移動11f互聯網監(jiān)控中心工程

安徽移動黃山路11F互聯網監(jiān)控中心工程案例安徽技服中心 2017年5月用戶要求及組網1目錄路由器配置2交換機配置2合肥互聯網監(jiān)控中心案例（用戶需求）1、辦公電腦在自動獲取地址的情況下，能夠訪問外網和矩陣用戶需求：2、辦公電腦在配置10段地址的時候能夠訪問移動辦公內網3、PAD連接AP后能夠訪問終控，但不能訪問辦公內網4、拉了兩條專線，要保證各個互聯網電視節(jié)目不卡頓合肥互聯網監(jiān)控中心案例（組網圖）合肥互聯網監(jiān)控中心案例（數據端口規(guī)劃）設備端口端口描述IP地址/掩碼路由VLAN規(guī)劃地址池DNS光貓1與路由器G

0/0對接光貓1與路由器G

0/1對接路由器G0/0公網1112.27.203.47

255.255.254.00.0.0.00.0.0.0112.27.203.1G0/1公網2112.27.251.2

255.255.255.00.0.0.00.0.0.0112.27.251.1G0/2.1服務器1192.168.10.1

255.255.255.00.0.0.00.0.0.0192.168.10.110192.168.10.2-192.168.10.254211.138.180.2

211.138.180.3G0/2.2辦公PC與矩陣192.168.30.1

255.255.255.00.0.0.00.0.0.0192.168.30.130192.168.30.2-192.168.30.254211.138.180.2

211.138.180.3G0/2.3AP192.168.40.1

255.255.255.00.0.0.00.0.0.0192.168.40.140192.168.40.2-192.168.40.254211.138.180.2

211.138.180.3G0/3.1服務器2與服務器3192.168.20.1

255.255.255.00.0.0.00.0.0.0192.168.20.120192.168.20.2-192.168.2.254211.138.180.2

211.138.180.3交換機南2G1/0/1服務器220G1/0/2服務器320G1/0/48路由器G0/3透傳VLAN20交換機南1G1/0/1服務器110G1/0/2-25PC30G1/0/46矩陣南192.168.30.201/255.255.255.030G1/0/47交換機北1

G1/0/48透傳VLAN10,30,40,50G1/0/48路由器G0/2透傳VLAN10,30,40,50交換機北2G1/0/48交換機北1

G1/0/47透傳VLAN10,30,40,50G1/0/13-24PC30交換機北1G1/0/1-36

上網端口預留30G1/0/40編碼器30G1/0/41辦公內網30G1/0/42辦公內網30G1/0/43終控192.168.0.178/255.255.255.050G1/0/44矩陣北192.168.30.200/255.255.255.030G1/0/45AP140G1/0/46AP240G1/0/47交換機北2

G1/0/48透傳VLAN10,30,40,50G1/0/48交換機南1

G1/0/47透傳VLAN10,30,40,50用戶要求及組網1目錄路由器配置2交換機配置2aaa

authentication

login

default

enableaaa

authentication

enable

default

enableusername

admin

password

0

adminenable

password

0

fiberhome

level

15遠程登陸配置：ACL配置：ip

access-list

standard

VLAN_20permit

192.168.20.0

255.255.255.0ip

access-list

standard

VLAN_10_30_40permit

192.168.10.0

255.255.255.0permit

192.168.30.0

255.255.255.0permit

192.168.40.0

255.255.255.0ip

nat

inside

source

list

VLAN_20

interface

GigaEthernet0/1ip

nat

inside

source

list

VLAN_10_30_40

interface

GigaEthernet0/0NAT轉換配置：策略路由配置：route-map

1

10

permitmatch

ip

address

VLAN_20set

interface

GigaEthernet0/1route-map

1

20

permitmatch

ip

address

VLAN_10_30_40set

interface

GigaEthernet0/0由于這次組網使用時FR2600(480)型號的路由器，在配置ACL后，遇到兩條專線同時使用的時候，網絡不通的情況，通過排查發(fā)現原因出在我們配置的兩條缺省路由，不同端口上來的地址沒能在ACL的配置需求下自行找到所需要的路由所致，所以再添加了策略路由并綁定到接口下，問題得以解決。端口配置1：0/0:interface

GigaEthernet0/0ip

address

112.27.203.47

255.255.254.0ip

nat

outside0/1:interface

GigaEthernet0/1ip

address

112.27.251.2

255.255.255.0ip

nat

outside端口配置2：0/2.1:interface

GigaEthernet0/2.1description

To_Server1ip

address

192.168.10.1

255.255.255.0encapsulation

dot1Q

10ip

nat

insideip

policy

route-map10/2.2:interface

GigaEthernet0/2.2description

To_Office_PC+JuZhenip

address

192.168.30.1

255.255.255.0encapsulation

dot1Q

30ip

policy

route-map1ip

nat

inside端口配置3：0/2.3:interface

GigaEthernet0/2.3description

To_APip

address

192.168.40.1

255.255.255.0encapsulation

dot1Q

40ip

policy

route-map

1ip

nat

inside0/3.1:interface

GigaEthernet0/3.1description

TO_Server2_Server3ip

address

192.168.20.1

255.255.255.0ip

policy

route-map

1ip

nat

insideip

route

default

112.27.203.1ip

route

default

112.27.251.1路由配置：ip

dhcpd

pool

VLAN_10network

192.168.10.0

255.255.255.0range

192.168.10.2

192.168.10.254default-router

192.168.10.1dns-server

211.138.180.2

211.138.180.3ip

dhcpd

pool

VLAN_20network

192.168.20.0

255.255.255.0range

192.168.20.2

192.168.20.254default-router

192.168.20.1dns-server

211.138.180.2

211.138.180.3IP地址池配置1：ip

dhcpdpool

VLAN_30network192.168.30.0

255.255.255.0range

192.168.30.2

192.168.30.254default-router

192.168.30.1dns-server

211.138.180.2

211.138.180.3ip

dhcpdpool

VLAN_40network192.168.40.0

255.255.255.0range

192.168.40.2

192.168.40.254default-router

192.168.40.1dns-server

211.138.180.2

211.138.180.3ip

dhcpd

enable

//使能IPDHCP功能IP地址池配置2：用戶要求及組網1目錄路由器配置2交換機配置2S5800南1配置：VLAN配置：VLAN

10,30,40,50端口配置：interface

gigaethernet

1/0/1alias

TO_Server_1port

hybrid

vlan

10

untaggedport

hybrid

pvid

10interface

gigaethernet

1/0/46interface

gigaethernet

1/0/2

to

gigaethernet

1/0/25porthybrid

vlan

30

untaggedporthybridpvid

30alias

To_JuZhen_Nporthybrid

vlan

30

untaggedport

hybrid

pvid

30interface

gigaethernet

1/0/47alias

Downlink_AHYD_HSL_11F_FH_B1_G_1/0/48port

hybrid

vlan

10,30,40,50

taggedinterface

gigaethernet

1/0/48alias

Uplink_FR2600_G_0/2port

hybrid

vlan

10,30,40,50

taggedS5800南2配置：VLAN配置：

VLAN

20端口配置：interface

gigaethernet

1/0/1alias

TO_Server_2port

hybrid

vlan

20

untaggedport

hybrid

pvid

20interface

gigaethernet

1/0/2alias

TO_Server_3port

hybrid

vlan

20

untaggedport

hybrid

pvid

20interface

gigaethernet

1/0/48alias

Uplike_FR2600_G_0/3port

hybrid

vlan

20

taggedS5800北1配置：VLAN配置：VLAN

10,30,40,50Filter規(guī)則：filter-list

1001

filter

1

ip

192.168.40.0/2410.0.0.0/24filter

1

action

denyfilter

2

ip

any

anyfilter2actionpermit終控VLAN地址配置：interface

vlan

50ip

address

192.168.0.178/24端口配置：interface

gigaethernet

1/0/1

togigaethernet1/0/36

port

hybrid

vlan

30

untaggedport

hybrid

pvid

30interface

gigaethernet

1/0/40alias

BianMaQiport

hybrid

vlan

30

untaggedport

hybrid

pvid

30interface

gigaethernet

1/0/41alias

BanGongWang1port

hybrid

vlan

30

untaggedport

hybrid

pvid

30interface

gigaethernet

1/0/42alias

BanGongWang2port

hybrid

vlan

30

untaggedno

porthybrid

vlan

1port

hybrid

pvid

30interface

gigaethernet

1/0/43alias

ZhongKongport

hybrid

vlan

50

untaggedport

hybrid

pvid

50interface

gigaethernet

1/0/44alias

JuZhenport

hybrid

vlan

30

untaggedport

hybrid

pvid

30interface

gigaethernet

1/0/45aliasAP_1port

hybrid

vlan

40

untaggedport

hybrid

pvid

40fi