企业官网建设流程全解析

1.配置lsw1交换机(lsw2方法相同)

[sw1]stp enable

[sw1]stp mode mstp

[sw1]stp region-configuration

[sw1-mst-region]region-name aa

[sw1-mst-region]instance 1 vlan 2

[sw1-mst-region]instance 2 vlan 3

[sw1-mst-region]active region-configuration

[sw1-mst-region]q

[sw1]stp instance 1 root primary

[sw1]stp instance 2 root secondary

[sw1]interface Vlanif 2

[sw1-Vlanif2]ip address 172.16.0.1 26

[sw1-Vlanif2]vrrp vrid 1 virtual-ip 172.16.0.62

[sw1-Vlanif2]vrrp vrid 1 priority 120

[sw1-Vlanif2]vrrp vrid 1 track interface GigabitEthernet 0/0/5 reduced 30

[sw1-Vlanif2]q

[sw1]interface Vlanif 3

[sw1-Vlanif3]ip address 172.16.0.65 26

[sw1-Vlanif3]vrrp vrid 2 virtual-ip 172.16.0.126

[sw1-Vlanif3]q

[sw1]dhcp enable

[sw1]ip pool aa

[sw1-ip-pool-aa]network 172.16.0.0 mask 26

[sw1-ip-pool-aa]gateway-list 172.16.0.62

[sw1-ip-pool-aa]dns-list 8.8.8.8

[sw1-ip-pool-aa]q

[sw1]ip pool bb

[sw1-ip-pool-bb]network 172.16.0.64 mask 2

[sw1-ip-pool-bb]gateway-list172.16.0.126

[sw1-ip-pool-bb]dns-list 8.8.8.8

[sw1-ip-pool-bb]q

[sw1]interface Vlanif 2

[sw1-Vlanif2]dhcp select global

[sw1-Vlanif2]q

[sw1]interface Vlanif 3

[sw1-Vlanif3]dhcp select global

[sw1-Vlanif3]q

[sw1]interface Vlanif 10

[sw1-Vlanif10]ip address 172.16.0.129 26

[sw1-Vlanif10]q

[sw1]ip route-static 0.0.0.0 0 172.16.0.130

2.配置lsw3交换机(lsw4方法相同)

[sw3]stp enable

[sw3]stp mode mstp

[sw3]stp region-configuration

[sw3-mst-region] region-name aa

[sw3-mst-region] instance 1 vlan 2

[sw3-mst-region] instance 2 vlan 3

[sw3-mst-region] active region-configuration

[sw3-mst-region]q

[sw3]port-group group-member GigabitEthernet 0/0/3 to GigabitEthernet 0/0/4

[sw3-port-group]stp edged-port enable

[sw3-GigabitEthernet0/0/3]stp edged-port enable

[sw3-GigabitEthernet0/0/4]stp edged-port enable

[sw3-port-group]q

[sw3]stp bpdu-protection

配置AR1路由器

[ar1]interface GigabitEthernet 0/0/1

[ar1-GigabitEthernet0/0/1]q

[ar1]interface GigabitEthernet 0/0/0

[ar1-GigabitEthernet0/0/0]ip address 172.16.0.130 26

[ar1-GigabitEthernet0/0/0]q[ar1]interface GigabitEthernet 0/0/1

[ar1-GigabitEthernet0/0/1]ip address 172.16.0.194 26

[ar1-GigabitEthernet0/0/1]int g 0/0/2

[ar1-GigabitEthernet0/0/2]ip address 12.0.0.1 24

[ar1-GigabitEthernet0/0/2]q[ar1]ip route-static 172.16.0.0 26 172.16.0.129

[ar1]ip route-static 172.16.0.0 26 172.16.0.19

[ar1]ip route-static 172.16.0.64 26 172.16.0.129

[ar1]ip route-static 172.16.0.64 26 172.16.0.193

[ar1]ip route-static 0.0.0.0 0 12.0.0.2

[ar1]acl 2000

[ar1-acl-basic-2000]rule permit source 172.16.0.0 0.0.0.255

[ar1-acl-basic-2000] q

[ar1]interface GigabitEthernet 0/0/2

[ar1-GigabitEthernet0/0/2]nat outbound 2000

配置ISP

[isp]interface GigabitEthernet 0/0/0

[isp-GigabitEthernet0/0/0]ip address 12.0.0.2 24

[isp-GigabitEthernet0/0/0]int l 10

[isp-LoopBack10]ip address 2.2.2.2 24

[isp-LoopBack10]q

主机

pc1

pc2