基于ensp设计三层校园网络

拓扑图：

本实验使用动态主机配置协议（DHCP），生成树协议（STP），动态路由协议（OSPF），双机热备份协议（VRRP），网络地址转换协议（NAT），防火墙的配置，无线AC，AP 的配置，VLAN划分，IP地址划分协议技术完成校园网实验拓扑。

core-sw1：

<Huawei>sys
[Huawei]sys core-sw1（修改核心交换机名称）
[core-sw1]undo info en（关闭信息提示）
Info: Information center is disabled.
[core-sw1]vlan batch 5 7 10 20 30 40 50 60 100 to 101（创建vlan）
[sw1]int Vlan 10（进入vlan10）
[core-sw1-Vlanif10]ip ad 192.168.10.254 24（配置vlan10 IP地址）
[core-sw1-Vlanif10]vrrp vrid 10 virtual-ip 192.168.10.252（配置VRRP协议的虚拟IP地址）
[core-sw1-Vlanif10]vrrp vrid 10 priority 120（配置优先级，缺省值为100越大越优先）
[core-sw1-Vlanif10]vrrp vrid 10 track interface GigabitEthernet 0/0/1（创建监视端口实现快速主备切换）
[core-sw1-Vlanif10]vrrp vrid 10 track interface GigabitEthernet 0/0/2（创建监视端口实现快速主备切换）
 
[core-sw1-Vlanif10]q（退出）
[core-sw1]int Vlanif 20（进入vlan20）
[core-sw1-Vlanif20]ip address 192.168.20.254 24(配置vlan20 IP地址）
[core-sw1-Vlanif20]vrrp vrid 20 virtual-ip 192.168.20.252（配置虚拟IP）
[core-sw1-Vlanif20]vrrp vrid 20 priority 120（配置优先级）
[core-sw1-Vlanif20]vrrp vrid 20 track interface GigabitEthernet 0/0/1（创建监视端口实现快速主备切换）
[core-sw1-Vlanif20]vrrp vrid 20 track interface GigabitEthernet 0/0/2（创建监视端口实现快速主备切换）
 
[core-sw1-Vlanif20]q
[core-sw1]int Vlanif 30
[core-sw1-Vlanif30]ip ad 192.168.30.254 24
[core-sw1-Vlanif30]vrrp vrid 30 virtual-ip 192.168.30.252 
[core-sw1-Vlanif30]vrrp vrid 30 priority 120
[core-sw1-Vlanif30]vrrp vrid 30 track interface GigabitEthernet 0/0/1（创建监视端口实现快速主备切换）
[core-sw1-Vlanif30]vrrp vrid 30 track interface GigabitEthernet 0/0/2（创建监视端口实现快速主备切换）

[core-sw1-Vlanif30]q	
[core-sw1]int Vlanif 40
[core-sw1-Vlanif40]ip ad 192.168.40.254 24	
[core-sw1-Vlanif40]vrrp vrid 40 virtual-ip 192.168.40.252 
[core-sw1-Vlanif40]vrrp vrid 40 priority 120
[core-sw1-Vlanif40]vrrp vrid 40 track interface GigabitEthernet 0/0/1
[core-sw1-Vlanif40]vrrp vrid 40 track interface GigabitEthernet 0/0/2

[core-sw1-Vlanif40]q
[core-sw1]int Vlanif 50
[core-sw1-Vlanif50]ip ad 192.168.50.254 24	
[core-sw1-Vlanif50]vrrp vrid 50 virtual-ip 192.168.50.252
[core-sw1-Vlanif50]vrrp vrid 50 track interface GigabitEthernet 0/0/1
[core-sw1-Vlanif50]vrrp vrid 50 track interface GigabitEthernet 0/0/2

[core-sw1-Vlanif50]q
[core-sw1]int Vlanif 60
[core-sw1-Vlanif60]ip ad 192.168.60.254 24	
[core-sw1-Vlanif60]vrrp vrid 60 virtual-ip 192.168.60.252
[core-sw1-Vlanif60]vrrp vrid 60 track interface GigabitEthernet 0/0/1
[core-sw1-Vlanif60]vrrp vrid 60 track interface GigabitEthernet 0/0/2

[core-sw1-Vlanif60]q
[core-sw1]int Vlanif 5
[sw1-Vlanif5]ip ad 192.168.5.2 24

[core-sw1-Vlanif5]q
[core-sw1]int Vlanif 7
[core-sw1-Vlanif5]ip ad 192.168.7.2 24

[core-sw1]int GigabitEthernet 0/0/1	
[core-sw1-GigabitEthernet0/0/1]port link-type access （配置接口类型为接入模式）
[core-sw1-GigabitEthernet0/0/1]port default vlan 5（允许通过vlan5）
[core-sw1-GigabitEthernet0/0/1]int g	

[core-sw1-GigabitEthernet0/0/1]q
[core-sw1]int GigabitEthernet 0/0/2
[core-sw1-GigabitEthernet0/0/2]port link-type access 	
[core-sw1-GigabitEthernet0/0/2]port default vlan 7

[core-sw1-GigabitEthernet0/0/2]q
[core-sw1] User interface con0 is available
[core-sw1]int Eth-Trunk 1（创建链路聚合端口）
[core-sw1-Eth-Trunk1]port link-type trunk （改为通道模式）
[core-sw1-Eth-Trunk1]port trunk allow-pass vlan all （允许所有vlan通过）
[core-sw1-Eth-Trunk1]trunkport GigabitEthernet 0/0/3（将g0/0/3加入trunk口）
[core-sw1-Eth-Trunk1]trunkport GigabitEthernet 0/0/4（将g0/0/4加入trunk口）

[core-sw1-Eth-Trunk1]q
[core-sw1]int GigabitEthernet 0/0/5	
[core-sw1-GigabitEthernet0/0/5]port link-type trunk 
[core-sw1-GigabitEthernet0/0/5]port trunk allow-pass vlan all 
[core-sw1-GigabitEthernet0/0/5]int GigabitEthernet 0/0/6
[core-sw1-GigabitEthernet0/0/6]port link-type trunk 
[core-sw1-GigabitEthernet0/0/6]port trunk allow-pass vlan all 
[core-sw1-GigabitEthernet0/0/6]int GigabitEthernet 0/0/7
[core-sw1-GigabitEthernet0/0/7]port link-type trunk 
[core-sw1-GigabitEthernet0/0/7]port trunk allow-pass vlan all 
[core-sw1-GigabitEthernet0/0/7]int GigabitEthernet 0/0/8
[core-sw1-GigabitEthernet0/0/8]port link-type trunk 
[core-sw1-GigabitEthernet0/0/8]port trunk allow-pass vlan all 
[core-sw1-GigabitEthernet0/0/8]int GigabitEthernet 0/0/9
[core-sw1-GigabitEthernet0/0/9]port link-type trunk 
[core-sw1-GigabitEthernet0/0/9]port trunk allow-pass vlan all 
[core-sw1-GigabitEthernet0/0/9]int GigabitEthernet 0/0/10
[core-sw1-GigabitEthernet0/0/10]port link-type trunk 
[core-sw1-GigabitEthernet0/0/10]port trunk allow-pass vlan all 
[core-sw1-GigabitEthernet0/0/10]int GigabitEthernet 0/0/11
[core-sw1-GigabitEthernet0/0/11]port link-type trunk
[core-sw1-GigabitEthernet0/0/11]port trunk pvid vlan 101
[core-sw1-GigabitEthernet0/0/11]port trunk allow-pass vlan all
[core-sw1-GigabitEthernet0/0/11]interface GigabitEthernet0/0/12
[core-sw1-GigabitEthernet0/0/12]port link-type trunk
[core-sw1-GigabitEthernet0/0/12]port trunk allow-pass vlan all
[core-sw1-GigabitEthernet0/0/12]q


（配置生成树）

[core-sw1]stp enable 
[core-sw1]stp region-configuration进入生成树配置模式） 
[core-sw1-mst-region]region-name huawei（更名为huawei）
[core-sw1-mst-region]revision-level 5（配置生成树的权限）
[core-sw1-mst-region]instance 1 vlan 10 20 30 100（把vlan划分到实例中）
[core-sw1-mst-region]instance 2 vlan 40 50 60 
[core-sw1-mst-region]active region-configuration（激活实例）
[core-sw1]stp instance 1 root primary （配置实例的优先级的主次）
[core-sw1]stp instance 2 root secondary （配置实例的优先级的主次）


（使用ospf宣告路由）

[core-sw1]ospf 10	
[core-sw1-ospf-10]area 0
[core-sw1-ospf-10-area-0.0.0.0]netw	
[core-sw1-ospf-10-area-0.0.0.0]network 192.168.10.0 0.0.0.255
[core-sw1-ospf-10-area-0.0.0.0]network 192.168.20.0 0.0.0.255
[core-sw1-ospf-10-area-0.0.0.0]network 192.168.30.0 0.0.0.255
[core-sw1-ospf-10-area-0.0.0.0]network 192.168.40.0 0.0.0.255
[core-sw1-ospf-10-area-0.0.0.0]network 192.