更新CCNP实验手册

NorvelNetworks文件名：王万利-更新CCNP实验手册第1页共46页最后更新：11/24/2009实验1．配置三层交换VLAN间相互通信实验拓扑：本实验需求：通过在ciscocatalyst3550来规划VLAN100和VLAN200，并且配置DHCP让VLAN100人事部计算机获得IP地址为192.168.0.0/24，让VLAN200市场部计算机获得IP地址为172.16.0.0/24。因为市场部和人事部因为业务上的关系，需要两台服务器相互通信，所在还需要在3550上配置VLAN间相互通信。实验过程第一步配置Catalyst3550基础配置SwitchSwitchenableSwitch#conftEnterconfigurationcommands,oneperline.EndwithCNTL/Z.Switch(config)#host35503550(config)#noipdolo3550(config)#linecon03550(config-line)#noexec-tNorvelNetworks文件名：王万利-更新CCNP实验手册第2页共46页最后更新：11/24/20093550(config-line)#loggsyn3550(config-line)#exit第二步在Catalyst3550划分VLAN100和VLAN200//进入全局配置模式下，划分VLAN(请问catalyst3500支持在全局模式下划分VLAN吗？)3550(config)#vlan100//给VLAN100命名3550(config-vlan)#namerenshibo3550(config-vlan)#intf0/133550(config-if)#switchportmodeaccess3550(config-if)#switchportaccessvlan1003550(config-if)#spanning-treeportfast//请问什么时候需要在交换机接口下配置portfast？这里如果不配置可以吗？%Warning:portfastshouldonlybeenabledonportsconnectedtoasinglehost.Connectinghubs,concentrators,switches,bridges,etc...tothisinterfacewhenportfastisenabled,cancausetemporarybridgingloops.UsewithCAUTION%PortfasthasbeenconfiguredonFastEthernet0/13butwillonlyhaveeffectwhentheinterfaceisinanon-trunkingmode.3550(config-if)#vlan2003550(config-vlan)#nameshichangbo3550(config-vlan)#intf0/153550(config-if)#swmoacc3550(config-if)#swaccvlan2003550(config-if)#spanning-treeportfast%Warning:portfastshouldonlybeenabledonportsconnectedtoasinglehost.Connectinghubs,concentrators,switches,bridges,etc...tothisinterfacewhenportfastisenabled,cancausetemporarybridgingloops.UsewithCAUTION%PortfasthasbeenconfiguredonFastEthernet0/15butwillonlyhaveeffectwhentheinterfaceisinanon-trunkingmode.//验证VLAN的配置3550#showvlanbriefVLANNameStatusPorts----------------------------------------------------------------------------1defaultactiveFa0/1,Fa0/2,Fa0/3,Fa0/4Fa0/5,Fa0/6,Fa0/7,Fa0/8Fa0/9,Fa0/10,Fa0/11,Fa0/12Fa0/14,Fa0/16,Fa0/17,Fa0/18Fa0/23,Gi0/1,Gi0/2NorvelNetworks文件名：王万利-更新CCNP实验手册第3页共46页最后更新：11/24/2009100renshiboactiveFa0/13200shichangboactiveFa0/151002fddi-defaultact/unsup1003token-ring-defaultact/unsup1004fddinet-defaultact/unsup1005trnet-defaultact/unsup第三步配置SVI(交换虚拟接口)3550#conftEnterconfigurationcommands,oneperline.EndwithCNTL/Z.//进入VLAN100虚拟接口下3550(config)#intvlan100//增加接口描述，以便将来排错更加方便3550(config-if)#descriptionConnectiontorenshibo//这里配置的IP地址就是人事部PC的默认网关地址，如果VLAN接口不配置IP地址，后面的DHCP配置中，PC能否获得IP地址吗？？3550(config-if)#ipadd192.168.0.1255.255.255.03550(config-if)#nosh3550(config-if)#intvlan20000:13:22:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceVlan200,changedstatetoup3550(config-if)#descriptionConnectiontoshichangbo3550(config-if)#ipadd172.16.0.1255.255.255.03550(config-if)#nosh3550(config-if)#3550#conft//开启catalyst3550三层交换路由功能（默认是关闭的）请问ciscocatalyst那些型号交换机是三层交换机？3550(config)#iprouting3550(config)#exit3550#shiproute//两条直连路由条目Codes:C-connected,S-static,R-RIP,M-mobile,B-BGPD-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterareaN1-OSPFNSSAexternaltype1,N2-OSPFNSSAexternaltype2E1-OSPFexternaltype1,E2-OSPFexternaltype2,E-EGPi-IS-IS,su-IS-ISsummary,L1-IS-ISlevel-1,L2-IS-ISlevel-2ia-IS-ISinterarea,*-candidatedefault,U-per-userstaticrouteo-ODR,P-periodicdownloadedstaticrouteGatewayoflastresortisnotsetNorvelNetworks文件名：王万利-更新CCNP实验手册第4页共46页最后更新：11/24/2009172.16.0.0/24issubnetted,1subnetsC172.16.0.0isdirectlyconnected,Vlan200C192.168.0.0/24isdirectlyconnected,Vlan100Designatedbridgehaspriority32768,addressccd1.0a80.0000Designatedportidis129.65,designatedpathcost0Timers:messageage0,forwarddelay0,hold0Numberoftransitionstoforwardingstate:1BPDU:sent993,received92第四步在Catalyst3550上配置DHCP，以便于VLAN100和VLAN200下客户端获得IP地址，掩码，网关，DNS等//全局下打开DHCP服务.默认是开启的吗？那为什么还要需要开启了？3550(config)#servicedhcp//关闭dhcp客户端IP冲突日志记录信息3550(config)#noipdhcpconflictlogging//配置地址池名称，地址池名称为任意字符（这里定义的名字VLAN的名称）3550(config)#ipdhcppoolrenshibo//配置PC所获得网段地址范围，和掩码，（这里有几种命令语句格式）(network192.168.0.0255.255.255.0)3550(dhcp-config)#network192.168.0.0/24//配置网关地址3550(dhcp-config)#default-router192.168.0.1//配置DNS（域名解析服务器）可选配置请问什么时候PC需要配置DNS地址？局域网通讯需要吗？3550(dhcp-config)#dns218.30.19.4061.134.1.4//配置域名3550(dhcp-config)#domain-name配置地址租期为永久3550(dhcp-config)#leaseinfinite3550(dhcp-config)#exit//配置排除的IP地址范围，不从地址池内分配的地址，不配置排除地址可以吗？3550(config)#ipdhcpexcluded-address192.168.0.13550(config)#ipdhcppoolshichangbo3550(dhcp-config)#network172.16.0.0/243550(dhcp-config)#default-router172.16.0.13550(dhcp-config)#dns218.30.19.4061.134.1.43550(dhcp-config)#domain-name(dhcp-config)#leaseinfiniteNorvelNetworks文件名：王万利-更新CCNP实验手册第5页共46页最后更新：11/24/20093550(dhcp-config)#exit3550(config)#ipdhcpexcluded-address172.16.0.1第五步在市场部PC上验证是否能从catalyst3550获得IP地址,如图：开始-运行-cmd-ipconfig/all第六步在Catalyst3550查看PC获得的IP地址是否正确//查看DHCP绑定信息3550#shipdhcpbindingIPaddressClient-ID/（MAC地址）LeaseexpirationTypeHardwareaddress172.16.0.20100.16d3.249f.fdInfiniteAutomatic192.168.0.20100.1641.15e8.5cInfiniteAutomatic第七步在交换机测试是否可以ping通市场部和人事部PC3550(config)#exit3550#00:26:41:%SYS-5-CONFIG_I:Configuredfromconsolebyconsole3550#ping172.16.0.2Typeescapesequencetoabort.Sending5,100