說明
這是一個比較綜合的實例，從拓?fù)鋱D上可以看出，它所包含的設(shè)備和技術(shù)。以下對這個例子作些說明。

對于內(nèi)部局域網(wǎng)，選用Cisco的Catalyst 6506作為中心交換機(jī)，二級交換采用Catalyst 3500，同時為了說明Trunk，又加了一個Catalyst 2900 作為三級交換，對于終 端連接用了Catalyst 1900交換機(jī)，這樣就可以在Catalyst 6506與Catalyst 3500之間以及Catalyst 3500與Catalyst 2900 之間建立Trunk，實現(xiàn)跨交換機(jī)的VLAN。

注：Catalyst 2900系列如果要實現(xiàn)Trunk，軟件必須是企業(yè)版的。
對于外連上,主要是專線連接和撥號訪問,當(dāng)然種類比較多.包括了DDN、 ISDN、 Frame Relay、 E1 線路等。
本例給出設(shè)備的基本配置。
對于多設(shè)備的連接問題,值得注意的是路由問題,本實例外連部分采用靜態(tài)路由而內(nèi)部局域網(wǎng)采用動態(tài)路由. 在本例的幀中繼配置中,運(yùn)用了IP Unnumbered ,可以節(jié)省地址資源,有興趣可以注意一下。

網(wǎng)絡(luò)拓?fù)洌?BR>screen.width*0.7) {this.resized=true; this.width=screen.width*0.7; this.alt='點(diǎn)擊在新窗口查看全圖 CTRL+鼠標(biāo)滾輪放大或縮小';}" border=0 resized="true">
VLAN劃分問題
對于交換設(shè)備本例中劃到VLAN 1中,而對于外連設(shè)備的所有以太網(wǎng)端口,均劃到VLAN 2中,下面給出各VLAN的名稱和網(wǎng)關(guān)地址,本例劃分8個VLAN.
VLAN ID VLAN Name Gateway
VLAN 1 Bluestudy 1 10.1.0.1/16
VLAN 2 Bluestudy 2 10.2.0.1/16
VLAN 3 Bluestudy 3 10.3.0.1/16
VLAN 4 Bluestudy 4 10.4.0.1/16
VLAN 5 Bluestudy 5 10.5.0.1/16
VLAN 6 Bluestudy 6 10.6.0.1/16
VLAN 7 Bluestudy 7 10.7.0.1/16
VLAN 8 Bluestudy 8 10.8.0.1/16

Catalyst 6506 的配置
Enter password:
enable
Enter password:
config t
set system name Bluestudy
set time 10/30/2000 9:30:00
set password
set enablepass
set interface sc0 10.1.0.2/16
set ip route default 10.1.0.1
set ip dns server 10.1.0.100
set ip dns domain bluestudy.com
set ip dns enable
set vtp domain bluestudy mode server
set vlan 1 name Bluestudy 1
set vlan 2 name Bluestudy 2
set vlan 3 name Bluestudy 3
set vlan 4 name Bluestudy 4
set vlan 5 name Bluestudy 5
set vlan 6 name Bluestudy 6
set vlan 7 name Bluestudy 7
set vlan 8 name Bluestudy 8
set port negotiation 2/1-8 enable
set port name 2/1-8 GEC 802.1Q Trunk
set trunk 2/1-8 desirable dot1q
set port speed 2/1-8 1000
set vlan 1 3/1-48
對于6506的交換機(jī)方面的配置只需做出Trunk即可,因為要實現(xiàn)跨交換機(jī)之間的虛網(wǎng),下面配置6506的路由模塊,因為6506的路由模塊現(xiàn)在與管理引擎模塊集成在了一起,所以,默認(rèn)命令是:Session 15 ,詳情請見 6506 路由設(shè)置.
Catalyst 6506RSM模塊的配置
(enable) session 15
Trying Router-15...
Connected to Router-15.
Escape character is '^]'.
enable
configure terminal
hostname bluestudy
enable password password
line vty 0 6
password secret_word
ip domain-name bluestudy.com
ip name-server 10.1.0.100
interface vlan 1
ip address 10.1.0.1 255.255.0.0
no shutdown
interface vlan 2
ip address 10.2.0.1 255.255.0.0
no shutdown
interface vlan 3
ip address 10.3.0.1 255.255.0.0
no shutdown
interface vlan 4
ip address 10.4.0.1 255.255.0.0
no shutdown
interface vlan 5
ip address 10.5.0.1 255.255.0.0
no shutdown
interface vlan 6
ip address 10.6.0.1 255.255.0.0
no shutdown
interface vlan 7
ip address 10.7.0.1 255.255.0.0
no shutdown
interface vlan 8
ip address 10.8.0.1 255.255.0.0
no shutdown
router rip
version 2
network 10.0.0.0
ip route 0.0.0.0 0.0.0.0 10.2.0.12
ip route 192.168.2.0 255.255.255.0 10.2.0.13
ip route 192.168.3.0 255.255.255.240 10.2.0.11
ip route 192.168.4.0 255.255.255.0 10.2.0.11
ip route 192.168.5.0 255.255.255.0 10.2.0.11
ip route 192.168.6.0 255.255.255.0 10.2.0.11
copy running-config startup-config
Building configuration...
[OK]
這里給出的是單純的命令行,略去了一些默認(rèn)狀況的設(shè)置.

Catalyst 3500 的配置
!
version 12.0
no service pad
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname bluestudy
!
enable password password
!
username bluestudy password password
username test password password
!
省略端口的顯示
!
interface GigabitEthernet0/1
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet0/2
!
interface VLAN1
ip address 10.1.0.4 255.255.0.0
ip helper-address 10.1.0.100
ip directed-broadcast
no ip route-cache
!
ip default-gateway 10.1.0.1
interface Ethernet1/1(與2900對接)
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface Ethernet1/2(與1900 A對接)
switchport access VLAN 3
no shut
!
interface Ethernet1/3(與1900 B對接)
switchport access VLAN 4
no shut
!
snmp-server engineID local 000000090200000216BE4E80
snmp-server community public RO
snmp-server community private RW
snmp-server chassis-id 0x17
(打開簡單的網(wǎng)絡(luò)管理，便于以后，Cisco 網(wǎng)管軟件識別和管理）
!
line con 0
login local
transport input none
stopbits 1
line vty 0 4
login local
line vty 5 15
login
!
end

Catalyst 2900 的配置
2900的配置與3500的相似,命令如下
hostname bluestudy
!
enable password password
!
username bluestudy password password
username test password password
!
省略端口的顯示
!
interface Ethernet0/1(與3500對接)
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface VLAN1
ip address 10.1.0.3 255.255.0.0
ip helper-address 10.1.0.100
ip directed-broadcast
no ip route-cache
!
ip default-gateway 10.1.0.1
!
interface Ethernet0/2(與1900 C對接)
switchport access VLAN 5
no shut
!
interface Ethernet0/3(與1900 D對接)
switchport access VLAN 6
no shut
!
snmp-server engineID local 000000090200000216BE4E80
snmp-server community public RO
snmp-server community private RW
snmp-server chassis-id 0x17
!
line con 0
login local
transport input none
stopbits 1
line vty 0 4
login local
line vty 5 15
login
!
end
Cisco Catalyst 1900 的配置
對于1900的配置就相對容易得多了
只需在enable 狀態(tài)下鍵入 Setup 就會進(jìn)入配置向?qū)?
給出交換機(jī)的
IP地址:10.3.0.5
掩碼:255.255.0.0
網(wǎng)關(guān):10.3.0.1
就可以了,另外應(yīng)該打開簡單的網(wǎng)絡(luò)管理協(xié)議SNMP
snmp-server community public RO
snmp-server community private RW
即可

PIX 520A的基本配置
PIX Version 4.2(4)
nameif ethernet0 outside security0
nameif ethernet1 inside security100
enable password password encrypted
passwd password encrypted
hostname pix_A
fixup protocol ftp 21
fixup protocol http 80
fixup protocol smtp 25
fixup protocol h323 1720
fixup protocol rsh 514
fixup protocol sqlnet 1521
names
no failover
failover timeout 0:00:00
failover ip address outside 0.0.0.0
failover ip address inside 0.0.0.0
pager lines 24
no logging console
logging monitor debugging
logging buffered debugging
no logging trap
logging facility 20
interface ethernet0 auto
interface ethernet1 auto
ip address outside 192.168.0.1 255.255.255.252
ip address inside 10.2.0.13 255.255.0.0
arp timeout 14400
nat (inside ) 0 192.168.0.0 255.255.255.252
rip outside passive
no rip outside default
no rip inside passive
rip inside default
route outside 192.168.2.0 255.255.255.0 192.168.0.2
route inside 0.0.0.0 0.0.0.0 10.2.0.1
timeout xlate 3:00:00 conn 1:00:00 udp 0:02:00
timeout rpc 0:10:00 h323 0:05:00
timeout uauth 0:05:00 absolut
esnmp-server community public RO

snmp-server community private RW
telnet 10.2.0.200 255.255.255.255
telnet timeout 15
mtu outside 1500
mtu inside 1500
floodguard 0


Cisco 2610A 的配置
Current configuration:
!
version 11.3
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname 2610A
!
enable password password
!
username bluestudy password password
no ip domain-lookup!
!
interface Ethernet0/0
ip address 192.168.0.2 255.255.255.252
no shut
!
interface Serial0/0
ip address 192.168.0.5 255.255.255.252
no shut
!
interface Serial0/1
no ip address
shutdown
!
ip route 0.0.0.0 0.0.0.0 192.168.0.1
ip route 192.168.2.0 255.255.255.0 192.168.0.6
!
snmp-server community public RO

snmp-server community private RW
!
line con 0
line aux 0
line vty 0 4
login local
!
no scheduler allocate
end
Cisco 1603的配置
　
　
Current configuration:
!
version 12.0
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname 1603
!
enable secret password
enable password password
!
memory-size iomem 25
ip subnet-zero
!
interface Serial0
ip address 192.168.0.6 255.255.255.252
no ip directed-broadcast
!
interface Ethernet0
ip address 192.168.2.1 255.255.255.0
no ip unreachables
no ip directed-broadcast
!
ip classless
ip route 0.0.0.0 0.0.0.0 s0
no ip http server
!
snmp-server community public RO

snmp-server community private RW

!
line con 0
password password
transport input none
line aux 0
line vty 0 4
password password
login
!
no scheduler allocate
end

PIX 520B的基本配置
PIX Version 4.2(4)
nameif ethernet0 outside security0
nameif ethernet1 inside security100
enable password password encrypted
passwd password encrypted
hostname pix520_B
fixup protocol ftp 21
fixup protocol http 80
fixup protocol smtp 25
fixup protocol h323 1720
fixup protocol rsh 514
fixup protocol sqlnet 1521
names
no failover
failover timeout 0:00:00
failover ip address outside 0.0.0.0
failover ip address inside 0.0.0.0
pager lines 24
no logging console
no logging monitor
no logging buffered
no logging trap
logging facility 20
interface ethernet0 auto
interface ethernet1 auto
ip address outside 202.108.66.97 255.255.255.248
ip address inside 10.2.0.12 255.255.0.0
arp timeout 14400
global (outside) 1 202.108.66.100
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
no rip outside passive
no rip outside default
no rip inside passive
no rip inside default
route outside 0.0.0.0 0.0.0.0 202.109.77.98
timeout xlate 3:00:00 conn 1:00:00 udp 0:02:00
timeout rpc 0:10:00 h323 0:05:00
timeout uauth 0:05:00 absolute
no snmp-server location
no snmp-server contact
snmp-server community public
no snmp-server enable traps
telnet 10.2.0.200 255.255.255.255
telnet timeout 15
mtu outside 1500
mtu inside 1500
floodguard 0
Cisco 2610B 的配置
Current configuration:
!
version 11.3
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname 2610B
!
enable password password
!
username bluestudy password password
no ip domain-lookup!
!
interface Ethernet0/0
ip address 202.108.66.98 255.255.255.248
no shut
!
interface Serial0/0
ip address 202.108.8.1 255.255.255.252
no shut
!
interface Serial0/1
no ip address
shutdown
!
ip route 0.0.0.0 0.0.0.0 202.108.8.2
!
snmp-server community public RO

snmp-server community private RW
!
line con 0
line aux 0
line vty 0 4
login local
!
no scheduler allocate
end

Cisco 2610c 的配置
version 11.2
service udp-small-servers
service tcp-small-servers
!
hostname 2610C
!
enable secret cisco
!
ip subnet-zero
no ip domain-lookup
!
ip address-pool local
isdn switch-type basic-net3
interface Ethernet0
ip address 10.2.0.11 255.255.0.0
!
interface Serial0
no ip address
encapsulation frame-relay
frame-relay lmi-type ansi
!
interface Serial0.1 point-to-point
description Frame Relay to bluestudy1
ip unnumbered Ethernet0
frame-relay interface-dlci 10
!
interface Serial0.2 point-to-point
description Frame Relay to bluestudy2
ip unnumbered Ethernet0
frame-relay interface-dlci 11
!
interface BRI1/0
no ip address
shutdown
isdn switch-type basic-net3
!
interface BRI1/1
ip address 192.168.3.1 255.255.255.240
encapsulation ppp
timeout absolute 60 0
dialer idle-timeout 3600
dialer-group 1
isdn switch-type basic-net3
peer default ip address pool default
ppp authentication chap pap callin
!
interface BRI1/2
no ip address
encapsulation ppp
shutdown
isdn switch-type basic-net3
!
interface BRI1/3
no ip address
encapsulation ppp
shutdown
isdn switch-type basic-net3
no peer default ip address
!
ip local pool default 192.168.3.3 192.168.3.14
ip http server
ip classless
ip route 192.168.5.0 255.255.255.0 serial0.1
ip route 192.168.4.0 255.255.255.0 serial0.2
ip route 0.0.0.0 0.0.0.0 10.2.0.1
!
access-list 1 permit any
dialer-list 1 protocol ip list 1
line con 0
password console
login
line aux 0
line vty 0 4
password telnet
login
!
end

Cisco 1720A 的配置
　
version 11.2
service udp-small-servers
service tcp-small-servers

hostname bluestudy1
!
enable secret cisco
!
ip subnet-zero
no ip domain-lookup
!
interface Fastethernet0
ip address 192.168.5.1 255.255.255.0
!
interface Serial0
no ip address
encapsulation frame-relay
!
interface Serial0.1 point-to-point
description Frame Relay to bluestudy
ip unnumbered Ethernet0
frame-relay interface-dlci 10
!
ip http server
ip classless
ip route 0.0.0.0 0.0.0.0 serial0.1
!
line con 0
password console
login
line aux 0
line vty 0 4
password bluestudy1
login
!
end
Cisco 1720B 的配置
version 11.2
service udp-small-servers
service tcp-small-servers

hostname bluestudy1
!
enable secret cisco
!
ip subnet-zero
no ip domain-lookup
!
interface Fastethernet0
ip address 192.168.4.1 255.255.255.0
!
interface Serial0
no ip address
encapsulation frame-relay
!
interface Serial0.1 point-to-point
description Frame Relay to bluestudy
ip unnumbered Ethernet0
frame-relay interface-dlci 11
!
ip http server
ip classless
ip route 0.0.0.0 0.0.0.0 serial0.1
!
line con 0
password console
login
line aux 0
line vty 0 4
password bluestudy2
login
!
end
Lucent MAX 6000

對于陣列式訪問服務(wù)器（朗訊的MAX 6000)，可以起到小型ISP的作用，如果作了Callback的配置，那么員工就可以在家里也能夠登陸到公司的網(wǎng)絡(luò)。而且，因為E1線路通常是包月的，因此，可以省去員工的上網(wǎng)費(fèi)用，當(dāng)然也可以通過計費(fèi)費(fèi)軟件，適當(dāng)收費(fèi)，實現(xiàn)以網(wǎng)養(yǎng)網(wǎng)。
對于其配置只要將大于30個IP地址加入地址池中，然后將所有路由指向中心交換機(jī)即可。
對于MAX6000的配置，通常是菜單形式的，可以根據(jù)向?qū)нM(jìn)行配置。
在此，省略其配置。
但是，以前遇到一個問題，MAX 6000接入中心交換機(jī)（3Com 3500)時，將其路由指向3500，而3500也將撥入用戶網(wǎng)絡(luò)指向MAX 6000，但是產(chǎn)生如下現(xiàn)象
現(xiàn)象如下：
1.由MAX6000撥入的192.168.6.0網(wǎng)絡(luò)與內(nèi)部網(wǎng)絡(luò)10.0.0.0 通訊正常,但是卻不能與其他專線連接的網(wǎng)絡(luò)(如:192.168.2.0)通訊.而路由指向與上述相同.
2.中心交換機(jī)是6500的時候,這些問題就解決了,懷疑是3500的錯誤,但是,當(dāng)將MAX 6000的網(wǎng)絡(luò)指向2610 A，同時，2610 A也將路由指向MAX 6000，在MAX 6000上Traceroute卻連192.168.0.6都到不了.最終的解決辦法就是,將192.168.6.0/24改成10.2.8.0/16,即給撥入用戶直接分配內(nèi)部地址,這就不存在路由問題了,所以,都可以正常通訊,不知是何原因.
網(wǎng)絡(luò)管理
對于Cisco的網(wǎng)管軟件的使用上是比較簡單的。
在安裝CWSI時，只要給出一個種子點(diǎn)的IP地址（如：中心交換機(jī)的IP：10.1.0.2)就可以了，在安裝完軟件以后，利用自動搜尋功能就可以找到網(wǎng)絡(luò)中連接的Cisco設(shè)備了。同時，也要選擇相應(yīng)的數(shù)據(jù)庫，對于PIX 520、Catalyst 6500、Catalyst 3500等要向代理要補(bǔ)丁包。因為沒有補(bǔ)丁包網(wǎng)管軟件連6500的模塊都不能識別。
至于一些應(yīng)用功能，只要參照使用手冊看看就可以了。
但是，前提就是要安裝 HP OpenView 等操作平臺
對于CiscoView 的功能要簡單得多，前臺也可以安裝SNMPS
而Cwsi 包含Cisco View。