感谢分享！
希望跟大家一起进步！
努力学习中
666666666
XIEXIE
HCNA，实战用
:(:D:o:D
就看看
我来看看 谢谢
HCNA-R&S方向的视频
交换机在校园网中的应用
1.1 组网需求
如图1-1所示，校园网内部采用典型的核心-汇聚-接入的树形网络结构。接入交换机（图中的ACC）下连宿舍楼、行政楼、科技楼、教学楼和图书馆的LAN交换机、主机或者无线AP，再通过汇聚交换机（图中的AGG）接入到核心交换机（图中的Core）。核心交换机与数据中心机房、AC相连，并且上连双出口，一个出口是学校向ISP、教育网租赁的宽带业务出口，另一个出口是普通的ISP宽带业务出口。
校园网络接入&汇聚&核心组网图
学校现对接入&汇聚&核心组网具体需求如下：
1. 简化网络结构，减少网络配置。
2. 网络易于维护管理，可扩展性强。
3. 能够传输视频数据，进行视频教学、电视电话会议等。
1.2 业务规划
1. 对于有线业务，接入&汇聚&核心采用扁平化的大二层网络，有线用户网关配置在与核心设备相连的上游设备，降低网络的运维难度，简化网络结构。
对于无线业务，核心层设备作为无线接入用户的网关和DHCP服务器，旁挂的AC仅用于管理AP。
2. 核心&汇聚&核心通过层次化、模块化，实现网络易管理、可扩展。
a） 核心设备连接所有的汇聚交换机，转发各个楼栋的流量。
b） 汇聚设备作为各个楼栋数据流量的汇聚点，转发本区域用户到其他区域用户的横向流量，同时发送本区域用户流量到核心层。
c）接入设备作为楼层有线业务、无线业务的接入点。
对于有线用户接入多的宿舍楼、行政楼和科技楼，在接入层交换机上配置QinQ功能，内层VLAN表示宿舍、办公室等最小的独立单元，外层VLAN表示楼栋；有线用户接入少的图书馆和教学楼，每个楼栋分配一个VLAN。
对于无线业务，每个楼栋分配一个无线业务VLAN。
3. 在接入&汇聚&核心交换机上配置组播功能，用于视频教学、电视电话会议等，传输数据中心机房发往接入层的视频数据。
1.3 产品规划
根据楼栋的整体分布情况，对各个楼栋的产品规划如下：
- 宿舍楼：总共4栋，每栋有5层楼，每层楼有20个宿舍，每个宿舍1个Lan Switch，每4个宿舍共用1个AP，每1层楼一个普通接入交换机。
- 行政楼：总共1栋，每栋有5层楼，每层楼有10个办公室，每个办公室1个Lan Switch，每4个办公室共用1个AP，每2层楼共用一个普通接入交换机。
- 科技楼：总共1栋，每栋有5层楼，每层楼有10个科研室，每个科研室1个Lan Switch，每4个科研室共用1个AP，每2层楼共用一个普通接入交换机。
- 教学楼：总共4栋，每栋有5层楼，每层楼有20个教室，每个教室2个AP，每1层楼一个普通接入交换机。
- 图书馆：总共1栋，每栋有5层楼，只有一楼的3个区域有无线需求，在这三个位置各布置1台AP。
各个楼栋的具体设备部署及接口连线如下图所示。
1.4 数据规划1.4.1 有线业务的VLAN规划1.4.2 无线业务的VLAN规划1.4.3 无线业务的IP地址池规划
本帖隐藏的内容
1.5 配置步骤
说明：本案例仅提供了交换机与下游用户通信的配置步骤。
步骤 1 配置VLAN业务。
在各交换机上创建VLAN，配置接口加入VLAN，有线用户多的楼栋配置VLAN QinQ功能。
1. 配置宿舍楼的接入交换机。以D-ACC10-1、D-ACC11为例，宿舍楼其他接入交换机
与其配置过程相似。
# 有线侧
<D-ACC11> system-view
vlan batch 2 to 21 1111
interface gigabitethernet 0/0/1
port link-type hybrid
port hybrid untagged vlan 1111
qinq vlan-translation enable
port vlan-stacking vlan 2 stack-vlan 1111
interface gigabitethernet 0/0/2
port link-type hybrid
port hybrid untagged vlan 1111
qinq vlan-translation enable
port vlan-stacking vlan 3 stack-vlan 1111
interface gigabitethernet 0/0/3
port link-type hybrid
port hybrid untagged vlan 1111
qinq vlan-translation enable
port vlan-stacking vlan 4 stack-vlan 1111
……
……
interface gigabitethernet 0/0/20
port link-type hybrid
port hybrid untagged vlan 1111
qinq vlan-translation enable
port vlan-stacking vlan 21 stack-vlan 1111
interface gigabitethernet 0/0/24
port link-type trunk
port trunk allow-pass vlan 1111
quit
# 无线侧
<D-ACC10-1> system-view
vlan batch 511
port-group dormitory1-acc-wlan
group member gigabitethernet 0/0/1 to gigabitethernet 0/0/15
port link-type trunk
port trunk allow-pass vlan 511
quit
interface gigabitethernet 0/0/24
port link-type trunk
port trunk allow-pass vlan 511
quit
2. 配置宿舍楼的汇聚交换机。
# 有线侧
<D-AGG> system-view
vlan batch 1111 to 1114
port-group dormitory1-agg-cable
group member gigabitethernet 0/0/1 to gigabitethernet 0/0/5
port link-type trunk
port trunk allow-pass vlan 1111
quit
port-group dormitory2-agg-cable
group member gigabitethernet 0/0/8 to gigabitethernet 0/0/12
port link-type trunk
port trunk allow-pass vlan 1112
quit
port-group dormitory3-agg-cable
group member gigabitethernet 0/0/15 to gigabitethernet 0/0/19
port link-type trunk
port trunk allow-pass vlan 1113
quit
port-group dormitory4-agg-cable
group member gigabitethernet 0/0/22 to gigabitethernet 0/0/26
port link-type trunk
port trunk allow-pass vlan 1114
quit
interface xgigabitethernet 0/0/1
port link-type trunk
port trunk allow-pass vlan 1111 to 1114
quit
# 无线侧
vlan batch 511 to 514
port-group dormitory1-agg-wlan
group member gigabitethernet 0/0/6 to gigabitethernet 0/0/7
port link-type trunk
port trunk allow-pass vlan 511
quit
port-group dormitory2-agg-wlan
group member gigabitethernet 0/0/13 to gigabitethernet 0/0/14
port link-type trunk
port trunk allow-pass vlan 512
quit
port-group dormitory3-agg-wlan
group member gigabitethernet 0/0/20 to gigabitethernet 0/0/21
port link-type trunk
port trunk allow-pass vlan 513
quit
port-group dormitory4-agg-wlan
group member gigabitethernet 0/0/27 to gigabitethernet 0/0/28
port link-type trunk
port trunk allow-pass vlan 514
quit
interface xgigabitethernet 0/0/1
port link-type trunk
port trunk allow-pass vlan 511 to 514
quit
3. 配置行政楼的接入交换机。以E-ACC10、E-ACC11为例，行政楼其他接入交换机
与其配置过程相似。
# 有线侧
<E-ACC11> system-view
vlan batch 2 to 21 1211
interface gigabitethernet 0/0/1
port link-type hybrid
port hybrid untagged vlan 1211
qinq vlan-translation enable
port vlan-stacking vlan 2 stack-vlan 1211
interface gigabitethernet 0/0/2
port link-type hybrid
port hybrid untagged vlan 1211
qinq vlan-translation enable
port vlan-stacking vlan 3 stack-vlan 1211
interface gigabitethernet 0/0/3
port link-type hybrid
port hybrid untagged vlan 1211
qinq vlan-translation enable
port vlan-stacking vlan 4 stack-vlan 1211
……
……
interface gigabitethernet 0/0/20
port link-type hybrid
port hybrid untagged vlan 1211
qinq vlan-translation enable
port vlan-stacking vlan 21 stack-vlan 1211
interface gigabitethernet 0/0/24
port link-type trunk
port trunk allow-pass vlan 1211
quit
# 无线侧
<E-ACC10> system-view
vlan batch 521
port-group executive-building-acc-wlan
group member gigabitethernet 0/0/1 to gigabitethernet 0/0/15
port link-type trunk
port trunk allow-pass vlan 521
quit
interface gigabitethernet 0/0/24
port link-type trunk
port trunk allow-pass vlan 521
quit
4. 配置科技楼的接入交换机。以S-ACC10、S-ACC11为例，科技楼其他接入交换机
与其配置过程相似。
# 有线侧
<S-ACC11> system-view
vlan batch 2 to 21 1311
interface gigabitethernet 0/0/1
port link-type hybrid
port hybrid untagged vlan 1311
qinq vlan-translation enable
port vlan-stacking vlan 2 stack-vlan 1311
interface gigabitethernet 0/0/2
port link-type hybrid
port hybrid untagged vlan 1311
qinq vlan-translation enable
port vlan-stacking vlan 3 stack-vlan 1311
interface gigabitethernet 0/0/3
port link-type hybrid
port hybrid untagged vlan 1311
qinq vlan-translation enable
port vlan-stacking vlan 4 stack-vlan 1311
……
……
interface gigabitethernet 0/0/20
port link-type hybrid
port hybrid untagged vlan 1311
qinq vlan-translation enable
port vlan-stacking vlan 21 stack-vlan 1311
interface gigabitethernet 0/0/24
port link-type trunk
port trunk allow-pass vlan 1311
quit
# 无线侧
<S-ACC10> system-view
vlan batch 531
port-group sience-building-acc-wlan
group member gigabitethernet 0/0/1 to gigabitethernet 0/0/15
port link-type trunk
port trunk allow-pass vlan 531
quit
interface gigabitethernet 0/0/24
port link-type trunk
port trunk allow-pass vlan 531
quit
5. 配置图书馆的接入交换机。
# 有线侧
<L-ACC11> system-view
vlan batch 1411
port-group library-acc-cable
group member gigabitethernet 0/0/1 to gigabitethernet 0/0/5
port link-type access
port trunk default vlan 1411
quit
interface gigabitethernet 0/0/24
port link-type trunk
port trunk allow-pass vlan 1411
quit
# 无线侧
vlan batch 541
port-group library-acc-wlan
group member gigabitethernet 0/0/6 to gigabitethernet 0/0/8
port link-type trunk
port trunk allow-pass vlan 541
quit
interface gigabitethernet 0/0/24
port link-type trunk
port trunk allow-pass vlan 541
quit
6. 配置行政楼&科技楼&图书馆的汇聚交换机。
# 有线侧
<E&S&L-AGG> system-view
vlan batch 1211 1311 1411
port-group executive-building-agg-cable
group member gigabitethernet 0/0/1 to gigabitethernet 0/0/3
port link-type trunk
port trunk allow-pass vlan 1211
quit
port-group sience-building-agg-cable
group member gigabitethernet 0/0/5 to gigabitethernet 0/0/7
port link-type trunk
port trunk allow-pass vlan 1311
quit
interface gigabitethernet 0/0/9
description library's downlink interface of cable and wlan
port link-type trunk
port trunk allow-pass vlan 1411
quit
interface xgigabitethernet 0/0/1
port link-type trunk
port trunk allow-pass vlan 1211 1311 1411
quit
# 无线侧
interface gigabitethernet 0/0/4
description executive building's downlink interface of wlan
port link-type trunk
port trunk allow-pass vlan 521
quit
interface gigabitethernet 0/0/8
description sience building's downlink interface of wlan
port link-type trunk
port trunk allow-pass vlan 531
quit
interface gigabitethernet 0/0/9
port link-type trunk
port trunk allow-pass vlan 541
quit
interface xgigabitethernet 0/0/1
port link-type trunk
port trunk allow-pass vlan 521 531 541
quit
7. 配置教学楼的接入交换机。以S-ACC10、S-ACC11为例，科技楼其他接入交换机
与其配置过程相似。
# 有线侧
<T-ACC11> system-view
vlan batch 1511
port-group teach-building1-acc-cable
group member gigabitethernet 0/0/1 to gigabitethernet 0/0/20
port link-type access
port trunk default vlan 1511
quit
interface gigabitethernet 0/0/24
port link-type trunk
port trunk allow-pass vlan 1511
quit
# 无线侧
<T-ACC10-1> system-view
vlan batch 551
port-group teach-building1-acc-wlan
group member gigabitethernet 0/0/1 to gigabitethernet 0/0/40
port link-type trunk
port trunk allow-pass vlan 551
quit
interface gigabitethernet 0/0/42
port link-type trunk
port trunk allow-pass vlan 551
quit
8. 配置教学楼的汇聚交换机。
# 有线侧
<T-AGG> system-view
vlan batch 1511 to 1514
port-group teach-building1-agg-cable
group member gigabitethernet 0/0/1 to gigabitethernet 0/0/5
port link-type trunk
port trunk allow-pass vlan 1511
quit
port-group teach-building2-agg-cable
group member gigabitethernet 0/0/11 to gigabitethernet 0/0/15
port link-type trunk
port trunk allow-pass vlan 1512
quit
port-group teach-building3-agg-cable
group member gigabitethernet 0/0/21 to gigabitethernet 0/0/25
port link-type trunk
port trunk allow-pass vlan 1513
quit
port-group teach-building4-agg-cable
group member gigabitethernet 0/0/31 to gigabitethernet 0/0/35
port link-type trunk
port trunk allow-pass vlan 1514
quit
interface xgigabitethernet 0/0/1
port link-type trunk
port trunk allow-pass vlan 1511 to 1514
quit
# 无线侧
vlan batch 551 to 554
port-group teach-building1-agg-wlan
group member gigabitethernet 0/0/6 to gigabitethernet 0/0/10
port link-type trunk
port trunk allow-pass vlan 551
quit
port-group teach-building2-agg-wlan
group member gigabitethernet 0/0/16 to gigabitethernet 0/0/20
port link-type trunk
port trunk allow-pass vlan 552
quit
port-group teach-building3-agg-wlan
group member gigabitethernet 0/0/26 to gigabitethernet 0/0/30
port link-type trunk
port trunk allow-pass vlan 553
quit
port-group teach-building4-agg-wlan
group member gigabitethernet 0/0/36 to gigabitethernet 0/0/40
port link-type trunk
port trunk allow-pass vlan 554
quit
interface xgigabitethernet 0/0/1
port link-type trunk
port trunk allow-pass vlan 551 to 554
quit
9. 配置核心交换机。
<Core> system-view
vlan 1111
description dormitory1’s cable
quit
vlan 1112
description dormitory2’s cable
quit
vlan 1113
description dormitory3’s cable
quit
vlan 1114
description dormitory4’s cable
quit
vlan 1211
description executive building’s cable
quit
vlan 1311
description sience building’s cable
quit
vlan 1411
description library’s cable
quit
vlan 1511
description teach building1’s cable
quit
vlan 1512
description teach building2’s cable
quit
vlan 1513
description teach building3’s cable
quit
vlan 1514
description teach building4’s cable
quit
vlan 511
description dormitory1’s wlan
quit
vlan 512
description dormitory2’s wlan
quit
vlan 513
description dormitory3’s wlan
quit
vlan 514
description dormitory4’s wlan
quit
vlan 521
description executive building’s wlan
quit
vlan 531
description sience building’s wlan
quit
vlan 541
description library’s wlan
quit
vlan 551
description teach building1’s wlan
quit
vlan 552
description teach building2’s wlan
quit
vlan 553
description teach building3’s wlan
quit
vlan 554
description teach building4’s wlan
quit
interface xgigabitethernet 0/0/1
description dormitory’s downlink interface
port link-type trunk
port trunk allow-pass vlan 511 to 514 1111 to 1114
quit
interface xgigabitethernet 0/0/2
description executive building&sience builing&library’s downlink interface
port link-type trunk
port trunk allow-pass vlan 521 531 541 1211 1311 1411
quit
interface xgigabitethernet 0/0/3
description teach building’s downlink interface
port link-type trunk
port trunk allow-pass vlan 551 to 554 1511 to 1514
quit
步骤 2 配置为无线用户分配地址的DHCP业务。
dhcp enable
interface vlanif 511
description dormitory1’s wlan gagteway
ip address 192.168.0.255 23
dhcp select interface
quit
interface vlanif 512
description dormitory2’s wlan gagteway
ip address 192.168.2.255 23
dhcp select interface
quit
interface vlanif 513
description dormitory3’s wlan gagteway
ip address 192.168.4.255 23
dhcp select interface
quit
interface vlanif 514
description dormitory4’s wlan gagteway
ip address 192.168.6.255 23
dhcp select interface
quit
interface vlanif 521
description executive building’s wlan gagteway
ip address 192.168.8.255 23
dhcp select interface
quit
interface vlanif 531
description sience building’s wlan gagteway
ip address 192.168.10.255 23
dhcp select interface
quit
interface vlanif 541
description library’s wlan gagteway
ip address 192.168.16.255 21
dhcp select interface
quit
interface vlanif 551
description teach building1’s wlan gagteway
ip address 10.1.0.255 20
dhcp select interface
quit
interface vlanif 552
description teach building2’s wlan gagteway
ip address 10.1.16.255 20
dhcp select interface
quit
interface vlanif 553
description teach building3’s wlan gagteway
ip address 10.1.32.255 20
dhcp select interface
quit
interface vlanif 554
description teach building4’s wlan gagteway
ip address 10.1.48.255 20
dhcp select interface
quit
配置完成后，可执行命令display ip pool检查IP地址池的分配情况，“Used”字段显示已经分配出去的IP地址数量。
步骤 3 配置有线侧的组播业务。
在转发有线业务数据的业务VLAN内使能IGMP Snooping功能，通过二层组播功能，实现组播数据在二层网络的精确转发。
# 以T-ACC11为例，其他所有交换机与其配置相似。
igmp-snooping enable
igmp-snooping enable vlan 1111
# 配置完成后，可以通过display l2-multicast forwarding-table查看二层组播转发表。
步骤 4 配置无线侧的组播业务。
# 在核心交换机的网关接口使能IGMP功能，用于接收下游用户的IGMP报文，维持组成员关系。
multicast routing-enable
interface vlanif 511
pim sm
igmp enable
quit
interface vlanif 512
pim sm
igmp enable
quit
interface vlanif 513
pim sm
igmp enable
quit
interface vlanif 514
pim sm
igmp enable
quit
interface vlanif 521
pim sm
igmp enable
quit
interface vlanif 531
pim sm
igmp enable
quit
interface vlanif 541
pim sm
igmp enable
quit
interface vlanif 551
pim sm
igmp enable
quit
interface vlanif 552
pim sm
igmp enable
quit
interface vlanif 553
pim sm
igmp enable
quit
interface vlanif 554
pim sm
igmp enable
quit
# 在转发无线业务数据的业务VLAN内使能IGMP Snooping功能，通过二层组播功能，实现组播数据在二层网络的精确转发。以T-ACC10-1为例，其他所有交换机与其配置相似。
igmp-snooping enable
igmp-snooping enable vlan 511
# 配置完成后，可以通过display igmp group命令用来查看通过主机发送报告报文动态加入的IGMP组播组信息；通过 display l2-multicast forwarding-table命令查看二层组播转发表。
本门考试一直没有变题看本题库可以放心去参加考试
好东西，感谢分享
123456
