高校的监控、有线、无线网络业务如何跑起来？

喜欢ヅ旅行 2022-09-12 02:55 120阅读 0赞

> 生前何必久睡，死后定当长眠。

### 文章目录 ###

*   *   *  简单概述
         *  框架拓扑
         *  基本配置
         *  简单测试

### 简单概述 ###

项目简单复盘，简单总结一下必要的知识，这是本人的之前做的项目。

业务规划如下表所示：

<table> 
 <thead> 
  <tr> 
   <th>vlan</th> 
   <th>描述</th> 
   <th>网段</th> 
   <th>网关</th> 
   <th>登录方式</th> 
   <th>用户名</th> 
   <th>密码</th> 
   <th>备注</th> 
  </tr> 
 </thead> 
 <tbody> 
  <tr> 
   <td>1</td> 
   <td>监控</td> 
   <td>10.40.0.0/23</td> 
   <td>10.40.1.254/23</td> 
   <td></td> 
   <td></td> 
   <td></td> 
   <td></td> 
  </tr> 
  <tr> 
   <td>20</td> 
   <td>无线</td> 
   <td>10.20.61.0/24</td> 
   <td>10.20.61.254/24</td> 
   <td></td> 
   <td></td> 
   <td></td> 
   <td></td> 
  </tr> 
  <tr> 
   <td>30</td> 
   <td>有线</td> 
   <td>10.30.61.0/24</td> 
   <td>10.30.61.254/24</td> 
   <td></td> 
   <td></td> 
   <td></td> 
   <td></td> 
  </tr> 
  <tr> 
   <td>40</td> 
   <td>管理</td> 
   <td>10.7.90.0/24</td> 
   <td></td> 
   <td>telnet</td> 
   <td>admin</td> 
   <td>1008611</td> 
   <td></td> 
  </tr> 
  <tr> 
   <td>50</td> 
   <td>AP</td> 
   <td>192.168.60.0/24</td> 
   <td>192.168.60.254/24</td> 
   <td></td> 
   <td></td> 
   <td></td> 
   <td></td> 
  </tr> 
  <tr> 
   <td>60</td> 
   <td>预留</td> 
   <td></td> 
   <td></td> 
   <td></td> 
   <td></td> 
   <td></td> 
   <td></td> 
  </tr> 
 </tbody> 
</table>

不同的业务划分不同的VLAN，因为网关不一样。

有线接入交换机，后期有其他业务需求，所以接傻瓜式交换机也能正常上网（傻瓜式交换机不需要配置，能实现即插即用；可在核心交换机上配置DHCP服务器，实现自动下发IP地址，下联口配置ACCSESS端口模式，上行口配置TRUNK的端口模式）

监控的接入交换机，需要是POE交换机，因为POE能提供电，开启POE功能，配置好上下联接口即可，这配置比较简单，直接使用默认VLAN 1就行，后期如果需要再添加摄像头的话，接口插在监控交换机上的下联口即可。

无线的AP需要正常上线，用户连接到的WIFI能正常上网，需要给SSID设备密码，并要有一定的安全系数。配置AC本地转发模式，因为配置本地转发模式之后数据转发的时候不需要走AC，用户数量很多的话，也推荐使用本地转发模式，这样也起到了减轻AC的负担效果。

GW到核心可以配置接口或者是配置单臂路由。

高校的网络业务，全部跑起来。

### 框架拓扑 ###

只简单体现部分网络业务与部分设备  
![在这里插入图片描述][watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA6Im65Y2a5Lic_size_20_color_FFFFFF_t_70_g_se_x_16]

监控部分  
![在这里插入图片描述][watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA6Im65Y2a5Lic_size_20_color_FFFFFF_t_70_g_se_x_16 1]

无线部分  
![在这里插入图片描述][watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA6Im65Y2a5Lic_size_20_color_FFFFFF_t_70_g_se_x_16 2]

有线部分  
![在这里插入图片描述][watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA6Im65Y2a5Lic_size_20_color_FFFFFF_t_70_g_se_x_16 3]

### 基本配置 ###

只简单描述部分网络业务的设备配置

**核心**

sysname HX
    #
     telnet server enable
    #
    ......
    #
     dhcp enable
     dhcp server forbidden-ip 172.30.61.253 172.30.61.254
    #
    .......
    #
    vlan 1
    #
    vlan 10
    #
    vlan 20
    #
    vlan30
     description guanli
    #
    vlan 40
    #            
    dhcp server ip-pool user-1
     gateway-list 10.20.61.254
     network 10.20.61.0 mask 255.255.255.0
     dns-list 114.114.114.114
    #
    dhcp server ip-pool yx
     gateway-list 10.30.61.254
     network 10.30.61.0 mask 255.255.255.0
     dns-list 114.114.114.114
    #
    interface Vlan-interface1
     description jiankong
     ip address 10.40.1.254 255.255.254.0
    #
    interface Vlan-interface10
     description wuxian
     ip address 10.20.61.252 255.255.255.0
    #
    interface Vlan-interface20
     description wangluo
     ip address 10.30.61.253 255.255.255.0
    #           
    interface Vlan-interface30
     description guanli
     ip address 10.7.90.50 255.255.255.0
    #
    interface Vlan-interface40
     ip address 192.168.60.253 255.255.255.0
    #
    interface GigabitEthernet1/0/1
     port link-type trunk
     undo port trunk permit vlan 1
     port trunk permit vlan 2 to 4094
    #
    interface GigabitEthernet1/0/2
     port link-type trunk
     undo port trunk permit vlan 1
     port trunk permit vlan 2 to 4094
    #
    interface GigabitEthernet1/0/3
     port link-type trunk
     undo port trunk permit vlan 1
     port trunk permit vlan 2 to 4094
    #
    interface GigabitEthernet1/0/4         
     port link-type trunk
     undo port trunk permit vlan 1
     port trunk permit vlan 2 to 4094
    #
    interface GigabitEthernet1/0/5
     port link-type trunk
     undo port trunk permit vlan 1
     port trunk permit vlan 2 to 4094
    #
    interface GigabitEthernet1/0/6
     port link-type trunk
     undo port trunk permit vlan 1
     port trunk permit vlan 2 to 4094
    #
    ......
    #
    interface Ten-GigabitEthernet1/0/50
     port link-type trunk
     port trunk permit vlan all
    #
    interface Ten-GigabitEthernet1/0/51
     port link-type trunk       
     port trunk permit vlan all
    #
    interface Ten-GigabitEthernet1/0/52
     port link-type trunk
     port trunk permit vlan all
    #
    ......
    #
    line vty 0 4
     authentication-mode scheme
     user-role level-15
     user-role network-operator
     set authentication password hash $h$6$r7o4J69wjD75yJp+$PmI5fGsZgevnjzyD4eNbTkArqyidaUk1lytB0up5HNjjE+Xw2SPQj0v54rdvPXUcQFuAYA9iigrGe1Gr00Of0w==
    #
    .....
    #
    local-user admin class manage
     password hash $h$6$g9622q3nQgTUANrR$fKvMW5PujY4IYfsJm9IRRExXViubtxsSAclR/5yChOtbfcXrWeCP7yuygu7WdPB+IKHlqg2eCBRlYBzUlwywfQ==
     service-type telnet
     authorization-attribute user-role level-15
     authorization-attribute user-role network-operator
    ......

**无线控制器**

sysname AC
    #
     telnet server enable
    #
     dhcp enable
    #
    vlan 1
    #
    vlan 10
    #
    vlan 30        
     description guanli
    #
    vlan 40
     name AP-GuanLi
    #
    dhcp server ip-pool ap
     gateway-list 192.168.60.254
     network 192.168.60.0 mask 255.255.255.0
    #
    wlan service-template 1
     ssid LXXX-1
     client forwarding-location ap
     akm mode psk
     preshared-key pass-phrase cipher 1008611
     cipher-suite ccmp
     security-ie rsn
     security-ie wpa
     service-template enable
    #
    interface Vlan-interface1
     ip address 192.168.0.100 255.255.255.0
    #
     interface Vlan-interface30
      ip address 10.7.90.254 255.255.255.0
    #
     interface Vlan-interface40
      ip address 192.168.60.40 255.255.255.0        
    #
    interface GigabitEthernet1/0/1
     port link-mode bridge
     description To-hx
     port link-type trunk
     undo port trunk permit vlan 1
     port trunk permit vlan 30 40
    #
     ip route-static 0.0.0.0 0 10.7.90.50
    #
    .....
    #
    local-user admin class manage
     password hash $h$6$Q8fCpjF7Q/Dx2e15$mnHpb4R9v3+rOsyOkEFk5kmCsGGOo/RZ13tDbRAAfNBbD689sl3Y5ycseJ53gUcKrA1oNob1YU53Dg/VSCfUBA==
     service-type telnet http https
     authorization-attribute user-role network-admin
    #
    app-group xxxx-xxxx-xxxx
     description "User-defined application group"
    #
    ......
    #
     wlan auto-ap enable
     wlan auto-persistent enable
    #
    wlan ap-group bel
     vlan 1
     ap-model WA6320-C              
      map-configuration flash:/apconfig.txt
      radio 1
       radio enable
       service-template 1 vlan 10
      radio 2
       radio enable
       service-template 1 vlan 10
      gigabitethernet 1
    #
    ........
    #
    wlan ap-group default-group            
     vlan 1
     ap-model WA6320-C
      map-configuration flash:/apconfig.txt
      radio 1
       radio enable
       service-template 1 vlan 10
      radio 2
       radio enable
       service-template 1 vlan 10
      gigabitethernet 1
    #
    wlan ap 0c3a-fa3e-f940 model WA6320-C 
     serial-id 219801A2BS820BE004WL
     vlan 1
     radio 1
     radio 2
     gigabitethernet 1
    #
    ......

**监控**

sysname JK
    #
     telnet server enable
    #
    ......
    #
    vlan 1
     description jiankong
    #
    vlan 30
     description guanli
    #
    interface Vlan-interface30
     ip address 10.7.90.30 255.255.255.0
    #
    interface GigabitEthernet1/0/1
     stp edged-port
     poe enable
    #
    interface GigabitEthernet1/0/2
     stp edged-port
     poe enable
    #
    interface GigabitEthernet1/0/3
     stp edged-port
     poe enable
    #
    interface GigabitEthernet1/0/4
     stp edged-port
     poe enable
    #
    interface GigabitEthernet1/0/5
     stp edged-port
     poe enable
    #
    interface GigabitEthernet1/0/6
     stp edged-port
     poe enable
    #
    ......
    #
    interface GigabitEthernet1/0/23
     port link-type trunk
     port trunk permit vlan all
     poe enable
    #
    interface GigabitEthernet1/0/24
     port link-type trunk
     port trunk permit vlan all
     poe enable
    #
     ip route-static 0.0.0.0 0 10.7.90.50
    #
    .....

**无线**

sysname WX
    #
     telnet server enable
    #
    ......
    #
     dhcp enable
    #
    .......
    #
    vlan 10
     description wuxian
    #
    vlan 30
     description guanli 
    #
    vlan 40 
     description glap 
    #
    interface Vlan-interface30
     ip address 10.7.90.20 255.255.255.0
    #
    interface GigabitEthernet1/0/1
     port link-type trunk
     undo port trunk permit vlan 1
     port trunk permit vlan 2 to 4094
     port trunk pvid vlan 40
     stp edged-port
     poe enable
    #
    interface GigabitEthernet1/0/2
     port link-type trunk
     undo port trunk permit vlan 1
     port trunk permit vlan 2 to 4094
     port trunk pvid vlan 40
     stp edged-port
     poe enable
    #
    interface GigabitEthernet1/0/3
     port link-type trunk
     undo port trunk permit vlan 1
     port trunk permit vlan 2 to 4094
     port trunk pvid vlan 40
     stp edged-port
     poe enable
    #
    interface GigabitEthernet1/0/4
     port link-type trunk
     undo port trunk permit vlan 1
     port trunk permit vlan 2 to 4094
     port trunk pvid vlan 40
     stp edged-port
     poe enable
    #
    interface GigabitEthernet1/0/5
     port link-type trunk
     undo port trunk permit vlan 1
     port trunk permit vlan 2 to 4094
     port trunk pvid vlan 40
     stp edged-port
     poe enable
    #
    interface GigabitEthernet1/0/6
     port link-type trunk
     undo port trunk permit vlan 1
     port trunk permit vlan 2 to 4094
     port trunk pvid vlan 40
     stp edged-port
     poe enable
    #
    ......
    #
    interface GigabitEthernet1/0/23
     port link-type trunk
     port trunk permit vlan all
     poe enable
    #
    interface GigabitEthernet1/0/24
     port link-type trunk
     port trunk permit vlan all
     poe enable
    #
     ip route-static 0.0.0.0 0 10.7.90.50
    #
    .....
    #
    line vty 0 4
     user-role level-15
     user-role network-operator
     set authentication password hash $h$6$mWM7Az3+Vq9JSIGe$ss1G+9qS8fC4es+om5Sqb7ipr04vyLqujhaDDVjFjWibcGaf8pq0YWFeN9wYd6rTp2Sj8FiHvFAQT96qltRU1g==
    #
    .....
    #
    local-user admin class manage
     password hash $h$6$U+Eu6tFUnQ6QOFtI$/3oqehm3MSABANUbVKKYyxUdoObrIZoc4UCvTJ/ot8WJVkcWv3TLEuJVEISovzT1A09ZhHBMK9AWkELThVlUJg==
     service-type telnet http https terminal
     authorization-attribute user-role network-admin
     authorization-attribute user-role network-operator
    #
    ......

**有线**

sysname YX
    #
    vlan 20
     description wangluo
    #
    vlan 30
     description guanli
    #
    ......
    #
    local-user admin
     password cipher 1008611
     authorization-attribute level 3
     service-type telnet
    #
    interface NULL0
    #
    interface Vlan-interface30
     ip address 10.7.90.10 255.255.255.0
    #
    interface GigabitEthernet1/0/1
     port access vlan 30
    #
    interface GigabitEthernet1/0/2
     port access vlan 30
    #
    interface GigabitEthernet1/0/3
     port access vlan 30
    #               
    interface GigabitEthernet1/0/4
     port access vlan 30
    #
    interface GigabitEthernet1/0/5
     port access vlan 30
    #
    interface GigabitEthernet1/0/6
     port access vlan 30
    #
    ......
    #
    interface GigabitEthernet1/0/23
     port link-type trunk
     port trunk permit vlan all
    #
    interface GigabitEthernet1/0/24
     port link-type trunk
     port trunk permit vlan all
    #
     ip route-static 0.0.0.0 0 10.7.90.50
    #
    ......
    #
     dhcp enable
    #
    ......
    #
    user-interface aux 0
    user-interface vty 0 4
     authentication-mode scheme
     user privilege level 3
     set authentication password cipher 1008611
    user-interface vty 5 15
    #
    return

### 简单测试 ###

**1、监控**

是否能PING通网关  
![在这里插入图片描述][watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA6Im65Y2a5Lic_size_20_color_FFFFFF_t_70_g_se_x_16 4]

安装一个插件（不需要有网络，用户名：admin，密码：1111)  
![在这里插入图片描述][watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA6Im65Y2a5Lic_size_20_color_FFFFFF_t_70_g_se_x_16 5]

在摄像头上配置一个和监控网关同网段的IP地址  
![在这里插入图片描述][watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA6Im65Y2a5Lic_size_20_color_FFFFFF_t_70_g_se_x_16 6]  
效果画面  
![在这里插入图片描述][watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA6Im65Y2a5Lic_size_20_color_FFFFFF_t_70_g_se_x_16 7]  
**2、无线**

AP上线

![在这里插入图片描述][watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA6Im65Y2a5Lic_size_20_color_FFFFFF_t_70_g_se_x_16 8]  
如果当天AP没有全部上线的话，或者是只有几个AP没上线，之后等客户把线插好之后，可考虑远程操作，把剩下没分组的AP给分组。因为AP没上线的因素有很多，比如，网线差错业务接口，网线没插，或者是没插好，甚至是网线制作有问题。（因为这是我踩过的坑儿）

**3、有线**

把PC接到接入交换机，PC能拿到IP地址，能正常上网

ping 114.114.114.114  
![在这里插入图片描述][watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA6Im65Y2a5Lic_size_20_color_FFFFFF_t_70_g_se_x_16 9]

**知识拓展：**

批量PING测试

@for /l %i in (1,1,255) do @ping -n 1 -w 40 192.168.110.%i & if errorlevel 1 (echo 192.168.110%i>>na.txt) else (echo 192.168.110.%i>>act.txt)

![在这里插入图片描述][watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA6Im65Y2a5Lic_size_20_color_FFFFFF_t_70_g_se_x_16 10]  
有192.168.110.39IP地址能通

--------------------

![在这里插入图片描述][9f824a9933e1465683f047960c137d7e.gif_pic_center]  
好了这期就到这里了，如果你喜欢这篇文章的话，请点赞评论分享收藏，如果你还能点击关注，那真的是对我最大的鼓励。谢谢大家，下期见！

[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA6Im65Y2a5Lic_size_20_color_FFFFFF_t_70_g_se_x_16]: /images/20220828/21e749577bb145e8a05838b27c69c0bd.png
[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA6Im65Y2a5Lic_size_20_color_FFFFFF_t_70_g_se_x_16 1]: /images/20220828/cebb0a97c04f4137a8eaf7e13aae30de.png
[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA6Im65Y2a5Lic_size_20_color_FFFFFF_t_70_g_se_x_16 2]: /images/20220828/16c1151fa96442168ba35a69611fdd13.png
[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA6Im65Y2a5Lic_size_20_color_FFFFFF_t_70_g_se_x_16 3]: /images/20220828/daf23f7bbfb4441d839df8340116e8f7.png
[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA6Im65Y2a5Lic_size_20_color_FFFFFF_t_70_g_se_x_16 4]: /images/20220828/0adcb3fee64f45548349b00775523444.png
[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA6Im65Y2a5Lic_size_20_color_FFFFFF_t_70_g_se_x_16 5]: /images/20220828/00122351b7a141a08265862d95a52efb.png
[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA6Im65Y2a5Lic_size_20_color_FFFFFF_t_70_g_se_x_16 6]: /images/20220828/9f220f8ee75649abb11cb3767a45ef53.png
[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA6Im65Y2a5Lic_size_20_color_FFFFFF_t_70_g_se_x_16 7]: /images/20220828/f44586421e084343a6b85d91b40397c9.png
[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA6Im65Y2a5Lic_size_20_color_FFFFFF_t_70_g_se_x_16 8]: /images/20220828/9649b523452f4829a8065eade6ec82c8.png
[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA6Im65Y2a5Lic_size_20_color_FFFFFF_t_70_g_se_x_16 9]: /images/20220828/862f8f5d1f9f461a8488db0bd15f988c.png
[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA6Im65Y2a5Lic_size_20_color_FFFFFF_t_70_g_se_x_16 10]: /images/20220828/e8282c6ce90144238a8c4595dc80dc9c.png
[9f824a9933e1465683f047960c137d7e.gif_pic_center]: /images/20220828/c99abd8c7559471fa405fad5814e34dc.png