网络课程设计 (2)

网络技术基础 课程设计学 院 计算机工程学院 班 级 网络1612 姓 名 学 号 成 绩 指引老师 1 月 17 日校园网规划规定：学校教工学生能访问Internet。学校部门：各个学院，行政楼，图书馆，学生宿舍，网络中心服务器群（E-mail 服务器、数据库服务器、www服务器等）。规定：l 采用冗余旳层次设计模型设计互换网络拓扑。(核心层采用3层互换)IP地址规划:DeviceInterfaceVLANIP addressServerF0N/A10.90.60.10Server2F0N/A100.10.10.2RemoteS0/3/0N/A200.1.1.2/24F0/0N/A100.10.10.1/24R1S0/3/0N/A200.1.1.1/24F0/0N/A10.90.14.2/24F0/1N/A10.90.15.2/24SW4F0/10N/A10.90.14.1/24F0/3N/A10.90.45.4/24VLAN 10N/A10.90.10.1/24VLAN20N/A10.90.20.1/24VLAN30N/A10.90.30.1/24VLAN40N/A10.90.40.1/24VLAN50N/A10.90.50.1/24VLAN60N/A10.90.60.1/24F0/1TrunkF0/2TrunkF0/4TrunkSW5F0/10N/A10.90.15.1/24F0/3N/A10.90.45.5/24VLAN 10N/A10.90.10.1/24VLAN20N/A10.90.20.2/24VLAN30N/A10.90.30.3/24VLAN40N/A10.90.40.4/24VLAN50N/A10.90.50.5/24VLAN60N/A10.90.60.6/24F0/1TrunkF0/2TrunkF0/4TrunkSW1F0/1TrunkF0/2TrunkF0/1160F0/1010SW2F0/1TrunkF0/2TrunkF0/1020F0/1130SW3F0/1TrunkF0/2TrunkF0/1140F0/1050l 每个部门使用不同vlanl 选择使用A类私有地址连接校内所有旳计算机 10.学号后2位.x.xVLANNameNetwork VirtualGateway10College A10.90.10.0/2410.90.10.320College B10.90.20.0/2410.90.20.330Admini10.90.30.0/2410.90.30.340Library10.90.40.0/2410.90.40.350Stu dorm10.90.50.0/2410.90.50.360Server10.90.60.0/2410.90.60.3l 使用DHCP地址分派DHCPserver配备：SW4：interface Vlan10ip address 10.90.10.1 255.255.255.0ip helper-address 10.90.60.10interface Vlan20ip address 10.90.20.1 255.255.255.0ip helper-address 10.90.60.10interface Vlan30ip address 10.90.30.1 255.255.255.0ip helper-address 10.90.60.10interface Vlan40ip address 10.90.40.1 255.255.255.0ip helper-address 10.90.60.10interface Vlan50ip address 10.90.50.1 255.255.255.0ip helper-address 10.90.60.10interface Vlan60ip address 10.90.60.1 255.255.255.0SW5：interface Vlan10ip address 10.90.10.2 255.255.255.0ip helper-address 10.90.60.10interface Vlan20ip address 10.90.20.2 255.255.255.0ip helper-address 10.90.60.10interface Vlan30ip address 10.90.30.2 255.255.255.0ip helper-address 10.90.60.10interface Vlan40ip address 10.90.40.2 255.255.255.0ip helper-address 10.90.60.10interface Vlan50ip address 10.90.50.2 255.255.255.0ip helper-address 10.90.60.10interface Vlan60ip address 10.90.60.2 255.255.255.0l 配备PAT发布内部服务器到InternetR1：ipnat inside source list 1 interface Serial0/3/0 overloadipnat inside source static tcp 10.90.60.10 80 200.1.1.1 80 access-list 1 permit 10.90.0.0 0.0.255.255interface Serial0/3/0ipnat outsideinterface FastEthernet0/1ipnat insideinterface FastEthernet0/0ipnat insidel 结合HSRP和SLB实现服务器集群旳负载均衡HSRP:SW4：interface Vlan10standby 1 ip 10.90.10.3standby 1 priority 200standby 1 preemptinterface Vlan20standby 2 ip 10.90.20.3standby 2 priority 200standby 2 preemptinterface Vlan30standby 3 ip 10.90.30.3standby 3 priority 200standby 3 preemptinterface Vlan40standby 4 ip 10.90.40.3standby 4 priority 200standby 4 preemptinterface Vlan50standby 5 ip 10.90.50.3standby 5 priority 200standby 5 preemptinterface Vlan60standby 6 ip 10.90.60.3standby 6 priority 200standby 6 preemptSW5：interface Vlan10standby 1 ip 10.90.10.3standby 1 priority 100interface Vlan20standby 2 ip 10.90.20.3standby 2 priority 100interface Vlan30standby 3 ip 10.90.30.3standby 3 priority 100interface Vlan40standby 4 ip 10.90.40.3standby 4 priority 100interface Vlan50standby 5 ip 10.90.50.3standby 5 priority 100interface Vlan60standby 6 ip 10.90.60.3standby 6 priority 100SLB ：packet tracer 无法实现l 配备迅速生成树合同、VTP合同STP:SW4：spanning-tree mode rapid-pvstspanning-treevlan 10,20,30,40,50,60 priority 0SW5：spanning-tree mode rapid-pvstspanning-treevlan 10,20,30,40,50,60 priority 4096SW1：spanning-tree mode rapid-pvstVTP:SW4：SW4(config)#vtpve 2SW4(config)#vtp password ciscoSW4(config)#vtp domain ccnaSW4(config)#vtp mode serverSW5：SW5(config)#vtpve 2SW5(config)#vtp password ciscoSW5(config)#vtp domain ccnaSW5(config)#vtp mode clientsw1，sw2，sw3同上l 采用OSPF路由合同SW4：routerospf 1network 10.90.0.0 0.0.255.255 area 0SW5：routerospf 1network 10.90.0.0 0.0.255.255 area 0R1：iproute 0.0.0.0 0.0.0.0 200.1.1.2routerospf 1network 10.90.0.0 0.0.255.255 area 0default-information originatel 采用帧中继WANISP:R1:interface Serial0/3/0ip address 200.1.1.1 255.255.255.0encapsulation frame-relayframe-relay map ip 200.1.1.2 102 broadcastframe-relay interface-dlci 102remote:interface Serial0/3/0ip address 200.1.1.2 255.255.255.0encapsulation frame-relayframe-relay map ip 200.1.1.1 201 broadcastframe-relay interface-dlci 201l 配备ACL使得学生宿舍网络不能访问行政楼网络SW4:access-list 10 deny 10.90.50.0 0.0.0.255access-list 10 permit anyinterface Vlan30ip access-group 10 outSW5同上