华为ensp模拟校园网/企业网实例（附完整设备配置命令和ensp项目）
文章简介：本文用华为ensp对企业网络进行了规划和模拟，也同样适用于校园、医院等场景，文章附完整设备配置命令。附件为ensp项目，如有需要可下载后联系作者，提供售后服务，可以根据定制化需求做修改。ensp项目下载地址：
华为ensp模拟企业网络规划与设计.zip_基于ensp的校园网网络拓扑结构-网络基础文档类资源-CSDN下载
作者简介：网络工程师，希望能认识更多的小伙伴一起交流，可私信或QQ号：1686231613
---------------------------------------------------------------------------------------------------------------------------------
目录
一、摘要
二、网络拓扑图
三、IP地址及VLAN规划
四、设备选型
五、综合布线
六、设备完整配置命令
七、网络测试
一、摘要
本文用到的技术：VLAN,各终端地址使用静态地址分配；核心设备之间使用链路聚合，MSTP,VRRP协议提高办公效率；网络设备之间使用 运行OSPF协议；防火墙使用NAT技术，保证信息安全；搭建无线网络保证无线网络全公司覆盖，提高办公效率。
二、网络拓扑图
三、IP地址及VLAN规划
| VLAN编号 |
网络地址 |
子网掩码 |
区域 |
| VLAN10 |
192.168.10.5 |
255.255.255.0 |
市场部 |
| VLAN20 |
192.168.20.5 |
255.255.255.0 |
财务部 |
| VLAN30 |
192.168.30.5 |
255.255.255.0 |
行政部 |
| VLAN40 |
192.168.40.5 |
255.255.255.0 |
研发部 |
| VLAN50 |
192.168.50.10 |
255.255.255.0 |
食堂 |
| VLAN90 |
192.168.90.5 |
255.255.255.0 |
人事部 |
| VLAN100 |
192.168.100.5 |
255.255.255.0 |
测试部 |
四、设备选型
1.核心层交换机
| 参数项 |
华为S9306 |
| 产品类型 |
路由交换机 POE交换机 |
| 应用层级 |
三层 |
| 背板带宽 |
6Tbps |
| 包转发率 |
1152Mpps |
| 端口结构 |
模块化 |
| 电源功率 |
1600W |
2.汇聚层交换机
| 参数项 |
华为S5720-36C-EI-28S-AC |
| 产品类型 |
千兆以太网交换机 |
| 应用层级 |
三层 |
| 背板带宽 |
598Gbps/5.98Tbps |
| 包转发率 |
222Mpps |
| 端口结构 |
非模块化 |
| 传输速率 |
10/100/1000 |
| 电源功率 |
47.9W |
3.接入层交换机
| 参数项 |
华为S5720-52p-SI-AC |
| 产品类型 |
千兆以太网交换机 |
| 应用层级 |
三层 |
| 包转发率 |
96Mpps |
| 端口结构 |
非模块化 |
| 端口数量 |
52 |
| 背板带宽 |
336Gdps/3.024Tdps |
| 传输速率（Mbps） |
10/100/1000 |
五、综合布线
六、设备完整配置命令
核心交换机：
#
sysname Huawei
#
vlan batch 10 20 30 40 50 60 70 80 90 100
#
stp instance 0 priority 0
stp instance 1 priority 0
stp instance 2 priority 0
stp instance 3 priority 4096
stp instance 4 priority 4096
stp instance 5 priority 4096
stp instance 8 priority 4096
#
cluster enable
ntdp enable
ndp enable
#
undo nap slave enable
#
drop illegal-mac alarm
#
diffserv domain default
#
stp region-configuration
region-name qian
instance 1 vlan 10
instance 2 vlan 20
instance 3 vlan 30
instance 4 vlan 40
instance 5 vlan 50
instance 8 vlan 80
active region-configuration
#
drop-profile default
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user qian password simple qian123
local-user qian privilege level 3
local-user qian service-type telnet
local-user admin password simple admin
local-user admin service-type http
#
interface Vlanif1
#
interface Vlanif10
ip address 192.168.10.2 255.255.255.0
vrrp vrid 1 virtual-ip 192.168.10.1
vrrp vrid 1 priority 120
#
interface Vlanif20
ip address 192.168.20.2 255.255.255.0
vrrp vrid 2 virtual-ip 192.168.20.1
vrrp vrid 2 priority 120
#
interface Vlanif30
ip address 192.168.30.2 255.255.255.0
vrrp vrid 3 virtual-ip 192.168.30.1
#
interface Vlanif40
ip address 192.168.40.2 255.255.255.0
vrrp vrid 4 virtual-ip 192.168.40.1
#
interface Vlanif50
ip address 192.168.50.2 255.255.255.0
vrrp vrid 5 virtual-ip 192.168.50.1
#
interface Vlanif70
ip address 192.168.70.1 255.255.255.0
#
interface Vlanif80
ip address 192.168.80.2 255.255.255.0
vrrp vrid 8 virtual-ip 192.168.80.1
#
interface Vlanif90
ip address 192.168.90.2 255.255.255.0
vrrp vrid 9 virtual-ip 192.168.90.1
vrrp vrid 9 priority 120
#
interface Vlanif100
ip address 192.168.100.2 255.255.255.0
vrrp vrid 10 virtual-ip 192.168.100.1
#
interface MEth0/0/1
#
interface Eth-Trunk1
port link-type trunk
port trunk allow-pass vlan 2 to 4094
mode lacp-static
#
interface GigabitEthernet0/0/1
eth-trunk 1
#
interface GigabitEthernet0/0/2
eth-trunk 1
#
interface GigabitEthernet0/0/3
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
interface GigabitEthernet0/0/4
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
interface GigabitEthernet0/0/5
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
interface GigabitEthernet0/0/6
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
interface GigabitEthernet0/0/7
port link-type access
port default vlan 70
#
interface GigabitEthernet0/0/8
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
interface GigabitEthernet0/0/9
#
interface GigabitEthernet0/0/10
#
interface GigabitEthernet0/0/11
#
interface GigabitEthernet0/0/12
#
interface GigabitEthernet0/0/13
#
interface GigabitEthernet0/0/14
#
interface GigabitEthernet0/0/15
#
interface GigabitEthernet0/0/16
#
interface GigabitEthernet0/0/17
#
interface GigabitEthernet0/0/18
#
interface GigabitEthernet0/0/19
#
interface GigabitEthernet0/0/20
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
interface GigabitEthernet0/0/21
#
interface GigabitEthernet0/0/22
#
interface GigabitEthernet0/0/23
#
interface GigabitEthernet0/0/24
#
interface NULL0
#
ospf 1
import-route direct
area 0.0.0.0
network 192.168.70.0 0.0.0.255
network 192.168.80.0 0.0.0.255
#
user-interface con 0
user-interface vty 0 4
authentication-mode aaa
#
port-group qian
group-member GigabitEthernet0/0/3
group-member GigabitEthernet0/0/4
group-member GigabitEthernet0/0/5
group-member GigabitEthernet0/0/6
#
return
汇聚层交换机：
#
sysname Huawei
#
vlan batch 10 20 30 90 150 200
#
cluster enable
ntdp enable
ndp enable
#
drop illegal-mac alarm
#
diffserv domain default
#
stp region-configuration
region-name qian
instance 1 vlan 10
instance 2 vlan 20
instance 3 vlan 30
instance 4 vlan 40
instance 5 vlan 50
instance 8 vlan 80
active region-configuration
#
drop-profile default
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password simple admin
local-user admin service-type http
#
interface Vlanif1
#
interface MEth0/0/1
#
interface Ethernet0/0/1
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
interface Ethernet0/0/2
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
interface Ethernet0/0/3
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
interface Ethernet0/0/4
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
interface Ethernet0/0/5
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
interface Ethernet0/0/6
#
interface Ethernet0/0/7
#
interface Ethernet0/0/8
#
interface Ethernet0/0/9
#
interface Ethernet0/0/10
#
interface Ethernet0/0/11
#
interface Ethernet0/0/12
#
interface Ethernet0/0/13
#
interface Ethernet0/0/14
#
interface Ethernet0/0/15
#
interface Ethernet0/0/16
#
interface Ethernet0/0/17
#
interface Ethernet0/0/18
#
interface Ethernet0/0/19
#
interface Ethernet0/0/20
#
interface Ethernet0/0/21
#
interface Ethernet0/0/22
#
interface GigabitEthernet0/0/1
#
interface GigabitEthernet0/0/2
#
interface NULL0
#
user-interface con 0
user-interface vty 0 4
#
port-group qian
group-member Ethernet0/0/1
group-member Ethernet0/0/2
group-member Ethernet0/0/3
group-member Ethernet0/0/4
group-member Ethernet0/0/5
#
return
接入层交换机：
#
sysname Huawei
#
vlan batch 10
#
cluster enable
ntdp enable
ndp enable
#
drop illegal-mac alarm
#
diffserv domain default
#
drop-profile default
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password simple admin
local-user admin service-type http
#
interface Vlanif1
#
interface MEth0/0/1
#
interface Ethernet0/0/1
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
interface Ethernet0/0/2
port link-type access
port default vlan 10
#
interface Ethernet0/0/3
port link-type access
port default vlan 10
#
interface Ethernet0/0/4
port link-type access
port default vlan 10
#
interface Ethernet0/0/5
port link-type access
port default vlan 10
#
interface Ethernet0/0/6
#
interface Ethernet0/0/7
#
interface Ethernet0/0/8
#
interface Ethernet0/0/9
#
interface Ethernet0/0/10
#
interface Ethernet0/0/11
#
interface Ethernet0/0/12
#
interface Ethernet0/0/13
#
interface Ethernet0/0/14
#
interface Ethernet0/0/15
#
interface Ethernet0/0/16
#
interface Ethernet0/0/17
#
interface Ethernet0/0/18
#
interface Ethernet0/0/19
#
interface Ethernet0/0/20
#
interface Ethernet0/0/21
#
interface Ethernet0/0/22
#
interface GigabitEthernet0/0/1
#
interface GigabitEthernet0/0/2
#
interface NULL0
#
user-interface con 0
user-interface vty 0 4
#
port-group qian
group-member Ethernet0/0/2
group-member Ethernet0/0/3
group-member Ethernet0/0/4
group-member Ethernet0/0/5
#
return
其余设备配置请联系作者获取七、网络测试
1.网络连通测试
2.链路备份功能测试
3.服务器ftp服务测试
4、http服务测试
5、无线上网连通测试
6.查看生成树
7.查看Vrrp及链路聚合
8.查看路由表
9.查看OSPF路由表
