当前位置：网站首页>Three tier architecture experiment

Three tier architecture experiment

2022-06-23 05:12:00 【Empty and white】

Insert picture description here

Network deployment ideas :
1、 Design topology I ip Address planning
2、 Implement a topology setup
3、 To configure
0) Configuration of switching part -VLAN STP channel
1) All nodes in the bottom layer are configured legally ip Address
2) route
3) Strategy
4) test
5) misarrangement
4 maintain
5 upgrade

One 、eth-trunk
[sw3]int Eth-Trunk 0
[sw3-Eth-Trunk0]int g0/0/4
[sw3-GigabitEthernet0/0/4]eth-trunk 0
[sw3-Eth-Trunk0]int g0/0/5
[sw3-GigabitEthernet0/0/5]eth-trunk 0

sw4 Empathy
Insert picture description here

Two 、trunk
[sw3]port-group group-member g0/0/2 to g0/0/3 Eth-Trunk 0
[sw3-port-group]port l t
[sw3-GigabitEthernet0/0/2]port l t
[sw3-GigabitEthernet0/0/3]port l t
[sw3-Eth-Trunk0]port l t
[sw3-port-group]port trunk a
[sw3-port-group]port trunk allow-pass vlan 2
[sw3-GigabitEthernet0/0/2]port trunk allow-pass vlan 2
[sw3-GigabitEthernet0/0/3]port trunk allow-pass vlan 2
[sw3-Eth-Trunk0]port trunk allow-pass vlan 2

[sw4]port-group group-member g0/0/2 to g0/0/3 Eth-Trunk 0
[sw4-port-group]p l t
[sw4-port-group]p l t
[sw4-GigabitEthernet0/0/2]p l t
[sw4-GigabitEthernet0/0/3]p l t
[sw4-Eth-Trunk0]p l t
[sw4-port-group]p t a vlan 2
[sw4-GigabitEthernet0/0/2]p t a vlan 2
[sw4-GigabitEthernet0/0/3]p t a vlan 2
[sw4-Eth-Trunk0]p t a vlan 2

[sw1]port-group group-member g0/0/1 to g0/0/2
[sw1-port-group]p l t
[sw1-GigabitEthernet0/0/1]p l t
[sw1-GigabitEthernet0/0/2]p l t
[sw1-port-group]p t a
Jul 22 2021 14:47:42-08:00 sw1 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25
.191.3.1 configurations have been changed. The current change number is 7, the c
hange loop count is 0, and the maximum number of records is 4095.v
[sw1-port-group]p t a vlan 2
[sw1-port-group]p t a vlan 2
[sw1-GigabitEthernet0/0/1]p t a vlan 2
[sw1-GigabitEthernet0/0/2]p t a vlan 2

[sw2]port-group group-member g0/0/1 to g0/0/2
[sw2-port-group]p l t
[sw2-GigabitEthernet0/0/1]p l t
[sw2-GigabitEthernet0/0/2]p l t
[sw2-port-group]p t a vlan 2
[sw2-GigabitEthernet0/0/1]p t a vlan 2
[sw2-GigabitEthernet0/0/2]p t a vlan 2
[sw2-port-group]
[sw2-port-group]qu
Insert picture description here

3、 ... and 、 establish vlan
[sw4]vlan 2
Others in the same way

[sw1]int e0/0/2
[sw1-Ethernet0/0/2]p l a
[sw1-Ethernet0/0/2]p d vlan 2

[sw2]int e0/0/2
[sw2-Ethernet0/0/2]p l a
[sw2-Ethernet0/0/2]p d vlan 2
[sw2-Ethernet0/0/2]p d vlan 2

Four 、STP
[sw3]stp mode ms
[sw3]stp mode mstp
[sw3] User interface con0 is available

Please Press ENTER.

[sw3]stp mode mstp
[sw3]stp enable
[sw3]stp region-configuration
[sw3-mst-region]region-name a
[sw3-mst-region]instance 1 vlan 1
[sw3-mst-region]instance 2 vlan 2
[sw3-mst-region]active region-configuration

Others in the same way
The root node is SW4
Insert picture description here
Give Way sw3 Be the main root of group one Backup of group 2 sw4 contrary
[sw3]stp instance 1 root primary
[sw3]stp instance 2 root secondary

[sw4]stp instance 1 root secondary
[sw4]stp instance 2 root primary

Insert picture description here
Adjust the edge interface of layer-2 switch
[sw1]port-group group-member e0/0/1 to e0/0/2
[sw1-port-group]stp enable
[sw1-Ethernet0/0/1]stp enable
[sw1-Ethernet0/0/2]stp enable
[sw1-port-group]stp enable
[sw1-port-group]stp edged-port enable
[sw1-Ethernet0/0/1]stp edged-port enable
[sw1-Ethernet0/0/2]stp edged-port enable

5、 ... and 、 To configure SVI
[sw4]int vlan 1
[sw4-Vlanif1]ip add 172.16.1.2 25
[sw4-Vlanif1]int vlan 2
[sw4-Vlanif2]ip add 172.16.1.130 25

[sw3]int vlan 1
[sw3-Vlanif1]ip add 172.16.1.1 25
[sw3]int vlan 2
[sw3-Vlanif2]ip add 172.1.1.129 25

6、 ... and 、 To configure VRRP
[sw3-Vlanif1]vrrp vrid 1 virtual-ip 172.16.1.126
[sw3-Vlanif1]vrrp vrid 1 priority 120
[sw3-Vlanif1]vrrp vrid 1 track interface GigabitEthernet0/0/1 reduced 30
[sw3]int vlan 2
[sw3-Vlanif2]vrrp vrid 1 virtual-ip 172.16.1.254

[sw4]int vlan 1
[sw4-Vlanif1]vrrp vrid 1 virtual-ip 172.16.1.126
[sw4]int vlan 2
[sw4-Vlanif2]vrrp vrid 1 virtual-ip 172.16.1.254
[sw4-Vlanif2]vrrp vrid 1 priority 120
[sw4-Vlanif2]vrrp vrid 1 track int g0/0/1 reduced 30

Insert picture description here

7、 ... and 、DHCP
[sw3]dhcp enable
[sw3]ip pool v1
Info:It’s successful to create an IP address pool.
[sw3-ip-pool-v1]net 172.16.1.0 mask 25
[sw3-ip-pool-v1]gateway-list 172.16.1.126
[sw3-ip-pool-v1]dns 8.8.8.8
[sw3-ip-pool-v1]q
[sw3]ip pool v2
Info:It’s successful to create an IP address pool.
[sw3-ip-pool-v2]network 172.16.1.128 mask 25
[sw3-ip-pool-v2]gateway-list 172.16.1.254
[sw3-ip-pool-v2]dns 8.8.8.8
[sw3-ip-pool-v2]qu
[sw3-Vlanif1]dhcp select global
[sw3-Vlanif2]dhcp select global

sw4 Empathy
Insert picture description here

7、 ... and 、 To configure IP
[sw3]vlan 10
[sw3-vlan10]int g0/0/1
[sw3-GigabitEthernet0/0/1]port link-type access
[sw3-GigabitEthernet0/0/1]port default vlan 10
[sw3-GigabitEthernet0/0/1]qu
[sw3]int vlan10
[sw3-Vlanif10]ip add 172.16.0.1 30

[sw4]vlan 10
[sw4-vlan10]int g0/0/1
[sw4-GigabitEthernet0/0/1]p l a
[sw4-GigabitEthernet0/0/1]p d vlan 10
[sw4-GigabitEthernet0/0/1]int vlan10
[sw4-Vlanif10]
[sw4-Vlanif10]ip address 172.16.0.5 30

[r2]int g0/0/1
[r2-GigabitEthernet0/0/1]ip add 172.16.0.2 30
[r2-GigabitEthernet0/0/1]int g0/0/2
[r2-GigabitEthernet0/0/2]ip add 172.16.0.6 30
Insert picture description here

[r2]int g0/0/0
[r2-GigabitEthernet0/0/0]ip add 10.1.1.1 24

8、 ... and 、OSPF

[r2]ospf 1 r
[r2]ospf 1 router-id 2.2.2.2
[r2-ospf-1]a 0
[r2-ospf-1-area-0.0.0.0]net 172.16.0.0 0.0.0.255
[r2-ospf-1-area-0.0.0.0]
ospf 1 router-id 3.3.3.3

[sw3-ospf-1]dis this
area 0.0.0.0
network 172.16.0.1 0.0.0.0
area 0.0.0.1
network 172.16.1.1 0.0.0.0
network 172.16.1.129 0.0.0.0

[sw4-ospf-1]dis this

ospf 1 router-id 4.4.4.4
area 0.0.0.0
network 172.16.0.5 0.0.0.0
area 0.0.0.1
network 172.16.1.2 0.0.0.0
network 172.16.1.130 0.0.0.0

Insert picture description here
To summarize
[sw4-ospf-1-area-0.0.0.1]abr-summary 172.16.1.0 255.255.255.0
[sw3-ospf-1-area-0.0.0.1]abr-summary 172.16.1.0 255.255.255.0

[sw3-ospf-1]dis th

ospf 1 router-id 3.3.3.3
silent-interface all
undo silent-interface GigabitEthernet0/0/1
undo silent-interface Eth-Trunk0
undo silent-interface Vlanif1
undo silent-interface Vlanif10

[sw4-ospf-1]dis th

ospf 1 router-id 4.4.4.4
silent-interface all
undo silent-interface GigabitEthernet0/0/1
undo silent-interface Eth-Trunk0
undo silent-interface Vlanif10
undo silent-interface Vlanif1

Nine 、 Configure routing and nat
[r2]ip route-static 0.0.0.0 0 10.1.1.2
[r2]ospf 1
[r2-ospf-1]default-route-advertise
Insert picture description here
[r2]acl 2000
[r2-acl-basic-2000]rule permit source 172.16.0.0 0.0.255.255
[r2-acl-basic-2000]int g0/0/1
[r2-GigabitEthernet0/0/0]nat outbound 2000
Test connectivity