| |
interface gigabitethernet 0/12 //同上
switchport trunk encapsulation dotlq
switchport mode trunk
switchport trunk allowed vlan all
interface vlan 1 //進入vlan1的邏輯接口（不是物理接口，用來給vlan做路由用）
ip address 172.16.1.7 255.255.255.0 //配置IP地址和子網(wǎng)掩碼
no shutdown
standby 1 ip 172.16.1.9 //開啟了冗余熱備份（HSRP），冗余熱備份組1，虛擬路由器的IP地址為172.16.1.9
standby 1 priority 110 preempt //定義這個三層交換機在冗余熱備份組1中的優(yōu)先級為110，preempt是用來開啟搶占模式
interface vlan 2 //同上
ip address 172.16.2.252 255.255.255.0
no shutdown
standby 2 ip 172.16.2.254
standby 2 priority 110 preempt
ip access-group 101 in //在入方向上使用擴展的訪問控制列表101
interface vlan 3 //同上
ip address 172.16.3.252 255.255.255.0
no shutdown
standby 3 ip 172.16.3.254
standby 3 priority 110 preempt
ip access-group 101 in
interface vlan 4 //同上
ip address 172.16.4.252 255.255.255.0
no shutdown
standby 4 ip 172.16.4.254
standby 4 priority 110 preempt
ip access-group 101 in
interface vlan 5
ip address 172.16.5.252 255.255.255.0
no shutdown
standby 5 ip 172.16.5.254
standby 5 priority 110 preempt
ip access-group 101 in
interface vlan 6
ip address 172.16.6.252 255.255.255.0
no shutdown
standby 6 ip 172.16.6.254
standby 6 priority 100 preempt
interface vlan 7
ip address 172.16.7.252 255.255.255.0
no shutdown
standby 7 ip 172.16.7.254
standby 7 priority 100 preempt
interface vlan 8
ip address 172.16.8.252 255.255.255.0
no shutdown
standby 8 ip 172.16.8.254
standby 8 priority 100 preempt
interface vlan 9
ip address 172.16.9.252 255.255.255.0
no shutdown
standby 9 ip 172.16.9.254
standby 9 priority 100 preempt
access-list 101 deny ip any 172.16.7.0 0.0.0.255 //擴展的訪問控制列表101
access-list 101 permit ip any any
Interface vlan 1 //進入vlan1這個邏輯接口
Ip helper-address 172.16.8.1 //可以轉(zhuǎn)發(fā)廣播（helper－address的作用就是把廣播轉(zhuǎn)化為單播，然后發(fā)向172.16.8.1）
Interface vlan 2
Ip helper-address 172.16.8.1
Interface vlan 3
ip helper-address 172.16.8.1
interface vlan 4
ip helper-address 172.16.8.1
interface vlan 5
ip helper-address 172.16.8.1
interface vlan 6
ip helper-address 172.16.8.1
interface vlan 7
ip helper-address 172.16.8.1
interface vlan 9
ip helper-address 172.16.8.1
router rip //啟用路由協(xié)議RIP
version 2 //使用的是RIPv2，如果沒有這句，則是使用RIPv1
network 172.16.0.0 //宣告直連的網(wǎng)段
exit
ip route 0.0.0.0 0.0.0.0 172.16.9.250 //缺省路由，所有在路由表中沒有辦法匹配的數(shù)據(jù)包，都發(fā)向下一跳地址為172.16.9.250這個路由器
line con 0
line aux 0
line vty 0 15 //telnet線路（路由器只有5個，是0-4）
password 12345678 //login密碼
login
end
copy running-config startup-config 保存配置
|
|
|
| 【收藏】【打印】【進入論壇】 |
|
|
|
|
| |
|
|
|
