1个回答
一、路由器配置2811：1、主机名称及telnet 管理配置；2、端口IP地址；3、路由配置：对外默认路由和对内静态路由；4、网络地址转换NAT：静态NAT和动态NAT；6、路由配置：对外默认路由和对内静态路由（对内静态路由主要交给3560来做，只指定去往内网的静态路由）5、访问控制：从外对内的访问控制（服务器访问控制），telnet 访问控制。2811--连3560的GE0/1----------------ip route 0.0.0.0 0.0.0.0 200.1.1.1ip route 192.168.0.0 255.255.0.0 192.168.254.1 fa0/1line vty 0 15 login password CISCO transport input telnet exitinter fa0/1 ip add 192.168.254.2 255.255.255.0 ip nat inside no shinter s0/0/0 ip add 200.1.1.2 255.255.255.0 ip nat outside ip access-group 101 in no shaccess-list 30 permit 192.168.0.0 0.0.255.255ip nat inside source list 30 interface s0/0/0 ip nat inside source static (静态的映射)access-list 101 permit tcp any any eq telnetaccess-list 101 permit tcp any any eq wwwaccess-list 101 permit tcp any any eq ftp(服务策略访问控制，暂时是只对外放行 telnet,www和FTP)ISP的2811------------------line vty 0 15 login password CISCO transport input telnet exitinter fa0/1 ip add 192.168.254.2 255.255.255.0 no shinter s0/0/0 ip add 200.1.1.1 255.255.255.0 no sh三、接入层交换机配置2950：1、主机名及telnet 管理配置；2、创建VLAN，配置交换机管理IP地址；3、端口配置：指定端口vlan，级联端口干道trunk 配置；4、默认路由配置。(2950二层交换机不能配默认路由)综合楼 2960------------------line vty 0 15 login password CISCO transport input telnet exitinter g1/1 sw mode tr sw tr en do no shvlan 23vlan 100inter vlan 23 ip add 192.168.13.1 255.255.255.0inter vlan 100 ip add 192.168.1.1 255.255.255.0职工宿舍 2960-------------------line vty 0 15 login password CISCO transport input telnet exitinter g1/1 sw mode tr sw tr en do no shvlan 10vlan 11vlan 12vlan 13vlan 14vlan 15vlan 16vlan 17vlan 100inter vlan 10 ip add 192.168.10.1 255.255.255.224inter vlan 11 ip add 192.168.10.33 255.255.255.224inter vlan 12 ip add 192.168.10.65 255.255.255.224inter vlan 13 ip add 192.168.10.97 255.255.255.224inter vlan 14 ip add 192.168.10.129 255.255.255.224inter vlan 15 ip add 192.168.10.161 255.255.255.224inter vlan 16 ip add 192.168.10.193 255.255.255.224inter vlan 17 ip add 192.168.10.225 255.255.255.224inter vlan 100 ip add 192.168.1.2 255.255.255.0办公大楼 2960-------------------line vty 0 15 login password CISCO transport input telnet exitinter g1/1 sw mode tr sw tr en do no shvlan 18vlan 19vlan 20vlan 21vlan 22vlan 100inter vlan 18 ip add 192.168.11.1 255.255.255.224inter vlan 19 ip add 192.168.11.33 255.255.255.224inter vlan 20 ip add 192.168.11.65 255.255.255.224inter vlan 21 ip add 192.168.11.97 255.255.255.224inter vlan 22 ip add 192.168.12.1 255.255.255.0inter vlan 100 ip add 192.168.1.3 255.255.255.0车间 2960-------------------line vty 0 15 login password CISCO transport input telnet exitinter g1/1 sw mode tr sw tr en do no sh--- 车间的其他VLAN配置同上，略 掩码27 为 255.255.255.224二、核心交换机配置3560：1、主机名及telnet 管理配置；2、创建VLAN，配置VLAN地址（网关）；3、端口配置：指定端口vlan，级联端口干道trunk 配置；4、DHCP动态分配地址配置；5、启用路由配置、默认路由配置；6、访问控制：telnet 访问控制，专用区域访问控制。3560-----------------------------------ip routingip route 0.0.0.0 0.0.0.0 192.168.254.2line vty 0 15 login password CISCO transport input telnet exitvlan 10-33,100inter range fa0/1 - 4 sw mode tr sw tr en do no shinter g0/1 no sw ip add 192.168.254.1 255.255.255.0ip dhcp pool VLAN10 network 192.168.10.0 255.255.255.224 dns-server 202.103.224.68 default-router 192.168.10.1ip dhcp excluded-address 192.168.10.1(DHCP的配置例子，VLAN10为池的名字，其他的VLAN需要自己再建立另外的DHCP池，上面是一个VLAN10的例子，dns-server为配置指定的DNS的地址，default-router 是配置网关的地址。ip dhcp excluded-address是打上去，不要让DHCP分配网关的地址给客户，另外的VLAN自己按照例子添加上去吧。)