基于Cat4908-l3和Cat3500园区网实例

王朝other·作者佚名  2008-05-19
窄屏简体版  字體: |||超大  

1.说明

Cisco的4908-l3的配置比较繁杂,通过IRB来实现不同桥接组之间的通讯 可以与trunk互连 但是,要对每个单独的桥接组进行封装。本实例中主要介绍在一个基于4908为中心,3500为二级交换机的园区网方案设计以及每个设备的调试过程等。着重介绍4908的配置过程 至于3500的配置请见 基本配置栏目中 关于 3500全系列配置的文章。在此,不赘述!

至于vlan分配等,通过基本配置自己体会吧 呵呵!

2.拓扑图

3.4908_Center_A 配置

User Access Verification

Password:

Password:

Center_Aen

Password:

Center_A#sho run

Building configuration...

Current configuration:

!

version 12.0

no service pad

service timestamps debug uptime

service timestamps log uptime

no service password-encryption

!

hostname Center_A

!

enable secret 5 $1$OHq9$9XvRCkMWcYtsC4glw.NYG.

enable password cisco

!

ip subnet-zero

no ip domain-lookup

bridge irb (启用IRB 有点儿象 Ip routing)

!

!

!

interface GigabitEthernet1

no ip address

no ip directed-broadcast

对物理端口不做配置,通过子接口进行封装。从下面对子接口的封装可以看出G1下面有三个bridge group (1、40、50)

!

interface GigabitEthernet1.1

encapsulation isl 1

no ip redirects

no ip directed-broadcast

bridge-group 1

!

interface GigabitEthernet1.40

encapsulation isl 40

no ip redirects

no ip directed-broadcast

bridge-group 40

!

interface GigabitEthernet1.50

encapsulation isl 50

no ip redirects

no ip directed-broadcast

bridge-group 50

!

接着进入g2的配置

interface GigabitEthernet2

no ip address

no ip directed-broadcast

!

interface GigabitEthernet2.1

encapsulation isl 1

no ip redirects

no ip directed-broadcast

bridge-group 1

!

interface GigabitEthernet2.10

encapsulation isl 10

no ip redirects

no ip directed-broadcast

bridge-group 10

!

interface GigabitEthernet2.20

encapsulation isl 20

no ip redirects

no ip directed-broadcast

bridge-group 20

!

interface GigabitEthernet2.30

encapsulation isl 30

no ip redirects

no ip directed-broadcast

bridge-group 30

!

interface GigabitEthernet2.40

encapsulation isl 40

no ip redirects

no ip directed-broadcast

bridge-group 40

!

interface GigabitEthernet2.50

encapsulation isl 50

no ip redirects

no ip directed-broadcast

bridge-group 50

!

interface GigabitEthernet3

no ip address

no ip directed-broadcast

!

interface GigabitEthernet3.1

encapsulation isl 1

no ip redirects

no ip directed-broadcast

bridge-group 1

!

interface GigabitEthernet3.150

encapsulation isl 150

no ip redirects

no ip directed-broadcast

bridge-group 150

!

interface GigabitEthernet4

no ip address

no ip directed-broadcast

!

interface GigabitEthernet4.1

encapsulation isl 1

no ip redirects

no ip directed-broadcast

bridge-group 1

!

interface GigabitEthernet4.110

encapsulation isl 110

no ip redirects

no ip directed-broadcast

bridge-group 110

!

interface GigabitEthernet4.120

encapsulation isl 120

no ip redirects

no ip directed-broadcast

bridge-group 120

!

interface GigabitEthernet4.130

encapsulation isl 130

no ip redirects

no ip directed-broadcast

bridge-group 130

!

interface GigabitEthernet4.140

encapsulation isl 140

no ip redirects

no ip directed-broadcast

bridge-group 140

!

端口G5 G6 G7用于服务器的连接

interface GigabitEthernet5

no ip address

no ip directed-broadcast

bridge-group 1

!

interface GigabitEthernet6

no ip address

no ip directed-broadcast

bridge-group 1

!

interface GigabitEthernet7

no ip address

no ip directed-broadcast

bridge-group 1

!

端口G8预留

interface GigabitEthernet8

no ip address

no ip directed-broadcast

shutdown

!

上述的br-group有点象 VLAN的划分过程

以下是对每个br-group 加上网关(可以这样理解)

interface BVI1

ip address 10.1.0.1 255.255.0.0

no ip directed-broadcast

no ip route-cache cef

!

interface BVI10

ip address 10.10.0.1 255.255.0.0

no ip directed-broadcast

no ip route-cache cef

!

interface BVI20

ip address 10.20.0.1 255.255.0.0

no ip directed-broadcast

no ip route-cache cef

!

interface BVI30

ip address 10.30.0.1 255.255.0.0

no ip directed-broadcast

no ip route-cache cef

!

interface BVI40

ip address 10.40.0.1 255.255.0.0

no ip directed-broadcast

no ip route-cache cef

!

interface BVI50

ip address 10.50.0.1 255.255.0.0

no ip directed-broadcast

no ip route-cache cef

!

interface BVI110

ip address 10.110.0.1 255.255.0.0

no ip directed-broadcast

no ip route-cache cef

!

interface BVI120

ip address 10.120.0.1 255.255.0.0

no ip directed-broadcast

no ip route-cache cef

!

interface BVI130

ip address 10.130.0.1 255.255.0.0

no ip directed-broadcast

no ip route-cache cef

!

interface BVI140

ip address 10.140.0.1 255.255.0.0

no ip directed-broadcast

no ip route-cache cef

!

interface BVI150

ip address 10.150.0.1 255.255.0.0

no ip directed-broadcast

no ip route-cache cef

!

ip classless

!

在每个br-group中指定可路由的协议

bridge 1 protocol ieee

bridge 1 route ip

bridge 10 protocol ieee

bridge 10 route ip

bridge 20 protocol ieee

bridge 20 route ip

bridge 30 protocol ieee

bridge 30 route ip

bridge 40 protocol ieee

bridge 40 route ip

bridge 50 protocol ieee

bridge 50 route ip

bridge 110 protocol ieee

bridge 110 route ip

bridge 120 protocol ieee

bridge 120 route ip

bridge 130 protocol ieee

bridge 130 route ip

bridge 140 protocol ieee

bridge 140 route ip

bridge 150 protocol ieee

bridge 150 route ip

!

line con 0

password cisco

transport input none

line aux 0

password cisco

line vty 0 4

password cisco

login

!

end

就可以了

Center_A#

不过不能通过4908实现 VTP server client的配置!

只能通过透明传输 不过 对于二级的堆叠组可以局域实现 server client的配置

4.Center_B 配置

Center_B#show run

Building configuration...

Current configuration:

!

version 12.0

no service pad

service timestamps debug uptime

service timestamps log uptime

no service password-encryption

!

hostname Center_B

!

enable secret 5 $1$364f$eocY1OMDhoSaEqxPZ3oIY/

enable password cisco

!

!

!

!

!

!

ip subnet-zero

!

!

!

interface FastEthernet0/1

switchport access vlan 130

!

interface FastEthernet0/2

!

interface FastEthernet0/3

!

interface FastEthernet0/4

!

inte

 
 
 
免责声明:本文为网络用户发布,其观点仅代表作者个人观点,与本站无关,本站仅提供信息存储服务。文中陈述内容未经本站证实,其真实性、完整性、及时性本站不作任何保证或承诺,请读者仅作参考,并请自行核实相关内容。
 
 
© 2005- 王朝網路 版權所有 導航