J9¼¯ÍŹú¼ÊÕ¾

¹ã¶«°Ë¶þÕ¾82157Á¬ÍøÈ¨ÍþÊֲ᣺¹ã¶«°Ë¶þÕ¾82157Á¬ÍøÉî¶È½â¶ÁÓëʵս²Ù×÷
admin

adminÖÎÀíÔ±

  • ÎÄÕÂ8905
  • ä¯ÀÀ9698

¹ã¶«°Ë¶þÕ¾82157Á¬ÍøÈ¨ÍþÊֲ᣺¹ã¶«°Ë¶þÕ¾82157Á¬ÍøÉî¶È½â¶ÁÓëʵս²Ù×÷

J9¼¯ÍŹú¼ÊÕ¾¡¾ÖйúÇø¡¿¹Ù·½ÍøÕ¾admin 2026-06-08 09:27:23 °ÄÃÅ 9698 ´Îä¯ÀÀ 0¸öÆÀÂÛ

¹ã¶«°Ë¶þÕ¾82157Á¬ÍøÈ¨ÍþÊֲ᣺´Ó»ù´¡µÀÀíµ½ÊµÕ½²Ù×÷µÄȫά¶È½â¶Á

ÔÚÊý×Ö»¯º£³±Ï¯¾í¸÷Ðи÷ÒµµÄ½ñÌì £¬ÍøÂçÏνÓÓëÊý¾Ý´«ÊäµÄ²»±äÐÔ¡¢°²È«ÐÔºÍЧÄÜ £¬ÒѾ­³ÉΪÆóÒµÉõÖÁÓ×ÎÒÓû§×îÖ÷ÌâµÄËßÇóÖ®Ò»¡£Ìáµ½¡°¹ã¶«°Ë¶þÕ¾82157Á¬Íø¡± £¬ºÜ¶à¸Õ½Ó´¥ÕâÒ»ÁìÓòµÄ°é¿ÉÄÜ»á¸ÐӦİÉú £¬ÉõÖÁ¸Ð´¥ËüÊÇÒ»´®µ¥µ÷µÄ¼¼Êõ´úÂë¡£µ«ÏÖʵÉÏ £¬Õâ±³ºó°µ²Ø×ÅÒ»Ì×¼«Îª¾«ÃܵÄÍøÂç¼Ü¹¹Âß¼­ £¬ÒÔ¼°Ò»Ì×¾­¹ýÎÞÊý´Îʵս¼ìÑéµÄ²Ù×÷¹æ·¶¡£½ñÌì £¬ÎÒÃǾÍÅ׿ªÄÇЩ»ÞɬÄѶ®µÄÊõÓï¶ÑÆö £¬ÓÃ×î½ÓµØÆøµÄ·½Ê½ £¬°Ñ¡°¹ã¶«°Ë¶þÕ¾82157Á¬Íø¡¹Øâ¼þÊÂÖØÐµ½Î²¡¢´ÓÀíÂÛµ½Êµ²Ù £¬³¹µ×½²ÁìÂÔ¡£

Ê×ÏÈ £¬ÎÒÃDZØÒªÃ÷È·Ò»¸ö¸ÅÏ룺Ëùν¡°°Ë¶þÕ¾¡± £¬²¢·ÇÒ»¸öµ¥Ò»µÄÎïÀíÕ¾µã £¬¶øÊÇÒ»¸öÈÚºÏÁ˶à²ã¼¶Êý¾Ý»¥»»¡¢¸ºÔØÆ½ºâÓ밲ȫ¸ôÀëµÄ¸´ºÏÐÍÍøÂç½Úµã¡£Ôڹ㶫Õâ¸öÍøÂç»ù´¡ÉèÊ©¸ß¶ÈÅµÄµØÓò £¬82157Õâ¸ö±àºÅÏÖʵÉÏ´ú±íÁ˸ýڵãÔÚÇøÓò¹Ç¸ÉÍøÖеÄÌØ¶¨Éí·Ý±êʶ¡£ÄãÄܹ»°ÑËüÀí½â³ÉÒ»¸ö³¬µÈÊàŦ £¬ËùÓеÄÊý¾Ý°ü´ÓÕâÀïÆô³Ì £¬¾­¹ý¸´ÔӵķÓÉËã·¨ £¬×îÖÕ¾«×¼µØµ½´ïÖ¸±êÉ豸¡£¶ø¡°Á¬Íø¡¹ØâÁ½¸ö×Ö £¬Ôòº­¸ÇÁË´ÓÎïÀíÁ´Â·´î½¨¡¢ºÍ̸ЭÉÌ £¬µ½»á»°³ÉÁ¢¡¢Êý¾ÝÁ÷½ÚÔìµÄÆëÈ«¹ý³Ì¡£

ÄÇô £¬ÎªÊ²Ã´¹ã¶«°Ë¶þÕ¾82157µÄÁ¬Íø²Ù×÷»áÈç´ËÊܵ½¹Ø×¢ £¿Ô­ÒòºÜµ¥Ò»£ºËüÖ±½ÓÓ°Ïì×ÅÖܱßÊýÍò¸öÖÕ¶ËÓû§µÄÉÏÍøÂÄÀú¡¢ÆóÒµÄÚÍøµÄ°ì¹«Ð§ÄÜ £¬ÉõÖÁ¹Ø¼üÒµÎñµÄÂ½ÐøÐÔ¡£Ò»µ©Á¬ÍøÅäÖóöÏÖÎó²î £¬ÇáÔòÔì³ÉÍøÂçÑÓ³¤ì­Éý¡¢¶ª°üÂÊÔö¸ß £¬³ÁÔò¿ÉÄܵ¼ÖÂÕû¸öÇøÓòÍøÂç̱»¾¡£Òò¶ø £¬°ÑÎÕÒ»Ì×ȨÍþµÄ¡¢¾­¹ýÑéÖ¤µÄÁ¬ÍøÊÖ²á £¬¾Í³ÉÁËËùÓÐÍøÂçÖÎÀíÔ±ºÍ¼¼ÊõÔËάÈËÔ±µÄ±Ø½¨¿Î¡£

µÚÒ»²¿ÃÅ£º¹ã¶«°Ë¶þÕ¾82157Á¬ÍøµÄÖ÷Ìâ¼Ü¹¹ÓëµÀÀí

ÒªÉî¿ÌÀí½â82157Á¬ÍøµÄ²Ù×÷ £¬±ØÐëÏÈ·Ö½âËüµÄ¹Ç¼Ü¡£Õâ¸ö½ÚµãµÄÉè¼Æ×ñÑ­ÁË¡°·Ö²ã½âñÓë¡°ÈßÓ౸·Ý¡±Á½´ó×¼Ôò¡£´ÓÎïÀí²ã¿´ £¬Ëüͨ³£²¿ÊðÔھ߱¸Ë«Â·Êеç½ÓÈë¡¢²ñÓÍ·¢µç»úºó±¸¡¢ºãκãʪ»·¾³µÄÊý¾ÝÖÐÐÄÄÚ¡£Ö÷Ì⻥»»É豸ѡȡÄ £¿é»¯¼Ü¹¹ £¬Ö§³ÖÈȲå°Î £¬ÕâÒâζ׿´±ãij¸ö°å¿¨³öÏÖ¹ÊÕÏ £¬Õų̂É豸ÒÀÈ»Äܹ»³ÖÐøÔËÐÐ £¬²»»á²úÉúµ¥µã¹ÊÕÏ¡£

ÔÚÍøÂç²ã £¬¹ã¶«°Ë¶þÕ¾82157ѡȡÁËOSPF£¨Ê¢¿ª×î¶Ìõè¾¶ÓÅÏÈ£©ÓëBGP£¨ÌìÇµÍø¹ØºÍ̸£©Ïà½áºÏµÄ¶¯Ì¬Â·ÓÉÕ½Êõ¡£OSPFÕÆ¹ÜÄÚ²¿ÇøÓòµÄ·ÓÉÍÆËã £¬È·±£Êý¾Ý°üÔÚÕ¾ÄÚ¸÷¸ö×ÓÍøÖ®¼ä×ßµÄÊÇ×îÓÅõè¾¶£»¶øBGPÔòÓÃÓÚÓë±í²¿ÍøÂç½øÐзÓÉÐÅÏ¢µÄ»¥»» £¬ÊµÏÖ¿çÇøÓò¡¢¿çÔËÓªÉ̵Ļ¥Áª»¥Í¨¡£ÕâÖÖ×éºÏµÄÒæ´¦ÊDz»ÑÔ¶øÓ÷µÄ£ºÄÚ²¿ÍøÂçÍØÆË±ä¶¯Ê± £¬OSPF¿ÉÄܼ±¾çÊÕÁ² £¬ºÁÃ뼶ʵÏÖ·Óɱí¸üУ»¶øBGPÔòÌṩÁË·á˶µÄ·ÓÉÕ½Êõ½ÚÔìÄÜÁ¦ £¬ºÃ±ÈÄܹ»Æ¾¾ÝÔ´IP¡¢Ö÷ÕÅIP¡¢ASõè¾¶µÈ¶àÖÖÊôÐÔ £¬½Ã½ÝµØµ÷ÕûÁ÷Á¿×ßÏò¡£

µ±È» £¬¹âÓзÓɺÍ̸»¹²»¹»¡£ÎªÁ˱£ÕÏÁ¬ÍøµÄ¿¿µÃסÐÔ £¬82157½Úµã»¹ÒýÈëÁËVRRP£¨Ð鹹·ÓÉÈßÓàºÍ̸£©ºÍÁ´Â·¾ÛºÏ¼¼Êõ¡£VRRPÈöą̀·ÓÉÆ÷Ðé×é³ÉÒ»¸öÍø¹Ø £¬µ±Ö÷·ÓÉÆ÷å´»úʱ £¬±¸Ó÷ÓÉÆ÷ÄÜ˲¼äÊÕÊÜ £¬Óû§¶ËÏÕЩ¸Ð´¥²»µ½ÈκÎÖжÏ¡£Á´Â·¾ÛºÏÔòÊǰѶàÌõÎïÀíÁ´Â·°ó¸¿³ÉÒ»ÌõÂß¼­Á´Â· £¬¼ÈÔö³¤ÁË´ø¿í £¬ÓÖʵÏÖÁËÁ´Â·¼¶´ËÍâÈßÓà¡£ÉèÏëһϠ£¬Õâ¾ÍºÃ±È°Ñ¼¸¸ùϸÉþ×ÓÅ¡³ÉÒ»¹É´ÖÀ £¬²»½ö³Ð³ÁÁ¦¸üÇ¿ £¬²¢ÇÒ¾ÍËãÆäÖÐÒ»¸ù¶ÏÁË £¬ÆäËûÉþ×ÓÒÀÈ»ÄܳÅס¡£

ÔÚÏÖʵ²¿ÊðÖÐ £¬¹ã¶«°Ë¶þÕ¾82157µÄÁ¬ÍøÍùÍù»¹Éæ¼°µ½VLAN£¨Ðé¹¹¾ÖÓòÍø£©µÄ»®·Ö¡£·ÖÆçµÄÒµÎñ²¿ÃÅ¡¢·ÖÆçµÄ°²È«µÈ¼¶ £¬»á±»»®·Öµ½·ÖÆçµÄVLANÖС£ÀýÈç £¬²ÆÕþϵͳµÄÊý¾ÝÁ÷±»¸ôÀëÔÚVLAN 10 £¬¶ø°ì¹«ÍøÂçµÄÁ÷Á¿ÔòÔÚVLAN 20¡£Í¨¹ýÈý²ã»¥»»»ò·ÓÉÆ÷µÄACL£¨½Ó¼û½ÚÔìÁÐ±í£© £¬Äܹ»¾«ÃܵؽÚÔìÄÄЩVLANÖ®¼äÄܹ»»¥Í¨ £¬ÄÄЩ±ØÐë±»×è¶Ï¡£ÕâÖÖ΢¸ôÀëµÄÉè¼Æ £¬¼«´óµØ½µµÍÁ˺áÏò¹¥»÷µÄ·çÏÕ £¬¼´±ãij¸öÖն˱»ÈëÇÖ £¬¹¥»÷ÕßÒ²ÄÑÒÔµÈÏÐÌø×ªµ½ÆäËûÖ÷Ìâϵͳ¡£

ÎÒÃDz»·ÁÓÃÒ»ÕÅʾÒâͼÀ´Ö±¹Û¸Ð´¥Ò»ÏÂÕâ¸ö¼Ü¹¹µÄ¸´ÔÓÐÔ¡£µ±È» £¬ÎÄ×ÖÃèÊöÒ²ÓÐÆäÓÅÊÆ £¬ËüÄÜÈÃÎÒÃǸüרһµØË¼ÂÇÿ¸ö×é¼þµÄ×÷Óá£

23

ÉÏͼչʾµÄÖ»ÊÇ82157½ÚµãµÄÒ»¸ö¼ò»¯Ä£ÐÍ¡£ÔÚÏÖʵ»·¾³ÖÐ £¬»¹»áµþ¼ÓQoS£¨·þÎñÖÊÁ¿£©¡¢NetFlowÁ÷Á¿·ÖÎö¡¢DDoS·À»¤µÈ¸ü¶àÖ°ÄÜÄ £¿é¡£Ã¿¸öÄ £¿éÖ®¼äͨ¹ý¸ßËÙ±³°å»ò¹âÏË»¥Áª £¬ÐγÉÁËÒ»¸öÓлúµÄÕûÌå¡£Àí½âÁËÕâЩµ×²ãµÀÀí £¬ÎÒÃÇÄÜÁ¦ÁìÂÔºóÐøµÄʵս²Ù×÷ΪʲôҪ×ñÑ­ÌØ¶¨µÄ²½Öè £¬¶ø²»ÊÇÇáÒ×Ϊ֮¡£

µÚ¶þ²¿ÃÅ£ºÊµÕ½Ç°µÄ³ï±¸¹¤×÷¡ª¡ª»·¾³²é³­ÓëÅäÖÃÇåµ¥

ÈκÎÒ»³¡³É¹¦µÄÁ¬Íø²Ù×÷ £¬¶¼Àë²»¿ªÈ«ÃæµÄ³ï±¸¡£ºÃ¶àÐÂÊÖÈÝÒ×·¸µÄÃýÎó¾ÍÊÇÄõÃÊÖ²áÖ±½ÓÉÏÊÖ £¬Á˾ַ¢ÏÖij¸ö¶Ë¿Ú±»Õ¼ÓÃÁË £¬»òÕ߹̼þ°æ±¾²»Æ¥Åä £¬µ¼Ö²Ù×÷ÖжÏ¡£ÎªÁËÔ¤·ÀÕâÖÖÀDZ· £¬ÎÒ½¨Òé¸÷ÈËÒÀÕÕÒÔÏÂÇåµ¥ £¬ÖðÏîÈ·ÈÏ¡£

µÚÒ» £¬ÎïÀíÏνӲ鳭¡£È·ÈÏËùÓйâÏË»òÍøÏß½Ó¿ÚÊÇ·ñ²å½ô £¬¹âÄ £¿éµÄÊÕ·¢¹¦ÂÊÊÇ·ñÔÚÕý³£ÁìÓòÄÚ¡ £Äܹ»Ê¹Óù⹦ÂʼƲâÊÔ £¬ÈôÊÇ·¢ÏÖË¥¼õ¹ý´ó £¬¾Í±ØÒª³ÁÐÂÇå½à½ÓÍ·»ò¸ü»»ÌøÏß¡£¶ÔÓÚÍ­À £¬ÔòÒª²é³­ÏßÐòÊÇ·ñ³ß¶È £¬ÊÇ·ñ³öÏÖÁËÏß¶Ô´íλµÄÇé¿ö¡£ÕâÒ»²½¿´ËÆ»ù´¡ £¬µ«ÍùÍùÊÇÅŲé¹ÊÕÏʱ×îÏȱ»ºöÂԵĻ·½Ú¡£

µÚ¶þ £¬É豸״̬ȷÈÏ¡£µÇ¼µ½Ö÷Ì⻥»»»úºÍ·ÓÉÆ÷ £¬Ö´ÐÓ×°show version¡±ºÅÁî £¬²é¿´²Ù×÷ϵͳ°æ±¾ºÍÓ²¼þÐͺÅ¡£È·±£ËùÓÐÉ豸µÄÈí¼þ°æ±¾ÔÚ¹Ù·½ÍƼöµÄ¼æÈÝÐÔÁбíÄÚ¡£Áí±í £¬»¹Òª²é³­CPUÀûÓÃÂʺÍÄÚ´æÕ¼ÓÃÂÊ £¬ÈôÊdz־ô¦ÓÚ¸ßλ £¬×¢Ã÷É豸¿ÉÄÜÒѾ­¹ýÔØ £¬´Ëʱ½øÐÐÁ¬Íøµ÷»»¿ÉÄÜ»á¼Ó¾çÎÊÌâ¡£½¨ÒéÔÚÒµÎñµÍ¹ÈÆÚ½øÐвÙ×÷ £¬ºÃ±ÈÁ賿2µãµ½6µãÖ®¼ä¡£

µÚÈý £¬ÅäÖñ¸·Ý¡£ÕâÊÇÐëÉú³£Ì¸ £¬µ«Ê¼ÖÕ²»Íâʱ¡£ÔÚÆðÍ·ÈκÎÅú¸Ä֮ǰ £¬±ØÐ뽫µ±Ç°ÔËÐеÄÅäÖÃÎļþÆëÈ«±¸·Ýµ½±¾µØ»òÔ¶³Ì·þÎñÆ÷¡ £Äܹ»Ê¹ÓÃTFTP»òSCPºÍ̸½øÐд«Êä¡£±¸·ÝʵÏÖºó £¬×îºÃÔÙµ¼³öÒ»·ÝÎı¾ÌåʽµÄ¸±±¾ £¬·½±ãÔÚ²Ù×÷¹ý³ÌÖжÔÕÕ²éÔÄ¡£ÍòÒ»Åú¸Äºó³öÏÖÒì³£ £¬ÎÒÃÇÄܹ»Ñ¸Ëٻعöµ½Ö®Ç°µÄÅäÖÃ״̬¡£

µÚËÄ £¬¹æ»®ºÃIPµØÖ·ºÍVLAN ID¡£Ôڹ㶫°Ë¶þÕ¾82157µÄÁ¬Íø³¡¾°ÖÐ £¬Ð½ÓÈëµÄÍø¶Î±ØÐëÓëÏÖÓеØÖ·³Ø²»Ã¬¶Ü¡ £Äܹ»ÌáǰÔì×÷Ò»Õűí¸ñ £¬ÁгöËùÓн«ÒªÊ¹ÓõÄ×ÓÍøÑÚÂë¡¢Íø¹ØµØÖ·¡¢DNS·þÎñÆ÷µÈ¡£¶ÔÓÚVLAN ID £¬Ò²Òª×ñÑ­¼È¶¨µÄ¶¨Ãû¹æ·¶ £¬ºÃ±ÈÓá°100-199¡±°µÊ¾°ì¹«Íø £¬¡°200-299¡±°µÊ¾·þÎñÆ÷Íø¡£»ìÂҵıàºÅÖ»»á¸øºóÐøµÄÔËά´øÀ´¿àÄÑ¡£

ÕâЩ³ï±¸¹¤×÷¿´ËÆ·±Ëö £¬µ«¸ÕºÃÊÇרҵÓëÒµÓàµÄ·ÖË®Áë¡£Ò»¸ö³ÉÊìµÄÍøÂ繤³Ìʦ £¬»á°Ñ80%µÄ¾«Á¦»¨Ôڳﱸ½×¶Î £¬¶øÖ»ÓÃ20%µÄ¹¦·òÈ¥Ö´ÐкÅÁî¡£ÓÉÓÚÖ»ÓÐǰÆÚ˼¿¼µÃ×ã¹»ÖÜÈ« £¬²Ù×÷¹ý³ÌÖÐÄÜÁ¦´ÓÈÝÓ¦¶Ô¸÷ÀàÍ»·¢Çé¿ö¡£

µÚÈý²¿ÃÅ£º¹ã¶«°Ë¶þÕ¾82157Á¬ÍøÊµÕ½²Ù×÷²½ÖèÏê½â

ºÃÁË £¬Èç¹ûÎÒÃÇÒѾ­ÊµÏÖÁËËùÓл·¾³²é³­ £¬±¸·ÝÁËÅäÖà £¬²¢ÇÒÑ¡¶¨ÁËÒµÎñµÍ¹ÈÆÚ¡£´Ë¿Ì £¬ÎÒÃÇÕýʽ½øÈëÁ¬Íø²Ù×÷µÄʵս»·½Ú¡£ÎªÁ˱ãÓÚÀí½â £¬ÎÒ½«Õû¸ö¹ý³Ì²ð½âΪËĸö½×¶Î£º»ù´¡ÅäÖý׶Ρ¢Â·ÓɺÍ̸²¿Êð½×¶Î¡¢°²È«Õ½ÊõÏ·¢½×¶Î¡¢Á¬Í¨ÐÔÑéÖ¤½×¶Î¡£

3.1 »ù´¡ÅäÖý׶Σº´î½¨ÎïÀíÓëÂß¼­µÄÇÅÁº

Ê×ÏÈ £¬ÎÒÃDZØÒªµÇ¼µ½Ö÷ÌâÉ豸¡£Í¨³£Ê¹ÓÃSSHºÍ̸ £¬ÈôÊÇÉ豸֧³Ö £¬½¨ÒéÆôÓÃÃÜÔ¿ÈÏÖ¤ £¬Ï÷¼õÃÜÂëй¶µÄ·çÏÕ¡£µÇ¼ºó £¬µÚÒ»²½ÊÇÉèÖÃÖ÷»úÃû £¬ÒÔ±ãÔÚ¶à¸öÉ豸¼ä·Ö±æ¡£ºÃ±È £¬½«Ö÷Ì⻥»»»ú¶¨ÃûΪ¡°GD-82157-CORE-SW01¡±¡£½Ó×Å £¬ÅäÖÃÖÎÀíIPµØÖ·ºÍĬÈÏÍø¹Ø £¬È·±£ÎÒÃÇÄܹ»Í¨¹ýÍøÂçÔ¶³ÌÖÎÀíËü £¬¶ø²»½ö½öÒÀÀµConsole¿Ú¡£

¶øºó £¬´´½¨VLAN½Ó¿Ú¡£Èç¹ûÎÒÃÇҪΪеÄÒµÎñ²¿ÃÅ´´½¨Ò»¸öÃûΪ¡°VLAN 50¡±µÄÍø¶Î £¬×ÓÍøÎª192.168.50.0/24¡£ÔÚ»¥»»»úÉÏ £¬ÎÒÃDZØÒªÖ´ÐÐÒÔϲÙ×÷£¨ÒÔCisco IOSΪÀý £¬ÆäËû³§É̺ÅÁîÀàËÆ£©£º

``` Switch# configure terminal Switch(config)# vlan 50 Switch(config-vlan)# name New-Business Switch(config-vlan)# exit Switch(config)# interface vlan 50 Switch(config-if)# ip address 192.168.50.1 255.255.255.0 Switch(config-if)# no shutdown ```

°ÑÎÈ £¬ÕâÀïµÄ¡°no shutdown¡±¼«¶È¹Ø¼ü £¬Ëü´ú±í¼¤»îÕâ¸öÐé¹¹½Ó¿Ú¡£ºÃ¶àÈëÃÅÕßÈÝÒשµôÕâÒ»²½ £¬µ¼ÖÂVLAN½Ó¿ÚʼÖÕ´¦ÓÚÖÎÀíÐԹعØ×´Ì¬¡£½ÓÏÂÀ´ £¬½«ÎïÀí¶Ë¿Ú»®·Öµ½VLAN 50ÖС£ÀýÈç £¬½«GigabitEthernet1/0/10¶Ë¿Ú·ÖÅ䏸¸ÃVLAN£º

``` Switch(config)# interface gigabitEthernet 1/0/10 Switch(config-if)# switchport mode access Switch(config-if)# switchport access vlan 50 Switch(config-if)# no shutdown ```

ÈôÊǸö˿ڱØÒªÏÎ½ÓÆäËû»¥»»»ú £¬ÔòÒªÅäÖÃΪTrunkģʽ £¬²¢ÔÊÐíÌØ¶¨VLANͨ¹ý¡£TrunkÁ´Â·ÊǶà¸öVLAN¹²ÏíµÄͨ· £¬ÅäÖò»µ±»áµ¼ÖÂVLANÐÅÏ¢ÃÔʧ¡£Îñ±ØÊ¹Óá°switchport trunk allowed vlan¡±ºÅÁȷ½ÚÔìÔÊÐíµÄVLANÁбí £¬Ô¤·À²»ÓÃÒªµÄ¹ã²¥Á÷Á¿·ºÀÄ¡£

ʵÏÖÕâЩ»ù´¡ÅäÖúó £¬ÎÒÃÇÄܹ»Óá°show vlan brief¡±ºÅÁî¼±¾çÑéÖ¤VLANÊÇ·ñÒÑ´´½¨ £¬¶Ë¿ÚÊÇ·ñÒÑÕýÈ··ÖÅä¡£ËùÓÐÕý³£ºó £¬ÔÙ³ÖÐøÏÂÒ»²½¡£

3.2 ·ÓɺÍ̸²¿Êð½×¶Î£ºÈÃÊý¾ÝÕÒµ½»Ø¼ÒµÄ·

»ù´¡ÅäÖÃʵÏÖºó £¬É豸ÒѾ­ÄÜÔÚÒ»¸öVLANÄÚ²¿×ª·¢Êý¾Ý £¬µ«·ÖÆçVLANÖ®¼ä¡¢ÒÔ¼°82157½ÚµãÓë±í²¿ÍøÂçÖ®¼ä £¬»¹±ØÒªÂ·ÓɺÍ̸À´Âòͨ¡£¶ÔÓÚÄÚ²¿Â·ÓÉ £¬ÎÒÃÇÊ×Ñ¡OSPF¡£ÅäÖÃOSPFʱ £¬±ØÒªÖ¸¶¨¹ý³ÌIDºÍÇøÓòºÅ¡£Ôڹ㶫°Ë¶þÕ¾82157µÄµäÐͲ¿ÊðÖÐ £¬ËùÓÐÖ÷ÌâÉ豸ͨ³£Î»ÓڹǸÉÇøÓò£¨Area 0£© £¬¶ø½ÓÈë²ãÉ豸ÔòλÓÚÆäËûÇøÓò¡£

ʾÀýÅäÖÃÈçÏ£º

``` Switch(config)# router ospf 1 Switch(config-router)# router-id 1.1.1.1 Switch(config-router)# network 192.168.50.0 0.0.0.255 area 0 Switch(config-router)# network 10.0.0.0 0.255.255.255 area 0 Switch(config-router)# passive-interface default Switch(config-router)# no passive-interface gigabitEthernet 1/0/1 ```

ÕâÀïÓÐÒ»¸öÓ×¼¼ÇÉ£ºÊ¹Óá°passive-interface default¡±½«ËùÓнӿÚÉèÖÃΪ±»¶¯Ä£Ê½ £¬¶øºóÖ»¶Ô±ØÒª³ÉÁ¢OSPFÁھӵĽӿÚÈ¡µÞ±»¶¯Ä£Ê½¡£ÕâÑùÄܹ»Ô¤·ÀÔÚÏνÓÖÕ¶ËÓû§µÄ½Ó¿ÚÉÏ·¢ËÍÎÞνµÄHello±¨ÎÄ £¬¼È½Ú¼óÁËÉ豸×ÊÔ´ £¬Ò²Ìá¸ßÁ˰²È«ÐÔ¡£

¶ÔÓÚ±í²¿Â·ÓÉ £¬ÎÒÃDZØÒªÅäÖÃBGP¡£Èç¹û82157½Úµã±ØÒªÓëÉÏÓÎÔËÓªÉÌ£¨ÈçÖйúµçÐÅ¡¢ÖйúÁªÍ¨£©»¥»»Â·ÓÉÐÅÏ¢¡£Ê×ÏÈ £¬³ÉÁ¢BGPÁÚ¾Ó¹ØÏµ£º

``` Switch(config)# router bgp 65001 Switch(config-router)# neighbor 202.96.128.1 remote-as 4134 Switch(config-router)# neighbor 202.96.128.1 description ChinaTelecom-Upstream Switch(config-router)# address-family ipv4 Switch(config-router-af)# neighbor 202.96.128.1 activate Switch(config-router-af)# network 192.168.0.0 mask 255.255.0.0 ```

°ÑÎÈ £¬ÕâÀïµÄASºÅ±ØÒªÆ¾¾ÝÏÖʵ¹æ»®Ìîд £¬²»ÄÜÇáÒ×ʹÓá£ÈôÊÇʹÓÃ˽ÓÐASºÅ £¬ÔòÒªÓëÔËÓªÉÌÈ·ÈÏÊÇ·ñÖ§³Ö¡£BGPÅäÖÃʵÏÖºó £¬½¨ÒéʹÓá°show ip bgp summary¡±²é³­ÁÚ¾Ó״̬ÊÇ·ñΪ¡°Established¡±¡£ÈôÊÇ״̬ͣ¶ÙÔÚ¡°Active¡±»ò¡°Idle¡± £¬×¢Ã÷TCPÏνÓûÓгÉÁ¢³É¹¦ £¬±ØÒªÅŲéIP¿É´ïÐÔºÍACL¹ýÂ˹涨¡£

·ÓɺÍ̸²¿Êð½áÊøºó £¬Õû¸ö82157½ÚµãÓ¦¸ÃÒѾ­¾ß±¸ÁËÈ«ÍøÂ·ÓÉÄÜÁ¦¡£´Ëʱ £¬ÎÒÃÇÄܹ»´Óһ̨ÄÚÍøÖ÷»úÈ¥ping±í²¿¹«ÍøµØÖ· £¬²âÊԶ˵½¶ËµÄÁ¬Í¨ÐÔ¡£ÈôÊÇping²»Í¨ £¬²»Òª¼±×ÅÒÉ»óÅäÖà £¬ÏȲ鳭һÏÂNAT£¨ÍøÂçµØÖ·×ª»»£©ÊÇ·ñÅäÖÃÕýÈ·¡£ÓÉÓÚË½ÍøµØÖ·ÎÞ·¨ÔÚ¹«ÍøÉÏ·ÓÉ £¬±ØÐëͨ¹ýNATת»»³É¹«ÍøIP¡£

3.3 °²È«Õ½ÊõÏ·¢½×¶Î£º¸øÍøÂç¼ÓÒ»°ÑËø

Á¬Íø²»½öÒâζ×ÅÁ¬Í¨ £¬¸üÒâζ×ſɿØ¡£Ôڹ㶫°Ë¶þÕ¾82157µÄ»·¾³ÖÐ £¬°²È«Õ½ÊõµÄÅäÖÃÊdzÁÖÐÖ®³Á¡£ÎÒÃÇͨ³£Ê¹ÓÃACLÀ´ÊµÏÖ»ù´¡µÄ½Ó¼û½ÚÔì¡£ÀýÈç £¬Ö»ÔÊÐíÌØ¶¨²¿ÃŵÄÔ±¹¤½Ó¼û²ÆÕþ·þÎñÆ÷ £¬¶ø²»ÈÝÆäËûËùÓÐÁ÷Á¿£º

``` Switch(config)# ip access-list extended BLOCK-FINANCE Switch(config-ext-nacl)# permit ip 192.168.50.0 0.0.0.255 10.10.10.0 0.0.0.255 Switch(config-ext-nacl)# deny ip any any Switch(config-ext-nacl)# exit Switch(config)# interface vlan 50 Switch(config-if)# ip access-group BLOCK-FINANCE in ```

³ýÁËACL £¬»¹Äܹ»²¿Êð¶Ë¿Ú°²È«Ö°ÄÜ £¬ÏÞ¶Èÿ¸ö¶Ë¿ÚÔÊÐí½ø½¨µÄMACµØÖ·ÊýÁ¿ £¬Ô¤·ÀδÊÚȨµÄÉ豸½ÓÈë¡£¶ÔÓÚ¸ü¸ß¼¶µÄ°²È«ÐèÒª £¬ºÃ±È·ÀARPºýŪ¡¢DHCP Snooping¡¢¶¯Ì¬ARP¼ì²âµÈ £¬Ò²Äܹ»Ò»²¢ÆôÓá£ÕâЩְÄܹÌÈ»»áÔö³¤É豸µÄCPU¸ºÔØ £¬µ«Ôڸ߰²È«ÒªÇóµÄ³¡¾°Ï £¬ÊDZز»³ÉÉٵġ£

Áí±í £¬±ðÍüÁËÅäÖÃÈÕÖ¾·þÎñÆ÷¡£½«ËùÓа²È«ÊÂÎñ¡¢ÏνÓÈÕ־ʵʱ·¢Ë͵½¼¯ÖÐʽÈÕ־ƽ̨ £¬·½±ã¹ýºóÉó¼ÆºÍÍþвËÝÔ´¡£ÔÚ82157½ÚµãÉÏ £¬Äܹ»ÅäÖÃsyslogÖ¸ÏòÄÚÍøµÄÈÕÖ¾·þÎñÆ÷£º

``` Switch(config)# logging host 10.0.0.100 Switch(config)# logging trap warnings Switch(config)# logging source-interface vlan 1 ```

ÕâÑù £¬ÈκÎÒì³£Ïνӳ¢ÊÔ³ÇÊб»¼Í¼ÏÂÀ´ £¬ÎÒÃÇÄܹ»ÔÚÈÕÖ¾Öп´µ½Ô´IP¡¢Ö÷ÕÅIP¡¢¶Ë±êÓï¡¢¹¦·ò´ÁµÈÐÅÏ¢¡£

3.4 Á¬Í¨ÐÔÑéÖ¤½×¶Î£ºÓÃÊý¾Ý´ë´Ç

ËùÓÐÅäÖÃÏ·¢ÊµÏÖºó £¬×îºóµÄÑéÖ¤»·½Ú²»ÄÜç¢Â©¡£³ýÁ˵¥Ò»µÄping²âÊÔ £¬ÎÒÃÇ»¹±ØÒª½øÐиüÉî¿ÌµÄÕï¶Ï¡£ºÃ±È £¬Ê¹Óá°traceroute¡±ºÅÁî²é¿´Êý¾Ý°üµÄõè¾¶ £¬È·ÈÏÊÇ·ñ¾­¹ýÁËÔ¤ÆÚµÄÏÂÒ»Ìø¡£ÈôÊÇõè¾¶³öÏÖÒì³£Ìø×ª £¬×¢Ã÷·ÓÉÕ½Êõ¿ÉÄÜ´æÔÚÎÊÌâ¡£

Áí±í £¬Äܹ»Ê¹Óá°show ip ospf neighbor¡±ºÍ¡°show ip bgp summary¡±À´È·ÈÏ·ÓɺÍ̸µÄÁÚ¾Ó״̬ÊÇ·ñ²»±ä¡£ÈôÊÇÁÚ¾ÓÆµ·¹Øðµ´ £¬¿ÉÄÜÊÇÁ´Â·ÖÊÁ¿Ç·°²»òÕßHello/Dead¾àÀëÅäÖò»ºÏÀí¡£´Ëʱ £¬ÎÒÃÇÄܹ»ÔÚ½Ó¿Úϵ÷ÕûOSPFµÄ¼ÆÊ±Æ÷£º

``` Switch(config-if)# ip ospf hello-interval 5 Switch(config-if)# ip ospf dead-interval 20 ```

¸ü¶ÌµÄ¹¦·ò¾àÀëÄܹ»¼Ó¿ì¹ÊÕϼì²âËÙ¶È £¬µ«Ò²»áÔö³¤ÍøÂ翪Ïú £¬±ØÒªºâÁ¿¡£

¶ÔÓÚ»úÄÜÑéÖ¤ £¬ÎÒÃÇÄܹ»Ê¹ÓÃiPerfµÈ¹¤¾ß £¬ÔÚÁ¬ÍøÁ½¶Ë³ÉÁ¢TCP»òUDPÁ÷ £¬²âÊÔÏÖʵÍÌÍÂÁ¿¡¢ÑÓ³¤ºÍ¶¶¶¯¡£ÈôÊÇ·¢ÏÖÍÌÍÂÁ¿Ô¶µÍÓÚÁ´Â·´ø¿í £¬¾ÍÒª²é³­ÊÇ·ñ´æÔÚË«¹¤Ä£Ê½²»Æ¥Åä¡¢MTU£¨×î´ó´«Êäµ¥Ôª£©²»Ò»ÖµÈÎÊÌâ¡£ÔÚ82157½ÚµãÖÐ £¬½¨ÒéËùÓнӿڶ¼ÅäÖÃΪ¡°full duplex¡±ºÍ¡°mtu 1500¡± £¬Ô¤·ÀÒòЭÉÌʧ°Üµ¼ÖµĻúÄÜÆ¿¾±¡£

67

ʵս²Ù×÷µ½ÕâÀï £¬¸ù»ùÉÏÒѾ­ÊµÏÖÁ˹㶫°Ë¶þÕ¾82157Á¬ÍøµÄÖ÷ÌâÁ÷³Ì¡£µ«Çë°ÑÎÈ £¬ÍøÂç»·¾³ÊǶ¯Ì¬µÄ £¬½ñÌìµÄÅäÖÿÉÄÜÃ÷Ìì¾Í±ØÒªµ÷Õû¡£Òò¶ø £¬Ñø³É¼Í¼²Ù×÷ÈÕÖ¾¡¢¶¨ÆÚÉó²éÅäÖõÄϰ¹ß £¬±ÈÒ»´ÎÐÔʵÏÖÁ¬Íø¸üΪ³ÁÒª¡£Ã¿Ò»´Îµ÷»» £¬¶¼ÒªÓÐÃ÷È·µÄÔ­Òò¡¢Ç峺µÄ²½ÖèºÍ¿É»Ø¹öµÄ¹æ»®¡£

µÚËIJ¿ÃÅ£º³£¼û¹ÊÕÏÅŲéÓëÓÅ»¯½¨Òé

¼´±ãÑϸñÒÀÕÕÊÖ²á²Ù×÷ £¬Ò²Î´Ãâ»áÓöµ½Ò»Ð©¡°¿Ó¡±¡£ÕâÀï·ÖÏí¼¸¸öÔڹ㶫°Ë¶þÕ¾82157Á¬ÍøÖÐ¸ßÆµ³öÏÖµÄÎÊÌâ £¬ÒÔ¼°¶ÔÓ¦µÄÅŲé˼·¡£

µÚÒ»¸ö³£¼ûÎÊÌâÊÇ¡°VLAN¼äͨѶʧ°Ü¡±¡£Ô­ÒòÍùÍùÊÇÈý²ã»¥»»»úÉÏûÓÐÆôÓÃIP·ÓÉÖ°ÄÜ¡£ºÃ¶à»¥»»»úĬÈÏÖ»×ö¶þ²ãת·¢ £¬±ØÒªÊÖ¶¯¿ªÆô¡°ip routing¡±ºÅÁî¡£Áí±í £¬²é³­VLAN½Ó¿ÚÊÇ·ñ±»ÃýÎóµØÅäÖÃÁË¡°shutdown¡± £¬»òÕßACL¹æ¶¨¹ýÓÚÑϸñ £¬ÎóÀ¹½ØÁ˺Ϸ¨Á÷Á¿¡£

µÚ¶þ¸öÎÊÌâÊÇ¡°OSPFÁÚ¾ÓÎÞ·¨³ÉÁ¢¡±¡£Í¨³£ÊÇÓÉÓÚÁ½¶Ë½Ó¿ÚµÄÍøÂçÀàÐͲ»Æ¥Åä £¬ºÃ±ÈÒ»¶ËÊǹ㲥ÐÍ £¬ÁíÒ»¶ËÊǵã¶ÔµãÐÍ¡£½â¾ö¹æ»®ÊÇÊÖ¶¯Ö¸¶¨½Ó¿ÚµÄÍøÂçÀàÐÍ £¬ÀýÈç¡°ip ospf network point-to-point¡±¡£´Ë±í £¬»¹Òª²é³­Á½¶ËÊÇ·ñ´¦ÓÚͳһ¸öÇøÓò £¬ÒÔ¼°Router IDÊÇ·ñ³Á¸´¡£

µÚÈý¸öÎÊÌâÊÇ¡°BGP·Óɲ»ÉúЧ¡±¡£Õâ¿ÉÄÜÊÇÓÉÓÚûÓÐÕýÈ·ÅäÖá°network¡±ºÅÁîÀ´Ðû¸æ±¾µØÍø¶Î £¬»òÕßASõè¾¶±»¹ýÂËÁË¡ £Äܹ»Ê¹Óá°show ip bgp¡±ºÅÁî²é¿´Â·Óɱí £¬È·ÈÏÊÇ·ñÊÕµ½Á˶Է½µÄ·ÓÉ¡£ÈôÊÇ·ÓɱíÖдæÔÚµ«ÎÞ·¨×ª·¢ £¬»¹Òª²é³­Â·ÓɵÄÏÂÒ»ÌøÊÇ·ñ¿É´ï¡£

Õë¶Ô»úÄÜÓÅ»¯ £¬½¨ÒéÔÚ82157½ÚµãÉÏÆôÓÃÓ²¼þ¼Ó¿ìת·¢Ö°ÄÜ¡£ÏÖ´ú»¥»»»ú´ó¶àÖ§³ÖASICоƬֱ½Ó´¦ÖÃÊý¾Ý°ü £¬Äܹ»´ó·ù½µµÍÑÓ³¤¡£Í¬Ê± £¬ºÏÀí¹æ»®QoSÕ½Êõ £¬¶Ô¹Ø¼üÒµÎñÁ÷Á¿£¨ÈçÓïÒô¡¢ÊÓÆµ»áÒ飩¸³Óè¸ßÓÅÏȼ¶ £¬¶ÔP2PÏÂÔØµÈ´óÁ÷Á¿ÀûÓýøÐÐÏÞËÙ¡£ÕâÑùÄÜÈ·±£ÔÚ´ø¿íÑÏÖØÊ± £¬Ö÷ÌâÒµÎñ²»ÊÜÓ°Ïì¡£

×îºó £¬²»ÒªºöÊÓÎĵµµÄ³ÁÒªÐÔ¡£Ã¿´ÎÁ¬Íø²Ù×÷ʵÏÖºó £¬ÊµÊ±¸üÐÂÍøÂçÍØÆËͼºÍÅäÖÃÎĵµ¡£µ±ÍŶÓÖÐÓÐгÉÔ±²ÎÓë £¬»òÕß±ØÒªÅŲé°ëÄêºóµÄº¹ÇàÎÊÌâʱ £¬Ò»·ÝÏ꾡µÄÎĵµ¾ÍÊÇ×îºÃµÄ¡°¾ÈÃüµ¾²Ý¡±¡£

¹ã¶«°Ë¶þÕ¾82157Á¬Íø £¬ÌýÆðÀ´ÊÇÒ»¸ö¼¼Êõ»î £¬µ«ÏÖʵÉÏËü¸üÏñÊÇÒ»ÃÅÒÕÊõ¡ª¡ªÔÚ²»±äÐÔ¡¢»úÄÜ¡¢°²È«ÐÔÖ®¼äѰÕÒ×î¼Ñƽºâµã¡£µ«Ô¸ÕâÆªÉî¶È½â¶Á £¬ÄÜÖúÄã´Ó¡°ÖªÆäÈ»¡±½ø½×µ½¡°ÖªÆäËùÒÔÈ»¡±¡£Ï´ε±ÄãÃæ¶ÔÄÇ´®ÊìϤµÄ±àºÅʱ £¬ÄÔº£À︡ÏֵĽ«²»ÔÙÊÇÒ»¶Ñ±ùÁ¹µÄºÅÁî £¬¶øÊÇÒ»ÕÅÏÊ»îµÄ¡¢¶¯Ì¬µÄÍøÂçÐÔÃüͼ¡£

±¾ÎıêÌ⣺¡¶¹ã¶«°Ë¶þÕ¾82157Á¬ÍøÈ¨ÍþÊֲ᣺¹ã¶«°Ë¶þÕ¾82157Á¬ÍøÉî¶È½â¶ÁÓëʵս²Ù×÷¡·

J9¼¯ÍŹú¼ÊÕ¾¡¾ÖйúÇø¡¿¹Ù·½ÍøÕ¾
ÿһÌì £¬Ã¿Ò»Ãë £¬ÄãËù×öµÄ¾ö¶¨³ÇÊÐŤתÄãµÄÈËÉú£¡

°ä·¢ÆÀÂÛ

¿ì½Ý»Ø¸´£º

ÆÀÂÛÁÐ±í £¨ÔÝÎÞÆÀÂÛ £¬9698ÈËΧ¹Û£©²Î¼Ó»áÉÌ

»¹Ã»ÓÐÆÀÂÛ £¬À´ËµÁ½¾ä°É...

Top
¡¾ÍøÕ¾µØÍ¼¡¿