网络系统集成基础（实验学时）——实验三

题目要求：

对第二次实验课提出的公司网络做出客户需求分析，对所提需求进行网络规划和技术方案设计。（本次实验课完成1、2条设计实验）
1、内网划分多个VLAN（各部门），配置trunk使互相之间可以通信。减少广播域。（VLAN地域分散，处于不同交换机）
2、设置企业财务服务器，只允许财务部门VLAN 的电脑访问
3、所有用户均为自动获取IP地址，用户网关配置在核心交换机，
4、所有设备都可以任何位置Telnet远程管理
5、配置链路汇聚与生成树协议Stp，运行RSTP模式，确保核心交换机为根桥，配置根桥保护措施，确保根桥不被抢占

实验报告：
要求独立完成，报告需包含模拟器配置文件
使用华为模拟器或思科模拟器完成

第二次实验：

1、假设你为一公司做网络系统集成工程，公司基本情况（有电脑100台，分为生产部、技术部、财务部三个部门，分散在相距不远的两个办公楼），提出你的客户需求分析。

1. 内网划分多个VLAN（各部门），配置trunk使互相之间可以通信。减少广播域。（VLAN地域分散，处于不同交换机）

规划VLAN对应的IP子网:

VLAN 10(生产部): 192.168.10.0/24
VLAN 20(技术部): 192.168.20.0/24
VLAN 30(财务部): 192.168.30.0/24

企业财务服务器：192.168.30.250/24 （只允许vlan30访问）

拓扑结构大体如下：

交换机：

  • core
  • s1 财务部1
  • s2 生产部
  • s3 技术部
  • s4 财务部2

配置交换机：

cisco的直接配VTP吧，交换机多。

核心交换机：

Switch>en
Switch#cont t
Switch#conf t
    Enter configuration commands, one per line.  End with CNTL/Z.
Switch(config)#vtp mode server
    Device mode already VTP SERVER.
Switch(config)#vtp domain ovo.com
Switch(config)#hostname core #区分

core(config)#vlan 10
core(config-vlan)#name Production
core(config-vlan)#vlan 20
core(config-vlan)#name Tech
core(config-vlan)#vlan 30
core(config-vlan)#name Finance
core(config-vlan)#int range fa0/1-fa0/4 
core(config-if-range)#switchport mode trunk #无效命令，自动配置
Command rejected: An interface whose trunk encapsulation is "Auto" can not be configured to "trunk" mode.
Command rejected: An interface whose trunk encapsulation is "Auto" can not be configured to "trunk" mode.
Command rejected: An interface whose trunk encapsulation is "Auto" can not be configured to "trunk" mode.
Command rejected: An interface whose trunk encapsulation is "Auto" can not be configured to "trunk" mode.
core(config-if-range)#exit
core(config)#exit
core#
%SYS-5-CONFIG_I: Configured from console by console

core#copy co
core#copy ?
  flash:          Copy from flash: file system
  ftp:            Copy from ftp: file system
  running-config  Copy from current system configuration
  startup-config  Copy from startup configuration
core#copy running-config startup-config 
Destination filename [startup-config]? 
Building configuration...
[OK]

从交换机：

Switch>en
Switch#conf t
    Enter configuration commands, one per line.  End with CNTL/Z.
Switch(config)#hostname s1
s1(config)#vtp mode client 
    Setting device to VTP CLIENT mode.
s1(config)#vtp domain ovo.com
    Changing VTP domain name from NULL to ovo.com
s1(config)#int f0/1
s1(config-if)#switchport mode trunk
s1(config-if)#do show vlan brief #能同步这个表就可以

VLAN Name                             Status    Ports
---- -------------------------------- --------- -------------------------------
1    default                          active    Fa0/2, Fa0/3, Fa0/4, Fa0/5
                                                Fa0/6, Fa0/7, Fa0/8, Fa0/9
                                                Fa0/10, Fa0/11, Fa0/12, Fa0/13
                                                Fa0/14, Fa0/15, Fa0/16, Fa0/17
                                                Fa0/18, Fa0/19, Fa0/20, Fa0/21
                                                Fa0/22, Fa0/23, Fa0/24
10   Production                       active    
20   Tech                             active    
30   Finance                          active    
1002 fddi-default                     active    
1003 token-ring-default               active    
1004 fddinet-default                  active    
1005 trnet-default                    active    
s1(config-if)#

#把所有的口分给vlan30
s1(config)#int range fa0/2-fa0/24
s1(config-if-range)#switchport mode access
s1(config-if-range)#switchport access vlan 30
s1(config-if-range)#exit
s1(config)#do show vlan brief

剩下的几个交换机同理：

S2 (生产部)

Switch>en
Switch#conf t
    Enter configuration commands, one per line.  End with CNTL/Z.
Switch(config)#hostname s2
s2(config)#vtp mode client 
    Setting device to VTP CLIENT mode.
s2(config)#vtp domain ovo.com
    Changing VTP domain name from NULL to ovo.com
s2(config)#int f0/1
s2(config-if)#switchport mode trunk
s2(config)#int range fa0/2-fa0/24
s2(config-if-range)#switchport mode access
s2(config-if-range)#switchport access vlan 10
s2(config-if-range)#exit
s2(config)#do show vlan brief

S3（技术部）

Switch>en
Switch#conf t
    Enter configuration commands, one per line.  End with CNTL/Z.
Switch(config)#hostname s3
s3(config)#vtp mode client 
    Setting device to VTP CLIENT mode.
s3(config)#vtp domain ovo.com
    Changing VTP domain name from NULL to ovo.com
s3(config)#int f0/1
s3(config-if)#switchport mode trunk
s3(config)#int range fa0/2-fa0/24
s3(config-if-range)#switchport mode access
s3(config-if-range)#switchport access vlan 20
s3(config-if-range)#exit
s3(config)#do show vlan brief

S4（技术部）

Switch>en
Switch#conf t
    Enter configuration commands, one per line.  End with CNTL/Z.
Switch(config)#hostname s4
s4(config)#vtp mode client 
    Setting device to VTP CLIENT mode.
s4(config)#vtp domain ovo.com
    Changing VTP domain name from NULL to ovo.com
s4(config)#int f0/1
s4(config-if)#switchport mode trunk
s4(config)#int range fa0/2-fa0/24
s4(config-if-range)#switchport mode access
s4(config-if-range)#switchport access vlan 30
s4(config-if-range)#exit
s4(config)#do show vlan brief

这时候看下core的配置应该是这样的：

core#show vlan brief 

VLAN Name                             Status    Ports
---- -------------------------------- --------- -------------------------------
1    default                          active    Fa0/5, Fa0/6, Fa0/7, Fa0/8
                                                Fa0/9, Fa0/10, Fa0/11, Fa0/12
                                                Fa0/13, Fa0/14, Fa0/15, Fa0/16
                                                Fa0/17, Fa0/18, Fa0/19, Fa0/20
                                                Fa0/21, Fa0/22, Fa0/23, Fa0/24
                                                Gig0/1, Gig0/2
10   Production                       active    
20   Tech                             active    
30   Finance                          active    
1002 fddi-default                     active    
1003 token-ring-default               active    
1004 fddinet-default                  active    
1005 trnet-default                    active    
core#

这里的接口的F0/1-F0/4应该从vlan表里消失。

然后配置三层交换的IP

core>en
core#conf t
    Enter configuration commands, one per line.  End with CNTL/Z.
core(config)#ip routing

core(config)#int vlan 10
core(config-if)#
    %LINK-5-CHANGED: Interface Vlan10, changed state to up

    %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan10, changed state to up

core(config-if)#ip addr 192.168.10.1 255.255.255.0
core(config-if)#no shut

core(config-if)#int vlan 20
core(config-if)#ip addr 192.168.20.1 255.255.255.0
core(config-if)#no shut

core(config-if)#int vlan 30
core(config-if)#ip addr 192.168.30.1 255.255.255.0
core(config-if)#no shut

配置信息

core#show ip int brief 

Vlan1                  unassigned      YES unset  administratively down down
 
Vlan10                 192.168.10.1    YES manual up                    up
 
Vlan20                 192.168.20.1    YES manual up                    up
 
Vlan30                 192.168.30.1    YES manual up                    up

2、设置企业财务服务器，只允许财务部门VLAN 的电脑访问

配置ACL表

core(config)#access-list 100 permit ip 192.168.30.0 0.0.0.255 host 192.168.30.250
core(config)#access-list 100 deny ip any host 192.168.30.250
core(config)#int vlan 30
core(config-if)#ip access-group 100 in
core(config-if)#exit
  • 允许 192.168.30.0/24 网段(VLAN 30)访问财务服务器(192.168.30.250)。
  • 拒绝其他所有主机访问财务服务器。
  • 将 ACL 应用在 VLAN 30 的 SVI 接口入方向上。

core#show access-lists 100
Extended IP access list 100
    permit ip 192.168.30.0 0.0.0.255 host 192.168.30.250
    deny ip any host 192.168.30.250
core#

3、所有用户均为自动获取IP地址，用户网关配置在核心交换机，

配置DHCP


core(config)#ip dhcp excluded-address 192.168.10.1 192.168.10.20
core(config)#ip dhcp pool VLAN10
core(dhcp-config)#network 192.168.10.0 255.255.255.0
core(dhcp-config)#default-router 192.168.10.1
core(dhcp-config)#dns-server 223.5.5.5
core(dhcp-config)#exit


core(config)#ip dhcp excluded-address 192.168.20.1 192.168.20.20
core(config)#ip dhcp pool VLAN20
core(dhcp-config)#network 192.168.20.0 255.255.255.0
core(dhcp-config)#default-router 192.168.20.1
core(dhcp-config)#dns-server 223.5.5.5
core(dhcp-config)#exit  


core(config)#ip dhcp excluded-address 192.168.30.1 192.168.30.20 
core(config)#ip dhcp pool VLAN30
core(dhcp-config)#network 192.168.30.0 255.255.255.0
core(dhcp-config)#default-router 192.168.30.1
core(dhcp-config)#dns-server 223.5.5.5
core(dhcp-config)#exit

然后ACL表允许DHCP(vlan30)，直接用下面的

core(config)#access-list 100 permit udp any eq 68 any eq 67
core(config)#access-list 100 permit ip 192.168.30.0 0.0.0.255 host 192.168.30.250
core(config)#access-list 100 deny ip any host 192.168.30.250
core(config)#interface vlan 30
core(config-if)#ip access-group 100 in
core(config-if)#exit

ACL表再改下：

no access-list 100
access-list 100 permit udp any eq 68 any eq 67

access-list 100 permit ip 192.168.30.0 0.0.0.255 host 192.168.30.250
access-list 100 deny ip any host 192.168.30.250
access-list 100 permit tcp any any eq 23
access-list 100 permit ip any any
access-list 100 deny ip host 192.168.30.1 host 192.168.30.250 #关键！调了好久好久
core(config)#access-list 100 deny ip host 192.168.30.1 host 192.168.30.250 #关键！调了好久好久
core(config)#access-list 100 deny ip host 192.168.20.1 host 192.168.30.250 #关键！调了好久好久
core(config)#access-list 100 deny ip host 192.168.10.1 host 192.168.30.250 #关键！调了好久好久

core(config)#access-list 100 deny ip host 192.168.30.1 host 192.168.30.250
core(config)#access-list 100 deny ip host 192.168.20.1 host 192.168.30.250
core(config)#access-list 100 deny ip host 192.168.10.1 host 192.168.30.250
core(config)#interface vlan 30
core(config-if)#ip access-group 100 in
core(config-if)#interface vlan 20
core(config-if)#ip access-group 100 in
core(config-if)#interface vlan 10
core(config-if)#ip access-group 100 in
core(config-if)#

这里改成dhcp

过一会可以拿到IP

这些也是啦：

VLAN30也有啦

财务部服务器分配IP

这里拿个mac地址

我这里是：0090.0C20.1EE9

然后core加上这个：

ip dhcp pool SERVERRRR
host 192.168.30.250 255.255.255.0
client-identifier 0090.0C20.1EE9
default-router 192.168.30.1

这个模拟器版本的交换机不支持这个命令，所以就直接静态分配IP了。

默认会有一个IP，给他改成static

Test

PC 0 -> Server
可以访问。

PC 4 -> PC 0
可以访问。

PC 4 -> Server

正常，无法访问

PC 2（生产部） -> PC0

可以访问。

PC2 -> Server

不可访问

PC2->PC4

可以访问

4、所有设备都可以任何位置Telnet远程管理

核心交换机：

core(config)#line vty 0 4
core(config-line)#password 114514
core(config-line)#login
core(config-line)#transport input telnet
core(config-line)#exit

IP:
core : 192.168.30.1 192.168.20.1 192.168.10.1

其他交换机IP地址：

S1: 192.168.30.10 (VLAN30)
S2: 192.168.10.10 (VLAN10)
S3: 192.168.20.10 (VLAN20)
S4: 192.168.30.11 (VLAN30)

s1>en
s1#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
s1(config)#int vlan 30 
s1(config-if)#
%LINK-5-CHANGED: Interface Vlan30, changed state to up

%LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan30, changed state to up

s1(config-if)#ip addr 192.168.30.10 255.255.255.0
s1(config-if)#line vty 0 4
s1(config-line)#password 114514
s1(config-line)#login
s1(config-line)#transport input telnet
s1(config-line)#

S2

s2>en
s2#conft 
Translating "conft"...domain server (255.255.255.255)
% Unknown command or computer name, or unable to find computer address

s2#cont t
        ^
% Invalid input detected at '^' marker.
    
s2#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
s2(config)#int vlan 10
s2(config-if)#
%LINK-5-CHANGED: Interface Vlan10, changed state to up

%LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan10, changed state to up

s2(config-if)#ip addr 192.168.10.10 255.255.255.0
s2(config-if)#line vty 0 4
s2(config-line)#password 114514
s2(config-line)#login
s2(config-line)#trans
s2(config-line)#transport in
s2(config-line)#transport input t
s2(config-line)#transport input telnet 
s2(config-line)#

S3:

s3>en
s3#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
s3(config)#int vlan 20
s3(config-if)#
%LINK-5-CHANGED: Interface Vlan20, changed state to up

%LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan20, changed state to up

s3(config-if)#ip addr 192.168.20.10 255.255.255.0
s3(config-if)#line vty 0 4
s3(config-line)#password 114514
s3(config-line)#login
s3(config-line)#transp
s3(config-line)#transport input te
s3(config-line)#transport input telnet 
s3(config-line)#

S4:

s4>en
s4#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
s4(config)#int vlan 30
s4(config-if)#
%LINK-5-CHANGED: Interface Vlan30, changed state to up

%LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan30, changed state to up

s4(config-if)#ip addr 192.168.30.11 255.255.255.0
s4(config-if)#line vty 0 4
s4(config-line)#password 114514
s4(config-line)#login 
s4(config-line)#tra
s4(config-line)#transport in
s4(config-line)#transport input t
s4(config-line)#transport input telnet 
s4(config-line)#S
````


![](https://cmd.dayi.ink/uploads/upload_113f59d4aacf8e93f38a95bae9abd331.png)



### 再添加vlanIP

> 方便一点

s1(config-if)#int vlan 20
s1(config-if)#ip addr 192.168.20.11 255.255.255.0
s1(config-if)#int vlan 10
s1(config-if)#ip addr 192.168.10.11 255.255.255.0

s2(config-if)#int vlan 20
s2(config-if)#ip addr 192.168.20.12 255.255.255.0
s2(config-if)#int vlan 30
s2(config-if)#ip addr 192.168.30.12 255.255.255.0

s3(config)#int vlan 30
s3(config-if)#ip addr 192.168.30.13 255.255.255.0
s3(config-if)#int vlan 10
s3(config-if)#ip addr 192.168.10.13 255.255.255.0

s4(config-if)#int vlan 10
s4(config-if)#ip addr 192.168.10.14 255.255.255.0
s4(config-if)#int vlan 20
s4(config-if)#ip addr 192.168.20.14 255.255.255.0



### 测试，从任何机子可以访问：

#### IP地址：

| 交换机 | VLAN 30        | VLAN 20        | VLAN 10        |
|--------|----------------|----------------|----------------|
| Core   | 192.168.30.1   | 192.168.20.1   | 192.168.10.1   |
| S1     | 192.168.30.10  | 192.168.20.11  | 192.168.10.11  |
| S2     | 192.168.30.12  | 192.168.20.12  | 192.168.10.10  |
| S3     | 192.168.30.13  | 192.168.20.10  | 192.168.10.13  |
| S4     | 192.168.30.11  | 192.168.20.14  | 192.168.10.14  |


![](https://cmd.dayi.ink/uploads/upload_ea58a1ecfe862651469bf144fcd17590.png)



#### 测试访问：

CORE：
![](https://cmd.dayi.ink/uploads/upload_c51a7a0c5f4db9dc269038d4429878a6.png)

S1：

![](https://cmd.dayi.ink/uploads/upload_2178f8fec2167d3bc927082908905d67.png)

S2:

![](https://cmd.dayi.ink/uploads/upload_a2cf8b62110b9297c0f4ab79faa0731c.png)

S3：

![](https://cmd.dayi.ink/uploads/upload_db6f64f46ffe1ec50802f93ef6299d57.png)


S4：
![](https://cmd.dayi.ink/uploads/upload_fa19ea8dbf3160669824f9c2f5d7c818.png)




## 5、配置链路汇聚与生成树协议Stp，运行RSTP模式，确保核心交换机为根桥，配置根桥保护措施，确保根桥不被抢占

### Core

core(config)#spanning-tree mode rapid-pvst
core(config)#spanning-tree vlan 1-4094 priority 4096


![](https://cmd.dayi.ink/uploads/upload_f67b74bf88431360d3ce182f1a2e4ade.png)


### 其他交换机

s1(config)#spanning-tree mode rapid-pvst
s1(config)#exit

s2(config)#spanning-tree mode rapid-pvst
s2(config)#exit

s3(config)#spanning-tree mode rapid-pvst
s3(config)#exit

s4(config)#spanning-tree mode rapid-pvst
s4(config)#exit


### 测试

core(config)#do show spanning-tree
VLAN0001
Spanning tree enabled protocol rstp
Root ID Priority 4097

         Address     0002.4AD7.2EDD
         This bridge is the root
         Hello Time  2 sec  Max Age 20 sec  Forward Delay 15 sec

Bridge ID Priority 4097 (priority 4096 sys-id-ext 1)

         Address     0002.4AD7.2EDD
         Hello Time  2 sec  Max Age 20 sec  Forward Delay 15 sec
         Aging Time  20

Interface Role Sts Cost Prio.Nbr Type

Fa0/4 Desg FWD 19 128.4 P2p
Fa0/1 Desg FWD 19 128.1 P2p
Fa0/2 Desg FWD 19 128.2 P2p
Fa0/3 Desg FWD 19 128.3 P2p

VLAN0010
Spanning tree enabled protocol rstp
Root ID Priority 4106

         Address     0002.4AD7.2EDD
         This bridge is the root
         Hello Time  2 sec  Max Age 20 sec  Forward Delay 15 sec

Bridge ID Priority 4106 (priority 4096 sys-id-ext 10)

         Address     0002.4AD7.2EDD
         Hello Time  2 sec  Max Age 20 sec  Forward Delay 15 sec
         Aging Time  20

Interface Role Sts Cost Prio.Nbr Type

Fa0/4 Desg FWD 19 128.4 P2p
Fa0/1 Desg FWD 19 128.1 P2p
Fa0/2 Desg FWD 19 128.2 P2p
Fa0/3 Desg FWD 19 128.3 P2p

VLAN0020
Spanning tree enabled protocol rstp
Root ID Priority 4116

         Address     0002.4AD7.2EDD
         This bridge is the root
         Hello Time  2 sec  Max Age 20 sec  Forward Delay 15 sec

Bridge ID Priority 4116 (priority 4096 sys-id-ext 20)

         Address     0002.4AD7.2EDD
         Hello Time  2 sec  Max Age 20 sec  Forward Delay 15 sec
         Aging Time  20

Interface Role Sts Cost Prio.Nbr Type

Fa0/4 Desg FWD 19 128.4 P2p
Fa0/1 Desg FWD 19 128.1 P2p
Fa0/2 Desg FWD 19 128.2 P2p
Fa0/3 Desg FWD 19 128.3 P2p

VLAN0030
Spanning tree enabled protocol rstp
Root ID Priority 4126

         Address     0002.4AD7.2EDD
         This bridge is the root
         Hello Time  2 sec  Max Age 20 sec  Forward Delay 15 sec

Bridge ID Priority 4126 (priority 4096 sys-id-ext 30)

         Address     0002.4AD7.2EDD
         Hello Time  2 sec  Max Age 20 sec  Forward Delay 15 sec
         Aging Time  20

Interface Role Sts Cost Prio.Nbr Type

Fa0/4 Desg FWD 19 128.4 P2p
Fa0/1 Desg FWD 19 128.1 P2p
Fa0/2 Desg FWD 19 128.2 P2p
Fa0/3 Desg FWD 19 128.3 P2p

core(config)#
core(config)#


Root ID 和 Bridge ID 相同：对于所有 VLAN（VLAN 1, 10, 20, 30），核心交换机的地址和优先级在 Root ID 和 Bridge ID 中是一致的，这台交换机是根桥。
没问题啦。

## 保存配置文件

core#copy running-config startup-config
s1#copy running-config startup-config
s2#copy running-config startup-config
s3#copy running-config startup-config
s4#copy running-config startup-config



## 配置文件

### Core

core#show running-config
Building configuration...

Current configuration : 2370 bytes
!
version 12.2
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname core
!
!
!
!
ip dhcp excluded-address 192.168.10.1 192.168.10.20
ip dhcp excluded-address 192.168.20.1 192.168.20.20
ip dhcp excluded-address 192.168.30.1 192.168.30.20
!
ip dhcp pool VLAN10
network 192.168.10.0 255.255.255.0
default-router 192.168.10.1
dns-server 223.5.5.5
ip dhcp pool VLAN20
network 192.168.20.0 255.255.255.0
default-router 192.168.20.1
dns-server 223.5.5.5
ip dhcp pool VLAN30
network 192.168.30.0 255.255.255.0
default-router 192.168.30.1
dns-server 223.5.5.5
ip dhcp pool SERVERRRR
ip routing
!
!
!
!
!
!
!
!
!
!
spanning-tree mode rapid-pvst
spanning-tree vlan 1-4094 priority 4096
!
!
!
!
interface FastEthernet0/1
!
interface FastEthernet0/2
!
interface FastEthernet0/3
!
interface FastEthernet0/4
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
shutdown
!
interface Vlan10
ip address 192.168.10.1 255.255.255.0
ip access-group 100 in
!
interface Vlan20
ip address 192.168.20.1 255.255.255.0
ip access-group 100 in
!
interface Vlan30
ip address 192.168.30.1 255.255.255.0
ip access-group 100 in
!
ip classless
!
!
access-list 100 permit udp any eq bootpc any eq bootps
access-list 100 permit udp any eq bootps any eq bootpc
access-list 100 permit tcp any any eq telnet
access-list 100 permit ip 192.168.30.0 0.0.0.255 host 192.168.30.250
access-list 100 deny ip host 192.168.30.1 host 192.168.30.250
access-list 100 deny ip host 192.168.20.1 host 192.168.30.250
access-list 100 deny ip host 192.168.10.1 host 192.168.30.250
access-list 100 permit ip any any
!
!
!
!
!
line con 0
!
line aux 0
!
line vty 0 4
password 114514
login
transport input telnet
!
!
!
end

core#


### S1

s1#show running-config
Building configuration...

Current configuration : 2387 bytes
!
version 12.1
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname s1
!
!
spanning-tree mode rapid-pvst
!
interface FastEthernet0/1
switchport mode trunk
!
interface FastEthernet0/2
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/3
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/4
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/5
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/6
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/7
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/8
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/9
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/10
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/11
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/12
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/13
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/14
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/15
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/16
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/17
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/18
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/19
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/20
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/21
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/22
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/23
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/24
switchport access vlan 30
switchport mode access
!
interface Vlan1
no ip address
shutdown
!
interface Vlan10
ip address 192.168.10.11 255.255.255.0
!
interface Vlan20
ip address 192.168.20.11 255.255.255.0
!
interface Vlan30
ip address 192.168.30.10 255.255.255.0
!
!
line con 0
!
line vty 0 4
password 114514
login
transport input telnet
line vty 5 15
login
!
!
end

s1#


### S2

s2#show running-config
Building configuration...

Current configuration : 2387 bytes
!
version 12.1
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname s2
!
!
spanning-tree mode rapid-pvst
!
interface FastEthernet0/1
switchport mode trunk
!
interface FastEthernet0/2
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/3
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/4
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/5
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/6
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/7
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/8
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/9
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/10
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/11
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/12
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/13
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/14
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/15
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/16
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/17
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/18
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/19
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/20
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/21
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/22
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/23
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/24
switchport access vlan 10
switchport mode access
!
interface Vlan1
no ip address
shutdown
!
interface Vlan10
ip address 192.168.10.10 255.255.255.0
!
interface Vlan20
ip address 192.168.20.12 255.255.255.0
!
interface Vlan30
ip address 192.168.30.12 255.255.255.0
!
!
line con 0
!
line vty 0 4
password 114514
login
transport input telnet
line vty 5 15
login
!
!
end

s2#


### S3

s3#copy running-config startup-config
Destination filename [startup-config]?
Building configuration...
[OK]
s3#show run
s3#show running-config
Building configuration...

Current configuration : 2387 bytes
!
version 12.1
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname s3
!
!
spanning-tree mode rapid-pvst
!
interface FastEthernet0/1
switchport mode trunk
!
interface FastEthernet0/2
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/3
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/4
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/5
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/6
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/7
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/8
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/9
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/10
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/11
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/12
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/13
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/14
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/15
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/16
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/17
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/18
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/19
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/20
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/21
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/22
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/23
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/24
switchport access vlan 20
switchport mode access
!
interface Vlan1
no ip address
shutdown
!
interface Vlan10
ip address 192.168.10.13 255.255.255.0
!
interface Vlan20
ip address 192.168.20.10 255.255.255.0
!
interface Vlan30
ip address 192.168.30.13 255.255.255.0
!
!
line con 0
!
line vty 0 4
password 114514
login
transport input telnet
line vty 5 15
login
!
!
end

s3#
s3#
s3#
s3#


### S4

s4#copy running-config startup-config
Destination filename [startup-config]?
Building configuration...
[OK]
s4#
s4#show run
s4#show running-config
Building configuration...

Current configuration : 2387 bytes
!
version 12.1
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname s4
!
!
spanning-tree mode rapid-pvst
!
interface FastEthernet0/1
switchport mode trunk
!
interface FastEthernet0/2
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/3
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/4
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/5
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/6
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/7
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/8
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/9
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/10
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/11
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/12
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/13
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/14
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/15
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/16
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/17
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/18
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/19
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/20
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/21
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/22
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/23
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/24
switchport access vlan 30
switchport mode access
!
interface Vlan1
no ip address
shutdown
!
interface Vlan10
ip address 192.168.10.14 255.255.255.0
!
interface Vlan20
ip address 192.168.20.14 255.255.255.0
!
interface Vlan30
ip address 192.168.30.11 255.255.255.0
!
!
line con 0
!
line vty 0 4
password 114514
login
transport input telnet
line vty 5 15
login
!
!
end

s4#
s4#
s4#


## 0xff 文件下载：pkt文件下载：

该实验接近7个小时。做了3个小时之后重启后的时间

![](https://cmd.dayi.ink/uploads/upload_ef4a5afe1a735c3dbcc17467c2815f75.png)

文件下载：

![](https://cmd.dayi.ink/uploads/upload_016fbd781fa07c328df53dfb6019482b.png)
最后修改：2024 年 06 月 03 日
© 允许规范转载
如果觉得我的文章对你有用，请随意赞赏