ensp-三层网络架构实验

实验拓扑:

实验要求:
① 用户的网关配置在核心交换机
② 企业内网划分多个vlan ，减少广播域大小，提高网络稳定性
SW4:

[SW4]int e0/0/2
[SW4-Ethernet0/0/2]port link-type access 
[SW4-Ethernet0/0/2]port default vlan 10
[SW4]int gi0/0/1
[SW4-GigabitEthernet0/0/1]port link-type trunk 
[SW4-GigabitEthernet0/0/1]port trunk allow-pass vlan 10 999

汇聚SW2:

[SW2]vlan batch 10 20 999
Info: This operation may take a few seconds. Please wait for a moment...done.
[SW2]port-g g gi0/0/1 to gi0/0/2 e0/0/1
[SW2-port-group]port link-type trunk 
[SW2-GigabitEthernet0/0/1]port link-type trunk 
[SW2-GigabitEthernet0/0/2]port link-type trunk 
[SW2-Ethernet0/0/1]port link-type trunk 
[SW2-port-group]port trunk allow-pass vlan 10 20 999
[SW2-GigabitEthernet0/0/1]port trunk allow-pass vlan 10 20 999
[SW2-GigabitEthernet0/0/2]port trunk allow-pass vlan 10 20 999
[SW2-Ethernet0/0/1]port trunk allow-pass vlan 10 20 999

核心SW1：

[SW1]int gi0/0/1
[SW1-GigabitEthernet0/0/1]port link-type trunk 
[SW1-GigabitEthernet0/0/1]port trunk allow-pass vlan 10 20 999
[SW1-GigabitEthernet0/0/1]int gi0/0/2
[SW1-GigabitEthernet0/0/2]port link-type trunk 
[SW1-GigabitEthernet0/0/2]port trunk allow-pass vlan 200 999
[SW1-GigabitEthernet0/0/2]qu
[SW1]interface Vlanif 10
[SW1-Vlanif10]ip address 192.168.10.1 24
[SW1-Vlanif10]qu
[SW1]int Vlanif 20
[SW1-Vlanif20]ip address 192.168.20.1 24
[SW1-Vlanif20]qu
[SW1]int Vlanif 200
[SW1-Vlanif200]ip address 192.168.200.1 24

SW5:

[Huawei]int e0/0/2
[Huawei-Ethernet0/0/2]port link-type access 
[Huawei-Ethernet0/0/2]int e0/0/1
[Huawei-Ethernet0/0/1]port link-type trunk 
[Huawei-Ethernet0/0/1]port trunk allow-pass vlan 20

③ 所有设备，在任何位置都可以被telnet远程管理 所有设备
以SW4为例:

[SW4]vlan 999
[SW4-vlan999]qu
[SW4]interface Vlanif 999
[SW4-Vlanif999]ip address 192.168.255.4 24
[SW4-Vlanif999]qu
[SW4]aaa
[SW4-aaa]local-user hcnp password cipher hcnp123 privilege level 3
Info: Add a new user.
[SW4-aaa]qu
[SW4]user-interface vty 0 4
[SW4-ui-vty0-4]authentication-mode aaa

④ 出口配置NAT 先配置三层接口

⑤ 所有用户均为自动获取ip地址

[SW1]ip pool vlan_10
Info:It's successful to create an IP address pool.
[SW1-ip-pool-vlan_10]gateway-list 192.168.10.1
[SW1-ip-pool-vlan_10]network 192.168.10.0 mask 24
[SW1-ip-pool-vlan_10]dns-list 8.8.8.8
[SW1-ip-pool-vlan_10]qu
[SW1]ip pool vlan_20
Info:It's successful to create an IP address pool.
[SW1-ip-pool-vlan_20]network 192.168.20.1 mask 24
[SW1-ip-pool-vlan_20]dns-list 8.8.8.8
[SW1-ip-pool-vlan_20]qu
[SW1]interface Vlanif 10
[SW1]dhcp enable 
Info: The operation may take a few seconds. Please wait for a moment.done.
[SW1]interface Vlanif 10
[SW1-Vlanif10]dhcp select global
[SW1-Vlanif10]qu
[SW1]interface Vlanif 20
[SW1-Vlanif20]dhcp select global 

⑥ 企业总部和分支采用PPP 广域网链路连接。并采用CHAP对链路做认证。 接口使用s4/0/0

⑦ 企业总部和分支采用ospf 路由协议连接。
sw1：

R1：出口

R2：
由于配置命令太多,本篇文章只是列出了部分配置命令,其他的请自动探索