HUAWEI——路由基础

路由基础

一、配置链路聚合

目的:使用链路聚合将两条物理线路聚合成一条逻辑线路,用于实现链路负载分担和备份。

1、trunk的配置

<Huawei>system-view
[Huawei]vlan batch 2 to 6   //批量创建vlan2-6
[Huawei]int g0/0/1
[Huawei-GigabitEthernet0/0/1]port link-type trunk   //配置链路聚合模式为trunk
[Huawei-GigabitEthernet0/0/1]port trunk allow-pass vlan all   //允许所有vlan
[Huawei-GigabitEthernet0/0/1]quit

2、vlan的配置

[Huawei]int g0/0/3
[Huawei-GigabitEthernet0/0/3]port link access   //配置链路聚合模式为access
[Huawei-GigabitEthernet0/0/3]port default vlan 2    //接口加入vlan2
[Huawei-GigabitEthernet0/0/3]quit

查看vlan信息

[Huawei]display vlan

3、lacp(链路聚合协议)配置

[SW1]lacp priority 1000  //设置设备的系统LACP优先级
[SW1]int Eth-Trunk 12    //创建链路聚合逻辑接口,设置名称为Eth-Trunk 12
[SW1-Eth-Trunk12]mode lacp-static    //配置静态LACP模式
[SW1-Eth-Trunk12]load-balance dst-mac    //配置负载均衡模式为目标MAC地址
[SW1-Eth-Trunk12]trunkport GigabitEthernet 0/0/23    //添加成员接口g0/0/23
Info: This operation may take a few seconds. Please wait for a moment...done.
[SW1-Eth-Trunk12]trunkport GigabitEthernet 0/0/24
Info: This operation may take a few seconds. Please wait for a moment...done.
[SW1-Eth-Trunk12]quit

4、vlan间配置

1、S1配置

[SW1]vlan batch 2 to 9    //批量创建vlan2-9
Info: This operation may take a few seconds. Please wait for a moment...done.
[SW1]interface Eth-Trunk 12    //进入链路聚合接口
[SW1-Eth-Trunk12]port link-type trunk    //配置链路聚合接口为trunk
[SW1-Eth-Trunk12]port trunk allow-pass vlan all    //允许所有vlan
[SW1-Eth-Trunk12]quit
[SW1]int g0/0/2
[SW1-GigabitEthernet0/0/2]port link trunk
[SW1-GigabitEthernet0/0/2]port trunk allow-pass vlan all
[SW1-GigabitEthernet0/0/2]int g0/0/3
[SW1-GigabitEthernet0/0/3]port link trunk
[SW1-GigabitEthernet0/0/3]port trunk allow-pass vlan all
[SW1-GigabitEthernet0/0/3]int g0/0/1
[SW1-GigabitEthernet0/0/1]port link access
[SW1-GigabitEthernet0/0/1]port def	
[SW1-GigabitEthernet0/0/1]port default vlan 7
[SW1-GigabitEthernet0/0/1]quit
[SW1]interface Vlanif 2
[SW1-Vlanif2]ip add 192.168.2.1 255.255.255.0
[SW1-Vlanif2]interface Vlanif 3
[SW1-Vlanif3]ip add 192.168.3.1 255.255.255.0
[SW1-Vlanif3]interface Vlanif 4
[SW1-Vlanif4]ip add 192.168.4.1 255.255.255.0
[SW1-Vlanif4]interface Vlanif 7
[SW1-Vlanif7]ip add 192.168.7.1 255.255.255.0
[SW1-Vlanif7]interface Vlanif 9
[SW1-Vlanif9]ip add 192.168.9.1 255.255.255.0

2、S2配置

[Huawei]int Eth-Trunk 12
[Huawei-Eth-Trunk12]mode lacp-static
[Huawei-Eth-Trunk12]trunkport GigabitEthernet 0/0/23
Info: This operation may take a few seconds. Please wait for a moment...done.
[Huawei-Eth-Trunk12]trunkport GigabitEthernet 0/0/24
Info: This operation may take a few seconds. Please wait for a moment...done.
[Huawei-Eth-Trunk12]quit
[Huawei]vlan batch 2 to 9
Info: This operation may take a few seconds. Please wait for a moment...done.
[Huawei]interface Eth-Trunk 12
[Huawei-Eth-Trunk12]port link trunk
[Huawei-Eth-Trunk12]port trunk allow vlan all
[Huawei-Eth-Trunk12]int g0/0/2
[Huawei-GigabitEthernet0/0/2]port link trunk
[Huawei-GigabitEthernet0/0/2]port trunk allow vlan all
[Huawei-GigabitEthernet0/0/2]int g0/0/3
[Huawei-GigabitEthernet0/0/3]port link trunk
[Huawei-GigabitEthernet0/0/3]port trunk allow vlan all
[Huawei-GigabitEthernet0/0/3]int g0/0/1
[Huawei-GigabitEthernet0/0/1]port link access
[Huawei-GigabitEthernet0/0/1]port default vlan 8
[Huawei-GigabitEthernet0/0/1]quit
[Huawei]interface Vlanif 5
[Huawei-Vlanif5]ip add 192.168.5.1 24
[Huawei-Vlanif5]interface Vlanif 6
[Huawei-Vlanif6]ip add 192.168.6.1 24
[Huawei-Vlanif6]interface Vlanif 8
[Huawei-Vlanif8]ip add 192.168.8.1 24
[Huawei-Vlanif8]interface Vlanif 9
[Huawei-Vlanif9]ip add 192.168.9.1 24

二、OSPF 的配置

[R2]ospf 110    //进入ospf进程模式,进程ID号为110
[R2-ospf-110]area 0    //进入area 0区域
[R2-ospf-110-area-0.0.0.0]network 192.168.7.0 0.0.0.255    //宣告网络
[R2-ospf-110-area-0.0.0.0]network 192.168.8.0 0.0.0.255
[R2-ospf-110-area-0.0.0.0]quit
[R2-ospf-110]quit
[SW1]ospf 110
[SW1-ospf-110]area 0
[SW1-ospf-110-area-0.0.0.0]network 192.168.7.0 0.0.0.255
[SW1-ospf-110-area-0.0.0.0]network 192.168.2.0 0.0.0.255
[SW1-ospf-110-area-0.0.0.0]network 192.168.3.0 0.0.0.255
[SW1-ospf-110-area-0.0.0.0]network 192.168.4.0 0.0.0.255
[SW1-ospf-110-area-0.0.0.0]network 192.168.9.0 0.0.0.255
[SW1-ospf-110-area-0.0.0.0]quit
[SW1-ospf-110]quit
[SW2]ospf 110
[SW2-ospf-110]area 0
[SW2-ospf-110-area-0.0.0.0]network 192.168.8.0 0.0.0.255
[SW2-ospf-110-area-0.0.0.0]network 192.168.9.0 0.0.0.255
[SW2-ospf-110-area-0.0.0.0]network 192.168.5.0 0.0.0.255
[SW2-ospf-110-area-0.0.0.0]network 192.168.6.0 0.0.0.255
[SW2-ospf-110-area-0.0.0.0]quit
[SW2-ospf-110]quit

查看ospf学习到的路由表

[SW2]display ospf routing 

	 OSPF Process 110 with Router ID 192.168.5.1
		  Routing Tables 

 Routing for Network 
 Destination        Cost  Type       NextHop         AdvRouter       Area
 192.168.5.0/24     1     Stub       192.168.5.1     192.168.5.1     0.0.0.0
 192.168.6.0/24     1     Stub       192.168.6.1     192.168.5.1     0.0.0.0
 192.168.8.0/24     1     Transit    192.168.8.1     192.168.5.1     0.0.0.0
 192.168.9.0/24     1     Stub       192.168.9.1     192.168.5.1     0.0.0.0
 192.168.2.0/24     3     Stub       192.168.8.2     192.168.2.1     0.0.0.0
 192.168.3.0/24     3     Stub       192.168.8.2     192.168.2.1     0.0.0.0
 192.168.4.0/24     3     Stub       192.168.8.2     192.168.2.1     0.0.0.0
 192.168.7.0/24     2     Transit    192.168.8.2     192.168.7.2     0.0.0.0

 Total Nets: 8  
 Intra Area: 8  Inter Area: 0  ASE: 0  NSSA: 0 

三、单臂路由配置

[R4]int g0/0/0.10    //进入子接口
[R4-GigabitEthernet0/0/0.10]dot1q termination vid 10    //子接口和vlan10关联
[R4-GigabitEthernet0/0/0.10]ip add 192.168.10.1 24    //配置子接口IP
[R4-GigabitEthernet0/0/0.10]arp broadcast enable    //子接口打开arp开关
[R4-GigabitEthernet0/0/0.10]int g0/0/0.11
[R4-GigabitEthernet0/0/0.11]dot1q termination vid 11
[R4-GigabitEthernet0/0/0.11]ip add 192.168.11.1 24
[R4-GigabitEthernet0/0/0.11]arp broadcast enable

四、RIP的配置

[R3]rip    //进入RIP进程模式,默认ID为1
[R3-rip-1]undo summary     //关闭RIP的自动汇总
[R3-rip-1]version 2    //指定RIP版本
[R3-rip-1]network 192.168.12.0    //宣告网络
[R3-rip-1]network 192.168.13.0

五、配置路由器重分发

[R2]ospf 110    //进入ospf进程模式
[R2-ospf-110]import-route rip 1    //将RIP协议重分发到OSPF中
[R2-ospf-110]rip    //进入RIP进程模式
[R2-rip-1]import-route ospf 110    //将OSPF协议重分发到RIP中
[R2-rip-1]quit

查看路由表

[R2]display ip routing-table

查看接口配置IP地址

[R2]display ip interface brief

六、配置NAT及访问控制

1、配置默认路由去往internet

[R2]ip route-static 0.0.0.0 0.0.0.0 200.0.0.2    //配置静态路由

2、默认路由重分发

[R2]ospf 110
[R2-ospf-110]default-route-advertise     //向OSPF注入静态路由
[R2-ospf-110]quit
[R2]rip
[R2-rip-1]default-route originate     //向RIP注入一条默认路由
[R2-rip-1]quit

3、配置PAT实现内网能访问internet

[R2]nat address-group 1 200.0.0.100 200.0.0.100    //配置NAT组
[R2]acl 2000    //编写编号为2000的ACL
[R2-acl-basic-2000]rule 0 permit source any    //规则0:允许所有通过
[R2-acl-basic-2000]quit
[R2]int g3/0/0
[R2-GigabitEthernet3/0/0]nat outbound 2000 address-group 1    //NAT转换,2000为address-group 1
[R2-GigabitEthernet3/0/0]quit

4、配置静态NAT,将服务器发布到internet

[R2]int g3/0/0
[R2-GigabitEthernet3/0/0]nat server global 200.0.0.200 inside 192.168.2.10    //配置NAT映射,将服务器映射为公网地址200.0.0.200
[R2-GigabitEthernet3/0/0]quit

5、ACL控制192.168.10.0网段不能访问internet

[R2]acl 3000    //配置编号为2000的ACL
[R2-acl-adv-3000]rule 0 deny ip source 192.168.10.0 0.0.0.255 destination 200.0.0.0 0.0.0.255    //规则0:拒绝IP为源地址192.168.10.0网段去往200.0.0.0网段
[R2-acl-adv-3000]rule 5 deny ip source 192.168.10.0 0.0.0.255 destination 201.0.0.0 0.0.0.255
//规则5:拒绝IP为源地址192.168.10.0网段去往201.0.0.0网段
[R2-acl-adv-3000]quit
[R2]int g0/0/2
[R2-GigabitEthernet0/0/2]traffic-filter inbound acl 3000    //接口调用ACL3000
[R2-GigabitEthernet0/0/2]quit

查看NAT转换条目

[R2]display nat session all

查看ACL信息

[R2]display acl all

查看ospf邻居信息

[R2]display acl all

你可能感兴趣的:(华为设备)