综合实验 vrrp，mstp，nat，ospf，rip，单臂路由

R5配置文件

sysname R5

snmp-agent local-engineid 800007DB03000000000000
snmp-agent

clock timezone China-Standard-Time minus 08:00:00

portal local-server load flash:/portalpage.zip

drop illegal-mac alarm

wlan ac-global carrier id other ac id 0

set cpu-usage threshold 80 restore 75

aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher % % K8m.Nt84DZ}e#<0`8bmE3Uw}% %
local-user admin service-type http

firewall zone Local
priority 15

nat alg ftp enable

interface GigabitEthernet0/0/0
ip address 202.10.101.5 255.255.255.0

interface GigabitEthernet0/0/1
ip address 202.10.100.5 255.255.255.0

interface GigabitEthernet0/0/2

interface NULL0

ip route-static 192.168.0.0 255.255.0.0 202.10.100.6

user-interface con 0
authentication-mode password
user-interface vty 0 4
user-interface vty 16 20

wlan ac

R1配置文件

sysname R1

board add 0/4 1GEC

snmp-agent local-engineid 800007DB03000000000000
snmp-agent

clock timezone China-Standard-Time minus 08:00:00

portal local-server load flash:/portalpage.zip

drop illegal-mac alarm

wlan ac-global carrier id other ac id 0

set cpu-usage threshold 80 restore 75

acl number 3000
rule 5 permit ip source 192.168.0.0 0.0.255.255

aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher % % K8m.Nt84DZ}e#<0`8bmE3Uw}% %
local-user admin service-type http

firewall zone Local
priority 15

nat alg ftp enable

interface GigabitEthernet0/0/0
ip address 192.168.111.6 255.255.255.0

interface GigabitEthernet0/0/1
ip address 202.10.100.6 255.255.255.0
nat outbound 3000

interface GigabitEthernet0/0/2
ip address 192.168.112.6 255.255.255.0

interface GigabitEthernet4/0/0
ip address 192.168.1.6 255.255.255.0

interface NULL0

interface LoopBack0
ip address 1.1.1.1 255.255.255.255

ospf 1 router-id 1.1.1.1
default-route-advertise
area 0.0.0.0
network 1.1.1.1 0.0.0.0
network 192.168.1.0 0.0.0.255
network 192.168.111.0 0.0.0.255
network 192.168.112.0 0.0.0.255

ip route-static 0.0.0.0 0.0.0.0 202.10.100.5

user-interface con 0
authentication-mode password
user-interface vty 0 4
user-interface vty 16 20

R2配置文件

sysname R2

snmp-agent local-engineid 800007DB03000000000000
snmp-agent

clock timezone China-Standard-Time minus 08:00:00

portal local-server load flash:/portalpage.zip

drop illegal-mac alarm

wlan ac-global carrier id other ac id 0

set cpu-usage threshold 80 restore 75

aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher % % K8m.Nt84DZ}e#<0`8bmE3Uw}% %
local-user admin service-type http

firewall zone Local
priority 15

nat alg ftp enable

interface GigabitEthernet0/0/0
ip address 192.168.1.2 255.255.255.0

interface GigabitEthernet0/0/1
ip address 192.168.2.2 255.255.255.0

interface GigabitEthernet0/0/2

interface NULL0

interface LoopBack0
ip address 2.2.2.2 255.255.255.255

ospf 1 router-id 2.2.2.2
import-route rip 1 cost 100
area 0.0.0.0
network 2.2.2.2 0.0.0.0
network 192.168.1.0 0.0.0.255

rip 1
undo summary
default-route originate
version 2
network 2.0.0.0
network 192.168.2.0
import-route ospf 1 cost 0

R3配置文件

sysname R3

snmp-agent local-engineid 800007DB03000000000000
snmp-agent

clock timezone China-Standard-Time minus 08:00:00

portal local-server load flash:/portalpage.zip

drop illegal-mac alarm

wlan ac-global carrier id other ac id 0

set cpu-usage threshold 80 restore 75

aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher % % K8m.Nt84DZ}e#<0`8bmE3Uw}% %
local-user admin service-type http

firewall zone Local
priority 15

nat alg ftp enable

interface GigabitEthernet0/0/0
ip address 192.168.2.3 255.255.255.0

interface GigabitEthernet0/0/1
ip address 192.168.3.3 255.255.255.0

interface GigabitEthernet0/0/2

interface NULL0

interface LoopBack0
ip address 3.3.3.3 255.255.255.255

rip 1
undo summary
version 2
network 192.168.2.0
network 192.168.3.0
network 3.0.0.0

R4配置文件

sysname R4

snmp-agent local-engineid 800007DB03000000000000
snmp-agent

clock timezone China-Standard-Time minus 08:00:00

portal local-server load flash:/portalpage.zip

drop illegal-mac alarm

wlan ac-global carrier id other ac id 0

set cpu-usage threshold 80 restore 75

aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher % % K8m.Nt84DZ}e#<0`8bmE3Uw}% %
local-user admin service-type http

firewall zone Local
priority 15

nat alg ftp enable

interface GigabitEthernet0/0/0
ip address 192.168.3.4 255.255.255.0

interface GigabitEthernet0/0/1

interface GigabitEthernet0/0/1.1
dot1q termination vid 50
ip address 192.168.4.1 255.255.255.0
arp broadcast enable

interface GigabitEthernet0/0/1.2
dot1q termination vid 60
ip address 192.168.5.1 255.255.255.0
arp broadcast enable

interface GigabitEthernet0/0/2

interface NULL0

interface LoopBack0
ip address 4.4.4.4 255.255.255.255

rip 1
undo summary
version 2
network 192.168.3.0
network 192.168.4.0
network 192.168.5.0

LSW1配置文件

sysname SW1

vlan batch 10 20 30 40 111

stp instance 1 root primary
stp instance 2 root secondary

cluster enable
ntdp enable
ndp enable

drop illegal-mac alarm

diffserv domain default

stp region-configuration
region-name huawei
revision-level 1
instance 1 vlan 10 20
instance 2 vlan 30 40
active region-configuration

drop-profile default

aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password simple admin
local-user admin service-type http

interface Vlanif1

interface Vlanif10
ip address 192.168.10.10 255.255.255.0
vrrp vrid 1 virtual-ip 192.168.10.1
vrrp vrid 1 priority 120
vrrp vrid 1 track interface GigabitEthernet0/0/6

interface Vlanif20
ip address 192.168.20.10 255.255.255.0
vrrp vrid 1 virtual-ip 192.168.20.1
vrrp vrid 1 priority 120
vrrp vrid 1 track interface GigabitEthernet0/0/6

interface Vlanif30
ip address 192.168.30.10 255.255.255.0
vrrp vrid 2 virtual-ip 192.168.30.1
vrrp vrid 2 priority 115

interface Vlanif40
ip address 192.168.40.10 255.255.255.0
vrrp vrid 2 virtual-ip 192.168.40.1
vrrp vrid 2 priority 115

interface Vlanif111
ip address 192.168.111.1 255.255.255.0

interface MEth0/0/1

interface Eth-Trunk1
port link-type trunk
port trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/2
port link-type trunk
port trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/3
eth-trunk 1

interface GigabitEthernet0/0/4
eth-trunk 1

interface GigabitEthernet0/0/5
eth-trunk 1

interface GigabitEthernet0/0/6
port link-type access
port default vlan 111

interface NULL0

interface LoopBack0
ip address 10.10.10.10 255.255.255.255

ospf 1 router-id 10.10.10.10
area 0.0.0.0
network 192.168.10.0 0.0.0.255
network 192.168.20.0 0.0.0.255
network 192.168.111.0 0.0.0.255
network 10.10.10.10 0.0.0.0
network 192.168.30.0 0.0.0.255
network 192.168.40.0 0.0.0.255

LSW2配置文件

sysname SW2

vlan batch 10 20 30 40 112

stp instance 1 root secondary
stp instance 2 root primary

cluster enable
ntdp enable
ndp enable

drop illegal-mac alarm

diffserv domain default

stp region-configuration
instance 1 vlan 10 20
instance 2 vlan 30 40
active region-configuration

drop-profile default

aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password simple admin
local-user admin service-type http

interface Vlanif1

interface Vlanif10
ip address 192.168.10.20 255.255.255.0
vrrp vrid 1 virtual-ip 192.168.10.1
vrrp vrid 1 priority 115

interface Vlanif20
ip address 192.168.20.20 255.255.255.0
vrrp vrid 1 virtual-ip 192.168.20.1
vrrp vrid 1 priority 115

interface Vlanif30
ip address 192.168.30.20 255.255.255.0
vrrp vrid 2 virtual-ip 192.168.30.1
vrrp vrid 2 priority 120
vrrp vrid 2 track interface GigabitEthernet0/0/6

interface Vlanif40
ip address 192.168.40.20 255.255.255.0
vrrp vrid 2 virtual-ip 192.168.40.1
vrrp vrid 2 priority 120
vrrp vrid 2 track interface GigabitEthernet0/0/6

interface Vlanif112
ip address 192.168.112.1 255.255.255.0

interface MEth0/0/1

interface Eth-Trunk1
port link-type trunk
port trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/2
port link-type trunk
port trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/3
eth-trunk 1

interface GigabitEthernet0/0/4
eth-trunk 1

interface GigabitEthernet0/0/5
eth-trunk 1

interface GigabitEthernet0/0/6
port link-type access
port default vlan 112

interface NULL0

interface LoopBack0
ip address 11.11.11.11 255.255.255.255

ospf 1 router-id 11.11.11.11
area 0.0.0.0
network 192.168.30.0 0.0.0.255
network 192.168.40.0 0.0.0.255
network 192.168.112.0 0.0.0.255
network 11.11.11.11 0.0.0.0
network 192.168.10.0 0.0.0.255
network 192.168.20.0 0.0.0.255

LSW3配置文件
无

LSW4配置文件

sysname SW4

vlan batch 10 20

cluster enable
ntdp enable
ndp enable

drop illegal-mac alarm

diffserv domain default

stp region-configuration
region-name huawei
revision-level 1
instance 1 vlan 10 20
instance 2 vlan 30 40
active region-configuration

drop-profile default

aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password simple admin
local-user admin service-type http

interface Vlanif1

interface MEth0/0/1

interface Ethernet0/0/1
port link-type access
port default vlan 10

interface Ethernet0/0/2
port link-type access
port default vlan 20

interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/2
port link-type trunk
port trunk allow-pass vlan 2 to 4094

LSW5配置文件

sysname SW5

vlan batch 30 40

cluster enable
ntdp enable
ndp enable

drop illegal-mac alarm

diffserv domain default

stp region-configuration
region-name huawei
revision-level 1
instance 1 vlan 10 20
instance 2 vlan 30 40
active region-configuration

drop-profile default

aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password simple admin
local-user admin service-type http

interface Vlanif1

interface MEth0/0/1

interface Ethernet0/0/1
port link-type access
port default vlan 30

interface Ethernet0/0/2
port link-type access
port default vlan 40

interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/2
port link-type trunk
port trunk allow-pass vlan 2 to 4094

LSW6配置文件

sysname SW6

vlan batch 50 60

cluster enable
ntdp enable
ndp enable

drop illegal-mac alarm

diffserv domain default

drop-profile default

aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password simple admin
local-user admin service-type http

interface Vlanif1

interface MEth0/0/1

interface Ethernet0/0/1
port link-type access
port default vlan 50

interface Ethernet0/0/2
port link-type access
port default vlan 60

interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/2

interface NULL0

user-interface con 0
user-interface vty 0 4

return