1+X网络系统建设与运维/中级实验

链路聚合：

LSW1：

[LSW1]int Eth-Trunk 1 #进入eth1口

[LSW1-Eth-Trunk1]mode lacp-static #进入lacp模式

[LSW1-Eth-Trunk1] trunkport g 0/0/4 0/0/5 #配置聚和端口

[LSW1-Eth-Trunk1] port link-type trunk #改成trunk接口类型

[LSW1-Eth-Trunk1] port trunk allow-pass vlan 10 20 #允许vlan10和20通过

[LSW1-Eth-Trunk1]dis this #查看接口配置

[LSW1]vlan batch 10 20 #创建vlan10 20

[LSW1]int g0/0/1 #进入1口

[LSW1-GigabitEthernet0/0/1]port link-type trunk #改成trunk接口类型

[LSW1-GigabitEthernet0/0/1]port trunk allow-pass vlan 10 20 #允许vlan10 20通过

[LSW1]int g0/0/2 #进入2口

[LSW1-GigabitEthernet0/0/2]port link-type trunk #改成trunk接口类型

[LSW1-GigabitEthernet0/0/2]port trunk allow-pass vlan 10 20 #允许vlan10 20通过

[LSW1]int g0/0/3 #进入3口

[LSW1-GigabitEthernet0/0/3]port link-type trunk #改成trunk接口类型

[LSW1-GigabitEthernet0/0/3]port trunk allow-pass vlan 10 20 #允许vlan10 20通过

[LSW1]dis port vlan #查看配置

LSW4：

[LSW4]int Eth-Trunk 1 #进入eth1口

[LSW4-Eth-Trunk1]mode lacp-static #进入lacp模式

[LSW4-Eth-Trunk1] trunkport g 0/0/1 0/0/2 #配置聚和端口

[LSW4-Eth-Trunk1] port link-type trunk #改成trunk接口类型

[LSW4-Eth-Trunk1] port trunk allow-pass vlan 10 20 #允许vlan10和20通过

[LSW4-Eth-Trunk1]dis this

Vlan划分和配置：

LSW2:

[LSW2]vlan batch 10 20 #创建vlan

[LSW2]int g0/0/1 #进入端口1

[LSW2-GigabitEthernet0/0/1]port link-type access #改成acc接口类型

[LSW2-GigabitEthernet0/0/1]port default vlan 10 #给端口1分配vlan10

[LSW2-GigabitEthernet0/0/1]int g0/0/2 #进入端口2

[LSW2-GigabitEthernet0/0/2]port link-type trunk #改成trunk接口类型

[LSW2-GigabitEthernet0/0/2]port trunk allow-pass vlan 10 20 #允许vlan10和20通过

[LSW2-GigabitEthernet0/0/2]int g0/0/3 #进入端口3

[LSW2-GigabitEthernet0/0/3]port link-type trunk #改成trunk接口类型

[LSW2-GigabitEthernet0/0/3]port trunk allow-pass vlan 10 20 #允许vlan10和20通过

[LSW2-GigabitEthernet0/0/3] stp edged-port enable #开启边缘端口

[LSW2-GigabitEthernet0/0/3]dis port vlan #查看vlan配置

LSW3:

[LSW3]vlan batch 10 20 #创建vlan

[LSW3]int g0/0/1 #进入端口1

[LSW3-GigabitEthernet0/0/1]port link-type access #改成acc接口类型

[LSW3-GigabitEthernet0/0/1]port default vlan 20 #给端口1分配vlan20

[LSW3-GigabitEthernet0/0/1]int g0/0/2 #进入端口2

[LSW3-GigabitEthernet0/0/2]port link-type trunk #改成trunk接口类型

[LSW3-GigabitEthernet0/0/2]port trunk allow-pass vlan 10 20 #允许vlan10和20通过

[LSW3-GigabitEthernet0/0/2]int g0/0/3 #进入端口3

[LSW3-GigabitEthernet0/0/3]port link-type trunk #改成trunk接口类型

[LSW3-GigabitEthernet0/0/3]port trunk allow-pass vlan 10 20 #允许vlan10和20通过

[LSW3-GigabitEthernet0/0/3]dis port vlan #查看vlan配置

[LSW3-GigabitEthernet0/0/3] stp edged-port enable #开启边缘端口

[LSW3-GigabitEthernet0/0/3]dis port vlan #查看vlan配置

创建虚拟接口：

AR2

[AR2]int g0/0/0.1 

[AR2-GigabitEthernet0/0/0.1]ip add 192.168.10.254 24

[AR2-GigabitEthernet0/0/0.1]dot1q termination vid 10

[AR2-GigabitEthernet0/0/0.1]arp broadcast enable

[AR2-GigabitEthernet0/0/0.1]int g0/0/0.2

[AR2-GigabitEthernet0/0/0.2]ip add 192.168.20.254 24

[AR2-GigabitEthernet0/0/0.2]dot1q termination vid 20

[AR2-GigabitEthernet0/0/0.2]arp broadcast enable

[AR2-GigabitEthernet0/0/0.2] int g0/0/1

[AR2-GigabitEthernet0/0/1]ip add 1.2.3.1 30

[AR2-GigabitEthernet0/0/1]int g0/0/2

[AR2-GigabitEthernet0/0/2]ip add 3.2.1.1 30

NAT转换

[AR2]acl 2000

[AR2-acl-basic-2000]rule permit source 192.168.10.0 0.0.0.255

[AR2-acl-basic-2000]int g0/0/1

[AR2-GigabitEthernet0/0/1]nat outbound 2000

[AR2-GigabitEthernet0/0/1]q

[AR2]ac 2001

[AR2-acl-basic-2001]rule permit source 192.168.20.0 0.0.0.255

[AR2-acl-basic-2001]int g0/0/2

[AR2-GigabitEthernet0/0/2]traffic-filter outbound acl 2001

[AR2-GigabitEthernet0/0/2]q

[AR2]ip route-static 0.0.0.0 0 3.2.1.2

AR1

[AR1-GigabitEthernet0/0/0]ip add 1.2.3.2 30

利用PC1 ping1.2.3.2

Ospf：

AR3

[AR3]int g0/0/0

[AR3-GigabitEthernet0/0/0]ip add 3.2.1.2 30

[AR3-GigabitEthernet0/0/0]int g0/0/1

[AR3-GigabitEthernet0/0/1]ip add 10.2.34.3 24

[AR3-GigabitEthernet0/0/1]q

[AR3]int loo0

[AR3-LoopBack0]ip add 1.1.1.1 32

[AR3-LoopBack0]q

[AR3]ospf 1 router-id 1.1.1.1

[AR3-ospf-1]a 0

[AR3-ospf-1-area-0.0.0.0]ne 1.1.1.1 0.0.0.0

[AR3-ospf-1-area-0.0.0.0]ne 10.2.34.3 0.0.0.0

[AR3]ip route-static 192.168.20.0 24 3.2.1.1

AR4

[AR4]int g0/0/0

[AR4-GigabitEthernet0/0/0]ip add 10.2.34.4 24

[AR4-GigabitEthernet0/0/0]int g0/0/1

[AR4-GigabitEthernet0/0/1]ip add 10.2.45.4 24

[AR4-GigabitEthernet0/0/1]int loo0

[AR4-LoopBack0]ip add 2.2.2.2 32

[AR4-LoopBack0]q

[AR4]ospf 1 router-id 2.2.2.2

[AR4-ospf-1]a 0

[AR4-ospf-1-area-0.0.0.0]ne 2.2.2.2 0.0.0.0

[AR4-ospf-1-area-0.0.0.0]ne 10.2.34.4 0.0.0.0

[AR4-ospf-1-area-0.0.0.0]ne 10.2.45.4 0.0.0.0

AR5

[AR5]int g0/0/0

[AR5-GigabitEthernet0/0/0]ip add 10.2.45.5 24

[AR5-GigabitEthernet0/0/0]int loo0

[AR5-LoopBack0]ip add 3.3.3.3 32

[AR5]ospf 1 router-id 3.3.3.3

[AR5-ospf-1]a 0

[AR5-ospf-1-area-0.0.0.0]ne 3.3.3.3 0.0.0.0

[AR5-ospf-1-area-0.0.0.0]ne 10.2.45.5 0.0.0.0

路由引入：

AR3

[AR3]ospf 1

[AR3-ospf-1]import-route static

利用PC2 ping3.3.3.3

Stp生成树：

LSW1

[LSW 1]stp mode rstp

[LSW 1]stp priority 4096

LSW2

[LSW 2]stp mode rstp

LSW3

[LSW 3]stp mode rstp

远程路由：

AR2

[AR2]aaa

[AR2-aaa]local-user huawei password cipher huawei@123

[AR2-aaa]local-user huawei privilege level 3

[AR2-aaa]local-user huawei service-type telnet

[AR2-aaa]q

[AR2]user-interface vty 0 4

[AR2-ui-vty0-4]authentication-mode aaa

AR3

<AR3>telnet 3.2.1.1

Username:huawei

Password:huawei@123

<AR2>dis cu