织梦模仿网站视频,主机屋 WordPress 问题 多,如何做百度竞价推广,电子商务网站建设的规划背景
某学校为满足日常教学生活需求#xff0c;推动数字校园的建设#xff0c;学校有办公楼和学生宿舍楼和服务器集群三块区域#xff0c;请合理规划IP地址和VLAN#xff0c;实现企业内部能够互联互通现要求外网能通过公网地址访问服务器集群#xff0c;学生和老师能正常…
背景
某学校为满足日常教学生活需求推动数字校园的建设学校有办公楼和学生宿舍楼和服务器集群三块区域请合理规划IP地址和VLAN实现企业内部能够互联互通现要求外网能通过公网地址访问服务器集群学生和老师能正常上网。 要求配置VRRPMSTP达成链路负载分担解决单点故障问题。同时在出口路由器上实现NAT地址转换使企业内部主机使用ISP提供的内部全局地址访问外网环境提高网络整体的安全性。
实验拓扑 配置要求
(1)三种类型主机群分别在不同网段、不同 VLAN,实现 VLAN间通信其中学生宿舍使用DHCP动态获取IP地址办公楼和服务群采用静态IP地址; (2)LSW1和LSW2为接入交换机LSW3和LSW4为核心交换机AR1为出口路由器; (3)学生宿舍楼和办公楼属于MSTP实例1VRRP主路由器为LSW3备份路由器为LSW4; (4)服务器群属于MSTP实例2VRRP主路由器为 LSW4,备份路由器为 LSW3; (5)使用LACP模式实现LSW3与LSW4的链路聚合并设置2条活动链路1条备份链路; (6)外网服务器IP地址为100.100.100.100/24; (7)合理规划核心交换机和路由器之间的互联地址; (8)访问控制要求:内网访问外网映射为出口路由器接口 IP 地址。
实验配置
链路聚合
常规操作改模式划分接口改活动链路 划分vlan
创vlan交换机相接trunk放行相关与路由器相接按拓扑划分
V b 10 20 30 40 90
P l t
P t a v 10 20 30 40 90
MSTP
stp region-configuration
region-name hhh
revision-level 1
instance 1 vlan 10 20
instance 2 vlan 90
active region-configuration 可以看到流量被正确引流至VRRP主设备
配置IP
依图配置省略 、 VRRP设置 SW1为vlan10 20 主vlan90 备
OSPF配置 内网可通
DHCP配置
IP拿到地址dhcp中继正常 NAT配置
内网可通服务器
内网接口nat server protocol tcp global interface g 0/0/2外网接口 80 inside 192.168.2.12 80
acl 3000
rule 5 permit ip source 192.168.90.0 0.0.0.255 destination 100.100.100.0 80
nat outbound 3000
外网接口nat server protocol tcp global current-interface 80 inside 192.168.90.1 www
静态映射绑定服务器80端口 全局配置
SW1
#sysname SW1#vlan batch 10 20 30 40 90#stp instance 1 root primarystp instance 2 root secondary#cluster enablentdp enablendp enable#drop illegal-mac alarm#dhcp enable#diffserv domain default#stp region-configurationregion-name hhhrevision-level 1instance 1 vlan 10 20instance 2 vlan 90active region-configuration#drop-profile default#aaaauthentication-scheme defaultauthorization-scheme defaultaccounting-scheme defaultdomain defaultdomain default_adminlocal-user admin password simple adminlocal-user admin service-type http#interface Vlanif1#interface Vlanif10ip address 192.168.10.10 255.255.255.0vrrp vrid 10 virtual-ip 192.168.10.254vrrp vrid 10 priority 120vrrp vrid 10 track interface GigabitEthernet0/0/2 reduced 40dhcp select relaydhcp relay server-ip 192.168.30.2dhcp relay server-ip 192.168.40.2#interface Vlanif20ip address 192.168.20.10 255.255.255.0vrrp vrid 20 virtual-ip 192.168.20.254vrrp vrid 20 priority 120vrrp vrid 20 track interface GigabitEthernet0/0/2 reduced 40#interface Vlanif30ip address 192.168.30.1 255.255.255.252#interface Vlanif90ip address 192.168.90.10 255.255.255.0vrrp vrid 90 virtual-ip 192.168.90.254#interface MEth0/0/1#interface Eth-Trunk1port link-type trunkport trunk allow-pass vlan 10 20 30 40 90mode lacp-staticmax active-linknumber 2#interface GigabitEthernet0/0/1port link-type trunkport trunk allow-pass vlan 10 20 30 40 90#interface GigabitEthernet0/0/2port link-type accessport default vlan 30#interface GigabitEthernet0/0/3port link-type trunkport trunk allow-pass vlan 10 20 30 40 90#interface GigabitEthernet0/0/4#interface GigabitEthernet0/0/5#interface GigabitEthernet0/0/6#interface GigabitEthernet0/0/7#interface GigabitEthernet0/0/8#interface GigabitEthernet0/0/9#interface GigabitEthernet0/0/10#interface GigabitEthernet0/0/11#interface GigabitEthernet0/0/12#interface GigabitEthernet0/0/13#interface GigabitEthernet0/0/14#interface GigabitEthernet0/0/15#interface GigabitEthernet0/0/16#interface GigabitEthernet0/0/17#interface GigabitEthernet0/0/18#interface GigabitEthernet0/0/19#interface GigabitEthernet0/0/20#interface GigabitEthernet0/0/21#interface GigabitEthernet0/0/22eth-trunk 1#interface GigabitEthernet0/0/23eth-trunk 1#interface GigabitEthernet0/0/24eth-trunk 1#interface NULL0#ospf 1area 0.0.0.1network 0.0.0.0 255.255.255.255#user-interface con 0user-interface vty 0 4#return
SW2
#sysname SW2#vlan batch 10 20 30 40 90#stp instance 1 root secondarystp instance 2 root primary#cluster enablentdp enablendp enable#drop illegal-mac alarm#dhcp enable#diffserv domain default#stp region-configurationregion-name hhhrevision-level 1instance 1 vlan 10 20instance 2 vlan 90active region-configuration#drop-profile default#aaaauthentication-scheme defaultauthorization-scheme defaultaccounting-scheme defaultdomain defaultdomain default_adminlocal-user admin password simple adminlocal-user admin service-type http#interface Vlanif1#interface Vlanif10ip address 192.168.10.11 255.255.255.0vrrp vrid 10 virtual-ip 192.168.10.254dhcp select relaydhcp relay server-ip 192.168.30.2dhcp relay server-ip 192.168.40.2#interface Vlanif20ip address 192.168.20.11 255.255.255.0vrrp vrid 20 virtual-ip 192.168.20.254#interface Vlanif40ip address 192.168.40.1 255.255.255.252#interface Vlanif90ip address 192.168.90.11 255.255.255.0vrrp vrid 90 virtual-ip 192.168.90.254vrrp vrid 90 priority 120vrrp vrid 90 track interface GigabitEthernet0/0/2 reduced 40#interface MEth0/0/1#interface Eth-Trunk1port link-type trunkport trunk allow-pass vlan 10 20 30 40 90mode lacp-staticmax active-linknumber 2#interface GigabitEthernet0/0/1port link-type trunkport trunk allow-pass vlan 10 20 30 40 90#interface GigabitEthernet0/0/2port link-type accessport default vlan 40#interface GigabitEthernet0/0/3port link-type trunkport trunk allow-pass vlan 10 20 30 40 90#interface GigabitEthernet0/0/4#interface GigabitEthernet0/0/5#interface GigabitEthernet0/0/6#interface GigabitEthernet0/0/7#interface GigabitEthernet0/0/8#interface GigabitEthernet0/0/9#interface GigabitEthernet0/0/10#interface GigabitEthernet0/0/11#interface GigabitEthernet0/0/12#interface GigabitEthernet0/0/13#interface GigabitEthernet0/0/14#interface GigabitEthernet0/0/15#interface GigabitEthernet0/0/16#interface GigabitEthernet0/0/17#interface GigabitEthernet0/0/18#interface GigabitEthernet0/0/19#interface GigabitEthernet0/0/20#interface GigabitEthernet0/0/21#interface GigabitEthernet0/0/22eth-trunk 1#interface GigabitEthernet0/0/23eth-trunk 1#interface GigabitEthernet0/0/24eth-trunk 1#interface NULL0#ospf 1area 0.0.0.0area 0.0.0.2network 0.0.0.0 255.255.255.255#user-interface con 0user-interface vty 0 4#returnSW3#sysname SW3#vlan batch 10 20 30 40 90#cluster enablentdp enablendp enable#drop illegal-mac alarm#diffserv domain default#stp region-configurationregion-name hhhrevision-level 1instance 1 vlan 10 20instance 2 vlan 90active region-configuration#drop-profile default#aaaauthentication-scheme defaultauthorization-scheme defaultaccounting-scheme defaultdomain defaultdomain default_adminlocal-user admin password simple adminlocal-user admin service-type http#interface Vlanif1#interface MEth0/0/1#interface Ethernet0/0/1port link-type accessport default vlan 10#interface Ethernet0/0/2port link-type accessport default vlan 10#interface Ethernet0/0/3port link-type accessport default vlan 20#interface Ethernet0/0/4#interface Ethernet0/0/5#interface Ethernet0/0/6#interface Ethernet0/0/7#interface Ethernet0/0/8#interface Ethernet0/0/9#interface Ethernet0/0/10#interface Ethernet0/0/11#interface Ethernet0/0/12#interface Ethernet0/0/13#interface Ethernet0/0/14#interface Ethernet0/0/15#interface Ethernet0/0/16#interface Ethernet0/0/17#interface Ethernet0/0/18#interface Ethernet0/0/19#interface Ethernet0/0/20#interface Ethernet0/0/21#interface Ethernet0/0/22#interface GigabitEthernet0/0/1port link-type trunkport trunk allow-pass vlan 10 20 30 40 90#interface GigabitEthernet0/0/2port link-type trunkport trunk allow-pass vlan 10 20 30 40 90#interface NULL0#user-interface con 0user-interface vty 0 4#return
SW3
#
sysname SW3
#
vlan batch 10 20 30 40 90
#
cluster enable
ntdp enable
ndp enable
#
drop illegal-mac alarm
#
diffserv domain default
#
stp region-configurationregion-name hhhrevision-level 1instance 1 vlan 10 20instance 2 vlan 90active region-configuration
#
drop-profile default
#
aaaauthentication-scheme defaultauthorization-scheme defaultaccounting-scheme defaultdomain defaultdomain default_adminlocal-user admin password simple adminlocal-user admin service-type http
#
interface Vlanif1
#
interface MEth0/0/1
#
interface Ethernet0/0/1port link-type accessport default vlan 10
#
interface Ethernet0/0/2port link-type accessport default vlan 10
#
interface Ethernet0/0/3port link-type accessport default vlan 20
#
interface Ethernet0/0/4
#
interface Ethernet0/0/5
#
interface Ethernet0/0/6
#
interface Ethernet0/0/7
#
interface Ethernet0/0/8
#
interface Ethernet0/0/9
#
interface Ethernet0/0/10
#
interface Ethernet0/0/11
#
interface Ethernet0/0/12
#
interface Ethernet0/0/13
#
interface Ethernet0/0/14
#
interface Ethernet0/0/15
#
interface Ethernet0/0/16
#
interface Ethernet0/0/17
#
interface Ethernet0/0/18
#
interface Ethernet0/0/19
#
interface Ethernet0/0/20
#
interface Ethernet0/0/21
#
interface Ethernet0/0/22
#
interface GigabitEthernet0/0/1port link-type trunkport trunk allow-pass vlan 10 20 30 40 90
#
interface GigabitEthernet0/0/2port link-type trunkport trunk allow-pass vlan 10 20 30 40 90
#
interface NULL0
#
user-interface con 0
user-interface vty 0 4
#
return
SW4
#sysname SW4#vlan batch 10 20 30 40 90#cluster enablentdp enablendp enable#drop illegal-mac alarm#diffserv domain default#stp region-configurationregion-name hhhrevision-level 1instance 1 vlan 10 20instance 2 vlan 90active region-configuration#drop-profile default#aaaauthentication-scheme defaultauthorization-scheme defaultaccounting-scheme defaultdomain defaultdomain default_adminlocal-user admin password simple adminlocal-user admin service-type http#interface Vlanif1#interface MEth0/0/1#interface Ethernet0/0/1port link-type accessport default vlan 90#interface Ethernet0/0/2#interface Ethernet0/0/3#interface Ethernet0/0/4#interface Ethernet0/0/5#interface Ethernet0/0/6#interface Ethernet0/0/7#interface Ethernet0/0/8#interface Ethernet0/0/9#interface Ethernet0/0/10#interface Ethernet0/0/11#interface Ethernet0/0/12#interface Ethernet0/0/13#interface Ethernet0/0/14#interface Ethernet0/0/15#interface Ethernet0/0/16#interface Ethernet0/0/17#interface Ethernet0/0/18#interface Ethernet0/0/19#interface Ethernet0/0/20#interface Ethernet0/0/21#interface Ethernet0/0/22#interface GigabitEthernet0/0/1port link-type trunkport trunk allow-pass vlan 10 20 30 40 90#interface GigabitEthernet0/0/2port link-type trunkport trunk allow-pass vlan 10 20 30 40 90#interface NULL0#user-interface con 0user-interface vty 0 4#
AR1 [V200R003C00]#sysname AR1#snmp-agent local-engineid 800007DB03000000000000snmp-agent#clock timezone China-Standard-Time minus 08:00:00#portal local-server load flash:/portalpage.zip#drop illegal-mac alarm#wlan ac-global carrier id other ac id 0#set cpu-usage threshold 80 restore 75#dhcp enable#ip pool 10gateway-list 192.168.10.254network 192.168.10.0 mask 255.255.255.0dns-list 8.8.8.8#aaaauthentication-scheme defaultauthorization-scheme defaultaccounting-scheme defaultdomain defaultdomain default_adminlocal-user admin password cipher %$%$K8m.Nt84DZ}e#08bmE3Uw}%$%$local-user admin service-type http#firewall zone Localpriority 15#interface GigabitEthernet0/0/0ip address 192.168.30.2 255.255.255.252dhcp select global#interface GigabitEthernet0/0/1ip address 192.168.60.1 255.255.255.252#interface GigabitEthernet0/0/2#interface NULL0#ospf 1area 0.0.0.0network 192.168.60.0 0.0.0.255area 0.0.0.1network 192.168.30.0 0.0.0.255#user-interface con 0authentication-mode passworduser-interface vty 0 4user-interface vty 16 20#wlan ac#return
AR2
[V200R003C00]#sysname AR2#snmp-agent local-engineid 800007DB03000000000000snmp-agent#clock timezone China-Standard-Time minus 08:00:00#portal local-server load flash:/portalpage.zip#drop illegal-mac alarm#wlan ac-global carrier id other ac id 0#set cpu-usage threshold 80 restore 75#aaaauthentication-scheme defaultauthorization-scheme defaultaccounting-scheme defaultdomain defaultdomain default_adminlocal-user admin password cipher %$%$K8m.Nt84DZ}e#08bmE3Uw}%$%$local-user admin service-type http#firewall zone Localpriority 15#interface GigabitEthernet0/0/0ip address 100.100.100.1 255.255.255.0#interface GigabitEthernet0/0/1ip address 192.168.60.2 255.255.255.252#interface GigabitEthernet0/0/2ip address 16.16.16.2 255.255.255.0#interface NULL0#user-interface con 0authentication-mode passworduser-interface vty 0 4user-interface vty 16 20#wlan ac#returnAR3AR3DIS current-configuration[V200R003C00]#sysname AR3#snmp-agent local-engineid 800007DB03000000000000snmp-agent#clock timezone China-Standard-Time minus 08:00:00#portal local-server load flash:/portalpage.zip#drop illegal-mac alarm#wlan ac-global carrier id other ac id 0#set cpu-usage threshold 80 restore 75#dhcp enable#acl number 2000 rule 5 permit source 192.168.10.0 0.0.0.255rule 10 permit source 192.168.20.0 0.0.0.255rule 15 permit source 192.168.90.0 0.0.0.255#acl number 3000 rule 5 permit ip source 192.168.90.0 0.0.0.255 destination 16.16.16.0 0.0.0.255acl number 3001 #ip pool 10gateway-list 192.168.10.254network 192.168.10.0 mask 255.255.255.0dns-list 114.114.114.114#aaaauthentication-scheme defaultauthorization-scheme defaultaccounting-scheme defaultdomain defaultdomain default_adminlocal-user admin password cipher %$%$K8m.Nt84DZ}e#08bmE3Uw}%$%$local-user admin service-type http#firewall zone Localpriority 15#interface GigabitEthernet0/0/0ip address 192.168.40.2 255.255.255.252dhcp select global#interface GigabitEthernet0/0/1ip address 192.168.60.2 255.255.255.252#interface GigabitEthernet0/0/2ip address 16.16.16.1 255.255.255.0nat outbound 2000#interface NULL0#ospf 1import-route staticarea 0.0.0.0network 16.16.16.0 0.0.0.255network 192.168.60.0 0.0.0.255area 0.0.0.2network 192.168.40.0 0.0.0.255#ip route-static 0.0.0.0 0.0.0.0 16.16.16.2ip route-static 100.100.100.0 255.255.255.0 16.16.16.2#user-interface con 0authentication-mode passworduser-interface vty 0 4user-interface vty 16 20#wlan ac#return
总结
本项目用到了MSTPVRRP架构实现上行链路负载分担相互备份使用DHCP给终端分配地址中间核心交换机采用链路聚合增加链路带宽采用easy-IP进行上网
