【正文】 ）l 配置OSPF (最短路徑協(xié)議是現(xiàn)在比較流行的路由協(xié)議，路由有更新時，收斂速度比較快）l 配置VLAN間訪問控制，禁止其他部門訪問財(cái)務(wù)部2詳細(xì)配置基本配置SwitchenSwitchconf tSwitch(config)hostname Shx1Shx1(config)enable secret password Shx1(config)line con 0Shx1(configline)loginShx1(config)line vty 0 4Shx1(configline)password passwordShx1(configline)login配置VLAN創(chuàng)建vlanShx1vlan daShx1(vlan)vlan 10 name xiaoshouShx1(vlan)vlan 20 name qudaobuShx1(vlan)vlan 30 name shichangcehuabuShx1(vlan)vlan 40 name jishuShx1(vlan)vlan 50 name renliziyanbuShx1(vlan)vlan 60 name caiwuShx1(vlan)vlan 70 name fuwuqiShx1(vlan)exit配置vlan地址Shx1(config)inter vlan 10 Shx1(configif)ip add Shx1(configif)exitShx1(config)inter vlan 20 Shx1(configif)ip add Shx1(configif)exitShx1(config)inter vlan 30 Shx1(configif)ip add Shx1(configif)exitShx1(config)inter vlan 40 Shx1(configif)ip add Shx1(configif)exitShx1(config)inter vlan 50 Shx1(configif)ip add Shx1(configif)exitShx1(config)inter vlan 60 Shx1(configif)ip Shx1(configif)exitShx1(config)inter vlan 70 Shx1(configif)ip add Shx1(configif)exitShx1(config)inter vlan 80 Shx1(configif)ip add Shx1(configif)exitShx1(config)inter vlan 90 Shx1(configif)ip add Shx1(configif)exit設(shè)置trunk設(shè)置接口Trunk 并且設(shè)置端口聚合Shx1conf tShx1(config)interface range f 0/2324Shx1(configif)channelgroup 1 mode onShx1(configif)switchportShx1(configif)switchport mode trunkShx1(configif)switchport trunk encap dot1qShx1(config)inter f 0/21Shx1(configif)switchportShx1(configif)switchport trunk encapsulation dot1qShx1(configif)switchport mode trunkShx1(config)inter range f 0/12Shx1(configif)switchportShx1(configif)switchport trunk encapsulation dot1qShx1(configif)switchport mode trunkShx1(configif)exit設(shè)置VTP管理域Shx1vlan dataShx1(vlan)vtp domain CSNEShx1(vlan)vtp password cisco123Shx1(vlan)vtp server Shx1(vlan)exit配置DHCP服務(wù)器Shx1(Config)ip dhcp pool xiaoshouShx1(Configpool)network Shx1(Configpool)defaultrouter Shx1(Configpool)dnsserver Shx1(Configpool)exitShx1(Config)ip dhcp pool qudaoShx1(Configpool)network Shx1(Configpool)defaultrouter Shx1(Configpool)dnsserver Shx1(Configpool)exitShx1(Config)ip dhcp pool cehuaShx1(Configpool)network Shx1(Configpool)defaultrouter Shx1(Configpool)dnsserver Shx1(Configpool)exitShx1(Config)ip dhcp pool jishuShx1(Configpool)network Shx1(Configpool)defaultrouter Shx1(Configpool)dnsserver Shx1(Configpool)exitShx1(Config)ip dhcp pool renliShx1(Configpool)network Shx1(Configpool)defaultrouter Shx1(Configpool)dnsserver Shx1(Configpool)exitShx1(Config)ip dhcp pool caiwuShx1(Configpool)network Shx1(Configpool)defaultrouter Shx1(Configpool)dnsserver Shx1(Configpool)exitShx1(Config)ip dhcp pool fwqShx1(Configpool)network Shx1(Configpool)defaultrouter Shx1(Configpool)dnsserver Shx1(Configpool)exitShx1(Config)ip dhcp pool yewuShx1(Configpool)network Shx1(Configpool)defaultrouter Shx1(Configpool)dnsserver Shx1(Configpool)exitShx1(Config)ip dhcp pool zhaoshangShx1(Configpool)network Shx1(Configpool)defaultrouter Shx1(Configpool)dnsserver Shx1(Configpool)exit配置HSRPShx1(config)int vlan 10Shx1(configif)standby 10 ip Shx1(configif)standby 10 preemptShx1(configif)standby 10 priority 200Shx1(configif)exiShx1(config)int vlan 20Shx1(configif)standby 20 ip Shx1(configif)standby 20 preemptShx1(configif)standby 20 priority 200Shx1(configif)exiShx1(config)int vlan 30Shx1(configif)standby 30 ip Shx1(configif)standby 30 preemptShx1(configif)standby 30 priority 200Shx1(configif)exiShx1(config)int vlan 40Shx1(configif)standby 40 ip Shx1(configif)standby 40 preemptShx1(configif)standby 40 priority 100Shx1(configif)exiShx1(config)int vlan 50Shx1(configif)standby 50 ip Shx1(configif)standby 50 preemptShx1(configif)standby 50 priority 100Shx1(configif)exiShx1(config)int vlan 60Shx1(configif)standby 60 ip Shx1(configif)standby 60 preemptShx1(configif)standby 60 priority 100Shx1(configif)exiShx1(config)int vlan 70Shx1(configif)standby 70 ip Shx1(configif)standby 70 preemptShx1(configif)standby 70 priority 200Shx1(configif)exiShx1(config)int vlan 80Shx1(configif)standby 80 ip Shx1(configif)standby 80 preemptShx1(configif)standby 80 priority 100Shx1(config)int vlan 90Shx1(configif)standby 90 ip Shx1(configif)standby 90 preemptShx1(configif)standby 90 priority 100配置生成樹協(xié)議Shx1(config)spanningtree mode pvstShx1(config)spanningtree vlan 10 root primaryShx1(config)spanningtree vlan 20 root primaryShx1(config)spanningtree vlan 30 root primaryShx1(config)spanningtree vlan 40 root secondaryShx1(config)spanningtree vlan 50 root secondaryShx1(config)spanningtree vlan 60 root secondaryShx1(config)spanningtree vlan 80 root primaryShx1(config)spanningtree vlan 90 root secondary訪問控制配置VLAN間訪問控制，禁止其他部門訪問財(cái)務(wù)部的網(wǎng)絡(luò)Shx1(config)accesslist 101 deny ip any Shx1(config)accesslist 101 permit ip any anyShx1(config)interface vlan 60Shx1(configif)ip accessgroup 101 inShx1(configif)exit配置路由ospfShx1(config)router ospf 10Shx1(configrouter)routerid Shx1(configrouter)network area 0Shx1(configrouter)network area 0Shx1(configrouter)network area 0Shx1(configrouter)network area 0Shx1(configrouter)network area 0Shx1(configrouter)network area 0Shx1(configrouter)network area 0Shx1(configrouter)network area 0Shx1(configrouter)network