HSRP LAB實作

R4與R5的IOS需使用C7200 Router的IOS來做LAB
若使用C3700系列的IOS做LAB會發生Client端PC會ping不到Virtual IP的狀況
此部分應為Dynamips的Bug

設定fa0/1介面與HSRP Group 1
R4(config)#interface fa0/1
R4(config-if)#ip address 192.168.10.2 255.255.255.0
R4(config-if)#no shutdown
R4(config-if)#standby 1 priority 200
R4(config-if)#standby 1 preempt
R4(config-if)#standby 1 ip 192.168.10.254
R4(config-if)#standby 1 authentication tttkey
R4(config-if)#exit

設定fa0/0介面與HSRP Group 2
R4(config)#interface fa0/0
R4(config-if)#ip address 172.16.10.2 255.255.255.0
R4(config-if)#no shutdown
R4(config-if)#standby 2 priority 200
R4(config-if)#standby 2 preempt
R4(config-if)#standby 2 ip 172.16.10.254
R4(config-if)#standby 2 authentication nnnkey
R4(config-if)#exit
設定動態路由RIP協定
R4(config)#router rip
R4(config-router)#version 2
R4(config-router)#network 192.168.10.0
R4(config-router)#network 172.16.10.0
R4(config-router)#exit
R4(config)#exit
查看HSRP的狀態
R4#show standby brief
R4#show standby all

設定fa0/1介面與HSRP Group 1
R5(config)#interface fa0/1
R5(config-if)#ip address 192.168.10.1 255.255.255.0
R5(config-if)#no shutdown
R5(config-if)#standby 1 priority 100
R5(config-if)#standby 1 ip 192.168.10.254
R5(config-if)#standby 1 authentication tttkey
R5(config-if)#exit
設定fa0/0介面與HSRP Group 2
R5(config)#interface fa0/0
R5(config-if)#ip address 172.16.10.1 255.255.255.0
R5(config-if)#no shutdown
R5(config-if)#standby 2 priority 100
R5(config-if)#standby 2 ip 172.16.10.254
R5(config-if)#standby 2 authentication nnnkey
R5(config-if)#exit
設定動態路由RIP協定
R5(config)#router rip
R5(config-router)#version 2
R5(config-router)#network 192.168.10.0
R5(config-router)#network 172.16.10.0
R5(config-router)#exit
R5(config)#exit
查看HSRP的狀態
R5#show standby all
R5#show standby brief


測試HSRP是否正常運作

目前VPC1走192.168.10.2到172.16.10.100
VPCS 1 >tracert 172.16.10.100
traceroute to 172.16.10.100, 64 hops max
1 192.168.10.2 5.411 ms 4.580 ms 5.213 ms
2 172.16.10.100 11.488 ms 8.277 ms 6.664 ms

將R4的fa0/1介面給shutdown後，再測試，已改由Active R5出去到目的地
VPCS 1 >tracert 172.16.10.100
traceroute to 172.16.10.100, 64 hops max
1 192.168.10.1 5.018 ms 6.673 ms 10.933 ms
2 172.16.10.100 9.866 ms 10.162 ms 7.135 ms

而且若從VPC3來Trace到192.168.10.100的話
因R4 fa0/0與VPC3間的Link正常，所以會先送到R4 172.16.10.2去
但R4 fa0/1與VPC1間的Link已被關掉，故又會退回改走R5再到VPC1

VPCS 3 >tracert 192.168.10.100
traceroute to 192.168.10.100, 64 hops max
1 172.16.10.2 2.460 ms 5.119 ms 6.639 ms
2 172.16.10.1 6.097 ms 5.574 ms 5.049 ms
3 192.168.10.100 13.406 ms 13.376 ms 13.472 ms

(繼續閱讀...)

DHCP LAB實作

DHCP主機由SW1擔任，而172.16.31.0網段的主機需要透過DHCP Relay來取得IP
SW1#configure t
Enter configuration commands, one per line. End with CNTL/Z.
先設定interface的IP位址
SW1(config)#interface fa1/0
SW1(config-if)#no switchport
SW1(config-if)#ip address 192.168.1.1 255.255.255.252
SW1(config-if)#no shutdown
SW1(config-if)#exit
SW1(config)#interface fa1/1
SW1(config-if)#no switchport
SW1(config-if)#ip address 10.10.10.254 255.255.255.0
SW1(config-if)#no shutdown
SW1(config-if)#exit
SW1(config)#exit


設定RIP路由
SW1(config)#router rip
SW1(config-router)#version 2
SW1(config-router)#network 192.168.1.0
SW1(config-router)#network 10.10.10.0
SW1(config-router)#exit
SW1(config)#exit

設定10.10.10.0網段的DHCP pool
SW1(config)#ip dhcp excluded-address 10.10.10.101 10.10.10.200
SW1(config)#ip dhcp pool 10-net
SW1(dhcp-config)#network 10.10.10.0 255.255.255.0
SW1(dhcp-config)#default-router 10.10.10.254
SW1(dhcp-config)#lease infinite
SW1(dhcp-config)#dns-server 168.95.1.1
SW1(dhcp-config)#end
設定172.16.31.0網段的DHCP pool
SW1#configure t
Enter configuration commands, one per line. End with CNTL/Z.
SW1(config)#ip dhcp excluded-address 172.16.31.101 172.16.31.200
SW1(config)#ip dhcp pool 172-net
SW1(dhcp-config)#network 172.16.31.0 255.255.255.0
SW1(dhcp-config)#default-router 172.16.31.254
SW1(dhcp-config)#dns-server 168.95.1.1
SW1(dhcp-config)#lease infinite
SW1(dhcp-config)#end
SW1#wr

先設定Interface的IP位址
SW2(config)#interface fa1/0
SW2(config-if)#no switchport
SW2(config-if)#ip address 192.168.1.2 255.255.255.252
SW2(config-if)#no shutdown
SW2(config-if)#exit

SW2(config)#interface fa1/1
SW2(config-if)#no switchport
SW2(config-if)#ip address 172.16.31.254 255.255.255.0
SW2(config-if)#ip helper-address 192.168.1.1 (設定DHCP Relay)
SW2(config-if)#no shutdown
SW2(config-if)#exit
設定RIP路由
SW2(config)#router rip
SW2(config-router)#version 2
SW2(config-router)#network 192.168.1.0
SW2(config-router)#network 172.16.31.0
SW2(config-router)#exit
SW2(config)#exit
SW2#wr

檢查DHCP取得IP的狀況
SW1#show ip dhcp binding


(繼續閱讀...)