多层交换机静态路由实验
一、实验目的
1、理解三层交换机进行路由的原理和具体实现拓扑;
2、理解三层交换机静态路由的配置方法;
二、应用环境
当两台三层交换机级联时,为了保证每台交换机上所连接的网段可以和另一台交换机上连接的网段互相通信,最简单的方法就是设置静态路由。
三、实验设备
1、DCRS-7604(或6804)交换机1台
2、DCRS-5526S交换机1台
3、PC机2-4台
4、Console线1-2根
5、直通网线2-4根
四、实验拓扑
五、实验要求
1、在交换机A和交换机B上分别划分基于端口的VLAN:
交换机 |
VLAN |
端口成员 |
交换机A |
10 |
1~8 |
20 |
9~16 |
|
100 |
24 |
|
交换机B |
30 |
1~8 |
40 |
9~16 |
|
101 |
24 |
2、交换机A和B通过的24口级联。
3、配置交换机A和B各VLAN虚拟接口的IP地址分别如下表所示:
VLAN10 |
VLAN20 |
VLAN30 |
VLAN40 |
VLAN100 |
VLAN101 |
192.168.10.1 |
192.168.20.1 |
192.168.30.1 |
192.168.40.1 |
192.168.100.1 |
192.168.100.2 |
4、PC1-PC4的网络设置为:
设备 |
IP地址 |
gateway |
Mask |
PC1 |
192.168.10.101 |
192.168.10.1 |
255.255.255.0 |
PC2 |
192.168.20.101 |
192.168.20.1 |
255.255.255.0 |
PC3 |
192.168.30.101 |
192.168.30.1 |
255.255.255.0 |
PC4 |
192.168.40.101 |
192.168.40.1 |
255.255.255.0 |
5、验证:
l没有静态路由之前:
PC1与PC2,PC3与PC4可以互通。
PC1、PC2与PC3、PC4不通。
l配置静态路由之后:
四台PC之间都可以互通。
l若实验结果和理论相符,则本实验完成。
六、实验步骤
第一步:交换机全部恢复出厂设置,配置交换机的VLAN信息
交换机A:
DCRS-7604#conf
DCRS-7604(Config)#vlan 10
DCRS-7604(Config-Vlan10)#switchport interface ethernet 1/1-8
Set the port Ethernet1/1 access vlan 10 successfully
Set the port Ethernet1/2 access vlan 10 successfully
Set the port Ethernet1/3 access vlan 10 successfully
Set the port Ethernet1/4 access vlan 10 successfully
Set the port Ethernet1/5 access vlan 10 successfully
Set the port Ethernet1/6 access vlan 10 successfully
Set the port Ethernet1/7 access vlan 10 successfully
Set the port Ethernet1/8 access vlan 10 successfully
DCRS-7604(Config-Vlan10)#exit
DCRS-7604(Config)#vlan 20
DCRS-7604(Config-Vlan20)#switchport interface ethernet 1/9-16
Set the port Ethernet1/9 access vlan 20 successfully
Set the port Ethernet1/10 access vlan 20 successfully
Set the port Ethernet1/11 access vlan 20 successfully
Set the port Ethernet1/12 access vlan 20 successfully
Set the port Ethernet1/13 access vlan 20 successfully
Set the port Ethernet1/14 access vlan 20 successfully
Set the port Ethernet1/15 access vlan 20 successfully
Set the port Ethernet1/16 access vlan 20 successfully
DCRS-7604(Config-Vlan20)#exit
DCRS-7604(Config)#vlan 100
DCRS-7604(Config-Vlan100)#switchport interface ethernet 1/24
Set the port Ethernet1/24 access vlan 100 successfully
DCRS-7604(Config-Vlan100)#exit
DCRS-7604(Config)#
验证配置:
DCRS-7604#show vlan
VLAN NameTypeMediaPorts
---------------------------------------------------------------------------
1defaultStaticENETEthernet1/17Ethernet1/18
Ethernet1/19Ethernet1/20
Ethernet1/21Ethernet1/22
Ethernet1/23Ethernet1/25
Ethernet1/26Ethernet1/27
Ethernet1/28
10VLAN0010StaticENETEthernet1/1Ethernet1/2
Ethernet1/3Ethernet1/4
Ethernet1/5Ethernet1/6
Ethernet1/7Ethernet1/8
20VLAN0020StaticENETEthernet1/9Ethernet1/10
Ethernet1/11Ethernet1/12
Ethernet1/13Ethernet1/14
Ethernet1/15Ethernet1/16
100VLAN0100StaticENETEthernet1/24
DCRS-7604#
交换机B:
DCRS-5526S(Config)#vlan 30
DCRS-5526S(Config-Vlan30)#switchport interface ethernet 0/0/1-8
Set the port Ethernet0/0/1 access vlan 30 successfully
Set the port Ethernet0/0/2 access vlan 30 successfully
Set the port Ethernet0/0/3 access vlan 30 successfully
Set the port Ethernet0/0/4 access vlan 30 successfully
Set the port Ethernet0/0/5 access vlan 30 successfully
Set the port Ethernet0/0/6 access vlan 30 successfully
Set the port Ethernet0/0/7 access vlan 30 successfully
Set the port Ethernet0/0/8 access vlan 30 successfully
DCRS-5526S(Config-Vlan30)#exit
DCRS-5526S(Config)#vlan 40
DCRS-5526S(Config-Vlan40)#switchport interface ethernet 0/0/9-16
Set the port Ethernet0/0/9 access vlan 40 successfully
Set the port Ethernet0/0/10 access vlan 40 successfully
Set the port Ethernet0/0/11 access vlan 40 successfully
Set the port Ethernet0/0/12 access vlan 40 successfully
Set the port Ethernet0/0/13 access vlan 40 successfully
Set the port Ethernet0/0/14 access vlan 40 successfully
Set the port Ethernet0/0/15 access vlan 40 successfully
Set the port Ethernet0/0/16 access vlan 40 successfully
DCRS-5526S(Config-Vlan40)#exit
DCRS-5526S(Config)#vlan 101
DCRS-5526S(Config-Vlan101)#switchport interface ethernet 0/0/24
Set the port Ethernet0/0/24 access vlan 101 successfully
DCRS-5526S(Config-Vlan101)#exit
DCRS-5526S(Config)#
验证配置:
DCRS-5526S#show vlan
VLAN NameTypeMediaPorts
----------------------------------- ---------------------------------------
1defaultStaticENETEthernet0/0/17Ethernet0/0/18
Ethernet0/0/19Ethernet0/0/20
Ethernet0/0/21Ethernet0/0/22
Ethernet0/0/23
30VLAN0030StaticENETEthernet0/0/1Ethernet0/0/2
Ethernet0/0/3Ethernet0/0/4
Ethernet0/0/5Ethernet0/0/6
Ethernet0/0/7Ethernet0/0/8
40VLAN0040StaticENETEthernet0/0/9Ethernet0/0/10
Ethernet0/0/11Ethernet0/0/12
Ethernet0/0/13Ethernet0/0/14
Ethernet0/0/15Ethernet0/0/16
101VLAN0101StaticENETEthernet0/0/24
DCRS-5526S#
第二步:配置交换机各vlan虚接口的IP地址
交换机A:
DCRS-7604(Config)#int vlan 10
DCRS-7604(Config-If-Vlan10)#ip address 192.168.10.1 255.255.255.0
DCRS-7604(Config-If-Vlan10)#no shut
DCRS-7604(Config-If-Vlan10)#exit
DCRS-7604(Config)#int vlan 20
DCRS-7604(Config-If-Vlan20)#ip address 192.168.20.1 255.255.255.0
DCRS-7604(Config-If-Vlan20)#no shut
DCRS-7604(Config-If-Vlan20)#exit
DCRS-7604(Config)#int vlan 100
DCRS-7604(Config-If-Vlan100)#ip address 192.168.100.1 255.255.255.0
DCRS-7604(Config-If-Vlan100)#no shut
DCRS-7604(Config-If-Vlan100)#
DCRS-7604(Config-If-Vlan100)#exit
DCRS-7604(Config)#
交换机B:
DCRS-5526S(Config)#int vlan 30
DCRS-5526S(Config-If-Vlan30)#ip address 192.168.30.1 255.255.255.0
DCRS-5526S(Config-If-Vlan30)#no shut
DCRS-5526S(Config-If-Vlan30)#exit
DCRS-5526S(Config)#interface vlan 40
DCRS-5526S(Config-If-Vlan40)#ip address 192.168.40.1 255.255.255.0
DCRS-5526S(Config-If-Vlan40)#exit
DCRS-5526S(Config)#int vlan 101
DCRS-5526S(Config-If-Vlan101)#ip address 192.168.100.2 255.255.255.0
DCRS-5526S(Config-If-Vlan101)#exit
DCRS-5526S(Config)#
第三步:配置各PC的IP地址,注意配置网关
设备 |
IP地址 |
gateway |
Mask |
PC1 |
192.168.10.101 |
192.168.10.1 |
255.255.255.0 |
PC2 |
192.168.20.101 |
192.168.20.1 |
255.255.255.0 |
PC3 |
192.168.30.101 |
192.168.30.1 |
255.255.255.0 |
PC4 |
192.168.40.101 |
192.168.40.1 |
255.255.255.0 |
第四步:验证PC之间是否连通?
PC |
端口 |
PC |
端口 |
结果 |
原因 |
PC1 |
A:1/1 |
PC2 |
A:1/9 |
通 |
|
PC1 |
A:1/1 |
Vlan 100 |
A:1/24 |
通 |
|
PC1 |
A:1/1 |
Vlan 101 |
B:0/0/24 |
不通 |
|
PC1 |
A:1/1 |
PC3 |
B:0/0/1 |
不通 |
查看路由表,进一步分析上一步的现象原因。
交换机A:
DCRS-7604#show ip route
Total route items is 3, the matched route items is 3
Codes: C - connected, S - static, R - RIP derived, O - OSPF derived
A - OSPF ASE, B - BGP derived, D - DVMRP derived
DestinationMaskNexthopInterfacePreference
C192.168.10.0255.255.255.00.0.0.0Vlan100
C192.168.20.0255.255.255.00.0.0.0Vlan200
C192.168.100.0255.255.255.00.0.0.0Vlan1000
DCRS-7604#
(C代表直连的网段)
交换机B:
DCRS-5526S#show ip route
Total route items is 3, the matched route items is 3
Codes: C - connected, S - static, R - RIP derived, O - OSPF derived
A - OSPF ASE, B - BGP derived, D - DVMRP derived
DestinationMaskNexthopInterfacePreference
C192.168.30.0255.255.255.00.0.0.0Vlan300
C192.168.40.0255.255.255.00.0.0.0Vlan400
C192.168.100.0255.255.255.00.0.0.0Vlan1010
DCRS-5526S#
第五步:配置静态路由
交换机A:
DCRS-7604(Config)#ip route 192.168.30.0 255.255.255.0 192.168.100.2
DCRS-7604(Config)#ip route 192.168.40.0 255.255.255.0 192.168.100.2
验证配置:
DCRS-7604#show ip route
Total route items is 5, the matched route items is 5
Codes: C - connected, S - static, R - RIP derived, O - OSPF derived
A - OSPF ASE, B - BGP derived, D - DVMRP derived
DestinationMaskNexthopInterfacePreference
C192.168.10.0255.255.255.00.0.0.0Vlan100
C192.168.20.0255.255.255.00.0.0.0Vlan200
S192.168.30.0255.255.255.0192.168.100.2Vlan1001
S192.168.40.0255.255.255.0192.168.100.2Vlan1001
C192.168.100.0255.255.255.00.0.0.0Vlan1000
DCRS-7604#
(S代表静态配置的网段)
交换机B:
DCRS-5526S(Config)#ip route 192.168.10.0 255.255.255.0 192.168.100.1
DCRS-5526S(Config)#ip route 192.168.20.0 255.255.255.0 192.168.100.1
验证配置:
DCRS-5526S#show ip route
Total route items is 5, the matched route items is 5
Codes: C - connected, S - static, R - RIP derived, O - OSPF derived
A - OSPF ASE, B - BGP derived, D - DVMRP derived
DestinationMaskNexthopInterfacePreference
S192.168.10.0255.255.255.0192.168.100.1Vlan1011
S192.168.20.0255.255.255.0192.168.100.1Vlan1011
C192.168.30.0255.255.255.00.0.0.0Vlan300
C192.168.40.0255.255.255.00.0.0.0Vlan400
C192.168.100.0255.255.255.00.0.0.0Vlan1010
DCRS-5526S#
第六步:验证PC之间是否连通?
PC |
端口 |
PC |
端口 |
结果 |
原因 |
PC1 |
A:1/1 |
PC2 |
A:1/9 |
通 |
|
PC1 |
A:1/1 |
Vlan 100 |
A:1/24 |
通 |
|
PC1 |
A:1/1 |
Vlan 101 |
B:0/0/24 |
通 |
|
PC1 |
A:1/1 |
PC3 |
B:0/0/1 |
通 |
七、注意事项和排错
1、PC机一定要配置正确的网关,否则不能正常通信;
2、两台交换机级联的端口可以在同一vlan,也可以在不同vlan。
八、配置序列
略
九、共同思考
1、如果把交换机B上的vlan30改成vlan10,请问两台交换机上的vlan10是同一个VLAN么?
2、第四步中,PC1 ping vlan101以及PC1 ping PC3都不通,其原因各是什么?
十、课后练习
1、在交换机A和交换机B上分别划分基于端口的VLAN:
交换机 |
VLAN |
端口成员 |
交换机A |
10 |
2~8 |
20 |
9~16 |
|
100 |
1 |
|
交换机B |
10 |
2~8 |
40 |
9~16 |
|
100 |
1 |
2、交换机A和B通过的24口级联。
3、配置交换机A和B各VLAN虚拟接口的IP地址分别如下表所示:
VLAN10_A |
VLAN20 |
VLAN10_B |
VLAN40 |
VLAN100_A |
VLAN10_B |
10.1.10.1 |
10.1.20.1 |
10.1.30.1 |
10.1..40.1 |
10.1.100.1 |
10.1.100.2 |
4、PC1-PC4的网络设置为:
设备 |
IP地址 |
gateway |
Mask |
PC1 |
10.1.10.2 |
10.1.10.1 |
255.255.255.0 |
PC2 |
10.1.20.2 |
110.1.20.1 |
255.255.255.0 |
PC3 |
10.1.30.2 |
10.1.30.1 |
255.255.255.0 |
PC4 |
10.1.40.2 |
10.140.1 |
255.255.255.0 |
5、要求PC之间都可以通信
十一、相关配置命令详解
ip route
命令:ip route
no ip route
功能:配置静态路由;本命令的no操作为删除静态路由。
参数:
缺省情况:DCRS-7604三层交换机的静态路由缺省优先级为1。
命令模式:全局配置模式
使用指南:在配置静态路由的下一跳时,可采用指定路由数据包发送下一跳IP地址方式。
DCRS-7604三层交换机的各种路由类型缺省的preference为:
路由类型 |
Preference值 |
直连路由 |
0 |
静态路由 |
1 |
OSPF |
110 |
RIP |
120 |
IBEP |
200 |
EBGP |
20 |
在不改变各种路由优先级值的情况下,直连路由优先级最高,依次是静态路由、EBGP、OSPF、RIP、IBGP。
举例:
例1.添加一条静态路由。
Switch(config)#ip route1.1.1.0 255.255.255.0 2.1.1.1
例2.添加缺省路由。
Switch(config)#ip route0.0.0.0 0.0.0.0 2.2.2.1
show ip route
命令:show ip route [dest <destination>] [mask <destMask>] [nextHop <nextHopValue>] [protocol {connected | static | rip| ospf | ospf_ase | bgp | dvmrp}] [<vlan-id>] [preference <pref>] [count]
功能:显示路由表。
参数:<destination>为目标网络地址;<destMask>为目标网络的掩码;<nextHopValue>为下一跳IP地址;connected为直连路由;static为静态路由;rip为RIP路由;ospf为OSPF路由;ospf_ase为OSPF引入的路由;bgp为BGP路由;dvmrp为DVMRP路由;<vlan-id>为Vlan标识符;<pref>为路由优先级,取值范围为0~255;count为显示IP路由表项数量信息。
命令模式:特权用户配置模式
使用指南:显示核心路由表的内容,包括:路由类型、目的网络、掩码、下一跳地址、接口等。