Laboratorium z sieci VLAN.
Listing z konfigów:
Router "CoreSwitch"
CoreSwitch#show run
Building configuration...
Current configuration : 1578 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname CoreSwitch
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
ip subnet-zero
!
!
ip cef
!
ip audit po max-events 100
!
!
interface FastEthernet0/0
description "To PCKsiegowosc"
switchport access vlan 14
no ip address
!
interface FastEthernet0/1
description "To PCMarketing"
switchport access vlan 13
no ip address
!
interface FastEthernet0/2
description "To PcInformatyk"
switchport access vlan 12
no ip address
!
interface FastEthernet0/3
description "To Router"
switchport mode trunk
no ip address
!
interface FastEthernet0/4
description "To Srv11"
switchport access vlan 11
no ip address
!
interface FastEthernet0/5
description "To Srv 22"
switchport access vlan 22
no ip address
!
!
interface FastEthernet0/6
no ip address
shutdown
!
interface FastEthernet0/7
no ip address
shutdown
!
interface FastEthernet0/8
no ip address
shutdown
!
interface FastEthernet0/9
no ip address
shutdown
!
interface FastEthernet0/10
no ip address
shutdown
!
interface FastEthernet0/11
no ip address
shutdown
!
interface FastEthernet0/12
no ip address
shutdown
!
interface FastEthernet0/13
no ip address
shutdown
!
interface FastEthernet0/14
no ip address
shutdown
!
interface FastEthernet0/15
no ip address
shutdown
!
interface Vlan1
no ip address
shutdown
!
ip http server
no ip http secure-server
ip classless
!
!
line con 0
line aux 0
line vty 0 4
login
!
!
end
Router "Router"
Router#show running-config
Building configuration...
Current configuration : 1604 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
ip subnet-zero
!
!
ip cef
!
ip audit po max-events 100
!
!
!
interface FastEthernet0/0
no ip address
duplex auto
speed auto
!
interface FastEthernet0/0.11
encapsulation dot1Q 11
ip address 10.1.11.254 255.255.255.0
!
interface FastEthernet0/0.12
encapsulation dot1Q 12
ip address 10.1.12.254 255.255.255.0
!
interface FastEthernet0/0.13
encapsulation dot1Q 13
ip address 10.1.13.254 255.255.255.0
ip access-group 113 in
!
interface FastEthernet0/0.14
encapsulation dot1Q 14
ip address 10.1.14.254 255.255.255.0
ip access-group 114 in
!
interface FastEthernet0/0.22
encapsulation dot1Q 22
ip address 10.1.22.254 255.255.255.0
!
ip http server
no ip http secure-server
ip classless
!
access-list 113 permit ip 10.1.13.0 0.0.0.255 10.1.11.0 0.0.0.255
access-list 113 permit ip 10.1.13.0 0.0.0.255 10.1.22.0 0.0.0.255
access-list 113 remark ACL 113 dostep z sieci 10.1.13.0/24 (Marketing) do sieci 10.1.11.0/24 (Srv11) oraz 10.1.22.0/24 (Srv
access-list 113 remark ACL 113 dostep z sieci 10.1.13.0/24 (Marketing) do sieci 10.1.11.0/24 oraz 10.1.22.0/24
access-list 114 permit ip 10.1.14.0 0.0.0.255 10.1.11.0 0.0.0.255
access-list 114 permit ip 10.1.14.0 0.0.0.255 10.1.13.0 0.0.0.255
access-list 114 remark ACL z sieci VLAN 14 dostep do sieci 10.1.11.0/24 (SRV11) oraz 10.1.13.0/24 ( Marketing)
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
login
!
!
end
Router "PcKsiegowosc"
PcKsiegowosc#sh ru
Building configuration...
Current configuration : 535 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname PcKsiegowosc
!
boot-start-marker
boot-end-marker
!
!
memory-size iomem 15
no aaa new-model
ip subnet-zero
ip cef
!
!
interface Ethernet0/0
no ip address
shutdown
half-duplex
!
interface FastEthernet1/0
ip address 10.1.14.100 255.255.255.0
duplex auto
speed auto
!
ip http server
ip classless
ip route 0.0.0.0 0.0.0.0 10.1.14.254
!
!
!
line con 0
line aux 0
line vty 0 4
login
!
end
Router "PcMarketing"
PcMarketing#sh ru
Building configuration...
Current configuration : 534 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname PcMarketing
!
boot-start-marker
boot-end-marker
!
!
memory-size iomem 15
no aaa new-model
ip subnet-zero
ip cef
!
!
interface Ethernet0/0
no ip address
shutdown
half-duplex
!
interface FastEthernet1/0
ip address 10.1.13.100 255.255.255.0
duplex auto
speed auto
!
ip http server
ip classless
ip route 0.0.0.0 0.0.0.0 10.1.13.254
!
!
!
line con 0
line aux 0
line vty 0 4
login
!
!
end
Router "Srv11"
Srv11#show running-config
Building configuration...
Current configuration : 528 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Srv11
!
boot-start-marker
boot-end-marker
!
!
memory-size iomem 15
no aaa new-model
ip subnet-zero
ip cef
!
!
interface Ethernet0/0
no ip address
shutdown
half-duplex
!
interface FastEthernet1/0
ip address 10.1.11.100 255.255.255.0
duplex auto
speed auto
!
ip http server
ip classless
ip route 0.0.0.0 0.0.0.0 10.1.11.254
!
!
!
line con 0
line aux 0
line vty 0 4
login
!
!
!
end
Router "Srv22"
Srv22#sh ru
Building configuration...
Current configuration : 528 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Srv22
!
boot-start-marker
boot-end-marker
!
!
memory-size iomem 15
no aaa new-model
ip subnet-zero
ip cef
!
!
interface Ethernet0/0
no ip address
shutdown
half-duplex
!
interface FastEthernet1/0
ip address 10.1.22.100 255.255.255.0
duplex auto
speed auto
!
ip http server
ip classless
ip route 0.0.0.0 0.0.0.0 10.1.22.254
!
!
!
line con 0
line aux 0
line vty 0 4
login
!
!
end
Na routerach na których robi sie VLANy( "Router" oraz "CoreSwitch") w trybie enable wydajemy polecenia
vlan database
vlan 1
vlan 11
vlan 12
vlan 13
vlan 14
vlan 22
apply
exit
I wszystko powinno śmigać :)
do sprawdzenia aktywnych VLANów służy komenda
show vlan-switch

Brak komentarzy:
Prześlij komentarz