用思科路由器搭建中小型企业内部网络 - 思科技术 - 51CTO技术论坛

社区导航: 专家门诊网络技术操作系统数据库程序设计系统应用考试认证 CIO及信息化站长交流综合交流下载基地 51CTO产品服务

【设为首页 | 收藏本站】

51CTO技术论坛» 思科技术 » 用思科路由器搭建中小型企业内部网络 [ 打印] [ 订阅] [ 收藏] [ 推荐给朋友] [ 本帖文本页]

论坛跳转:

wzh4171
新新人类

帖子 14
精华 0
无忧币 13
积分 25
阅读权限 20

注册日期 2007-9-27

最后登录 2008-4-22

离线

[查看资料] [发短消息] [Blog]

发表于:2008-3-20 13:56　　标题：用思科路由器搭建中小型企业内部网络
＜上一帖 | 下一帖＞

项目描述：
1、用思科路由器专线接入ISP；
2、内部网络使用三层交换机，设置若干VLAN；
3、VLAN通过路由NAT上网，相互间不能互访。
设计实现：
1、  Cisco路由器上配置NAT转换，默认路由至ISP，静态路由至三层交换机
2、  三层交换机上划VLAN，实现VLAN间路由，至路由器默认路由；
3、  三层交换机上做ACL列表演，写实现VLAN间互相隔离技术。
详细配置文件如下：
一、路由器配置 ROUTER1
Router1#show run
Building configuration...
Current configuration : 989 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname router2
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
memory-size iomem 5
!
!
ip cef
!
!
!
!
interface FastEthernet0/0
ip address 192.168.0.1 255.255.255.0
ip nat inside
ip virtual-reassembly
speed 100
full-duplex
!
interface Serial1/0
ip address 172.16.0.1 255.255.255.0
ip nat outside
ip virtual-reassembly
serial restart-delay 0
!
interface Serial1/1
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/3
no ip address
shutdown
serial restart-delay 0
!
ip http server
ip route 192.168.0.0 255.255.0.0 192.168.0.2
!
!
ip nat inside source list 101 interface Serial1/0 overload
!
access-list 101 permit ip 192.168.0.0 0.0.255.255 any
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
!
!
End
二、三层交换机SW1
sw1#show run
Building configuration...

Current configuration : 1284 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname sw1
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
memory-size iomem 5
!
!
ip cef
!
!
!
interface FastEthernet1/0
!
interface FastEthernet1/1
no switchport
ip address 192.168.0.2 255.255.255.0
!
interface FastEthernet1/2
!
interface FastEthernet1/3
switchport access vlan 10
vlan-id dot1q 10
  exit-vlan-config
!
!
interface FastEthernet1/4
switchport access vlan 20
!
interface FastEthernet1/5
!
interface FastEthernet1/6
!
interface FastEthernet1/7
!
interface FastEthernet1/8
!
interface FastEthernet1/9
!
interface FastEthernet1/10
!
interface FastEthernet1/11
!
interface FastEthernet1/12
!
interface FastEthernet1/13
!
interface FastEthernet1/14
!
interface FastEthernet1/15
!
interface Vlan1
no ip address
!
interface Vlan10
ip address 192.168.10.1 255.255.255.0
ip access-group 101 in
!
interface Vlan20
ip address 192.168.20.1 255.255.255.0
!
no ip http server
ip route 0.0.0.0 0.0.0.0 192.168.0.1
!
!
!
access-list 101 deny ip 192.168.10.0 0.0.0.255 192.168.20.0 0.0.0.255
access-list 101 permit ip any any
!
!
!
control-plane
!
line con 0
line aux 0
line vty 0 4
!
!
End
三、二层交换机SW2
SW2#show run
Building configuration...

Current configuration : 385 bytes
!
version 12.2
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname  SW2
!
!
ip subnet-zero
no ip routing
!
!
!
!
!
!
interface FastEthernet0/0
ip address 192.168.10.10 255.255.255.0
no ip route-cache
speed 100
full-duplex
!
ip default-gateway 192.168.10.1
ip classless
ip http server
!
!
line con 0
line aux 0
line vty 0 4
!
End
四、二层交换机SW3
SW3#show run
Building configuration...

Current configuration : 385 bytes
!
version 12.2
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname SW3
!
!
ip subnet-zero
no ip routing
!
!
!
!
!
!
interface FastEthernet0/0
ip address 192.168.20.10 255.255.255.0
no ip route-cache
speed 100
full-duplex
!
ip default-gateway 192.168.20.1
ip classless
ip http server
!
!
line con 0
line aux 0
line vty 0 4
!
end
本文来源于网络技术员 http://www.31kxs.cn/ , 原文地址：http://www.31kxs.cn/wangluoguanl ... anqiyeneibuwangluo/