1.说明
Cisco的4908-l3的配置比较繁杂,通过IRB来实现不同桥接组之间的通讯 可以与trunk互连 但是,要对每个单独的桥接组进行封装。本实例中主要介绍在一个基于4908为中心,3500为二级交换机的园区网
方案设计以及每个设备的调试过程等。着重介绍4908的配置过程 至于3500的配置请见 基本配置栏目中 关于 3500全系列配置的文章。在此,不赘述!
至于vlan分配等,通过基本配置自己体会吧 呵呵!
2.拓扑图
3.4908_Center_A 配置
User Access Verification
Password:
Password:
Center_A>en
Password:
Center_A#sho run
Building configuration...
Current configuration:
!
version 12.0
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Center_A
!
enable secret 5 $1$OHq9$9XvRCkMWcYtsC4glw.NYG.
enable password cisco
!
ip subnet-zero
no ip domain-lookup
bridge irb (启用IRB 有点儿象 Ip routing)
!
!
!
interface GigabitEthernet1
no ip address
no ip directed-broadcast
对物理端口不做配置,通过子接口进行封装。从下面对子接口的封装可以看出G1下面有三个bridge group (1、40、50)
!
interface GigabitEthernet1.1
encapsulation isl 1
no ip redirects
no ip directed-broadcast
bridge-group 1
!
interface GigabitEthernet1.40
encapsulation isl 40
no ip redirects
no ip directed-broadcast
bridge-group 40
!
interface GigabitEthernet1.50
encapsulation isl 50
no ip redirects
no ip directed-broadcast
bridge-group 50
!
接着进入g2的配置
interface GigabitEthernet2
no ip address
no ip directed-broadcast
!
interface GigabitEthernet2.1
encapsulation isl 1
no ip redirects
no ip directed-broadcast
bridge-group 1
!
interface GigabitEthernet2.10
encapsulation isl 10
no ip redirects
no ip directed-broadcast
bridge-group 10
!
interface GigabitEthernet2.20
encapsulation isl 20
no ip redirects
no ip directed-broadcast
bridge-group 20
!
interface GigabitEthernet2.30
encapsulation isl 30
no ip redirects
no ip directed-broadcast
bridge-group 30
!
interface GigabitEthernet2.40
encapsulation isl 40
no ip redirects
no ip directed-broadcast
bridge-group 40
!
interface GigabitEthernet2.50
encapsulation isl 50
no ip redirects
no ip directed-broadcast
bridge-group 50
!
interface GigabitEthernet3
no ip address
no ip directed-broadcast
!
interface GigabitEthernet3.1
encapsulation isl 1
no ip redirects
no ip directed-broadcast
bridge-group 1
!
interface GigabitEthernet3.150
encapsulation isl 150
no ip redirects
no ip directed-broadcast
bridge-group 150
!
interface GigabitEthernet4
no ip address
no ip directed-broadcast
!
interface GigabitEthernet4.1
encapsulation isl 1
no ip redirects
no ip directed-broadcast
bridge-group 1
!
interface GigabitEthernet4.110
encapsulation isl 110
no ip redirects
no ip directed-broadcast
bridge-group 110
!
interface GigabitEthernet4.120
encapsulation isl 120
no ip redirects
no ip directed-broadcast
bridge-group 120
!
interface GigabitEthernet4.130
encapsulation isl 130
no ip redirects
no ip directed-broadcast
bridge-group 130
!
interface GigabitEthernet4.140
encapsulation isl 140
no ip redirects
no ip directed-broadcast
bridge-group 140
!
端口G5 G6 G7用于服务器的连接
interface GigabitEthernet5
no ip address
no ip directed-broadcast
bridge-group 1
!
interface GigabitEthernet6
no ip address
no ip directed-broadcast
bridge-group 1
!
interface GigabitEthernet7
no ip address
no ip directed-broadcast
bridge-group 1
!
端口G8预留
interface GigabitEthernet8
no ip address
no ip directed-broadcast
shutdown
!
上述的br-group有点象 VLAN的划分过程
以下是对每个br-group 加上网关(可以这样理解)
interface BVI1
ip address 10.1.0.1 255.255.0.0
no ip directed-broadcast
no ip route-cache cef
!
interface BVI10
ip address 10.10.0.1 255.255.0.0
no ip directed-broadcast
no ip route-cache cef
!
interface BVI20
ip address 10.20.0.1 255.255.0.0
no ip directed-broadcast
no ip route-cache cef
!
interface BVI30
ip address 10.30.0.1 255.255.0.0
no ip directed-broadcast
no ip route-cache cef
!
interface BVI40
ip address 10.40.0.1 255.255.0.0
no ip directed-broadcast
no ip route-cache cef
!
interface BVI50
ip address 10.50.0.1 255.255.0.0
no ip directed-broadcast
no ip route-cache cef
!
interface BVI110
ip address 10.110.0.1 255.255.0.0
no ip directed-broadcast
no ip route-cache cef
!
interface BVI120
ip address 10.120.0.1 255.255.0.0
no ip directed-broadcast
no ip route-cache cef
!
interface BVI130
ip address 10.130.0.1 255.255.0.0
no ip directed-broadcast
no ip route-cache cef
!
interface BVI140
ip address 10.140.0.1 255.255.0.0
no ip directed-broadcast
no ip route-cache cef
!
interface BVI150
ip address 10.150.0.1 255.255.0.0
no ip directed-broadcast
no ip route-cache cef
!
ip classless
!
在每个br-group中指定可路由的协议
bridge 1 protocol ieee
bridge 1 route ip
bridge 10 protocol ieee
bridge 10 route ip
bridge 20 protocol ieee
bridge 20 route ip
bridge 30 protocol ieee
bridge 30 route ip
bridge 40 protocol ieee
bridge 40 route ip
bridge 50 protocol ieee
bridge 50 route ip
bridge 110 protocol ieee
bridge 110 route ip
bridge 120 protocol ieee
bridge 120 route ip
bridge 130 protocol ieee
bridge 130 route ip
bridge 140 protocol ieee
bridge 140 route ip
bridge 150 protocol ieee
bridge 150 route ip
!
line con 0
password cisco
transport input none
line aux 0
password cisco
line vty 0 4
password cisco
login
!
end
就可以了
Center_A#
不过不能通过4908实现 VTP server client的配置!
只能通过透明传输 不过 对于二级的堆叠组可以局域实现 server client的配置
4.Center_B 配置
Center_B#show run
Building configuration...
Current configuration:
!
version 12.0
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Center_B
!
enable secret 5 $1$364f$eocY1OMDhoSaEqxPZ3oIY/
enable password cisco
!
!
!
!
!
!
ip subnet-zero
!
!
!
interface FastEthernet0/1
switchport access vlan 130
!
interface FastEthernet0/2
!
interface FastEthernet0/3
!
interface FastEthernet0/4
!
inte