Cho sơ đồ mạng như sau:

Yêu cầu:
Etherchannel L3
Multiple HSRP or GLBP tại Switch Core
NAT
DHCP
Định tuyến OSPF cho vùng mạng giữa các router biên & switch core.
…

1
Router R11
enable
configure terminal
hostname R11

interface F0/0
no shutdown
ip address dhcp
ip nat outside
exit

interface F0/1
no shutdown
ip address 192.168.111.11 255.255.255.0
ip nat inside
exit

interface F1/0
no shutdown
ip address 192.168.211.11 255.255.255.0
ip nat inside
exit

access-list 1 permit 192.168.0.0 0.0.255.255

ip nat inside source list 1 interface F0/0 overload

router ospf 100

network 192.168.111.0 0.0.0.255 area 0
network 192.168.211.0 0.0.0.255 area 0
default-information originate
exit

no cdp run

ip domain-lookup

ip name-server 8.8.8.8

no ip cef

do write
end

2
Router R22
enable
configure terminal
hostname R22

interface F0/0
no shutdown
ip address dhcp
ip nat outside
exit

interface F0/1
no shutdown
ip address 192.168.222.22 255.255.255.0
ip nat inside
exit

interface F1/0
no shutdown
ip address 192.168.122.22 255.255.255.0
ip nat inside
exit

access-list 1 permit 192.168.0.0 0.0.255.255

ip nat inside source list 1 interface F0/0 overload

router ospf 100

network 192.168.222.0 0.0.0.255 area 0
network 192.168.122.0 0.0.0.255 area 0
default-information originate
exit

no cdp run

ip domain-lookup

ip name-server 8.8.8.8

no ip cef

do write
end

3
SwitchCore1
en
conf t
hostname SwitchCore1

int range e0/0 - 3

switchport trunk encapsulation dot1q
switchport mode trunk
exit

int e3/1
no switchport
ip address 192.168.111.1 255.255.255.0
exit

int e3/2
no switchport
ip address 192.168.122.1 255.255.255.0
exit

interface range E2/0 - 3

no switchport
channel-group 12 mode active
exit

interface port-channel 12
ip address 192.168.12.1 255.255.255.0
no shutdown
exit

vtp mode server

vtp domain dtu.vn
vtp password dtu@123

vlan 10
name TaiChinh
exit
vlan 20
name KeToan
exit
vlan 30
name KinhDoanh
exit

int vlan 1
no shutdown
ip address 192.168.1.1 255.255.255.0
glbp 1 ip 192.168.1.254
ip helper-address 192.168.1.100
exit
int vlan 10
no shutdown
4
 ip address 192.168.10.1 255.255.255.0
glbp 10 ip 192.168.10.254
ip helper-address 192.168.1.100
exit
int vlan 20
no shutdown
ip address 192.168.20.1 255.255.255.0
glbp 20 ip 192.168.20.254
ip helper-address 192.168.1.100
exit
int vlan 30
no shutdown
ip address 192.168.30.1 255.255.255.0
glbp 30 ip 192.168.30.254
ip helper-address 192.168.1.100
exit

no cdp run

ip routing
router ospf 100
network 192.168.0.0 0.0.255.255 area 0
exit

do write

5
SwitchCore2
en
conf t
hostname SwitchCore1

int range e0/0 - 3

switchport trunk encapsulation dot1q
switchport mode trunk
exit

int e3/1
no switchport
ip address 192.168.211.2 255.255.255.0
exit

int e3/2
no switchport
ip address 192.168.222.2 255.255.255.0
exit

interface range E2/0 - 3

no switchport
channel-group 12 mode active
exit

interface port-channel 12
ip address 192.168.12.2 255.255.255.0
no shutdown
exit

vtp mode server

vtp domain dtu.vn
vtp password dtu@123

vlan 10
name TaiChinh
exit
vlan 20
name KeToan
exit
vlan 30
name KinhDoanh
exit

int vlan 1
no shutdown
ip address 192.168.1.2 255.255.255.0
glbp 1 ip 192.168.1.254
ip helper-address 192.168.1.100
exit
int vlan 10
no shutdown
6
 ip address 192.168.10.2 255.255.255.0
glbp 10 ip 192.168.10.254
ip helper-address 192.168.1.100
exit
int vlan 20
no shutdown
ip address 192.168.20.2 255.255.255.0
glbp 20 ip 192.168.20.254
ip helper-address 192.168.1.100
exit
int vlan 30
no shutdown
ip address 192.168.30.2 255.255.255.0
glbp 30 ip 192.168.30.254
ip helper-address 192.168.1.100
exit

no cdp run

ip routing
router ospf 100
network 192.168.0.0 0.0.255.255 area 0
exit

do write

SwitchACC10
en
conf t
hostname SwitchAcc10

int range e0/0 - 1

switchport trunk encapsulation dot1q
switchport mode trunk
exit

vtp mode client

vtp domain dtu.vn
vtp password dtu@123

int vlan 1
no shutdown
ip address 192.168.1.10 255.255.255.0
exit

int e1/1
switchport mode access
switchport access vlan 10
exit
no cdp run

7
do write

SwitchACC20
en
conf t
hostname SwitchAcc20

int range e0/0 - 1

switchport trunk encapsulation dot1q
switchport mode trunk
exit

vtp mode client

vtp domain dtu.vn
vtp password dtu@123

int vlan 1
no shutdown
ip address 192.168.1.20 255.255.255.0
exit
int e1/1
switchport mode access
switchport access vlan 20
exit

no cdp run
do write

8
SwitchACC30
en
conf t
hostname SwitchAcc30

int range e0/0 - 1

switchport trunk encapsulation dot1q
switchport mode trunk
exit

vtp mode client

vtp domain dtu.vn
vtp password dtu@123

int vlan 1
no shutdown
ip address 192.168.1.30 255.255.255.0
exit
int e1/1
switchport mode access
switchport access vlan 30
exit

no cdp run
do write

SwitchACC1
en
conf t
hostname SwitchAcc1

int range e0/0 - 1

switchport trunk encapsulation dot1q
switchport mode trunk
exit

vtp mode client

vtp domain dtu.vn
vtp password dtu@123

int vlan 1
no shutdown
ip address 192.168.1.11 255.255.255.0
exit
no cdp run
do write

9
DHCP Server
en
conf t
hostname DHCPServer

interface F0/0
no shutdown
ip address 192.168.1.100 255.255.255.0
exit

ip dhcp pool VLAN1

network 192.168.1.0 255.255.255.0
default-router 192.168.1.254
dns 8.8.8.8
exit

ip dhcp pool VLAN10

network 192.168.10.0 255.255.255.0
default-router 192.168.10.254
dns 8.8.8.8
exit

ip dhcp pool VLAN20

network 192.168.20.0 255.255.255.0
default-router 192.168.20.254
dns 8.8.8.8
exit

ip dhcp pool VLAN30

network 192.168.30.0 255.255.255.0
default-router 192.168.30.254
dns 8.8.8.8
exit

ip dhcp excluded-address 192.168.1.1 192.168.1.100

ip dhcp excluded-address 192.168.10.1 192.168.10.100
ip dhcp excluded-address 192.168.20.1 192.168.20.100
ip dhcp excluded-address 192.168.30.1 192.168.30.100

ip route 0.0.0.0 0.0.0.0 192.168.1.1

no cdp run
do write

10
PC-VLAN10

11
PC-VLAN20

12
PC-VLAN30

13
Kiểm tra cấu hình & thông mạng
show …

14