Enable // enter private Mode
Configure terminal // enter global Mode
Service password-encryption // encrypt the password
Hostname Catalyst 3550-12T1 // define the name for the layer-3 Switch
Enable password 123456. // enable password
Enable secret 654321 // The encryption password of enable (it should be garbled, not 654321)
Ip subnet-zero // allow all 0 subnets
[Cisco] DHCP relay, layer-3 Switch VLAN Routing PracticeThe experiment topology uses the GNS3 0.8.6 simulator to build a DHCP server using Red Hat 6.5. The experiment requires configuring a layer-3 Switch VLAN routing so that VLAN
) # switchport mode trunk
SW2 (config-if) # no sh
# Configure the VTP client (After configuring the VTP client, you can learn the vlan created on the layer-3 Switch)
SW2 # vlan database
SW2 (vlan) # vtp domain test
SW2 (vlan) # vtp client
SW2 (vlan) # vtp password 123
SW2 (vlan) # vtp pruning
# Add the specified interface to the corresponding vlan
SW2 (config) #
The h3c layer-3 Switch acl is an example of a new library that can only access the electronic reading room, and cannot access other hosts on the Intranet, so as to avoid security impact. the IP address of the On-Internet www.2cto.com electronic reading room is not opened to 10.0.1.9, the new library plans to divide vlan 11, network segment 10.1.11.0/25, and vlan-
Layer-3 egress connection to the internal port of the firewall
It is recommended that layer-3 core switches use VLAN1 to connect to the firewall's internal port. The Intranet access to the Internet may be slow due to IP redirection !!
The specific examples and solutions are as follows:
The core of a certain Enterprise
eth1.200 hw ether 00: 05: 5D: 61: 00: 31, ifup eth1
A complete VLAN (interface) is successfully added. This function is equivalent to executing vlan 200, ip address 192.168.200.1 255.255.0 on a layer-3 switch.
Configurations on L2 Switches
The configuration on the L2 Switch is the same as before. Take AVAYA P334 as
Layer-3 Switch ACLs are used to isolate different VLANs. Create three VLANs: vlan10 vlan20 vlan30 www.2cto.com PC1 PC3 vlan10 PC2 PC4 vlan20 PC5 vlan30Vlan10 vlan20 vlan30 cannot communicate with each other but can access the Internet Pc1: 172.16.10.2 pc2: 172.16.20.2 pc3: 172.16.10.3 pc4: 172.16.20.3 pc5: 172.16.30.2 configure R1Int f0/0Ip add 192.168.1.2 255.25
Idea: Configure The VTP host and client, enable IP routing, and divide VLAN -----> define IP addresses for each VLAN port, and enable trunk ------> enable DHCP on The vtp server, and define IP-pool, set different CIDR blocks to VLAN interface IP addresses as gateways ------> Add ports to corresponding VLANs -------> set management IP addresses and passwords of vswitches
650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M02/4C/42/wKiom1Q6Ms_AiVU2AAH5SP-f5do600.jpg "Title =" Capture 2.jp
Principle Analysis: VRRP provides services to end users in the form of virtual routers, And the vrouters responsible for data forwarding are elected by a group of vrouters running VRRP Protocol, so as to implement layer-3 gateway backup.Multiple groups of VRRP groups are provided under the same VLAN Virtual Interface. Different VRRP selects different routers or layer
650) this. width = 650; "src =" http://www.bkjia.com/uploads/allimg/131227/0559435237-0.png "title =" three-layer switching machine current dhcpfunction .png "/>
Vlan da
Vlan 10
Vlan 20
Vlan 30
Vlan 40
Exit
Conf ter
Int vlan 10
Ip add 192.168.1.1 255.255.255.0
Int vlan 20
Ip add 192.168.2.1 255.255.255.0
Int vlan 30
Ip add 192.168.3.1 255.255.255.0
Int vlan 40
Ip add 192.168.4.1 255.255.255.0
Ip routing
Ip dhcp excluded-address 192.168.1.1
Ip dhcp exc
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.