網(wǎng)絡(luò)系統(tǒng)建設(shè)與運維本綜合項目，展示了一個典型的高可靠性園區(qū)網(wǎng)的完整配置，包含了HCIA-Datacom的絕大多數(shù)知識點，內(nèi)容較多，版面較長，不再細致地說明每一個配置步驟，只列出所有設(shè)備的配置清單，提高篇項目13HCIA綜合組網(wǎng)一、學(xué)習(xí)目標(biāo)1、掌握大型園區(qū)網(wǎng)的設(shè)計、部署與配置；2、掌握HCIA各技術(shù)點的綜合運用。二、網(wǎng)絡(luò)拓撲圖提高篇項目13HCIA綜合組網(wǎng)三、環(huán)境與設(shè)備要求1、PC1、PC3屬于VLAN10，PC2、PC4屬于VLAN20，4臺PC機均通過DHCP動態(tài)獲取IP地址；2、在SW3、SW4、R4、R5上運行MSTP，其中instance10映射VLAN10，instance20映射VLAN20，R5作為instance10的主根，instance20的備根，R4作為instance10的備根，instance20的主根；3、在R4和R5中運行VRRP，同時為VLAN10和VLAN20提供虛擬冗余網(wǎng)關(guān)服務(wù)，其中VLAN10的虛擬網(wǎng)關(guān)地址為54，R5作為Master，R4作為Slave，VLAN20的虛擬網(wǎng)關(guān)地址為54，R4作為Master，R5作為Slave；4、公司總部運行OSPF路由，劃分至區(qū)域0；信息中心運行OSPF路由，劃分至區(qū)域1；車間設(shè)備由于性能不足，運行RIP路由；提高篇項目13HCIA綜合組網(wǎng)5、在R1上開啟全局DHCP服務(wù)器，為VLAN10和VLAN20提供IP地址分配服務(wù)；在R4和R5上開啟DHCP中繼，并使用DHCP服務(wù)器組的方式向R1轉(zhuǎn)發(fā)請求；6、在R1上開啟NAT，為內(nèi)網(wǎng)用戶提供IP地址轉(zhuǎn)換服務(wù)；同時配置靜態(tài)NAT，使得內(nèi)網(wǎng)和外網(wǎng)用戶均能夠通過公網(wǎng)IP訪問內(nèi)網(wǎng)的Web服務(wù)器；7、在R1和運營商之間配置浮動路由，默認使用中國聯(lián)通100M鏈路；8、全網(wǎng)能夠互通。提高篇項目13HCIA綜合組網(wǎng)四、配置清單本項目作為HCIA綜合組網(wǎng)案例，配置項目較多，也有很多種配置方案，下面提供一種最可靠、最常用的網(wǎng)絡(luò)配置方案，不再詳細敘述每項配置的具體作用，供大家參考。提高篇項目13HCIA綜合組網(wǎng)4.1SW3配置文檔提高篇項目13HCIA綜合組網(wǎng)<SW3>discurrent-configuration#sysnameSW3#vlanbatch1020#clusterenablentdpenablendpenable#dropillegal-macalarm#diffservdomaindefault#stpregion-configurationregion-namehwinstance10vlan10instance20vlan20activeregion-configuration#drop-profiledefault#aaaauthentication-schemedefaultauthorization-schemedefaultaccounting-schemedefaultdomaindefaultdomaindefault_adminlocal-useradminpasswordsimpleadminlocal-useradminservice-typehttp#interfaceVlanif1#interfaceMEth0/0/1#interfaceEthernet0/0/1portlink-typeaccessportdefaultvlan10#interfaceEthernet0/0/2portlink-typeaccessportdefaultvlan20#interfaceEthernet0/0/3portlink-typetrunkporttrunkallow-passvlan1020#interfaceEthernet0/0/4portlink-typetrunkporttrunkallow-passvlan1020#interfaceEthernet0/0/5#interfaceEthernet0/0/6#interfaceEthernet0/0/7#interfaceEthernet0/0/8#interfaceEthernet0/0/9#interfaceEthernet0/0/10#interfaceEthernet0/0/11#interfaceEthernet0/0/12#interfaceEthernet0/0/13#interfaceEthernet0/0/14#interfaceEthernet0/0/15#interfaceEthernet0/0/16#interfaceEthernet0/0/17#interfaceEthernet0/0/18#interfaceEthernet0/0/19#interfaceEthernet0/0/20#interfaceEthernet0/0/21#interfaceEthernet0/0/22#interfaceGigabitEthernet0/0/1#interfaceGigabitEthernet0/0/2#interfaceNULL0#user-interfacecon0user-interfacevty04#return4.2SW4配置文檔提高篇項目13HCIA綜合組網(wǎng)<SW4>discurrent-configuration#sysnameSW4#vlanbatch1020#clusterenablentdpenablendpenable#dropillegal-macalarm#diffservdomaindefault#stpregion-configurationregion-namehwinstance10vlan10instance20vlan20activeregion-configuration#drop-profiledefault#aaaauthentication-schemedefault

authorization-schemedefaultaccounting-schemedefaultdomaindefaultdomaindefault_adminlocal-useradminpasswordsimpleadminlocal-useradminservice-typehttp#interfaceVlanif1#interfaceMEth0/0/1#interfaceEthernet0/0/1portlink-typeaccessportdefaultvlan10#interfaceEthernet0/0/2portlink-typeaccessportdefaultvlan20#interfaceEthernet0/0/3portlink-typetrunkporttrunkallow-passvlan1020#interfaceEthernet0/0/4portlink-typetrunkporttrunkallow-passvlan1020#interfaceEthernet0/0/5#interfaceEthernet0/0/6#interfaceEthernet0/0/7#interfaceEthernet0/0/8#interfaceEthernet0/0/9#interfaceEthernet0/0/10#interfaceEthernet0/0/11#interfaceEthernet0/0/12#interfaceEthernet0/0/13#interfaceEthernet0/0/14#interfaceEthernet0/0/15#interfaceEthernet0/0/16#interfaceEthernet0/0/17#interfaceEthernet0/0/18#interfaceEthernet0/0/19#interfaceEthernet0/0/20#interfaceEthernet0/0/21#interfaceEthernet0/0/22#interfaceGigabitEthernet0/0/1#interfaceGigabitEthernet0/0/2#interfaceNULL0#user-interfacecon0user-interfacevty04#return4.3R5配置文檔提高篇項目13HCIA綜合組網(wǎng)<R5>discurrent-configuration#sysnameR5#vlanbatch1020100to101#stpinstance10rootprimarystpinstance20rootsecondary#clusterenablentdpenablendpenable#dropillegal-macalarm#dhcpenable#diffservdomaindefault#stpregion-configurationregion-namehwinstance10vlan10instance20vlan20activeregion-configuration#drop-profiledefault#dhcpservergroupdsp1dhcp-server0dhcp-server1#aaaauthentication-schemedefaultauthorization-schemedefaultaccounting-schemedefaultdomaindefaultdomaindefault_adminlocal-useradminpasswordsimpleadminlocal-useradminservice-typehttp#interfaceVlanif1#interfaceVlanif10ipaddress52vrrpvrid1virtual-ip54vrrpvrid1priority120dhcpselectrelaydhcprelayserver-selectdsp1#interfaceVlanif20ipaddress52vrrpvrid2virtual-ip54dhcpselectrelaydhcprelayserver-selectdsp1#interfaceVlanif100ipaddress#interfaceVlanif101ipaddress#interfaceMEth0/0/1#interfaceEth-Trunk0portlink-typetrunkporttrunkallow-passvlan1020#interfaceGigabitEthernet0/0/1portlink-typetrunkporttrunkallow-passvlan1020#interfaceGigabitEthernet0/0/2portlink-typetrunkporttrunkallow-passvlan1020#interfaceGigabitEthernet0/0/3portlink-typeaccessportdefaultvlan100#interfaceGigabitEthernet0/0/4portlink-typeaccessportdefaultvlan101#interfaceGigabitEthernet0/0/5#interfaceGigabitEthernet0/0/6#interfaceGigabitEthernet0/0/7#interfaceGigabitEthernet0/0/8#interfaceGigabitEthernet0/0/94.3R5配置文檔提高篇項目13HCIA綜合組網(wǎng)#interfaceGigabitEthernet0/0/10#interfaceGigabitEthernet0/0/11#interfaceGigabitEthernet0/0/12#interfaceGigabitEthernet0/0/13#interfaceGigabitEthernet0/0/14#interfaceGigabitEthernet0/0/15#interfaceGigabitEthernet0/0/16#interfaceGigabitEthernet0/0/17#interfaceGigabitEthernet0/0/18#interfaceGigabitEthernet0/0/19#interfaceGigabitEthernet0/0/20#interfaceGigabitEthernet0/0/21#interfaceGigabitEthernet0/0/22#interfaceGigabitEthernet0/0/23eth-trunk0#interfaceGigabitEthernet0/0/24eth-trunk0#interfaceNULL0#ospf1router-idareanetwork55#user-interfacecon0user-interfacevty04#return4.4R4配置文檔提高篇項目13HCIA綜合組網(wǎng)<R4>discurrent-configuration#sysnameR4#vlanbatch1020100to102#stpinstance10rootsecondarystpinstance20rootprimary#clusterenablentdpenablendpenable#dropillegal-macalarm#dhcpenable#diffservdomaindefault#stpregion-configurationregion-namehwinstance10vlan10instance20vlan20activeregion-configuration#drop-profiledefault#dhcpservergroupdsp1dhcp-server0dhcp-server1#aaaauthentication-schemedefaultauthorization-schemedefaultaccounting-schemedefaultdomaindefaultdomaindefault_adminlocal-useradminpasswordsimpleadminlocal-useradminservice-typehttp#interfaceVlanif1#interfaceVlanif10ipaddress53vrrpvrid1virtual-ip54dhcpselectrelaydhcprelayserver-selectdsp1#interfaceVlanif20ipaddress53vrrpvrid2virtual-ip54vrrpvrid2priority120dhcpselectrelaydhcprelayserver-selectdsp1#interfaceVlanif100ipaddress#interfaceVlanif101ipaddress#interfaceVlanif102ipaddress#interfaceMEth0/0/1#interfaceEth-Trunk0portlink-typetrunkporttrunkallow-passvlan1020#interfaceGigabitEthernet0/0/1portlink-typetrunkporttrunkallow-passvlan1020#interfaceGigabitEthernet0/0/2portlink-typetrunkporttrunkallow-passvlan1020#interfaceGigabitEthernet0/0/3portlink-typeaccessportdefaultvlan100#interfaceGigabitEthernet0/0/4portlink-typeaccessportdefaultvlan101#interfaceGigabitEthernet0/0/5portlink-typeaccessportdefaultvlan102#interfaceGigabitEthernet0/0/6#interfaceGigabitEthernet0/0/7#interfaceGigabitEthernet0/0/84.4R4配置文檔提高篇項目13HCIA綜合組網(wǎng)#interfaceGigabitEthernet0/0/9#interfaceGigabitEthernet0/0/10#interfaceGigabitEthernet0/0/11#interfaceGigabitEthernet0/0/12#interfaceGigabitEthernet0/0/13#interfaceGigabitEthernet0/0/14#interfaceGigabitEthernet0/0/15#interfaceGigabitEthernet0/0/16#interfaceGigabitEthernet0/0/17#interfaceGigabitEthernet0/0/18#interfaceGigabitEthernet0/0/19#interfaceGigabitEthernet0/0/20#interfaceGigabitEthernet0/0/21#interfaceGigabitEthernet0/0/22#interfaceGigabitEthernet0/0/23eth-trunk0#interfaceGigabitEthernet0/0/24eth-trunk0#interfaceNULL0#ospf1import-routerip1areanetwork55network55networknetwork#rip1default-routeoriginateversion2networkimport-routeospf1#user-interfacecon0user-interfacevty04#return4.5R3配置文檔提高篇項目13HCIA綜合組網(wǎng)<R3>discurrent-configuration#sysnameR3#aaaauthentication-schemedefaultauthorization-schemedefaultaccounting-schemedefaultdomaindefaultdomaindefault_adminlocal-useradminpasswordcipher(Gj"HpD|\GbL^B&WSBiQo5T#local-useradminservice-typehttp#firewallzoneLocalpriority16#interfaceEthernet0/0/0ipaddress#interfaceEthernet0/0/1ipaddress#interfaceSerial0/0/0link-protocolppp#interfaceSerial0/0/1link-protocolppp#interfaceSerial0/0/2link-protocolppp#interfaceSerial0/0/3link-protocolppp#interfaceGigabitEthernet0/0/0#interfaceGigabitEthernet0/0/1ipaddress#interfaceGigabitEthernet0/0/2#interfaceGigabitEthernet0/0/3ipaddress#wlan#interfaceNULL0#interfaceLoopBack0ipaddress55#ospf1router-idareanetwork55#user-interfacecon0user-interfacevty04user-interfacevty1620#return4.6R2配置文檔提高篇項目13HCIA綜合組網(wǎng)<R2>discurrent-configuration#sysnameR2#aaaauthentication-schemedefaultauthorization-schemedefaultaccounting-schemedefaultdomaindefaultdomaindefault_adminlocal-useradminpasswordcipherD(q.O7v'g7ECB7Ie7'/)j5W#local-useradminservice-typehttp#firewallzoneLocalpriority16#interfaceEthernet0/0/0ipaddress#interfaceEthernet0/0/1ipaddress#interfaceSerial0/0/0link-protocolppp#interfaceSerial0/0/1link-protocolppp#interfaceSerial0/0/2link-protocolppp#interfaceSerial0/0/3link-protocolppp#interfaceGigabitEthernet0/0/0ipaddress#interfaceGigabitEthernet0/0/1ipaddress#interfaceGigabitEthernet0/0/2#interfaceGigabitEthernet0/0/3ipaddress#wlan#interfaceNULL0#interfaceLoopBack0ipaddress55ospfenable1area#ospf1router-idareanetworknetworknetworknetworkareanetwork#user-interfacecon0user-interfacevty04user-interfacevty1620#return4.7R1配置文檔提高篇項目13HCIA綜合組網(wǎng)<R1>discurrent-configuration[V200R003C00]#sysnameR1#boardadd0/42SA#snmp-agentlocal-engineid800007DB03000000000000snmp-agent#clocktimezoneChina-Standard-Timeminus08:00:00#portallocal-serverloadflash:/portalpage.zip#dropillegal-macalarm#wlanac-globalcarrieridotheracid0#setcpu-usagethreshold80restore75#dhcpenable#aclnumber2000rule5permitsource55#aclnumber3000rule5permitipsource55destination530#ippoolpool_vlan10gateway-list54networkmaskexcluded-ip-address5253dns-list#ippoolpool_vlan20gateway-list54networkmaskexcluded-ip-address5253dns-list#aaaauthentication-schemedefaultauthorization-schemedefault

4.7R1配置文檔提高篇項目13HCIA綜合組網(wǎng)accounting-schemedefaultdomaindefaultdomaindefault_adminlocal-useradminpasswordcipher%$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$local-useradminservice-typehttp#firewallzoneLocalpriority15#nataddress-group050#interfaceSerial4/0/0link-protocolpppipaddressnatserverglobal53inside00natoutbound2000address-group0#interfaceSerial4/0/1link-protocolpppipaddressnatserverglobal53inside00natoutbound2000address-group0#interfaceGigabitEthernet0/0/0ipaddressnatserverglobal53inside00natoutbound3000dhcpselectglobal#interfaceGigabitEthernet0/0/1ipaddressnatserverglobal53inside00natoutbound3000dhcpselectglobal#interfaceGigabitEthernet0/0/2#interfaceNULL0#interfaceLoopBack0ipaddress554.7R1配置文檔提高篇項目13HCIA綜合組網(wǎng)#ospf1router-iddefault-route-advertisealwaysareanetworknetworknetwork#iproute-staticiproute-staticpreference80#user-interfacecon0authentication-modepassworduser-interfacevty04user-interfacevty1620#wlanac#return4.8R7配置文檔提高篇項目13HCIA綜合組網(wǎng)<R7>discurrent-configuration#sysnameR7#vlanbatch30100#clusterenablentdpenablendpenable#dropillegal-macalarm#diffservdomaindefault#drop-profiledefault#aaaauthentication-schemedefaultauthorization-schemedefaultaccounting-schemedefaultdomaindefaultdomaindefault_adminlocal-useradminpasswordsimpleadminlocal-useradminservice-typehttp#interfaceVlanif1#interfaceVlanif30ipaddress54#interfaceVlanif100ipaddress#interfaceMEth0/0/1#interfaceGigabitEthernet0/0/1portlink-typeaccessportdefaultvlan100#interfaceGigabitEthernet0/0/2portlink-typeaccessportdefaultvlan30#interfaceGigabitEthernet0/0/3portlink-typeaccessportdefaultvlan30#interfaceGigabitEthernet0/0/4#interfaceGigabitEthernet0/0/5#interfaceGigabitEthernet0/0/6#interfaceGigabitEthernet0/0/7#interfaceGigabitEthernet0/0/8#interfaceGigabitEthernet0/0/9#interfaceGigabitEthernet0/0/10#interfaceGigabitEthernet0/0/11#interfaceGigabitEthernet0/0/12#interfaceGigabitEthernet0/0/13#interfaceGigabitEthernet0/0/14#interfaceGigabitEthernet0/0/15#interfaceGigabitEthernet0/0/16#interfaceGigabitEthernet0/0/17#interfaceGigabitEthernet0/0/18#interfaceGigabitEthernet0/0/19#interfaceGigabitEthernet0/0/20#interfaceGigabitEthernet0/0/21#interfaceGigabitEthernet0/0/22#interfaceGigabitEthernet0/0/23#interfaceGigabitEthernet0/0/24#interfaceNULL0#ospf1router-idareanetwork55#user-interfacecon0user-interfacevty04#return4.9R8配置文檔提高篇項目13HCIA綜合組網(wǎng)<R8>discurrent-configuration#sysnameR8#vlanbatch40100#clusterenablentdpenablendpenable#dropillegal-macalarm#diffservdomaindefault#drop-profiledefault#aaaauthentication-schemedefaultauthorization-schemedefaultaccounting-schemedefaultdomaindefaultdomaindefault_adminlocal-useradminpasswordsimpleadminlocal-useradminservice-typehttp#interfaceVlanif1#interfaceVlanif40ipaddress54#interfaceVlanif100ipaddress#interfaceMEth0/0/1#interfaceGigabitEthernet0/0/1portlink-typeaccessportdefaultvlan100#interfaceGigabitEthernet0/0/2portlink-typeaccessportdefaultvlan40#interfaceGigabitEthernet0/0/3portlink-typeaccessportdefaultvlan40#interfaceGigabitEthernet0/0/4#interfaceGigabitEthernet0/0/5#interfaceGigabitEthernet0/0/6#interfaceGigabitEthernet0/0/7#in