Comprehensive Application of Multiple cisco router Technologies

Cisco router comprehensive experiment multiple technologies integrated application configuration relay and Ethernet channel: SW1 :( config) # int range f0/0-1 SW2 :( config) # int range f0/0-1
SW3 :( config) # int range f0/0-1 (-if) # switchport mode trunk
(-If) # switchport mode trunk www.2cto.com (-if) # no sh
(-If) # no sh (config) # int range f0/14-15 (config) # int range f0/14-15 (config) # int range f0/14-15 (-if) # switchport mode trunk
(-If) # switchport mode trunk (-if) # channel-group 1 mode on (-if) # channel-group 1 mode on
(-If) # no sh --------------------------------------- begin limit SW4 :( config) # int range f0/0-1 SW5 :( config) # int f0/14
SW6 :( config) # int f0/15 (-if) # switchport mode trunk
(-If) # switchport mode trunk (-if) # no sh
(-If) # no sh ============================================ ========================================================== ========================================================== === configure VTP domain SW3: SW5: SW6: # vlan database # vlan
Database (vlan) # vtp domain benet1 (vlan) # vtp domain benet1 (vlan) # vtp
Domain
Benet1 (vlan) # vtp server (vlan) # vtp client (vlan) # vtp
Client www.2cto.com (vlan) # vtp password test (vlan) # vtp
Password
Test (vlan) # vtp pruning --------------------------- -------------------------------------------------- SW1: SW2: SW4: # vlan database # vlan
Database (vlan) # vtp domain benet2 (vlan) # vtp domain benet2 (vlan) # vtp
Domain
Benet2 (vlan) # vtp server (vlan) # vtp client (vlan) # vtp
Client (vlan) # vtp password test (vlan) # vtp
Password
Test (vlan) # vtp pruning ========================================== ========================================================== ========================================================== === Add a vlan: SW3: SW1: # vlan database (vlan) # vlan 550 name ssl-bd01 (vlan) # vlan 2 name server (vlan) # vlan 551 name ssl-bd02 (vlan) # vlan 50 name network ========================================== ========================================================== ========================================================== ===== www.2cto.com configure STP: SW1: SW2: (config) # spanning-tree vlan 50 root primary (config) # spanning-tree
Vlan
2 root primary (config) # spanning-tree vlan 2 root secondary (config) # spanning-tree
Vlan
50 root secondary ========================================== ========================================================== ========================================================== === configure the vlan IP Address: SW3: SW4: (config) # int vlan 1 (config) # int vlan 1 (-vlan) # ip add 10.20.50.10 255.255.255.0 (-vlan) # ip add
10.20.50.55 255.
255.255.0 (-vlan) # no sh ---------------------------------------------- (config) # int vlan 550 SW5: (-vlan) # ip add 10.80.255.254 255.255.255.0 (config) # int vlan 1 (-vlan) # no sh (-vlan) # ip add
10.20.50.80 255.
255.255.0 www.2cto.com (-vlan) # no sh (config) # ip
Default-gateway 10.
255.50.10 (config) # int vlan 551 subnet (-vlan) # ip add 10.81.255.254 255.255.255.0 SW6: (-vlan) # no sh (config) # int vlan 1 (-vlan) # ip add
10.20.50.81 255
. 255.255.0 (-vlan) # no sh (config) # ip
Default-gateway
10.20.50.10 ========================================== ========================================================== ========================================================== = configure HSRP: SW1: SW2: (config) # int vlan 50 (config) # int vlan 2 (-vlan) # ip add 10.20.1.1 255.255.255.0 (-vlan) # ip add
10.0.0.2
255.255.255.0 (-vlan) # standby 50 ip 10.255.1.254 (-vlan) # standby 2 ip
10.0.0.254 (-vlan) # standby 50 primority 150 (-vlan) # standby 2
Primority
150 (-vlan) # standby 50 preempt (-vlan) # standby 2
Preempt (-vlan) # standby 50 track f0/0 60 (-vlan) # standby 2
Track
F0/0 60 www.2cto.com (-vlan) # no sh ------------------------------------------ SW1: SW2: (config) # int vlan 2 (config) # int vlan 50 (-vlan) # ip add 10.0.0.1 255.255.255.0 (-vlan) # ip add 10.20.1.2
255.255.255.0 (-vlan) # standby 2 ip 10.0.0.254 (-vlan) # standby 50 ip
10.20.1.254 (-vlan) # standby 2 primority 150 (-vlan) # standby 50
Primority
150 (-vlan) # standby 2 preempt (-vlan) # standby 50
Preempt (-vlan) # standby 2 track f0/0 60 (-vlan) # standby 50
Track
F0/0 60 (-vlan) # no sh -------------------------------------------- there are two ways to understand the configurations of Vlan1 on SW1 and SW2: 1. configure HSRP. You can use SW1 as the active router of vlan 1 and SW2 as the backup router of vlan 1. HSRP is not configured, because there is no host for vlan 1, and two
Next Hop address. We recommend that you do not configure www.2cto.com SW1: SW2: (config) # int vlan 1 (config) # int vlan 1 (-vlan) # ip add 10.20.50.1 255.255.255.0 (-vlan) # ip add
10.20.50.2 255.255.255.0 (-vlan) # no sh (-vlan) # no sh ============================================ ========================================================== ========================================================== === route entry Configuration: SW3: Configuring the default route is not the best solution, because the HSRP configuration exists on SW1 and SW2, so it is difficult
So we recommend that you configure static floating routing (config) # ip route 10.20.1.0 255.255.255.0 10.20.50.1 (config) # ip route 10.20.1.0 255.255.255.0 10.20.50.2 50 (config) # ip route 10.0.0.0 255.255.255.0 10.20.50.2 (config) # ip route 10.0.0.0 255.255.255.0 10.20.50.1 50 255.sw1: (config) # ip route 10.80.0.0 255.255.0.0 255.( config) # ip route 255.255.255.255.0.0 255.255.sw2: (config) # ip route 10.80.0.0 255.255.255.0.0 10.255.50.10 (config) # ip route 10.81.0.0 255.0.0 10.20.50.10 ==================================== ========================================================== ========================================================== ======== configure console Management and remote management for each vswitch: take SW1 as an example. The rest are www.2cto.com (config) # enable secret testbenet (config) # line vty 0 4 (config) # line console 0 (-line) # password benettest (-line) # password benettest (-line) # loggin (-line) # loggin ============================================ ========================================================== ========================================================== === ACL Configuration: SW3: (config) # access-list 100 permit ip 10.80.0.0 0.0.255.255 10.0.0.0 0.0.255 (config) # access-list 101 permit ip 10.80.0.0 0.0.255.255 10.0.0.0 0.0.255 (config) # access-list 1 permit 10.20.1.0 0.0.255 (config) # int vlan 550 (config) # int vlan 551 (-vlan) # ip access-group 100 in (-vlan) # ip access-group 101 in (config) # line vty 0 4 (-line) # access-class 1 in ingress SW1: (config) # access-list 1 permit 10.20.1.0 0.0.255 (config) # line vty 0 4 (-line) # access-class 1 in ingress SW2: (config) # access-list 1 permit 10.20.1.0 0.0.255 (config) # line vty 0 4 (-line) # access-class 1 in ingress SW4: (config) # access-list 1 permit 10.20.1.0 0.0.255 (config) # line vty 0 4 (-line) # access-class 1 in Alibaba SW5: www.2cto.com (config) # access-list 1 permit 10.20.1.0 0.0.255 (config) # line vty 0 4 (-line) # access-class 1 in ingress SW6: (config) # access-list 1 permit 10.20.1.0 0.0.255 (config) # line vty 0 4 (-line) # access-class 1 in ====================================== ========================================================== ========================================================== ======= author Xun ruyu