用Packet Tracer 5.0构件一个完整的内部网络的模拟实验

首先推荐一款cisco官方出的cisco设备模拟软件Packet Tracer ,虽然不是所有的IOS命令和功能都可以实现,但是对于常用的命令都可以很好的提供支持,相对dy的系统占用情况,这款软件系统占用基本上可以忽略了,大家如果感兴趣,可以网网上搜索下载.

以下为实验的top图

将鼠标移动到连线的绿色点上即可看到两端对应端口
3560 Gig0/1----------------2960 Gig1/1 (switch 1)
3560 Gig0/2----------------2960 Gig1/1 (switch 2)
3560 fa0/1----------------- 2811(router 0) fa0/0
3560 fa0/2------------------2960 fa0/1 (switch 3) （由于3560非模块化，无法添加Giga模块，所以第三台交换机连接到fa0/1）
3560 fa0/3------------------ 2811(DHCP) fa0/0
2960-sw1
Fa0/1------------------------pc1-1
Fa0/2------------------------pc1-2
Fa0/3------------------------pc1-3
2960-sw2
Fa0/1------------------------pc2-1
Fa0/2------------------------pc2-2
Fa0/3------------------------pc2-3
2960-sw1
Fa0/2------------------------pc3-1
Fa0/3------------------------pc3-2
Fa0/4------------------------pc3-3

VLAN规划：
3560上：除连接前端路由器的fa0/1（该端口启用三层功能）和连接交换机的fa0/2（该端口做trunk） 不划分到VLAN，其他从fa0/3到fa0/10全部划分到VLAN100 IP地址192.168.100.x
Sw1上：fa0/1，fa0/2 划分到vlan101     fa0/3 划分到vlan104
Sw2上：fa0/1，fa0/2 划分到vlan102     fa0/3 划分到vlan104
Sw3上：fa0/2，fa0/3 划分到vlan103     fa0/4 划分到vlan104
即vlan104为跨交换机VLAN

一、配置3560
1、与路由器之间的连接
Switch(config)#interface fastEthernet 0/1
Switch(config-if)#no switchport
Switch(config-if)#ip address 192.168.200.10 255.255.255.0
Switch(config-if)#no shut
Router(config)#interface fastEthernet 0/0
Router(config-if)#ip address 192.168.200.1 255.255.255.0
Router(config-if)#no shutdown
Router(config-if)#end
Router#exit
Router>ping 192.168.200.10
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.200.10, timeout is 2 seconds:
.!!!!
Success rate is 80 percent (4/5), round-trip min/avg/max = 31/31/32 ms

2、在3560上配置VLAN以及相关信息
Switch(config)#hostname 3560
3560(config)#vlan 100
3560(config-vlan)#name vlan100
3560(config-vlan)#exit
3560(config)#interface vlan100
3560(config-if)#ip address 192.168.100.1 255.255.255.0
3560(config-if)#no shutdown
3560(config-if)#exit
3560(config)#vlan 101
3560(config-vlan)#name vlan101
3560(config-vlan)#exit
3560(config)#interface vlan 101
3560(config-if)#ip address 192.168.101.1 255.255.255.0
3560(config-if)#no shutdown
3560(config)#vlan 102
3560(config-vlan)#name vlan102
3560(config-vlan)#vlan 103
3560(config-vlan)#name vlan103
3560(config-vlan)#exit
3560(config)#interface vlan102
3560(config-if)#ip address 192.168.102.1 255.255.255.0
3560(config-if)#no shutdown
3560(config-if)#interface vlan103
3560(config-if)#ip address 192.168.103.1 255.255.255.0
3560(config-if)#no shutdown

3560(config)#vlan 104
3560(config-vlan)#name
3560(config-vlan)#name vlan104
3560(config-vlan)#exit
3560(config)#interface vlan104
3560(config-if)#ip address 192.168.104.1 255.255.255.0
3560(config-if)#no shutdown
3、3560上配置trunk (注：这里使用的Packet Tracer 由于不支持通过switchport trunk encapsolution命令指定trunk协议，默认)
3560(config)#interface gigabitEthernet 0/1
3560(config-if)#shutdown
3560(config-if)#switchport mode trunk
3560(config-if)#switchport trunk allowed vlan 100-104
3560(config-if)#no shutdown

3560(config)#interface gigabitEthernet 0/2
3560(config-if)#shutdown
3560(config-if)#switchport mode trunk
3560(config-if)#switchport trunk allowed vlan 100-104
3560(config-if)#no shutdown

3560(config)#interface fastEthernet 0/2
3560(config-if)#shutdown
3560(config-if)#switchport mode trunk
3560(config-if)#switchport trunk allowed vlan 100-104
3560(config-if)#no shutdown
3560上配置默认路由
3560(config)#ip route 0.0.0.0 0.0.0.0 192.168.200.1

将对应端口分配到对应vlan
3560(config)#interface range fastEthernet 0/3 – 10 注意 后面的3后面和10前面都有空格
3560(config-if-range)#switchport mode access
3560(config-if-range)#switchport access vlan 100

对trunk配置信息的校验
3560#show interfaces trunk
Port        Mode         Encapsulation  Status        Native vlan
Fa0/2       on           802.1q         trunking      1
Gig0/1      on           802.1q         trunking      1
Gig0/2      on           802.1q         trunking      1

Port        Vlans allowed on trunk
Fa0/2       100-104
Gig0/1      100-104
Gig0/2      100-104

Port        Vlans allowed and active in management domain
Fa0/2       ,100,101,102,103,104
Gig0/1      ,100,101,102,103,104
Gig0/2      ,100,101,102,103,104

Port        Vlans in spanning tree forwarding state and not pruned
Fa0/2       ,100,101,102,103,104
Gig0/1      ,100,101,102,103,104
Gig0/2      ,100,101,102,103,104
二、在2811路由器上配置路由（使访问到内网的数据知道从连接三层交换机的口走）
Router(config)#ip route 192.168.0.0 255.255.0.0 192.168.200.10

三、二层交换机配置
2960-sw1
配置trunk
sw1(config)#interface gigabitEthernet 1/1
sw1(config-if)#shutdown
sw1(config-if)#switchport mode trunk
sw1(config-if)#switchport trunk  allowed vlan 100-104
sw1(config-if)#no shutdown
将端口分配到vlan
sw1(config)#interface range fastEthernet 0/1 - 2
sw1(config-if-range)#switchport mode access
sw1(config-if-range)#switchport access vlan 101
sw1(config)#interface fastEthernet 0/3
sw1(config-if)#switchport mode access
sw1(config-if)#switchport access vlan 104
Access VLAN does not exist. Creating vlan 104
sw1(config)#interface range fastEthernet 0/1 - 24
sw1(config-if-range)#spanning-tree portfast             /设置1-24端口为快速端口
2960-sw2
sw2(config)#interface gigabitEthernet 1/1
sw2(config-if)#switchport mode trunk
sw2(config-if)#switchport trunk allowed vlan 100-104
sw2(config-if)#no shutdown
sw2(config)#interface range fastEthernet 0/1 - 2
sw2(config-if-range)#switchport mode access
sw2(config-if-range)#switchport access vlan 102
% Access VLAN does not exist. Creating vlan 102
sw2(config)#interface fastEthernet 0/3
sw2(config-if)#switchport mode access
sw2(config-if)#switchport access vlan 104
% Access VLAN does not exist. Creating vlan 104
2960-sw3
sw3(config)#interface fastEthernet 0/1
sw3(config-if)#switchport mode trunk
sw3(config-if)#switchport trunk allowed vlan 100-104
sw3(config-if)#no shutdown
sw3(config)#interface range fastEthernet 0/2 - 3
sw3(config-if-range)#switchport mode access
sw3(config-if-range)#switchport access vlan 103
% Access VLAN does not exist. Creating vlan 103
sw3(config)#interface fastEthernet 0/4
sw3(config-if)#switchport mode access
sw3(config-if)#switchport access vlan 104
% Access VLAN does not exist. Creating vlan 104

DHCP配置
Router(config-if)#interface fastEthernet 0/0
Router(config-if)#ip address 192.168.100.3 255.255.255.0
Router(config-if)#no shutdown
Router(config-if)#exit
Router(config)#ip route 0.0.0.0 0.0.0.0 192.168.100.1

后发现模拟器上无法用 ip helper-address来实现dhcp 中继，DHCP就没有做。后续再在dy上尝试做dhcp中继和nat,应该会比较有意思!
 

2010.5.6最新版本的Packet Tracer  5.3下载地址
http://mail.qq.com/cgi-bin/ftnExs_download?k=7c3566349a95579a5a0f563c1f65054e060700005a0451541c5350525c480354040d4b0c5f50554c570104500852000707050557397d373150560d514d314500525014010a3a44044540161a5c1d526177&t=exs_ftn_download&code=15f49e7a
http://mail.qq.com/cgi-bin/ftnExs_download?k=3b303536ea3155cf0a0a053e1233051d51010301550300574c555300011e030a5708180e0000521f500202040204015753550d523416376200535e534067455302554703076c4457154545695a5c684614445a445d525b414f554d533475&t=exs_ftn_download&code=a0564372