|
業(yè)網(wǎng)OSPF分流  組網(wǎng)需求： 實(shí)現(xiàn)拓?fù)鋱D中的生產(chǎn)業(yè)務(wù)與辦公業(yè)務(wù)分流。 IP地址規(guī)劃如下：   －、基本信息及鏈路配置，連通性測(cè)試（略） 二、總部二層網(wǎng)絡(luò)業(yè)務(wù)分流策略部署 配置如下： SW1,SW2上分別創(chuàng)建vlan20,21,22,300,901 SW3創(chuàng)建vlan20,21,22,300 SW9、SW10創(chuàng)建vlan 36、37、300 生成樹(shù)的配置，總部生產(chǎn)和網(wǎng)管以SW1為根，辦公以SW2為根，互作備份。 SW1： spanning-tree vlan 1 priority 0 spanning-tree vlan 20 priority 0 spanning-tree vlan 21 priority 4096 spanning-tree vlan 22 priority 0 spanning-tree vlan 23 priority 4096 spanning-tree vlan 300 priority 0 no spanning-tree vlan 901 //901作為互聯(lián)VLAN，需關(guān)閉生成樹(shù) SW2： spanning-tree vlan 1 priority 4096 spanning-tree vlan 20 priority 4096 spanning-tree vlan 21 priority 0 spanning-tree vlan 22 priority 4096 spanning-tree vlan 23 priority 0 spanning-tree vlan 300 priority 4096 no spanning-tree vlan 901 //901作為互聯(lián)VLAN，需關(guān)閉生成樹(shù) SW3上的STP使用默認(rèn)值就行了，現(xiàn)在VLAN1,20,22,300是走SW1,VLAN21,23走SW2. 總部HSRP/VRRP的配置：生產(chǎn)網(wǎng)管以SW1為主網(wǎng)關(guān)，辦公以SW2為主網(wǎng)關(guān)，互作備份 SW1：interface Vlan20 standby 20 ip 172.16.20.1 standby 20 priority 200 standby 20 preempt interface Vlan21 standby 21 ip 172.16.21.1 standby 21 preempt interface Vlan22 standby 22 ip 172.16.22.1 standby 22 priority 200 standby 23 preempt interface Vlan23 standby 23 ip 172.16.23.1 standby 23 preempt interface Vlan300 standby 19 ip 172.16.19.1 standby 19 priority 200 standby 19 preempt SW2： interface Vlan20 standby 20 ip 172.16.20.1 standby 20 preempt interface Vlan21 standby 21 ip 172.16.21.1 standby 21 priority 200 standby 21 preempt interface Vlan22 standby preempt standby 22 ip 172.16.22.1 interface Vlan23 standby 23 ip 172.16.23.1 standby 23 priority 200 standby 23 preempt interface Vlan300 standby 19 ip 172.16.19.1 standby 19 preempt 分部HSRP/VRRP的配置：生產(chǎn)網(wǎng)管以RT7為主網(wǎng)關(guān)，辦公以RT8為主網(wǎng)關(guān)，互作備份 RT7： interface FastEthernet2/0 ip address 172.16.35.2 255.255.255.0 vrrp 19 ip 172.16.35.1 vrrp 19 priority 150 interface FastEthernet2/0.36 encapsulation dot1Q 36 ip address 172.16.36.2 255.255.255.0 vrrp 36 ip 172.16.36.1 vrrp 36 priority 200 interface FastEthernet2/0.37 encapsulation dot1Q 37 ip address 172.16.37.2 255.255.255.0 vrrp 37 ip 172.16.37.1 RT8： interface FastEthernet2/0 ip address 172.16.35.3 255.255.255.0 vrrp 19 ip 172.16.35.1 interface FastEthernet2/0.36 encapsulation dot1Q 36 ip address 172.16.36.3 255.255.255.0 vrrp 36 ip 172.16.36.1 interface FastEthernet2/0.37 encapsulation dot1Q 37 ip address 172.16.37.3 255.255.255.0 vrrp 37 ip 172.16.37.1 vrrp 37 priority 200 SW1的HSRP：   現(xiàn)在我們完成了總部和分部二層網(wǎng)絡(luò)的業(yè)務(wù)分流 二、單區(qū)域OSPF的配置： SW1: router ospf 1 router-id 172.16.0.1 passive-interface default //工程化配置，不需要的接口要配置成被動(dòng)接口 no passive-interface vlan 901 no passive-interface f1/1 network 172.16.0.1 0.0.0.0 area 0 network 172.16.1.0 0.0.0.3 area 0 network 172.16.1.8 0.0.0.3 area 0 network 172.16.20.0 0.0.0.255 area 0 network 172.16.21.0 0.0.0.255 area 0 int vlan 901 ip ospf network point-to-point //配置成點(diǎn)對(duì)點(diǎn) int f1/1 ip ospf network point-to-point //配置成點(diǎn)對(duì)點(diǎn) SW2: router ospf 1 router-id 172.16.0.2 passive-interface default //工程化配置，不需要的接口要配置成被動(dòng)接口 no passive-interface vlan 901 no passive-interface f1/1 network 172.16.0.2 0.0.0.0 area 0 network 172.16.1.4 0.0.0.3 area 0 network 172.16.1.8 0.0.0.3 area 0 network 172.16.20.0 0.0.0.255 area 0 network 172.16.21.0 0.0.0.255 area 0 int vlan 901 ip ospf network point-to-point //配置成點(diǎn)對(duì)點(diǎn) int f1/1 ip ospf network point-to-point //配置成點(diǎn)對(duì)點(diǎn) RT5: router ospf 1 router-id 172.16.0.5 passive-interface default no passive-interface f2/0 no passive-interface f1/0 no passive-interface s0/0 network 172.16.0.5 0.0.0.0 area 0 network 172.16.1.0 0.0.0.3 area 0 network 172.16.1.12 0.0.0.3 area 0 network 172.16.33.0 0.0.0.3 area 0 int f1/0 ip ospf network point-to-point //配置成點(diǎn)對(duì)點(diǎn) int f2/0 ip ospf network point-to-point //配置成點(diǎn)對(duì)點(diǎn) RT6: router ospf 1 router-id 172.16.0.6 passive-interface default no passive-interface f2/0 no passive-interface f1/0 no passive-interface s0/0 network 172.16.0.6 0.0.0.0 area 0 network 172.16.1.4 0.0.0.3 area 0 network 172.16.1.12 0.0.0.3 area 0 network 172.16.33.4 0.0.0.3 area 0 int f1/0 ip ospf network point-to-point //配置成點(diǎn)對(duì)點(diǎn) int f2/0 ip ospf network point-to-point //配置成點(diǎn)對(duì)點(diǎn) RT7: router ospf 1 router-id 172.16.32.1 passive-interface default no passive-interface s0/0 no passive-interface f1/0 network 172.16.32.1 0.0.0.0 area 0 network 172.16.33.0 0.0.0.3 area 0 network 172.16.33.12 0.0.0.3 area 0 network 172.16.35.0 0.0.0.255 area 0 network 172.16.36.0 0.0.0.255 area 0 network 172.16.37.0 0.0.0.255 area 0 int f1/0 ip ospf network point-to-point //配置成點(diǎn)對(duì)點(diǎn) RT8: router ospf 1 router-id 172.16.32.2 passive-interface default no passive-interface s0/0 no passive-interface f1/0 network 172.16.32.2 0.0.0.0 area 0 network 172.16.33.4 0.0.0.3 area 0 network 172.16.33.12 0.0.0.3 area 0 network 172.16.35.0 0.0.0.255 area 0 network 172.16.36.0 0.0.0.255 area 0 network 172.16.37.0 0.0.0.255 area 0 int f1/0 ip ospf network point-to-point //配置成點(diǎn)對(duì)點(diǎn) 三、單區(qū)域OSPF業(yè)務(wù)分流策略部署：   RT7: int f2/0.36 ip ospf cost 1000 int f2/0.37 ip ospf cost 2000 int f2/0 ip ospf cost 1000 RT8: int f2/0.36 ip ospf cost 2000 int f2/0.37 ip ospf cost 1000 int f2/0 ip ospf cost 2000 SW1: int vlan 20 ip ospf cost 1000 int vlan 21 ip ospf cost 2000 int vlan 22 ip ospf cost 1000 int vlan 23 ip ospf cost 2000 int vlan 300 ip ospf cost 1000 SW2: int vlan 20 ip ospf cost 2000 int vlan 21 ip ospf cost 1000 int vlan 22 ip ospf cost 2000 int vlan 23 ip ospf cost 1000 int vlan 300 ip ospf cost 2000 調(diào)整平面間的流量： SW、SW2： int vlan 901 ip ospf cost 100 RT5、RT6： int f1/0 ip ospf cost 101 RT7、RT8： ip ospf cost 170 現(xiàn)在測(cè)試一下：  總部生產(chǎn)訪問(wèn)辦公生產(chǎn)：VPC3-SW3-SW1-RT5-RT7-SW9-VPC5 總部生產(chǎn)訪問(wèn)分部辦公：VPC3-SW3-SW1-SW2-RT6-RT8-SW10 其它的大家慢慢去測(cè)試下吧！ |
|
|
