎng)絡(luò)構(gòu)建

1、項目實踐NSD1408班樊登遠一.項目介紹某中等規(guī)模公司的網(wǎng)絡(luò)環(huán)境如下圖1所示，本公司現(xiàn)有三個部門分別是生產(chǎn)部、銷售部、 技術(shù)部，生產(chǎn)部屬于vlanl，銷售部屬于vlan2，技術(shù)部屬于vlan3,所有PC的IP地址均為靜態(tài)配置， 各部門之間都可互相通信，并且能夠訪問外網(wǎng)。網(wǎng)絡(luò)拓撲如圖所示：PC1 PC2 PC3 PC4 PC5 PC6二項目實踐項目介紹該項目模擬一個中等規(guī)模公司的網(wǎng)絡(luò)環(huán)境。為了保證網(wǎng)絡(luò)的高可用性，需要使用很多的冗余 技術(shù)。例如，為了保證局域網(wǎng)絡(luò)不會因為線路故障而導致的網(wǎng)絡(luò)分段使用了冗余線路；為了保證 客戶端機器不會因為使用單一網(wǎng)關(guān)而出現(xiàn)的單點失敗使用了熱備份路由協(xié)議；為了保證到

2、互聯(lián)網(wǎng) 的高可用接入使用了冗余互聯(lián)網(wǎng)連接。在一個二層網(wǎng)絡(luò)中使用冗余線路，雖然解決了線路上的單點失敗問題，但是也帶來了新的問 題，主要是廣播風暴、交換機MAC地址表不穩(wěn)定等。采用生成樹協(xié)議STP，可以邏輯將冗余路 徑上的某一個端口阻塞來防止二層環(huán)路的產(chǎn)生。當物理環(huán)路上的某一條線路出線故障，STP會自 動將被阻塞的端口轉(zhuǎn)換為轉(zhuǎn)發(fā)狀態(tài)。生成樹協(xié)議STP既解決了二層環(huán)路帶來的問題，又實現(xiàn)了網(wǎng) 絡(luò)的高可用性。在局域網(wǎng)中有大量的客戶端機器，如果只是在一個大的平面網(wǎng)絡(luò)中會出現(xiàn)很多問題，比如廣 播風暴。因此在這樣的網(wǎng)絡(luò)環(huán)境中，VLAN技術(shù)是必不可少的。對于擁有龐大的客戶機數(shù)量的網(wǎng)絡(luò)，管理員采用手工的方式配置靜

3、態(tài)IP地址，工作量非常大，也容易出錯。采用DHCP自動配置IP地址則更加方便，針對每個VLAN,利用交換機直接可 以實現(xiàn)為客戶機動態(tài)分配IP地址。企業(yè)中不只是一個網(wǎng)絡(luò)，各個網(wǎng)絡(luò)間必須要互相通夠通信，在三層交換機上配置三層交換以 及實現(xiàn)路由協(xié)議可以解決網(wǎng)絡(luò)聯(lián)通問題。因為IPv4地址的短缺，往往企業(yè)中都只能獲得一個或少量的幾個全球唯一的公有IP地址。局域網(wǎng)中的眾多機器還都有接入互聯(lián)網(wǎng)的需求，這就不得不使用網(wǎng)絡(luò)地址轉(zhuǎn)換NAT技術(shù)。方案基于項目的需求，解決方案中需要用到如下技術(shù)：VLAN：實現(xiàn)廣播控制TRUNK：中繼，實現(xiàn)不同交換機上相同VLAN的通信STP：解決二層環(huán)路帶來的廣播風暴等問題三層交換：

4、實現(xiàn)VLAN間互通DHCP:實現(xiàn)客戶機IP地址的自動分配以太通道：不改變現(xiàn)有環(huán)境，提高網(wǎng)絡(luò)帶寬RIP路由協(xié)議：實現(xiàn)網(wǎng)絡(luò)路徑的自動學習默認路由：實現(xiàn)到互聯(lián)網(wǎng)數(shù)以萬計網(wǎng)絡(luò)訪問的簡化配置ACL：為網(wǎng)絡(luò)地址轉(zhuǎn)換設(shè)定要轉(zhuǎn)換的內(nèi)部IP地址NAT：將企業(yè)局域網(wǎng)接入互聯(lián)網(wǎng)HSRP:實現(xiàn)冗余網(wǎng)關(guān)拓撲及說明改良后的網(wǎng)絡(luò)拓撲如圖所示PC1 PC2PC3 PC4 PC5 PC6網(wǎng)絡(luò)連接說明設(shè)備接口IP地址默認網(wǎng)關(guān)對端設(shè)備SW1F0/1n/an/aPC1F0/2n/an/aPC2F0/3n/an/aMS1F0/4n/an/aMS2SW2F0/1n/an/aPC3F0/2n/an/aPC4F0/3n/an/aMS1F0/

5、4n/an/aMS2SW3F0/1n/an/aPC5F0/2n/an/aPC6F0/3n/an/aMS1F0/4n/an/aMS2MS1F0/1n/an/aSW1F0/2n/an/aSW2F0/3n/an/aSW3F0/4n/an/aMS2F0/5n/an/aMS2F0/6192.168.4.1n/aR1F0/7192.168.6.1n/aR2Vlan2192.168.1.254/24n/an/aVlan3192.168.2.254/24n/an/aVlan4192.168.3.254/24n/an/aMS2F0/1n/an/aSW3F0/2n/an/aSW2F0/3n/an/aSW1F0/4

6、n/an/aMS1F0/5n/an/aMS1F0/6192.168.7.1/24n/aR2F0/7192.168.5.1/24n/aR1Vlan2192.168.1.253/24n/an/aVlan3192.168.2.253/24n/an/aVlan4192.168.3.253/24n/an/aR1F0/0192.168.4.2/24n/aMS1F0/1200.0.0.254/24n/aInternetF1/0192.168.5.2/24n/aMS2R2F0/0192.168.7.2/24n/aMS2F0/1200.0.0.253/24n/aInternetF1/0192.168.6.2/2

7、4n/aMS1PC1NICDHCPDHCPSW1PC2NICDHCPDHCPSW1PC3NICDHCPDHCPSW2PC4NICDHCPDHCPSW2PC5NICDHCPDHCPSW3PC6NICDHCPDHCPSW3InternetF0/1n/an/aR1F0/2n/an/aR2Vlan1200.0.0.1/24n/an/a注：Internet用一臺二層交換機模擬實現(xiàn)注：各設(shè)備根據(jù)拓撲圖中的標注進行改名配置中繼鏈路分別在交換機上配置中繼SW1上的配置SW1enableSW1#configure terminalSW1(config)#interface range f0/3-4SW1(con

8、fig-if-range)#switchport mode trunkSW2上的配置SW2enableSW2#configure terminalSW2(config)#interface range f0/3-4SW2(config-if-range)#switchport mode trunkSW3上的配置SW3enableSW3#configure terminalSW3(config)#interface range f0/3-4SW3(config-if-range)#switchport mode trunkMS1上的配置MS1enableMS1#configure termina

9、lMS1(config)#interface range f0/1-5MS1(config-if-range)#switchport trunk encapsulation dot1qMS1(config-if-range)#switchport mode trunkMS2上的配置MS2enableMS2#configure terminalMS2(config)#interface range f0/1-5MS2(config-if-range)#switchport trunk encapsulation dot1qMS2(config-if-range)#switchport mode

10、trunk在MS1和MS2上配置以太網(wǎng)通道MS1上的配置MS1(config)#interface range f0/4-5MS1(config-if-range)#channel-group 1 mode onMS1(config-if-range)#endMS1#show etherchannel summaryFlags: D - downP - in port-channelI - stand-alone s - suspendedH - Hot-standby (LACP only)R - Layer3S - Layer2U - in usef - failed to allocat

11、e aggregatoru - unsuitable for bundling w - waiting to be aggregated d - default portNumber of channel-groups in use: 1Number of aggregators:1Group Port-channel Protocol Ports +1 Po1(SU)-Fa0/4(P) Fa0/5(P)MS2上的配置MS2(config)#interface range f0/4-5MS2(config-if-range)#channel-group 1 mode onMS2(config-

12、if-range)#endMS2#show etherchannel summaryFlags: D - downP - in port-channelI - stand-alone s - suspendedH - Hot-standby (LACP only)R - Layer3S - Layer2U - in usef - failed to allocate aggregatoru - unsuitable for bundling w - waiting to be aggregated d - default portNumber of channel-groups in use:

13、 1Number of aggregators:1Group Port-channel Protocol Ports +1Po1(SU)-Fa0/4(P) Fa0/5(P)(3)配置 vlan需要三個 vlan, PC1 和 PC2 在 vlanl 中，PC3 和 PC4 在 vlan2 中，PC5 和 PC6 在 vlan3 中分別在各交換機上創(chuàng)建相應(yīng)的vlan (vlanl默認存在，不需要單獨創(chuàng)建)SW1上的配置SW1(config)#vlan 2SW1(config-vlan)#exitSW1(config)#vlan 3SW1(config-vlan)#exitStatusPortsd

14、efaultactiveFa0/1, Fa0/2, Fa0/5, Fa0/6Fa0/7, Fa0/8, Fa0/9, Fa0/10Fa0/11,Fa0/15,Fa0/19,Fa0/23,Fa0/12,Fa0/16,Fa0/20,Fa0/24,Fa0/13,Fa0/17,Fa0/21,Gig1/1,Fa0/14Fa0/18Fa0/22Gig1/2SW1(config)#exit SW1#show vlan brief VLAN Name2VLAN0002active3VLAN0003active1002fddi-defaultactive1003token-ring-defaultactive1

15、004fddinet-defaultactive1005trnet-defaultactiveSW2上的配置SW2(config)#vlan 2SW2(config-vlan)#exitSW2(config)#vlan 3SW2(config-vlan)#exitSW2(config)#exitSW2#show vlan briefVLANNameStatus1-defaultactive2VLAN0002active3VLAN0003active1002fddi-defaultactive1003token-ring-defaultactive1004fddinet-defaultactiv

16、e1005trnet-defaultactiveSW3上的配置SW3(config)#vlan 2SW3(config-vlan)#exitSW3(config)#vlan 3SW3(config-vlan)#exitSW3(config)#exitSW3#show vlan briefVLANNameStatus1defaultactive2VLAN0002active3VLAN0003active1002fddi-defaultactive1003token-ring-defaultactive1004fddinet-defaultactive10 05trnet-defaultactiv

17、eMS1上的配置MS1(config)#vlan 2MS1(config-vlan)#exitMS1(config)#vlan 3MS1(config-vlan)#exitMS1(config)#exitMS1#show vlan briefVLANNameStatus1-defaultactivePortsFa0/1, Fa0/2, Fa0/5, Fa0/6Fa0/7, Fa0/8, Fa0/9, Fa0/10Fa0/11,Fa0/15,Fa0/19,Fa0/23,Fa0/12,Fa0/16,Fa0/20,Fa0/24,Fa0/13,Fa0/17,Fa0/21,Gig1/1,Fa0/14Fa

18、0/18Fa0/22Gig1/2PortsFa0/1, Fa0/2, Fa0/5, Fa0/6Fa0/7, Fa0/8, Fa0/9, Fa0/10Fa0/11,Fa0/15,Fa0/19,Fa0/23,Fa0/12,Fa0/16,Fa0/20,Fa0/24,Fa0/13,Fa0/17,Fa0/21,Gig1/1,Fa0/14Fa0/18Fa0/22Gig1/2PortsFa0/6, Fa0/7, Fa0/8, Fa0/9Fa0/10, Fa0/11, Fa0/12, Fa0/13Fa0/14, Fa0/15, Fa0/16, Fa0/17Fa0/18, Fa0/19, Fa0/20, Fa0

19、/21Fa0/22, Fa0/23, Fa0/24, Gig0/1StatusPortsdefaultactiveFa0/6, Fa0/7, Fa0/8, Fa0/9Fa0/10,Fa0/14,Fa0/18,Fa0/22,Gig0/2Fa0/11,Fa0/15,Fa0/19,Fa0/23,Fa0/12,Fa0/16,Fa0/20,Fa0/24,Fa0/13Fa0/17Fa0/21Gig0/12 3 1002 1003 1004VLAN0002VLAN0003 fddi-default token-ring-default fddinet-default1005 trnet-defaultact

20、ive active active activeactive activeGig0/22VLAN0002active3VLAN0003active1002fddi-defaultactive1003token-ring-defaultactive1004fddinet-defaultactive1005trnet-defaultactiveMS2上的配置MS2(config)#vlan 2MS2(config-vlan)#exitMS2(config)#vlan 3MS2(config-vlan)#exitMS2(config)#exitMS2#show vlan brief VLAN Nam

21、e在SW1上把PC1、PC2加入到vlanl，在SW2上把PC3、PC4加入到vlan2,在SW3上把PC5、PC6 加入到 vlan3SW1上的配置SW1(config)#interface range f0/1-2SW1(config-if-range)#switchport access vlan 1SW2上的配置SW2(config)#interface range f0/1-2SW2(config-if-range)#switchport access vlan 2SW3上的配置SW3(config)#interface range f0/1-2SW3(config-if-range

22、)#switchport access vlan 3根據(jù)上述表格配置IP地址MS1上的配置MS1(config)#interface f0/6MS1(config-if)#no switchportMS1(config-if)#ip address 192.168.4.1 255.255.255.0MS1(config-if)#no shutdownMS1(config-if)#exitMS1(config)#interface f0/7MS1(config-if)#no switchportMS1(config-if)#ip address 192.168.6.1 255.255.255.0

23、MS1(config-if)#no shutdownMS1(config-if)#exitMS1(config)#interface vlan 1MS1(config-if)#ip add 192.168.1.254 255.255.255.0MS1(config-if)#no shutdownMS1(config-if)#exitMS1(config)#interface vlan 2MS1(config-if)#ip add 192.168.2.254 255.255.255.0MS1(config-if)#no shutdownMS1(config-if)#exitMS1(config)

24、#interface vlan 3MS1(config-if)#ip add 192.168.3.254 255.255.255.0MS1(config-if)#no shutdownMS1(config-if)#exitMS2上的配置MS2(config)#interface f0/6MS2(config-if)#no switchportMS2(config-if)#ip address 192.168.7.1 255.255.255.0MS2(config-if)#no shutdownMS2(config-if)#exitMS2(config)#interface f0/7MS2(co

25、nfig-if)#no switchportMS2(config-if)#ip address 192.168.5.1 255.255.255.0MS2(config-if)#no shutdownMS2(config-if)#exitMS2(config)#interface vlan 1MS2(config-if)#ip address 192.168.1.253 255.255.255.0MS2(config-if)#no shutdownMS2(config-if)#exitMS2(config)#interface vlan 2MS2(config-if)#ip address 19

26、2.168.2.253 255.255.255.0MS2(config-if)#no shutdownMS2(config-if)#exitMS2(config)#interface vlan 3MS2(config-if)#ip address 192.168.3.253 255.255.255.0MS2(config-if)#no shutdownMS2(config-if)#exitR1上的配置R1(config)#interface f0/0R1(config-if)#ip address 192.168.4.2 255.255.255.0R1(config-if)#no shutdo

27、wnR1(config-if)#exitR1(config)#interface f0/1R1(config-if)#ip address 200.0.0.254 255.255.255.0R1(config-if)#no shutdownR1(config-if)#exitR1(config)#interface f1/0R1(config-if)#ip address 192.168.5.2 255.255.255.0R1(config-if)#no shutdownR1(config-if)#exitR2上的配置R2(config)#interface f0/0R2(config-if)

28、#ip address 192.168.7.2 255.255.255.0R2(config-if)#no shutdownR2(config-if)#exitR2(config)#interface f0/1R2(config-if)#ip address 200.0.0.253 255.255.255.0R2(config-if)#no shutdownR2(config-if)#exitR2(config)#interface f1/0R2(config-if)#ip address 192.168.6.2 255.255.255.0R2(config-if)#no shutdownR2

29、(config-if)#exit模擬Internet的二層交換機SW4上的配置SW4(config)#interface vlan 1SW4(config-if)#ip address 200.0.0.1 255.255.255.0SW4(config-if)#no shutdown六臺PC的IP地址采用自動獲得的方式獲取啟動三層交換機的路由功能MS1上的配置MS1(config)#ip routingMS2上的配置MS2(config)#ip routing配置 DHCP兩臺三層交換機均可以針對每個VLAN分配IP地址，為了不產(chǎn)生沖突，它們需要使用不同的IP地址池范圍MS1上的配置MS1(c

30、onfig)#ip dhcp pool vlan1MS1(dhcp-config)#network 192.168.1.0 255.255.255.0MS1(dhcp-config)#default-router 192.168.1.254MS1(dhcp-config)#exitMS1(config)#ip dhcp pool vlan2MS1(dhcp-config)#network 192.168.2.0 255.255.255.0MS1(dhcp-config)#default-router 192.168.2.254MS1(dhcp-config)#exitMS1(config)#i

31、p dhcp pool vlan3MS1(dhcp-config)#network 192.168.3.0 255.255.255.0MS1(dhcp-config)#default-router 192.168.3.254MS1(dhcp-config)#exitMS1(config)#ip dhcp excluded-address 192.168.1.51 192.168.1.254MS1(config)#ip dhcp excluded-address 192.168.2.51 192.168.2.254MS1(config)#ip dhcp excluded-address 192.

32、168.3.51 192.168.3.254MS2上的配置MS2(config)#ip dhcp pool vlan1MS2(dhcp-config)#network 192.168.1.0 255.255.255.0MS2(dhcp-config)#default-router 192.168.1.253MS2(dhcp-config)#exitMS2(config)#ip dhcp pool vlan2MS2(dhcp-config)#network 192.168.2.0 255.255.255.0MS2(dhcp-config)#default-router 192.168.2.253

33、MS2(dhcp-config)#exitMS2(config)#ip dhcp pool vlan3MS2(dhcp-config)#network 192.168.3.0 255.255.255.0MS2(dhcp-config)#default-router 192.168.3.253MS2(dhcp-config)#exitMS2(config)#ip dhcp excluded-address 192.168.1.1 192.168.1.99MS2(config)#ip dhcp excluded-address 192.168.1.151 192.168.1.254MS2(conf

34、ig)#ip dhcp excluded-address 192.168.2.1 192.168.2.99MS2(config)#ip dhcp excluded-address 192.168.2.151 192.168.2.254MS2(config)#ip dhcp excluded-address 192.168.3.1 192.168.3.99MS2(config)#ip dhcp excluded-address 192.168.3.151 192.168.3.254(7)配置STP為了實現(xiàn)設(shè)備負載的充分利用，將MS1作為vlanl和vlan3的主根，vlan2的輔助根；將MS2作

35、為vlan2的主根，vlanl和vlan3的輔助根。MS1上的配置MS1(config)#spanning-treevlan1rootprimaryMS1(config)#spanning-treevlan2rootsecondaryMS1(config)#spanning-treevlan3rootprimaryMS2上的配置MS2(config)#spanning-treevlan1rootsecondaryMS2(config)#spanning-treevlan2rootprimaryMS2(config)#spanning-treevlan3rootsecondary查看STP結(jié)果M

36、S1上MS1#show spanning-treeVLAN0001SpanningRoot IDtree enabledPriorityAddressThis bridge i Hello Timeprotocol ieee2457700E0.F75C.8717 .s the root2 sec Max Age20sec Forward Delay15secBridge ID) PriorityAddressHello TimeAging Time24577 (priority 00E0.F75C.87172 sec Max Age 202024576 sys-id-ext 1)sec For

37、ward Delay15secInterfaceFa0/1Fa0/2Fa0/3Po1Role StsCostPrioDesg FWD19128.Desg FWD19128.Desg FWD19128.Desg FWD9128.Nbr Type -P2pP2pP2p27ShrVLAN0002SpanningRoot IDtree enabledPriorityAddressprotocol ieee24578000A.F3CC.5377Cost9PortHello Time27(Port-channel2 sec Max Age1)20 sec ForwardDelay15secBridge I

38、D) PriorityAddress28674 (priority00E0.F75C.871728672 sys-id-ext 2)Hello TimeAging Time2 sec Max Age2020sec ForwardDelay15secInterfaceRole Sts CostPrio.Nbr TypeFa0/1Desg FWD 19128.1P2pFa0/2Desg FWD 19128.2P2pFa0/3Desg FWD 19128.3P2pPo1Root FWD 9128.27 ShrVLAN0003Spanningtree enabled protocol ieeeRoot

39、 IDPriority24579Address00E0.F75C.8717This bridge is the rootHello Time 2 sec MaxAge 20 sec Forward Delay 15 secBridge ID Priority24579 (priority 24576 sys-id-ext 3)Address00E0.F75C.8717Hello Time 2 sec MaxAge 20 sec Forward Delay 15 secAging Time 20InterfaceRole Sts CostPrio.Nbr TypeFa0/1Desg FWD 19

40、128.1P2pFa0/2Desg FWD 19128.2P2pFa0/3Desg FWD 19128.3P2pPo1Desg FWD 9128.27 ShrMS2上MS2#show spanning-treeVLAN0001SpanningRoot IDtree enabledPriorityAddressprotocol ieee2457700E0.F75C.8717Cost9PortHello Time27(Port-channel2 sec Max Age1)20 sec ForwardDelay15secBridge ID) PriorityAddressHello TimeAgin

41、g Time28673 (priority 000A.F3CC.53772 sec Max Age 202028672 sys-id-ext 1)sec Forward Delay15secInterfaceFa0/1Fa0/2Fa0/3Po1Role StsCostPrioDesg FWD19128.Desg FWD19128.Desg FWD19128.Root FWD9128.Nbr Type -P2pP2pP2p27ShrVLAN0002SpanningRoot IDtree enabledPriorityAddressprotocol ieee24578000A.F3CC.5377T

42、his bridge is the rootHello Time 2 sec Max Age20sec ForwardDelay15secBridge ID) PriorityAddressHello TimeAging Time24578 (priority 000A.F3CC.53772 sec Max Age 202024576 sys-id-ext 2)sec Forward Delay15secPrio.Nbr TypeInterfaceRole Sts CostFa0/1DesgFWD19128.1P2pFa0/2DesgFWD19128.2P2pFa0/3DesgFWD19128

43、.3P2pPo1DesgFWD9128.27ShrVLAN0003Spanningtree enabledprotocol ieeeRoot IDPriority24579Address00E0.F75C.8717Cost9Port27(Port-channel 1)Hello Time2 sec Max Age 20 secForward Delay15 secBridge IDPriority28675 (priority 28672sys-id-ext 3)Address000A.F3CC.5377Hello Time2 sec Max Age 20 secForward Delay15

44、 secAging Time20InterfaceRoleStsCostPrio.NbrTypeFa0/1DesgFWD,19128.1P2pFa0/2DesgFWD19128.2P2pFa0/3DesgFWD19128.3P2pPo1RootFWD9128.27Shr(8)配置 HSRPMS1上的配置MS1(config)#interface vlan 1MS1(config-if)#standby 1 ip 192.168.1.252MS1(config-if)#standby 1 priority 200MS1(config-if)#standby 1 preemptMS1(config

45、-if)#exitMS1(config)#interface vlan 2MS1(config-if)#standby 2 ip 192.168.2.252MS1(config-if)#standby 2 priority 195MS1(config-if)#standby 2 preemptMS1(config-if)#exitMS1(config)#interface vlan 3MS1(config-if)#standby 3 ip 192.168.3.252MS1(config-if)#standby 3 priority 200MS1(config-if)#standby 3 pre

46、emptMS2上的配置MS2(config)#interface vlan 1MS2(config-if)#standby 1 ip 192.168.1.252MS2(config-if)#standby 1 priority 195MS2(config-if)#standby 1 preemptMS2(config-if)#exitMS2(config)#interface vlan 2MS2(config-if)#standby 2 ip 192.168.2.252MS2(config-if)#standby 2 priority 200MS2(config-if)#standby 2 p

47、reemptMS2(config-if)#exitMS2(config)#interface vlan 3MS2(config-if)#standby 3 ip 192.168.3.252MS2(config-if)#standby 3 priority 195MS2(config-if)#standby 3 preempt查看HSRP結(jié)果MS1上MS1#showstandby brief P 1indicatesconfiguredInterfaceGrp Pri PStateActiveVl11200 PActivelocalVl22195 Standby 192.168.1.253to

48、preempt.Standby192.168.1.253Virtual IP192.168.1.local192.168.2252252252MS2上MS2#show standby briefP indicates configured to preempt.|InterfaceGrpPriPStateActiveStandbyVirtual IPVl11195PStandby192.168.1.254local192.168.1.252Vl2 2200 Active local192.168.3.254192.168.2.252Vl33195PStandby192.168.3.254loc

49、al192.168.3.252(9)設(shè)置默認路由R1上的配置R1(config)#ip route 0.0.0.0 0.0.0.0 f0/1R2上的配置R2(config)#ip route 0.0.0.0 0.0.0.0 f0/1(10)配置RIP路由協(xié)議MS1上的配置MS1(config)#router ripMS1(config-router)#version 2MS1(config-router)#no auto-summaryMS1(config-router)#network 192.168.1.0MS1(config-router)#network 192.168.2.0MS1(

50、config-router)#network 192.168.3.0MS1(config-router)#network 192.168.4.0MS1(config-router)#network 192.168.6.0MS2上的配置MS2(config)#router ripMS2(config-router)#version 2MS2(config-router)#no auto-summaryMS2(config-router)#network 192.168.1.0MS2(config-router)#network 192.168.2.0MS2(config-router)#netw

51、ork 192.168.3.0MS2(config-router)#network 192.168.5.0MS2(config-router)#network 192.168.7.0R1上的配置注：互聯(lián)網(wǎng)的端口不需要運行RIP協(xié)議。另外，路由器上的默認路由可以直接導入到RIP路由協(xié)議中，免去內(nèi)部其他設(shè)備再手工配置默認路由的麻煩。R1(config)#router ripR1(config-router)#version 2R1(config-router)#no auto-summaryR1(config-router)#network 192.168.4.0R1(config-router)

52、#network 192.168.5.0R1(config-router)#default-information originateR2上的配置R2(config)#router ripR2(config-router)#version 2R2(config-router)#no auto-summaryR2(config-router)#network 192.168.6.0R2(config-router)#network 192.168.7.0R2(config-router)#default-information originate查看路由表MS1上MS1#show ip rout

53、eCodes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i- IS-IS, L1 - IS-IS level-1, L2 - IS-

54、IS level-2, ia - IS-IS inter area * - candidate default, U - per-user static route, o - ODR P - periodic downloaded static routeGateway of last resort is 192.168.4.2 to network 0.0.0.0C192.168.1.0/24isdirectlyconnected,Vlan1C192.168.2.0/24isdirectlyconnected,Vlan2C192.168.3.0/24isdirectlyconnected,V

55、lan3C192.168.4.0/24isdirectlyconnected,FastEthernet0/6R 192.168.5.0/24 120/1 via 192.168.4.2, 00:00:19, FastEthernet0/6 120/1via192.168.1.253,00:00:15,Vlan1120/1via192.168.2.253,00:00:15,Vlan2120/1via192.168.3.253,00:00:15,Vlan3C192.168.6.0/24isdirectlyconnected,FastEthernet0/7R 192.168.7.0/24 120/1

56、via192.168.1.253,00:00:15,Vlan1120/1via192.168.2.253,00:00:15,Vlan2120/1via192.168.3.253,00:00:15,Vlan3120/1 via 192.168.6.2, 00:00:20, FastEthernet0/7R* 0.0.0.0/0 120/1 via 192.168.4.2, 00:00:19, FastEthernet0/6 120/1 via 192.168.6.2, 00:00:20, FastEthernet0/7MS2上MS2#show ip routeCodes: C - connect

57、ed, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i- IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area * - candidate default, U - per-user static route, o - ODR P - periodic downloaded static routeGateway of last resort is 192.168.5.2 to network 0.0.0.0C 192.168.1.0/24 is directly connected, Vlan1C192.168.2.0/24is directlyconnected, Vlan2C192.168.3.0/24is directlyconne