项目简介:
某集团公司原在北京建立了总公司，后在上海建立了分公司，又在长沙建立了办事处。集团全网采用路由协议进行互联互通。
总公司、分公司、办事处、Internet的网络结构详见拓扑图。编号为SW1、SW2、SW3的设备作为总公司核心交换机；编号FW1的设备作为总公司互联网出口防火墙；编号为FW2的设备作为分公司互联网出口防火墙；编号为RT1的设备作为互联网出口路由器；编号为RT2的设备作为办事处路由器；编号为AC1的设备作为无线控制器，通过与办事处AP1配合实现所属区域无线覆盖。
本次使用设备：神州数码产品线
- 三层交换机：CS6200-28X-Pro
网络设备IP地址分配表
设备名称 设备接口 IP地址
SW1-BR Loopback2 10.0.1.2/32
Vlan2017 10.0.254.2/30
Vlan2018 10.0.254.9/30
SW1-IN Loopback3 20.0.1.3/32
Vlan3013 20.0.255.1/30
Vlan3014 20.0.255.13/30
Vlan3015 20.0.255.21/30
SW2-BR Loopback2 10.0.2.2/32
Vlan2017 10.0.254.6/30
Vlan2018 10.0.254.13/30
SW2-IN Loopback3 20.0.2.3/32
Vlan3013 20.0.255.14/30
Vlan3014 20.0.255.17/30
Vlan3015 20.0.255.25/30
SW3-BR Loopback2 10.0.3.2/32
Vlan2017 10.0.254.10/30
Vlan2018 10.0.254.14/30
SW3-IN Loopback3 20.0.3.3/32
Vlan3013 20.0.255.10/30
Vlan3014 20.0.255.18/30
Vlan3015 20.0.255.29/30
SW-VRF的创建请参考我的其他文章“2024网络建设与运维赛题-交换配置教程”
本部分分为上下两篇，本篇为上。
SW1-BR配置
SW1(config)#interface loopback 2
SW1(config-if-loopback2)#ip vrf forwarding Branch
Interface IP address removed due to enabling VRF Branch
SW1(config-if-loopback2)#ip address 10.0.1.2 255.255.255.255
SW1(config-if-loopback2)#exit
SW1(config)#vlan 2017-2018
SW1(config)#interface vlan 2017
SW1(config-if-vlan2017)#ip vrf forwarding Branch
Interface IP address removed due to enabling VRF Branch
SW1(config-if-vlan2017)#ip address 10.0.254.2 255.255.255.252
SW1(config-if-vlan2017)#interface vlan 2018
SW1(config-if-vlan2018)#ip vrf forwarding Branch
Interface IP address removed due to enabling VRF Branch
SW1(config-if-vlan2018)#ip address 10.0.254.9 255.255.255.252
SW1(config-if-vlan2018)#exit
SW1-IN配置
SW1(config)#interface loopback 3
SW1(config-if-loopback3)#ip vrf forwarding Internet
Interface IP address removed due to enabling VRF Internet
SW1(config-if-loopback3)#ip add 20.0.1.3 255.255.255.255
SW1(config-if-loopback3)#exit
SW1(config)#vlan 3013-3015
SW1(config)#interface vlan 3013
SW1(config-if-vlan3013)#ip vrf forwarding Internet
Interface IP address removed due to enabling VRF Internet
SW1(config-if-vlan3013)#ip address 20.0.255.1 255.255.255.252
SW1(config-if-vlan3013)#interface vlan 3014
SW1(config-if-vlan3014)#ip vrf forwarding Internet
Interface IP address removed due to enabling VRF Internet
SW1(config-if-vlan3014)#ip address 20.0.255.13 255.255.255.252
SW1(config-if-vlan3014)#interface vlan 3015
SW1(config-if-vlan3015)#ip vrf forwarding Internet
Interface IP address removed due to enabling VRF Internet
SW1(config-if-vlan3015)#ip address 20.0.255.21 255.255.255.252
SW1(config-if-vlan3015)#exit
SW2-BR配置
SW2(config)#interface loopback 2
SW2(config-if-loopback2)#ip vrf forwarding Branch
Interface IP address removed due to enabling VRF Branch
SW2(config-if-loopback2)#ip address 10.0.2.2 255.255.255.255
SW2(config-if-loopback2)#exit
SW2(config)#vlan 2017-2018
SW2(config)#interface vlan 2017
SW2(config-if-vlan2017)#ip vrf forwarding Branch
Interface IP address removed due to enabling VRF Branch
SW2(config-if-vlan2017)#ip address 10.0.254.6 255.255.255.252
SW2(config-if-vlan2017)#interface vlan 2018
SW2(config-if-vlan2018)#ip vrf forwarding Branch
Interface IP address removed due to enabling VRF Branch
SW2(config-if-vlan2018)#ip address 10.0.254.13 255.255.255.252
SW2(config-if-vlan2018)#exit
SW2-IN配置
SW2(config)#interface loopback 3
SW2(config-if-loopback3)#ip vrf forwarding Internet
Interface IP address removed due to enabling VRF Internet
SW2(config-if-loopback3)#ip add 20.0.2.3 255.255.255.255
SW2(config-if-loopback3)#exit
SW2(config)#vlan 3013-3015
SW2(config)#interface vlan 3013
SW2(config-if-vlan3013)#ip vrf forwarding Internet
Interface IP address removed due to enabling VRF Internet
SW2(config-if-vlan3013)#ip address 20.0.255.14 255.255.255.252
SW2(config-if-vlan3013)#interface vlan 3014
SW2(config-if-vlan3014)#ip vrf forwarding Internet
Interface IP address removed due to enabling VRF Internet
SW2(config-if-vlan3014)#ip address 20.0.255.17 255.255.255.252
SW2(config-if-vlan3014)#interface vlan 3015
SW2(config-if-vlan3015)#ip vrf forwarding Internet
Interface IP address removed due to enabling VRF Internet
SW2(config-if-vlan3015)#ip address 20.0.255.25 255.255.255.252
SW2(config-if-vlan3015)#exit
SW3-BR配置
SW3(config)#interface loopback 2
SW3(config-if-loopback2)#ip vrf forwarding Branch
Interface IP address removed due to enabling VRF Branch
SW3(config-if-loopback2)#ip address 10.0.3.2 255.255.255.255
SW3(config-if-loopback2)#exit
SW3(config)#vlan 2017-2018
SW3(config)#interface vlan 2017
SW3(config-if-vlan2017)#ip vrf forwarding Branch
Interface IP address removed due to enabling VRF Branch
SW3(config-if-vlan2017)#ip address 10.0.254.10 255.255.255.252
SW3(config-if-vlan2017)#interface vlan 2018
SW3(config-if-vlan2018)#ip vrf forwarding Branch
Interface IP address removed due to enabling VRF Branch
SW3(config-if-vlan2018)#ip address 10.0.254.14 255.255.255.252
SW3(config-if-vlan2018)#exit
SW3-IN配置
SW3(config)#interface loopback 3
SW3(config-if-loopback3)#ip vrf forwarding Internet
Interface IP address removed due to enabling VRF Internet
SW3(config-if-loopback3)#ip add 20.0.3.3 255.255.255.255
SW3(config-if-loopback3)#exit
SW3(config)#vlan 3013-3015
SW3(config)#interface vlan 3013
SW3(config-if-vlan3013)#ip vrf forwarding Internet
Interface IP address removed due to enabling VRF Internet
SW3(config-if-vlan3013)#ip address 20.0.255.10 255.255.255.252
SW3(config-if-vlan3013)#interface vlan 3014
SW3(config-if-vlan3014)#ip vrf forwarding Internet
Interface IP address removed due to enabling VRF Internet
SW3(config-if-vlan3014)#ip address 20.0.255.18 255.255.255.252
SW3(config-if-vlan3014)#interface vlan 3015
SW3(config-if-vlan3015)#ip vrf forwarding Internet
Interface IP address removed due to enabling VRF Internet
SW3(config-if-vlan3015)#ip address 20.0.255.29 255.255.255.252
SW3(config-if-vlan3015)#exit
