在ensp上配置真机实验 待更新~

 

 

生产区配置

办公区配置

服务区配置

路由设计

---

要求：用不上的接口进行关闭

生产区配置

1.创建VLAN

[A-1]vlan batch 100 110 120 255

[A-2]vlan batch 100 110 120 255

[D-1]vlan batch 100 110 120 255 1102 1104 1109

[D-2]vlan batch 100 110 120 255 1102 1105 1110

2.配置干道   IP

[A-1]int g 0/0/23
[A-1-GigabitEthernet0/0/23]port link-type trunk
[A-1-GigabitEthernet0/0/23]port trunk allow-pass vlan 100 110 120 255
[A-1-GigabitEthernet0/0/23]int g 0/0/24
[A-1-GigabitEthernet0/0/24]p l t
[A-1-GigabitEthernet0/0/24]p t a v 100 110 120 255  
[A-1]port-group group-member GigabitEthernet 0/0/1 to GigabitEthernet 0/0/22
[A-1-port-group]port link-type access
[A-1-port-group]port default vlan 100

[A-2]int g 0/0/23
[A-2-GigabitEthernet0/0/23]p l t
[A-2-GigabitEthernet0/0/23]p t a v 100 110 120 255
[A-2-GigabitEthernet0/0/23]int g 0/0/24
[A-2-GigabitEthernet0/0/24]p l t
[A-2-GigabitEthernet0/0/24]p t a v 100 110 120 255
[A-2]port-group group-member g 0/0/1 t g 0/0/22
[A-2-port-group]p l a
[A-2-port-group]p d v 110

[D-1]int Eth-Trunk 0
[D-1-Eth-Trunk0]trunkport g 0/0/23 to 0/0/24
[D-1-Eth-Trunk0]p l t
[D-1-Eth-Trunk0]p t a v 100 110 120 255 1102
[D-1]int g 0/0/21
[D-1-GigabitEthernet0/0/21]p l t
[D-1-GigabitEthernet0/0/21]p t a v 100 110 120 255
[D-1-GigabitEthernet0/0/21]int g 0/0/22
[D-1-GigabitEthernet0/0/22]p l t
[D-1-GigabitEthernet0/0/22]p t a v 100 110 120 255

[D-2]int Eth-Trunk 0
[D-2-Eth-Trunk0]trunkport g 0/0/23 to  0/0/24
[D-2-Eth-Trunk0]p l t
[D-2-Eth-Trunk0]p t a v 100 110 120 255 1102
[D-2-Eth-Trunk0]q
[D-2]int g 0/0/21
[D-2-GigabitEthernet0/0/21]p l t
[D-2-GigabitEthernet0/0/21]p t a v 100 110 120 255
[D-2-GigabitEthernet0/0/21]int g 0/0/22
[D-2-GigabitEthernet0/0/22]p l t
[D-2-GigabitEthernet0/0/22]p t a v 100 110 120 255

IP

[A-1]int vlanif 255
[A-1-Vlanif255]ip add 10.1.255.36 27
 

[A-2]int vlanif 255
[A-2-Vlanif255]ip add 10.1.255.37 27

[D-1]int v 100
[D-1-Vlanif100]ip add 10.1.100.1 24
[D-1-Vlanif100]int v 110
[D-1-Vlanif110]ip add 10.1.110.1 24
[D-1-Vlanif110]int v 120
[D-1-Vlanif120]ip add 10.1.120.1 24
[D-1-Vlanif120]int v 255
[D-1-Vlanif255]ip add 10.1.255.34 27
[D-1-Vlanif255]int v 1102
[D-1-Vlanif1102]ip add 10.1.0.5 30
[D-1-Vlanif1102]int v 1104
[D-1-Vlanif1104]ip add 10.1.0.14 30
[D-1-Vlanif1104]int v 1109
[D-1-Vlanif1109]ip add 10.1.0.34 30
 

[D-2]int v 100
[D-2-Vlanif100]ip add 10.1.100.2 24
[D-2-Vlanif100]int v 110
[D-2-Vlanif110]ip add 10.1.110.2 24
[D-2-Vlanif110]int v 120
[D-2-Vlanif120]ip add 10.1.120.2 24
[D-2-Vlanif120]int v 255
[D-2-Vlanif255]ip add 10.1.255.35 27
[D-2-Vlanif255]int v 1102
[D-2-Vlanif1102]ip add 10.1.0.6 30
[D-2-Vlanif1102]int v 1105
[D-2-Vlanif1105]ip add 10.1.0.18 30
[D-2-Vlanif1105]int v 1110
[D-2-Vlanif1110]ip add 10.1.0.38 30
 

3.MSTP生成树

[D-1]stp mode mstp
[D-1]stp enable
[D-1]stp region-configuration
[D-1-mst-region]region-name SC
[D-1-mst-region]instance 1 vlan 100 255 1102
[D-1-mst-region]instance 2 vlan 110 120
[D-1-mst-region]active region-configuration

[D-1]stp instance 1 root primary
[D-1]stp instance 2 root secondary
 

[D-2]stp mode mstp
[D-2]stp enable
[D-2]stp region-configuration 
[D-2-mst-region]region-name SC
[D-2-mst-region]instance 1 vlan 100 255 1102
[D-2-mst-region]instance 2 vlan 110 120
[D-2-mst-region]active region-c    
[D-2-mst-region]active region-configuration 

[D-2]stp instance 2 root primary
[D-2]stp instance 1 root secondary
 

[A-1]stp mode mstp
[A-1]stp enable
[A-1]stp region-configuration 
[A-1-mst-region]region-name SC
[A-1-mst-region]instance 1 vlan 100 255 1102
[A-1-mst-region]instance 2 vlan 110 120
[A-1-mst-region]active region-configuration

[A-2]stp mode mstp
[A-2]stp enable
[A-2]stp region-configuration 
[A-2-mst-region]region-name SC
[A-2-mst-region]instance 1 v 100 255 1102
[A-2-mst-region]instance 2 v 110 120
[A-2-mst-region]active region-configuration 

 

[A-2]stp bpdu-protection   
[A-2]port-g group-member g 0/0/1 t g 0/0/22
[A-2-port-group]stp edged-port enable

[A-1]stp bpdu-protection
[A-1]port-group group-member g 0/0/1 t g 0/0/22
[A-1-port-group]stp edged-port enable
 

4.VRRP 100 110 120

[D-1]int v 100
[D-1-Vlanif100]vrrp vrid 1 virtual-ip 10.1.100.254
[D-1-Vlanif100]vrrp vrid 1 priority 120
[D-1-Vlanif100]vrrp vrid 1 preempt-mode timer delay 20
[D-1-Vlanif100]vrrp vrid 1 track interface vlanif 1104 reduced 30
[D-1-Vlanif100]vrrp vrid 1 track interface vlanif 1109 reduced 30

[D-1]int v 110
[D-1-Vlanif110]vrrp vrid 1 virtual-ip 10.1.110.254
[D-1-Vlanif110]vrrp vrid 1 priority 120
[D-1-Vlanif110]vrrp vrid 1 preempt-mode timer delay 20
[D-1-Vlanif110]vrrp vrid 1 track interface vlanif 1104 reduced 30
[D-1-Vlanif110]vrrp vrid 1 track interface vlanif 1109 reduced 30

[D-1]int v 120
[D-1-Vlanif120]vrrp vrid 1 virtual-ip 10.1.120.254

[D-2]int v 100
[D-2-Vlanif100]vrrp vrid 1 virtual-ip 10.1.100.254
[D-2-Vlanif100]int v 110
[D-2-Vlanif110]vrrp vrid 1 virtual-ip 10.1.110.254
[D-2-Vlanif110]int v 120
[D-2-Vlanif120]vrrp vrid 1 virtual-ip 10.1.120.254
[D-2-Vlanif120]vrrp vrid 1 priority 120
[D-2-Vlanif120]vrrp vrid 1 preempt-mode timer delay 20
[D-2-Vlanif120]vrrp vrid 1 track interface vlanif 1105 reduced 30
[D-2-Vlanif120]vrrp vrid 1 track interface vlanif 1110 reduced 30

 办公区配置

1.创建VLAN

[D-5]vlan batch 10 15 21 22 23 255 1103 1107 1111

[D-6]vlan batch 10 15 21 22 23 255 1103 1108 1112

[A-3]vlan batch 10 15 21 22 23 255

[A-4]vlan batch 10 15 21 22 23 255

2.配置干道  IP

[A-3]int g 0/0/23
[A-3-GigabitEthernet0/0/23]p l t
[A-3-GigabitEthernet0/0/23]p t a v 10 15 21 22 23 255
[A-3-GigabitEthernet0/0/23]int g 0/0/24
[A-3-GigabitEthernet0/0/24]p l t
[A-3-GigabitEthernet0/0/24]p t a v 10 15 21 22 23 255
[A-3-GigabitEthernet0/0/24]port-group group-member g 0/0/1 t g 0/0/22
[A-3-port-group]p l a
[A-3-port-group]p d v 10

[A-4]int g 0/0/23
[A-4-GigabitEthernet0/0/23]p l t
[A-4-GigabitEthernet0/0/23]p t a v 10 15 21 22 23 255
[A-4-GigabitEthernet0/0/23]int g 0/0/24
[A-4-GigabitEthernet0/0/24]p l t
[A-4-GigabitEthernet0/0/24]p t a v 10 15 21 22 23 255
[A-4-GigabitEthernet0/0/24]q
[A-4]port-group group-member g 0/0/1 t g 0/0/22
[A-4-port-group]p l a
[A-4-port-group]p d v 15
 

[A-4]int v 255
[A-4-Vlanif255]ip add 10.1.255.68 27
 

[A-3]int v 255
[A-3-Vlanif255]ip add 10.1.255.67 27

[D-5]int Eth-Trunk 0
[D-5-Eth-Trunk0]trunkport g 0/0/23 t 0/0/24
[D-5-Eth-Trunk0]p l t
[D-5-Eth-Trunk0]p t a v 10 15 21 22 23 255 1103
[D-5-Eth-Trunk0]q
[D-5]int g 0/0/21
[D-5-GigabitEthernet0/0/21]p l t
[D-5-GigabitEthernet0/0/21]p t a v 10 15 21 22 23 255
[D-5-GigabitEthernet0/0/21]int g 0/0/22
[D-5-GigabitEthernet0/0/22]p l t
[D-5-GigabitEthernet0/0/22]p t a v 10 15 21 22 23 255

[D-6]int Eth-Trunk 0
[D-6-Eth-Trunk0]trunkport g 0/0/23 t 0/0/24
[D-6-Eth-Trunk0]p l t
[D-6-Eth-Trunk0]p t a v 10 15 21 22 23 255 1103
[D-6-Eth-Trunk0]q
[D-6]int g 0/0/21
[D-6-GigabitEthernet0/0/21]p l t
[D-6-GigabitEthernet0/0/21]p t a v 10 15 21 22 23 255
[D-6-GigabitEthernet0/0/21]int g 0/0/22
[D-6-GigabitEthernet0/0/22]p l t
[D-6-GigabitEthernet0/0/22]p t a v 10 15 21 22 23 255

[D-5]int v 10
[D-5-Vlanif10]ip add 10.1.10.1 24
[D-5-Vlanif10]int v 15
[D-5-Vlanif15]ip add 10.1.15.1 24
[D-5-Vlanif15]int v 21
[D-5-Vlanif21]ip add 10.1.21.1 24
[D-5-Vlanif21]int v 22 
[D-5-Vlanif22]ip add 10.1.22.1 24
[D-5-Vlanif22]int v 23
[D-5-Vlanif23]ip add 10.1.23.1 24
[D-5-Vlanif23]int v 255
[D-5-Vlanif255]ip add 10.1.255.65 27
[D-5]int v 1103
[D-5-Vlanif1103]ip add 10.1.0.9 30
[D-5-Vlanif1103]int v 1107
[D-5-Vlanif1107]ip add 10.1.0.26 30
[D-5-Vlanif1107]int v 1111
[D-5-Vlanif1111]ip add 10.1.0.42 30

[D-6]int v 10
[D-6-Vlanif10]ip add 10.1.10.2 24
[D-6-Vlanif10]int v 15
[D-6-Vlanif15]ip add 10.1.15.2 24
[D-6-Vlanif15]int v 21
[D-6-Vlanif21]ip add 10.1.21.2 24
[D-6-Vlanif21]int v 22
[D-6-Vlanif22]ip add 10.1.22.2 24
[D-6-Vlanif22]int v 23
[D-6-Vlanif23]ip add 10.1.23.2 24
[D-6-Vlanif23]int v 255
[D-6-Vlanif255]ip add 10.1.255.66 27
[D-6-Vlanif255]int v 1103
[D-6-Vlanif1103]ip add 10.1.0.10 30
[D-6-Vlanif1103]int v 1108
[D-6-Vlanif1108]ip add 10.1.0.30 30
[D-6-Vlanif1108]int v 1112
[D-6-Vlanif1112]ip add 10.1.0.46 30
 

3.MSTP生成树

[D-5]stp mode mstp
[D-5]stp enable
[D-5]stp region-configuration 
[D-5-mst-region]region-name BG
[D-5-mst-region]instance 1 vlan 10 15 1103
[D-5-mst-region]instance 2 vlan 21 22 23 255
[D-5-mst-region]active region-configuration 
[D-5]stp instance 1 root primary
[D-5]stp instance 2 root secondary
 

[D-6]stp m m
[D-6]stp enable
[D-6]stp region-configuration 
[D-6-mst-region]region-name BG
[D-6-mst-region]instance 1 v 10 15 1103
[D-6-mst-region]instance 2 v 21 22 23 255
[D-6-mst-region]active region-configuration 
[D-6]stp instance 1 root secondary
[D-6]stp instance 2 root primary
[D-6]

[A-3]stp m m
[A-3]stp enable
[A-3]stp region-c    
[A-3]stp region-configuration 
[A-3-mst-region]region-name BG
[A-3-mst-region]instance 1 vlan 10 15 1103
[A-3-mst-region]instance 2 vlan 21 22 23 255
[A-3-mst-region]active region-c    
[A-3-mst-region]active region-configuration 

[A-4]stp m m
[A-4]stp enable
[A-4]stp region-configuration 
[A-4-mst-region]region-name BG
[A-4-mst-region]instance 1 vlan 10 15 1103
[A-4-mst-region]instance 2 vlan 21 22 23 255 
[A-4-mst-region]active region-configuration 

 

[A-3]stp bpdu-protection 
[A-3]port-group group-member g 0/0/1 t g 0/0/22
[A-3-port-group]stp edged-port enable

[A-4]stp bpdu-protection 
[A-4]port-group group-member g 0/0/1 t g 0/0/22
[A-4-port-group]stp edged-port enable 
 

4.VRRP

[D-5]int vlanif 10
[D-5-Vlanif10]vrrp vrid 1 virtual-ip 10.1.10.254
[D-5-Vlanif10]vrrp vrid 1 priority 120
[D-5-Vlanif10]vrrp vrid 1 preempt-mode timer delay 20
[D-5-Vlanif10]vrrp vrid 1 track interface vlanif 1107 reduced 30
[D-5-Vlanif10]vrrp vrid 1 track interface vlanif 1111 reduced 30

[D-5-Vlanif10]int v 15
[D-5-Vlanif15]vrrp vrid 1 virtual-ip 10.1.15.254
[D-5-Vlanif15] vrrp vrid 1 priority 120
[D-5-Vlanif15] vrrp vrid 1 preempt-mode timer delay 20
[D-5-Vlanif15] vrrp vrid 1 track interface Vlanif1107 reduced 30
[D-5-Vlanif15] vrrp vrid 1 track interface Vlanif1111 reduced 30
[D-5-Vlanif15]
 

[D-5-Vlanif15]int v 21
[D-5-Vlanif21]vrrp vrid 1 virtual-ip 10.1.21.254
[D-5-Vlanif21]int v 22
[D-5-Vlanif22]vrrp vrid 1 virtual-ip 10.1.22.254
[D-5-Vlanif22]int v 23
[D-5-Vlanif23]vrrp vrid 1 virtual-ip 10.1.23.254
 

[D-6]int v 10
[D-6-Vlanif10]vrrp vrid 1 virtual-ip 10.1.10.254
[D-6-Vlanif10]int v 15
[D-6-Vlanif15]vrrp vrid 1 virtual-ip 10.1.15.254
[D-6-Vlanif15]int v 21
[D-6-Vlanif21]vrrp vrid 1 virtual-ip 10.1.21.254
[D-6-Vlanif21] vrrp vrid 1 priority 120
[D-6-Vlanif21] vrrp vrid 1 preempt-mode timer delay 20
[D-6-Vlanif21] vrrp vrid 1 track interface Vlanif1108 reduced 30
[D-6-Vlanif21] vrrp vrid 1 track interface Vlanif1112 reduced 30
[D-6-Vlanif21]int v 22
[D-6-Vlanif22]vrrp vrid 1 virtual-ip 10.1.22.254
[D-6-Vlanif22] vrrp vrid 1 priority 120
[D-6-Vlanif22] vrrp vrid 1 preempt-mode timer delay 20
[D-6-Vlanif22] vrrp vrid 1 track interface Vlanif1108 reduced 30
[D-6-Vlanif22] vrrp vrid 1 track interface Vlanif1112 reduced 30

[D-6-Vlanif22]int v 23
[D-6-Vlanif23]vrrp vrid 1 virtual-ip 10.1.23.254
[D-6-Vlanif23] vrrp vrid 1 priority 120
[D-6-Vlanif23] vrrp vrid 1 preempt-mode timer delay 20
[D-6-Vlanif23] vrrp vrid 1 track interface Vlanif1108 reduced 30
[D-6-Vlanif23] vrrp vrid 1 track interface Vlanif1112 reduced 30

服务区配置

1.创建VLAN

[D-3]vlan b 80 81 85 86 90 255

[D-4]vlan b 80 81 85 86 90 255

[C-1]vlan b 80 81 85 86 90 255 1101 1104 1105 1106
[C-1]vlan 1107 
[C-1]v 1108
 

[C-2]vlan b 80 81 85 86 90 255 1101 1109 1110 1111
[C-2]vlan 1112
[C-2]vlan 1113

2.配置干道  IP

[C-1]int Eth-Trunk 0
[C-1-Eth-Trunk0]trunkport g 0/0/23 t 0/0/24
[C-1-Eth-Trunk0]p l t
[C-1-Eth-Trunk0]p t a v 80 81 85 86 90 255 1101
[C-1]int g 0/0/21
[C-1-GigabitEthernet0/0/21]port link-type trunk
[C-1-GigabitEthernet0/0/21] port trunk allow-pass vlan 80 to 81 85 to 86 90 255
[C-1-GigabitEthernet0/0/21]int g 0/0/22
[C-1-GigabitEthernet0/0/22]port link-type trunk
[C-1-GigabitEthernet0/0/22] port trunk allow-pass vlan 80 to 81 85 to 86 90 255
 

[C-2]int Eth-Trunk 0
[C-2-Eth-Trunk0]trunkport g 0/0/23 t 0/0/24
[C-2-Eth-Trunk0]p l t
[C-2-Eth-Trunk0]p t a v 80 81 85 86 90 255 1101
[C-2]int g 0/0/21
[C-2-GigabitEthernet0/0/21]port link-type trunk
[C-2-GigabitEthernet0/0/21] port trunk allow-pass vlan 80 to 81 85 to 86 90 255
[C-2-GigabitEthernet0/0/21]int g 0/0/22
[C-2-GigabitEthernet0/0/22]port link-type trunk
[C-2-GigabitEthernet0/0/22] port trunk allow-pass vlan 80 to 81 85 to 86 90 255
 

[D-3]int e 0
[D-3-Eth-Trunk0]trunkport g 0/0/23 t 0/0/24
[D-3-Eth-Trunk0]p l t
[D-3-Eth-Trunk0]p t a v 80 81 85 86 90 255
[D-3]int g 0/0/21
[D-3-GigabitEthernet0/0/21]p l t
[D-3-GigabitEthernet0/0/21]p t a v 80 81 85 86 90 255
[D-3-GigabitEthernet0/0/21]int g 0/0/22
[D-3-GigabitEthernet0/0/22]port link-type trunk
[D-3-GigabitEthernet0/0/22] port trunk allow-pass vlan 80 to 81 85 to 86 90 255
 

[D-4]int e 0
[D-4-Eth-Trunk0]trunkport g 0/0/23 t 0/0/24
[D-4-Eth-Trunk0]p l t
[D-4-Eth-Trunk0]p t a v 80 81 85 86 90 255
[D-4]int g 0/0/21
[D-4-GigabitEthernet0/0/21]port link-type trunk
[D-4-GigabitEthernet0/0/21] port trunk allow-pass vlan 80 to 81 85 to 86 90 255
[D-4-GigabitEthernet0/0/21]int g 0/0/22
[D-4-GigabitEthernet0/0/22]port link-type trunk
[D-4-GigabitEthernet0/0/22] port trunk allow-pass vlan 80 to 81 85 to 86 90 255
 

[C-1]int v 255
[C-1-Vlanif255]ip add 10.1.255.1 27
[C-1-Vlanif255]int v 80
[C-1-Vlanif80]ip add 10.1.80.1 24
[C-1-Vlanif80]int v 81
[C-1-Vlanif81]ip add 10.1.81.1 24
[C-1-Vlanif81]int v 85
[C-1-Vlanif85]ip add 10.1.85.1 24
[C-1-Vlanif85]int v 86
[C-1-Vlanif86]ip add 10.1.86.1 24
[C-1-Vlanif86]int v 90
[C-1-Vlanif90]ip add 10.1.90.1 24
[C-1-Vlanif90]int v 1101
[C-1-Vlanif1101]ip add 10.1.0.1 30
[C-1-Vlanif1101]int v 1104
[C-1-Vlanif1104]ip add 10.1.0.13 30
[C-1-Vlanif1104]int v 1105
[C-1-Vlanif1105]ip add 10.1.0.17 30
[C-1-Vlanif1105]int v 1106
[C-1-Vlanif1106]ip add 10.1.0.22 30
[C-1-Vlanif1106]int v 1107
[C-1-Vlanif1107]ip add 10.1.0.25 30
[C-1-Vlanif1107]int v 1108
[C-1-Vlanif1108]ip add 10.1.0.29 30
 

[C-2]int v 255
[C-2-Vlanif255]ip add 10.1.255.2 27
[C-2]int v 80
[C-2-Vlanif80]ip add 10.1.80.2 24
[C-2-Vlanif80]int v 81
[C-2-Vlanif81]ip add 10.1.81.2 24
[C-2-Vlanif81]int v 85
[C-2-Vlanif85]ip add 10.1.85.2 24
[C-2-Vlanif85]int v 86
[C-2-Vlanif86]ip add 10.1.86.2 24
[C-2-Vlanif86]int v 90
[C-2-Vlanif90]ip add 10.1.90.2 24
[C-2-Vlanif90]int v 1101
[C-2-Vlanif1101]ip add 10.1.0.2 30
[C-2-Vlanif1101]int v 1109
[C-2-Vlanif1109]ip add 10.1.0.33 30
[C-2-Vlanif1109]int v 1110
[C-2-Vlanif1110]ip add 10.1.0.37 30
[C-2-Vlanif1110]int v 1111
[C-2-Vlanif1111]ip add 10.1.0.41 30
[C-2-Vlanif1111]int v 1112
[C-2-Vlanif1112]ip add 10.1.0.45 30
[C-2-Vlanif1112]int v 1113
[C-2-Vlanif1113]ip add 10.1.0.50 30
 

[D-3]int v 255
[D-3-Vlanif255]ip add 10.1.255.3 27

[D-4]int v 255
[D-4-Vlanif255]ip add 10.1.255.4 27
 

3.MSTP生成树

[C-1]stp m m
[C-1]stp enable   
[C-1]stp region-configuration 
[C-1-mst-region]region-name FWQ
[C-1-mst-region]instance 1 vlan 80 81 90 1101
[C-1-mst-region]instance 2 vlan 85 86 255
[C-1-mst-region]active region-configuration 
[C-1]stp instance 1 root primary
[C-1]stp instance 2 root secondary
 

[C-2]stp m m
[C-2]stp enable
[C-2]stp region-configuration
[C-2-mst-region]region-name FWQ
[C-2-mst-region]instance 1 vlan 80 81 90 1101  
[C-2-mst-region]instance 2 vlan 85 86 255
[C-2-mst-region]active region-configuration 
[C-2]stp instance 1 root secondary
[C-2]stp instance 2 root primary
 

[D-3]stp m m
[D-3]stp enable
[D-3]stp region-configuration 
[D-3-mst-region]region-name FWQ
[D-3-mst-region]instance 1 vlan 80 81 90 1101
[D-3-mst-region]instance 2 vlan 85 86 255
[D-3-mst-region]active region-configuration 
 

[D-4]stp m m
[D-4]stp enable
[D-4]stp region-configuration
[D-4-mst-region]region-name FWQ
[D-4-mst-region] instance 1 vlan 80 to 81 90 1101
[D-4-mst-region] instance 2 vlan 85 to 86 255
[D-4-mst-region] active region-configuration

 

 

 

 [D-3]stp bpdu-protection
[D-3]port-group group-member g 0/0/1 to GigabitEthernet 0/0/20
[D-3-port-group]stp edged-port enable

[D-4]stp bpdu-protection
[D-4]port-group group-member g 0/0/1 to GigabitEthernet 0/0/22 
[D-4-port-group]stp edged-port enable 

4.VRRP

[C-1]int v 80
[C-1-Vlanif80]vrrp vrid 1 virtual-ip 10.1.80.254
[C-1-Vlanif80]vrrp vrid 1 priority 120
[C-1-Vlanif80]vrrp vrid 1 preempt-mode timer delay 20
[C-1-Vlanif80]vrrp vrid 1 track interface vlanif 1106 reduced 30

[C-1-Vlanif80]int v 81
[C-1-Vlanif81] vrrp vrid 1 virtual-ip 10.1.81.254
[C-1-Vlanif81] vrrp vrid 1 priority 120
[C-1-Vlanif81] vrrp vrid 1 preempt-mode timer delay 20
[C-1-Vlanif81] vrrp vrid 1 track interface Vlanif1106 reduced 30

[C-1]int v 90
[C-1-Vlanif90] vrrp vrid 1 virtual-ip 10.1.90.254
[C-1-Vlanif90] vrrp vrid 1 priority 120
[C-1-Vlanif90] vrrp vrid 1 preempt-mode timer delay 20
[C-1-Vlanif90] vrrp vrid 1 track interface Vlanif1106 reduced 30

[C-1]int v 85
[C-1-Vlanif85]vrrp vrid 1 virtual-ip 10.1.85.254
[C-1]int v 86
[C-1-Vlanif86]vrrp vrid 1 virtual-ip 10.1.86.254
 

[C-2]int v 85
[C-2-Vlanif85] vrrp vrid 1 virtual-ip 10.1.85.254
[C-2-Vlanif85] vrrp vrid 1 priority 120
[C-2-Vlanif85] vrrp vrid 1 preempt-mode timer delay 20
[C-2-Vlanif85] vrrp vrid 1 track interface Vlanif1113 reduced 30
[C-2]int v 86
[C-2-Vlanif86] vrrp vrid 1 virtual-ip 10.1.86.254
[C-2-Vlanif86] vrrp vrid 1 priority 120
[C-2-Vlanif86] vrrp vrid 1 preempt-mode timer delay 20
[C-2-Vlanif86] vrrp vrid 1 track interface Vlanif1113 reduced 30
[C-2]int v 80
[C-2-Vlanif80]vrrp vrid 1 virtual-ip 10.1.80.254
[C-2]int v 81
[C-2-Vlanif81]vrrp vrid 1 virtual-ip 10.1.81.254
[C-2]int v 90
[C-2-Vlanif90]vrrp vrid 1 virtual-ip 10.1.90.254

 

 

 

 

路由设计

1.直连网段做通

[C-1]int g 0/0/1
[C-1-GigabitEthernet0/0/1]p l a
[C-1-GigabitEthernet0/0/1]p d v 1106
[C-1-GigabitEthernet0/0/1]int g 0/0/2
[C-1-GigabitEthernet0/0/2]p l t
[C-1-GigabitEthernet0/0/2]p t a v 1104
[C-1-GigabitEthernet0/0/2]int g 0/0/3
[C-1-GigabitEthernet0/0/3]p l t
[C-1-GigabitEthernet0/0/3]p t a v 1105
[C-1-GigabitEthernet0/0/3]int g 0/0/4
[C-1-GigabitEthernet0/0/4]p l t
[C-1-GigabitEthernet0/0/4]p t a v 1107
[C-1-GigabitEthernet0/0/4]int g 0/0/5
[C-1-GigabitEthernet0/0/5]p l t
[C-1-GigabitEthernet0/0/5]p t a v 1108

[C-2]int g 0/0/1
[C-2-GigabitEthernet0/0/1]p l a
[C-2-GigabitEthernet0/0/1]p d v 1113
[C-2-GigabitEthernet0/0/1]int g 0/0/2
[C-2-GigabitEthernet0/0/2]p l t
[C-2-GigabitEthernet0/0/2]p t a v 1109
[C-2-GigabitEthernet0/0/2]int g 0/0/3
[C-2-GigabitEthernet0/0/3]p l t
[C-2-GigabitEthernet0/0/3]p t a v 1110
[C-2-GigabitEthernet0/0/3]int g 0/0/4
[C-2-GigabitEthernet0/0/4]p l t
[C-2-GigabitEthernet0/0/4]p t a v 1111
[C-2-GigabitEthernet0/0/4]int g 0/0/5
[C-2-GigabitEthernet0/0/5]p l t
[C-2-GigabitEthernet0/0/5]p t a v 1112

2.关闭生成树

[C-1]port-group group-member g 0/0/2 t g 0/0/5
[C-1-port-group]undo stp enable
 

[C-2]port-group group-member g 0/0/2 t g 0/0/5
[C-2-port-group]undo stp enable 
 

[D-1]port-group group-member g 0/0/1 t g 0/0/2
[D-1-port-group]undo stp enable
 

[D-2]port-group group-member g 0/0/1 t g 0/0/2
[D-2-port-group]undo stp enable

[D-5]port-group group-member g 0/0/1 t g 0/0/2
[D-5-port-group]undo stp enable
 

[D-6]port-group group-member g 0/0/1 t g 0/0/2
[D-6-port-group]undo stp enable

[D-1]int g 0/0/1
[D-1-GigabitEthernet0/0/1]p l t
[D-1-GigabitEthernet0/0/1]p t a v 1104
[D-1-GigabitEthernet0/0/1]int g 0/0/2
[D-1-GigabitEthernet0/0/2]p l t
[D-1-GigabitEthernet0/0/2]p t a v 1109

[D-2]int g 0/0/1
[D-2-GigabitEthernet0/0/1]p l t
[D-2-GigabitEthernet0/0/1]p t a v 1105
[D-2-GigabitEthernet0/0/1]int g 0/0/2
[D-2-GigabitEthernet0/0/2]p l t
[D-2-GigabitEthernet0/0/2]p t a v 1110
 

[D-5]int g 0/0/1
[D-5-GigabitEthernet0/0/1]p l t
[D-5-GigabitEthernet0/0/1]p t a v 1107
[D-5-GigabitEthernet0/0/1]int g 0/0/2
[D-5-GigabitEthernet0/0/2]p l t 
[D-5-GigabitEthernet0/0/2]p t a v 1111
 

[D-6]int g 0/0/1
[D-6-GigabitEthernet0/0/1]p l t
[D-6-GigabitEthernet0/0/1]p t a v 1108
[D-6-GigabitEthernet0/0/1]int g 0/0/2
[D-6-GigabitEthernet0/0/2]p l t
[D-6-GigabitEthernet0/0/2]p t a v 1112

 

 3.防火墙

[F-1]int g 0/0/1
[F-1-GigabitEthernet0/0/1]ip add 10.1.0.21 30
[F-1-GigabitEthernet0/0/1]int g 0/0/2
[F-1-GigabitEthernet0/0/2]ip add 10.1.0.49 30

[F-1]firewall zone trust
[F-1-zone-trust]add interface GigabitEthernet 0/0/1
[F-1-zone-trust]add interface GigabitEthernet 0/0/2

[F-1]firewall packet-filter default permit interzone trust local direction outbound 

[F-1]firewall packet-filter default permit interzone local trust direction inbound 

4.ospf

[F-1]ospf 1 router-id 1.1.1.1
[F-1-ospf-1]a 0
[F-1-ospf-1-area-0.0.0.0]network 10.1.0.21 0.0.0.0
[F-1-ospf-1-area-0.0.0.0]network 10.1.0.49 0.0.0.0
 

[C-1]ospf 1 router-id 2.2.2.2
[C-1-ospf-1]a 0
[C-1-ospf-1-area-0.0.0.0]network 10.1.0.1 0.0.0.0
[C-1-ospf-1-area-0.0.0.0]network 10.1.255.1 0.0.0.0
[C-1-ospf-1-area-0.0.0.0]network 10.1.0.22 0.0.0.0

[C-1-ospf-1]a 1
[C-1-ospf-1-area-0.0.0.1]network 10.1.0.13 0.0.0.0
[C-1-ospf-1-area-0.0.0.1]network 10.1.0.17 0.0.0.0

[C-1-ospf-1]a 2
[C-1-ospf-1-area-0.0.0.2]network 10.1.0.25 0.0.0.0
[C-1-ospf-1-area-0.0.0.2]network 10.1.0.29 0.0.0.0
 

[C-1-ospf-1]a 3
[C-1-ospf-1-area-0.0.0.3]net 10.1.80.1 0.0.0.0
[C-1-ospf-1-area-0.0.0.3]net 10.1.81.1 0.0.0.0
[C-1-ospf-1-area-0.0.0.3]net 10.1.85.1 0.0.0.0
[C-1-ospf-1-area-0.0.0.3]net 10.1.86.1 0.0.0.0
[C-1-ospf-1-area-0.0.0.3]net 10.1.90.1 0.0.0.0
 

[C-2]ospf 1 router-id 3.3.3.3
[C-2-ospf-1]a 0
[C-2-ospf-1-area-0.0.0.0]net 10.1.255.2 0.0.0.0
[C-2-ospf-1-area-0.0.0.0]net 10.1.0.2 0.0.0.0
[C-2-ospf-1-area-0.0.0.0]net 10.1.0.50 0.0.0.0

[C-2-ospf-1]a 1
[C-2-ospf-1-area-0.0.0.1]net 10.1.0.33 0.0.0.0
[C-2-ospf-1-area-0.0.0.1]net 10.1.0.37 0.0.0.0

[C-2-ospf-1]a 2
[C-2-ospf-1-area-0.0.0.2]net 10.1.0.41 0.0.0.0
[C-2-ospf-1-area-0.0.0.2]net 10.1.0.45 0.0.0.0

[C-2-ospf-1]a 3
[C-2-ospf-1-area-0.0.0.3]net 10.1.80.2 0.0.0.0
[C-2-ospf-1-area-0.0.0.3]net 10.1.81.2 0.0.0.0
[C-2-ospf-1-area-0.0.0.3]net 10.1.85.2 0.0.0.0
[C-2-ospf-1-area-0.0.0.3]net 10.1.86.2 0.0.0.0
[C-2-ospf-1-area-0.0.0.3]net 10.1.90.2 0.0.0.0

[D-1]ospf 1 router-id 4.4.4.4
[D-1-ospf-1]a 1
[D-1-ospf-1-area-0.0.0.1]net 10.1.100.1 0.0.0.0
[D-1-ospf-1-area-0.0.0.1]net 10.1.110.1 0.0.0.0
[D-1-ospf-1-area-0.0.0.1]net 10.1.120.1 0.0.0.0
[D-1-ospf-1-area-0.0.0.1]net 10.1.255.34 0.0.0.0
[D-1-ospf-1-area-0.0.0.1]net 10.1.0.5 0.0.0.0
[D-1-ospf-1-area-0.0.0.1]net 10.1.0.14 0.0.0.0
[D-1-ospf-1-area-0.0.0.1]net 10.1.0.34 0.0.0.0

[D-2]ospf 1 router-id 5.5.5.5
[D-2-ospf-1]a 1
[D-2-ospf-1-area-0.0.0.1]net 10.1.100.2 0.0.0.0
[D-2-ospf-1-area-0.0.0.1]net 10.1.110.2 0.0.0.0
[D-2-ospf-1-area-0.0.0.1]net 10.1.120.2 0.0.0.0
[D-2-ospf-1-area-0.0.0.1]net 10.1.255.35 0.0.0.0
[D-2-ospf-1-area-0.0.0.1]net 10.1.0.6 0.0.0.0
[D-2-ospf-1-area-0.0.0.1]net 10.1.0.18 0.0.0.0
[D-2-ospf-1-area-0.0.0.1]net 10.1.0.38 0.0.0.0

[D-5]ospf 1 router-id 6.6.6.6
[D-5-ospf-1]a 2
[D-5-ospf-1-area-0.0.0.2]net 10.1.10.1 0.0.0.0
[D-5-ospf-1-area-0.0.0.2]net 10.1.15.1 0.0.0.0
[D-5-ospf-1-area-0.0.0.2]net 10.1.21.1 0.0.0.0
[D-5-ospf-1-area-0.0.0.2]net 10.1.22.1 0.0.0.0
[D-5-ospf-1-area-0.0.0.2]net 10.1.23.1 0.0.0.0
[D-5-ospf-1-area-0.0.0.2]net 10.1.255.65 0.0.0.0
[D-5-ospf-1-area-0.0.0.2]net 10.1.0.9 0.0.0.0
[D-5-ospf-1-area-0.0.0.2]net 10.1.0.26 0.0.0.0
[D-5-ospf-1-area-0.0.0.2]net 10.1.0.42 0.0.0.0

[D-6]ospf 1 router-id 7.7.7.7
[D-6-ospf-1]a 2
[D-6-ospf-1-area-0.0.0.2]net 10.1.10.2 0.0.0.0
[D-6-ospf-1-area-0.0.0.2]net 10.1.15.2 0.0.0.0
[D-6-ospf-1-area-0.0.0.2]net 10.1.21.2 0.0.0.0
[D-6-ospf-1-area-0.0.0.2]net 10.1.22.2 0.0.0.0
[D-6-ospf-1-area-0.0.0.2]net 10.1.23.2 0.0.0.0
[D-6-ospf-1-area-0.0.0.2]net 10.1.255.66 0.0.0.0
[D-6-ospf-1-area-0.0.0.2]net 10.1.0.10 0.0.0.0
[D-6-ospf-1-area-0.0.0.2]net 10.1.0.30 0.0.0.0
[D-6-ospf-1-area-0.0.0.2]net 10.1.0.46 0.0.0.0

 ospf的优化

area 1 2 作为total stub区域

[D-1]ospf 1
[D-1-ospf-1]a 1
[D-1-ospf-1-area-0.0.0.1]stub

[D-2]ospf 1
[D-2-ospf-1]a 1
[D-2-ospf-1-area-0.0.0.1]stub

[C-1]ospf 1 
[C-1-ospf-1]a 1
[C-1-ospf-1-area-0.0.0.1]stub
[C-1-ospf-1-area-0.0.0.1]stub no-summary

[C-2]ospf 1
[C-2-ospf-1]a 1
[C-2-ospf-1-area-0.0.0.1]stub
[C-2-ospf-1-area-0.0.0.1]stub no-summary

[D-5]ospf 1 
[D-5-ospf-1]a 2
[D-5-ospf-1-area-0.0.0.2]stub

[D-6]ospf 1
[D-6-ospf-1]a 2
[D-6-ospf-1-area-0.0.0.2]stub
 

[C-1]ospf 1
[C-1-ospf-1]a 2
[C-1-ospf-1-area-0.0.0.2]stub
[C-1-ospf-1-area-0.0.0.2]stub no-summary 

[C-2-ospf-1]a 2
[C-2-ospf-1-area-0.0.0.2]stub
[C-2-ospf-1-area-0.0.0.2]stub no-summary 
 

 area 0区域认证   F1 C1 C2相同配置

[F-1]ospf 1 
[F-1-ospf-1]a 0
[F-1-ospf-1-area-0.0.0.0]authentication-mode md5 1 huawei

网关禁默接口

[D-1]ospf 1
[D-1-ospf-1]silent-interface  vlanif 100
[D-1-ospf-1]silent-interface vlanif 110
[D-1-ospf-1]silent-interface vlanif 120
[D-1-ospf-1]silent-interface vlanif 255
[D-1-ospf-1]silent-interface vlanif 1102

 [D-2]ospf 1
[D-2-ospf-1]silent-interface Vlanif100
[D-2-ospf-1] silent-interface Vlanif110
[D-2-ospf-1] silent-interface Vlanif120
[D-2-ospf-1] silent-interface Vlanif255
[D-2-ospf-1] silent-interface Vlanif1102

 [D-5]ospf 1
[D-5-ospf-1]silent-interface vlanif 10
[D-5-ospf-1]silent-interface vlanif 15
[D-5-ospf-1]silent-interface vlanif 21
[D-5-ospf-1]silent-interface vlanif 22
[D-5-ospf-1]silent-interface vlanif 23
[D-5-ospf-1]silent-interface vlanif 255
[D-5-ospf-1]silent-interface vlanif 1103

[D-6]ospf 1
[D-6-ospf-1]silent-interface Vlanif10
[D-6-ospf-1] silent-interface Vlanif15
[D-6-ospf-1] silent-interface Vlanif21
[D-6-ospf-1] silent-interface Vlanif22
[D-6-ospf-1] silent-interface Vlanif23
[D-6-ospf-1] silent-interface Vlanif255
[D-6-ospf-1] silent-interface Vlanif1103

 [C-1]ospf 1
[C-1-ospf-1]silent-interface vlanif 255
[C-1-ospf-1]silent-interface vlanif 1101
[C-1-ospf-1]silent-interface vlanif 80
[C-1-ospf-1]silent-interface vlanif 81
[C-1-ospf-1]silent-interface vlanif 85
[C-1-ospf-1]silent-interface vlanif 90
[C-1-ospf-1]silent-interface vlanif 86

[C-2]ospf 1
[C-2-ospf-1]silent-interface Vlanif255
[C-2-ospf-1] silent-interface Vlanif1101
[C-2-ospf-1] silent-interface Vlanif80
[C-2-ospf-1] silent-interface Vlanif81
[C-2-ospf-1] silent-interface Vlanif85
[C-2-ospf-1] silent-interface Vlanif90
[C-2-ospf-1] silent-interface Vlanif86

ospf 的网络类型p2p

[C-1]int v 1101
[C-1-Vlanif1101]ospf network-type p2p

[C-2]int v 1101
[C-2-Vlanif1101]ospf network-type p2p

[C-1-Vlanif1101]ospf timer hello 1

[C-2-Vlanif1101]ospf timer hello 1

路径

[C-1]ospf 1
[C-1-ospf-1]a 2 
[C-1-ospf-1-area-0.0.0.2]def    
[C-1-ospf-1-area-0.0.0.2]default-cost  5

 

 [C-2]ospf 1
[C-2-ospf-1]a 1
[C-2-ospf-1-area-0.0.0.1]def    
[C-2-ospf-1-area-0.0.0.1]default-cost 5
[C-2-ospf-1-area-0.0.0.1]