A comprehensive case study of Cisco inter-VLAN routing and HSRP

A comprehensive case of Cisco inter-VLAN routing and HSRP topology Description: www.2cto.com 1. R3 and R4 simulate the customer's pc, which belong to vlan10 and vlan20 respectively. Vlan10 and vlan20 represent different departments in reality. 2. SW1 is a layer-3 switch, and SW2 is a layer-2 switch. 3. R5 simulates the internet. R5 has a lo0: 5.5.5.5/24 loop port. Requirements: 1. ip addresses of each interface. 2. Each department can access each other directly and access the internet normally. 3. Dual gateways provide redundancy and automatically switch when one party fails. Www.2cto.com solution: 1. Use the layer-3 function of SW1 to implement inter-vlan routing. 2. Use HSRP to implement gateway redundancy and backup. 3. PAT on the gateway. 4. Run r12002 on the Intranet and OSPF on the outside. Fully interconnect the network and ensure the internal and external isolation. Configuration Summary: R01 # sh run!! Interface FastEthernet0/0ip address 172.16.12.1 255.255.255.0ip rip advertise 5ip nat insideip virtual-reassemblyspeed limit 1 ip limit 1 priority 120 standby 1 preemptstandby 1 track Serial1/0 100!! Interface Serial1/0ip address 10.10.15.1 255.255.0ip nat outsideip virtual-reassemblyserial restart-delay 0no dce-terminal-timing-enable !! Router ospf 100router-id 1.1.1.1log-adjacency-changesnetwork 10.10.15.1 0.0.0.0 area 0! Router ripversion 2 timers basic 5 15 0 15 network 172.16.0.0no auto-summary! Ip nat inside source list 1 interface Serial1/0 overload! Access-list 1 permit 192.168.0.0 0.255.255!!! End /////////////////////////////////////// //////////////////////////////////////// //// // R02 # sh run!! Interface FastEthernet0/0ip address 172.16.12.2 255.255.255.0ip rip advertise 5ip nat insideip virtual-reassemblyspeed 100full-duplexstandby 1 ip Route 1 preemptstandby 1 track Serial1/0 !! Interface Serial1/0ip address 10.10.25.2 255.255.0ip nat outsideip virtual-reassemblyserial restart-delay 0no dce-terminal-timing-enable !! Router ospf 100router-id 2.2.2.2log-adjacency-changesnetwork 10.10.25.2 0.0.0.0 area 0! Router ripversion 2 timers basic 5 15 0 15 network 172.16.0.0no auto-summary !! Ip nat inside source list 1 interface Serial1/0 overload! Access-list 1 permit 192.168.0.0 0.255.255 !! End /////////////////////////////////////// //////////////////////////////////////// ///// R03 # sh run! No ip routing!! Interface FastEthernet0/0ip address 192.168.13.3 255.255.255.0no ip route-cachespeed 100full-duplex!! Ip default-gateway 192.168.13.254 !! End /////////////////////////////////////// //////////////////////////////////////// ////// R04 # sh run! No ip routing !!! Interface FastEthernet0/0ip address 192.168.24.4 255.255.255.0no ip route-cachespeed 100full-duplex !! Ip default-gateway 192.168.24.254! End /////////////////////////////////////// //////////////////////////////////////// //////// R05 # sh run !! Interface Loopback0 // simulate a network node ip address 5.5.5.5 255.255.255.0ip ospf network point-to-point on the internet !! Interface Serial1/0ip address 10.10.15.5 255.255.255.0serial restart-delay 0no dce-terminal-timing-enable! Interface Serial1/1ip address 10.10.25.5 255.255.255.0serial restart-delay 0no dce-terminal-timing-enable !! Router ospf 100router-id 5.5.5log-adjacency-changesnetwork 5.5.5.5 0.0.0.0 area 0 network 10.10.15.5 0.0.0.0 area 0 network 10.10.25.5 0.0.0.0 area 0 !! End /////////////////////////////////////// //////////////////////////////////////// //////// SW01 # sh run! Interface FastEthernet0/1 switchport access vlan 30no ip addressduplex fullspeed 100 !! Interface FastEthernet0/3 switchport access vlan 10no ip addressduplex fullspeed 100 !! Interface FastEthernet0/12 switchport mode trunkno ip addressduplex fullspeed 100! Interface FastEthernet0/13 switchport mode trunkno ip addressduplex fullspeed 100 !!! Interface Vlan10ip address 192.168.13.254 255.255.255.0ip rip advertise 5! Interface Vlan20ip address 192.168.24.254 255.255.255.0ip rip advertise 5! The interface Vlan30 // vlan30 setting is crucial. It ensures the connectivity between the ip address 172.16.12.123 255.255.255.0 // between the internal client and the gateway. Ip rip advertise 5! Router rip // RIP is used for internal network connection. Version 2 timers basic 5 15 0 15 network 172.16.0.0network 192.168.13.0network 192.168.241_no auto-summary! Ip route 0.0.0.0 0.0.0.0 172.16.12.254 // direct internal traffic to the gateway !! End /////////////////////////////////////// //////////////////////////////////////// //// // SW02 # sh run! No ip routing !! Interface FastEthernet0/2 switchport access vlan 30no ip addressduplex fullspeed 100 !! Interface FastEthernet0/4 switchport access vlan 20no ip addressduplex fullspeed 100 !! Interface FastEthernet0/12 switchport mode trunkno ip addressduplex fullspeed 100! Interface FastEthernet0/13 switchport mode trunkno ip addressduplex fullspeed 100! !!! End