1.說明 Cisco的4908-l3的配置比較繁雜，通過IRB來實現不同橋接組之間的通訊 可以與trunk互連 但是，要對每個單獨的橋接組進行封裝。本實例中主要介紹在一個基于4908為中心，3500為二級交換機的園區網方案設計以及每個設備的調試過程等。著重介紹4908的配置過程 至于3500的配置請見 基本配置欄目中 關于 3500全系列配置的文章。在此，不贅述！ 至于vlan分配等，通過基本配置自己體會吧 呵呵！ 2.拓撲圖 3.4908_Center_A 配置 User access Verification PassWord: Password: Center_A>en Password: Center_A#sho run Building configuration... Current configuration: version 12.0 no service pad service timestamps debug uptime service timestamps log uptime no service password-encryption hostname Center_A enable secret 5 $1$OHq9$9XvRCkMWcYtsC4glw.NYG. enable password cisco ip subnet-zero no ip domain-lookup bridge irb (啟用IRB 有點兒象 Ip routing) ! interface GigabitEthernet1 no ip address no ip directed-broadcast 對物理端口不做配置，通過子接口進行封裝。從下面對子接口的封裝可以看出G1下面有三個bridge group (1、40、50) interface GigabitEthernet1.1 encapsulation isl 1 no ip redirects no ip directed-broadcast bridge-group 1 interface GigabitEthernet1.40 encapsulation isl 40 no ip redirects no ip directed-broadcast bridge-group 40 interface GigabitEthernet1.50 encapsulation isl 50 no ip redirects no ip directed-broadcast bridge-group 50 接著進入g2的配置 interface GigabitEthernet2 no ip address no ip directed-broadcast interface GigabitEthernet2.1 encapsulation isl 1 no ip redirects no ip directed-broadcast bridge-group 1 interface GigabitEthernet2.10 encapsulation isl 10 no ip redirects no ip directed-broadcast bridge-group 10 interface GigabitEthernet2.20 encapsulation isl 20 no ip redirects no ip directed-broadcast bridge-group 20 interface GigabitEthernet2.30 encapsulation isl 30 no ip redirects no ip directed-broadcast bridge-group 30 interface GigabitEthernet2.40 encapsulation isl 40 no ip redirects no ip directed-broadcast bridge-group 40 interface GigabitEthernet2.50 encapsulation isl 50 no ip redirects no ip directed-broadcast bridge-group 50 interface GigabitEthernet3 no ip address no ip directed-broadcast interface GigabitEthernet3.1 encapsulation isl 1 no ip redirects no ip directed-broadcast bridge-group 1 interface GigabitEthernet3.150 encapsulation isl 150 no ip redirects no ip directed-broadcast bridge-group 150 interface GigabitEthernet4 no ip address no ip directed-broadcast interface GigabitEthernet4.1 encapsulation isl 1 no ip redirects no ip directed-broadcast bridge-group 1 interface GigabitEthernet4.110 encapsulation isl 110 no ip redirects no ip directed-broadcast bridge-group 110 interface GigabitEthernet4.120
encapsulation isl 120 no ip redirects no ip directed-broadcast bridge-group 120 interface GigabitEthernet4.130 encapsulation isl 130 no ip redirects no ip directed-broadcast bridge-group 130 interface GigabitEthernet4.140 encapsulation isl 140 no ip redirects no ip directed-broadcast bridge-group 140 端口G5 G6 G7用于服務器的連接 interface GigabitEthernet5 no ip address no ip directed-broadcast bridge-group 1 interface GigabitEthernet6 no ip address no ip directed-broadcast bridge-group 1 interface GigabitEthernet7 no ip address no ip directed-broadcast bridge-group 1 端口G8預留 interface GigabitEthernet8 no ip address no ip directed-broadcast shutdown 上述的br-group有點象 VLAN的劃分過程 以下是對每個br-group 加上網關（可以這樣理解） interface BVI1 ip address 10.1.0.1 255.255.0.0 no ip directed-broadcast no ip route-cache cef interface BVI10 ip address 10.10.0.1 255.255.0.0 no ip directed-broadcast no ip route-cache cef interface BVI20 ip address 10.20.0.1 255.255.0.0 no ip directed-broadcast no ip route-cache cef interface BVI30 ip address 10.30.0.1 255.255.0.0 no ip directed-broadcast no ip route-cache cef interface BVI40 ip address 10.40.0.1 255.255.0.0 no ip directed-broadcast no ip route-cache cef interface BVI50 ip address 10.50.0.1 255.255.0.0 no ip directed-broadcast no ip route-cache cef interface BVI110 ip address 10.110.0.1 255.255.0.0 no ip directed-broadcast no ip route-cache cef interface BVI120 ip address 10.120.0.1 255.255.0.0 no ip directed-broadcast no ip route-cache cef interface BVI130 ip address 10.130.0.1 255.255.0.0 no ip directed-broadcast no ip route-cache cef interface BVI140 ip address 10.140.0.1 255.255.0.0 no ip directed-broadcast no ip route-cache cef interface BVI150 ip address 10.150.0.1 255.255.0.0 no ip directed-broadcast no ip route-cache cef ip classless 在每個br-group中指定可路由的協議 bridge 1 PRotocol ieee bridge 1 route ip bridge 10 protocol ieee bridge 10 route ip bridge 20 protocol ieee bridge 20 route ip bridge 30 protocol ieee bridge 30 route ip bridge 40 protocol ieee bridge 40 route ip bridge 50 protocol ieee bridge 50 route ip bridge 110 protocol ieee bridge 110 route ip bridge 120 protocol ieee bridge 120 route ip bridge 130 protocol ieee bridge 130 route ip bridge 140 protocol ieee bridge 140 route ip bridge 150 protocol ieee bridge 150 route ip line con 0 password cisco transport input none line aux 0 password cisco line vty 0 4 password cisco login end 就可以了 Center_A# 不過不能通過4908實現 VTP server client的配置！ 只能通過透明傳輸 不過 對于二級的堆疊組可以局域實現 server client的配置 4.Center_B 配置 Center_B#show run
Building configuration... Current configuration: version 12.0 no service pad service timestamps debug uptime service timestamps log uptime no service password-encryption hostname Center_B enable secret 5 $1$364f$eocY1OMDhoSaEqXPZ3oIY/ enable password cisco ! ! ! ip subnet-zero ! interface FastEthernet0/1 switchport access vlan 130 interface FastEthernet0/2 interface FastEthernet0/3 interface FastEthernet0/4 interface FastEthernet0/5 interface FastEthernet0/6 interface FastEthernet0/7 interface FastEthernet0/8 interface FastEthernet0/9 interface FastEthernet0/10 interface FastEthernet0/11 interface FastEthernet0/12 interface FastEthernet0/13 interface FastEthernet0/14 interface FastEthernet0/15 interface FastEthernet0/16 interface FastEthernet0/17 interface FastEthernet0/18 interface FastEthernet0/19 interface FastEthernet0/20 interface FastEthernet0/21 switchport access vlan 150 interface FastEthernet0/22 switchport access vlan 150 interface FastEthernet0/23 switchport access vlan 150 interface FastEthernet0/24 switchport access vlan 150 interface GigabitEthernet0/1 switchport mode trunk interface GigabitEthernet0/2 switchport mode trunk interface VLAN1 ip address 10.1.2.1 255.255.0.0 no ip directed-broadcast no ip route-cache ! line con 0 password cisco transport input none stopbits 1 line vty 0 4 password cisco login line vty 5 15 password cisco login end Center_B# show vlan VLAN Name Status Ports ---- -------------------------------- --------- ------------------------------- 1 default active Fa0/1,Fa0/2, Fa0/3, Fa0/4, Fa0/5, Fa0/6, Fa0/7, Fa0/8, Fa0/9, Fa0/10, Fa0/11, Fa0/12, Fa0/13, Fa0/14, Fa0/15, Fa0/16, Fa0/17, Fa0/18, Fa0/19, Fa0/20 150 wailian active Fa0/21, Fa0/22, Fa0/23, Fa0/24 1002 fddi-default active 1003 token-ring-default active 1004 fddinet-default active 1005 trnet-default active VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2 ---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------ 1 enet 100001 1500 - - - - - 1002 1003 130 enet 100130 1500 - - - - - 0 0 150 enet 100150 1500 - - - - - 0 0 1002 fddi 101002 1500 - - - - - 1 1003 1003 tr 101003 1500 1005 0 - - srb 1 1002 1004 fdnet 101004 1500 - - 1 ibm - 0 0 1005 trnet 101005 1500 - - 1 ibm - 0 0 Center_B# 5.bluestudy1 配置 bluestudy1#show run Building configuration... Current configuration: version 12.0 no service pad service timestamps debug uptime service timestamps log uptime no service password-encryption hostname bluestudy1 enable secret 5 $1$oGOc$Jh0uRraaxrbjklW4.22Na0 enable password cisco ! ! ! ip subnet-zero ! interface FastEthernet0/1 switchport access vlan 50
