I. Common technology of Campus network
Understand the relevant network component terminology before you begin the following operations.
Two. Investigate the school situation and divide the VLAN and IP address segments
VLAN number |
VLAN name |
IP network Segment |
Default Gateway |
Description |
Switch corresponding port |
VLAN 2 |
Servers |
192.10.1.0/24 |
192.10.1.254 |
Server cluster VLAN |
Fa 0/2 |
VLAN 3 |
Adimn |
192.10.2.0/24 |
192.10.2.254 |
Executive Building VLAN |
Fa 0/3 |
VLAN 4 |
Stu |
192.10.3.0/24 |
192.10.3.254 |
Student Dorm VLAN |
Fa 0/4 |
VLAN 5 |
Lab |
192.10.4.0/24 |
192.10.4.254 |
Training Building VLAN |
Fa 0/5 |
VLAN 6 |
Teach |
192.10.5.0/24 |
192.10.5.254 |
School building VLAN |
Fa 0/6 |
VLAN 7 |
Libr |
192.10.6.0/24 |
192.10.6.254 |
Library VLAN |
Fa 0/7 |
Three. Topology diagram
Four. Configuration
- Configuration of the switch
Please supplement the Switch configuration knowledge:
1, three layer switch, layered: core layer, aggregation layer, access layer, the analysis of those in the topological map of the core layer, those belonging to the aggregation layer and access layer,
2. VLAN,vtp,trunk,dot1q
First step: Configure the "hub" switch for VTP Server
switch>en
switch#
Switch#vlan Database
Switch (VLAN) #vtp domain WH
Switch (VLAN) #vtp server
Switch (VLAN) #exit
Switch#conf T
Switch (config) #int fa 0/1 (connect router)
Switch (config-if) #switchport trunk Encapsulation dot1q
Switch (config-if) #switchport mode trunk
Switch (config-if) #no shut
Switch (config-if) #int FA 0/2
Switch (config-if) #switchport trunk Encapsulation dot1q
Switch (config-if) #switchport mode trunk
Switch (config-if) #no shut
Switch (config-if) #int FA 0/3
Switch (config-if) #switchport trunk Encapsulation dot1q
Switch (config-if) #switchport mode trunk
Switch (config-if) #no shut
Switch (config-if) #int FA 0/4
Switch (config-if) #switchport trunk Encapsulation dot1q
Switch (config-if) #switchport mode trunk
Switch (config-if) #no shut
Switch (config-if) #int FA 0/5
Switch (config-if) #switchport trunk Encapsulation dot1q
Switch (config-if) #switchport mode trunk
Switch (config-if) #no shut
Switch (config-if) #int FA 0/6
Switch (config-if) #switchport trunk Encapsulation dot1q
Switch (config-if) #switchport mode trunk
Switch (config-if) #no shut
Switch (config-if) #int FA 0/7
Switch (config-if) #switchport trunk Encapsulation dot1q
Switch (config-if) #switchport mode trunk
Switch (config-if) #no shut
Step Two: Configuration " Server Aggregation " Switch Trunk Link , Allow VLAN The tagged Ethernet frame passes through the link
switch>en
Switch#conf T
Switch (config) #vtp domain wh
Switch (config) #vtp mode client
Switch (config) #int fa 0/1
Switch (config-if) #switchport mode trunk
Switch (config-if) #
Step three: "Hub switch" to create VLAN and Port partitioning
Method One: Add directly to the VLAN Library:
Method Two: Add by command line:
Switch (VLAN) #vlan 2 name Servers
Switch (VLAN) #vlan 3 name Admin
Switch (VLAN) #vlan 4 name Stu
Switch (VLAN) #vlan 5 name Lab
Switch (VLAN) #vlan 6 name Teach
Switch (VLAN) #vlan 7 name Libr
After you add it, view it by command:
Fourth step: View VLANs on the server aggregation switch
The result shows that the learning function is embodied!
Fifth step: "Server aggregation" switch port configuration
Switch#conf T
Switch (config) #int fa 0/2
Switch (config-if) #switchport mode access
Switch (config-if) #switchport Access VLAN 2
Switch (config-if) #int FA 0/3
Switch (config-if) #switchport mode access
Switch (config-if) #switchport Access VLAN 2
Switch (config-if) #int FA 0/4
Switch (config-if) #switchport mode access
Switch (config-if) #switchport Access VLAN 2
Switch (config-if) #int FA 0/5
Switch (config-if) #switchport mode access
Switch (config-if) #switchport access VLAN
Switch (config-if) #
Sixth Step : setting up the hub switch , to be VLAN Configuration IP Address
switch>en
Switch#conf T
Switch (config) #int vlan 1
Switch (config-if) #ip address 192.10.0.254 255.255.255.0
Switch (config-if) #no shut
Switch (config) #int VLAN 2
Switch (config-if) #ip address 192.10.1.254 255.255.255.0
Switch (config-if) #no shut
Switch (config-if) #int VLAN 3
Switch (config-if) #ip address 192.10.2.254 255.255.255.0
Switch (config-if) #no shut
Switch (config-if) #int VLAN 4
Switch (config-if) #ip address 192.10.3.254 255.255.255.0
Switch (config-if) #no shut
Switch (config-if) #int VLAN 5
Switch (config-if) #ip address 192.10.4.254 255.255.255.0
Switch (config-if) #no shut
Switch (config-if) #int VLAN 6
Switch (config-if) #ip address 192.10.5.254 255.255.255.0
Switch (config-if) #no shut
Switch (config-if) #int VLAN 7
Switch (config-if) #ip address 192.10.6.254 255.255.255.0
Switch (config-if) #no shut
Switch (config-if) #exit
Switch (config) #
Seventh Step : Configuration PC Machine , Test VLAN
Configure each server according to the IP address below, Gateway IP address: 192.10.1.254.
Ping the gateway and WWW server on the FTP server, both of which can ping, as shown in:
Eighth step: Configure " Executive Building " Switch
After the other switches are configured in this way, you can also use the ping command to try the connectivity of different network segments.
switch>en
Switch#conf T
Switch (config) #vtp domain wh
Switch (config) #vtp mode client
Switch (config) #int fa 0/1
Switch (config-if) #switchport trunk Encapsulation dot1q
Switch (config-if) #switchport mode trunk
Switch (config-if) #exit
Switch (config) #exit
Switch#show VLAN
switch#
Switch#conf T
Switch (config) #int fa 0/2
Switch (config-if) #switchport mode access
Switch (config-if) #switchport Access VLAN 3
Switch (config-if) #exit
Switch (config) #
To the PC connecting "Executive Building" switch one IP address: 192.10.2.4, Gateway ip:192.10.2.254. Ping the gateway and the neighboring host (192.10.2.5) on this computer, ping the FTP server, and do not ping, you need to add RIP routes in the hub switch.
Switch (config) #ip routing
Switch (config) #router rip
Switch (config-router) #network 192.10.0.0
Switch (config-router) #network 192.10.1.0
Switch (config-router) #network 192.10.2.0
Switch (config-router) #network 192.10.3.0
Switch (config-router) #network 192.10.4.0
Switch (config-router) #network 192.10.5.0
Switch (config-router) #network 192.10.6.0
After adding the route, ping the www and DHCP in the server in the Administrative landlord machine .
- " Firewall " Router Configuration
Routers in the network to achieve internal and external network conversion, that is, all the hosts in the campus network to access the external network must be through all address translation. Router one port with s port, one is Fast Ethernet link. The router is connected with the external network 202.1.1.0/24 through the static link and connected with the intranet 192.10.10.0/24 through the Fast Ethernet link.
[2811 default No S interface, you can add nm-4a/s in the module, add S interface]
- Access Public network configuration
(1) Turn on the routing function on the hub switch
switch>en
Switch#conf T
Switch (config) #int fa 0/1
Switch (config-if) #no switchport (Close Layer two port, configure IP address)
Switch (config-if) #ip add 192.10.10.2 255.255.255.0
Switch (config-if) #no shut
Switch (config-if) #exit
Switch (config) #ip routing (turn on routing)
Switch (config) #router rip (run RIP protocol)
Switch (config-router) #ver 2
Switch (config-router) #no au
Switch (config-router) #net 192.10.1.0
Switch (config-router) #net 192.10.2.0
Switch (config-router) #net 192.10.3.0
Switch (config-router) #net 192.10.4.0
Switch (config-router) #net 192.10.5.0
Switch (config-router) #net 192.10.6.0
Switch (config-router) #net 192.10.10.0
Switch (Config-router) #exit
( 2 ) Firewall Router Configuration
router>en
Router#conf T
Router (config) #int fa 0/0
Router (config-if) #ip add 192.10.10.1 255.255.255.0
Router (config-if) #no shut
Router (config-if) #exit
Router (config) # int s1/0
Router (config-if) #ip add 202.1.1.1 255.255.255.0
Router (config-if) #no shut
Router (config-if) #exit
Router (config) #router rip
Router (config-router) #ver 2
Router (config-router) #no au
Router (config-router) #net 192.10.10.0
Router (config-router) #net 202.1.1.0
Router (config-router) #default-information originate
Router (Config-router) #exit
Router (config) #exit
Router (config) #ip nat inside source static TCP 192.10.1.3 80 202.1.1.3 80 (Configure static NAT map _web Server)
Router (config) #ip nat inside source List 1 interface serial1/0 overload
Router (config) #exit
Router#show IP route
CODES:C-connected, s-static, I-igrp, R-rip, M-mobile, B-BGP
D-EIGRP, Ex-eigrp External, O-OSPF, IA-OSPF Inter area
N1-OSPF NSSA External Type 1, N2-OSPF NSSA external type 2
E1-OSPF external Type 1, E2-OSPF external type 2, E-EGP
I-is-is, L1-is-is level-1, L2-is-is level-2, ia-is-is Inter area
*-Candidate default, U-per-user static route, O-ODR
P-periodic downloaded static route
Gateway of last resort are not set
R 192.10.1.0/24 [120/1] via 192.10.10.2, 00:00:06, fastethernet0/0
R 192.10.2.0/24 [120/1] via 192.10.10.2, 00:00:06, fastethernet0/0
R 192.10.3.0/24 [120/1] via 192.10.10.2, 00:00:06, fastethernet0/0
R 192.10.4.0/24 [120/1] via 192.10.10.2, 00:00:06, fastethernet0/0
R 192.10.7.0/24 [120/1] via 192.10.10.2, 00:00:06, fastethernet0/0
R 192.10.8.0/24 [120/1] via 192.10.10.2, 00:00:06, fastethernet0/0
C 192.10.10.0/24 is directly connected, fastethernet0/0
C 202.1.1.0/24 is directly connected, serial2/0
router#
Allow each network segment to route out through:
Router#conf T
Router (config) #access-list 1 Permit 192.10.1.0 0.0.0.255
Router (config) #access-list 1 Permit 192.10.2.0 0.0.0.255
Router (config) #access-list 1 Permit 192.10.3.0 0.0.0.255
Router (config) #access-list 1 Permit 192.10.4.0 0.0.0.255
Router (config) #access-list 1 Permit 192.10.5.0 0.0.0.255
Router (config) #access-list 1 Permit 192.10.6.0 0.0.0.255
Router (config) #access-list 1 Permit 192.10.10.0 0.0.0.255
Allow 7 network segments to go through NAT
Router (config) #int s1/0
Router (config-if) #ip Nat outside
Router (config-if) #exit
Router (config) #int fa 0/0
Router (config-if) #ip nat inside
Router (config-if) #end
router#
Router#conf T
Router (config) # ip route 0.0.0.0 0.0.0.0 202.1.1.2
Configure static routes so that NAT -Converted packets can go to the ISP
Router (config) #
( 3 ) ISP Router Configuration
router>en
Router#conf T
Enter configuration commands, one per line. End with cntl/z.
Router (config) #host ISP
ISP (config) #int s1/0
ISP (config-if) #ip add 202.1.1.2 255.255.255.0
ISP (config-if) #no shut
ISP (config-if) #clock rate 64000
ISP (config-if) #exit
ISP (config) #int fa 0/0
ISP (config-if) #ip add 202.1.2.1 255.255.255.0
ISP (config-if) #no shut
ISP (config-if) #exit
ISP (config) #
( 4 ) and ISP server-specific configuration of the connection
( 5 ) Connectivity test (intranet can ping each other, the intranet can ping the NAT router, ISP router)
On the DHCP server ping:192.10.10.1
Accessing an extranet server on a DHCP network
It is now possible to access the ISP-side WWW server normally.
4. Server Configuration
( 1 ) DHCP Server Configuration
The IP configuration of the DHCP server is as follows:
Configure the DHCP server to turn off DNS, FTP, MAIL, HTTP services on this server, and other services unchanged
Click DHCP on the left
When set, click Save.
( 2 ) WWW Server Configuration
The IP configuration of the WWW server is as follows:
Turn on the HTTP service while shutting down the DNS, FTP, mail, and DHCP services on this server, click left mail,smtp Service, POP3 service is set to off, and other services remain intact.
( 3 ) DNS Server Configuration
Configure the DNS server, turn off DHCP, FTP, MAIL, Web Services (service) on this server, and other services are the same, and the procedure is similar to the DHCP configuration process, where only for DNS configuration:
DNS Service (Service status): On (Open), add 5 resource Records name (resource record name) and address, each add finally click Add (Add) to the text area, add and click Save (Save).
( 4 ) FTP Server Configuration
Configure the FTP server, turn off DHCP, DNS, MAIL, Web Services (service) on this server, and other services are the same, and the procedure is similar to the DHCP configuration process, which is configured for FTP only:
Service Status: On (Open), add 2 user name (username) and password (password) respectively, each user tick write (writable), read (readable), delete (delete), Rename (rename), List, each time you add the last Click + (add) to the scrolling text area.
( 5 ) e-Mail Server Configuration
Configure the mail server, turn off DHCP, DNS, FTP, Web Services (service) on this server, and other services are the same, and the procedure is similar to the DHCP configuration process, which is only configured for email:
SMTP Service, POP3 Service (Service status): on domain name (domain name): mail.wyq.com Add 2 User (user) and password (password) each, add last to click + (add) to the scrolling text area.
( 6 ) to test the service availability of each server
First step: Configure a Client
Here, use a PC (192.10.1.4) Machine in the Executive building as the client to test the performance of the server you just configured.
Step two: Test FTP Service
Click Client--click desktop--click Command prompt--enter FTP ftp.wyq.com--Press enter--Enter user name: wyq--Enter Password: 123456--Enter dir to view the FTP service file-- Enter help view action command--enter quit to exit the FTP service.
Step three: Test WWW Server
To access the WWW server using the graphical interface: Click Client--desktop--web browser--Enter www. Wyq . com--click Go
Fourth Step: Mail Server Testing
Click Client-click desktop--click e-mail--to fill out configure mail
Note: Email address (e-mail) must be its own user name [email protected]+mail (mail) domain name (domain name) < view domain name in Mail >,incomeing mail Server (accept mail server domain name) must be pop.math.com< view domain name in DNS >,outgoing mail server (outgoing mail server domain name) must be smtp.math.com< view domain name in DNS >.
When you are finished filling out the information, click Compose to send the message. Here's an example of how Lily users send themselves messages to demonstrate the process:
Note: To is sent to each other, fill in the other email address, subject is the subject, the below area for the mail content. Click the Send button to send the message, and the recipient can click Reveive in their own message to receive the message.
5. Configure the wireless network
First step: Configure the wireless router
Step Two: give the client PC2 Add a wireless card
On the PC, there is only one "Fast Ethernet" interface, and no wireless card.
First click on the PC power switch, the PC shutdown, and then the lower PC Ethernet card to the point where the sword, the Ethernet card removed, and then drag the wireless card to the location of the Ethernet card just now, and then click on the PC power switch, the PC boot, the four-step is to the simulator of the ordinary PC to add wireless network card.
Step Three: PC2 Specific Configuration
Fourth Step : Accessing intranet Servers " www. Wyq . com "
Servers with the above settings can provide services.
Campus Network formation (based on Packet tracer)