Cisco three-tier VLAN with routing configuration

requires the entire network to access the Internet, using NAT Conversion

. years 6 Month - Day

14:13

650) this.width=650; "src="/e/u261/themes/default/images/spacer.gif "alt=" Computer generated alternative text: 1.1.1. DAO Chau 1.1.1. Lamp 24 pots know se1112bllinternetfaol01172 Enterprise Road main device Snow pc Ptpco Qian climbing the spoon. Today, the call XI 1vlan4 two pt!pcz pc-ptpci "style=" Background:url ("/e/u261/lang/zh-cn/images/localimage.png") No-repeat Center ; border:1px solid #ddd; "height=" 418 "width=" 627 "/>

1 , with Internet the router mimics the public network route and is configured as follows

Router>enable

Router#config T

Enter Configurationcommands, one per line. End with cntl/z.

Router (config) #inters1/0

Router (config-if) #ipadd 1.1.1.1 255.255.255.0

Router (config-if) #clockrate 6400

Router (config-if) #noshutdown

Analog public network router configuration complete

2 , configure the Enterprise router

configuring an interface to connect to a public network IP The address defines the interface as outside    

Router>enable

Router#config T

Enter Configurationcommands, one per line. End with cntl/z.

Router (config) #inters1/1

Router (config-if) #ipadd 1.1.1.2 255.255.255.0

Router (config-if) #noshutdown

Router (config-if) #

%link-5-changed:interface SERIAL1/1, CHANGED state-to-up

%lineproto-5-updown:line protocol on Interface SERIAL1/1, changed

Router (config-if) #ip Nat out side

Configuring the connection Layer three switch interface IP The address defines the interface as inside

Router (config) #interf0/0

Router (config-if) #ipadd 172.16.1.2 255.255.255.0

Router (config-if) #noshutdown

Router (config-if) #

%link-5-changed:interface fastethernet0/0, CHANGED state-to-up

%lineproto-5-updown:line protocol on Interface fastethernet0/0, changed

Router (config-if) #ip Nat inside

Configure ACL access control list, do not configure unreachable access via Routing public network (here is particularly important) if you do not put all the

Allow access to the public network segment configured to allow access to the state, the router will block these network segments access to the public network

Router (config) #access-list10 permit 192.168.1.0 0.0.0.255

Router (config) #access-list10 permit 192.168.2.0 0.0.0.255

Router (config) #access-list10 permit 192.168.3.0 0.0.0.255

Configuration NAT Address Translation

Router (config) #ip natinside Source list Interface S1/1 overload

3 , configuring layer three switches

Create a vlan5 To configure the address to connect to the route, and f0/1 into the vlan5

Switch (config) #vlan 5

Switch (config) #interf0/1

Switch (config-if) #swit

Switch (config-if) #switchportmo

Switch (config-if) #switchportmode acc

Switch (config-if) #switchportmode access

Switch (config-if) #swac

Switch (config-if) #swaccess VLAN 5

Configure VLAN addresses

Switch (config-if) #intervlan 5

Switch (config-if) #

%link-5-changed:interface Vlan5, CHANGED state-to-up

%lineproto-5-updown:line protocol on Interface Vlan5, changed

Switch (config-if) #ipadd 172.16.1.1 255.255.255.0

Switch (config-if) #noshutdown

Configure the other VLANs as well

Configuration V lan2

Switch (config) #interf0/2

Switch (config-if) #swmo acc

Switch (config-if) #swacc VLAN 2

Switch (config-if) #intervlan 2

Switch (config-if) #

%link-5-changed:interface Vlan2, CHANGED state-to-up

%lineproto-5-updown:line protocol on Interface Vlan2, changed

Switch (config-if) #ipadd 192.168.1.254 255.255.255.0

Switch (config-if) #noshut

Switch (config-if) #

Configuration V lan3

Switch (config-if) #noshut

Switch (config-if) #interf0/3

Switch (config-if) #swmo acc

Switch (config-if) #swacc VLAN 3

Switch (config-if) #intervlan 3

Switch (config-if) #

%link-5-changed:interface Vlan3, CHANGED state-to-up

%lineproto-5-updown:line protocol on Interface VLAN3, changed

Switch (config-if) #ipadd 192.168.2.254 255.255.255.0

Configure VLAN4

Switch (config-if) #interf0/4

Switch (config-if) #swmo acc

Switch (config-if) #swacc VLAN 4

Switch (config-if) #intervlan 4

Switch (config-if) #

%link-5-changed:interface Vlan4, CHANGED state-to-up

%lineproto-5-updown:line protocol on Interface Vlan4, changed

Switch (config-if) #ipadd 192.168.3.254 255.255.255.0

Configuring the DHCP server

Configuring the VLAN2DHCP Server

Switch (config) #ipdhcp pool vlan2

Switch (dhcp-config) #default-router192.168.1.254

Switch (dhcp-config) #dns-server1.1.1.1

Switch (Dhcp-config) #network192.168.1.0 255.255.255.0

Switch (Dhcp-config) #exit

Configuring the VLAN3DHCP Server

Switch (config) #ipdhcp pool vlan3

Switch (dhcp-config) #default-router192.168.2.254

Switch (dhcp-config) #dns-server2.2.2.2

Switch (Dhcp-config) #network192.168.2.0 255.255.255.0

Switch (Dhcp-config) #exit

Configuring the VLAN4DHCP Server

Switch (config) #ipdhcp pool Vlan4

Switch (dhcp-config) #default-router192.168.3.254

Switch (dhcp-config) #dns-server3.3.3.3

Switch (Dhcp-config) #network192.168.3.0 255.255.255.0

Switch (Dhcp-config) #exit

Turn on the three-layer switch routing feature

IP Routing

All the computers in the VLAN have been able to ping each other, but still can't access the Internet, because the route has not

Configuration complete

This article is from the "arrival identify" blog, be sure to keep this source http://nakedman.blog.51cto.com/7350188/1943696

Cisco three-tier VLAN with routing configuration