大型智能无线网络

配置路由 R1

hostname R1

username R1 password 123456
interface fastethernet 0/0
ip address 10.0.0.1 255.255.255.252
no shutdown

interface Serial 2/0
ip address 76.7.8.1 255.255.255.240
no shutdown
interface Serial 2/1
ip address 10.0.0.5 255.255.255.252
no shutdown

encapsulation ppp
ppp authentication chap
no shutdown

interface fastethernet 0/0
ip nat inside

interface Serial 2/0
ip nat outside

interface Serial 2/1
ip nat inside

time-range work-time
periodic weekdays 09:00 to 18:00

access-list 10 permit 10.0.100.0 0.0.0.255 time-range work-time
access-list 10 permit 10.0.101.0 0.0.0.255 time-range work-time
access-list 10 permit 10.0.102.0 0.0.0.255 time-range work-time
access-list 10 permit 10.0.103.0 0.0.0.255 time-range work-time

ip nat pool INTERNET 76.7.8.1 76.7.8.5 network 255.255.255.240
ip nat inside source list 10 pool INTERNET overload
ip nat inside source tcp 10.0.104.2 80 76.7.8.6. 80
ip nat inside source tcp 10.0.104.6 110 76.7.8.6. 110
ip nat inside source tcp 10.0.104.6 25 76.7.8.6. 25

router OSPF 10
route-id 2.2.2.2
network 10.0.0.0 0.0.0.3 area 0
redistribute rip metric-type 1 metric 50 subnets

default-information originate

interface Fastethernet 0/0
ip OSPF authentication message-digest
ip OSPF message-digest-key 1 MD5 abc

router rip
version 2
network 10.0.0.0
no auto-summary
redistribute OSPF 10 metric 4
default-information originate

ip route 0.0.0.0.0.0.0.0 Serial 2/0
key chain www
key 1
key-string 123

interface serial 2/1
ip rip authentication mode MD5
ip rip authentication key-chain www

配置单臂路由R2

hostname R2

username R2 password 123456
interface fastethernet 0/0
no shutdown

interface fastethernet 0/0.102
encapsulation dotlq 102
ip address 10.0.102.1 255.255.255.0
no shutdown

interface fastethernet 0/0.103
encapsulation dotlq 103
ip address 10.0.103.1 255.255.255.0
no shutdown

router rip
version 2
network 10.0.0.0
no auto-summary

interface Serial 2/1
ip address 10.0.0.6 255.255.255.252
encapsulation ppp
no shutdown

key chain www
key 1
key-string 123

interface serial 2/1
ip rip authentication mode MD5
ip rip authentication key-chain www

配置运营商路由器 R3

hostname R3

interface Serial 2/0
ip address 67.7.8.14 255.255.255.240
no shutdown

ip route 0.0.0.0.0.0.0.0 Serial 2/0

核心三层交换机sw1

hostname sw1

vlan 100
name gongchengbu
vlan 101
name shichangbu
vlan 104
name fuwuqiqun

interface fastethernet 0/10
portgroup 1
interface fastethernet 0/11
portgroup 1
interface aggregateport 1
switchport mode trunk

interface range fastethernet 0/2-6
switchport mode access
switchport access vlan 104

 

interface fastethernet 0/1
no shutdown
ip add 10.0.0.2 255.255.255.252
no shutdown

interface fastethernet 0/7
no shutdown
ip add 10.0.0.9 255.255.255.252
no shutdown

interface vlan 100
ip add 10.0.100.1 255.255.255.0
no shutdown

interface vlan 101
ip add 10.0.101.1 255.255.255.0
no shutdown

interface vlan 104
ip add 10.0.104.1 255.255.255.0
no shutdown

router OSPF 10
route-id 1.1.1.1
network 10.0.0.0 0.0.0.0.3 area 0
network 10.0.8.0 0.0.0.0.255 area 0
network 10.0.100.0 0.0.0.0.255 area 0
network 10.0.101.0 0.0.0.0.255 area 0
network 10.0.104.0 0.0.0.0.255 area 0

interface Fastethernet 0/1
ip ospf authentication message-digest
ip OSPF message-digest-key 1 MD5 abc

interface Fastethernet 0/7
ip OSPF authentication message-digest
ip OSPF message-digest-key 1 MD5 abc

三层交换机sw2

hostname sw2

vlan 100
name gongchengbu
vlan 101
name shichangbu

interface fastethernet 0/10
portgroup 1
interface fastethernet 0/11
portgroup 1
interface aggregateport 1
switchport mode trunk

interface range fastethernet 0/1-9
switchport mode access
switchport access vlan 100
switchport port-security
switchport port-security maximum 1
switchport port-security violation shutdown
spanning-tree portfast

interface range fastethernet 0/12-20
switchport mode access
switchport access vlan 101
switchport port-security
switchport port-security maximum 1
switchport port-security violation shutdown
spanning-tree portfast

二层交换机sw3

hostname sw3

vlan 102
name yunweibu
vlan 103
name guanlibu

interface fastethernet 0/1
switchport mode trunk

interface range fastethernet 0/1-10
switchport mode access
switchport access vlan 102
switchport port-security
switchport port-security maximum 1
switchport port-security violation shutdown
spanning-tree portfast

interface range fastethernet 0/11-20
switchport mode access
switchport access vlan 103
switchport port-security
switchport port-security maximum 1
switchport port-security violation shutdown
spanning-tree portfast

配置无线ap

hostname AP1
vlan 105
name wuxian
service dhcp
ip helper-address 10.0.104.5
dot11 wlan 10
vlan 105
broadcast-ssid
ssid xinshiji

interface GigabitEthernet 0/1
ip address 10.0.0.10 255.255.255.252
speed 100
no shutdown

interface dot11radio 1/0
encapsulation dot1Q 105

mac-mode fat
radio-type 802.11b
channel 1
wlan-id 10

interface dot11radio 2/0
encapsulation dot1Q 105

mac-mode fat
radio-type 802.11a
channel 149
wlan-id 10

interface BVI 105
ip address 10.0.105.1 255.255.255.0
wlansec 1
security static-wep-key encryption 40 ascii 1 12345

router OSPF 10
route-id 3.3.3.3
network 10.0.0.8 0.0.0.3 area 0
network 10.0.105.0 0.0.0.255 area 0

interface GigabitEthernet 0/1
ip ospf authentication message-digest
ip OSPF message-digest-key 1 md5 abc