网络部分综合实验

网络部分综合实验

 

R1配置命令：

clock timezone China-Standard-Time minus 08:00:00

#

portal local-server load portalpage.zip

#

drop illegal-mac alarm

#

set cpu-usage threshold 80 restore 75

#

aaa

authentication-scheme default

authorization-scheme default

accounting-scheme default

domain default

domain default_admin

local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$

local-user admin service-type http

#

firewall zone Local

priority 15

#

interface GigabitEthernet0/0/0

ip address 202.10.101.1 255.255.255.0

#

interface GigabitEthernet0/0/1

ip address 202.10.100.1 255.255.255.0

#

interface GigabitEthernet0/0/2

#

interface NULL0

#

user-interface con 0

authentication-mode password

idle-timeout 0 0

user-interface vty 0 4

user-interface vty 16 20

#

wlan ac

#

return

 

R2配置命令：

#

sysname R2

#

board add 0/2 1GEC

#

snmp-agent local-engineid 800007DB03000000000000

snmp-agent

#

clock timezone China-Standard-Time minus 08:00:00

#

portal local-server load portalpage.zip

#

drop illegal-mac alarm

#

set cpu-usage threshold 80 restore 75

#

acl number 2000

rule 5 permit source 192.168.0.0 0.0.255.255

#

aaa

authentication-scheme default

authorization-scheme default

accounting-scheme default

domain default

domain default_admin

local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$

local-user admin service-type http

#

firewall zone Local

priority 15

#

interface GigabitEthernet0/0/0

ip address 202.10.100.2 255.255.255.0

nat outbound 2000

#

interface GigabitEthernet0/0/1

ip address 192.168.1.2 255.255.255.0

#

interface GigabitEthernet0/0/2

ip address 192.168.111.2 255.255.255.0

#

interface GigabitEthernet2/0/0

ip address 192.168.112.2 255.255.255.0

#

interface NULL0

#

interface LoopBack0

ip address 2.2.2.2 255.255.255.255

#

ospf 1 router-id 2.2.2.2

default-route-advertise always cost 0

area 0.0.0.0

network 2.2.2.2 0.0.0.0

network 192.168.1.0 0.0.0.255

network 192.168.10.0 0.0.0.255

network 192.168.20.0 0.0.0.255

network 192.168.30.0 0.0.0.255

network 192.168.40.0 0.0.0.255

network 192.168.112.0 0.0.0.255

#

ip route-static 0.0.0.0 0.0.0.0 202.10.100.1

#

user-interface con 0

authentication-mode password

idle-timeout 0 0

user-interface vty 0 4

user-interface vty 16 20

#

wlan ac

#

return

[R2]

 

R3配置命令：

#

sysname R3

#

snmp-agent local-engineid 800007DB03000000000000

snmp-agent

#

clock timezone China-Standard-Time minus 08:00:00

#

portal local-server load portalpage.zip

#

drop illegal-mac alarm

#

set cpu-usage threshold 80 restore 75

#

aaa

authentication-scheme default

authorization-scheme default

accounting-scheme default

domain default

domain default_admin

local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$

local-user admin service-type http

#

firewall zone Local

priority 15

#

interface GigabitEthernet0/0/0

ip address 192.168.1.3 255.255.255.0

#

interface GigabitEthernet0/0/1

ip address 192.168.2.3 255.255.255.0

#

interface GigabitEthernet0/0/2

#

interface NULL0

#

interface LoopBack0

ip address 3.3.3.3 255.255.255.255

#

ospf 1 router-id 3.3.3.3

import-route rip 1 cost 100

area 0.0.0.0

network 3.3.3.3 0.0.0.0

network 192.168.1.0 0.0.0.255

#

rip 1

undo summary

default-route originate

version 2

network 192.168.2.0

import-route ospf 1 cost 0

#

user-interface con 0

authentication-mode password

idle-timeout 0 0

user-interface vty 0 4

user-interface vty 16 20

#

wlan ac

#

return

 

R4配置命令：

sys

system-view

Enter system view, return user view with Ctrl+Z.

[R4]dsi

[R4]dis

[R4]display cu

[R4]display current-configuration

[V200R003C00]

#

sysname R4

#

snmp-agent local-engineid 800007DB03000000000000

snmp-agent

#

clock timezone China-Standard-Time minus 08:00:00

#

portal local-server load portalpage.zip

#

drop illegal-mac alarm

#

set cpu-usage threshold 80 restore 75

#

aaa

authentication-scheme default

authorization-scheme default

accounting-scheme default

domain default

domain default_admin

local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$

local-user admin service-type http

#

firewall zone Local

priority 15

#

interface GigabitEthernet0/0/0

ip address 192.168.2.4 255.255.255.0

#

interface GigabitEthernet0/0/1

ip address 192.168.3.4 255.255.255.0

#

interface GigabitEthernet0/0/2

#

interface NULL0

#

interface LoopBack0

ip address 4.4.4.4 255.255.255.255

#

rip 1

undo summary

version 2

network 4.0.0.0

network 192.168.2.0

network 192.168.3.0

#

user-interface con 0

authentication-mode password

idle-timeout 0 0

user-interface vty 0 4

user-interface vty 16 20

#

wlan ac

#

return

[R4]

 

R5配置命令：

#

sysname R5

#

snmp-agent local-engineid 800007DB03000000000000

snmp-agent

#

clock timezone China-Standard-Time minus 08:00:00

#

portal local-server load portalpage.zip

#

drop illegal-mac alarm

#

set cpu-usage threshold 80 restore 75

#

aaa

authentication-scheme default

authorization-scheme default

accounting-scheme default

domain default

domain default_admin

local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$

local-user admin service-type http

#

firewall zone Local

priority 15

#

interface GigabitEthernet0/0/0

ip address 192.168.3.5 255.255.255.0

#

interface GigabitEthernet0/0/1

#

interface GigabitEthernet0/0/1.1

dot1q termination vid 50

ip address 192.168.50.1 255.255.255.0

arp broadcast enable

#

interface GigabitEthernet0/0/1.2

dot1q termination vid 60

ip address 192.168.60.1 255.255.255.0

arp broadcast enable

#

interface GigabitEthernet0/0/2

#

interface NULL0

#

interface LoopBack0

ip address 5.5.5.5 255.255.255.255

#

rip 1

undo summary

version 2

network 192.168.3.0

network 5.0.0.0

network 192.168.50.0

network 192.168.60.0

#

user-interface con 0

authentication-mode password

idle-timeout 0 0

user-interface vty 0 4

user-interface vty 16 20

#

wlan ac

#

return

 

SW1配置命令：

#

sysname SW1

#

vlan batch 10 20 30 40

#

cluster enable

ntdp enable

ndp enable

#

drop illegal-mac alarm

#

diffserv domain default

#

stp region-configuration

region-name huawei

revision-level 1

instance 1 vlan 10 20

instance 2 vlan 30 40

active region-configuration

#

drop-profile default

#

aaa

authentication-scheme default

authorization-scheme default

accounting-scheme default

domain default

domain default_admin

local-user admin password simple admin

local-user admin service-type http

#

interface Vlanif1

#

interface MEth0/0/1

#

interface Ethernet0/0/1

port link-type access

port default vlan 10

#

interface Ethernet0/0/2

port default vlan 20

#

interface GigabitEthernet0/0/1

port link-type trunk

port trunk allow-pass vlan 2 to 4094

#

interface GigabitEthernet0/0/2

port link-type trunk

port trunk allow-pass vlan 2 to 4094

#

interface NULL0

#

user-interface con 0

idle-timeout 0 0

user-interface vty 0 4

#

return

 

SW2配置命令：

 

#

sysname SW2

#

vlan batch 10 20 30 40

#

cluster enable

ntdp enable

ndp enable

#

drop illegal-mac alarm

#

diffserv domain default

#

stp region-configuration

region-name huawei

revision-level 1

instance 1 vlan 10 20

instance 2 vlan 30 40

active region-configuration

#

drop-profile default

#

aaa

authentication-scheme default

authorization-scheme default

accounting-scheme default

domain default

domain default_admin

local-user admin password simple admin

local-user admin service-type http

#

interface Vlanif1

#

interface MEth0/0/1

#

interface Ethernet0/0/1

port link-type access

port default vlan 30

#

interface Ethernet0/0/2

port link-type access

port default vlan 40

#

interface GigabitEthernet0/0/1

port link-type trunk

port trunk allow-pass vlan 2 to 4094

#

interface GigabitEthernet0/0/2

port link-type trunk

port trunk allow-pass vlan 2 to 4094

#

interface NULL0

#

user-interface con 0

idle-timeout 0 0

user-interface vty 0 4

#

return

 

SW3配置命令：

同网段直连互通不用配置命令

 

SW4配置命令：

#

sysname SW4

#

vlan batch 50 60

#

cluster enable

ntdp enable

ndp enable

#

drop illegal-mac alarm

#

diffserv domain default

#

drop-profile default

#

aaa

authentication-scheme default

authorization-scheme default

accounting-scheme default

domain default

domain default_admin

local-user admin password simple admin

local-user admin service-type http

#

interface Vlanif1

#

interface MEth0/0/1

#

interface Ethernet0/0/1

port link-type access

port default vlan 50

#

interface Ethernet0/0/2

port link-type access

port default vlan 60

#

interface GigabitEthernet0/0/1

port link-type trunk

port trunk allow-pass vlan 2 to 4094

#

interface GigabitEthernet0/0/2

#

interface NULL0

#

user-interface con 0

idle-timeout 0 0

user-interface vty 0 4

#

return

[SW4]

 

SW5配置命令：

#

sysname SW5

#

vlan batch 10 20 30 40 111

#

stp instance 1 root primary

stp instance 2 root secondary

#

cluster enable

ntdp enable

ndp enable

#

drop illegal-mac alarm

#

diffserv domain default

#

stp region-configuration

region-name huawei

revision-level 1

instance 1 vlan 10 20

instance 2 vlan 30 40

active region-configuration

#

drop-profile default

#

aaa

authentication-scheme default

authorization-scheme default

accounting-scheme default

domain default

domain default_admin

local-user admin password simple admin

local-user admin service-type http

#

interface Vlanif1

#

interface Vlanif10

ip address 192.168.10.11 255.255.255.0

vrrp vrid 1 virtual-ip 192.168.10.254

vrrp vrid 1 priority 120

vrrp vrid 1 track interface GigabitEthernet0/0/1

#

interface Vlanif20

ip address 192.168.20.11 255.255.255.0

vrrp vrid 2 virtual-ip 192.168.20.254

vrrp vrid 2 priority 120

vrrp vrid 2 track interface GigabitEthernet0/0/1

#

interface Vlanif30

ip address 192.168.30.11 255.255.255.0

vrrp vrid 3 virtual-ip 192.168.30.254

#

interface Vlanif40

ip address 192.168.40.11 255.255.255.0

vrrp vrid 4 virtual-ip 192.168.40.254

#

interface Vlanif111

ip address 192.168.111.10 255.255.255.0

#

interface MEth0/0/1

#

interface Eth-Trunk1

port link-type trunk

port trunk allow-pass vlan 2 to 4094

#

interface GigabitEthernet0/0/1

port link-type access

port default vlan 111

#

interface GigabitEthernet0/0/2

port link-type trunk

port trunk allow-pass vlan 2 to 4094

#

interface GigabitEthernet0/0/3

eth-trunk 1

#

interface GigabitEthernet0/0/4

eth-trunk 1

#

interface GigabitEthernet0/0/5

eth-trunk 1

#

interface GigabitEthernet0/0/6

port link-type trunk

port trunk allow-pass vlan 2 to 4094

#

interface NULL0

#

interface LoopBack0

ip address 10.10.10.10 255.255.255.255

#

ospf 1 router-id 10.10.10.10

area 0.0.0.0

network 10.10.10.10 0.0.0.0

network 192.168.10.0 0.0.0.255

network 192.168.20.0 0.0.0.255

network 192.168.30.0 0.0.0.255

network 192.168.40.0 0.0.0.255

network 192.168.111.0 0.0.0.255

#

user-interface con 0

idle-timeout 0 0

user-interface vty 0 4

#

return

 

SW6配置命令：

#

sysname SW6

#

vlan batch 10 20 30 40 112

#

stp instance 1 root secondary

stp instance 2 root primary

#

cluster enable

ntdp enable

ndp enable

#

drop illegal-mac alarm

#

diffserv domain default

#

stp region-configuration

region-name huawei

revision-level 1

instance 1 vlan 10 20

instance 2 vlan 30 40

active region-configuration

#

drop-profile default

#

aaa

authentication-scheme default

authorization-scheme default

accounting-scheme default

domain default

domain default_admin

local-user admin password simple admin

local-user admin service-type http

#

interface Vlanif1

#

interface Vlanif10

ip address 192.168.10.12 255.255.255.0

vrrp vrid 1 virtual-ip 192.168.10.254

#

interface Vlanif20

ip address 192.168.20.12 255.255.255.0

vrrp vrid 2 virtual-ip 192.168.20.254

#

interface Vlanif30

ip address 192.168.30.12 255.255.255.0

vrrp vrid 3 virtual-ip 192.168.30.254

vrrp vrid 3 priority 120

vrrp vrid 3 track interface GigabitEthernet0/0/1

#

interface Vlanif40

ip address 192.168.40.12 255.255.255.0

vrrp vrid 4 virtual-ip 192.168.40.254

vrrp vrid 4 priority 120

vrrp vrid 4 track interface GigabitEthernet0/0/1

#

interface Vlanif112

ip address 192.168.112.10 255.255.255.0

#

interface MEth0/0/1

#

interface Eth-Trunk1

port link-type trunk

port trunk allow-pass vlan 2 to 4094

#

interface GigabitEthernet0/0/1

port link-type access

port default vlan 112

#

interface GigabitEthernet0/0/2

port link-type trunk

port trunk allow-pass vlan 2 to 4094

#

interface GigabitEthernet0/0/3

eth-trunk 1

#

interface GigabitEthernet0/0/4

eth-trunk 1

#

interface GigabitEthernet0/0/5

eth-trunk 1

#

interface GigabitEthernet0/0/6

port link-type trunk

port trunk allow-pass vlan 2 to 4094

#

interface NULL0

#

interface LoopBack0

ip address 11.11.11.11 255.255.255.255

#

ospf 1 router-id 11.11.11.11

area 0.0.0.0

network 11.11.11.11 0.0.0.0

network 192.168.10.0 0.0.0.255

network 192.168.20.0 0.0.0.255

network 192.168.30.0 0.0.0.255

network 192.168.40.0 0.0.0.255

network 192.168.112.0 0.0.0.255

#

user-interface con 0

idle-timeout 0 0

user-interface vty 0 4

#

return

总结：

此实验包含，mstp-vrrp-ospf-rip-双向重分发-单臂路由-地址转换-默认路由。

四交换机区域会产生环路，配置好VLAN划分后要进行MSTP生成树协议消除环路。

OSPF宣告4PC网段。

四服务器要开启FTP服务，路由器充当客户端验证各FTP服务器的服务是否成功