1.所需设备

3台路由器R1、R2、R3，2台三层交换机S1、S2，两台二层交换机S3、S4，PC机5台，交叉线直连线各若干，DCE-DTE串行线一条。 2.拓扑结构图 3.组网路由器R1启动OSPF路由协议并链接两个网络F0连接192.168.1.0 Area 1与S0连接192.168.2.0 Area 0，针对S0端口启动PPP PAP 认证。在F0端口启动ACL，允许IP为192.168.3.1-127的主机访问192.168.1.0网络，但不允许IP为192.168.3.128-254的主机访问。  路由器R2 启动OSPF协议及RIP协议，右端S0/1链接192.168.2.0 Area 0 路由协议为OSPF，左端F0链接192.168.3.0网络 路由协议为RIP2。  路由器R3启动RIP协议，上端F0/2连接192.168.3.0网络，左端F0/0连接192.168.4.0网络，右端F0/1链接192.168.5.0网络。针对F0/0、F0/1为入口F3为出口的网络通信启用NAT功能，将来自192.168.10.0网络的源IP地址动态的转换为192.168.3.1-127，来自192.168.20.0网络的源IP地址动态转换为192.168.3.128-254。  R3下有vlan 10 、vlan 20。  S1 、S2 都分别对两vlan起用vrrp组，vlan 10的vrrp虚拟IP为192.168.10.254，vlan 20的vrrp虚拟IP为192.168.20.254实现两组的业务的负载分担和备份。  S1、S2、S3、S4 都起用 mstp多生成数协议，并且实例映射一致（vlan 10映射实例1、vlan 20映射实例2 其他vlan映射默认实例0）。  Vlan 10以S1为根桥； vlan 20以S2为根桥；实现阻断网络环路，并能实现不同vlan数据流负载分担功能。  PC1的默认网关为192.168.10.254，PC2的默认网关为192.168.20.254。 NAT，MSTP，VRRP 实现4.详细配置 R1的配置 En进入特权模式conf t 进入全局模式int s 0/1 进入接口模式ip address 192.168.2.2 255.255.255.0 给接口配置IP地址no shutdown 启用接口

int f0/0

ip address 192.168.1.1 255.255.255.0 no shutdown

router OSPF 1

进入 OSPF协议模式，进程 号为1network 192.168.2.0 0.0.0.255 area 0 network 192.168.1.0 0.0.0.255 area 1 声明本路由由器所知的网段，即路由器活动接口所在的网段

access-list 10 permit 192.168.3.127 0.0.0.127

设置标准访问控制列表，允许指定的网段access-list 10 deny 192.168.3.128 0.0.0.127 拒绝指定的网段interface fa 0 ip access-group 1 out 在接口模式下应用访问控制列表username ruijie password 123 在路由器上建立 一个用户，并设置密码interface seri 0 encapsulation ppp ppp authentication pap 设置串行链路的认证模式为ppp+chap

R2的配置

configure terminal interface fa 0 ip address 192.168.3.2 255.255.255.0 no shutdown exit interface Ser 0 ip address 192.168.2.1 255.255.255.0 clork rate 5600 no shutdown exit router ospf 1 network 192.168.2.0 0.0.0.255 area 0 exit router rip version 2 network 192.168.3.0 exit router ospf 1 redistribute rip metric-type 1 metric 10 subnets exit router rip redistribute ospf 1 metric 3 exit inter ser 0 ppp pap sent-username ruijie password 123 exit R3的配置 configure terminal interface fa 0 ip address 192.168.4.2 255.255.255.0 no shutdown exit interface fa 1 ip address 192.168.5.2 255.255.255.0 no shutdown exit interface fa 2 ip address 192.168.3.1 255.255.255.0 no shutdown exit router rip version 2 network 192.168.5.0 network 192.168.3.0 network 192.168.4.0 interface fastethernet 2 ip nat outside exit interface fastethernet 0 ip nat inside exit interface fastethernet 1 ip nat inside exit access-list 10 permit 192.168.10.0 0.0.0.255 ip nat pool abc 192.168.3.5 192.168.3.127 netmask 255.255.255.0 ip nat inside source list 10 pool abc overload access-list 20 permit 192.168.20.0 0.0.0.255 ip nat pool cba 192.168.3.129 192.168.3.253 netmask 255.255.255.0 ip nat inside source list 20 pool cba overload S1的配置

vlan 10

建立VLANexit vlan 20 exit inter range fa 0/1-2 switchport mode trunk exit 设置指定的端口为trunk模式inter range fa 0/1-2 port-group 1 exit 将端口加入到1号聚合组inter range fa 0/3-4 switchport mode trunk exit spanning-tree spanning-tree mode mstp 声明生成树协议模式为 MSTspanning-tree mst configuration 进入mst配置模式name taishan 生成树名称和更新版本revision 1 instance 1 vlan 10 instance 2 vlan 20 建立实例1和2,关联相关的VLANexit spanning-tree mst 1 priority 8192 设置相应的实例的优先级，优先级值越小级别越高inter fa 0/5 no switchport 将接口转换为路由模式ip address 192.168.4.1 255.255.255.0 no shut exit inter vlan 10 进入vlan10的虚拟接口ip address 192.168.10.1 255.255.255.0 standby 1 priority 120 设置vrrp的优先级 ，值越小级别越高，级别高的会成为主要转发的路由器standby 1 ip 192.168.10.254 设置vrrp1的虚拟ip地址exit inter vlan 20 ip address 192.168.20.1 255.255.255.0 standby 2 ip 192.168.20.254 ip router rip version 2 network 192.168.10.0 network 192.168.20.0 network 192.168.4.0 S2的配置 vlan 10 exit vlan 20 exit inter range fa 0/1-2 switchport mode trunk exit inter range fa 0/1-2 port-group 1 exit inter range fa 0/3-4 switchport mode trunk exit 以下设置MST，优先级与别外一台路由器相反，以达到互为主备的目的spanning-tree spanning-tree mode mstp spanning-tree mst configuration name taishan revision 1 instance 1 vlan 10 instance 2 vlan 20 exit spanning-tree mst 2 priority 8192 inter fa 0/5 no switchport ip address 192.168.5.1 255.255.255.0 no shut Exit以下为设置VRRP，与上一台设置的优先级不同，形成互为主备的虚拟网关inter vlan 10 ip address 192.168.10.1 255.255.255.0 standby 1 ip 192.168.10.254 exit inter vlan 20 ip address 192.168.20.1 255.255.255.0 standby 2 priority 120 standby 2 ip 192.168.20.254 ip router rip version 2 network 192.168.10.0 network 192.168.20.0 network 192.168.5.0S3的配置vlan 10exitvlan 20exitinter range fa 0/1-2switchport mode trunkexitspanning-treespanning-tree mode mstpspanning-tree mst configurationname taishanrevision 1instance 1 vlan 10instance 2 vlan 20exitinter fa 0/5 switchport access vlan 10exitinter vlan 10ip address 192.168.10.1 255.255.255.0exitinter vlan 20ip address 192.168.20.1 255.255.255.0S4的配置vlan 10exitvlan 20exitinter range fa 0/1-2switchport mode trunkexitspanning-treespanning-tree mode mstpspanning-tree mst configurationname taishanrevision 1instance 1 vlan 10instance 2 vlan 20exitinter fa 0/5 switchport access vlan 20exitinter vlan 10ip address 192.168.10.1 255.255.255.0exitinter vlan 20ip address 192.168.20.1 255.255.255.0