2023年7月21日发(作者：)

局域⽹三层⽹络结构实例⽹络拓扑图：

配置：1. 配置过程：1. 创建vlan；2. 配置stp⽣成树协议；3. 配置dhcp协议；4. 接⼊PC和⽹关到vlan；5. 配置动态路由；6. 配置nat访问外⽹；2. LSW5：1. #2. vlan batch 10 203. #4. stp instance 1 priority 0 #此节点为实例1的主节点，实例2的备⽤节点；5. stp instance 2 priority 40966. #7. stp region-configuration #配置stp1. region-name region12. revision-level 13. instance 1 vlan 104. instance 2 vlan 205. active region-configuration8. #9. interface GigabitEthernet0/0/11. port link-type access2. port default vlan 10 #接⼊vlan10的⽹关10. #11. interface GigabitEthernet0/0/21. port link-type trunk2. port trunk allow-pass vlan 10 2012. #13. interface GigabitEthernet0/0/31. port link-type trunk2. port trunk allow-pass vlan 10 2014. #15. interface GigabitEthernet0/0/41. port link-type trunk2. port trunk allow-pass vlan 10 201. LSW6：1. #2. vlan batch 10 203. #4. stp instance 1 priority 4096 #此节点为实例1的备⽤节点，实例2的主节点5. stp instance 2 priority 06. #7. stp region-configuration #配置stp1. region-name region12. revision-level 13. instance 1 vlan 104. instance 2 vlan 205. active region-configuration8. #9. interface GigabitEthernet0/0/11. port link-type access2. port default vlan 20 #接⼊vlan20的⽹关10. #11. interface GigabitEthernet0/0/21. port link-type trunk2. port trunk allow-pass vlan 10 2012. #13. interface GigabitEthernet0/0/31. port link-type trunk2. port trunk allow-pass vlan 10 2014. #15. interface GigabitEthernet0/0/41. port link-type trunk2. port trunk allow-pass vlan 10 201. LSW7：1. #2. vlan batch 10 203. #4. dhcp enable #启动dhcp5. #6. stp region-configuration #配置stp1. region-name region12. revision-level 13. instance 1 vlan 104. instance 2 vlan 205. active region-configuration7. #8. ip pool pool1 #创建ip池1. gateway-list 192.168.10.2542. network 192.168.10.0 mask 255.255.255.03. lease unlimited4. dns-list 8.8.8.89. #10. interface Vlanif101. ip address 192.168.10.1 255.255.255.02. dhcp select global #vlan10使⽤dhcp pool111. #12. interface Ethernet0/0/11. port link-type trunk2. port trunk allow-pass vlan 10 2013. #14. interface Ethernet0/0/21. port link-type trunk2. port trunk allow-pass vlan 10 2015. #16. interface Ethernet0/0/31. port link-type trunk2. port trunk allow-pass vlan 10 201. LSW8：1. #2. vlan batch 10 203. #4. dhcp enable #启动dhcp5. #6. stp region-configuration #配置⽣成树1. region-name region12. revision-level 13. instance 1 vlan 104. instance 2 vlan 205. active region-configuration7. #8. ip pool pool2 #配置ip池1. gateway-list 192.168.20.2542. network 192.168.20.0 mask 255.255.255.03. lease unlimited4. dns-list 8.8.8.89. #10. interface Vlanif201. ip address 192.168.20.1 255.255.255.02. dhcp select global #vlan20使⽤dhcp pool211. #12. interface Ethernet0/0/11. port link-type trunk2. port trunk allow-pass vlan 10 2013. #14. interface Ethernet0/0/21. port link-type trunk2. port trunk allow-pass vlan 10 2015. #16. interface Ethernet0/0/31. port link-type trunk2. port trunk allow-pass vlan 10 201. LSW9：1. vlan batch 10 202. #3. interface Ethernet0/0/11. port link-type trunk2. port trunk allow-pass vlan 10 204. #5. interface Ethernet0/0/21. port link-type access #将PC3的接⼝接⼊vlan102. port default vlan 101. LSW10：1. vlan batch 10 202. #3. interface Ethernet0/0/11. port link-type trunk2. port trunk allow-pass vlan 10 204. #5. interface Ethernet0/0/21. port link-type access #将PC4的接⼝接⼊vlan202. port default vlan 201. AR7：1. #2. acl number 2000

1. rule 1 permit source 192.168.10.0 0.0.0.255

3. #4. nat address-group 1 192.168.1.3 192.168.1.95. #6. interface GigabitEthernet0/0/01. ip address 192.168.1.1 255.255.255.02. nat outbound 2000 address-group 1 #配置nat让内⽹访问外⽹；7. #8. interface GigabitEthernet0/0/11. ip address 192.168.10.254 255.255.255.09. #10. interface GigabitEthernet0/0/21. ip address 192.168.20.254 255.255.255.011. #12. rip 1 #配置动态路由1. network 192.168.1.01. AR8：1. #2. interface GigabitEthernet0/0/01. ip address 192.168.1.2 255.255.255.03. #4. interface GigabitEthernet0/0/11. ip address 192.168.4.254 255.255.255.05. #6. rip 1 #配置动态路由1. network 192.168.1.02. network 192.168.4.0