基于Cat 4908-l3和Cat 3500园区网实例1


1.说明
Cisco的4908-l3的配置比较繁杂 , 通过IRB来实现不同桥接组之间的通讯 可以与trunk互连 但是 , 要对每个单独的桥接组进行封装 。本实例中主要介绍在一个基于4908为中心 , 3500为二级交换机的园区网方案设计以及每个设备的调试过程等 。着重介绍4908的配置过程 至于3500的配置请见 基本配置栏目中 关于 3500全系列配置的文章 。在此 , 不赘述!
 至于vlan分配等 , 通过基本配置自己体会吧 呵呵!
2.拓扑图

3.4908_Center_A 配置
User Access Verification
PassWord:
Password:
Center_A>en
Password:
Center_A#sho run
Building configuration...
Current configuration:
version 12.0
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
hostname Center_A
enable secret 5 $1$OHq9$9XvRCkMWcYtsC4glw.NYG.
enable password cisco
ip subnet-zero
no ip domain-lookup
bridge irb (启用IRB 有点儿象 Ip routing)
!
interface GigabitEthernet1
no ip address
no ip directed-broadcast
对物理端口不做配置 , 通过子接口进行封装 。从下面对子接口的封装可以看出G1下面有三个bridge group (1、40、50)
interface GigabitEthernet1.1
encapsulation isl 1
no ip redirects
no ip directed-broadcast
bridge-group 1
interface GigabitEthernet1.40
encapsulation isl 40
no ip redirects
no ip directed-broadcast
bridge-group 40
interface GigabitEthernet1.50
encapsulation isl 50
no ip redirects
no ip directed-broadcast
bridge-group 50
接着进入g2的配置
interface GigabitEthernet2
no ip address
no ip directed-broadcast
interface GigabitEthernet2.1
encapsulation isl 1
no ip redirects
no ip directed-broadcast
bridge-group 1
interface GigabitEthernet2.10
encapsulation isl 10
no ip redirects
no ip directed-broadcast
bridge-group 10
interface GigabitEthernet2.20
encapsulation isl 20
no ip redirects
no ip directed-broadcast
bridge-group 20
interface GigabitEthernet2.30
encapsulation isl 30
no ip redirects
no ip directed-broadcast
bridge-group 30
interface GigabitEthernet2.40
encapsulation isl 40
no ip redirects
no ip directed-broadcast
bridge-group 40
interface GigabitEthernet2.50
encapsulation isl 50
no ip redirects
no ip directed-broadcast
bridge-group 50
interface GigabitEthernet3
no ip address
no ip directed-broadcast
interface GigabitEthernet3.1
encapsulation isl 1
no ip redirects
no ip directed-broadcast
bridge-group 1
interface GigabitEthernet3.150
encapsulation isl 150
no ip redirects
no ip directed-broadcast
bridge-group 150
interface GigabitEthernet4
no ip address
no ip directed-broadcast
interface GigabitEthernet4.1
encapsulation isl 1
no ip redirects
no ip directed-broadcast
bridge-group 1
interface GigabitEthernet4.110
encapsulation isl 110
no ip redirects
no ip directed-broadcast
bridge-group 110
interface GigabitEthernet4.120

encapsulation isl 120
no ip redirects
no ip directed-broadcast
bridge-group 120
interface GigabitEthernet4.130
encapsulation isl 130
no ip redirects
no ip directed-broadcast
bridge-group 130
interface GigabitEthernet4.140
encapsulation isl 140
no ip redirects
no ip directed-broadcast
bridge-group 140
端口G5 G6 G7用于服务器的连接
interface GigabitEthernet5
no ip address
no ip directed-broadcast
bridge-group 1
interface GigabitEthernet6
no ip address
no ip directed-broadcast
bridge-group 1
interface GigabitEthernet7
no ip address
no ip directed-broadcast
bridge-group 1
端口G8预留
interface GigabitEthernet8
no ip address
no ip directed-broadcast
shutdown
上述的br-group有点象 VLAN的划分过程
以下是对每个br-group 加上网关(可以这样理解)
interface BVI1
ip address 10.1.0.1 255.255.0.0

推荐阅读