Cisco-三層VLAN＋DHCP中繼實驗案例
阿新 • • 發佈：2022-04-12
三層VLAN+DHCP實驗案例
說明：某公司有三個部門，劃分三個VLAN進行隔離，IP地址通過vlan40中的DHCP伺服器進行下發，保證各個部門的主機獲取到IP地址，通過三層交換機的路由訪問外部網路。
IP地址規劃表
| 裝置 | 介面 | 地址 |
|---|---|---|
| Switch31 | VLAN 10 | 192.168.10.254/24 |
| Switch31 | VLAN 20 | 192.168.20.254/24 |
| Switch31 | VLAN 30 | 192.168.30.254/24 |
| Switch31 | VLAN 40 | 192.168.40.254/24 |
| Switch31 | FastEthernet0/4 | 200.100.10.1/30 |
| R1 | GigabitEthernet0/0 | 200.100.20.1/24 |
| R1 | GigabitEthernet0/1 | 200.100.10.2/30 |
| DHCP-Server | FastEthernet0 | 192.168.40.1/24 |
| PC0 | FastEthernet0 | 200.100.20.1/24 |
| PC1-3 | FastEthernet0 | DHCP獲取 |
| PC4-6 | FastEthernet0 | DHCP獲取 |
| PC7-9 | FastEthernet0 | DHCP獲取 |
介面規劃表
| 本端裝置 | 介面 | 埠型別 | 對端裝置 | 介面 |
|---|---|---|---|---|
| Switch31 | FastEthernet0/1 | Trunk | Switch0 | FastEthernet0/4 |
| Switch31 | FastEthernet0/2 | Trunk | Switch1 | FastEthernet0/4 |
| Switch31 | FastEthernet0/3 | Trunk | Switch2 | FastEthernet0/4 |
| Switch31 | FastEthernet0/4 | Access | DHCP-Server | |
| Switch31 | FastEthernet0/5 | R1 | GigabitEthernet0/1 | |
| R1 | GigabitEthernet0/0 | PC0 | FastEthernet0 | |
| Switch0 | FastEthernet0/1 | Access | PC1 | FastEthernet0 |
| Switch0 | FastEthernet0/2 | Access | PC2 | FastEthernet0 |
| Switch0 | FastEthernet0/3 | Access | PC3 | FastEthernet0 |
| Switch1 | FastEthernet0/1 | Access | PC4 | FastEthernet0 |
| Switch1 | FastEthernet0/1 | Access | PC5 | FastEthernet0 |
| Switch1 | FastEthernet0/1 | Access | PC6 | FastEthernet0 |
| Switch2 | FastEthernet0/1 | Access | PC7 | FastEthernet0 |
| Switch2 | FastEthernet0/1 | Access | PC8 | FastEthernet0 |
| Switch2 | FastEthernet0/1 | Access | PC9 | FastEthernet0 |
專案實施
一、配置各介面所屬VLAN和地址
#Switch31的配置
Switch31(config)#vlan 10
Switch31(config-vlan)#vlan 20
Switch31(config-vlan)#vlan 30
!
Switch31(config)interface FastEthernet0/1
Switch31(config-if)switchport mode trunk
Switch31(config-if)#switchport trunk allowed vlan 10
!
Switch31(config)interface FastEthernet0/2
Switch31(config-if)switchport mode trunk
Switch31(config-if)#switchport trunk allowed vlan 20
!
Switch31(config)interface FastEthernet0/3
Switch31(config-if)switchport mode trunk
Switch31(config-if)#switchport trunk allowed vlan 30
!
Switch31(config)interface FastEthernet0/4
Switch31(config-if)#no switchport
Switch31(config-if)#ip address 200.100.10.1 255.255.255.0
!
Switch31(config)interface FastEthernet0/5
Switch31(config-if)switchport mode access
Switch31(config-if)#switchport access vlan 40
!
Switch31(config)#int vlan 10
Switch31(config-if)#ip address 192.168.10.254 255.255.255.0
!
Switch31(config)#int vlan 20
Switch31(config-if)#ip address 192.168.20.254 255.255.255.0
!
Switch31(config)#int vlan 30
Switch31(config-if)#ip address 192.168.30.254 255.255.255.0
!
Switch31(config)#int vlan 40
Switch31(config-if)#ip address 192.168.40.254 255.255.255.0
R1的配置
Router1(config)#interface GigabitEthernet0/0
Router1(config-if)#ip address 200.100.20.1 255.255.255.0
!
Router1(config)#interface GigabitEthernet0/1
Router1(config-if)#ip address 200.100.10.2 255.255.255.0
Switch1的配置
Switch0(config)#vlan 10
Switch0(config-vlan)#exit
!
Switch0(config)#interface FastEthernet0/4
Switch0(config-if)#switchport mode trunk
Switch0(config-if)#switchport trunk allowed vlan 10
!
Switch0(config)#interface range fa0/1 - fa0/3
Switch0(config-if-range)#switchport mode access
Switch0(config-if-range)#switchport access vlan 10
Switch2的配置
Switch0(config)#vlan 20
Switch0(config-vlan)#exit
!
Switch0(config)#interface FastEthernet0/4
Switch0(config-if)#switchport mode trunk
Switch0(config-if)#switchport trunk allowed vlan 20
!
Switch0(config)#interface range fa0/1 - fa0/3
Switch0(config-if-range)#switchport mode access
Switch0(config-if-range)#switchport access vlan 20
Switch3的配置
Switch0(config)#vlan 30
Switch0(config-vlan)#exit
!
Switch0(config)#interface FastEthernet0/4
Switch0(config-if)#switchport mode trunk
Switch0(config-if)#switchport trunk allowed vlan 30
!
Switch0(config)#interface range fa0/1 - fa0/3
Switch0(config-if-range)#switchport mode access
Switch0(config-if-range)#switchport access vlan 30
二、配置DHCP伺服器
翻譯乃個人理解，並非純翻譯！！！
三、配置DHCP中繼
此拓撲中DHCP中繼的作用是為了實現在不同子網中實現轉發DHCP資訊的功能。
#Switch31的配置
Switch31(config)#int vlan 10
Switch31(config-if)#ip address 192.168.10.254 255.255.255.0
Switch31(config-if)#ip helper-address 192.168.40.1
!
Switch31(config)#int vlan 20
Switch31(config-if)#ip address192.168.20.254 255.255.255.0
Switch31(config-if)#ip helper-address 192.168.40.1
!
Switch31(config)#int vlan 30
Switch31(config-if)#ip address 192.168.30.254 255.255.255.0
Switch31(config-if)#ip helper-address 192.168.40.1
四、配置路由實現內部網路訪問外部網路
#Switch31的配置
Switch31(config)#ip route 0.0.0.0 0.0.0.0 200.100.10.2
R1的配置
Router1(config)#ip route 192.168.0.0 255.255.0.0 200.100.10.1
專案效果
VLAN 10內DHCP下發地址的效果
VLAN 20內地址下發的效果
VLAN 30內DHCP下發地址的效果
DHCP中繼效果
路由的效果