如何利用华为交换机实现DHCP+VRRP+MSTP（实际案例）

 

一、拓扑图

 

简介：这是一个实际项目的拓扑图，只是缺少一些安全设备，但是对于我们利用模拟器来实现其重要功能已经足够。显示项目中是利用华为AR2240作为核心路由，两台HuaWei S9300作为核心交换机，其他就是接入交换机。现具体的配置如下。

二、具体配置

1、核心路由配置

dis cu

#

sysname HXR

#

undo info-center enable

#

aaa

 authentication-scheme default

 authorization-scheme default

 accounting-scheme default

 domain default

 domain default_admin

 local-user admin password cipher Fq2|@at%N!ajUn1vMEIBN#7#

 local-user admin service-type http

#

firewall zone Local

 priority 16

#

interface Ethernet0/0/0

 ip address 202.102.224.4 255.255.255.0 ##模拟公网IP地址

#

interface Ethernet0/0/1

 description WAN

#

interface Serial0/0/0

 link-protocol ppp

#

interface Serial0/0/1

 link-protocol ppp

#

interface Serial0/0/2

 link-protocol ppp

#

interface Serial0/0/3

 link-protocol ppp

#

interface GigabitEthernet0/0/0

#

interface GigabitEthernet0/0/1 ##连接HXA

 ip address 10.0.0.1 255.255.255.0

#

interface GigabitEthernet0/0/2 ####连接HXB

 ip address 10.0.1.1 255.255.255.0

#

interface GigabitEthernet0/0/3

#

wlan

#

interface NULL0

#

ip route-static 172.16.2.0 255.255.255.0 10.0.0.2 ##回还路由

ip route-static 172.16.2.0 255.255.255.0 10.0.1.2 ##回还路由

#

user-interface con 0

user-interface vty 0 4

user-interface vty 16 20

#

return

2、HXA（核心交换机A的配置）

HXA>dis cu

#

sysname HXA

#

undo info-center enable

#

vlan batch 2 to 5 100

#

stp instance 0 root primary  ##MSTP的配置

stp instance 1 root secondary ##MSTP的配置

#

cluster enable

ntdp enable

ndp enable

#

drop illegal-mac alarm

#

dhcp enable

#

dhcp server database enable

#

diffserv domain default

#

stp region-configuration ##MSTP的配置

 instance 1 vlan 4 to 5

 active region-configuration

#

drop-profile default

#

vlan 100

 description hulian

#DHCP配置

ip pool vlan2

 gateway-list 172.16.2.1

 network 172.16.2.0 mask 255.255.255.0

 excluded-ip-address 172.16.2.254

#

ip pool vlan3

 gateway-list 172.16.3.1

 network 172.16.3.0 mask 255.255.255.0

 excluded-ip-address 172.16.3.254

#

ip pool vlan4

 gateway-list 172.16.4.1

 network 172.16.4.0 mask 255.255.255.0

 excluded-ip-address 172.16.4.254

#

ip pool vlan5

 gateway-list 172.16.5.1

 network 172.16.5.0 mask 255.255.255.0

 excluded-ip-address 172.16.5.254

#

aaa

 authentication-scheme default

 authorization-scheme default

 accounting-scheme default

 domain default

 domain default_admin

 local-user admin password simple admin

 local-user admin service-type http

#

interface Vlanif1

#

interface Vlanif2

 ip address 172.16.2.254 255.255.255.0

 vrrp vrid 1 virtual-ip 172.16.2.1

 vrrp vrid 1 priority 200

 dhcp select global

#

interface Vlanif3

 ip address 172.16.3.254 255.255.255.0

 vrrp vrid 2 virtual-ip 172.16.3.1

 vrrp vrid 2 priority 200

 dhcp select global

#

interface Vlanif4

 ip address 172.16.4.254 255.255.255.0

 vrrp vrid 3 virtual-ip 172.16.4.1

 dhcp select global

#

interface Vlanif5

 ip address 172.16.5.254 255.255.255.0

 vrrp vrid 4 virtual-ip 172.16.5.1

 dhcp select global

#

interface Vlanif100 ##两核心的心跳VLAN IP地址

 ip address 10.0.0.2 255.255.255.0

#

interface MEth0/0/1

#

interface Eth-Trunk0  ##创建端口汇聚

 port link-type trunk

 port trunk allow-pass vlan 2 to 4094

#

interface GigabitEthernet0/0/1

 port link-type access

 port default vlan 100

#

interface GigabitEthernet0/0/2

 port link-type access

#

interface GigabitEthernet0/0/3

#

interface GigabitEthernet0/0/4

#

interface GigabitEthernet0/0/5

#

interface GigabitEthernet0/0/6

#

interface GigabitEthernet0/0/7

#

interface GigabitEthernet0/0/8

#

interface GigabitEthernet0/0/9

#

interface GigabitEthernet0/0/10

#

interface GigabitEthernet0/0/11

#

interface GigabitEthernet0/0/12

#

interface GigabitEthernet0/0/13

#

interface GigabitEthernet0/0/14

#

interface GigabitEthernet0/0/15

#

interface GigabitEthernet0/0/16

#

interface GigabitEthernet0/0/17

#

interface GigabitEthernet0/0/18

#

interface GigabitEthernet0/0/19

#

interface GigabitEthernet0/0/20

#

interface GigabitEthernet0/0/21 ##与接入交换机相连

 port link-type trunk

 port trunk allow-pass vlan 2 to 4094

#

interface GigabitEthernet0/0/22##与接入交换机相连

 port link-type trunk

 port trunk allow-pass vlan 2 to 4094

#

interface GigabitEthernet0/0/23##心跳端口

 eth-trunk 0

#

interface GigabitEthernet0/0/24##心跳端口

 eth-trunk 0

#

interface NULL0

#

ip route-static 0.0.0.0 0.0.0.0 10.0.0.1

ip route-static 0.0.0.0 0.0.0.0 10.0.1.1

#

user-interface con 0

user-interface vty 0 4

#

return

3、HXB（核心B的配置）

dis cu

#

sysname HXB

#

undo info-center enable

#

vlan batch 2 to 5 101

#

stp instance 0 root secondary

stp instance 1 root primary

#

cluster enable

ntdp enable

ndp enable

#

drop illegal-mac alarm

#

dhcp enable

#

dhcp server database enable

#

diffserv domain default

#

drop-profile default

#

vlan 101

 description hulian

#

ip pool vlan2

 gateway-list 172.16.2.1

 network 172.16.2.0 mask 255.255.255.0

 excluded-ip-address 172.16.2.254

#

ip pool vlan3

 gateway-list 172.16.3.1

 network 172.16.3.0 mask 255.255.255.0

 excluded-ip-address 172.16.3.254

#

ip pool vlan4

 gateway-list 172.16.4.1

 network 172.16.4.0 mask 255.255.255.0

 excluded-ip-address 172.16.4.254

#

ip pool vlan5

 gateway-list 172.16.5.1

 network 172.16.5.0 mask 255.255.255.0

 excluded-ip-address 172.16.5.254

#

aaa

 authentication-scheme default

 authorization-scheme default

 accounting-scheme default

 domain default

 domain default_admin

 local-user admin password simple admin

 local-user admin service-type http

#

interface Vlanif1

#

interface Vlanif2

 ip address 172.16.2.253 255.255.255.0

 vrrp vrid 1 virtual-ip 172.16.2.1

 dhcp select global

#

interface Vlanif3

 ip address 172.16.3.253 255.255.255.0

 vrrp vrid 2 virtual-ip 172.16.3.1

 dhcp select global

#

interface Vlanif4

 ip address 172.16.4.253 255.255.255.0

 vrrp vrid 3 virtual-ip 172.16.4.1

 vrrp vrid 3 priority 200

 dhcp select global

#

interface Vlanif5

 ip address 172.16.5.253 255.255.255.0

 vrrp vrid 4 virtual-ip 172.16.5.1

 vrrp vrid 4 priority 200

 dhcp select global

#

interface Vlanif101

 ip address 10.0.1.2 255.255.255.0

#

interface MEth0/0/1

#

interface Eth-Trunk0

 port link-type trunk

 port trunk allow-pass vlan 2 to 4094

#

interface GigabitEthernet0/0/1

#

interface GigabitEthernet0/0/2

 port link-type access

 port default vlan 101

#

interface GigabitEthernet0/0/3

#

interface GigabitEthernet0/0/4

#

interface GigabitEthernet0/0/5

#

interface GigabitEthernet0/0/6

#

interface GigabitEthernet0/0/7

#

interface GigabitEthernet0/0/8

#

interface GigabitEthernet0/0/9

#

interface GigabitEthernet0/0/10

#

interface GigabitEthernet0/0/11

#

interface GigabitEthernet0/0/12

#

interface GigabitEthernet0/0/13

#

interface GigabitEthernet0/0/14

#

interface GigabitEthernet0/0/15

#

interface GigabitEthernet0/0/16

#

interface GigabitEthernet0/0/17

#

interface GigabitEthernet0/0/18

#

interface GigabitEthernet0/0/19

#

interface GigabitEthernet0/0/20

#

interface GigabitEthernet0/0/21

 port link-type trunk

 port trunk allow-pass vlan 2 to 4094

#

interface GigabitEthernet0/0/22

 port link-type trunk

 port trunk allow-pass vlan 2 to 4094

#

interface GigabitEthernet0/0/23

 eth-trunk 0

#

interface GigabitEthernet0/0/24

 eth-trunk 0

#

interface NULL0

#

ip route-static 0.0.0.0 0.0.0.0 10.0.1.1

ip route-static 0.0.0.0 0.0.0.0 10.0.0.1

#

user-interface con 0

user-interface vty 0 4

#

return

4、JR01（接入交换机01的配置）

dis cu

#

sysname JR01

#

undo info-center enable

#

vlan batch 2 to 5

#

cluster enable

ntdp enable

ndp enable

#

drop illegal-mac alarm

#

diffserv domain default

#

drop-profile default

#

aaa

 authentication-scheme default

 authorization-scheme default

 accounting-scheme default

 domain default

 domain default_admin

 local-user admin password simple admin

 local-user admin service-type http

#

interface Vlanif1

#

interface MEth0/0/1

#

interface Ethernet0/0/1

 port link-type access

 port default vlan 2

#

interface Ethernet0/0/2

 port link-type access

 port default vlan 4

#

interface Ethernet0/0/3

#

interface Ethernet0/0/4

#

interface Ethernet0/0/5

#

interface Ethernet0/0/6

#

interface Ethernet0/0/7

#

interface Ethernet0/0/8

#

interface Ethernet0/0/9

#

interface Ethernet0/0/10

#

interface Ethernet0/0/11

#

interface Ethernet0/0/12

#

interface Ethernet0/0/13

#

interface Ethernet0/0/14

#

interface Ethernet0/0/15

#

interface Ethernet0/0/16

#

interface Ethernet0/0/17

#

interface Ethernet0/0/18

#

interface Ethernet0/0/19

#

interface Ethernet0/0/20

#

interface Ethernet0/0/21

#

interface Ethernet0/0/22

#

interface GigabitEthernet0/0/1

 port link-type trunk

 port trunk allow-pass vlan 2 to 4094

#

interface GigabitEthernet0/0/2

 port link-type trunk

 port trunk allow-pass vlan 2 to 4094

#

interface NULL0

#

user-interface con 0

user-interface vty 0 4

#

return

5、JR02（接入交换机02的配置）

dis cu

#

sysname JR02

#

undo info-center enable

#

vlan batch 2 to 5

#

cluster enable

ntdp enable

ndp enable

#

drop illegal-mac alarm

#

dhcp server database enable

#

diffserv domain default

#

drop-profile default

#

aaa

 authentication-scheme default

 authorization-scheme default

 accounting-scheme default

 domain default

 domain default_admin

 local-user admin password simple admin

 local-user admin service-type http

#

interface Vlanif1

#

interface MEth0/0/1

#

interface Ethernet0/0/1

 port link-type access

 port default vlan 5

#

interface Ethernet0/0/2

 port link-type access

 port default vlan 3

#

interface Ethernet0/0/3

#

interface Ethernet0/0/4

#

interface Ethernet0/0/5

#

interface Ethernet0/0/6

#

interface Ethernet0/0/7

#

interface Ethernet0/0/8

#

interface Ethernet0/0/9

#

interface Ethernet0/0/10

#

interface Ethernet0/0/11

#

interface Ethernet0/0/12

#

interface Ethernet0/0/13

#

interface Ethernet0/0/14

#

interface Ethernet0/0/15

#

interface Ethernet0/0/16

#

interface Ethernet0/0/17

#

interface Ethernet0/0/18

#

interface Ethernet0/0/19

#

interface Ethernet0/0/20

#

interface Ethernet0/0/21

#

interface Ethernet0/0/22

#

interface GigabitEthernet0/0/1

 port link-type trunk

 port trunk allow-pass vlan 2 to 4094

#

interface GigabitEthernet0/0/2

 port link-type trunk

 port trunk allow-pass vlan 2 to 4094

#

interface NULL0

#

user-interface con 0

user-interface vty 0 4

#

return

转载于:https://blog.51cto.com/shxke/1113009