某企业局域网络综合配置

sys
sys SW1
un in e
vlan batch 10 20
int e0/0/3
port link-type access
port default vlan 10
int e0/0/4
port link-type access
port default vlan 20
int g0/0/1
port link-type trunk
port trunk allow-pass vlan 10 20
int g0/0/2
port link-type trunk
port trunk allow-pass vlan 10 20

sys
sys SW2
un in e
vlan batch 10 20
int e0/0/3
port link-type access
port default vlan 10
int e0/0/4
port link-type access
port default vlan 20
int g0/0/1
port link-type trunk
port trunk allow-pass vlan 10 20
int g0/0/2
port link-type trunk
port trunk allow-pass vlan 10 20

sys
sys SW3
un in e
vlan batch 10 13 20
int g0/0/2
port link-type trunk
port trunk allow-pass vlan 10 20
int g0/0/3
port link-type trunk
port trunk allow-pass vlan 10 20

int vlan 10
ip add 192.168.10.253 24
vrrp vrid 10 virtual-ip 192.168.10.254
vrrp vrid 10 priority 150
int vlan 20
ip add 192.168.20.252 24
vrrp vrid 10 virtual-ip 192.168.20.254
vrrp vrid 10 priority 120
int eth-trunk 11
port link-type trunk
port trunk allow-pass vlan 10 20

int g0/0/11
eth-trunk 11
int g0/0/12
eth-trunk 11
int g0/0/13
eth-trunk 11
int g0/0/1
port link-type access
port default vlan 13
int vlan 13
ip add 10.1.13.2 30

ospf 13 router-id 13.13.13.13
area 0.0.0.0
network 10.1.13.2 0.0.0.0
network 192.168.10.0 0.0.0.255
network 192.168.20.0 0.0.0.255

stp enable
stp mode mstp

dhcp enable
Ip pool vlan10
gateway-list 192.168.10.254
network 192.168.10.0 mask 24
dns-list 8.8.8.8 114.114.114.114
ip pool vlan20
gateway-list 192.168.20.254
network 192.168.20.0 mask 24
dns-list 8.8.8.8 114.114.114.114
interface Vlanif 10
dhcp select global
interface Vlanif 20
dhcp select global

sys
sys SW4
un in e
vlan batch 10 14 20
int g0/0/2
port link-type trunk
port trunk allow-pass vlan 10 20
int g0/0/3
port link-type trunk
port trunk allow-pass vlan 10 20

int vlan 10
ip add 192.168.10.252 24
vrrp vrid 10 virtual-ip 192.168.10.254
vrrp vrid 10 priority 120
int vlan 20
ip add 192.168.20.253 24
vrrp vrid 10 virtual-ip 192.168.20.254
vrrp vrid 10 priority 150
int eth-trunk 11
port link-type trunk
port trunk allow-pass vlan 10 20

int g0/0/11
eth-trunk 11
int g0/0/12
eth-trunk 11
int g0/0/13
eth-trunk 11
int g0/0/1
port link-type access
port default vlan 14
int vlan 14
ip add 10.1.14.2 30

ospf 14 router-id 14.14.14.14
area 0.0.0.0
network 10.1.14.2 0.0.0.0
network 192.168.10.0 0.0.0.255
network 192.168.20.0 0.0.0.255

stp enable
stp mode mstp

dhcp enable
Ip pool vlan10
gateway-list 192.168.10.254
network 192.168.10.0 mask 24
dns-list 8.8.8.8 114.114.114.114
ip pool vlan20
gateway-list 192.168.20.254
network 192.168.20.0 mask 24
dns-list 8.8.8.8 114.114.114.114
interface Vlanif 10
dhcp select global
interface Vlanif 20
dhcp select global

sys
sys R1
un in e
int g0/0/1
ip add 10.1.13.1 30
int g0/0/2
ip add 10.1.14.1 30
int s1/0/0
ip add 100.1.12.1 29

ospf 100 router-id 100.100.100.100
area 0.0.0.0
network 10.1.13.1 0.0.0.0
network 10.1.14.1 0.0.0.0
default-route-advertise

stp enable
stp mode mstp

ip route-static 0.0.0.0 0.0.0.0 100.1.12.2

nat address-group 1 100.1.12.3 100.1.12.4
acl 2000
rule 5 permit source 192.168.10.0 0.0.0.255
rule 10 permit source 192.168.20.0 0.0.0.255
int s1/0/0
nat outbound 2000 address-group 1

sys
sys R2
un in e

int s1/0/0
ip add 100.1.12.2 29
ip route-static 0.0.0.0 0.0.0.0 100.1.12.1
int g0/0/1
ip add 100.1.1.254 30
ip route-static 100.1.1.252 30 100.1.1.253