1、中說明這是一個比較綜合的實例，從拓撲圖上可以看出，它所包含的設備和技術。以下對這個例子作些說明。對于內部局域網，選用 Cisco 的 Catalyst 6506 作為中心交換機，二級交換采用 Catalyst 3500，同時為了說明 Trunk，又加了一個 Catalyst 2900作為三級交換，對于終端連接用了 Catalyst 1900 交換機，這樣就可以在 Catalyst 6506 與 Catalyst 3500 之間以及 Catalyst 3500 與 Catalyst 2900之間建立 Trunk，實現(xiàn)跨交換機的 VLAN。注：Catalyst 2900 系列如果要實現(xiàn) Trunk

2、，軟件必須是企業(yè)版的。對于外連上,主要是專線連接和撥號訪問,當然種類比較多.包括了 DDN、 ISDN、 Frame Relay、 E1線路等。本例給出設備的基本配置。對于多設備的連接問題,值得注意的是路由問題,本實例外連部分采用靜態(tài)路由而內部局域網采用動態(tài)路由.在本例的幀中繼配置中,運用了 IP Unnumbered ,可以節(jié)省地址資源,有興趣可以注意一下。網絡拓撲：VLAN 劃分問題對于交換設備本例中劃到VLAN 1中,而對于外連設備的所有以太網端口,均劃到VLAN 2中,下面給出各VLAN 的名稱和網關地址,本例劃分 8 個 VLAN. VLAN ID VLAN Name Gateway

3、 VLAN 1 Bluestudy 1 /16 VLAN 2 Bluestudy 2 /16 VLAN 3 Bluestudy 3 /16 VLAN 4 Bluestudy 4 /16 VLAN 5 Bluestudy 5 /16 VLAN 6 Bluestudy 6 /16 VLAN 7 Bluestudy 7 /16 VLAN 8 Bluestudy 8 /16中Catalyst 6506的配置Enter password: enable Enter passwo

4、rd: config t set system name Bluestudy set time 10/30/2000 9:30:00 set password set enablepass set interface sc0 /16 set ip route default set ip dns server 00 set ip dns domain set ip dns enable set vtp domain bluestudy mode server set vlan 1 name Bluestudy 1 s

5、et vlan 2 name Bluestudy 2 set vlan 3 name Bluestudy 3 set vlan 4 name Bluestudy 4 set vlan 5 name Bluestudy 5 set vlan 6 name Bluestudy 6 中set vlan 7 name Bluestudy 7 set vlan 8 name Bluestudy 8 set port negotiation 2/1-8 enable set port name 2/1-8 GEC 802.1Q Trunk set trunk 2/1-8 desirable dot1q s

6、et port speed 2/1-8 1000 set vlan 1 3/1-48 對于 6506 的交換機方面的配置只需做出 Trunk 即可,因為要實現(xiàn)跨交換機之間的虛網,下面配置 6506 的路由模塊,因為6506的路由模塊現(xiàn)在與管理引擎模塊集成在了一起,所以,默認命令是:Session 15 ,詳情請見6506路由設置. Catalyst 6506RSM 模塊的配置(enable) session 15 Trying Router-15. Connected to Router-15. Escape character is . enable configure terminal h

7、ostname bluestudy enable password password line vty 0 6 password secret_word ip domain-name ip name-server 00 interface vlan 1 ip address no shutdown interface vlan 2 ip address no shutdown interface vlan 3 ip address 255.255.0

8、.0 no shutdown interface vlan 4 ip address no shutdown interface vlan 5 ip address no shutdown interface vlan 6 ip address no shutdown interface vlan 7 ip address no shutdown 中interface vlan 8 ip address 255

9、.255.0.0 no shutdown router rip version 2 network ip route 2 ip route 3 ip route 40 1 ip route 1 ip route 1 ip route 255

10、.255.255.0 1 copy running-config startup-config Building configuration. OK 這里給出的是單純的命令行,略去了一些默認狀況的設置.Catalyst 3500的配置! version 12.0 no service pad service timestamps debug uptime service timestamps log uptime service password-encryption ! hostname bluestudy ! enable password password ! usern

11、ame bluestudy password password username test password password ! 省略端口的顯示! interface GigabitEthernet0/1 switchport trunk encapsulation dot1q switchport mode trunk ! interface GigabitEthernet0/2 ! interface VLAN1 中ip address ip helper-address 00 ip directed-broadcast no i

12、p route-cache ! ip default-gateway interface Ethernet1/1(與 2900 對接) switchport trunk encapsulation dot1q switchport mode trunk ! interface Ethernet1/2(與 1900 A 對接) switchport access VLAN 3 no shut ! interface Ethernet1/3(與 1900 B 對接) switchport access VLAN 4 no shut ! snmp-server engineID l

13、ocal BE4E80 snmp-server community public RO snmp-server community private RW snmp-server chassis-id 0x17 (打開簡單的網絡管理，便于以后，Cisco網管軟件識別和管理）! line con 0 login local transport input none stopbits 1 line vty 0 4 login local line vty 5 15 login ! end Catalyst 2900的配置2900 的配置與 3500 的相似,命令如下hostname bluestud

14、y ! enable password password ! username bluestudy password password username test password password ! 中省略端口的顯示! interface Ethernet0/1(與 3500 對接) switchport trunk encapsulation dot1q switchport mode trunk ! interface VLAN1 ip address ip helper-address 00 ip directed-broad

15、cast no ip route-cache ! ip default-gateway ! interface Ethernet0/2(與 1900 C 對接) switchport access VLAN 5 no shut ! interface Ethernet0/3(與 1900 D 對接) switchport access VLAN 6 no shut ! snmp-server engineID local BE4E80 snmp-server community public RO snmp-server community private RW snmp-s

16、erver chassis-id 0x17 ! line con 0 login local transport input none stopbits 1 line vty 0 4 login local line vty 5 15 login ! end Cisco Catalyst 1900的配置對于 1900 的配置就相對容易得多了只需在 enable狀態(tài)下鍵入 Setup就會進入配置向導給出交換機的IP 地址: 掩碼: 網關: 中 就可以了,另外應該打開簡單的網絡管理協(xié)議 SNMP snmp-server community pu

17、blic RO snmp-server community private RW 即可PIX 520A 的基本配置PIX Version 4.2(4) nameif ethernet0 outside security0 nameif ethernet1 inside security100 enable password password encrypted passwd password encrypted hostname pix_A fixup protocol ftp 21 fixup protocol http 80 fixup protocol smtp 25 fixup pro

18、tocol h323 1720 fixup protocol rsh 514 fixup protocol sqlnet 1521 names no failover failover timeout 0:00:00 failover ip address outside failover ip address inside pager lines 24 no logging console logging monitor debugging logging buffered debugging no logging trap logging facility

19、20 interface ethernet0 auto interface ethernet1 auto ip address outside 52 ip address inside 3 arp timeout 14400 nat (inside ) 0 52 rip outside passive no rip outside default no rip inside passive rip inside default route outside

20、 route inside timeout xlate 3:00:00 conn 1:00:00 udp 0:02:00 中 timeout rpc 0:10:00 h323 0:05:00 timeout uauth 0:05:00 absolut esnmp-server community public RO snmp-server community private RW telnet 00 55 telnet timeo

21、ut 15 mtu outside 1500 mtu inside 1500 floodguard 0 Cisco 2610A的配置Current configuration: ! version 11.3 service timestamps debug uptime service timestamps log uptime service password-encryption ! hostname 2610A ! enable password password ! username bluestudy password password no ip domain-lookup! !

22、interface Ethernet0/0 ip address 52 no shut ! interface Serial0/0 ip address 52 no shut ! interface Serial0/1 no ip address shutdown ! ip route ip route ! snmp-server community public

23、RO 中 snmp-server community private RW ! line con 0 line aux 0 line vty 0 4 login local ! no scheduler allocate end Cisco 1603 的配置Current configuration: ! version 12.0 service timestamps debug uptime service timestamps log uptime no service password-encryption ! hostname 1603 ! enable secret password

24、 enable password password ! memory-size iomem 25 ip subnet-zero ! interface Serial0 ip address 52 no ip directed-broadcast ! interface Ethernet0 ip address no ip unreachables no ip directed-broadcast ! ip classless ip route s0 no ip

25、http server ! snmp-server community public RO snmp-server community private RW 中 ! line con 0 password password transport input none line aux 0 line vty 0 4 password password login ! no scheduler allocate endPIX 520B 的基本配置PIX Version 4.2(4) nameif ethernet0 outside security0 nameif ethernet1 inside

26、security100 enable password password encrypted passwd password encrypted hostname pix520_B fixup protocol ftp 21 fixup protocol http 80 fixup protocol smtp 25 fixup protocol h323 1720 fixup protocol rsh 514 fixup protocol sqlnet 1521 names no failover failover timeout 0:00:00 failover ip address out

27、side failover ip address inside pager lines 24 no logging console no logging monitor no logging buffered no logging trap logging facility 20 interface ethernet0 auto interface ethernet1 auto ip address outside 7 48 ip address inside 2 arp

28、timeout 14400 global (outside) 1 00 中 nat (inside) 1 0 0 no rip outside passive no rip outside default no rip inside passive no rip inside default route outside 8 timeout xlate 3:00:00 conn 1:00:00 udp 0:02:00 timeout rpc 0:10:00 h323 0:05:00 t

29、imeout uauth 0:05:00 absolute no snmp-server location no snmp-server contact snmp-server community public no snmp-server enable traps telnet 00 55 telnet timeout 15 mtu outside 1500 mtu inside 1500 floodguard 0 Cisco 2610B的配置Current configuration: ! version 11.3 service timestam

30、ps debug uptime service timestamps log uptime service password-encryption ! hostname 2610B ! enable password password ! username bluestudy password password no ip domain-lookup! ! interface Ethernet0/0 ip address 8 48 no shut ! interface Serial0/0 ip address 255.

31、255.255.252 no shut ! interface Serial0/1 no ip address shutdown 中 ! ip route ! snmp-server community public RO snmp-server community private RW ! line con 0 line aux 0 line vty 0 4 login local ! no scheduler allocate endCisco 2610c的配置version 11.2 service udp-small-server

32、s service tcp-small-servers ! hostname 2610C ! enable secret cisco ! ip subnet-zero no ip domain-lookup ! ip address-pool local isdn switch-type basic-net3 interface Ethernet0 ip address 1 ! interface Serial0 no ip address encapsulation frame-relay frame-relay lmi-type ansi ! int

33、erface Serial0.1 point-to-point description Frame Relay to bluestudy1 ip unnumbered Ethernet0 frame-relay interface-dlci 10 ! 中 interface Serial0.2 point-to-point description Frame Relay to bluestudy2 ip unnumbered Ethernet0 frame-relay interface-dlci 11 ! interface BRI1/0 no ip address shutdown isd

34、n switch-type basic-net3 ! interface BRI1/1 ip address 40 encapsulation ppp timeout absolute 60 0 dialer idle-timeout 3600 dialer-group 1 isdn switch-type basic-net3 peer default ip address pool default ppp authentication chap pap callin ! interface BRI1/2 no ip address enca

35、psulation ppp shutdown isdn switch-type basic-net3 ! interface BRI1/3 no ip address encapsulation ppp shutdown isdn switch-type basic-net3 no peer default ip address ! ip local pool default 4 ip http server ip classless ip route serial0.1 ip route 192

36、.168.4.0 serial0.2 ip route ! access-list 1 permit any dialer-list 1 protocol ip list 1 line con 0 password console 中 login line aux 0 line vty 0 4 password telnet login ! end Cisco 1720A的配置version 11.2 service udp-small-servers service tcp-small-servers hostna

37、me bluestudy1 ! enable secret cisco ! ip subnet-zero no ip domain-lookup ! interface Fastethernet0 ip address ! interface Serial0 no ip address encapsulation frame-relay ! interface Serial0.1 point-to-point description Frame Relay to bluestudy ip unnumbered Ethernet0 frame-

38、relay interface-dlci 10 ! ip http server ip classless ip route serial0.1 ! line con 0 password console login line aux 0 line vty 0 4 password bluestudy1 login 中 ! end Cisco 1720B的配置version 11.2 service udp-small-servers service tcp-small-servers hostname bluestudy1 ! enable secret cisco ! ip subnet-zero no ip domain-lookup ! interface Fastethernet0 ip address ! interface Serial0 no ip addres