poniedziałek, 30 marca 2009

GNS3 - VLAN LAB

Laboratorium z sieci VLAN.


Listing z konfigów:

Router "CoreSwitch"


CoreSwitch#show run
Building configuration...

Current configuration : 1578 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname CoreSwitch
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
ip subnet-zero
!
!
ip cef
!
ip audit po max-events 100
!
!
interface FastEthernet0/0
description "To PCKsiegowosc"
switchport access vlan 14
no ip address
!
interface FastEthernet0/1
description "To PCMarketing"
switchport access vlan 13
no ip address
!
interface FastEthernet0/2
description "To PcInformatyk"
switchport access vlan 12
no ip address
!
interface FastEthernet0/3
description "To Router"
switchport mode trunk
no ip address
!
interface FastEthernet0/4
description "To Srv11"
switchport access vlan 11
no ip address
!
interface FastEthernet0/5
description "To Srv 22"
switchport access vlan 22
no ip address
!
!
interface FastEthernet0/6
no ip address
shutdown
!
interface FastEthernet0/7
no ip address
shutdown
!
interface FastEthernet0/8
no ip address
shutdown
!
interface FastEthernet0/9
no ip address
shutdown
!
interface FastEthernet0/10
no ip address
shutdown
!
interface FastEthernet0/11
no ip address
shutdown
!
interface FastEthernet0/12
no ip address
shutdown
!
interface FastEthernet0/13
no ip address
shutdown
!
interface FastEthernet0/14
no ip address
shutdown
!
interface FastEthernet0/15
no ip address
shutdown
!
interface Vlan1
no ip address
shutdown
!
ip http server
no ip http secure-server
ip classless
!
!
line con 0
line aux 0
line vty 0 4
login
!
!
end


Router "Router"
Router#show running-config
Building configuration...

Current configuration : 1604 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
ip subnet-zero
!
!
ip cef
!
ip audit po max-events 100
!
!
!
interface FastEthernet0/0
no ip address
duplex auto
speed auto
!
interface FastEthernet0/0.11
encapsulation dot1Q 11
ip address 10.1.11.254 255.255.255.0
!
interface FastEthernet0/0.12
encapsulation dot1Q 12
ip address 10.1.12.254 255.255.255.0
!
interface FastEthernet0/0.13
encapsulation dot1Q 13
ip address 10.1.13.254 255.255.255.0
ip access-group 113 in
!
interface FastEthernet0/0.14
encapsulation dot1Q 14
ip address 10.1.14.254 255.255.255.0
ip access-group 114 in
!
interface FastEthernet0/0.22
encapsulation dot1Q 22
ip address 10.1.22.254 255.255.255.0
!
ip http server
no ip http secure-server
ip classless
!
access-list 113 permit ip 10.1.13.0 0.0.0.255 10.1.11.0 0.0.0.255
access-list 113 permit ip 10.1.13.0 0.0.0.255 10.1.22.0 0.0.0.255
access-list 113 remark ACL 113 dostep z sieci 10.1.13.0/24 (Marketing) do sieci 10.1.11.0/24 (Srv11) oraz 10.1.22.0/24 (Srv
access-list 113 remark ACL 113 dostep z sieci 10.1.13.0/24 (Marketing) do sieci 10.1.11.0/24 oraz 10.1.22.0/24
access-list 114 permit ip 10.1.14.0 0.0.0.255 10.1.11.0 0.0.0.255
access-list 114 permit ip 10.1.14.0 0.0.0.255 10.1.13.0 0.0.0.255
access-list 114 remark ACL z sieci VLAN 14 dostep do sieci 10.1.11.0/24 (SRV11) oraz 10.1.13.0/24 ( Marketing)
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
login
!
!
end



Router "PcKsiegowosc"


PcKsiegowosc#sh ru
Building configuration...

Current configuration : 535 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname PcKsiegowosc
!
boot-start-marker
boot-end-marker
!
!
memory-size iomem 15
no aaa new-model
ip subnet-zero
ip cef
!
!
interface Ethernet0/0
no ip address
shutdown
half-duplex
!
interface FastEthernet1/0
ip address 10.1.14.100 255.255.255.0
duplex auto
speed auto
!
ip http server
ip classless
ip route 0.0.0.0 0.0.0.0 10.1.14.254
!
!
!
line con 0
line aux 0
line vty 0 4
login
!
end


Router "PcMarketing"


PcMarketing#sh ru
Building configuration...

Current configuration : 534 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname PcMarketing
!
boot-start-marker
boot-end-marker
!
!
memory-size iomem 15
no aaa new-model
ip subnet-zero
ip cef
!
!
interface Ethernet0/0
no ip address
shutdown
half-duplex
!
interface FastEthernet1/0
ip address 10.1.13.100 255.255.255.0
duplex auto
speed auto
!
ip http server
ip classless
ip route 0.0.0.0 0.0.0.0 10.1.13.254
!
!
!
line con 0
line aux 0
line vty 0 4
login
!
!
end


Router "Srv11"


Srv11#show running-config
Building configuration...

Current configuration : 528 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Srv11
!
boot-start-marker
boot-end-marker
!
!
memory-size iomem 15
no aaa new-model
ip subnet-zero
ip cef
!
!
interface Ethernet0/0
no ip address
shutdown
half-duplex
!
interface FastEthernet1/0
ip address 10.1.11.100 255.255.255.0
duplex auto
speed auto
!
ip http server
ip classless
ip route 0.0.0.0 0.0.0.0 10.1.11.254
!
!
!
line con 0
line aux 0
line vty 0 4
login
!
!
!
end


Router "Srv22"


Srv22#sh ru
Building configuration...

Current configuration : 528 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Srv22
!
boot-start-marker
boot-end-marker
!
!
memory-size iomem 15
no aaa new-model
ip subnet-zero
ip cef
!
!
interface Ethernet0/0
no ip address
shutdown
half-duplex
!
interface FastEthernet1/0
ip address 10.1.22.100 255.255.255.0
duplex auto
speed auto
!
ip http server
ip classless
ip route 0.0.0.0 0.0.0.0 10.1.22.254
!
!
!
line con 0
line aux 0
line vty 0 4
login
!
!
end



Na routerach na których robi sie VLANy( "Router" oraz "CoreSwitch") w trybie enable wydajemy polecenia
vlan database
vlan 1
vlan 11
vlan 12
vlan 13
vlan 14
vlan 22
apply
exit


I wszystko powinno śmigać :)

do sprawdzenia aktywnych VLANów służy komenda
show vlan-switch

Brak komentarzy: