基于华为Ensp的校园/企业网的网络设计

已于 2024-07-03 22:35:50 修改
阅读量1.8k 收藏 41
点赞数 13
分类专栏： Ensp网络设计 文章标签： 华为 网络 毕业设计 课程设计 网络安全 安全架构 计算机网络
于 2024-05-07 14:04:04 首次发布
版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
本文链接：https://blog.csdn.net/m0_73990724/article/details/130751601
版权

 设计图(文章结尾附上细节图)

引言

这是我的设计图，（软件还是Ensp，只不过是换了图标），该图主攻适用于设计基于IPSec  VPN技术的小伙伴，其运用到的技术还有VLAN划分、三层架构、MSTP+VRRP、链路聚合、DHCP、WLAN(无线局域网)、OSPF、双击热备、IPSec  VPN、单臂路由、DHCP技术等一系列，对毕设课题进行参考，场景适用于毕业设计、校园网络规划和企业网络规划。由什么问题可以在平台私信博主，看到会回，有什么不对的地方见谅，本人也是刚接触不久。上配置！

该网络配置全过程

总部/总校区部分

1、接入SW1

<Huawei>system-view
[Huawei]sysname S1
[S1]undo info-center enable 
[S1]vlan batch 10 120
[S1]interface Ethernet0/0/1
[S1-Ethernet0/0/1] port link-type access
[S1-Ethernet0/0/1] port default vlan 10
[S1-Ethernet0/0/1]interface Ethernet0/0/2
[S1-Ethernet0/0/2] port link-type trunk
[S1-Ethernet0/0/2] port trunk pvid vlan 120
[S1-Ethernet0/0/2] port trunk allow-pass vlan 10 120
[S1-Ethernet0/0/2]interface Ethernet0/0/3
[S1-Ethernet0/0/3] port link-type access
[S1-Ethernet0/0/3] port default vlan 10
[S1-GigabitEthernet0/0/1] port link-type trunk
[S1-GigabitEthernet0/0/1] port trunk allow-pass vlan 10 120
[S1-GigabitEthernet0/0/1]interface GigabitEthernet0/0/2
[S1-GigabitEthernet0/0/2] port link-type trunk
[S1-GigabitEthernet0/0/2] port trunk allow-pass vlan 10 120

2、接入SW2

<Huawei>system-view
[Huawei]sysname S2
[S2]undo info-center enable
[S2]undo info-center enable 
[S2]vlan batch 20 120
[S2]interface Ethernet0/0/1
[S2-Ethernet0/0/1] port link-type access
[S2-Ethernet0/0/1] port default vlan 20
[S2-Ethernet0/0/1]interface Ethernet0/0/2
[S2-Ethernet0/0/2] port link-type trunk
[S2-Ethernet0/0/2] port trunk pvid vlan 120
[S2-Ethernet0/0/2] port trunk allow-pass vlan 20 120
[S2-Ethernet0/0/2]interface Ethernet0/0/3
[S2-Ethernet0/0/3] port link-type access
[S2-Ethernet0/0/3] port default vlan 20
[S2-Ethernet0/0/3]interface GigabitEthernet0/0/1
[S2-GigabitEthernet0/0/1] port link-type trunk
[S2-GigabitEthernet0/0/1] port trunk allow-pass vlan 20 120
[S2-GigabitEthernet0/0/1]interface GigabitEthernet0/0/2
[S2-GigabitEthernet0/0/2] port link-type trunk
[S2-GigabitEthernet0/0/2] port trunk allow-pass vlan 20 120

3、接入SW3

<Huawei>system-view 
[Huawei]sysname S3	
[S3]undo info-center enable 
Info: Information center is disabled.
[S3]vlan batch 30 120
[S3]interface Ethernet0/0/1
[S3-Ethernet0/0/1] port link-type access
[S3-Ethernet0/0/1] port default vlan 30
[S3-Ethernet0/0/1]interface Ethernet0/0/2
[S3-Ethernet0/0/2] port link-type trunk
[S3-Ethernet0/0/2] port trunk pvid vlan 120
[S3-Ethernet0/0/2] port trunk allow-pass vlan 30 120
[S3-Ethernet0/0/2]interface Ethernet0/0/3
[S3-Ethernet0/0/3] port link-type access
[S3-Ethernet0/0/3] port default vlan 30
[S3-Ethernet0/0/3]interface GigabitEthernet0/0/1
[S3-GigabitEthernet0/0/1] port link-type trunk
[S3-GigabitEthernet0/0/1] port trunk allow-pass vlan 30 120
[S3-GigabitEthernet0/0/1]interface GigabitEthernet0/0/2
[S3-GigabitEthernet0/0/2] port link-type trunk
[S3-GigabitEthernet0/0/2] port trunk allow-pass vlan 30 120

4、接入SW4 

<Huawei>system-view 
[Huawei]sysname S4	
[S4]undo info-center enable 
[s4]vlan batch 40
[s4]interface Ethernet0/0/1
[s4-Ethernet0/0/1] port link-type access
[s4-Ethernet0/0/1] port default vlan 40
[s4-Ethernet0/0/1]interface Ethernet0/0/2
[s4-Ethernet0/0/3] port link-type access
[s4-Ethernet0/0/3] port default vlan 40
[s4-Ethernet0/0/3]interface GigabitEthernet0/0/1
[s4-GigabitEthernet0/0/1] port link-type trunk
[s4-GigabitEthernet0/0/1] port trunk allow-pass vlan 40
[s4-GigabitEthernet0/0/1]interface GigabitEthernet0/0/2
[s4-GigabitEthernet0/0/2] port link-type trunk
[s4-GigabitEthernet0/0/2] port trunk allow-pass vlan 40

5、接入SW5

<Huawei>system-view 
[Huawei]sysname S5	
[S5]undo info-center enable 
[S5]vlan ba 50
[S5]interface Ethernet0/0/1
[S5-Ethernet0/0/1] port link-type access
[S5-Ethernet0/0/1] port default vlan 50
[S5-Ethernet0/0/1]interface Ethernet0/0/3
[S5-Ethernet0/0/3] port link-type access
[S5-Ethernet0/0/3] port default vlan 50
[S5-Ethernet0/0/3]interface GigabitEthernet0/0/1
[S5-GigabitEthernet0/0/1] port link-type trunk
[S5-GigabitEthernet0/0/1] port trunk allow-pass vlan 50
[S5-GigabitEthernet0/0/1]interface GigabitEthernet0/0/2
[S5-GigabitEthernet0/0/2] port link-type trunk
[S5-GigabitEthernet0/0/2] port trunk allow-pass vlan 50

6、接入SW6

<Huawei>system-view 
[Huawei]sysname S6	
[S6]undo info-center enable 
[S6]vlan batch 60
[S6]interface Ethernet0/0/1
[S6-Ethernet0/0/1] port link-type access
[S6-Ethernet0/0/1] port default vlan 60
[S6-Ethernet0/0/1]interface Ethernet0/0/3
[S6-Ethernet0/0/3] port link-type access
[S6-Ethernet0/0/3] port default vlan 60
[S6-Ethernet0/0/3]interface GigabitEthernet0/0/1
[S6-GigabitEthernet0/0/1] port link-type trunk
[S6-GigabitEthernet0/0/1] port trunk allow-pass vlan 60
[S6-GigabitEthernet0/0/1]interface GigabitEthernet0/0/2
[S6-GigabitEthernet0/0/2] port link-type trunk
[S6-GigabitEthernet0/0/2] port trunk allow-pass vlan 60

7、接入SW7

<Huawei>system-view 
[Huawei]sysname S7	
[S7]undo info-center enable 
[S7]vlan batch 70 120
[S7]interface Ethernet0/0/1
[S7-Ethernet0/0/1] port link-type access
[S7-Ethernet0/0/1] port default vlan 70
[S7-Ethernet0/0/1]interface Ethernet0/0/2
[S7-Ethernet0/0/2] port link-type trunk
[S7-Ethernet0/0/2] port trunk pvid vlan 120
[S7-Ethernet0/0/2] port trunk allow-pass vlan 70 120
[S7-Ethernet0/0/2]interface Ethernet0/0/3
[S7-Ethernet0/0/3] port link-type access
[S7-Ethernet0/0/3] port default vlan 70
[S7-Ethernet0/0/3]interface GigabitEthernet0/0/1
[S7-GigabitEthernet0/0/1] port link-type trunk
[S7-GigabitEthernet0/0/1] port trunk allow-pass vlan 70 120
[S7-GigabitEthernet0/0/1]interface GigabitEthernet0/0/2
[S7-GigabitEthernet0/0/2] port link-type trunk
[S7-GigabitEthernet0/0/2] port trunk allow-pass vlan 70 120

8、接入SW8

<Huawei>system-view 
[Huawei]sysname S8	
[S8]undo info-center enable 
[S8]vlan batch 80 120
[S8]interface Ethernet0/0/1
[S8-Ethernet0/0/1] port link-type access
[S8-Ethernet0/0/1] port default vlan 80
[S8-Ethernet0/0/1]interface Ethernet0/0/2
[S8-Ethernet0/0/2] port link-type trunk
[S8-Ethernet0/0/2] port trunk pvid vlan 120
[S8-Ethernet0/0/2] port trunk allow-pass vlan 80 120
[S8-Ethernet0/0/2]interface Ethernet0/0/3
[S8-Ethernet0/0/3] port link-type access
[S8-Ethernet0/0/3] port default vlan 80
[S8-Ethernet0/0/3]interface GigabitEthernet0/0/1
[S8-GigabitEthernet0/0/1] port link-type trunk
[S8-GigabitEthernet0/0/1] port trunk allow-pass vlan 80 120
[S8-GigabitEthernet0/0/1]interface GigabitEthernet0/0/2
[S8-GigabitEthernet0/0/2] port link-type trunk
[S8-GigabitEthernet0/0/2] port trunk allow-pass vlan 80 120

9、接入SW9

<Huawei>system-view 
[Huawei]sysname S9	
[S9]undo info-center enable 
[S9]vlan batch 90
[S9]interface Ethernet0/0/1
[S9-Ethernet0/0/1] port link-type access
[S9-Ethernet0/0/1] port default vlan 90
[S9-Ethernet0/0/1]interface Ethernet0/0/3
[S9-Ethernet0/0/3] port link-type access
[S9-Ethernet0/0/3] port default vlan 90
[S9-Ethernet0/0/3]interface GigabitEthernet0/0/1
[S9-GigabitEthernet0/0/1] port link-type trunk
[S9-GigabitEthernet0/0/1] port trunk allow-pass vlan 90
[S9-GigabitEthernet0/0/1]interface GigabitEthernet0/0/2
[S9-GigabitEthernet0/0/2] port link-type trunk
[S9-GigabitEthernet0/0/2] port trunk allow-pass vlan 90

10、接入SW10

<Huawei>system-view 
[Huawei]sysname S10	
[S10]undo info-center enable 
[S10]vlan batch 100 110
[S10]interface Ethernet0/0/1
[S10-Ethernet0/0/1] port link-type access
[S10-Ethernet0/0/1] port default vlan 100
[S10-Ethernet0/0/1]interface Ethernet0/0/3
[S10-Ethernet0/0/3] port link-type access
[S10-Ethernet0/0/3] port default vlan 100
[S10-Ethernet0/0/3]interface GigabitEthernet0/0/1
[S10-GigabitEthernet0/0/1] port link-type trunk
[S10-GigabitEthernet0/0/1] port trunk allow-pass vlan 100
[S10-GigabitEthernet0/0/1]interface GigabitEthernet0/0/2
[S10-GigabitEthernet0/0/2] port link-type trunk
[S10-GigabitEthernet0/0/2] port trunk allow-pass vlan 100

11、接入SW11

<Huawei>system-view 
[Huawei]sysname S11	
[S11]undo info-center enable 
[S11]vlan batch 110
[S11]interface Ethernet0/0/1
[S11-Ethernet0/0/1] port link-type access
[S11-Ethernet0/0/1] port default vlan 110
[S11-Ethernet0/0/1]interface Ethernet0/0/3
[S11-Ethernet0/0/3] port link-type access
[S11-Ethernet0/0/3] port default vlan 110
[S11-Ethernet0/0/3]interface GigabitEthernet0/0/1
[S11-GigabitEthernet0/0/1] port link-type trunk
[S11-GigabitEthernet0/0/1] port trunk allow-pass vlan 110
[S11-GigabitEthernet0/0/1]interface GigabitEthernet0/0/2
[S11-GigabitEthernet0/0/2] port link-type trunk
[S11-GigabitEthernet0/0/2] port trunk allow-pass vlan 110

 12、汇聚LSW1

<Huawei>system-view
[Huawei]sysname SW1
[SW1]undo info-center enable
[SW1]vlan batch 10 20 30 40 50 60 70 80 90 100
[SW1]vlan batch 110 120 130 150
[SW1]dhcp enable
[SW1]stp region-configuration
[SW1-mst-region] region-name mstp
[SW1-mst-region] revision-level 10
[SW1-mst-region] instance 1 vlan 10 20 30 40 50 60 
[SW1-mst-region] instance 2 vlan 70 80 90 100 110 120 
[SW1-mst-region] instance 3 vlan 130 
[SW1-mst-region] active region-configuration
[SW1-mst-region]interface GigabitEthernet0/0/1
[SW1-GigabitEthernet0/0/1] port link-type trunk
[SW1-GigabitEthernet0/0/1] port trunk allow-pass vlan 10 120
[SW1-GigabitEthernet0/0/1]interface GigabitEthernet0/0/2
[SW1-GigabitEthernet0/0/2] port link-type trunk
[SW1-GigabitEthernet0/0/2] port trunk allow-pass vlan 20 120
[SW1-GigabitEthernet0/0/2]interface GigabitEthernet0/0/3
[SW1-GigabitEthernet0/0/3] port link-type trunk
[SW1-GigabitEthernet0/0/3] port trunk allow-pass vlan 30 120
[SW1-GigabitEthernet0/0/3]interface GigabitEthernet0/0/4
[SW1-GigabitEthernet0/0/4] port link-type trunk
[SW1-GigabitEthernet0/0/4] port trunk allow-pass vlan 40 120
[SW1-GigabitEthernet0/0/4]interface GigabitEthernet0/0/5
[SW1-GigabitEthernet0/0/5] port link-type trunk
[SW1-GigabitEthernet0/0/5] port trunk allow-pass vlan 50 120
[SW1-GigabitEthernet0/0/5]interface GigabitEthernet0/0/6
[SW1-GigabitEthernet0/0/6] port link-type trunk
[SW1-GigabitEthernet0/0/6] port trunk allow-pass vlan 60 120
[SW1-GigabitEthernet0/0/6]interface GigabitEthernet0/0/7
[SW1-GigabitEthernet0/0/7] port link-type trunk
[SW1-GigabitEthernet0/0/7] port trunk allow-pass vlan 70 120
[SW1-GigabitEthernet0/0/7]interface GigabitEthernet0/0/8
[SW1-GigabitEthernet0/0/8] port link-type trunk
[SW1-GigabitEthernet0/0/8] port trunk allow-pass vlan 80 120
[SW1-GigabitEthernet0/0/8]interface GigabitEthernet0/0/9
[SW1-GigabitEthernet0/0/9] port link-type trunk
[SW1-GigabitEthernet0/0/9] port trunk allow-pass vlan 90 120
[SW1-GigabitEthernet0/0/9]interface GigabitEthernet0/0/10
[SW1-GigabitEthernet0/0/10] port link-type trunk
[SW1-GigabitEthernet0/0/10] port trunk allow-pass vlan 100 120
[SW1-GigabitEthernet0/0/10]interface GigabitEthernet0/0/11
[SW1-GigabitEthernet0/0/11] port link-type trunk
[SW1-GigabitEthernet0/0/11] port trunk allow-pass vlan 110 120
[SW1-GigabitEthernet0/0/11]interface GigabitEthernet0/0/12
[SW1-GigabitEthernet0/0/12] port link-type access
[SW1-GigabitEthernet0/0/12] port default vlan 130
[SW1-GigabitEthernet0/0/12]interface GigabitEthernet0/0/13
[SW1-GigabitEthernet0/0/13] port link-type access
[SW1-GigabitEthernet0/0/13] port default vlan 150
[SW1-GigabitEthernet0/0/13]quit
[SW1]interface Vlanif1
[SW1-Vlanif1] ip address 192.168.1.1 255.255.255.0 
[SW1-Vlanif1]interface Vlanif10
[SW1-Vlanif10] ip address 192.168.8.2 255.255.248.0 
[SW1-Vlanif10] vrrp vrid 10 virtual-ip 192.168.8.1
[SW1-Vlanif10] vrrp vrid 10 priority 120
[SW1-Vlanif10] dhcp select relay
[SW1-Vlanif10] dhcp relay server-ip 192.168.150.1
[SW1-Vlanif10]interface Vlanif20
[SW1-Vlanif20] ip address 192.168.16.2 255.255.255.0 
[SW1-Vlanif20] vrrp vrid 20 virtual-ip 192.168.16.1
[SW1-Vlanif20] vrrp vrid 20 priority 120
[SW1-Vlanif20] dhcp select relay
[SW1-Vlanif20] dhcp relay server-ip 192.168.150.1
[SW1-Vlanif20]interface Vlanif30
[SW1-Vlanif30] ip address 192.168.17.2 255.255.255.0 
[SW1-Vlanif30] vrrp vrid 30 virtual-ip 192.168.17.1
[SW1-Vlanif30] vrrp vrid 30 priority 120
[SW1-Vlanif30] dhcp select relay
[SW1-Vlanif30] dhcp relay server-ip 192.168.150.1
[SW1-Vlanif30]interface Vlanif40
[SW1-Vlanif40] ip address 192.168.20.2 255.255.252.0 
[SW1-Vlanif40] vrrp vrid 40 virtual-ip 192.168.20.1
[SW1-Vlanif40] vrrp vrid 40 priority 120
[SW1-Vlanif40] dhcp select relay
[SW1-Vlanif40] dhcp relay server-ip 192.168.150.1
[SW1-Vlanif40]interface Vlanif50
[SW1-Vlanif50] ip address 192.168.24.2 255.255.255.0 
[SW1-Vlanif50] vrrp vrid 50 virtual-ip 192.168.24.1
[SW1-Vlanif50] vrrp vrid 50 priority 120
[SW1-Vlanif50] dhcp select relay
[SW1-Vlanif50] dhcp relay server-ip 192.168.150.1
[SW1-Vlanif50]interface Vlanif60
[SW1-Vlanif60] ip address 192.168.25.2 255.255.255.0 
[SW1-Vlanif60] vrrp vrid 60 virtual-ip 192.168.25.1
[SW1-Vlanif60] vrrp vrid 60 priority 120
[SW1-Vlanif60] dhcp select relay
[SW1-Vlanif60] dhcp relay server-ip 192.168.150.1
[SW1-Vlanif60]interface Vlanif70
[SW1-Vlanif70] ip address 192.168.32.2 255.255.248.0 
[SW1-Vlanif70] vrrp vrid 70 virtual-ip 192.168.32.1
[SW1-Vlanif70] dhcp select relay
[SW1-Vlanif70] dhcp relay server-ip 192.168.150.1
[SW1-Vlanif70]interface Vlanif80
[SW1-Vlanif80] ip address 192.168.40.2 255.255.255.0 
[SW1-Vlanif80] vrrp vrid 80 virtual-ip 192.168.40.1
[SW1-Vlanif80] dhcp select relay
[SW1-Vlanif80] dhcp relay server-ip 192.168.150.1
[SW1-Vlanif80]interface Vlanif90
[SW1-Vlanif90] ip address 192.168.44.2 255.255.252.0 
[SW1-Vlanif90] vrrp vrid 90 virtual-ip 192.168.44.1
[SW1-Vlanif90] dhcp select relay
[SW1-Vlanif90] dhcp relay server-ip 192.168.150.1
[SW1-Vlanif90]interface Vlanif100
[SW1-Vlanif100] ip address 192.168.48.2 255.255.252.0 
 
[SW1-Vlanif100] vrrp vrid 100 virtual-ip 192.168.48.1
[SW1-Vlanif100] dhcp select relay
[SW1-Vlanif100] dhcp relay server-ip 192.168.150.1
[SW1-Vlanif110] vrrp vrid 110 virtual-ip 192.168.52.1
[SW1-Vlanif110] dhcp select relay
[SW1-Vlanif110] dhcp relay server-ip 192.168.150.1
[SW1-Vlanif110]interface Vlanif120
[SW1-Vlanif120] ip address 192.168.53.2 255.255.255.0 
[SW1-Vlanif120] vrrp vrid 120 virtual-ip 192.168.53.1
[SW1-Vlanif120] dhcp select relay
[SW1-Vlanif120] dhcp relay server-ip 192.168.150.1
[SW1-Vlanif120]interface Vlanif130
[SW1-Vlanif130] ip address 192.168.130.2 255.255.255.0 
[SW1-Vlanif130]interface Vlanif150
[SW1-Vlanif150] ip address 192.168.150.2 255.255.255.0
[SW1-Vlanif150]ospf 1 
[SW1-ospf-1] import-route direct
[SW1-ospf-1] area 0.0.0.0 
[SW1-ospf-1-area-0.0.0.0]  network 192.168.1.1 0.0.0.0 
[SW1-ospf-1-area-0.0.0.0]  network 192.168.8.2 0.0.0.0 
[SW1-ospf-1-area-0.0.0.0]  network 192.168.16.2 0.0.0.0 
[SW1-ospf-1-area-0.0.0.0]  network 192.168.17.2 0.0.0.0 
[SW1-ospf-1-area-0.0.0.0]  network 192.168.20.2 0.0.0.0 
[SW1-ospf-1-area-0.0.0.0]  network 192.168.24.2 0.0.0.0 
[SW1-ospf-1-area-0.0.0.0]  network 192.168.25.2 0.0.0.0 
[SW1-ospf-1-area-0.0.0.0]  network 192.168.32.2 0.0.0.0 
[SW1-ospf-1-area-0.0.0.0]  network 192.168.40.2 0.0.0.0 
[SW1-ospf-1-area-0.0.0.0]  network 192.168.44.2 0.0.0.0 
[SW1-ospf-1-area-0.0.0.0]  network 192.168.48.2 0.0.0.0 
[SW1-ospf-1-area-0.0.0.0]  network 192.168.52.2 0.0.0.0 
[SW1-ospf-1-area-0.0.0.0]  network 192.168.53.2 0.0.0.0
[SW1-ospf-1-area-0.0.0.0]stp instance 1 root primary
[SW1]stp instance 2 root secondary
[SW1]stp instance 3 root primary

 13、汇聚LSW2

<Huawei>system-view
[Huawei]sysname SW2
[SW2]undo info-center enable
[SW2]vlan batch 10 20 30 40 50 60 70 80 90 100
[SW2]vlan batch 110 120
[SW2]dhcp enable
[SW2]stp region-configuration
[SW2-mst-region] region-name mstp
[SW2-mst-region] revision-level 10
[SW2-mst-region] instance 1 vlan 10 20 30 40 50 60 
[SW2-mst-region] instance 2 vlan 70 80 90 100 110 120 
[SW2-mst-region] instance 3 vlan 130 
[SW2-mst-region] active region-configuration
[SW2-mst-region]interface GigabitEthernet0/0/1
[SW2-GigabitEthernet0/0/1] port link-type trunk
[SW2-GigabitEthernet0/0/1] port trunk allow-pass vlan 10 120
[SW2-GigabitEthernet0/0/1]interface GigabitEthernet0/0/2
[SW2-GigabitEthernet0/0/2] port link-type trunk
[SW2-GigabitEthernet0/0/2] port trunk allow-pass vlan 20 120
[SW2-GigabitEthernet0/0/2]interface GigabitEthernet0/0/3
[SW2-GigabitEthernet0/0/3] port link-type trunk
[SW2-GigabitEthernet0/0/3] port trunk allow-pass vlan 30 120
[SW2-GigabitEthernet0/0/3]interface GigabitEthernet0/0/4
[SW2-GigabitEthernet0/0/4] port link-type trunk
[SW2-GigabitEthernet0/0/4] port trunk allow-pass vlan 40 120
[SW2-GigabitEthernet0/0/4]interface GigabitEthernet0/0/5
[SW2-GigabitEthernet0/0/5] port link-type trunk
[SW2-GigabitEthernet0/0/5] port trunk allow-pass vlan 50 120
[SW2-GigabitEthernet0/0/5]interface GigabitEthernet0/0/6
[SW2-GigabitEthernet0/0/6] port link-type trunk
[SW2-GigabitEthernet0/0/6] port trunk allow-pass vlan 60 120
[SW2-GigabitEthernet0/0/6]interface GigabitEthernet0/0/7
[SW2-GigabitEthernet0/0/7] port link-type trunk
[SW2-GigabitEthernet0/0/7] port trunk allow-pass vlan 70 120
[SW2-GigabitEthernet0/0/7]interface GigabitEthernet0/0/8
[SW2-GigabitEthernet0/0/8] port link-type trunk
[SW2-GigabitEthernet0/0/8] port trunk allow-pass vlan 80 120
[SW2-GigabitEthernet0/0/8]interface GigabitEthernet0/0/9
[SW2-GigabitEthernet0/0/9] port link-type trunk
[SW2-GigabitEthernet0/0/9] port trunk allow-pass vlan 90 120
[SW2-GigabitEthernet0/0/9]interface GigabitEthernet0/0/10
[SW2-GigabitEthernet0/0/10] port link-type trunk
[SW2-GigabitEthernet0/0/10] port trunk allow-pass vlan 100 120
[SW2-GigabitEthernet0/0/10]interface GigabitEthernet0/0/11
[SW2-GigabitEthernet0/0/11] port link-type trunk
[SW2-GigabitEthernet0/0/11] port trunk allow-pass vlan 110 120
[SW2-GigabitEthernet0/0/11]interface Eth-Trunk1
[SW2-Eth-Trunk1] port link-type trunk
[SW2-Eth-Trunk1] port trunk allow-pass vlan 10 20 30 40 50 60 70 80 90 100
[SW2-Eth-Trunk1] port trunk allow-pass vlan 110 120
[SW2-Eth-Trunk1] mode lacp-static
[SW2-Eth-Trunk1]interface Vlanif1
[SW2-Vlanif1] ip address 192.168.2.1 255.255.255.0 
[SW2-Vlanif1]interface Vlanif10
[SW2-Vlanif10] ip address 192.168.8.3 255.255.248.0 
[SW2-Vlanif10] vrrp vrid 10 virtual-ip 192.168.8.1
[SW2-Vlanif10] dhcp select relay
[SW2-Vlanif10] dhcp relay server-ip 192.168.150.1
[SW2-Vlanif10]interface Vlanif20
[SW2-Vlanif20] ip address 192.168.16.3 255.255.255.0 
[SW2-Vlanif20] vrrp vrid 20 virtual-ip 192.168.16.1
[SW2-Vlanif20] dhcp select relay
[SW2-Vlanif20] dhcp relay server-ip 192.168.150.1
[SW2-Vlanif20]interface Vlanif30
[SW2-Vlanif30] ip address 192.168.17.3 255.255.255.0 
[SW2-Vlanif30] vrrp vrid 30 virtual-ip 192.168.17.1
[SW2-Vlanif30] dhcp select relay
[SW2-Vlanif30] dhcp relay server-ip 192.168.150.1
[SW2-Vlanif30]interface Vlanif40
[SW2-Vlanif40] ip address 192.168.20.3 255.255.252.0 
[SW2-Vlanif40] vrrp vrid 40 virtual-ip 192.168.20.1
[SW2-Vlanif40] dhcp select relay
[SW2-Vlanif40] dhcp relay server-ip 192.168.150.1
[SW2-Vlanif40]interface Vlanif50
[SW2-Vlanif50] ip address 192.168.24.3 255.255.255.0 
[SW2-Vlanif50] vrrp vrid 50 virtual-ip 192.168.24.1
[SW2-Vlanif50] dhcp select relay
[SW2-Vlanif50] dhcp relay server-ip 192.168.150.1
[SW2-Vlanif50]interface Vlanif60
[SW2-Vlanif60] ip address 192.168.25.3 255.255.255.0 
[SW2-Vlanif60] vrrp vrid 60 virtual-ip 192.168.25.1
[SW2-Vlanif60] dhcp select relay
[SW2-Vlanif60] dhcp relay server-ip 192.168.150.1
[SW2-Vlanif60]interface Vlanif70
[SW2-Vlanif70] ip address 192.168.32.3 255.255.248.0 
[SW2-Vlanif70] vrrp vrid 70 virtual-ip 192.168.32.1
[SW2-Vlanif70] vrrp vrid 70 priority 120
[SW2-Vlanif70] dhcp select relay
[SW2-Vlanif70] dhcp relay server-ip 192.168.150.1
[SW2-Vlanif70]interface Vlanif80
[SW2-Vlanif80] ip address 192.168.40.3 255.255.255.0 
[SW2-Vlanif80] vrrp vrid 80 virtual-ip 192.168.40.1
[SW2-Vlanif80] vrrp vrid 80 priority 120
[SW2-Vlanif80] dhcp select relay
[SW2-Vlanif80] dhcp relay server-ip 192.168.150.1
[SW2-Vlanif80]interface Vlanif90
[SW2-Vlanif90] ip address 192.168.44.3 255.255.252.0 
[SW2-Vlanif90] vrrp vrid 90 virtual-ip 192.168.44.1
[SW2-Vlanif90] vrrp vrid 90 priority 120
[SW2-Vlanif90] dhcp relay server-ip 192.168.150.1
[SW2-Vlanif90]interface Vlanif100
[SW2-Vlanif100] ip address 192.168.48.3 255.255.252.0 
[SW2-Vlanif100] vrrp vrid 100 virtual-ip 192.168.48.1
[SW2-Vlanif100] vrrp vrid 100 priority 120
[SW2-Vlanif100] dhcp select relay
[SW2-Vlanif100] dhcp relay server-ip 192.168.150.1
[SW2-Vlanif100]interface Vlanif110
[SW2-Vlanif110] ip address 192.168.52.3 255.255.255.0 
[SW2-Vlanif110] vrrp vrid 110 virtual-ip 192.168.52.1
[SW2-Vlanif110] vrrp vrid 110 priority 120
[SW2-Vlanif110] dhcp select relay
[SW2-Vlanif110]ospf 1 
[SW2-ospf-1] area 0.0.0.0 
[SW2-ospf-1-area-0.0.0.0]  network 192.168.2.1 0.0.0.0 
[SW2-ospf-1-area-0.0.0.0]  network 192.168.8.3 0.0.0.0 
[SW2-ospf-1-area-0.0.0.0]  network 192.168.16.3 0.0.0.0 
[SW2-ospf-1-area-0.0.0.0]  network 192.168.17.3 0.0.0.0 
[SW2-ospf-1-area-0.0.0.0]  network 192.168.20.3 0.0.0.0 
[SW2-ospf-1-area-0.0.0.0]  network 192.168.24.3 0.0.0.0 
[SW2-ospf-1-area-0.0.0.0]  network 192.168.25.3 0.0.0.0 
[SW2-ospf-1-area-0.0.0.0]  network 192.168.32.3 0.0.0.0 
[SW2-ospf-1-area-0.0.0.0]  network 192.168.40.3 0.0.0.0 
[SW2-ospf-1-area-0.0.0.0]  network 192.168.44.3 0.0.0.0 
[SW2-ospf-1-area-0.0.0.0]  network 192.168.48.3 0.0.0.0 
[SW2-ospf-1-area-0.0.0.0]  network 192.168.52.3 0.0.0.0 
[SW2-ospf-1-area-0.0.0.0]  network 192.168.53.3 0.0.0.0
[SW2-ospf-1-area-0.0.0.0]stp instance 1 root secondary
[SW2]stp instance 2 root primary
[SW2]stp instance 3 root secondary

 14、无线AC

<AC6005>system-view 
[AC6005]undo info-center enable 
[AC6005] sysname AC1
[AC1]vlan batch 130
[AC1]vlan pool vlan10
[AC1-vlan-pool-vlan10] vlan 10
[AC1-vlan-pool-vlan10]vlan pool vlan20
[AC1-vlan-pool-vlan20] vlan 20
[AC1-vlan-pool-vlan20]vlan pool vlan30
[AC1-vlan-pool-vlan30] vlan 30
[AC1-vlan-pool-vlan30]vlan pool vlan70
[AC1-vlan-pool-vlan70] vlan 70
[AC1-vlan-pool-vlan70]vlan pool vlan80
[AC1-vlan-pool-vlan80] vlan 80
[AC1-vlan-pool-vlan80]quit
[AC1]interface Vlanif130
[AC1-Vlanif130] ip address 192.168.130.1 255.255.255.0
[AC1-Vlanif130]interface GigabitEthernet0/0/1
[AC1-GigabitEthernet0/0/1] port link-type access
[AC1-GigabitEthernet0/0/1] port default vlan 130
[AC1-GigabitEthernet0/0/1]quit
[AC1]ip route-static 0.0.0.0 0.0.0.0 192.168.130.2
[AC1]capwap source interface vlanif130
[AC1]wlan	
[AC1-wlan-view]ap auth-mode mac-auth 
[AC1-wlan-view]regulatory-domain-profile name China
[AC1-wlan-regulate-domain-China]country-code CN 
[AC1-wlan-regulate-domain-China]quit
[AC1-wlan-view]ap-id 1 type-id 69 ap-mac 00e0-fc8b-7c80
[AC1-wlan-ap-1]ap-name AP1
[AC1-wlan-ap-1]ap-group ap1
[AC1-wlan-ap-1]ap-id 2 type-id 69 ap-mac 00e0-fc5d-2640 
[AC1-wlan-ap-2] ap-name AP2
[AC1-wlan-ap-2] ap-group ap2
[AC1-wlan-ap-2] ap-id 3 type-id 69 ap-mac 00e0-fc2e-5ad0 
[AC1-wlan-ap-3]ap-name AP3
[AC1-wlan-ap-3]ap-group ap3
[AC1-wlan-ap-3]ap-id 4 type-id 69 ap-mac 00e0-fc3f-7770 
[AC1-wlan-ap-4] ap-name AP4
[AC1-wlan-ap-4]ap-group ap4
[AC1-wlan-ap-4]ap-id 5 type-id 69 ap-mac 00e0-fcdc-0c70 
[AC1-wlan-ap-5]ap-name AP5
[AC1-wlan-ap-5]ap-group ap5
[AC1-wlan-view] security-profile name xiaoyuan
[AC1-wlan-sec-prof-xiaoyuan]security wpa2 psk pass-phrase 123456789 aes
[AC1-wlan-sec-prof-xiaoyuan]quit
[AC1-wlan-view] ssid-profile name xiaoyuan
[AC1-wlan-ssid-prof-xiaoyuan]
[AC1-wlan-ssid-prof-xiaoyuan]  ssid Campus Network
[AC1-wlan-ssid-prof-xiaoyuan]quit
[AC1-wlan-view] vap-profile name ap1
[AC1-wlan-vap-prof-ap1]service-vlan vlan-pool vlan10
[AC1-wlan-vap-prof-ap1]ssid-profile xiaoyuan
[AC1-wlan-vap-prof-ap1]security-profile xiaoyuan
[AC1-wlan-vap-prof-ap1]vap-profile name ap2
[AC1-wlan-vap-prof-ap2]service-vlan vlan-pool vlan20
[AC1-wlan-vap-prof-ap2]ssid-profile xiaoyuan
[AC1-wlan-vap-prof-ap2]security-profile xiaoyuan
[AC1-wlan-vap-prof-ap2]vap-profile name ap3
[AC1-wlan-vap-prof-ap3]service-vlan vlan-pool vlan30
[AC1-wlan-vap-prof-ap3]ssid-profile xiaoyuan
[AC1-wlan-vap-prof-ap3]security-profile xiaoyuan
[AC1-wlan-vap-prof-ap3]vap-profile name ap4
[AC1-wlan-vap-prof-ap4]service-vlan vlan-pool vlan70
[AC1-wlan-vap-prof-ap4]ssid-profile xiaoyuan
[AC1-wlan-vap-prof-ap4]security-profile xiaoyuan
[AC1-wlan-vap-prof-ap4]vap-profile name ap5
[AC1-wlan-vap-prof-ap5]service-vlan vlan-pool vlan80
[AC1-wlan-vap-prof-ap5]ssid-profile xiaoyuan
[AC1-wlan-vap-prof-ap5]security-profile xiaoyuan
[AC1-wlan-vap-prof-ap5]quit
[AC1-wlan-view]ap-group name ap1
[AC1-wlan-ap-group-ap1]regulatory-domain-profile China
[AC1-wlan-ap-group-ap1]vap-profile ap1 wlan 1  radio 0	
[AC1-wlan-ap-group-ap1]vap-profile ap1 wlan 1 radio 1
[AC1-wlan-ap-group-ap1]quit
[AC1-wlan-view]ap-group name ap2
[AC1-wlan-ap-group-ap2]regulatory-domain-profile China
[AC1-wlan-ap-group-ap2]vap-profile ap2 wlan 1  radio 0	
[AC1-wlan-ap-group-ap2]vap-profile ap2 wlan 1 radio 1
[AC1-wlan-ap-group-ap2]quit
[AC1-wlan-view]ap-group name ap3
[AC1-wlan-ap-group-ap3]regulatory-domain-profile China
[AC1-wlan-ap-group-ap3]vap-profile ap3 wlan 1  radio 0	
[AC1-wlan-ap-group-ap3]vap-profile ap3 wlan 1 radio 1
[AC1-wlan-ap-group-ap3]quit
[AC1-wlan-view]ap-group name ap4
[AC1-wlan-ap-group-ap4]regulatory-domain-profile China
[AC1-wlan-ap-group-ap4]vap-profile ap4 wlan 1  radio 0	
[AC1-wlan-ap-group-ap4]vap-profile ap4 wlan 1 radio 1
[AC1-wlan-ap-group-ap4]quit
[AC1-wlan-view]ap-group name ap5
[AC1-wlan-ap-group-ap5]regulatory-domain-profile China
[AC1-wlan-ap-group-ap5]vap-profile ap5 wlan 1  radio 0	
[AC1-wlan-ap-group-ap5]vap-profile ap5 wlan 1 radio 1
[AC1-wlan-ap-group-ap5]quit

15、DHCP

这里使用一台路由器充当DHCP服务器

<Huawei>system-view
[Huawei]sysname DHCP
[DHCP]undo info-center enable
[DHCP]dhcp enable
[DHCP]interface GigabitEthernet0/0/0
[DHCP-GigabitEthernet0/0/0] ip address 192.168.150.1 255.255.255.0
[DHCP-GigabitEthernet0/0/0] dhcp select global
[DHCP-GigabitEthernet0/0/0]ip pool vlan10
[DHCP-ip-pool-vlan10] gateway-list 192.168.8.1
[DHCP-ip-pool-vlan10] network 192.168.8.0 mask 255.255.248.0
[DHCP-ip-pool-vlan10] excluded-ip-address 192.168.8.2 192.168.8.3
[DHCP-ip-pool-vlan10] dns-list 100.1.1.1
[DHCP-ip-pool-vlan10]ip pool vlan20
[DHCP-ip-pool-vlan20] gateway-list 192.168.16.1
[DHCP-ip-pool-vlan20] network 192.168.16.0 mask 255.255.255.0
[DHCP-ip-pool-vlan20] excluded-ip-address 192.168.16.2 192.168.16.3
[DHCP-ip-pool-vlan20] dns-list 100.1.1.1
[DHCP-ip-pool-vlan20]ip pool vlan30
[DHCP-ip-pool-vlan30] gateway-list 192.168.17.1
[DHCP-ip-pool-vlan30] network 192.168.17.0 mask 255.255.255.0
[DHCP-ip-pool-vlan30] excluded-ip-address 192.168.17.2 192.168.17.3
[DHCP-ip-pool-vlan30] dns-list 100.1.1.1
[DHCP-ip-pool-vlan30]ip pool vlan40
[DHCP-ip-pool-vlan40] gateway-list 192.168.20.1
[DHCP-ip-pool-vlan40] network 192.168.20.0 mask 255.255.252.0
[DHCP-ip-pool-vlan40] excluded-ip-address 192.168.20.2 192.168.20.3
[DHCP-ip-pool-vlan40] dns-list 100.1.1.1
[DHCP-ip-pool-vlan40]ip pool vlan50
[DHCP-ip-pool-vlan50] gateway-list 192.168.24.1
[DHCP-ip-pool-vlan50] network 192.168.24.0 mask 255.255.255.0
[DHCP-ip-pool-vlan50] excluded-ip-address 192.168.24.2 192.168.24.3
[DHCP-ip-pool-vlan50] dns-list 100.1.1.1
[DHCP-ip-pool-vlan50]ip pool vlan60
[DHCP-ip-pool-vlan60] gateway-list 192.168.25.1
[DHCP-ip-pool-vlan60] network 192.168.25.0 mask 255.255.255.0
[DHCP-ip-pool-vlan60] excluded-ip-address 192.168.25.2 192.168.25.3
[DHCP-ip-pool-vlan60] dns-list 100.1.1.1
[DHCP-ip-pool-vlan60]ip pool vlan70
[DHCP-ip-pool-vlan70] gateway-list 192.168.32.1
[DHCP-ip-pool-vlan70] network 192.168.32.0 mask 255.255.248.0
[DHCP-ip-pool-vlan70] excluded-ip-address 192.168.32.2 192.168.32.3
[DHCP-ip-pool-vlan70] dns-list 100.1.1.1
[DHCP-ip-pool-vlan70]ip pool vlan80
[DHCP-ip-pool-vlan80] gateway-list 192.168.40.1 
[DHCP-ip-pool-vlan80] network 192.168.40.0 mask 255.255.255.0 
[DHCP-ip-pool-vlan80] excluded-ip-address 192.168.40.2 192.168.40.3 
[DHCP-ip-pool-vlan80] dns-list 100.1.1.1 
[DHCP-ip-pool-vlan80]ip pool vlan90
[DHCP-ip-pool-vlan90] gateway-list 192.168.44.1 
[DHCP-ip-pool-vlan90] network 192.168.44.0 mask 255.255.252.0 
[DHCP-ip-pool-vlan90] excluded-ip-address 192.168.44.2 192.168.44.3 
[DHCP-ip-pool-vlan90] dns-list 100.1.1.1 
[DHCP-ip-pool-vlan90]ip pool vlan100
[DHCP-ip-pool-vlan100] gateway-list 192.168.48.1 
[DHCP-ip-pool-vlan100] network 192.168.48.0 mask 255.255.252.0 
[DHCP-ip-pool-vlan100] excluded-ip-address 192.168.48.2 192.168.48.3 
[DHCP-ip-pool-vlan100] dns-list 100.1.1.1 
[DHCP-ip-pool-vlan100]ip pool vlan110
[DHCP-ip-pool-vlan110] gateway-list 192.168.52.1 
[DHCP-ip-pool-vlan110] network 192.168.52.0 mask 255.255.255.0 
[DHCP-ip-pool-vlan110] excluded-ip-address 192.168.52.2 192.168.52.3 
[DHCP-ip-pool-vlan110] dns-list 100.1.1.1 
[DHCP-ip-pool-vlan110]ip pool vlan120
[DHCP-ip-pool-vlan120] gateway-list 192.168.53.1 
[DHCP-ip-pool-vlan120] network 192.168.53.0 mask 255.255.255.0 
[DHCP-ip-pool-vlan120] excluded-ip-address 192.168.53.2 192.168.53.3 
[DHCP-ip-pool-vlan120] option 43 sub-option 3 ascii 192.168.130.1
[DHCP-ip-pool-vlan120]ip route-static 0.0.0.0 0.0.0.0 192.168.150.2

 16、核心AR1

<Huawei>system-view
[Huawei]sysname R1
[R1]undo info-center enable
[R1]interface GigabitEthernet0/0/0
[R1-GigabitEthernet0/0/0] ip address 192.168.1.2 255.255.255.0 
[R1-GigabitEthernet0/0/0]interface GigabitEthernet0/0/1
[R1-GigabitEthernet0/0/1] ip address 10.1.111.1 255.255.255.0 
[R1-GigabitEthernet0/0/1]interface GigabitEthernet0/0/2
[R1-GigabitEthernet0/0/2] ip address 10.1.121.2 255.255.255.0 
[R1-GigabitEthernet0/0/2]ospf 1 
[R1-ospf-1] area 0.0.0.0 
[R1-ospf-1-area-0.0.0.0]  network 10.1.111.1 0.0.0.0 
[R1-ospf-1-area-0.0.0.0]  network 10.1.121.2 0.0.0.0 
[R1-ospf-1-area-0.0.0.0]  network 192.168.1.2 0.0.0.0

 17、核心AR2

<Huawei>system-view
[Huawei]sysname S2
[S2]undo  info-center enable
[S2]interface GigabitEthernet0/0/0
[S2-GigabitEthernet0/0/0] ip address 192.168.2.2 255.255.255.0 
[S2-GigabitEthernet0/0/0]interface GigabitEthernet0/0/1
[S2-GigabitEthernet0/0/1] ip address 10.1.111.2 255.255.255.0 
[S2-GigabitEthernet0/0/1]interface GigabitEthernet0/0/2
[S2-GigabitEthernet0/0/2] ip address 10.1.131.2 255.255.255.0 
[S2-GigabitEthernet0/0/2]ospf 1 
[S2-ospf-1]
[S2-ospf-1] area 0.0.0.0 
[S2-ospf-1-area-0.0.0.0]  network 10.1.111.2 0.0.0.0 
[S2-ospf-1-area-0.0.0.0]  network 10.1.131.2 0.0.0.0 
[S2-ospf-1-area-0.0.0.0]  network 192.168.2.2 0.0.0.0

 18、防火墙FW1&FW2

FW1：
<USG6000V1>system-view 	
[USG6000V1]undo info-center enable 
[USG6000V1]sysname FW1
[FW1]interface GigabitEthernet1/0/0
[FW1-GigabitEthernet1/0/0] ip address 10.1.1.21 255.255.255.0
[FW1-GigabitEthernet1/0/0] service-manage ping permit
[FW1-GigabitEthernet1/0/0]interface GigabitEthernet1/0/1
[FW1-GigabitEthernet1/0/1] undo shutdown
Info: Interface GigabitEthernet1/0/1 is not shutdown.
[FW1-GigabitEthernet1/0/1] ip address 10.1.121.1 255.255.255.0
[FW1-GigabitEthernet1/0/1] service-manage ping permit
[FW1-GigabitEthernet1/0/1]interface GigabitEthernet1/0/2
[FW1-GigabitEthernet1/0/2] ip address 8.8.8.21 255.255.255.0
[FW1-GigabitEthernet1/0/2] service-manage ping permit
[FW1-GigabitEthernet1/0/2]interface GigabitEthernet1/0/3
[FW1-GigabitEthernet1/0/3] ip address 100.1.1.252 255.255.255.0
[FW1-GigabitEthernet1/0/3] vrrp vrid 10 virtual-ip 100.1.1.254 active
[FW1-GigabitEthernet1/0/3] service-manage ping permit
[FW1-GigabitEthernet1/0/3]quit
[FW1]firewall zone trust
[FW1-zone-trust] add interface GigabitEthernet1/0/1
[FW1-zone-trust]firewall zone untrust
[FW1-zone-untrust] add interface GigabitEthernet1/0/0
[FW1-zone-untrust]firewall zone dmz
[FW1-zone-dmz] add interface GigabitEthernet1/0/2
[FW1-zone-dmz] add interface GigabitEthernet1/0/3
[FW1-zone-dmz]quit
[FW1]ospf 1
[FW1-ospf-1] area 0.0.0.0
[FW1-ospf-1-area-0.0.0.0]network 8.8.8.21 0.0.0.0
[FW1-ospf-1-area-0.0.0.0]network 10.1.1.21 0.0.0.0
[FW1-ospf-1-area-0.0.0.0]network 10.1.121.1 0.0.0.0
[FW1-ospf-1-area-0.0.0.0]network 100.1.1.252 0.0.0.0
[FW1-ospf-1-area-0.0.0.0]quit
[FW1-ospf-1]quit

FW2：
<USG6000V1>system-view 
[USG6000V1]undo info-center enable 
[USG6000V1]sysname FW2
[FW2]interface GigabitEthernet1/0/0
[FW2-GigabitEthernet1/0/0]ip address 20.1.1.22 255.255.255.0
[FW2-GigabitEthernet1/0/0]service-manage ping permit
[FW2-GigabitEthernet1/0/0]interface GigabitEthernet1/0/1
[FW2-GigabitEthernet1/0/1]ip address 10.1.131.1 255.255.255.0
[FW2-GigabitEthernet1/0/1]service-manage ping permit
[FW2-GigabitEthernet1/0/1]interface GigabitEthernet1/0/2
[FW2-GigabitEthernet1/0/2]ip address 8.8.8.22 255.255.255.0
[FW2-GigabitEthernet1/0/2]service-manage ping permit
[FW2-GigabitEthernet1/0/2]interface GigabitEthernet1/0/3
[FW2-GigabitEthernet1/0/3] ip address 100.1.1.253 255.255.255.0
[FW2-GigabitEthernet1/0/3]vrrp vrid 10 virtual-ip 100.1.1.254 standby
[FW2-GigabitEthernet1/0/3]service-manage ping permit
[FW2-GigabitEthernet1/0/3]quit
[FW2]firewall zone trust
[FW2-zone-trust] add interface GigabitEthernet1/0/1
[FW2-zone-trust]firewall zone untrust
[FW2-zone-untrust] add interface GigabitEthernet1/0/0
[FW2-zone-untrust]firewall zone dmz
[FW2-zone-dmz] add interface GigabitEthernet1/0/2
[FW2-zone-dmz] add interface GigabitEthernet1/0/3
[FW2-zone-dmz]quit
[FW2]ospf 1
[FW2-ospf-1]area 0.0.0.0
[FW2-ospf-1-area-0.0.0.0]network 8.8.8.22 0.0.0.0
[FW2-ospf-1-area-0.0.0.0]network 10.1.131.1 0.0.0.0
[FW2-ospf-1-area-0.0.0.0]network 20.1.1.22 0.0.0.0
[FW2-ospf-1-area-0.0.0.0]network 100.1.1.253 0.0.0.0
[FW2-ospf-1-area-0.0.0.0]quit
[FW2-ospf-1]quit

FW1防火墙双击热备我没有放，就先省略了，配置了FW1的策略，FW2的也就自然而然的自动备份上了，这里FW2是备份防火墙，配置完就可以实现IPSec VPN,需要拷贝的可以找我，拷贝的是全的，请谅解！

分部/分校区部分 

19、接入SW12

<Huawei>system-view 
[Huawei]sysname S12	
[S12]undo info-center enable 
[S12]vlan batch 10
[S12]interface Ethernet0/0/1
[S12-Ethernet0/0/1] port link-type access
[S12-Ethernet0/0/1] port default vlan 10
[S12-Ethernet0/0/1]interface Ethernet0/0/2
[S12-Ethernet0/0/2] port link-type access
[S12-Ethernet0/0/2] port default vlan 10
[S12-Ethernet0/0/2]interface GigabitEthernet0/0/1
[S12-GigabitEthernet0/0/1] port link-type trunk
[S12-GigabitEthernet0/0/1] port trunk allow-pass vlan 10

20、接入SW13

<Huawei>system-view 
[Huawei]sysname S13	
[S13]undo info-center enable 
[S13]interface Ethernet0/0/1
[S13-Ethernet0/0/1] port link-type access
[S13-Ethernet0/0/1] port default vlan 20
[S13-Ethernet0/0/1]interface Ethernet0/0/2
[S13-Ethernet0/0/2] port link-type access
[S13-Ethernet0/0/2] port default vlan 20
[S13-Ethernet0/0/2]interface GigabitEthernet0/0/1
[S13-GigabitEthernet0/0/1] port link-type trunk
[S13-GigabitEthernet0/0/1] port trunk allow-pass vlan 20

21、接入SW14

<Huawei>system-view 
[Huawei]sysname S14	
[S14]vlan batch 30
[S14]undo info-center enable 
[S14]interface Ethernet0/0/1
[S14-Ethernet0/0/1] port link-type access
[S14-Ethernet0/0/1] port default vlan 30
[S14-Ethernet0/0/1]interface Ethernet0/0/2
[S14-Ethernet0/0/2] port link-type access
[S14-Ethernet0/0/2] port default vlan 30
[S14-Ethernet0/0/2]interface GigabitEthernet0/0/1
[S14-GigabitEthernet0/0/1] port link-type trunk
[S14-GigabitEthernet0/0/1] port trunk allow-pass vlan 30

22、汇聚 LSW3

<Huawei>system-view
[Huawei]sysname SW3
[SW3]undo info-center enable
[SW3]vlan batch 10 20 30
[SW3]interface GigabitEthernet0/0/1
[SW3-GigabitEthernet0/0/1] port link-type trunk
[SW3-GigabitEthernet0/0/1] port trunk allow-pass vlan 10
[SW3-GigabitEthernet0/0/1]interface GigabitEthernet0/0/2
[SW3-GigabitEthernet0/0/2] port link-type trunk
[SW3-GigabitEthernet0/0/2] port trunk allow-pass vlan 20
[SW3-GigabitEthernet0/0/2]interface GigabitEthernet0/0/3
[SW3-GigabitEthernet0/0/3] port link-type trunk
[SW3-GigabitEthernet0/0/3] port trunk allow-pass vlan 30
[SW3-GigabitEthernet0/0/3]interface GigabitEthernet0/0/4
[SW3-GigabitEthernet0/0/4] port link-type trunk
[SW3-GigabitEthernet0/0/4] port trunk allow-pass vlan 10 20 30

23、核心AR3

[R3]dhcp enable
Info: The operation may take a few seconds. Please wait for a moment.done.
[R3]interface GigabitEthernet0/0/0.10
[R3-GigabitEthernet0/0/0.10] dot1q termination vid 10
[R3-GigabitEthernet0/0/0.10] ip address 172.16.10.254 255.255.255.0 
[R3-GigabitEthernet0/0/0.10] arp broadcast enable
[R3-GigabitEthernet0/0/0.10] dhcp select interface
[R3-GigabitEthernet0/0/0.10] dhcp server dns-list 100.1.1.1 
[R3-GigabitEthernet0/0/0.10]interface GigabitEthernet0/0/0.20
[R3-GigabitEthernet0/0/0.20] dot1q termination vid 20
[R3-GigabitEthernet0/0/0.20] ip address 172.16.20.254 255.255.255.0 
[R3-GigabitEthernet0/0/0.20] arp broadcast enable
[R3-GigabitEthernet0/0/0.20] dhcp select interface
[R3-GigabitEthernet0/0/0.20] dhcp server dns-list 100.1.1.1 
[R3-GigabitEthernet0/0/0.20]interface GigabitEthernet0/0/0.30
[R3-GigabitEthernet0/0/0.30] dot1q termination vid 30
[R3-GigabitEthernet0/0/0.30] ip address 172.16.30.254 255.255.255.0 
[R3-GigabitEthernet0/0/0.30] arp broadcast enable
[R3-GigabitEthernet0/0/0.30] dhcp select interface
[R3-GigabitEthernet0/0/0.30] dhcp server dns-list 100.1.1.1 
[R3-GigabitEthernet0/0/0.30]interface GigabitEthernet0/0/1
[R3-GigabitEthernet0/0/1] ip address 40.1.1.1 255.255.255.0 
[R3-GigabitEthernet0/0/1]ospf 1 
[R3-ospf-1]
[R3-ospf-1] area 0.0.0.0 
[R3-ospf-1-area-0.0.0.0]  network 40.1.1.1 0.0.0.0 
[R3-ospf-1-area-0.0.0.0]  network 172.16.10.254 0.0.0.0 
[R3-ospf-1-area-0.0.0.0]  network 172.16.20.254 0.0.0.0 
[R3-ospf-1-area-0.0.0.0]  network 172.16.30.254 0.0.0.0

 24、防火墙FW3

<USG6000V1>system-view 	
[USG6000V1]undo info-center enable 
[USG6000V1]sysname FW3
[FW3]interface GigabitEthernet1/0/0
[FW3-GigabitEthernet1/0/0]ip address 40.1.1.21 255.255.255.0
[FW3-GigabitEthernet1/0/0]service-manage ping permit
[FW3-GigabitEthernet1/0/0]interface GigabitEthernet1/0/1
[FW3-GigabitEthernet1/0/1]ip address 30.1.1.21 255.255.255.0
[FW3-GigabitEthernet1/0/1]service-manage ping permit
[FW3-GigabitEthernet1/0/1]quit
[FW3]firewall zone trust
[FW3-zone-trust] add interface GigabitEthernet1/0/0
[FW3-zone-trust]firewall zone untrust
[FW3-zone-untrust] add interface GigabitEthernet1/0/1
[FW3-zone-untrust]quit
[FW3]ospf 1
[FW3-ospf-1]area 0.0.0.0
[FW3-ospf-1-area-0.0.0.0]network 30.1.1.21 0.0.0.0
[FW3-ospf-1-area-0.0.0.0]network 40.1.1.21 0.0.0.0
[FW3-ospf-1-area-0.0.0.0]quit
[FW3-ospf-1]quit
[FW3]acl number 3000
[FW3-acl-adv-3000]rule 5 permit ip source 172.16.0.0 0.0.255.255 destination 19
2.168.0.0 0.0.255.255 
[FW3-acl-adv-3000]quit
[FW3]ipsec proposal 10
[FW3-ipsec-proposal-10]esp authentication-algorithm sha2-256 
[FW3-ipsec-proposal-10]esp encryption-algorithm aes-256 
[FW3-ipsec-proposal-10]quit
[FW3]ike proposal 10
[FW3-ike-proposal-10]encryption-algorithm aes-256 
[FW3-ike-proposal-10]dh group14 
[FW3-ike-proposal-10]authentication-algorithm sha2-256 
[FW3-ike-proposal-10]authentication-method pre-share
[FW3-ike-proposal-10]integrity-algorithm hmac-sha2-256 
[FW3-ike-proposal-10]prf hmac-sha2-256 
[FW3-ike-proposal-10]quit
[FW3]ike peer fw12
[FW3-ike-peer-fw12]pre-shared-key Hcie
[FW3-ike-peer-fw12]ike-proposal 10
[FW3-ike-peer-fw12]remote-address 10.1.1.21 
[FW3-ike-peer-fw12]remote-address 20.1.1.22 
[FW3-ike-peer-fw12]quit
[FW3]ipsec policy map 10 isakmp
[FW3-ipsec-policy-isakmp-map-10]security acl 3000
[FW3-ipsec-policy-isakmp-map-10]ike-peer fw12
[FW3-ipsec-policy-isakmp-map-10]proposal 10
[FW3-ipsec-policy-isakmp-map-10]quit
[FW3]interface GigabitEthernet1/0/1
[FW3-GigabitEthernet1/0/1]ipsec policy map

ISP配置

<Huawei>system-view
[Huawei]sysname ISP
[ISP]undo info-center enable
[ISP]interface GigabitEthernet0/0/0
[ISP-GigabitEthernet0/0/0] ip address 10.1.1.1 255.255.255.0 
[ISP-GigabitEthernet0/0/0]interface GigabitEthernet0/0/1
[ISP-GigabitEthernet0/0/1] ip address 20.1.1.1 255.255.255.0 
[ISP-GigabitEthernet0/0/1]interface GigabitEthernet0/0/2
[ISP-GigabitEthernet0/0/2] ip address 30.1.1.1 255.255.255.0 
[ISP-GigabitEthernet0/0/2]ospf 1 
[ISP-ospf-1] area 0.0.0.0 
[ISP-ospf-1-area-0.0.0.0]  network 10.1.1.1 0.0.0.0 
[ISP-ospf-1-area-0.0.0.0]  network 20.1.1.1 0.0.0.0 
[ISP-ospf-1-area-0.0.0.0]  network 30.1.1.1 0.0.0.0

附录

该拓扑图细节图

 

等不到释怀
关注
  • 13
    点赞
  • 踩
  • 41
    收藏
    觉得还不错? 一键收藏
  • 4
    评论
专栏目录
[毕设分享]基于华为eNSP的校园网设计和仿真模拟
weixin_45235422的博客
06-26 3万+
这是本人在大学本科的毕业设计内容，在这里分享出来，希望大佬们指正不足和能够改进的地方，我会在评论区置顶的，谢谢大家。 含配置环境和源码分享哦 首先展示下大致topo图片吧： 介绍下我实现的功能吧： 1.接入的主机能够通过汇聚层的DHCP服务器自动获取IP地址、网关等信息，同时划分了VLAN 2. 配置了VRRP协议来实现汇聚层三层交换机的主备备份和负载分担 3. 在汇聚层的交换机间配置了链路聚合以实现提高带宽和快速交换报文 4. 根据VRRP内容配置了MSTP，做到不同的VLAN的流量也能做到主备备份.
ensp典型三层架构校园网络搭建(文档+拓扑)
04-15
该网络是一个典型的校园网络架构，采用华为ensp模拟器搭建。该压缩包中包含网络工程拓扑文件和项目报告文档，报告文档包含设计思路、网络规划、配置步骤及代码、网络功能测试等。该项目中涉及的技术包括，VLAN、链路聚合、DHCP、OSPF、缺省路由、VRRP、MSTP、ACL、NAT、DNS、FTP、WEB、无线WLAN、防火墙的相关配置等内容，功能自认为非常全面，需要做课设的和毕设的可以参考，不想动手敲代码的可以直接用，准备考网工证的也可以多参考跟着做一做，这里期待大家的下载。
华为ensp模拟企业网络规划与设计.zip
08-06
华为ensp模拟企业网络规划与设计.zip
基于eNSP的高校WLAN网络规划设计
最新发布
qq_62555970的博客
06-09 1129
配置VRRP虚拟组，SW1作为VLAN10 、20、1000、2000的主网关，作为VLAN30、40、50的备网关；SW2作为VLAN30、40、50的主网关，作为VLAN10 、20、1000、2000的备网关。MSTP同VRRP一样，SW1作为VLAN10 、20、1000、2000的主根桥，作为VLAN30、40、50的备用根桥。无线采用AC+AP的方式，AC旁挂在核心层交换机上，VLAN200作为AC的管理VLAN，VLAN2000作为AP的业务网段，VLAN1000作为无线接入终端的业务网段。
校园网设计与配置实例_ensp校园网络路由器配置,ensp校园网规划与设计
05-12
校园网设计与配置实例：内容包括系统总体的设计，系统组成，VLAN，IP划分，服务器设计，系统测试等整套方案
基于华为eNSP的中小企业办公园区/校园网络规划与设计
10-18
本文通过在华为eNSP部署路由器、交换机以及防火墙等网络设备以及运用多种计算机网络协议和技术。在设计原则以及设计需求的前提下，对企业办公园区进行网络规划设计，其中分为两大部分，一部分是进行网络拓扑结构搭建，其中包括对设备及端口进行了相应的配置；另一部分是对整体、部分的网络功能进行相关的网络仿真测试和分析。在网络拓扑结构搭建中，将计算机网络技术的基本概念和特点、应用和网络结构的拓扑图相有机地结合起来，其中包括了由模块化到整体化的网络设计理念。网络测试即在完整性地使整个网络结构的运行的前提下，对整个拓扑结构中存在的潜在问题进行项目分析和进行详细的相关测试操作。该企业包括六个部门：行政、财务、产品开发、营销、生产和人事。通过建设一个高速、高安全性、高可靠性、可扩展的网络结构，使整个办公园区的网络系统通过一张网连接在一起，实现企业内部信息的共享，以及在工作协助中更高效、迅速地传递至相关部门，同时也便于管理层管理，能对当前企业的生产、销售额、财务、人事调动各方面情况及时地了解，并对潜在的问题及时发现处理。且企业采用防火墙技术来提高网络安全性，监控网络信息存取和传递以符合相关的安全策略。
计算机网络——高效校园网络设计与实现（华为模拟器eNSP实现）
热门推荐
Liwo4418的博客
07-08 3万+
实验要求：1、ISP所在两个接口为公有IP地址，公网范围；1.1.1.0/24代表整个互联网2、公网外为私有局域网，IP地址使用私有IP地址，自定义3、PC1—PC3通过DHCP获取IP地址；PC1和HTTP在VLAN2，PC2和PC3在VLAN34、ISP路由器只能进行IP地址配置，之后不得进行任何其他配置5、全网只有PC3可以TELNET登录AR2路由器6、PC1-PC3可以访问互联网中的PC4；PC4可以通过域名www.waishi.com访问http服务器通过大型园区网的设计与方案设计，实习完成后学
网络毕业设计--基于华为ensp园区多出口带宽资源调配和管理
白话聊网络的博客
03-07 5825
基于华为ensp园区多出口带宽资源调配和管理
网络工程毕设-----基于华为ensp搭建校园网
Pierreze的博客
12-08 1万+
华为ensp搭建校园网毕设
网络工程毕业设计----基于ensp华为校园网双出口网络仿真设计
WANGMH13的博客
08-01 3万+
基于ensp华为校园网双出口网络仿真设计
【网络规划毕业设计之基于ENSP的中型企业局域网网络规划设计-哔哩哔哩】 https://b23.tv/gPkJ6qv
laoman456的博客
11-09 2030
【网络规划毕业设计之基于ENSP的中型企业局域网网络规划设计-哔哩哔哩】 https://b23.tv/gPkJ6qv https://b23.tv/gPkJ6qv
【校园网设计】基于ensp的跨地区的校园网组网方案
05-24
vlan划分 为总校区行政楼划分vlan10 网段为192.168.10.0/24，宿舍楼划分vlan 20，网段为192.168.20.0/24 ，教学楼为vlan30，网段192.168.30.0/24 实验楼 vlan40 ，网段192.168.40.0/24，分校区的教学楼vlan 100 ，网段是192.168.100.0/24 合理利用trunk和acces技术，明白打tag和去tag的原理 svi口 三层交换机配置svi口，作为pc的网关，并设置vlanif800上连公司出口路由器 dhcp自动分配ip 汇聚交换机开启dhcp功能，建立地址池，全局配置dhcp功能 nat nat使用napt技术，将内网地址转换为外网地址+端口的方式，并将内网的web服务器映射出去，可供外网访问校园web服务器 ospf 内网使用ospf协议完成互通，运营商使用ospf模拟互通 bgp 总校区和运营商，运营商和分校区之间建立bgo邻居，两校区之间的流量通过bgp进行传输 acl访问控制列表 只允许行政楼才能访问财政服务器
基于华为eNSP的计算机网络作业-小型校园网
11-15
基于华为eNSP的计算机网络作业-小型校园网
基于eNSP加防火墙的千人中型校园/企业网络规划与设计(附所有配置命令)
06-04
文件中包含了基于eNSP加防火墙的千人中型校园/企业网络规划与设计的topo图及其完整的配置（2份 区别就是第二个加了无线网络规划设计(WIFI)）（三层架构，核心层、汇聚层、计入层），并加所有的配置命令(以txt形式在...
基于华为eNSP的校园网设计和仿真模拟.zip
06-26
咳咳，我设置的应该是免费的，如果系统帮我改了，提醒我下，我去设置成免费
基于eNSP搭建的企业网络搭建以及网络拓扑配置课程设计的方案
10-08
基于eNSP搭建的企业网络拓扑配置课程设计 具体课程要求如下： 设备：自由选择，尽量节省支出 1.实现全网互通（除FTP服务器之外） 2.在每台设备上配置telnet服务，方便远程管理。 3.由于预算有限需要在不更换设备的...
ensp设计校园网
征途是星辰大海
06-01 9081
ensp设计校园网，期末作业，课程设计报告
ensp校园网络毕业设计
VX_BYSJ1992的博客
02-03 2062
ensp校园网络毕业设计是指在校园网络环境下进行的毕业设计项目。ensp是华为公司推出的一种校园网络解决方案，它提供了一套完整的网络设备和管理系统，用于构建高性能、可靠、安全的校园网络。 在ensp校园网络毕业设计中，可以选择不同的主题和方向进行研究和设计。以下是一些可能的ensp校园网络毕业设计方向：
企业/校园网络规划设计 ensp企业校园 网络规划设计 网络工程毕业设计 配好的拓扑+一万字论文
2401_84872013的博客
05-07 2174
企业/校园网络规划设计 ensp企业校园 网络规划设计 网络工程毕业设计 拓扑+一万字论文在网络设计中，详细介绍了网络拓扑结构、VLAN划分、IP分配、扩展访问、NAT配置。最后通过相关软件对网络进行管理以及实现网络的安全性。关键词：公司网。

“相关推荐”对你有帮助么？

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论 4
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值