VLANDHCPACLRIP配置-创新互联

实验要求：

                    vlan10网关sw1  vlan20网关R1  vlan30/40网关sw2

                    vlan50/60网关R2  vlan40与vlan50都可以访问vlan60

                    但两个vlan在2层互相隔离  sw3 为DHCP服务器

                    实现全网vlan互通

思路与步骤：

实验 VLAN DHCP ACL RIP 配置

思路与配置：

1.配置SW1：创建vlan10和vlan20

                 将0端口加入vlan10 2和3端口加入vlan20

                 vlanif10 ip：192.168.10.254 255.255.255.0

                 vlanif20 ip：192.168.20.2 255.255.255.0

2.配置SW2：创建vlan30 40 50 60

                 将5端口加入vlan30 4端口加入vlan40

                 将1和2端口加入vlan50 1和6端口加入vlan60

                 vlanif30ip：192.168.30.254 255.255.255.0

                  vlanif40ip：192.168.40.254 255.255.255.0

                  vlanif530ip：192.168.50.2 255.255.255.0

                  vlanif60ip：192.168.60.24 255.255.255.0

3.配置R1：  配置0端口ip：192.168.20.254 255.255.255.0

               配置1端口ip：192.168.12.1 255.255.255.0

               配置2端口ip：192.168.100.254 255.255.255.0

4.配置R2：   配置0端口ip：192.168.50.254 255.255.255.0

               配置1端口ip：192.168.12.2 255.255.255.0

               配置2端口ip：192.168.60.254 255.255.255.0

5.配置SW3 创建vlan100

               将1端口加入vlan100

                vlanif100ip：192.168.100.1 255.255.255.0

6.配置SW1 创建RIP

                 rip

                    version 2

                    network 192.168.10.0

                     network 192.168.20.0

7.配置R1 创建RIP

                 rip

                    version 2

                    network 192.168.12.0

                     network 192.168.20.0

                    network 192.168.100.0

8.配置SW2 创建RIP

                 rip

                    version 2

                    network 192.168.30.0

                     network 192.168.40.0

                     network 192.168.50.0

                     network 192.168.60.0

9.配置R2 创建RIP

                 rip

                    version 2

                    network 192.168.12.0

                     network 192.168.50.0

                    network 192.168.60.0

10.配置sw3 创建RIP

                 rip

                    version 2

                    network 192.168.100.0

如果手动配置pc机的ip 此就可以全网互通

11.配置SW3的地址池：系统模式下 dhcp enable

        ip pool vlan10

        network 192.168.10.0 mask 255.255.255.0

        gateway-list 192.168.10.254

        dns-list 1.1.1.1

        lease day 3

       ip pool vlan20

        network 192.168.20.0 mask 255.255.255.0

        gateway-list 192.168.20.254

        dns-list 1.1.1.1

        lease day 3

        ip pool vlan30

        network 192.168.30.0 mask 255.255.255.0

        gateway-list 192.168.30.254

        dns-list 1.1.1.1

        lease day 3

       ip pool vlan40

        network 192.168.40.0 mask 255.255.255.0

        gateway-list 192.168.40.254

        dns-list 1.1.1.1

        lease day 3

      ip pool vlan50

        network 192.168.50.0 mask 255.255.255.0

        gateway-list 192.168.50.254

        dns-list 1.1.1.1

        lease day 3

     进入vlan100端口 选择全局模式

        interface g0/0/0

             dhcp select global

12.配置SW1：开启中继  dhcp enable

        interface vlanif 10

           dhcp select relay

           dhcp relay sever-ip 192.168.100.1

13.配置R1：开启中继  dhcp enable

        interface g0/0/0

           dhcp select relay

           dhcp relay sever-ip 192.168.100.1

14.配置SW2：开启中继  dhcp enable

        interface vlanif 30

           dhcp select relay

           dhcp relay sever-ip 192.168.100.1

         interface vlanif 40

           dhcp select relay

           dhcp relay sever-ip 192.168.100.1

15.配置R2：开启中继  dhcp enable

        interface g0/0/0

           dhcp select relay

           dhcp relay sever-ip 192.168.100.1

         interface g0/0/2

           dhcp select relay

           dhcp relay sever-ip 192.168.100.1

16.此时在个pc机上选择dhcp获取：通过ipconfig查取ip

       pc1：

       pc2：

      pc3：

      pc4：

      pc5：

17.配置SW2 配置ACL 让pc4与pc2隔离

     acl name pc4-2 advance

     rule 5 deny ip sourse 192.168.40.253 0.0.0.0 destiation 192.168.50.253 0.0.0.0

     quit

     interface e0/0/4

     traffic-fliter inbound acl name pc4-2

18.手动配置sever1的 ip192.168.60.1 255.255.255.0

                          网关 192.168.60.254

##除了pc4与pc2不通之外  此时全网所有pc机互通

另外有需要云服务器可以了解下创新互联scvps.cn，海内外云服务器15元起步，三天无理由+7*72小时售后在线，公司持有idc许可证，提供“云服务器、裸金属服务器、高防服务器、香港服务器、美国服务器、虚拟主机、免备案服务器”等云主机租用服务以及企业上云的综合解决方案，具有“安全稳定、简单易用、服务可用性高、性价比高”等特点与优势，专为企业上云打造定制，能够满足用户丰富、多元化的应用场景需求。