06交换机端口保护配置.docx

实验七 交换机端口保护配置 实验目的： Switchport protected配置及测试 背景知识和实验内容： 假设现在C2960为一台宾馆的ED-SW,做普通的客房PC接入。要求每个Edge端口间不能相互访问，但是可以访问Core1 1. PC1 ping PC2 测试Edge端口间的互通性 2. 在C2960 Edge端口上启用Switchport protect功能，连接到Core1的端口除外 3. 再次测试PC1与PC2的互通性 4. 再次测试PC1与Core1的互通性 实验拓扑： Core1 int vlan 88: 192.168.88.240/24 loopback0: 192.168.100.253/32 ED-SW int vlan 88: 192.168.88.243/24 PC1: 192.168.88.88/24 PC2: 192.168.88.89/24 实验步骤： 基本配置： 所有交换机端口设置成access模式，并划分到vlan88，启用portfast Core1 vlan88 IP：192.168.88.240/24 Core1 loopback0 IP: 192.168.100.253/32 ED-SW vlan 88 IP: 192.168.88.242/24 ED-SW 默认网关为：192.168.88.240 PC1 IP: 192.168.88.88/24 PC2 IP: 192.168.88.89/24 Core1: vlan 88 interface range f0/1 - 24 switchport access vlan 88 switchport mode access spanning-tree portfast int vlan 88 ip address 192.168.88.240 255.255.255.0 no shutdown int loopback 0 ip address 192.168.100.253 255.255.255.255ED-SW: vlan 88 interface range f0/1 - 24 switchport access vlan 88 switchport mode access spanning-tree portfast int vlan 88 ip address 192.168.88.243 255.255.255.0 no shutdownPC: (如果PC是用Router模拟的，那么可以使用以下命令) no ip routing禁用路由器routing功能，当成一台Host int fa0/0 no shutdown ip address 192.168.88.88 255.255.255.0 ip default-gateway 192.168.88.240设置默认网关，只在主机模式下有效 1. PC1 ping PC2 测试Edge端口间的互通性 PC DOSping 192.168.88.89 Pinging 192.168.88.89 with 32 bytes of data: Reply from 192.168.88.89: bytes=32 time=5ms TTL=255 Reply from 192.168.88.89: bytes=32 time=25ms TTL=255 Reply from 192.168.88.89: bytes=32 time=2ms TTL=255 Reply from 192.168.88.89: bytes=32 time=8ms TTL=255 Ping statistics for 192.168.88.89: Packets: Sent = 4, Received = 4, Lost = 0 (0% loss), Approximate round trip times in milli-seconds: Minimum = 2ms, Maximum = 25ms, Average = 10ms 2. 在C2960 Edge端口上启用Switchport protect功能，连接到Core1的端口除外 interface range f0/1 - 22 switchport protected 3. 再次测试PC1与PC2的互通性 PC DOSping 192.168.88.89 Pinging 192.168.88.89 with 32 bytes of data: Request timed out. Request timed out. Request timed out. Request time