hcia v25實驗指導書routing switching進階

認證系列HCIA-R&S進階實驗指導書技術(shù)認證系列HCIA-R&S進階實驗指導書技術(shù)所有?技術(shù)2019。保留一切權(quán)利。本書所有內(nèi)容受技術(shù)法保護，事先擁有所有，但注明其他方的內(nèi)容除外。，任何人、任何組織不得將本書的任何內(nèi)容以任何方式進行、經(jīng)銷、 、所有。商標和其他商標均為技術(shù)的商標。商標，由各自的所有人擁有。認證系列HCIA-R&S網(wǎng)絡(luò)技術(shù)與設(shè)備實驗指導書第2.5版本所有?技術(shù)2019。保留一切權(quán)利。本書所有內(nèi)容受技術(shù)法保護，事先擁有所有，但注明其他方的內(nèi)容除外。，任何人、任何組織不得將本書的任何內(nèi)容以任何方式進行、經(jīng)銷、 、所有。商標和其他商標均為技術(shù)的商標。商標，由各自的所有人擁有。認證系列HCIA-R&S網(wǎng)絡(luò)技術(shù)與設(shè)備實驗指導書第2.5版本認證體系介紹認證是憑借多年信息通信技術(shù)培養(yǎng)經(jīng)驗及對行業(yè)發(fā)展的深刻ICT產(chǎn)業(yè)鏈搭載“云－管－端”融合技術(shù)，推出覆蓋IP、IT、CT技術(shù)領(lǐng)域的認證體系，ICT全技術(shù)領(lǐng)域認證體系。三類技術(shù)ICT全技術(shù)領(lǐng)域的認證體系。HCIA企業(yè)網(wǎng)絡(luò)工程師使用網(wǎng)絡(luò)設(shè)備搭建小型企業(yè)路由交于企業(yè)網(wǎng)絡(luò)技術(shù)領(lǐng)域具備初級知識和技能水平的專業(yè)的工程師是公認的具備小型企業(yè)網(wǎng)絡(luò)通用技術(shù)和基本設(shè)計能力的專業(yè)。HCIP-R&S師使用云、安全和 于企業(yè)網(wǎng)絡(luò)技術(shù)領(lǐng)域具備高級知識和技能水平的專業(yè)HCIP-R&S的工程師是公認的具備中小型企業(yè)網(wǎng)絡(luò)構(gòu)建和管理能力的專業(yè)。HCIE-R&S和HCIE-R&S于企業(yè)網(wǎng)絡(luò)技術(shù)領(lǐng)域中具備知識和技能水平的專業(yè)HCIE-R&S能力的專業(yè)的工程師是公認的具備大型復雜企業(yè)網(wǎng)絡(luò)構(gòu)建、優(yōu)化和管理。ICT世界的潮頭浪尖！認證體系介紹認證是憑借多年信息通信技術(shù)培養(yǎng)經(jīng)驗及對行業(yè)發(fā)展的深刻ICT產(chǎn)業(yè)鏈搭載“云－管－端”融合技術(shù)，推出覆蓋IP、IT、CT技術(shù)領(lǐng)域的認證體系，ICT全技術(shù)領(lǐng)域認證體系。三類技術(shù)ICT全技術(shù)領(lǐng)域的認證體系。HCIA企業(yè)網(wǎng)絡(luò)工程師使用網(wǎng)絡(luò)設(shè)備搭建小型企業(yè)路由交于企業(yè)網(wǎng)絡(luò)技術(shù)領(lǐng)域具備初級知識和技能水平的專業(yè)的工程師是公認的具備小型企業(yè)網(wǎng)絡(luò)通用技術(shù)和基本設(shè)計能力的專業(yè)。HCIP-R&S師使用云、安全和 于企業(yè)網(wǎng)絡(luò)技術(shù)領(lǐng)域具備高級知識和技能水平的專業(yè)HCIP-R&S的工程師是公認的具備中小型企業(yè)網(wǎng)絡(luò)構(gòu)建和管理能力的專業(yè)。HCIE-R&S和HCIE-R&S于企業(yè)網(wǎng)絡(luò)技術(shù)領(lǐng)域中具備知識和技能水平的專業(yè)HCIE-R&S能力的專業(yè)的工程師是公認的具備大型復雜企業(yè)網(wǎng)絡(luò)構(gòu)建、優(yōu)化和管理。ICT世界的潮頭浪尖！本書常用圖標本書常用圖標實驗環(huán)境說明組網(wǎng)介紹HCIA-R&SHCIA-R&S的VRP基礎(chǔ)操作、路由協(xié)議原理、以太網(wǎng)交換技術(shù)、廣域網(wǎng)技術(shù)、技術(shù)等部分的實驗組成。實驗設(shè)備包括路由器3臺，交換機4臺。每套實驗環(huán)境適用于2名學員同時上機操作。設(shè)備介紹實驗需要，建議每套實驗環(huán)境采用以下配置：設(shè)備名稱、型號與版本的對應關(guān)系如下：設(shè)備名稱設(shè)備型號軟件版本R1AR2220EV2R7R2AR2220EV2R7R3AR2220EV2R7S1S5720-36C-EI-ACV2R8S2S5720-36C-EI-ACV2R8實驗環(huán)境說明組網(wǎng)介紹HCIA-R&SHCIA-R&S的VRP基礎(chǔ)操作、路由協(xié)議原理、以太網(wǎng)交換技術(shù)、廣域網(wǎng)技術(shù)、技術(shù)等部分的實驗組成。實驗設(shè)備包括路由器3臺，交換機4臺。每套實驗環(huán)境適用于2名學員同時上機操作。設(shè)備介紹實驗需要，建議每套實驗環(huán)境采用以下配置：設(shè)備名稱、型號與版本的對應關(guān)系如下：設(shè)備名稱設(shè)備型號軟件版本R1AR2220EV2R7R2AR2220EV2R7R3AR2220EV2R7S1S5720-36C-EI-ACV2R8S2S5720-36C-EI-ACV2R8S3S5720-36C-EI-ACV2R8S4S5720-36C-EI-ACV2R8目錄第一章以太網(wǎng)與VLAN 1實驗1-1以太網(wǎng)接口和鏈路配置 1目錄第一章以太網(wǎng)與VLAN 1實驗1-1以太網(wǎng)接口和鏈路配置 1實驗1-2VLAN配置 10實驗1-3VLAN間路由 23實驗1-4配置三層交換 30第二章企業(yè)廣域網(wǎng)配置 47實驗2-1HDLC和PPP配置 47實驗2-2配置PPPoE客戶端 67第三章IP安全配置 77實驗3-1配置ACL過濾企業(yè)數(shù)據(jù) 77實驗3-2NAT的配置 90實驗3-3本地AAA配置 1043-4IPSec配置 114實驗3-5GRE隧道配置 131第四章構(gòu)建IPv6網(wǎng)絡(luò) 144實驗4-1部署IPv6網(wǎng)絡(luò) 144第一章以太網(wǎng)與VLAN1-1以太網(wǎng)接口和鏈路配置學習目標掌握接口速率的配置方法掌握使用手動模式配置鏈路聚合的方法LACP模式配置鏈路聚合的方法LACP模式下配置接口優(yōu)先級的方法拓撲圖圖1.1以太網(wǎng)鏈路聚合拓撲圖場景您是公司的網(wǎng)絡(luò)管理員?，F(xiàn)在公司了兩臺的S5700系列的交換機，操作步驟步驟一 第一章以太網(wǎng)與VLAN1-1以太網(wǎng)接口和鏈路配置學習目標掌握接口速率的配置方法掌握使用手動模式配置鏈路聚合的方法LACP模式配置鏈路聚合的方法LACP模式下配置接口優(yōu)先級的方法拓撲圖圖1.1以太網(wǎng)鏈路聚合拓撲圖場景您是公司的網(wǎng)絡(luò)管理員?，F(xiàn)在公司了兩臺的S5700系列的交換機，操作步驟步驟一 以太網(wǎng)交換機基礎(chǔ)配置S1與S2上G0/0/9和G0/0/10接口的速率。S1上G0/0/9和G0/0/10接口的詳細信息。<Quidway>system-view[Quidway]sysnameS1[S1]displayinterfaceGigabitEthernet0/0/9GigabitEthernet0/0/9currentstate:UPLineprotocolcurrentstate:UPDescription:SwitchPort,Link-type:S2上G0/0/9和G0/0/10接口的速率。S1上G0/0/9和G0/0/10接口的詳細信息。<Quidway>system-view[Quidway]sysnameS1[S1]displayinterfaceGigabitEthernet0/0/9GigabitEthernet0/0/9currentstate:UPLineprotocolcurrentstate:UPDescription:SwitchPort,Link-type:trunk(negotiated),PVID:1,TPID:8100(Hex),TheumFrameLengthis9216IPSendingFrames'FormatisPKTFMT_ETHNT_2,Hardwareaddressisd0d0-4ba6-aab0Currentsystemtime:2016-11-2314:18:37PortMode:COMMONCOPPERSpeed:1000,Duplex:FULL,Loopback:NONENegotiation:ENABLEFlow-control:DISABLEMdi:AUTO,Last300secondsinputrate256bits/sec,0packets/secLast300secondsoutputrate912bits/sec,0packets/secInputpeakrate13976bits/sec,Recordtime:2016-11-2214:59:12Outputpeakrate13976bits/sec,Recordtime:2016-11-2214:59:12Input:8802packets,1242101bytesUnicast:Discard:Frames:854,931,0,0Multicast:Jumbo:Pause:701700TotalError:CRC:Jabbers:Runts:Ignoreds:00,0,0,0,0Giants:Fragments:DropEvents:Symbols:0000Output:53495packets,7626413bytesUnicast:Discard:231,3700,0,Multicast:Jumbo:Pause:4956400TotalError:Collisions:LateCollisions:BuffersPurged:00,0,0ExcessiveCollisions:Deferreds:00Inputbandwidthutilizationthreshold:80.00%Outputbandwidthutilizationthreshold:80.00%Inputbandwidthutilization:OutputbandwidthutilizationInputbandwidthutilizationthreshold:80.00%Outputbandwidthutilizationthreshold:80.00%Inputbandwidthutilization:Outputbandwidthutilization:0%0%[S1]displayinterfaceGigabitEthernet0/0/10GigabitEthernet0/0/10currentstate:UPLineprotocolcurrentstate:UPDescription:SwitchPort,Link-type:trunk(negotiated),PVID:1,TPID:8100(Hex),TheumFrameLengthis9216IPSendingFrames'FormatisPKTFMT_ETHNT_2,Hardwareaddressisd0d0-4ba6-aab0Currentsystemtime:2016-11-2314:22:22PortMode:COMMONCOPPERSpeed:1000,Duplex:FULL,Loopback:NONENegotiation:ENABLEFlow-control:DISABLEMdi:AUTO,Last300secondsinputrate72bits/sec,0packets/secLast300secondsoutputrate1024bits/sec,0packets/secInputpeakrate14032bits/sec,Recordtime:2016-11-2214:59:12Outputpeakrate14032bits/sec,Recordtime:2016-11-2214:59:12Input:7025packets,786010bytesUnicast:Discard:Frames:0,Multicast:0,Jumbo:7025000,0Pause:TotalError:CRC:Jabbers:Runts:Ignoreds:00,0,0,0,0Giants:Fragments:Symbols:0000Output:54507packets,7979793bytesUnicast:Discard:150,4648,0,Multicast:Jumbo:Pause:4970900TotalError:Collisions:LateCollisions:BuffersPurged:00,ExcessiveCollisions:0,Deferreds:000Inputbandwidthutilizationthreshold:80.00%Outputbandwidthutilizationthreshold:Inputbandwidthutilizationthreshold:80.00%Outputbandwidthutilizationthreshold:80.00%Inputbandwidthutilization:Outputbandwidthutilization:0%0%S1上的G0/0/9和G0/0/10接口的速率配置為100Mbit/s。[S1]interfaceGigabitEthernet0/0/9[S1-GigabitEthernet0/0/9]undonegotiationauto[S1-GigabitEthernet0/0/9]speed100[S1-GigabitEthernet0/0/9]quit[S1]interfaceGigabitEthernet0/0/10[S1-GigabitEthernet0/0/10]undonegotiationauto[S1-GigabitEthernet0/0/10]speed100同樣的方法將S2上的G0/0/9和G0/0/10接口的速率配置為100Mbit/s。<Quidway>system-view[Quidway]sysnameS2[S2]interfaceGigabitEthernet0/0/9[S2-GigabitEthernet0/0/9]undonegotiationauto[S2-GigabitEthernet0/0/9]speed100[S2-GigabitEthernet0/0/9]quit[S2]interfaceGigabitEthernet0/0/10[S2-GigabitEthernet0/0/10]undonegotiationauto[S2-GigabitEthernet0/0/10]speed100G0/0/9和G0/0/10接口的速率已配置[S1]displayinterfaceGigabitEthernet0/0/9GigabitEthernet0/0/9currentstate:UPLineprotocolcurrentstate:UPDescription:SwitchPort,Link-type:trunk(negotiated),。PVID:1,TPID:8100(Hex),TheumFrameLengthis9216IPSendingFrames'FormatisPKTFMT_ETHNT_2,Hardwareaddressisd0d0-4ba6-aab0Currentsystemtime:2016-11-2314:29:45PortMode:COMMONCOPPERSpeed:100,Duplex:FULL,Loopback:NONENegotiation:DISABLEFlow-control:DISABLEMdi:AUTO,……outputomit……[S1]displayinterfaceGigabitEthernet0/0/10GigabitEthernet0/0/10currentstate:UPLineprotocolcurrentstate:UPDescription:SwitchPort,Link-type:trunk(negotiated),PVID[S1]displayinterfaceGigabitEthernet0/0/10GigabitEthernet0/0/10currentstate:UPLineprotocolcurrentstate:UPDescription:SwitchPort,Link-type:trunk(negotiated),PVID:1,TPID:8100(Hex),TheumFrameLengthis9216IPSendingFrames'FormatisPKTFMT_ETHNT_2,Hardwareaddressisd0d0-4ba6-aab0Currentsystemtime:2016-11-2314:32:53PortMode:COMMONCOPPERSpeed:100,Duplex:FULL,Loopback:NONENegotiation:DISABLEFlow-control:DISABLEMdi:AUTO,……outputomit……步驟二配置手動模式的鏈路聚合在S1和S2上創(chuàng)建Eth-Trunk1，然后將G0/0/9和G0/0/10接口加入[S1]interfaceEth-Trunk1[S1-Eth-Trunk1]quit[S1]interfaceGigabitEthernet0/0/9[S1-GigabitEthernet0/0/9]eth-trunk1[S1-GigabitEthernet0/0/9]quit[S1]interfaceGigabitEthernet0/0/10[S1-GigabitEthernet0/0/10]eth-trunk1[S2]interfaceEth-Trunk1[S2-Eth-Trunk1]quit[S2]interfaceGigabitEthernet0/0/9[S2-GigabitEthernet0/0/9]eth-trunk1[S2-GigabitEthernet0/0/9]quit[S2]interfaceGigabitEthernet0/0/10[S2-GigabitEthernet0/0/10]eth-trunk1的配置結(jié)果。[S1]displayeth-trunk1Eth-Trunk1'sstateinformationis:WorkingMode:NORMALLeastActive-linknumber:1Operatestatus:upHasharithmetic:AccordingtoSIP-XOR-DIPMaxBandwidth-affected-linknumber:8NumberOfUpPortInTrunk:2PortNameStatusWeightGigabitEthernet0/0/9 Up 1[S2]displayeth-trunk1Eth-Trunk1'sstateinformationis:WorkingMode:NORMALHasharithmetic:AccordingtoSIP-XOR-DIPLeast[S2]displayeth-trunk1Eth-Trunk1'sstateinformationis:WorkingMode:NORMALHasharithmetic:AccordingtoSIP-XOR-DIPLeastActive-linknumber:1Operatestatus:upMaxBandwidth-affected-linknumber:8NumberOfUpPortInTrunk:2PortNameStatusWeight工作正常，成員接口都已正確加入。步驟三LACP和S2上的G0/0/9和G0/0/10接口下的配置。[S1]interfaceGigabitEthernet0/0/9eth-trunk[S1-GigabitEthernet0/0/9]quit[S1]interfaceGigabitEthernet0/0/10[S1-GigabitEthernet0/0/10]undoeth-trunk[S2]interfaceGigabitEthernet0/0/9eth-trunk[S2-GigabitEthernet0/0/9]quit[S2]interfaceGigabitEthernet0/0/10[S2-GigabitEthernet0/0/10]undoeth-trunk創(chuàng)建Eth-Trunk1并配置該Eth-Trunk為靜態(tài)LACP模式。然后將G0/0/9和G0/0/10接口加入Eth-Trunk1。[S1]interfaceEth-Trunk1[S1-Eth-Trunk1]m[S1-Eth-Trunk1]quitacp[S1]interfaceGigabitEthernet0/0/9[S1-GigabitEthernet0/0/9]eth-trunk1[S1-GigabitEthernet0/0/9]quit[S1]interfaceGigabitEthernet0/0/10[S1-GigabitEthernet0/0/10]eth-trunk1[S2]interfaceEth-Trunk1[S2-Eth-Trunk1]macpGigabitEthernet0/0/9 Up 1GigabitEthernet0/0/10 Up 1GigabitEthernet0/0/10 Up 1[S2-Eth-Trunk1]quit[S2]interfaceGigabitEthernet0/0/9[S2-GigabitEthernet0/0/9]eth-trunk1[S2-GigabitEthernet0/0/9]quit[S2]interfaceGigabitEthernet0/0/10[S2-GigabitEthernet0/0/10]eth-trunk1查看交換機上Eth-Trunk的信息，查看鏈路是否協(xié)商 。[S1]displayeth-trunkEth-Trunk1'sstateinformationis:Local:LAGID:1PreemptDelay:[S2-Eth-Trunk1]quit[S2]interfaceGigabitEthernet0/0/9[S2-GigabitEthernet0/0/9]eth-trunk1[S2-GigabitEthernet0/0/9]quit[S2]interfaceGigabitEthernet0/0/10[S2-GigabitEthernet0/0/10]eth-trunk1查看交換機上Eth-Trunk的信息，查看鏈路是否協(xié)商 。[S1]displayeth-trunkEth-Trunk1'sstateinformationis:Local:LAGID:1PreemptDelay:DisabledSystemPriority:32768LeastActive-linknumber:1Operatestatus:upWorkingMode:LACPHasharithmetic:AccordingtoSIP-XOR-DIPSystemID:d0d0-4ba6-aab0MaxActive-linknumber:8NumberOfUpPortInTrunk:2ActorPortNameGigabitEthernet0/0/9StatusPortTypePortPriPortNoPortKeyPortStateWeightSelected100MSelected100M12289289101111001011110011Partner:ActorPortNameGigabitEthernet0/0/9SysPri3276832768SystemIDd0d0-4ba6-ac20d0d0-4ba6-ac20PortPriPortNoPortKeyPortState3276832768122892891011110010111100在S1上配置LACP的系統(tǒng)優(yōu)先級為100，使其成為LACP主動端。[S1]lacppriority100配置接口的優(yōu)先級確定活動鏈路。[S1]interfaceGigabitEthernet0/0/9[S1-GigabitEthernet0/0/9]lacppriority100[S1-GigabitEthernet0/0/9]quit[S1]interfaceGigabitEthernet0/0/10[S1-GigabitEthernet0/0/10]lacppriority100的配置結(jié)果。[S1]displayeth-trunk1Eth-Trunk1'sstateinformationis:Local:LAGID:1PreemptDelay:DisabledWorkingMode:LACPHasharithmetic:AccordingtoSIP-XOR-DIP3276832768SystemPriority:100LeastActive-linknumber:1Operatestatus:upSystemID:d0d0-4ba6-aab0MaxActive-linknumber:8NumberOfUpPortInTrunk:2ActorPortNameGigabitEthernet0/0/9StatusPortTypePortPriPortNoPortKeyPortStateWeightSelectedSystemPriority:100LeastActive-linknumber:1Operatestatus:upSystemID:d0d0-4ba6-aab0MaxActive-linknumber:8NumberOfUpPortInTrunk:2ActorPortNameGigabitEthernet0/0/9StatusPortTypePortPriPortNoPortKeyPortStateWeightSelected100MSelected100M12289289101111001011110011Partner:ActorPortNameGigabitEthernet0/0/9SysPri3276832768SystemIDd0d0-4ba6-ac20d0d0-4ba6-ac20PortPriPortNoPortKeyPortState3276832768122892891011110010111100[S2]displayeth-trunk1Eth-Trunk1'sstateinformationis:Local:LAGID:1PreemptDelay:DisabledSystemPriority:32768LeastActive-linknumber:1Operatestatus:upWorkingMode:LACPHasharithmetic:AccordingtoSIP-XOR-DIPSystemID:d0d0-4ba6-ac20MaxActive-linknumber:8NumberOfUpPortInTrunk:2ActorPortNameGigabitEthernet0/0/9StatusPortTypePortPriPortNoPortKeyPortStateWeightSelected100MSelected100M327683276812289289101111001011110011Partner:ActorPortNameGigabitEthernet0/0/9SysPri100100SystemIDd0d0-4ba6-aab0d0d0-4ba6-aab0PortPriPortNoPortKeyPortState122892891011110010111100配置文件[S1]displaycurrent-configuration#!SoftwareVersionV200R008C00SPC500sysnameS1#lacppriority100#interfaceEth-Trunk1100100100m#acpinterfaceGigabitEthernet0/0/9eth-trunk1m#acpinterfaceGigabitEthernet0/0/9eth-trunk1lacppriority100undonegotiationautospeed100#interfaceGigabitEthernet0/0/10eth-trunk1lacppriority100undonegotiationautospeed100#return[S2]displaycurrent-configuration#!SoftwareVersionV200R008C00SPC500sysnameS2#interfaceEth-Trunk1m#acpinterfaceGigabitEthernet0/0/9eth-trunk1undonegotiationautospeed100#interfaceGigabitEthernet0/0/10eth-trunk1undonegotiationautospeed100#return1-2VLAN學習目標的創(chuàng)建方法和Trunk類型接口的配置方法接口的配置方法VLAN關(guān)聯(lián)的配置方法拓撲圖圖1.21-2VLAN學習目標的創(chuàng)建方法和Trunk類型接口的配置方法接口的配置方法VLAN關(guān)聯(lián)的配置方法拓撲圖圖1.2VLAN配置實驗拓撲圖場景VLAN來洪。本實驗中，您需要在交換機S1和S2上進行VLAN配置。廣播流量的泛操作步驟步驟一實驗環(huán)境準備1開始配置。如果使用的設(shè)備包含上一個實驗的配置，請直接從步驟2開始配置。1并配置該Eth-Trunk為靜態(tài)LACPG0/0/9和G0/0/10接口加入Eth-Trunk1。<Quidway>system-view[Quidway]sysnameS1[S1]interface操作步驟步驟一實驗環(huán)境準備1開始配置。如果使用的設(shè)備包含上一個實驗的配置，請直接從步驟2開始配置。1并配置該Eth-Trunk為靜態(tài)LACPG0/0/9和G0/0/10接口加入Eth-Trunk1。<Quidway>system-view[Quidway]sysnameS1[S1]interfaceEth-trunk1[S1-Eth-Trunk1]m[S1-Eth-Trunk1]quitacp[S1]interfaceGigabitEthernet0/0/9[S1-GigabitEthernet0/0/9]eth-trunk1GigabitEthernet0/0/10[S1-GigabitEthernet0/0/10]eth-trunk1<Quidway>system-view[Quidway]sysnameS2[S2]interfaceeth-trunk1[S2-Eth-Trunk1]macp[S2-Eth-Trunk1]trunkportGigabitEthernet0/0/9[S2-Eth-Trunk1]trunkportGigabitEthernet0/0/10步驟二S3上的E0/0/1和E0/0/7端口以及S4上的E0/0/1和E0/0/14端口。<Quidway>system-viewEntersystemview,returnuserviewwithCtrl+Z.[Quidway]sysnameS3[S3]interfaceGigabitEthernet0/0/1[S3-GigabitEthernet0/0/1]quit[S3]interfaceGigabitEthernet0/0/7<Quidway>system-viewEntersystemview,returnuserviewwithCtrl+Z.[Quidway]sysnameS4[S4]interfaceGigabitEthernet0/0/1[S4-GigabitEthernet0/0/1]shutdown[S4-GigabitEthernet0/0/1]quit[S4]interfaceGigabitEthernet0/0/14[Quidway]sysnameS4[S4]interfaceGigabitEthernet0/0/1[S4-GigabitEthernet0/0/1]shutdown[S4-GigabitEthernet0/0/1]quit[S4]interfaceGigabitEthernet0/0/14交換機端口的類型默認為Hybrid端口。將Eth-Trunk1的端口類型配置為Trunk，并的報文通過該端口。[S1]interfaceEth-Trunk1[S1-Eth-Trunk1]portlink-typetrunk[S1-Eth-Trunk1]porttrunkallow-passvlanall[S2]interfaceEth-Trunk1[S2-Eth-Trunk1]portlink-typetrunk[S2-Eth-Trunk1]porttrunkallow-passvlanall步驟三創(chuàng)建VLAN本實驗中將S3、R1、R3和S4設(shè)備作為客戶端主機。在S1和S2上分別創(chuàng)建VLAN中。將所有連接客戶端的端口類型配置為Access。在S1上，將端口G0/0/13和G0/0/1分別加入到VLAN3和VLAN4。在S2上，將端口G0/0/3和G0/0/6分別加入VLAN4和VLAN2。[S1]interfaceGigabitEthernet0/0/13[S1-GigabitEthernet0/0/13]portlink-typeaccess[S1-GigabitEthernet0/0/13]quit[S1]interfaceGigabitEthernet0/0/1[S1-GigabitEthernet0/0/1]portlink-typeaccess[S1-GigabitEthernet0/0/1]quit[S1]vlan2[S1-vlan2]vlan3[S1-vlan3]portGigabitEthernet0/0/13[S1-vlan3]vlan4[S1-vlan4]portGigabitEthernet0/0/1[S2]vlanbatch2to4[S2]interfaceGigabitEthernet0/0/3[S2-GigabitEthernet0/0/3]portlink-typeaccess[S2-GigabitEthernet0/0/3]portdefaultvlan4[S2-GigabitEthernet0/0/3]quit[S2]interfaceGigabitEthernet0/0/6[S2-GigabitEthernet0/0/6]portlink-typeaccess[S2-GigabitEthernet0/0/6]portdefaultvlan2和S2上已<S1>displayvlanThetotalnumberofvlansis:4VLAN中。U:Up;D:Down;[S2]interfaceGigabitEthernet0/0/6[S2-GigabitEthernet0/0/6]portlink-typeaccess[S2-GigabitEthernet0/0/6]portdefaultvlan2和S2上已<S1>displayvlanThetotalnumberofvlansis:4VLAN中。U:Up;D:Down;TG:Tagged;ST:Vlan-stacking;*:Management-vlan;UT:Untagged;MP:Vlan-mapping;#:ProtocolTransparent-vlan;VIDTypePorts1commonUT:GE0/0/2(U)GE0/0/6(D)GE0/0/12(D)GE0/0/17(D)GE0/0/21(U)GE0/0/25(D)Eth-Trunk1(U)UT:GE0/0/13(U)TG:Eth-Trunk1(U)GE0/0/3(U)GE0/0/7(D)GE0/0/14(U)GE0/0/18(D)GE0/0/22(U)GE0/0/26(D)XGE0/0/2(D)GE0/0/4(U)GE0/0/8(D)GE0/0/15(D)GE0/0/19(D)GE0/0/23(U)GE0/0/27(D)XGE0/0/3(D)GE0/0/5(U)GE0/0/11(D)GE0/0/16(D)GE0/0/20(D)GE0/0/24(D)GE0/0/28(D)XGE0/0/4(D)23commoncommon4commonUT:GE0/0/1(U)TG:Eth-Trunk1(U)VIDStatusPropertyMAC-LRNStatisticsDescription1234enabledefaultdefaultdefaultdefaultenabledisabledisabledisabledisableVLAN0001VLAN0002VLAN0003VLAN0004<S2>displayvlanThetotalnumberofvlansis:4U:Up;D:Down;UT:Untagged;MP:Vlan-mapping;ST:Vlan-stacking;*:Management-vlan;VIDTypePorts1commonUT:GE0/0/1(U)GE0/0/2(U)GE0/0/4(U)GE0/0/5(U)GE0/0/7(D)GE0/0/8(D)GE0/0/11(U)GE0/0/12(U)GE0/0/13(U)GE0/0/14(D)GE0/0/15(D)GE0/0/16(D)GE0/0/17(D)GE0/0/18(D)GE0/0/19(D)GE0/0/20(D)GE0/0/21(D)GE0/0/22(D)GE0/0/23(U)GE0/0/24(U)GE0/0/25(D)GE0/0/26(D)GE0/0/27(D)GE0/0/28(D)XGE0/0/1(D)XGE0/0/2(D)XGE0/0/3(D)XGE0/0/4(D)2commonUT:GE0/0/6(D)3commonTG:Eth-Trunk1(U)4commonUT:GE0/0/3(U)<S2>displayvlanThetotalnumberofvlansis:4U:Up;D:Down;UT:Untagged;MP:Vlan-mapping;ST:Vlan-stacking;*:Management-vlan;VIDTypePorts1commonUT:GE0/0/1(U)GE0/0/2(U)GE0/0/4(U)GE0/0/5(U)GE0/0/7(D)GE0/0/8(D)GE0/0/11(U)GE0/0/12(U)GE0/0/13(U)GE0/0/14(D)GE0/0/15(D)GE0/0/16(D)GE0/0/17(D)GE0/0/18(D)GE0/0/19(D)GE0/0/20(D)GE0/0/21(D)GE0/0/22(D)GE0/0/23(U)GE0/0/24(U)GE0/0/25(D)GE0/0/26(D)GE0/0/27(D)GE0/0/28(D)XGE0/0/1(D)XGE0/0/2(D)XGE0/0/3(D)XGE0/0/4(D)2commonUT:GE0/0/6(D)3commonTG:Eth-Trunk1(U)4commonUT:GE0/0/3(U)VIDStatusPropertyMAC-LRNStatisticsDescription1enabledefaultenabledisableVLAN00012enabledefaultenabledisableVLAN00023enabledefaultenabledisableVLAN00034enabledefaultenabledisableVLAN0004且Eth-Trunk1端口VLAN的報文通過。步驟四IP口分配IP地址，因此將S3和S4的本地管理接口VLANIF1作為用戶接口，配置IP地址。<>system-view[]sysnameR1[R1]interfaceGigabitEthernet0/0/1[R1-GigabitEthernet0/0/1]ipaddress24[S3]interfacevlanif1[S3-vlanif1]ip步驟四IP口分配IP地址，因此將S3和S4的本地管理接口VLANIF1作為用戶接口，配置IP地址。<>system-view[]sysnameR1[R1]interfaceGigabitEthernet0/0/1[R1-GigabitEthernet0/0/1]ipaddress24[S3]interfacevlanif1[S3-vlanif1]ipaddress24<>system-view[]sysnameR3[R3]interfaceGigabitEthernet0/0/2[R3-GigabitEthernet0/0/2]ipaddress24[S4]interfacevlanif1[S4-vlanif1]ipaddress24步驟五VLAN執(zhí)行ping命令。同屬VLAN4中的R1和R3能夠相互通信。其他不同VLAN間的設(shè)備無法通信。[R1]pingPING:56databytes,pressCTRL_CtobreakReplyfrom:bytes=56Sequence=1ttl=255time=6msReplyfrom:bytes=56Sequence=2ttl=255time=2msReplyfrom:bytes=56Sequence=3ttl=255time=2msReplyfrom:bytes=56Sequence=4ttl=255time=2msReplyfrom:bytes=56Sequence=5ttl=255time=2ms---pingstatistics---5packet(s)transmitted5packet(s)received0.00%packetlossround-tripmin/avg/max=2/2/6ms[R1]pingPING:---pingstatistics---5packet(s)transmitted5packet(s)received0.00%packetlossround-tripmin/avg/max=2/2/6ms[R1]pingPING:56databytes,pressCTRL_CtobreakRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeout---pingstatistics---5packet(s)transmitted0packet(s)received100.00%packetlossR1和S3以及R3和S4之間的連通性。此處不再贅述。步驟六Hybrid或去除Hybrid端口來VLAN2和VLAN4之間可以互相通信。將S1上的G0/0/1端口和S2上的G0/0/3和G0/0/6端口的類型配置為Hybrid。同時，配置這些端口數(shù)據(jù)幀時能夠去掉VLAN2和VLAN4的。[S1]interfaceGigabitEthernet0/0/1[S1-GigabitEthernet0/0/1]undoportdefaultvlan[S1-GigabitEthernet0/0/1]portlink-typehybrid[S1-GigabitEthernet0/0/1]porthybriduntaggedvlan24[S1-GigabitEthernet0/0/1]porthybridpvidvlan4[S2]interfaceGigabitEthernet0/0/3[S2-GigabitEthernet0/0/3]undoportdefaultvlan[S2-GigabitEthernet0/0/3]portlink-typehybrid[S2-GigabitEthernet0/0/3]porthybriduntaggedvlan24[S2-GigabitEthernet0/0/3]port[S2]interfaceGigabitEthernet0/0/3[S2-GigabitEthernet0/0/3]undoportdefaultvlan[S2-GigabitEthernet0/0/3]portlink-typehybrid[S2-GigabitEthernet0/0/3]porthybriduntaggedvlan24[S2-GigabitEthernet0/0/3]porthybridpvidvlan4[S2-GigabitEthernet0/0/3]quit[S2]interfaceGigabitEthernet0/0/6[S2-GigabitEthernet0/0/6]undoportdefaultvlan[S2-GigabitEthernet0/0/6]portlink-typehybrid[S2-GigabitEthernet0/0/6]porthybriduntaggedvlan24[S2-GigabitEthernet0/0/6]porthybridpvidvlan2執(zhí)行porthybridpvidvlan命令，可以配置端口收到數(shù)據(jù)幀時需要給數(shù)據(jù)VLANporthybriduntaggedvlan命令可以配置該端口在VLAN。執(zhí)行ping命令。測試VLAN3中的R1與R3是否還能通信。<R1>pingPING:56databytes,pressCTRL_CtobreakReplyfrom:bytes=56Sequence=1ttl=255time=1msReplyfrom:bytes=56Sequence=2ttl=255time=1msReplyfrom:bytes=56Sequence=3ttl=255time=1msReplyfrom:bytes=56Sequence=4ttl=255time=10msReplyfrom:bytes=56Sequence=5ttl=255time=1ms---pingstatistics---5packet(s)transmitted5packet(s)received0.00%packetlossround-tripmin/avg/max=1/2/10ms執(zhí)行ping命令，測試VLAN2中的S4能否與VLAN4中的R1通信。<R1>pingPING:56databytes,pressCTRL_C執(zhí)行ping命令，測試VLAN2中的S4能否與VLAN4中的R1通信。<R1>pingPING:56databytes,pressCTRL_CtobreakReplyfrom:bytes=56Sequence=1ttl=255time=41msReplyfrom:bytes=56Sequence=2ttl=254time=2msReplyfrom:bytes=56Sequence=3ttl=254time=3msReplyfrom:bytes=56Sequence=4ttl=254time=2msReplyfrom:bytes=56Sequence=5ttl=254time=2ms---pingstatistics---5packet(s)transmitted5packet(s)received0.00%packetlossround-tripmin/avg/max=2/10/41ms通過配置Hybrid端口，使VLAN2內(nèi)的主機能夠接收來自VLAN4的報文，反之亦然。而沒有配置Hybrid端口的VLAN3中地址為的主機仍無法與其他VLAN主機通信。配置文件current-configuration[V200R007C00SPC600]#sysnameR1#interfaceGigabitEthernet0/0/1ipaddress#returncurrent-configuration#!SoftwareVersionV100R006C05sysnameS3#interfaceVlanif1ipaddress#interfaceGigabitEthernet0/0/1shutdown#interfaceGigabitEthernet0/0/7shutdown##!SoftwareVersionV100R006C05sysnameS3#interfaceVlanif1ipaddress#interfaceGigabitEthernet0/0/1shutdown#interfaceGigabitEthernet0/0/7shutdown#returncurrent-configuration#!SoftwareVersionV200R008C00SPC500sysnameS1#vlanbatch2to4#lacppriority100#Eth-Trunk1portlink-typetrunkporttrunkallow-passvlan2to4094macp#interfaceGigabitEthernet0/0/1portlink-typehybridporthybridpvidvlan4porthybriduntaggedvlan24#interfaceGigabitEthernet0/0/9undonegotiationautospeed100eth-trunkportlink-typehybridporthybridpvidvlan4porthybriduntaggedvlan24#interfaceGigabitEthernet0/0/9undonegotiationautospeed100eth-trunk1lacppriority100#interfaceGigabitEthernet0/0/10undonegotiationautospeed100eth-trunk1lacppriority100#interfaceGigabitEthernet0/0/13portlink-typeaccessportdefaultvlan3#returncurrent-configuration#!SoftwareVersionV200R008C00SPC500sysnameS2#vlanbatch2to4#Eth-Trunk1portlink-typetrunkporttrunkallow-passvlan2to4094macp#interfaceGigabitEthernet0/0/3portlink-typehybridporthybridpvidvlanportlink-typetrunkporttrunkallow-passvlan2to4094macp#interfaceGigabitEthernet0/0/3portlink-typehybridporthybridpvidvlan4porthybriduntaggedvlan24#interfaceGigabitEthernet0/0/9undonegotiationautospeed100eth-trunk1#interfaceGigabitEthernet0/0/10undonegotiationautospeed100eth-trunk1#interfaceGigabitEthernet0/0/6portlink-typehybridporthybridpvidvlan2porthybriduntaggedvlan24#returncurrent-configuration[V200R007C00SPC600]#sysnameR3#interfaceGigabitEthernet0/0/2ipaddress#returncurrent-configuration#!SoftwareVersion#interfaceGigabitEthernet0/0/2ipaddress#returncurrent-configuration#!SoftwareVersionV100R006C05sysnameS4#interfaceVlanif1ipaddress#interfaceGigabitEthernet0/0/1shutdown#interfaceGigabitEthernet0/0/14shutdown#return1-3VLAN學習目標Trunk接口的配置方法掌握在單個物理接口上配置多個子接口的方法VLAN間實現(xiàn)ARP通信的配置方法拓撲圖1.3單臂路由實驗拓撲圖場景VLAN來1-3VLAN學習目標Trunk接口的配置方法掌握在單個物理接口上配置多個子接口的方法VLAN間實現(xiàn)ARP通信的配置方法拓撲圖1.3單臂路由實驗拓撲圖場景VLAN來不同部門之間的二層通信，間的通信，網(wǎng)絡(luò)管理員決定借助路由器，通過配置單臂路由實現(xiàn)R1與R3之間跨VLAN通信的需求。操作步驟步驟一實驗環(huán)境準備1開始配置，然后跳過步驟2。如果使用的設(shè)備包含上一個實驗的配置，請直接從步驟2開始配置。R1、R3和S1的設(shè)備名稱，并按照拓撲圖配置R1的G0/0/1接口的IP地址。<>system-viewEntersystemview,returnuserviewwithCtrl+Z.[]sysnameR1[R1]interface操作步驟步驟一實驗環(huán)境準備1開始配置，然后跳過步驟2。如果使用的設(shè)備包含上一個實驗的配置，請直接從步驟2開始配置。R1、R3和S1的設(shè)備名稱，并按照拓撲圖配置R1的G0/0/1接口的IP地址。<>system-viewEntersystemview,returnuserviewwithCtrl+Z.[]sysnameR1[R1]interfaceGigabitEthernet0/0/1[R1-GigabitEthernet0/0/1]ipaddress24<>system-viewEntersystemview,returnuserviewwithCtrl+Z.[]sysnameR3<Quidway>system-view[Quidway]sysnameS1步驟二為R3配置IPR3上的G0/0/1接口的IP地址。[R3]interfaceGigabitEthernet0/0/1[R3-GigabitEthernet0/0/1]ipaddress24步驟三創(chuàng)建VLAN在S1上創(chuàng)建VLAN4和VLAN8，將端口G0/0/1加入到VLAN4中，將端口G0/0/3加入到VLAN8中。[S1]vlanbatch48Info:Thisoperationmaytakeafewseconds.Pleasewaitforamoment...done.[S1]interfaceGigabitEthernet0/0/1[S1-GigabitEthernet0/0/1]portlink-typeaccess[S1-GigabitEthernet0/0/1]portdefaultvlan4[S1-GigabitEthernet0/0/1]quit[S1]interfaceGigabitEthernet0/0/3[S1-GigabitEthernet0/0/3]portlink-typeaccess[S1-GigabitEthernet0/0/3]portdefaultvlan8[S1-GigabitEthernet0/0/3]quit[S1]interfaceGigabitEthernet0/0/1[S1-GigabitEthernet0/0/1]portlink-typeaccess[S1-GigabitEthernet0/0/1]portdefaultvlan4[S1-GigabitEthernet0/0/1]quit[S1]interfaceGigabitEthernet0/0/3[S1-GigabitEthernet0/0/3]portlink-typeaccess[S1-GigabitEthernet0/0/3]portdefaultvlan8[S1-GigabitEthernet0/0/3]quit將S1連接R2路由器的G0/0/2端口配置為Trunk接口，并VLAN8的報文通過。[S1]interfaceGigabitEthernet0/0/2VLAN4和[S1-GigabitEthernet0/0/2]portlink-typetrunk[S1-GigabitEthernet0/0/2]porttrunkallow-passvlan48步驟四配置R2VLAN由于路由器只有一個實際的物理接口與交換機S1相連，而實際上不同部門的網(wǎng)關(guān)8的網(wǎng)關(guān)。<>system-viewEntersystemview,returnuserviewwithCtrl+Z.[]sysnameR2[R2]interfaceGigabitEthernet0/0/1.1[R2-GigabitEthernet0/0/1.1]ipaddress5424[R2-GigabitEthernet0/0/1.1]dot1qterminationvid4[R2-GigabitEthernet0/0/1.1]arpbroadcastenable[R2-GigabitEthernet0/0/1.1]quit[R2]interfaceGigabitEthernet0/0/1.3[R2-GigabitEthernet0/0/1.3]ipaddress5424[R2-GigabitEthernet0/0/1.3]dot1qterminationvid8[R2-GigabitEthernet0/0/1.3]arpbroadcastenable和R3上各配置一條默認路由指向各自的網(wǎng)關(guān)。[R1]iproute-static54[R3]iproute-static54R1與R3間的連通性。<R1>pingPING:56[R2-GigabitEthernet0/0/1.3]arpbroadcastenable和R3上各配置一條默認路由指向各自的網(wǎng)關(guān)。[R1]iproute-static54[R3]iproute-static54R1與R3間的連通性。<R1>pingPING:56databytes,pressCTRL_CtobreakReplyfrom:bytes=56Sequence=1ttl=254time=10msReplyfrom:bytes=56Sequence=2ttl=254time=1msReplyfrom:bytes=56Sequence=3ttl=254time=1msReplyfrom:bytes=56Sequence=4ttl=254time=10msReplyfrom:bytes=56Sequence=5ttl=254time=1ms---pingstatistics---5packet(s)transmitted5packet(s)received0.00%packetlossround-tripmin/avg/max=1/4/10ms[R2]displayiprouting-tableRouteFlags:R-relay,D-downloadtofibTables:PublicDestinations:10Routes:10Destination/MaskProtoPreCostFlagsNextHopInterface54/32Direct00DGigabitEthernet0/0/.0/24 Direct0 0 D 54 55/32Direct00DGigabitEthernet0/0/.254/32Direct00DGigabitEthernet0/0/1.355/32Direct00DGigabitEthernet0/0/1.3/8Direct00DInLoopBack0/32Direct00DInLoopBack055/32Direct00DInLoopBack055/32Direct00DInLoopBack0配置文件current-configuration[V200R007C00SPC600]#sysnameR1#interfaceGigabitEthernet0/0/1ipaddress#ip55/32Direct00DGigabitEthernet0/0/.254/32Direct00DGigabitEthernet0/0/1.355/32Direct00DGigabitEthernet0/0/1.3/8Direct00DInLoopBack0/32Direct00DInLoopBack055/32Direct00DInLoopBack055/32Direct00DInLoopBack0配置文件current-configuration[V200R007C00SPC600]#sysnameR1#interfaceGigabitEthernet0/0/1ipaddress#iproute-static54#returncurrent-configuration[V200R007C00SPC600]#sysnameR2#interfaceGigabitEthernet0/0/1#interfaceGigabitEthernet0/0/.0/24 Direct0 0 D 54 dot1qterminationvid4ipaddress54arpbroadcastenable#interfaceGigabitEthernet0/0/1.3dot1qterminationviddot1qterminationvid4ipaddress54arpbroadcastenable#interfaceGigabitEthernet0/0/1.3dot1qterminationvid8ipaddress54arpbroadcastenable#returncurrent-configuration[V200R007C00SPC600]#sysnameR3#interfaceGigabitEthernet0/0/1ipaddress#iproute-static54#returncurrent-configuration!SoftwareVersionV200R008C00SPC500#sysnameS1#vlanbatch48#interfaceGigabitEthernet0/0/1portlink-typeaccessportdefaultvlan4interfaceGigabitEthernet0/0/1portlink-typeaccessportdefaultvlan4#interfaceGigabitEthernet0/0/2portlink-typetrunkporttrunkallow-passvlan48#interfaceGigabitEthernet0/0/3portlink-typeaccessportdefaultvlan8#return1-4配置三層交換學習目標VLAN間通信的配置方法鏈路實現(xiàn)VLAN間通信的配置方法VLAN間配置動態(tài)路由協(xié)議OSPF的方法拓撲圖圖1.4三層交換實驗拓撲圖場景1-4配置三層交換學習目標VLAN間通信的配置方法鏈路實現(xiàn)VLAN間通信的配置方法VLAN間配置動態(tài)路由協(xié)議OSPF的方法拓撲圖圖1.4三層交換實驗拓撲圖場景VLAN間通信。作為企業(yè)的網(wǎng)絡(luò)管理員，您需要在三層交換機配置VLANIF接口的三層功能，使得如上網(wǎng)絡(luò)能夠進行三層通信，還需要配置路由協(xié)議。操作步驟步驟一實驗環(huán)境準備12。如果使用的設(shè)備包含上一個實驗的配置，請直接從步驟2開始配置。IP地址配置為/24，在S1和S2之間配置Eth-Trunk，并關(guān)閉S3和S4上的無關(guān)端口。<>system-viewEntersystemview,returnuserviewwithCtrl+Z.[]sysnameR1[R1]interfaceGigabitEthernet0/0/1[R1-GigabitEthernet0/0/1]ipaddress24<>system-viewIP地址配置為/24，在S1和S2之間配置Eth-Trunk，并關(guān)閉S3和S4上的無關(guān)端口。<>system-viewEntersystemview,returnuserviewwithCtrl+Z.[]sysnameR1[R1]interfaceGigabitEthernet0/0/1[R1-GigabitEthernet0/0/1]ipaddress24<>system-viewEntersystemview,returnuserviewwithCtrl+Z.[]sysnameR3<Quidway>system-view[Quidway]sysnameS1[S1]interfaceEth-Trunk1acplink-typetrunk[S1-Eth-Trunk1]porttrunkallow-passvlanall[S1]interfaceGigabitEthernet0/0/9[S1-GigabitEt