网关冗余链路聚合 nat地址转换.docx
- 文档编号:5822383
- 上传时间:2023-01-01
- 格式:DOCX
- 页数:16
- 大小:254.54KB
网关冗余链路聚合 nat地址转换.docx
《网关冗余链路聚合 nat地址转换.docx》由会员分享,可在线阅读,更多相关《网关冗余链路聚合 nat地址转换.docx(16页珍藏版)》请在冰豆网上搜索。
网关冗余链路聚合nat地址转换
网关冗余链路聚合nat地址转换
作者:
救世主220
实验日期:
2015.6.6阴
关键字:
冗余聚合natDHCP
实验拓扑:
实验要求:
企业内网
1.企业内部网络,可用网段为172.16.0.0/24。
2.接入层主机均通过DHCP获得IP地址。
3.汇聚层交换机之间使用LACP(链路聚合)实现带宽叠加,增加数据包传输速度。
4.三层交换机SW1,SW2分别配置SVI接口。
5.配置vlan10,vlan20,合理设置HSRP网管冗余达到负载均衡。
6.边界路由器配置nat,使内部网络可以访问外网。
7.配置DHCP地址池,以便进行nat地址转换。
8.路由器交换机均启用Telnet功能便于管理维护。
9.内部动态路由协议使用EIGRP(增强型内部网关路由协议)
10.实现内部网络全网可达。
ISP内部网络
1.ISP内部网络,可用网段200.1.1.0/24.
2.接入设备均通过D地址DHCP获取IP地址。
3.内部所有主机不允许访问企业内网。
4.ISP内部全网可达。
主要配置:
企业边缘路由器:
Router#showrun
Buildingconfiguration...
Currentconfiguration:
1090bytes
usernameccieprivilege15password0ccie
!
interfaceFastEthernet0/0
ipaddress172.16.1.1255.255.255.0
ipnatinside
duplexauto
speedauto
!
interfaceFastEthernet0/1
ipaddress172.16.2.1255.255.255.0
ipnatinside
duplexauto
speedauto
!
interfaceEthernet1/0
ipaddress12.1.1.1255.255.255.0
ipnatoutside
duplexauto
speedauto
!
routereigrp90
redistributestatic
network172.16.0.0
noauto-summary
!
ipnatpoolccie12.1.1.212.1.1.9netmask255.255.255.0
ipnatinsidesourcelist1poolccieoverload
ipclassless
iproute0.0.0.00.0.0.012.1.1.10
!
access-list1permit172.16.0.00.0.255.255
!
linecon0
linevty04
loginlocal
Router的路由表
EIGRP邻居:
SW1配置:
Switch#showrun
Buildingconfiguration...
Currentconfiguration:
2448bytes
!
version12.2
!
ipdhcpexcluded-address172.16.10.1172.16.10.99
!
ipdhcppoolvlan10
network172.16.10.0255.255.255.0
default-router172.16.10.254
dns-server8.8.8.8
iprouting
!
usernameccieprivilege15password0ccie
!
spanning-treemodepvst
spanning-treevlan10priority24576
spanning-treevlan20priority28672
!
interfacePort-channel1
switchportmodetrunk
!
interfacePort-channel2
switchportmodetrunk
!
interfaceFastEthernet0/1
noswitchport
ipaddress172.16.1.2255.255.255.0
ipsummary-addresseigrp90172.16.0.0255.255.240.05
duplexauto
speedauto
!
interfaceFastEthernet0/2
switchporttrunkallowedvlan10,20
switchporttrunkencapsulationdot1q
switchportmodetrunk
!
interfaceFastEthernet0/21
channel-group1modeon
switchporttrunkencapsulationdot1q
switchportmodetrunk
!
interfaceFastEthernet0/22
channel-group1modeon
switchporttrunkencapsulationdot1q
switchportmodetrunk
!
interfaceFastEthernet0/23
channel-group2modeon
switchporttrunkencapsulationdot1q
switchportmodetrunk
!
interfaceFastEthernet0/24
channel-group2modeon
switchporttrunkencapsulationdot1q
switchportmodetrunk
!
interfaceVlan10
ipaddress172.16.10.1255.255.255.0
standbyversion2
standby1ip172.16.10.254
standby1priority110
standby1preempt
standby1trackFastEthernet0/1
!
interfaceVlan20
ipaddress172.16.20.1255.255.255.0
standbyversion2
standby2ip172.16.20.254
standby2priority105
standby2preempt
standby2trackFastEthernet0/1
!
routereigrp90
network172.16.0.0
noauto-summary
!
linevty04
loginlocal
!
SW1路由表:
EIGRP邻居
SW2配置:
Switch#showrun
Buildingconfiguration...
Currentconfiguration:
2448bytes
!
ipdhcpexcluded-address172.16.20.1172.16.20.99
!
ipdhcppoolvlan20
network172.16.20.0255.255.255.0
default-router172.16.20.254
dns-server8.8.8.8
iprouting
!
usernameccieprivilege15password0ccie
!
spanning-treemodepvst
spanning-treevlan20priority20480
spanning-treevlan10priority28672
!
interfacePort-channel1
switchportmodetrunk
!
interfacePort-channel2
switchportmodetrunk
!
interfaceFastEthernet0/1
noswitchport
ipaddress172.16.2.2255.255.255.0
ipsummary-addresseigrp90172.16.0.0255.255.240.05
duplexauto
speedauto
!
interfaceFastEthernet0/2
switchporttrunkallowedvlan10,20
switchporttrunkencapsulationdot1q
switchportmodetrunk
!
interfaceFastEthernet0/21
channel-group1modeon
switchporttrunkencapsulationdot1q
switchportmodetrunk
!
interfaceFastEthernet0/22
channel-group1modeon
switchporttrunkencapsulationdot1q
switchportmodetrunk
!
interfaceFastEthernet0/23
channel-group2modeon
switchporttrunkencapsulationdot1q
switchportmodetrunk
!
interfaceFastEthernet0/24
channel-group2modeon
switchporttrunkencapsulationdot1q
switchportmodetrunk
!
interfaceVlan10
ipaddress172.16.10.2255.255.255.0
standbyversion2
standby1ip172.16.10.254
standby1priority105
standby1preempt
standby1trackFastEthernet0/1
!
interfaceVlan20
ipaddress172.16.20.2255.255.255.0
standbyversion2
standby2ip172.16.20.254
standby2priority110
standby2preempt
standby2trackFastEthernet0/1
!
routereigrp90
network172.16.0.0
noauto-summary
!
linevty04
loginlocal
企业内部二层交换机配置:
Switch#showrun
Buildingconfiguration...
noipdomain-lookup
!
usernameccieprivilege15password0ccie
!
spanning-treemodepvst
!
vlan10
!
vlan20
!
interfaceFastEthernet0/1
switchporttrunkallowedvlan10,20
!
interfaceFastEthernet0/2
switchporttrunkallowedvlan10,20
!
interfaceFastEthernet0/3
switchportaccessvlan10
switchportmodeaccess
spanning-treeportfast
!
interfaceFastEthernet0/4
switchportaccessvlan20
switchportmodeaccess
spanning-treeportfast
!
interfaceGigabitEthernet0/2
linevty04
loginlocal
SW2路由表
EIGRP邻居
ISP边界路由器配置:
Router#showrun
Buildingconfiguration...
!
ipdhcpexcluded-address200.1.1.1200.1.1.99
!
ipdhcppoolccie
network200.1.1.0255.255.255.0
default-router200.1.1.1
dns-server114.114.114.114
usernameccieprivilege15password0ccie
!
interfaceLoopback0
ipaddress1.1.1.1255.255.255.0
!
interfaceFastEthernet0/0
ipaddress200.1.1.1255.255.255.0
duplexauto
speedauto
!
interfaceEthernet1/0
ipaddress12.1.1.10255.255.255.0
duplexauto
speedauto
!
!
ipclassless
!
linevty04
loginlocal
ISP路由表
测试:
Pc0pingpc1
Pc0访问ISP
PC1pingpc0
PC1访问isp
NAT转换
Pc1上进行hsrp冗余测试
上行链路f0/1断开前后,到ISP的路径变化情况
断开上行链路f0/1之前
断开上行链路f0/1之前后
很明显路径发生的切换。
在pc0上进行hsrp冗余测试
断开上行链路f0/1之前
断开上行链路f0/1之后
- 配套讲稿:
如PPT文件的首页显示word图标,表示该PPT已包含配套word讲稿。双击word图标可打开word文档。
- 特殊限制:
部分文档作品中含有的国旗、国徽等图片,仅作为作品整体效果示例展示,禁止商用。设计者仅对作品中独创性部分享有著作权。
- 关 键 词:
- 网关冗余 链路聚合 nat地址转换 网关 冗余 聚合 nat 地址 转换
![提示](https://static.bdocx.com/images/bang_tan.gif)