ensp模拟搭建典型中小型企业网架构（附详细步骤+命令）
实验步骤
拓扑图
1、规划vlan
xiaoshou vlan10
shichang vlan20
chanpin vlan30
server vlan40
connect vlan50
boss vlan88
2、配置vlan
SW3
vlan 10 //创建vlan
description xiaoshou //描述
vlan 20
description shicahng
vlan 30
description chanpin
vlan 88
description boss
vlan 40
description server
vlan 50
description connect
SW1
vlan 10
description xiaoshou
vlan 20
description shicahng
vlan 30
description chanpin
SW2
vlan 10
description xiaoshou
vlan 20
description shicahng
vlan 30
description chanpin
vlan 88
description boss
3、接口划分vlan
SW1
interface Ethernet0/0/1 //进入接口
port link-type access //配置接口类型
port default vlan 10 //该端口指定的vlan
interface Ethernet0/0/2
port link-type access
port default vlan 20
interface Ethernet0/0/3
port link-type access
port default vlan 30
SW2
interface Ethernet0/0/1
port link-type access
port default vlan 10
interface Ethernet0/0/2
port link-type access
port default vlan 20
interface Ethernet0/0/3
port link-type access
port default vlan 30
interface Ethernet0/0/4
port link-type access
port default vlan 88
SW3
interface GigabitEthernet 0/0/4
port link-type access
port default vlan 40
interface GigabitEthernet 0/0/3
port link-type access
port default vlan 50
4、配置接口类型
SW3
interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 10 20 30 //允许通过的vlan
interface GigabitEthernet0/0/2
port link-type trunk
port trunk allow-pass vlan 10 20 30 88
SW1
interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 10 20 30
SW2
interface GigabitEthernet0/0/2
port link-type trunk
port trunk allow-pass vlan 10 20 30 88
5、规划ip地址
vlan10 ---- 192.168.10.0/24
vlan20 ---- 192.168.20.0/24
vlan30 ---- 192.168.30.0/24
vlan40 ---- 192.168.40.0/24
vlan50 ---- 192.168.50.0/24
vlan88 ---- 192.168.88.0/24
svi相当于给每个vlan配置一个逻辑ip
ip基本上都是做vlan的网关
6、配置网段
SW3
interface Vlanif10 //进入vlan10的接口
ip address 192.168.10.254 255.255.255.0
interface Vlanif20
ip address 192.168.20.254 255.255.255.0
interface Vlanif30
ip address 192.168.30.254 255.255.255.0
interface Vlanif40
ip address 192.168.40.254 255.255.255.0
interface Vlanif50
ip address 192.168.50.254 255.255.255.0
interface Vlanif88
ip address 192.168.88.254 255.255.255.0
7、配置DHCP
SW3当作DHCP 服务器
xiaoshou shichang chanpin
dhcp分配ip地址
每个vlan 对应一个网段
SW3
dhcp enable
ip pool xiaoshou //创建地址池名
gateway-list 192.168.10.254
network 192.168.10.0 mask 255.255.255.0
dns-list 8.8.8.8
ip pool shichang
gateway-list 192.168.20.254
network 192.168.20.0 mask 255.255.255.0
dns-list 8.8.8.8
ip pool chanpin
gateway-list 192.168.30.254
network 192.168.30.0 mask 255.255.255.0
dns-list 8.8.8.8
interface Vlanif10
ip address 192.168.10.254 255.255.255.0
dhcp select global //分配地址池的地址
interface Vlanif20
ip address 192.168.20.254 255.255.255.0
dhcp select global
interface Vlanif30
ip address 192.168.30.254 255.255.255.0
dhcp select global
在pc上设置为dhcp并应用
查看获取的ip
现在就已经可以ping通其他vlan了
为了拍马屁给老板的ip设一个192.168.88.88招财的静态ip，也是可以访问其他vlan的
8、防火墙配置接口（路由器可以代替）
FW
interface GigabitEthernet0/0/3
ip address 192.168.50.1 255.255.255.0
interface GigabitEthernet0/0/1
ip address 202.1.1.1 255.255.255.0
9、划分接口区域
FW
firewall zone trust
add interface GigabitEthernet0/0/3
firewall zone untrust
add interface GigabitEthernet0/0/1
10、配置策略
FW
policy interzone trust untrust outbound
policy 1
action permit
policy source 192.168.0.0 mask 16
11、配置nat
FW
nat-policy interzone trust untrust outbound
policy 1
action source-nat
policy source 192.168.0.0 mask 16
easy-ip GigabitEthernet0/0/1
这个时候还是访问不了外网的因为没有路由
12、配置路由
SW3
ip route-static 0.0.0.0 0.0.0.0 192.168.50.1
FW
ip route-static 192.168.0.0 255.255.0.0 192.168.50.254
配置完路由后就可以访问外网了
到此实验结束！
如有需要ensp安装包的可以评论区留言或者私信。
