青鸟第七章实验步骤.doc

第七章设备配置信息如下：
Sw1：
sw1>en
sw1#config t
sw1(config)#enable password testbenet
sw1(config)#username benet password test
sw1(config)#access-list 1 permit 10.255.1.0 0.0.0.255
sw1(config)#line vty 0 4
sw1(config-line)#login local
sw1(config-line)#access-class 1 in
sw1(config-line)#exit
sw1(config)#in vlan 1
sw1(config-if)#ip add 10.255.50.1 255.255.255.0
sw1(config-if)#no sh
sw1(config)#in range f0/14 - 15
sw1(config-if-range)#switchport mode trunk
sw1(config-if-range)#channel-group 1 mode on
sw1(config-if-range)#exit
sw1(config)#in f0/0
sw1(config-if)#no switchport
sw1(config-if)#ip add 10.255.0.50 255.255.255.252
sw1(config-if)#no sh
sw1(config-if)#exit
sw1(config)#ip route 10.64.0.0 255.192.0.0 10.255.0.49
sw1(config)#ip route 10.64.0.0 255.192.0.0 10.255.50.2 50
sw1(config)#end
sw1#vlan database
sw1(vlan)#vlan 2 na
sw1(vlan)#vlan 2 name server
VLAN 2 added:

Name: server
sw1(vlan)#vlan 50 name network
VLAN 50 added:
Name: network
sw1(vlan)#exit
APPLY completed.
Exiting....
sw1#config t
sw1(config)#in f0/1
sw1(config-if)#switchport mode trunk
sw1(config-if)#switchport trunk allowed vlan romove2-1001
sw1(config-if)#sw
sw1(config-if)#switchport t
sw1(config-if)#switchport trunk all
sw1(config-if)#switchport trunk allowed vlan add 2
sw1(config-if)#switchport trunk allowed vlan add 50
sw1#config t
sw1(config)#in vlan 2
sw1(config-if)#ip add 10.0.0.1 255.255.255.0
sw1(config-if)#no sh
sw1(config-if)#in vlan 50
sw1(configif)#ip add 10.255.1.1 255.255.255.0
sw1(config-if)#no sh
sw1(config-if)#in vlan 2
sw1(config-if)#standby 2 ip 10.0.0.254
sw1(config-if)#standby 2 priority 150
sw1(config-if)#standby 2 preempt
sw1(config-if)#standby 2 track f0/1 100
sw1(config)#in vlan 50
sw1(config-if)#standby 50 ip 10.2551.254
sw1(config-if)#standby 50 preempt
sw1(config-if)#exit
sw1(config)#spanning-tree vlan 2 root primary
sw1(config)#spanning-tree vlan 20 root secondary

Sw2:
Sw2>en
Sw2#config t
sw2(config)#enable password testbenet
sw2(config)#username benet password test
sw2(config)#access-list 1 permit 10.255.1.0 0.0.0.255
sw2(config)#line vty 0 4
sw2(config-line)#login local
sw2(config-line)#access-class 1 in
sw2(config-line)#exit
sw2(config)#in vlan 1
sw2(config-if)#ip add 1.255.50.2 255.255.255.0
sw2(config-if)#no sh
sw2(config-if)#exit
sw2(config)#in range f0/14 - 15
sw2config-if-range)#switchport mode trunk
sw2(config-if-range)#channel-group 1 mode on
sw2(config-if-range)#exit
sw2(config)#in f0/0
sw2(config)#no switchport
sw2(config-if)#ip add 10.255.0.54 255.255.255.252
sw2(config-if)#no sh
sw2(config-if)#exit
sw2(config)#ip route 10.64.0.0 255.192.0.0 10.255.0.53
sw2(config)#ip route 10.64.0.0 255.192.0.0 10.255.50.1 50
sw2#vlan database
sw2(vlan)#vlan 2 na
sw2(vlan)#vlan 2 name server
VLAN 2 added:
Name: server
sw1(vlan)#vlan 50 name network
VLAN 50 added:
Name: network
sw1(vlan)#exit
APPLY completed.
Exiting....
Sw2#config t
Sw2(config)#in f0/1
Sw2(config-if)#switchport mode trunk
Sw2(config-if)#switchport trunk allowed vlan romove2-1001
Sw2(config-if)#switchport trunk allowed vlan add 2
Sw2(config-if)#switchport trunk allowed vlan add 50
sw2(config)#in vlan 2
sw2(config-if)#ip add
sw2(config-if)#ip add 100.0.2 255.255.255.0
sw2(config-if)#no sh
sw2(config-if)#in vlan 50
sw2(config-if)#ip add 10.255.1.2 255.255.255.0
sw2(config-if)#no sh
sw2(config-if)#in vlan 2
sw2(config-if)#standby 2 ip 10.0.0.254
sw2(config-if)#standby 2 preempt
sw2(config-if)#in vlan 50
sw2(config-if)#standby 50 ip 10.255.1.254
sw2(config-if)#standby 50 priority 150
sw2(config-if)#standby 50 preempt
sw2(config-if)#standby 50 track f0/1 100
sw2(config-if)#exit
sw2(config)#spanning-tree vlan 2 root secondary
sw2(config)#spanning-tree vlan 50 root primary

Sw3:
Sw3>en
Sw3#config t
Sw3(config)enable password testbenet
Sw3(config)#username benet password test
Sw3(config)#access-list 1 permit 10.255.1.0 0.0.0.255
Sw3(config)#line vty 0 4
Sw3(config-line)#login local
Sw3(config-line)#access-class 1 in
sw3(config-line)#exit
sw3(config)#in vlan 1
sw3(config-if)#ip add 10.255.100.1 255.255.255.0
sw3(config-if)#no sh
sw3(config-if)#exit
sw3(config)#in f0/0
sw3(config-if)#no switchport
sw3(config-if)#ip add 10.255.0.49 255.255.255.252
sw3(config-if)#no sh
sw3(config-if)#exit
sw3(config)#in f0/1
sw3(config-if)#no switchport
sw3(config-if)#ip add 10.255.0.53 255.255.255.252
sw3(config-if)#no sh
sw3(config-if)#exit
sw3#vlan database
sw3(vlan)#vlan 550 name ssl-bd01
VLAN 550 added:
Name: ssl-bd01
sw3(vlan)#vlan 551 name ssl-bd02
VLAN 551 added:
Name: ssl-bd02
sw3(vlan)#vtp server
sw3(vlan)#vtp domain benet
sw3(vlan)#vtp password test
sw3(vlan)#vtp pruning
sw3(vlan)#exit
sw3#config t
sw3(config)#in range f0/14 - 15
sw3(config-if-range)#switchport mode trunk
sw3(config-if-range)#exit
sw3(config)#in f0/14
sw3(config-if)#switchport trunk allowed vlan remove 2-1001
sw3(config-if)#switchport trunk allowed vlan add 550
sw3(config-if)#in f0/15
sw3(config-if)#switchport trunk allowed vlan remove 2-1001
sw3(config-if)#switchport trunk allowed vlan add 551
sw3(config-if)#exit
sw3(config)#in vlan 550
sw3(config-if)#ip add 10.80.255.254 255.255.0.0
sw3(config-if)#no sh
sw3(config-if)#in vlan 551
sw3(config-if)#ip add 10.81.255.254 255.255.0.0
sw3(config-if)#no sh
sw3#config t
sw3(config)#access-list 100 deny icmp any 10.255.0.0 0.0.255.255
sw3(config)#access-list 100 permit ip 10.80.0.0 0.0.255.255 host 10.0.0.10
sw3(config)#$ 100 permit icmp 10.80.0.0 0.0.255.255 host 10.80.255.254
sw3(config)#access-list 100 deny ip any 10.0.0.0 0.255.255.255
sw3(config)#access-list 100 permit ip any any
sw3(config)#access-list 101 deny icmp any 10.255.0.0 0.0.255.255
sw3(config)#access-list 101 permit ip 10.81.0.0 0.0.255.255 host 10.0.0.10
sw3(config)#$ 101 permit icmp 10.81.0.0 0.0.255.255 host 10.81.255.254
sw3(config)#access-list 101 deny ip any 10.0.0.0 0.255.255.255
sw3(config)#access-list 101 permit ip any any
sw3(config)#in vlan 550
sw3(config-if)#ip access-group 100 in
sw3(config-if)#in vlan 551
sw3(config-if)#ip access-group 101 in

Sw4:
Sw4>en
Sw4#config t
Sw4(config)#enable password testbenet
Sw4(config)#username benet password test
Sw4(config)#access-list 1 permit 10.255.1.0 0.0.0.255
Sw4(config)#line vty 0 4
Sw4(config-line)#login local
Sw4(config-line)#access-class 1 in
Sw4(config-line)#exit
Sw4(config)#no ip routing
sw4(config)#in vlan 1
sw4(config-if)#ip add 10.255.50.55 255.255.255.0
sw4(config-if)#no sh
sw4(config-if)#exit
sw4#vlan da
sw4(vlan)#vlan 2 name server
VLAN 2 added:
Name: server
sw4(vlan)#vlan 50 name network
VLAN 50 added:
Name: network
sw4(vlan)#exit
sw4#config t
sw4(config)#in f0/0
sw4(config-if)#switchport mode trunk
sw4(config-if)#switchport trunk allowed vlan remove 2-1001
sw4(config-if)#switchport trunk allowed vlan add 2,50
sw4(config-if)#in f0/1
sw4(config-if)#switchport mode trunk
sw4(config-if)#switchport trunk allowed vlan remove 2-1001
sw4(config-if)#switchport trunk allowed vlan add 2,50
sw4(config-if)#in f0/15
sw4(config-if)#switchport access vlan 2
sw4(config-if)#in f0/14
sw4(config-if)#switchport access vlan 50

Sw5:
Sw5>en
Sw5#config t
Sw5(config)#enable password testbenet
Sw5(config)#username benet password test
Sw5(config)#access-list 1 permit 10.255.1.0 0.0.0.255
Sw5(config)#line vty 0 4
Sw5(config-line)#login local
Sw5(config-line)#access-class 1 in
Sw5(config-line)#exit
Sw5(config)#no ip routing
sw5(config)#in vlan 1
sw5(config-if)#ip add 10.255.100.80 255.255.255.
sw5(config-if)#no sh
sw5(config-if)#exit
sw5#vlan database
sw5(vlan)#vtp c
sw5(vlan)#vtp client
sw5(vlan)#vtp domain benet
sw5(vlan)#vtp password test
sw5#config t
sw5(config)#in f0/14
sw5(config-if)#switchport mode trunk
sw5(config-if)#switchport trunk allowed vlan remove 2-1001
sw5(config-if)#switchport trunk allowed vlan add 550
sw5(config)#in f0/0
sw5(config-if)#switchport mode trunk
sw5(config-if)#switchport trunk allowed vlan add 550

Sw6:
Sw6>en
Sw6#config t
Sw6(config)#enable password testbenet
Sw6(config)#username benet password test
Sw6(config)#access-list 1 permit 10.255.1.0 0.0.0.255
Sw6(config)#line vty 0 4
Sw6(config-line)#login local
Sw6(config-line)#access-class 1 in
Sw6(config-line)#exit
sw6(config)#no ip routing
sw6(config)#in vlan 1
sw6(config-if)#ip add 10.255.100.81 255.255.255.0
sw6(config-if)#no sh
sw6(config-if)#exit
sw6#vlan da
sw6(vlan)#vtp domain benet
sw6(vlan)#vtp password test
sw6(vlan)#exit
APPLY completed.
Exiting....
sw6#config t
sw6(config)#in f0/15
sw6(config-if)#switchport mode trunk
sw6(config-if)#switchport trunk allowed vlan remove 2-1001
sw6(config-if)#switchport trunk allowed vlan add 551
sw6(config-if)#in f0/0
sw6(config-if)#switchport mode trunk
sw6(config-if)#switchport trunk allowed vlan add 551