The configuration of cisco2811 is as follows :! InterfaceFastEthernet00description $ ETH-LAN $ ETH-SW-LAUNCH $ INTF-INFO-FE00 $ ipaddress172.17.10.1020.00000000248ipnatoutsideipvirtual-reassemblyduplexautospeed100! InterfaceFastEthernet01ip
The configuration of cisco2811 is as follows :! Interface FastEthernet0/0 description $ ETH-LAN $ ETH-SW-LAUNCH $ INTF-INFO-FE 0/0 $ ip address 172.17.10.10 255.255.255.248 ip nat outside ip virtual-reassembly duplex auto speed 100! Interface FastEthernet0/1 ip
Cisco2811 mainConfigurationAs follows:
!
Interface FastEthernet0/0
Description $ ETH-LAN $ ETH-SW-LAUNCH $ INTF-INFO-FE 0/0 $
Ip address 172.17.10.10 255.255.255.248
Ip nat outside
Ip virtual-reassembly
Duplex auto
Speed100
!
Interface FastEthernet0/1
Ip address 172.18.1.1 255.255.255.252
Ip nat inside
Ip virtual-reassembly
Duplex full
Speed100
!
Router rip
Version 2
Network 172.17.0.0
Network 172.18.0.0
Neighbor 172.18.1.2
!
Ip route 0.0.0.0 0.0.0.0 172.17.10.9
!
Ip nat pool ippool1 172.17.10.10 172.17.10.10 netmask 255.255.255.248
Ip nat inside source list 1 pool ippool1 overload
!
Access-list 1 permit 172.18.10.0 0.0.255 // only allow vlan10 users to access the external network
!
Cisco3560 mainConfigurationAs follows:
!
No aaa new-model
Ip subnet-zero
Ip routing // enable vlan routing
No ip domain-lookup
Ip dhcp excluded-address 172.18.255.254
Ip dhcp excluded-address 172.18.10.254
!
Ip dhcp pool vlan20
Import all
Network 172.18.20.0 255.255.255.0
Default-router 172.18.255.254
Dns-server 58.193.192.1 58.193.192.2
Domain-name njust.edu.cn
Lease 6 23
!
Ip dhcp pool vlan10
Import all
Network 172.18.10.0 255.255.255.0
Default-router 172.18.10.254
Dns-server 58.193.192.1 58.193.192.2
Domain-name njust.edu.cn
Lease 6 23
!
!
Interface FastEthernet0/1
Switchport access vlan 10
!
Interface FastEthernet0/2
Switchport access vlan 20
!
Interface FastEthernet0/3
Switchport access vlan 20
!
Interface FastEthernet0/4
Switchport access vlan 20
!
!
Interface FastEthernet0/23
Description trunk_link cisco2950_fe0/24
Switchport trunk encapsulation dot1q
Switchport mode trunk
!
Interface FastEthernet0/24
Description uplink cisco2811_fe0/1
Switchport access vlan 100
Speed100
Duplex full
!
!
Interface Vlan1
Ip address 1.0.0.1 255.255.255.0
!
Interface Vlan10
Ip address 172.18.10.254 255.255.255.0
!
Interface Vlan20
Ip address 172.18.255.254 255.255.255.0
!
Interface Vlan100
Ip address 172.18.1.2 255.255.255.252
!
Router rip
Version 2
Network 1.0.0.0 // you can log on to the vswitch directly from the vro.
Network 172.18.0.0
Neighbor 172.18.1.1
!
Ip classless
Ip route 0.0.0.0 0.0.0.0 172.18.1.1
Ip http server
!
Cisco2950 mainConfigurationAs follows:
!
Interface FastEthernet0/1
Switchport access vlan 10
!
Interface FastEthernet0/2
Switchport access vlan 10
!
Interface FastEthernet0/3
Switchport access vlan 20
!
Interface FastEthernet0/4
Switchport access vlan 20
!
!
Interface FastEthernet0/24
Switchport mode trunk
!
Interface Vlan1
Ip address 1.0.0.2 255.255.255.0
No ip route-cache
!
Ip default-gateway 1.0.0.1 // Add the default gateway
Ip http server
!
Cisco3560 vtpConfigurationServer, Cisco2950 vtpConfigurationIs client, and The vtp domain name is the same as the password. Because the Cisco2950 trunk port does not support ISL encapsulation, dot1q is required at both ends.
Author: "Xiao Li feidao"