华为ensp基础实验系列-小型网络综合实验

谢士广博客 01-11 阅读 50评论

最近考试、测试的特别多，今天跟大家分享个以最少的设备数量，搭建一个多协议的网络需求如下： 1、路由器、交换机基本配置方法 2、静态路由技术 3、虚拟局域网技术 4、链路聚合技术 5、三层交换技术 6、DHCP技术 7、动态路由技术RIP或OSPF 8、ACL访问控制列表技术一般来说看到这些需求第一反应就是小型企业网络，这里还缺了个nat的需求，但是没有给出拓扑图如下：在这里插入图片描述配置思路二层二层中需要的技术就是stp、vlan，那么stp可以扩展到mstp，vlan无非就是接口状态，acc和trunk，还可以开启边缘端口，汇聚/核心交换机之间配置链路聚合三层三层网关利用vrrp主备优先级和mstp的多实例进行呼应，动态路由选择ospf 出口设备配置静态路由，acl，ospf下发缺省路由这么一来协议加起来差不多7-8种，所以基本可以满足老师的任何需求，以上所说的都是常见需求和技术，如果老师稍微专业，可能会提出一些偏特性的知识，或是中高级的知识，那么关注我，我会持续更新内容哦配置如下接入交换机配置（sw3、sw4） sw3交换机配置 sysname LSW3

vlan batch 10 20

stp region-configuration region-name huawei instance 1 vlan 10 20 instance 2 vlan 30 40 active region-configuration

interface Ethernet0/0/2 port link-type trunk port trunk allow-pass vlan 10 20

interface Ethernet0/0/3 port link-type trunk port trunk allow-pass vlan 30 40

interface Ethernet0/0/11 port link-type access port default vlan 10 stp edged-port enable

interface Ethernet0/0/12 port link-type access port default vlan 20 stp edged-port enable

sw4交换机配置 sysname LSW4

vlan batch 30 40

stp region-configuration region-name huawei instance 1 vlan 10 20 instance 2 vlan 30 40 active region-configuration

interface Ethernet0/0/2 port link-type trunk port trunk allow-pass vlan 30 40

interface Ethernet0/0/3 port link-type trunk port trunk allow-pass vlan 30 40

interface Ethernet0/0/11 port link-type access port default vlan 30 stp edged-port enable

interface Ethernet0/0/12 port link-type access port default vlan 40 stp edged-port enable

sw1交换机配置 sysname LSW1

二层配置 vlan batch 10 20 30 40 100

stp instance 1 root primary stp instance 2 root secondary

stp region-configuration region-name huawei instance 1 vlan 10 20 instance 2 vlan 30 40 active region-configuration

interface Eth-Trunk1 port link-type trunk port trunk allow-pass vlan 10 20 30 40

interface GigabitEthernet0/0/1 port link-type access port default vlan 100

interface GigabitEthernet0/0/2 port link-type trunk port trunk allow-pass vlan 10 20

interface GigabitEthernet0/0/3 port link-type trunk port trunk allow-pass vlan 30 40

interface GigabitEthernet0/0/11 eth-trunk 1

interface GigabitEthernet0/0/12 eth-trunk 1

dhcp配置 dhcp enable

ip pool vlan10 gateway-list 192.168.1.254 network 192.168.1.0 mask 255.255.255.0

ip pool vlan20 gateway-list 192.168.2.254 network 192.168.2.0 mask 255.255.255.0

ip pool vlan30 gateway-list 192.168.3.254 network 192.168.3.0 mask 255.255.255.0

ip pool vlan40 gateway-list 192.168.4.254 network 192.168.4.0 mask 255.255.255.0

三层网关及vrrp配置 interface Vlanif10 ip address 192.168.1.252 255.255.255.0 vrrp vrid 10 virtual-ip 192.168.1.254 vrrp vrid 10 priority 120 dhcp select global

interface Vlanif20 ip address 192.168.2.252 255.255.255.0 vrrp vrid 20 virtual-ip 192.168.2.254 vrrp vrid 20 priority 120 dhcp select global

interface Vlanif30 ip address 192.168.3.252 255.255.255.0 vrrp vrid 30 virtual-ip 192.168.3.254 dhcp select global

interface Vlanif40 ip address 192.168.4.252 255.255.255.0 vrrp vrid 40 virtual-ip 192.168.4.254 dhcp select global

interface Vlanif100 ip address 192.168.100.2 255.255.255.252

三层路由配置 ospf 1 router-id 1.1.1.1 area 0.0.0.0 network 192.168.1.0 0.0.0.255 network 192.168.2.0 0.0.0.255 network 192.168.3.0 0.0.0.255 network 192.168.4.0 0.0.0.255 network 192.168.100.0 0.0.0.255

sw2交换机配置 sysname LSW2

二层vlan配置 vlan batch 10 20 30 40 100

stp instance 1 root secondary stp instance 2 root primary

stp region-configuration region-name huawei instance 1 vlan 10 20 instance 2 vlan 30 40 active region-configuration

interface Eth-Trunk1 port link-type trunk port trunk allow-pass vlan 10 20 30 40

interface GigabitEthernet0/0/1 port link-type access port default vlan 100

interface GigabitEthernet0/0/2 port link-type trunk port trunk allow-pass vlan 10 20

interface GigabitEthernet0/0/3 port link-type trunk port trunk allow-pass vlan 30 40

interface GigabitEthernet0/0/11 eth-trunk 1

interface GigabitEthernet0/0/12 eth-trunk 1

地址池配置 dhcp enable

ip pool vlan10 gateway-list 192.168.1.254 network 192.168.1.0 mask 255.255.255.0

ip pool vlan20 gateway-list 192.168.2.254 network 192.168.2.0 mask 255.255.255.0

ip pool vlan30 gateway-list 192.168.3.254 network 192.168.3.0 mask 255.255.255.0

ip pool vlan40 gateway-list 192.168.4.254 network 192.168.4.0 mask 255.255.255.0

三层网关及vrrp配置 interface Vlanif10 ip address 192.168.1.253 255.255.255.0 vrrp vrid 10 virtual-ip 192.168.1.254 dhcp select global

interface Vlanif20 ip address 192.168.2.253 255.255.255.0 vrrp vrid 20 virtual-ip 192.168.2.254 dhcp select global

interface Vlanif30 ip address 192.168.3.253 255.255.255.0 vrrp vrid 30 virtual-ip 192.168.3.254 vrrp vrid 30 priority 120 dhcp select global

interface Vlanif40 ip address 192.168.4.253 255.255.255.0 vrrp vrid 40 virtual-ip 192.168.4.254 vrrp vrid 40 priority 120 dhcp select global

interface Vlanif100 ip address 192.168.101.2 255.255.255.252

路由配置 ospf 1 router-id 1.1.1.2 area 0.0.0.0 network 192.168.1.0 0.0.0.255 network 192.168.2.0 0.0.0.255 network 192.168.3.0 0.0.0.255 network 192.168.4.0 0.0.0.255 network 192.168.101.0 0.0.0.255

sysname AR1

acl number 2000 rule 5 permit source 192.168.1.0 0.0.0.255 rule 10 permit source 192.168.2.0 0.0.0.255 rule 15 permit source 192.168.3.0 0.0.0.255 rule 20 permit source 192.168.4.0 0.0.0.255

interface GigabitEthernet0/0/0 ip address 100.1.1.1 255.255.255.252 nat outbound 2000

interface GigabitEthernet0/0/1 ip address 192.168.100.1 255.255.255.252

interface GigabitEthernet0/0/2 ip address 192.168.101.1 255.255.255.252

ospf 1 router-id 1.1.1.3 default-route-advertise area 0.0.0.0 network 192.168.100.0 0.0.0.255 network 192.168.101.0 0.0.0.255

ip route-static 0.0.0.0 0.0.0.0 100.1.1.2

以上配置可直接复制到设备中，最后测试结果即可 MSTP验证在这里插入图片描述链路聚合验证