目录
目录
一、拓扑图
二、core-sw1
三、core-sw2
四、sum-sw1
五、sum-sw2
六、FW1
七、DMZ-SW1
结语
一、拓扑图
二、core-sw1
sys
sysname core-sw1
vlan batch 10 20 30 40 50 60 100
vlan batch 200 210 220 230 240 250 stp region-configuration
region-name huawei
revision-level 1
instance 1 vlan 10 20 30
instance 2 vlan 40 50 60
instance 3 vlan 200 210 220
instance 4 vlan 230 240 250
instance 5 vlan 100
active region-configuration
qstp instance 1 root primary
stp instance 3 root primary
stp instance 5 root primarystp instance 2 root secondary
stp instance 4 root secondaryinter gi0/0/1
port link trunk
port trunk all vlan allinter gi0/0/2
port link trunk
port trunk all vlan allinterface Eth-Trunk 1p l tp t a v allinter gi0/0/3eth-trunk 1inter gi0/0/4eth-trunk 1interface Vlanif 10
ip address 172.16.0.252 23
vrrp vrid 10 virtual-ip 172.16.1.254
vrrp vrid 10 priority 120interface Vlanif 20
ip address 172.16.2.252 23
vrrp vrid 10 virtual-ip 172.16.3.254
vrrp vrid 10 priority 120interface Vlanif 30
ip address 172.16.4.252 23
vrrp vrid 10 virtual-ip 172.16.5.254
vrrp vrid 10 priority 120interface Vlanif 40
ip address 172.16.6.252 23
vrrp vrid 10 virtual-ip 172.16.7.254
vrrp vrid 10 priority 100interface Vlanif 50
ip address 172.16.8.252 23
vrrp vrid 10 virtual-ip 172.16.9.254
vrrp vrid 10 priority 100interface Vlanif 60
ip address 172.16.10.252 23
vrrp vrid 10 virtual-ip 172.16.11.254
vrrp vrid 10 priority 100dhcp enable
ip pool vlan10
network 172.16.0.0 mask 23
gateway-list 172.16.1.254
dns-list 192.168.150.1
excluded-ip-address 172.16.1.1 172.16.1.253
excluded-ip-address 172.16.0.252 172.16.0.253
qinterface Vlanif 10
dhcp select global
qip pool vlan20
network 172.16.2.0 mask 23
gateway-list 172.16.3.254
dns-list 192.168.150.1
excluded-ip-address 172.16.3.1 172.16.3.253
excluded-ip-address 172.16.2.252 172.16.2.253
qinterface Vlanif 20
dhcp select global
qip pool vlan30
network 172.16.4.0 mask 23
gateway-list 172.16.5.254
dns-list 192.168.150.1
excluded-ip-address 172.16.5.1 172.16.5.253
excluded-ip-address 172.16.4.252 172.16.4.253
qinterface Vlanif 30
dhcp select global
qip pool vlan40
network 172.16.6.0 mask 23
gateway-list 172.16.7.254
dns-list 192.168.150.1
excluded-ip-address 172.16.7.1 172.16.7.253
excluded-ip-address 172.16.6.252 172.16.6.253
qinterface Vlanif 40
dhcp select global
qip pool vlan50
network 172.16.8.0 mask 23
gateway-list 172.16.9.254
dns-list 192.168.150.1
excluded-ip-address 172.16.9.1 172.16.9.253
excluded-ip-address 172.16.8.252 172.16.8.253
qinterface Vlanif 50
dhcp select global
qip pool vlan60
network 172.16.10.0 mask 23
gateway-list 172.16.11.254
dns-list 192.168.150.1
excluded-ip-address 172.16.11.1 172.16.11.253
excluded-ip-address 172.16.10.252 172.16.10.253
qinterface Vlanif 60
dhcp select global
qinterface Vlanif 200
ip address 172.200.1.251 23
vrrp vrid 20 virtual-ip 172.200.1.254
vrrp vrid 20 priority 120interface Vlanif 210
ip address 172.210.3.251 23
vrrp vrid 20 virtual-ip 172.210.3.254
vrrp vrid 20 priority 120interface Vlanif 220
ip address 172.220.5.251 23
vrrp vrid 20 virtual-ip 172.220.5.254
vrrp vrid 20 priority 120interface Vlanif 230
ip address 172.230.7.251 23
vrrp vrid 20 virtual-ip 172.230.7.254
vrrp vrid 20 priority 100interface Vlanif 240
ip address 172.240.9.251 23
vrrp vrid 20 virtual-ip 172.240.9.254
vrrp vrid 20 priority 100interface Vlanif 250
ip address 172.250.11.251 23
vrrp vrid 20 virtual-ip 172.250.11.254
vrrp vrid 20 priority 100interface Vlanif 100
ip address 192.168.100.251 24
vrrp vrid 20 virtual-ip 192.168.100.254
vrrp vrid 20 priority 120vlan 70inter vlan 70ip address 10.1.70.1 30inter gi0/0/5p l acp de vlan 70inter loop 0
ip address 2.2.2.2 32router id 2.2.2.2
ospf 1
area 0
network 10.1.70.0 0.0.0.3
network 172.16.0.0 255.255.254.0
network 172.16.2.0 255.255.254.0
network 172.16.4.0 255.255.254.0
network 172.16.6.0 255.255.254.0
network 172.16.8.0 255.255.254.0
network 172.16.10.0 255.255.254.0
network 172.200.0.0 255.255.254.0
network 172.210.2.0 255.255.254.0
network 172.220.4.0 255.255.254.0
network 172.230.6.0 255.255.254.0
network 172.240.8.0 255.255.254.0
network 172.250.10.0 255.255.254.0
network 192.168.100.0 255.255.255.0
network 2.2.2.2 0.0.0.0
quit
三、core-sw2
sys
sysname core-sw2
vlan batch 10 20 30 40 50 60 100
vlan batch 200 210 220 230 240 250 stp region-configuration
region-name huawei
revision-level 1
instance 1 vlan 10 20 30
instance 2 vlan 40 50 60
instance 3 vlan 200 210 220
instance 4 vlan 230 240 250
instance 5 vlan 100
active region-configuration
qstp instance 1 root secondary
stp instance 3 root secondary
stp instance 5 root secondarystp instance 2 root primary
stp instance 4 root primaryinter gi0/0/1
port link trunk
port trunk all vlan allinter gi0/0/2
port link trunk
port trunk all vlan allinterface Eth-Trunk 1p l tp t a v allinter gi0/0/3eth-trunk 1inter gi0/0/4eth-trunk 1sys
sysname core-sw1
vlan batch 10 20 30 40 50 60 100
vlan batch 200 210 220 230 240 250 stp region-configuration
region-name huawei
revision-level 1
instance 1 vlan 10 20 30
instance 2 vlan 40 50 60
instance 3 vlan 200 210 220
instance 4 vlan 230 240 250
instance 5 vlan 100
active region-configuration
qstp instance 1 root primary
stp instance 3 root primary
stp instance 5 root primarystp instance 2 root secondary
stp instance 4 root secondaryinter gi0/0/1
port link trunk
port trunk all vlan allinter gi0/0/2
port link trunk
port trunk all vlan allinterface Eth-Trunk 1p l tp t a v allinter gi0/0/3eth-trunk 1inter gi0/0/4eth-trunk 1interface Vlanif 10
ip address 172.16.0.253 23
vrrp vrid 10 virtual-ip 172.16.1.254
vrrp vrid 10 priority 100interface Vlanif 20
ip address 172.16.2.253 23
vrrp vrid 10 virtual-ip 172.16.3.254
vrrp vrid 10 priority 100interface Vlanif 30
ip address 172.16.4.253 23
vrrp vrid 10 virtual-ip 172.16.5.254
vrrp vrid 10 priority 100interface Vlanif 40
ip address 172.16.6.253 23
vrrp vrid 10 virtual-ip 172.16.7.254
vrrp vrid 10 priority 120interface Vlanif 50
ip address 172.16.8.253 23
vrrp vrid 10 virtual-ip 172.16.9.254
vrrp vrid 10 priority 120interface Vlanif 60
ip address 172.16.10.253 23
vrrp vrid 10 virtual-ip 172.16.11.254
vrrp vrid 10 priority 120dhcp enable
ip pool vlan10
network 172.16.0.0 mask 23
gateway-list 172.16.1.254
dns-list 192.168.150.1
excluded-ip-address 172.16.0.1 172.16.0.254
qinterface Vlanif 10
dhcp select global
qip pool vlan20
network 172.16.2.0 mask 23
gateway-list 172.16.3.254
dns-list 192.168.150.1
excluded-ip-address 172.16.2.1 172.16.2.254
qinterface Vlanif 20
dhcp select global
qip pool vlan30
network 172.16.4.0 mask 23
gateway-list 172.16.5.254
dns-list 192.168.150.1
excluded-ip-address 172.16.4.1 172.16.4.254
qinterface Vlanif 30
dhcp select global
qip pool vlan40
network 172.16.6.0 mask 23
gateway-list 172.16.7.254
dns-list 192.168.150.1
excluded-ip-address 172.16.6.1 172.16.6.254
qinterface Vlanif 40
dhcp select global
qip pool vlan50
network 172.16.8.0 mask 23
gateway-list 172.16.9.254
dns-list 192.168.150.1
excluded-ip-address 172.16.8.1 172.16.8.254
qinterface Vlanif 50
dhcp select global
qip pool vlan60
network 172.16.10.0 mask 23
gateway-list 172.16.11.254
dns-list 192.168.150.1
excluded-ip-address 172.16.10.1 172.16.10.254
qinterface Vlanif 60
dhcp select global
qinterface Vlanif 200
ip address 172.200.1.252 23
vrrp vrid 20 virtual-ip 172.200.1.254
vrrp vrid 20 priority 100interface Vlanif 210
ip address 172.210.3.252 23
vrrp vrid 20 virtual-ip 172.210.3.254
vrrp vrid 20 priority 100interface Vlanif 220
ip address 172.220.5.252 23
vrrp vrid 20 virtual-ip 172.220.5.254
vrrp vrid 20 priority 100interface Vlanif 230
ip address 172.230.7.252 23
vrrp vrid 20 virtual-ip 172.230.7.254
vrrp vrid 20 priority 120interface Vlanif 240
ip address 172.240.9.252 23
vrrp vrid 20 virtual-ip 172.240.9.254
vrrp vrid 20 priority 120interface Vlanif 250
ip address 172.250.11.252 23
vrrp vrid 20 virtual-ip 172.250.11.254
vrrp vrid 20 priority 120interface Vlanif 100
ip address 192.168.100.252 24
vrrp vrid 20 virtual-ip 192.168.100.254
vrrp vrid 20 priority 100vlan 80inter vlan 80ip address 10.1.80.1 30inter gi0/0/5p l acp de vlan 80inter loop 0
ip address 3.3.3.3 32router id 3.3.3.3
ospf 1
silent-interface Vlanif 10
silent-interface Vlanif 20
silent-interface Vlanif 30
silent-interface Vlanif 40
silent-interface Vlanif 50
silent-interface Vlanif 60
silent-interface Vlanif 200
silent-interface Vlanif 210
silent-interface Vlanif 220
silent-interface Vlanif 230
silent-interface Vlanif 240
silent-interface Vlanif 250
silent-interface Vlanif 100
area 0
network 10.1.80.0 0.0.0.3
network 172.16.0.0 255.255.254.0
network 172.16.2.0 255.255.254.0
network 172.16.4.0 255.255.254.0
network 172.16.6.0 255.255.254.0
network 172.16.8.0 255.255.254.0
network 172.16.10.0 255.255.254.0
network 172.200.0.0 255.255.254.0
network 172.210.2.0 255.255.254.0
network 172.220.4.0 255.255.254.0
network 172.230.6.0 255.255.254.0
network 172.240.8.0 255.255.254.0
network 172.250.10.0 255.255.254.0
network 192.168.100.0 255.255.255.0
network 3.3.3.3 0.0.0.0
q
四、sum-sw1
sys
sysname sum-sw1vlan batch 10 20 30 40 50 60 100
vlan batch 200 210 220 230 240 250 port-group group-member GigabitEthernet 0/0/1 to GigabitEthernet 0/0/9
port link-type trunk
port trunk allow-pass vlan all
qstp region-configuration
region-name huawei
revision-level 1
instance 1 vlan 10 20 30
instance 2 vlan 40 50 60
instance 3 vlan 200 210 220
instance 4 vlan 230 240 250
instance 5 vlan 100
active region-configuration
q
五、sum-sw2
sys
sysname sum-sw2vlan batch 10 20 30 40 50 60 100
vlan batch 200 210 220 230 240 250
port-group group-member GigabitEthernet 0/0/1 to GigabitEthernet 0/0/9
port link-type trunk
port trunk allow-pass vlan all
qstp region-configuration
region-name huawei
revision-level 1
instance 1 vlan 10 20 30
instance 2 vlan 40 50 60
instance 3 vlan 200 210 220
instance 4 vlan 230 240 250
instance 5 vlan 100
active region-configuration
q
六、sw1-6
system-view
sysname SW1
vlan batch 10 100 200inter gi0/0/1port link-type trunkport trunk allow-pass vlan 10 100 200quitinter gi0/0/2port link-type trunkport trunk allow-pass vlan 10 100 200quitinter gi0/0/3port link-type accessport default vlan 10quitinter gi0/0/4
system-view
sysname SW2
vlan batch 20 100 210inter gi0/0/1port link-type trunkport trunk allow-pass vlan 20 100 210quitinter gi0/0/2port link-type trunkport trunk allow-pass vlan 20 100 210quitinter gi0/0/3port link-type accessport default vlan 20quit
system-view
sysname SW3
vlan batch 30 100 220inter gi0/0/1port link-type trunkport trunk allow-pass vlan 30 100 220quitinter gi0/0/2port link-type trunkport trunk allow-pass vlan 30 100 220quitinter gi0/0/3port link-type accessport default vlan 30quit
system-view
sysname SW4
vlan batch 40 100 230inter gi0/0/1port link-type trunkport trunk allow-pass vlan 40 100 230quitinter gi0/0/2port link-type trunkport trunk allow-pass vlan 40 100 230quitinter gi0/0/3port link-type accessport default vlan 40quit
system-view
sysname SW5
vlan batch 50 100 240inter gi0/0/1port link-type trunkport trunk allow-pass vlan 50 100 240quitinter gi0/0/2port link-type trunkport trunk allow-pass vlan 50 100 240quitinter gi0/0/3port link-type accessport default vlan 50quit
system-view
sysname SW6
vlan batch 60 100 250inter gi0/0/1port link-type trunkport trunk allow-pass vlan 60 100 250quitinter gi0/0/2port link-type trunkport trunk allow-pass vlan 60 100 250quitinter gi0/0/3port link-type accessport default vlan 60quit
六、FW1
admin
Huawei@123
Admin@123
sys
sysname FW1firewall zone untrustadd interface GigabitEthernet1/0/4firewall zone trustadd interface GigabitEthernet0/0/0add interface GigabitEthernet1/0/0add interface GigabitEthernet1/0/1add interface GigabitEthernet1/0/3firewall zone dmzadd interface GigabitEthernet1/0/2inter gi1/0/0
ip address 10.1.70.2 30inter gi1/0/1ip address 10.1.80.2 30inter loop 0
ip address 1.1.1.1 32router id 1.1.1.1
ospf 1
default-route-advertise always
area 0
network 10.1.70.0 0.0.0.3
network 10.1.80.0 0.0.0.3
七、DMZ-SW1
sys
sysname DMZ-SW1
vlan batch 150 160 170interface Vlanif150ip address 192.168.150.254 255.255.255.0interface Vlanif160ip address 192.168.160.254 255.255.255.0interface Vlanif170ip address 192.168.170.254 255.255.255.0inter gi0/0/2
p l a
p d v 150inter gi0/0/3
p l a
p d v 160inter gi0/0/4
p l a
p d v 170vlan 90
inter vlan 90ip address 10.1.90.1 30
inter gi0/0/1
p l a
p d v 90
qint LoopBack 0
ip add 4.4.4.4 32router id 4.4.4.4
ospf 1area 0.0.0.1network 192.168.150.0 0.0.0.255network 192.168.160.0 0.0.0.255network 192.168.170.0 0.0.0.255network 10.1.90.0 0.0.0.3network 4.4.4.4 0.0.0.0
quit
结语
具体操作访问
白帽小丑的个人空间-白帽小丑个人主页-哔哩哔哩视频