cisco综合配置实验.docVIP

一、1楼交换机的配置 int range fa0/1 , fa0/24 swi mod trunk swi trunk allowed vlan all vtp mode server vtp domain cisco vtp password cisco vtp pruning vlan 11 vlan 12 int fa0/2 swi mode acc swi acc vlan 11 int vlan 1 ip add 1.1.1.1 255.255.255.0 enable cisco line vty 0 4 pass cisco login 注：查看vtp状态的命令是:show vtp status 查看vlan的信息是:show vlan 二、2楼交换机的配置 int fa0/24 swi mode trunk swi trunk int fa0/2 swi mode acc swi acc vlan 12 vtp mode client vtp domain cisco vtp password cisco int vlan 1 ip add 1.1.1.2 255.255.255.0 no sh enable secret cisco line vty 0 4 password cisco login 三、路由器的配置 int fa0/0 ip add 192.168.150.150 /24 no sh int fa0/1 no ip add no sh ---------以上是配置外网接口IP－－－－－－－－ int fa0/1.1 encapsulation dot1q 11 ip add 172.16.11.1 /24 int fa0/1.2 encapsulation dot1q 12 ip add 172.16.12.1/24 int fa0/1.3 encapsulation dot1q 1 ip add 1.1.1.254 /24 －－－－－－－以上是配置VLAN间的路由----------- service dhcp ip dhcp pool floor1 network 172.16.11.0/24 dns-server 202.102.192.68 default-router 172.16.11.1 ip dhcp pool floor2 network 172.16.12.0/24 dns-server 202.102.192.68 default-router 172.16.12.1 ip dhcp excluded-address 172.16.11.1 ip dhcp excluded-address 172.16.12.1 ------以上是配置DHCP－－－－－－－－－－－－ ip route 0.0.0.0 0.0.0.0 192.168.150.1 －－－－－以上是配置路由-------------------- int fa0/0 ip nat outside int fa0/1.1 ip nat inside int fa0/1.2 ip nat inside access-list 1 permit 172.16.0.0 0.0.255.255 ip nat inside source list 1 interface fa0/0 overload -------以上是配置NAT--------------------------- 网络安全配置???????