广东省中华联保地市支公司项目之行

ch5802125

来到广东已经6天了啊每天都要起早赶往下一站的项目实施第一次实战经验大大的收获啊 不过第一天之行来到广东的肇庆一到看到锐捷的3层交换机 命名跟思科原理配置都一样 不过没有CISCO的强大有的命名他还不能支持 2层交换机都只能当傻瓜来配置啊 第一次出来做项目 刚开始很紧张 出的问题都不知道办 不懂的话还要问别人虽然我们5个负责的都是内网改造 刚配置的时候有的命名跟思科不一样 怕了要死 为什么配置的不是思科 也看到的2层和3层的广播风爆很刺激啊
交换灯一直闪哈哈我还是把第一天的总结给大家共享

基于以上的总体目标，由于各中支公司网络建设现状不完全相同，部分二级中支公司网络已经实施了双核心的改造，此次实施可以分为两大阶段来进行，以下是经统计后各中支公司的网络现状及分阶段阶段性改造目标。

支公司网络现状

ch5802125

这是改造后的网络

ch5802125

这是他们广东总部的配置3层交换机
version 1.0
install 1   12sfp/gt
install 2   24t4sfp4gt
ip routing algorithm CRC32_UPPER
!
hostname rg68-new
enable secret level 1 5 "X)sv'~12Y*T7+.tWZ[V/,|7S(\W&-/-
enable secret level 15 5 "wNq&#Z12IOrJ%(8WMp]K*.tAxB^"[/7
!
  spanning-tree
  spanning-tree mst configuration
  instance 1 vlan 1
  instance 11 vlan 11
  instance 12 vlan 12
  instance 13 vlan 13
  instance 14 vlan 14
  instance 15 vlan 15
  instance 16 vlan 116
  instance 31 vlan 31
  instance 32 vlan 32
  instance 33 vlan 33
  instance 34 vlan 34
  instance 35 vlan 35
  instance 36 vlan 36
  name vrrp  
!
  spanning-tree mst 0 priority 4096  
  spanning-tree mst 1 priority 4096  
  spanning-tree mst 11 priority 4096  
  spanning-tree mst 12 priority 4096  
  spanning-tree mst 13 priority 4096  
  spanning-tree mst 14 priority 4096  
  spanning-tree mst 15 priority 4096  
  spanning-tree mst 16 priority 4096  
  spanning-tree mst 31 priority 4096  
  spanning-tree mst 32 priority 4096  
  spanning-tree mst 33 priority 4096  
  spanning-tree mst 34 priority 4096  
  spanning-tree mst 35 priority 4096  
  spanning-tree mst 36 priority 4096  
interface GigabitEthernet 1/1
medium-type fiber
description 1#datang  
switchport mode trunk
system-guard enable
system-guard same-ip-attack-packets 100
system-guard scan-ip-attack-packets 5
!
interface GigabitEthernet 1/2
medium-type fiber
description 7#  
switchport mode trunk
system-guard enable
system-guard same-ip-attack-packets 100
system-guard scan-ip-attack-packets 5
!
interface GigabitEthernet 1/3
medium-type fiber
description 9#  
switchport mode trunk
system-guard enable
system-guard same-ip-attack-packets 100
system-guard scan-ip-attack-packets 5
!
interface GigabitEthernet 1/4
medium-type fiber
description 8#  
switchport mode trunk
system-guard enable
system-guard same-ip-attack-packets 100
system-guard scan-ip-attack-packets 5
!
interface GigabitEthernet 1/5
medium-type fiber
switchport mode trunk
system-guard enable
system-guard same-ip-attack-packets 100
system-guard scan-ip-attack-packets 5
!
interface GigabitEthernet 1/6
switchport access vlan 33
!
interface GigabitEthernet 1/7
switchport access vlan 31
!
interface GigabitEthernet 1/8
switchport access vlan 32
!
interface GigabitEthernet 1/9
switchport access vlan 34
!
interface GigabitEthernet 1/10
switchport access vlan 34
!
interface GigabitEthernet 1/11
switchport access vlan 34
!
interface GigabitEthernet 1/12
description connect_to_Test-3750-A-0/24  
switchport mode trunk
!
interface FastEthernet 2/1
switchport mode trunk
switchport access vlan 111
!
interface FastEthernet 2/2
switchport access vlan 32
!
interface FastEthernet 2/3
switchport mode trunk
!
interface FastEthernet 2/4
switchport mode trunk
switchport access vlan 16
!
interface FastEthernet 2/5
switchport access vlan 34
!
interface FastEthernet 2/6
switchport access vlan 121
!
interface FastEthernet 2/7
switchport access vlan 34
!
interface FastEthernet 2/8
no switchport
ip address 44.8.224.29 255.255.255.252
!
interface FastEthernet 2/9
switchport access vlan 34
!
interface FastEthernet 2/10
switchport access vlan 131
!
interface FastEthernet 2/11
switchport access vlan 34
!
interface FastEthernet 2/12
switchport access vlan 33
!
interface FastEthernet 2/13
switchport access vlan 121
!
interface FastEthernet 2/14
switchport access vlan 21
!        
interface FastEthernet 2/15
no switchport
ip address 44.8.224.13 255.255.255.252
!
interface FastEthernet 2/16
no switchport
ip address 44.8.224.9 255.255.255.252
!
interface FastEthernet 2/17
switchport access vlan 36
!
interface FastEthernet 2/18
switchport access vlan 36
!
interface FastEthernet 2/19
switchport access vlan 32
!
interface FastEthernet 2/20
switchport access vlan 32
!
interface FastEthernet 2/21
switchport access vlan 34
!
interface FastEthernet 2/22
switchport access vlan 36
!
interface FastEthernet 2/23
switchport access vlan 34
!
interface FastEthernet 2/24
switchport mode trunk
!
interface GigabitEthernet 2/25
switchport access vlan 31
!
interface GigabitEthernet 2/26
no switchport
ip address 44.8.224.5 255.255.255.252
!
interface GigabitEthernet 2/27
switchport access vlan 34
!        
interface GigabitEthernet 2/28
description mp3780  
switchport access vlan 121
!
interface Vlan 1
ip address 44.8.217.254 255.255.255.0
    standby 1 ip 44.8.217.254
!
interface Vlan 11
ip address 44.8.128.254 255.255.255.0
    standby 11 ip 44.8.128.254
!
interface Vlan 12
description YeGuan  
ip address 44.8.129.254 255.255.255.0
    standby 12 ip 44.8.129.254
!
interface Vlan 13
description CaiWu  
ip address 44.8.32.254 255.255.255.0
    standby 13 ip 44.8.32.254
!
interface Vlan 14
description XingZheng  
ip address 44.8.33.254 255.255.255.0
    standby 14 ip 44.8.33.254
!
interface Vlan 15
description Others  
ip address 44.8.34.254 255.255.255.0
    standby 15 ip 44.8.34.254
!
interface Vlan 16
ip address 44.8.126.254 255.255.255.0
!
interface Vlan 21
description vpn-yingtong  
ip address 44.8.224.249 255.255.255.248
!
interface Vlan 31
description to-bangong-service  
ip address 44.0.0.254 255.255.255.0
    standby 31 ip 44.0.0.254
!
interface Vlan 32
description to-yewu-service  
ip address 44.0.12.254 255.255.255.0
    standby 32 ip 44.0.12.254
!
interface Vlan 33
description to-bingdu-service  
ip address 44.0.3.254 255.255.255.0
    standby 33 ip 44.0.3.254
!
interface Vlan 34
description to-daili-service  
ip address 44.0.16.254 255.255.255.0
    standby 34 ip 44.0.16.254
!
interface Vlan 35
description to-ceshi-service  
ip address 44.0.8.254 255.255.255.0
    standby 35 ip 44.0.8.254
!
interface Vlan 36
description ip-phone  
ip address 44.0.20.254 255.255.255.0
    standby 36 ip 44.0.20.254
!
interface Vlan 116
description it  
ip address 44.8.55.254 255.255.255.0
    standby 16 ip 44.8.55.254
!
interface Vlan 119
description 119_linjv  
ip address 44.8.0.30 255.255.255.252
!
interface Vlan 121
ip address 44.8.224.105 255.255.255.248
!
interface Vlan 131
ip address 44.8.224.113 255.255.255.248
!        
router ospf
area 0.0.0.0
area 0.0.0.1
area 0.0.0.1 nssa
network 0.0.0.0 0.0.0.0 area 0.0.0.0
network 44.8.0.28 255.255.255.252 area 0.0.0.1
!
ip route 0.0.0.0 0.0.0.0 FastEthernet 2/15 44.8.224.14 1 enabled
ip route 9.72.47.0 255.255.255.0 FastEthernet 2/8 44.8.224.30 254 enabled
ip route 10.0.10.0 255.255.255.0 FastEthernet 2/16 44.8.224.10 254 enabled
ip route 44.0.0.0 255.0.0.0 Vlan 121 44.8.224.106 254 enabled
ip route 44.8.36.0 255.255.255.0 FastEthernet 2/16 44.8.224.10 200 enabled
ip route 44.8.38.0 255.255.255.0 FastEthernet 2/16 44.8.224.10 200 enabled
ip route 44.8.39.0 255.255.255.0 FastEthernet 2/16 44.8.224.10 200 enabled
ip route 44.8.40.0 255.255.255.0 FastEthernet 2/16 44.8.224.10 200 enabled
ip route 44.8.42.0 255.255.255.0 FastEthernet 2/16 44.8.224.10 200 enabled
ip route 44.8.43.0 255.255.255.0 FastEthernet 2/16 44.8.224.10 200 enabled
ip route 44.8.44.0 255.255.255.0 FastEthernet 2/16 44.8.224.10 200 enabled
ip route 44.8.45.0 255.255.255.224 FastEthernet 2/16 44.8.224.10 200 enabled
ip route 44.8.46.0 255.255.255.224 FastEthernet 2/16 44.8.224.10 200 enabled
ip route 44.8.47.0 255.255.255.224 FastEthernet 2/16 44.8.224.10 200 enabled
ip route 44.8.49.0 255.255.255.0 FastEthernet 2/16 44.8.224.10 200 enabled
ip route 44.8.160.0 255.255.255.0 Vlan 121 44.8.224.107 200 enabled
ip route 44.8.161.0 255.255.255.0 Vlan 121 44.8.224.107 200 enabled
ip route 44.8.162.0 255.255.255.0 Vlan 21 44.8.224.250 200 enabled
ip route 44.8.162.152 255.255.255.248 Vlan 121 44.8.224.107 1 enabled
ip route 44.8.163.0 255.255.255.0 Vlan 21 44.8.224.250 200 enabled
ip route 44.8.164.0 255.255.255.0 Vlan 21 44.8.224.250 200 enabled
ip route 44.8.165.0 255.255.255.0 Vlan 121 44.8.224.107 200 enabled
ip route 44.8.166.0 255.255.255.0 Vlan 21 44.8.224.250 200 enabled
ip route 44.8.167.0 255.255.255.0 Vlan 121 44.8.224.107 1 enabled
ip route 61.129.61.128 255.255.255.255 Vlan 116 44.8.55.252 1 enabled
ip route 61.129.61.129 255.255.255.255 Vlan 116 44.8.55.252 1 enabled
ip route 65.0.0.0 255.0.0.0 Vlan 121 44.8.224.106 254 enabled
ip route 65.54.0.0 255.255.0.0 FastEthernet 2/15 44.8.224.14 1 enabled
ip route 192.168.0.0 255.255.0.0 Vlan 121 44.8.224.106 254 enabled
ip route 202.108.144.0 255.255.255.0 Vlan 116 44.8.55.252 1 enabled
ip route 210.74.41.0 255.255.255.0 Vlan 116 44.8.55.252 1 enabled
ip route 218.17.246.0 255.255.255.0 Vlan 116 44.8.55.252 1 enabled
ip route 218.19.141.0 255.255.255.0 Vlan 116 44.8.55.252 1 enabled
ip route 218.241.72.0 255.255.255.255 Vlan 116 44.8.55.252 1 enabled
ip route 219.133.104.67 255.255.255.255 Vlan 116 44.8.55.252 1 enabled
ip route 219.142.79.0 255.255.255.0 Vlan 116 44.8.55.252 1 enabled
ip route 219.142.89.0 255.255.255.0 Vlan 116 44.8.55.252 1 enabled
ip route 219.142.91.0 255.255.255.0 Vlan 116 44.8.55.252 1 enabled

ch5802125

GZ3750#sh ru
GZ3750#sh running-config

Building configuration...
Current configuration : 1453 bytes

!
version RGNOS 10.2.00(2), Release(28794)(Fri Dec 21 09:27:15 CST 2007 -ngcf32)
hostname GZ3750
!
!
!
vlan 1
!
vlan 401
!
!
no service password-encryption
!
!
!
!
!
!
!
!
!         
!
!
!
!
interface FastEthernet 0/1
switchport mode trunk
!
interface FastEthernet 0/2
!
interface FastEthernet 0/3
!
interface FastEthernet 0/4
!
interface FastEthernet 0/5
!
interface FastEthernet 0/6
!
interface FastEthernet 0/7
!
interface FastEthernet 0/8
!
interface FastEthernet 0/9
!
interface FastEthernet 0/10
!
interface FastEthernet 0/11
!
interface FastEthernet 0/12
!
interface FastEthernet 0/13
!
interface FastEthernet 0/14
!
interface FastEthernet 0/15
!
interface FastEthernet 0/16
!
interface FastEthernet 0/17
!
interface FastEthernet 0/18
!
interface FastEthernet 0/19
!
interface FastEthernet 0/20
!
interface FastEthernet 0/21
!
interface FastEthernet 0/22
!
interface FastEthernet 0/23
!
interface FastEthernet 0/24
no switchport
ip address 44.8.0.249 255.255.255.252
description conect_to_6806Enew
!
interface GigabitEthernet 0/25
!
interface GigabitEthernet 0/26
!
interface GigabitEthernet 0/27
!
interface GigabitEthernet 0/28
!
interface VLAN 401
ip address 44.8.0.246 255.255.255.252
description 401_linjv
!
!
router ospf 1
network 44.8.0.244 0.0.0.3 area 0
network 44.8.0.248 0.0.0.3 area 0
!
!
!
!
line con 0
line vty 0 4
login
!
!
End

吴与伦比

不错嘛，这么快就可以做项目啦。。。。哈哈加油加油


我顶~~~

ch5802125

感觉这次的项目他们为了视频会议了在3层搞了优先协议做静态路由指向总部的视频服务器要做好多条啊 命名涉及之多啊 在副根交换机要ip route 0.0.0.0 0.0.0.0 44.8.96.174 指向网通的对端 ENEW
ip route 0.0.0.0 0.0.0.0 44.8.96.169 指向3750A的21口
ip route 44.0.0.1 255.255.255.255 FastEthernet 0/22 44.8.96.174
ip route 44.0.3.1 255.255.255.255 FastEthernet 0/21 44.8.96.169
ip route 44.0.12.50 255.255.255.255 44.8.96.169
ip route 44.0.12.50 255.255.255.255 FastEthernet 0/22 44.8.96.174

水若清寒

哇,虽然你写的那些内容我都看不懂,不过看起来还不错啊啊.支持,顶

ywf1025

copy

zolo1987

怎么感觉拓扑还不完美～～因该还可以多添加好多设备的哟

qujie1030

网络层貌似没有广播风暴啊~~~~~~~~~~~~~~~~~~~~~