Ensp作业---园区网

题目：

根据上图，可得需求为：

1.配置交换机上的VLAN及IP地址。

2.设置SW1为VLAN 2/3的主根桥，设置SW2为VLAN 20/30的主根桥，且两台交换机互为主备。

3.可以使用super vlan。

4.上层通过静态路由协议完成数据通信过程。

5.AR1作为企业出口路由器。

6.要求全网可达。

按条件建好拓扑

步骤一：在交换机上建立VLAN并分配接口到相应的VLAN与IP地址：

LSW1:

system-view

[Huawei] sysname LSW1

[LSW1] vlan batch 2 to 3

[LSW1] interface vlanif 2

[LSW1-Vlanif2] ip address 10.0.2.8 24

[LSW1-Vlanif2] quit

[LSW1] interface vlanif 3

[LSW1-Vlanif3] ip address 10.0.3.8 24

[LSW1-Vlanif3] quit

[LSW1] interface GigabitEthernet 0/0/1

[LSW1-GigabitEthernet0/0/1] port link-type access

[LSW1-GigabitEthernet0/0/1] port default vlan 2

[LSW1-GigabitEthernet0/0/1] quit

[LSW1] interface GigabitEthernet 0/0/2

[LSW1-GigabitEthernet0/0/2] port link-type access

[LSW1-GigabitEthernet0/0/2] port default vlan 3

[LSW1-GigabitEthernet0/0/2] quit

 LSW2:

system-view

[Huawei] sysname LSW2

[LSW2] vlan batch 20 to 30

[LSW2] interface vlanif 20

[LSW2-Vlanif20] ip address 10.0.20.8 24

[LSW2-Vlanif20] quit

[LSW2] interface vlanif 30

[LSW2-Vlanif30] ip address 10.0.30.8 24

[LSW2-Vlanif30] quit

[LSW2] interface GigabitEthernet 0/0/1

[LSW2-GigabitEthernet0/0/1] port link-type access

[LSW2-GigabitEthernet0/0/1] port default vlan 20

[LSW2-GigabitEthernet0/0/1] quit

[LSW2] interface GigabitEthernet 0/0/2

[LSW2-GigabitEthernet0/0/2] port link-type access

[LSW2-GigabitEthernet0/0/2] port default vlan 30

[LSW2-GigabitEthernet0/0/2] quit

分别为PC1 2 3 4分配IP地址

以PC1为例：

IP地址：10.0.2.2

子网掩码：255.255.255.0

默认网关：10.0.2.8

步骤二：配置STP

配置STP来确保交换机之间的冗余路径不会产生环路，并且配置主备关系

LSW1:

[LSW1] stp enable

[LSW1] stp mode stp

[LSW1] stp instance 0

[LSW1-stp-0] stp root primary

[LSW1-stp-0] stp priority 0

[LSW1-stp-0] quit

[LSW1] stp instance 1

[LSW1-stp-1] stp root primary

[LSW1-stp-1] stp priority 4096

[LSW1-stp-1] quit

 LWS2:

[LSW2] stp enable

[LSW2] stp mode stp

[LSW2] stp instance 0

[LSW2-stp-0] stp root secondary

[LSW2-stp-0] stp priority 8192

[LSW2-stp-0] quit

[LSW2] stp instance 2

[LSW2-stp-2] stp root primary

[LSW2-stp-2] stp priority 0

[LSW2-stp-2] quit

[LSW2] stp instance 3

[LSW2-stp-3] stp root primary

[LSW2-stp-3] stp priority 4096

[LSW2-stp-3] quit

在LSW1上配置两个STP实例，实例0对应VLAN 2，实例1对应VLAN 3。 stp root primary 命令将LSW1配置为主根桥， stp priority 设置优先级，较低的优先级意味着较高的选举优先级。

在LSW2上配置两个STP实例，实例0对应VLAN 20，实例2对应VLAN 30。 stp root secondary 命令将LSW2配置为VLAN 20的备份根桥，而 stp root primary 将LSW2配置为VLAN 30的主根桥。

步骤三：super vlan

在LSW1上为VLAN 2和VLAN 3定义Super VLAN，并在LSW2上为VLAN 20和VLAN 30定义Super VLAN。

LSW1：

[LSW1] vlan 100      

[LSW1-vlan100] super vlan

[LSW1-vlan100] subvlan 2 3 

[LSW1-vlan100] quit

[LSW1] interface vlanif 100

[LSW1-Vlanif100] ip address 10.0.2.8 24        

[LSW1-Vlanif100] quit

LSW2：

[LSW2] vlan 200            

[LSW2-vlan200] super vlan

[LSW2-vlan200] subvlan 20 30      

[LSW2-vlan200] quit

[LSW2] interface vlanif 200

[LSW2-Vlanif200] ip address 10.0.20.8 24          

[LSW2-Vlanif200] quit

步骤四：上层通过静态路由协议完成数据通信过程

AR1：

[AR1] ip route-static 10.0.2.0 24 10.0.0.1  # 配置到LSW1的Super VLAN 100的静态路由

[AR1] ip route-static 10.0.20.0 24 10.0.0.5 # 配置到LSW2的Super VLAN 200的静态路由

 LSW1：

[LSW1] ip route-static 0.0.0.0 0 10.0.0.2

LSW2:

[LSW2] ip route-static 0.0.0.0 0 10.0.0.6

步骤五：AR1为企业出口路由器

AR1：

[AR1]interface GigabitEthernet 0/0/0

[AR1-GigabitEthernet0/0/0]ip address 202.1.1.1 30

[AR1] ip route - static 0.0.0.0 0.0.0.0 202.1.1.2

在AR1上配置VLAN子接口以VLAN2为例

[AR1] interface GigabitEthernet 0/0/0.2

[AR1 - GigabitEthernet0/0/0.2] dot1q termination vid 2

[AR1 - GigabitEthernet0/0/0.2] ip address 10.0.2.1 24

[AR1 - GigabitEthernet0/0/0.2] arp broadcast enable

配置NAT：

[AR1] acl number 2000

[AR1 - acl - basic - 2000] rule permit source 10.0.0.0 0.0.255.255

[AR1] interface GigabitEthernet 0/0/1

[AR1 - GigabitEthernet0/0/1] nat outbound 2000

配置OSPF：

[AR1] ospf 1

[AR1 - ospf - 1] area 0

[AR1 - ospf - 1 - area - 0] network 10.0.2.0 0.0.0.255

[AR1 - ospf - 1 - area - 0] network 10.0.3.0 0.0.0.255

[AR1 - ospf - 1 - area - 0] network 10.0.20.0 0.0.0.255

[AR1 - ospf - 1 - area - 0] network 10.0.30.0 0.0.0.255