網(wǎng)絡課程設計 (2)

網(wǎng)絡技術基礎 課程設計學 院 計算機工程學院 班 級 網(wǎng)絡1612 姓 名 學 號 成 績 指引老師 1 月 17 日校園網(wǎng)規(guī)劃規(guī)定：學校教工學生能訪問Internet。學校部門：各個學院，行政樓，圖書館，學生宿舍，網(wǎng)絡中心服務器群（E-mail 服務器、數(shù)據(jù)庫服務器、www服務器等）。規(guī)定：l 采用冗余旳層次設計模型設計互換網(wǎng)絡拓撲。(核心層采用3層互換)IP地址規(guī)劃:DeviceInterfaceVLANIP addressServerF0N/A10.90.60.10Server2F0N/A100.10.10.2RemoteS0/3/0N/A200.1.1.2/24F0/0N/A100.10.10.1/24R1S0/3/0N/A200.1.1.1/24F0/0N/A10.90.14.2/24F0/1N/A10.90.15.2/24SW4F0/10N/A10.90.14.1/24F0/3N/A10.90.45.4/24VLAN 10N/A10.90.10.1/24VLAN20N/A10.90.20.1/24VLAN30N/A10.90.30.1/24VLAN40N/A10.90.40.1/24VLAN50N/A10.90.50.1/24VLAN60N/A10.90.60.1/24F0/1TrunkF0/2TrunkF0/4TrunkSW5F0/10N/A10.90.15.1/24F0/3N/A10.90.45.5/24VLAN 10N/A10.90.10.1/24VLAN20N/A10.90.20.2/24VLAN30N/A10.90.30.3/24VLAN40N/A10.90.40.4/24VLAN50N/A10.90.50.5/24VLAN60N/A10.90.60.6/24F0/1TrunkF0/2TrunkF0/4TrunkSW1F0/1TrunkF0/2TrunkF0/1160F0/1010SW2F0/1TrunkF0/2TrunkF0/1020F0/1130SW3F0/1TrunkF0/2TrunkF0/1140F0/1050l 每個部門使用不同vlanl 選擇使用A類私有地址連接校內(nèi)所有旳計算機 10.學號后2位.x.xVLANNameNetwork Virtual Gateway10College A10.90.10.0/2410.90.10.320College B10.90.20.0/2410.90.20.330Admini10.90.30.0/2410.90.30.340Library10.90.40.0/2410.90.40.350Stu dorm10.90.50.0/2410.90.50.360Server10.90.60.0/2410.90.60.3l 使用DHCP地址分派DHCPserver配備：SW4：interface Vlan10ip address 10.90.10.1 255.255.255.0ip helper-address 10.90.60.10interface Vlan20ip address 10.90.20.1 255.255.255.0ip helper-address 10.90.60.10interface Vlan30ip address 10.90.30.1 255.255.255.0ip helper-address 10.90.60.10interface Vlan40ip address 10.90.40.1 255.255.255.0ip helper-address 10.90.60.10interface Vlan50ip address 10.90.50.1 255.255.255.0ip helper-address 10.90.60.10interface Vlan60ip address 10.90.60.1 255.255.255.0SW5：interface Vlan10ip address 10.90.10.2 255.255.255.0ip helper-address 10.90.60.10interface Vlan20ip address 10.90.20.2 255.255.255.0ip helper-address 10.90.60.10interface Vlan30ip address 10.90.30.2 255.255.255.0ip helper-address 10.90.60.10interface Vlan40ip address 10.90.40.2 255.255.255.0ip helper-address 10.90.60.10interface Vlan50ip address 10.90.50.2 255.255.255.0ip helper-address 10.90.60.10interface Vlan60ip address 10.90.60.2 255.255.255.0l 配備PAT發(fā)布內(nèi)部服務器到InternetR1：ipnat inside source list 1 interface Serial0/3/0 overloadipnat inside source static tcp 10.90.60.10 80 200.1.1.1 80 access-list 1 permit 10.90.0.0 0.0.255.255interface Serial0/3/0ipnat outsideinterface FastEthernet0/1ipnat insideinterface FastEthernet0/0ipnat insidel 結合HSRP和SLB實現(xiàn)服務器集群旳負載均衡HSRP:SW4：interface Vlan10standby 1 ip 10.90.10.3standby 1 priority 200standby 1 preemptinterface Vlan20standby 2 ip 10.90.20.3standby 2 priority 200standby 2 preemptinterface Vlan30standby 3 ip 10.90.30.3standby 3 priority 200standby 3 preemptinterface Vlan40standby 4 ip 10.90.40.3standby 4 priority 200standby 4 preemptinterface Vlan50standby 5 ip 10.90.50.3standby 5 priority 200standby 5 preemptinterface Vlan60standby 6 ip 10.90.60.3standby 6 priority 200standby 6 preemptSW5：interface Vlan10standby 1 ip 10.90.10.3standby 1 priority 100interface Vlan20standby 2 ip 10.90.20.3standby 2 priority 100interface Vlan30standby 3 ip 10.90.30.3standby 3 priority 100interface Vlan40standby 4 ip 10.90.40.3standby 4 priority 100interface Vlan50standby 5 ip 10.90.50.3standby 5 priority 100interface Vlan60standby 6 ip 10.90.60.3standby 6 priority 100SLB ：packet tracer 無法實現(xiàn)l 配備迅速生成樹合同、VTP合同STP:SW4：spanning-tree mode rapid-pvstspanning-treevlan 10,20,30,40,50,60 priority 0SW5：spanning-tree mode rapid-pvstspanning-treevlan 10,20,30,40,50,60 priority 4096SW1：spanning-tree mode rapid-pvstVTP:SW4：SW4(config)#vtpve 2SW4(config)#vtp password ciscoSW4(config)#vtp domain ccnaSW4(config)#vtp mode serverSW5：SW5(config)#vtpve 2SW5(config)#vtp password ciscoSW5(config)#vtp domain ccnaSW5(config)#vtp mode clientsw1，sw2，sw3同上l 采用OSPF路由合同SW4：routerospf 1network 10.90.0.0 0.0.255.255 area 0SW5：routerospf 1network 10.90.0.0 0.0.255.255 area 0R1：iproute 0.0.0.0 0.0.0.0 200.1.1.2routerospf 1network 10.90.0.0 0.0.255.255 area 0default-information originatel 采用幀中繼WANISP:R1:interface Serial0/3/0ip address 200.1.1.1 255.255.255.0encapsulation frame-relayframe-relay map ip 200.1.1.2 102 broadcastframe-relay interface-dlci 102remote:interface Serial0/3/0ip address 200.1.1.2 255.255.255.0encapsulation frame-relayframe-relay map ip 200.1.1.1 201 broadcastframe-relay interface-dlci 201l 配備ACL使得學生宿舍網(wǎng)絡不能訪問行政樓網(wǎng)絡SW4:access-list 10 deny 10.90.50.0 0.0.0.255access-list 10 permit anyinterface Vlan30ip access-group 10 outSW5同上