HCIP2三层架构实验

题目

实验步骤
交换部分：
eth-trunk vlan trunk stp svi vrrp dhcp 电脑获取地址
路由部分
IP地址配置 路由协议ospf 测试 acl nat

sw1 sw2上 eth-trunk

sw1 sw2 sw3 sw4上创建vlan2 之后还需在sw3 sw4 上接口划入vlan
sw1 sw2 上g0/0/1还需创建vlan3吧
trunk 这五根线 O(∩_∩)O哈哈~

stp
sw1 sw2 sw3 sw4上
sw3 sw3 边缘端口
[sw4-Ethernet0/0/4]stp edged-port enable
[sw4-Ethernet0/0/3]stp edged-port enable
[sw3-Ethernet0/0/4]stp edged-port enable
[sw3-Ethernet0/0/3]stp edged-port enable

sw1 sw2 上

svi sw1 sw2
[sw2]interface Vlan 1
[sw2-Vlanif1]ip address 172.16.1.253 24

[sw2]interface Vlan 2
[sw2-Vlanif2]ip address 172.16.2.253 24

[sw1]interface Vlan 2
[sw1-Vlanif2]ip address 172.16.2.254 24
[sw1]interface Vlan1
[sw1-Vlanif1]ip a
[sw1-Vlanif1]ip address 172.16.1.254 24
vrrp
[sw2-Vlanif2]vrrp vrid 1 virtual-ip 172.16.2.100
[sw2-Vlanif2]
[sw2-Vlanif2]vrrp vrid 1 priority 101
[sw2-Vlanif2]vrrp vrid 1 track interface GigabitEthernet 0/0/1
[sw2]interface Vlanif 1
[sw2-Vlanif1]vrrp vrid 1 virtual-ip 172.16.1.100


dhcp
ip pool vlan1
gateway-list 172.16.1.100
network 172.16.1.0 mask 255.255.255.0
dns-list 114.114.114.114 8.8.8.8

ip pool vlan2
gateway-list 172.6.2.100
dns-list 114.114.114.114 8.8.8.8

mei次啊啊啊cao 宿舍烂网 到路由就出幺蛾子，要关灯啦。。。。emm

路由部分


[Huawei]ip route-static 0.0.0.0 0 12.1.1.2
[Huawei-ospf-1]default-route-advertise always
[Huawei-ospf-1]q
ospf 邻居

acl
acl 2000
rule 5 permit source 172.16.0.0 0.0.255.255
nat g0/0/0 outbound 2000

同样把sw1或2关闭 也可以ping通1.1.1.1