中小型网络拓扑

core1

[core1]dis cu

sysname core1

vlan batch 10 20 30 40 1000

stp instance 1 root primary
stp instance 2 root secondary

cluster enable
ntdp enable
ndp enable

drop illegal-mac alarm

diffserv domain default

stp region-configuration
instance 1 vlan 10 20
instance 2 vlan 30 40
active region-configuration

drop-profile default

vlan 20
description yewu
vlan 30
description yewu2
vlan 40
description wlan

aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password simple admin
local-user admin service-type http

interface Vlanif1

interface Vlanif10
description guanli
ip address 172.16.10.252 255.255.255.0
vrrp vrid 10 virtual-ip 172.16.10.254
vrrp vrid 10 priority 110
vrrp vrid 10 authentication-mode simple cisco

interface Vlanif20
ip address 172.16.20.252 255.255.255.0
vrrp vrid 20 virtual-ip 172.16.20.254
vrrp vrid 20 priority 110
vrrp vrid 20 authentication-mode simple cisco

interface Vlanif30
ip address 172.16.30.252 255.255.255.0
vrrp vrid 30 virtual-ip 172.16.30.254

interface Vlanif40
ip address 172.16.40.252 255.255.255.0
vrrp vrid 40 virtual-ip 172.16.40.254

interface Vlanif1000
ip address 12.12.12.1 255.255.255.0

interface MEth0/0/1

interface Eth-Trunk1
port link-type trunk
port trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/2
port link-type trunk
port trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/3
port link-type trunk
port trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/4

interface GigabitEthernet0/0/5

interface GigabitEthernet0/0/6

interface GigabitEthernet0/0/7

interface GigabitEthernet0/0/8

interface GigabitEthernet0/0/9

interface GigabitEthernet0/0/10

interface GigabitEthernet0/0/11

interface GigabitEthernet0/0/12

interface GigabitEthernet0/0/13

interface GigabitEthernet0/0/14

interface GigabitEthernet0/0/15
eth-trunk 1

interface GigabitEthernet0/0/16
eth-trunk 1

interface GigabitEthernet0/0/17

interface GigabitEthernet0/0/18

interface GigabitEthernet0/0/19

interface GigabitEthernet0/0/20

interface GigabitEthernet0/0/21

interface GigabitEthernet0/0/22

interface GigabitEthernet0/0/23

interface GigabitEthernet0/0/24
port link-type access
port default vlan 1000

interface NULL0

user-interface con 0
user-interface vty 0 4
user privilege level 15
set authentication password simple cisco

return

core2

[core1]dis cu

sysname core2

vlan batch 10 20 30 40 1000

stp instance 2 root primary
stp instance 1 root secondary

cluster enable
ntdp enable
ndp enable

drop illegal-mac alarm

diffserv domain default

stp region-configuration
instance 1 vlan 10 20
instance 2 vlan 30 40
active region-configuration

drop-profile default

vlan 10
description guanli
vlan 20
description yewu
vlan 30
description yewu2
vlan 40
description wlan

aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password simple admin
local-user admin service-type http

interface Vlanif1

interface Vlanif10
description guanli
ip address 172.16.10.253 255.255.255.0
vrrp vrid 10 virtual-ip 172.16.10.254
vrrp vrid 10 authentication-mode simple cisco

interface Vlanif20
ip address 172.16.20.253 255.255.255.0
vrrp vrid 20 virtual-ip 172.16.20.254
vrrp vrid 20 authentication-mode simple cisco

interface Vlanif30
ip address 172.16.30.253 255.255.255.0
vrrp vrid 30 priority 110
vrrp vrid 30 virtual-ip 172.16.30.254

interface Vlanif40
ip address 172.16.40.253 255.255.255.0
vrrp vrid 40 priority 110
vrrp vrid 40 virtual-ip 172.16.40.254

interface Vlanif1000
ip address 13.13.13.1 255.255.255.0

interface MEth0/0/1

interface Eth-Trunk1
port link-type trunk
port trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/2
port link-type trunk
port trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/3
port link-type trunk
port trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/4

interface GigabitEthernet0/0/5

interface GigabitEthernet0/0/6

interface GigabitEthernet0/0/7

interface GigabitEthernet0/0/8

interface GigabitEthernet0/0/9

interface GigabitEthernet0/0/10

interface GigabitEthernet0/0/11

interface GigabitEthernet0/0/12

interface GigabitEthernet0/0/13

interface GigabitEthernet0/0/14

interface GigabitEthernet0/0/15
eth-trunk 1

interface GigabitEthernet0/0/16
eth-trunk 1

interface GigabitEthernet0/0/17

interface GigabitEthernet0/0/18

interface GigabitEthernet0/0/19

interface GigabitEthernet0/0/20

interface GigabitEthernet0/0/21

interface GigabitEthernet0/0/22

interface GigabitEthernet0/0/23

interface GigabitEthernet0/0/24
port link-type access
port default vlan 1000

interface NULL0

user-interface con 0
user-interface vty 0 4
user privilege level 15
set authentication password simple cisco

return

ac-wlan

[ac_wlan-wlan-view]dis cu

sysname ac_wlan

vlan batch 10 40

interface Vlanif10
ip address 172.16.10.10 255.255.255.0

interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 2 to 4094

ip route-static 0.0.0.0 0.0.0.0 172.16.10.254

capwap source interface vlanif10 //影响AP自动上线

wlan
ac sysnetid 1

ssid-profile name wlan-net
ssid passwd
vap-profile name wlan-net
service-vlan vlan-id 10
ssid-profile wlan-net
security-profile wlan-net

rrm-profile name default
calibrate auto-channel-select disable
calibrate auto-txpower-select disable
ap auth-mode no-auth
ap-group name default
radio 0
vap-profile wlan-net wlan 1
radio 1
vap-profile wlan-net wlan 1
ap-id 0 type-id 69 ap-mac 00e0-fc00-0b80 ap-sn 210235448310793D3169
radio 0
channel 20mhz 6
eirp 127
radio 1
channel 20mhz 149
eirp 127
ap-id 1 type-id 69 ap-mac 00e0-fc94-65f0 ap-sn 210235448310CE5B2806
provision-ap
[ac_wlan-wlan-view]

test

中小型网络拓扑配置点啥？后期会以上图配置以下技术点！
1、VRRP
2、链路聚合
3、FW1\fw2 HA
4、ospf
5、nat
6、映射内部服务器
7、ipse ***与分布互通
8、wlan覆盖
9、DHCP
10、BFD
11、vlan

本来想搞完第一次发那个图（下图）融入上面的全部技术，但是一万个草拟吗做了两次模拟器挂了不搞。就这么多吧！！！！！！

转载于:https://blog.51cto.com/9616635/2066926