Mô HìNH

QUY HOẠCH IP

1. PC – VLAN riêng biệt

Thiết bị	VLAN	IP PC	Gateway (VRRP)	CoreSW Master
PC1	100	192.168.1.100	192.168.1.10	CoreSW1
PC2	200	192.168.2.100	192.168.2.10	CoreSW2
PC3	300	192.168.3.100	192.168.3.10	CoreSW3
PC4	400	192.168.4.100	192.168.4.10	CoreSW4

2. Link CoreSW ↔ Router (Layer 3 – /30)

Link	IP CoreSW	IP Router	Subnet
CoreSW1 - R1	172.16.1.1	172.16.1.2	172.16.1.0/30
CoreSW2 - R2	172.16.2.1	172.16.2.2	172.16.2.0/30

3. Public IP ISP (đặt ví dụ thôi nhé)

Router	ISP	Interface IP	Subnet
R1	ISP1	203.0.113.2	203.0.113.0/30
R1	ISP2	198.51.100.2	198.51.100.0/30
R2	ISP1	203.0.113.6	203.0.113.4/30
R2	ISP2	198.51.100.6	198.51.100.4/30

4. Link CoreSW1 - CoreSW2 (Layer 3)

CoreSW1	CoreSW2	IP	Subnet
Giả sử VLAN500	10.0.0.1/30	10.0.0.2/30

5. Link CoreSW2 - CoreSW3 (Layer 3)

| CoreSW2 | CoreSW3 | 10.0.0.5/29 & 10.0.0.6/29 |

6. CoreSW3/4 ↔ AccessSW3/4 ↔ PC3/4

→ Giống cách làm bên trái, dùng HSRP (VLAN 300, 400)

TASK CẤU HìNH

1. VRRP trên CoreSW1 và CoreSW2

# VLAN 100 (CoreSW1 master)

interface vlan100

ip address 192.168.1.1 255.255.255.0

vrrp 1 ip 192.168.1.10

vrrp 1 priority 110

vrrp 1 preempt

# VLAN 100 trên CoreSW2 (backup)

interface vlan100

ip address 192.168.1.2 255.255.255.0

vrrp 1 ip 192.168.1.10

vrrp 1 priority 100

vrrp 1 preempt

# VLAN 200 (CoreSW2 master)

interface vlan200

ip address 192.168.2.2 255.255.255.0

vrrp 2 ip 192.168.2.10

vrrp 2 priority 110

vrrp 2 preempt

# VLAN 200 trên CoreSW1 (backup)

interface vlan200

ip address 192.168.2.1 255.255.255.0

vrrp 2 ip 192.168.2.10

vrrp 2 priority 100

vrrp 2 preempt

2. Link giữa CoreSW1 và CoreSW2 là Layer 3

interface Gi0/1

no switchport

ip address 10.0.0.1 255.255.255.252

interface Gi0/1 (trên CoreSW2)

no switchport

ip address 10.0.0.2 255.255.255.252

# Kiểm tra ping từ 10.0.0.1 -> 10.0.0.2

3. CoreSW ↔ Router (ping thông)

# Trên CoreSW1

interface Gi0/2

no switchport

ip address 172.16.1.1 255.255.255.252

# Trên R1

interface Gi0/0

ip address 172.16.1.2 255.255.255.252

# tương tự cho CoreSW2 ↔ R2

4. Cấu hình Loopback & Static Route

# Router R1

interface lo0

ip address 8.8.8.8 255.255.255.255

ip route 8.8.8.8 255.255.255.255 203.0.113.1

ip route 8.8.8.8 255.255.255.255 198.51.100.1 10

# Router R2

interface lo0

ip address 8.8.8.8 255.255.255.255

ip route 8.8.8.8 255.255.255.255 198.51.100.5

ip route 8.8.8.8 255.255.255.255 203.0.113.5 10

5-6. Ping từ CoreSW & PC tới 8.8.8.8

→ Cần cấu hình default route từ CoreSW → Router:

ip route 0.0.0.0 0.0.0.0 172.16.1.2 # CoreSW1

ip route 0.0.0.0 0.0.0.0 172.16.2.2 # CoreSW2

# Enable routing + default gateway cho PC là .10 (VRRP IP)

7. CoreSW3/4 dùng HSRP giống VRRP bên trái

# VLAN 300 - CoreSW3 master

interface vlan300

ip address 192.168.3.1 255.255.255.0

standby 3 ip 192.168.3.10

standby 3 priority 110

standby 3 preempt

# CoreSW4 backup

interface vlan300

ip address 192.168.3.2 255.255.255.0

standby 3 ip 192.168.3.10

standby 3 priority 100

standby 3 preempt

# VLAN 400 tương tự

8. Chạy OSPF giữa 4 CoreSW

router ospf 1

network 10.0.0.0 0.0.0.7 area 0

network 172.16.0.0 0.0.255.255 area 0

network 192.168.1.0 0.0.0.255 area 0

redistribute static

redistribute connected

9. Static route dự phòng

# Trên CoreSW1

ip route 10.0.0.8 255.255.255.248 10.0.0.2 120 # Đi qua CoreSW2 nếu link đến CoreSW3 hỏng