ensp期末课程设计-项目一

1.按照拓扑图配置好所有设备的IP地址

<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]
[Huawei] sysname AR2
[AR2]
[AR2]interface GigabitEthernet0/0/0
[AR2-GigabitEthernet0/0/0]
[AR2-GigabitEthernet0/0/0] ip address 10.1.12.2 255.255.255.0 

<Huawei>sys
[Huawei]
[Huawei] sysname AR3
[AR3]
[AR3] undo info-center enable
[AR3]interface GigabitEthernet0/0/0
[AR3-GigabitEthernet0/0/0]
[AR3-GigabitEthernet0/0/0] ip address 10.1.13.2 255.255.255.0 
[AR3-GigabitEthernet0/0/0]

<Huawei>sys
[Huawei] sysname AR1
[AR1]
[AR1] undo info-center enable
[AR1]interface GigabitEthernet0/0/1
[AR1-GigabitEthernet0/0/1]
[AR1-GigabitEthernet0/0/1] ip address 10.1.12.1 255.255.255.0 
[AR1-GigabitEthernet0/0/1]
[AR1-GigabitEthernet0/0/1]interface GigabitEthernet0/0/2
[AR1-GigabitEthernet0/0/2]
[AR1-GigabitEthernet0/0/2] ip address 10.1.13.1 255.255.255.0 
[AR1-GigabitEthernet0/0/2]

<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]
[Huawei] sysname AR4
[AR4]
[AR4] undo info-center enable
[AR4]interface Serial1/0/0
[AR4-Serial1/0/0]
[AR4-Serial1/0/0] ip address 21.1.1.2 255.255.255.0 
[AR4-Serial1/0/0]
[AR4-Serial1/0/0]interface GigabitEthernet0/0/0
[AR4-GigabitEthernet0/0/0]
[AR4-GigabitEthernet0/0/0] ip address 12.1.1.2 255.255.255.0 
[AR4-GigabitEthernet0/0/0]

<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]
[Huawei] sysname AR5
[AR5]
[AR5] undo info-center enable
Info: Information center is disabled.
[AR5]interface GigabitEthernet0/0/0
[AR5-GigabitEthernet0/0/0]
[AR5-GigabitEthernet0/0/0] ip address 192.168.50.1 255.255.255.0 
[AR5-GigabitEthernet0/0/0]

2.公司内部业务网段为VLAN10-40,把PC机加入所属的VLAN

<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname SW1
[SW1]undo info-center enable
Info: Information center is disabled.
[SW1]vlan batch 10 20
Info: This operation may take a few seconds. Please wait for a moment...done.
[SW1]interface GigabitEthernet0/0/2
[SW1-GigabitEthernet0/0/2] port link-type access
[SW1-GigabitEthernet0/0/2] port default vlan 10
[SW1-GigabitEthernet0/0/2]
[SW1-GigabitEthernet0/0/2]interface GigabitEthernet0/0/3
[SW1-GigabitEthernet0/0/3] port link-type access
[SW1-GigabitEthernet0/0/3] port default vlan 20
[SW1-GigabitEthernet0/0/3] 
[SW1-GigabitEthernet0/0/3]interface GigabitEthernet0/0/1
[SW1-GigabitEthernet0/0/1] port link-type trunk
[SW1-GigabitEthernet0/0/1] port trunk allow-pass vlan 10 20 


<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname SW2
[SW2]undo info-center enable
Info: Information center is disabled.
[SW2]vlan batch 30 40
Info: This operation may take a few seconds. Please wait for a moment...done.
[SW2]interface GigabitEthernet0/0/3
[SW2-GigabitEthernet0/0/3] port link-type access
[SW2-GigabitEthernet0/0/3] port default vlan 30
[SW2-GigabitEthernet0/0/3]
[SW2-GigabitEthernet0/0/3]interface GigabitEthernet0/0/4
[SW2-GigabitEthernet0/0/4] port link-type access
[SW2-GigabitEthernet0/0/4] port default vlan 40
[SW2-GigabitEthernet0/0/4] 
[SW2-GigabitEthernet0/0/4]interface GigabitEthernet0/0/1
[SW2-GigabitEthernet0/0/1] port link-type trunk
[SW2-GigabitEthernet0/0/1] port trunk allow-pass vlan 30 40
[SW2-GigabitEthernet0/0/1]
[SW2-GigabitEthernet0/0/1]interface GigabitEthernet0/0/2
[SW2-GigabitEthernet0/0/2] port link-type trunk
[SW2-GigabitEthernet0/0/2] port trunk allow-pass vlan 30 40

<Huawei>SYS
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname SW3
[SW3]undo info-center enable
Info: Information center is disabled.
[SW3]vlan batch 30 40
Info: This operation may take a few seconds. Please wait for a moment...done.
[SW3]interface GigabitEthernet0/0/2
[SW3-GigabitEthernet0/0/2] port link-type access
[SW3-GigabitEthernet0/0/2] port default vlan 30
[SW3-GigabitEthernet0/0/2] 
[SW3-GigabitEthernet0/0/2]interface GigabitEthernet0/0/1
[SW3-GigabitEthernet0/0/1] port link-type trunk
[SW3-GigabitEthernet0/0/1] port trunk allow-pass vlan 30 40

3.在R2 R3上配置单臂路由，保证VLAN10与VLAN20之间\LAN30与VLAN40之间可以互相通信

[AR2]interface GigabitEthernet0/0/1.10
[AR2-GigabitEthernet0/0/1.10]
[AR2-GigabitEthernet0/0/1.10] dot1q termination vid 10
[AR2-GigabitEthernet0/0/1.10]
[AR2-GigabitEthernet0/0/1.10] ip address 192.168.10.1 255.255.255.0 
[AR2-GigabitEthernet0/0/1.10]
[AR2-GigabitEthernet0/0/1.10] arp broadcast enable
[AR2-GigabitEthernet0/0/1.10]
[AR2-GigabitEthernet0/0/1.10]interface GigabitEthernet0/0/1.20
[AR2-GigabitEthernet0/0/1.20]
[AR2-GigabitEthernet0/0/1.20] dot1q termination vid 20
[AR2-GigabitEthernet0/0/1.20]
[AR2-GigabitEthernet0/0/1.20] ip address 192.168.20.1 255.255.255.0 
[AR2-GigabitEthernet0/0/1.20]
[AR2-GigabitEthernet0/0/1.20] arp broadcast enable
[AR2-GigabitEthernet0/0/1.20]

[AR3]interface GigabitEthernet0/0/1.30
[AR3-GigabitEthernet0/0/1.30]
[AR3-GigabitEthernet0/0/1.30] dot1q termination vid 30
[AR3-GigabitEthernet0/0/1.30]
[AR3-GigabitEthernet0/0/1.30] ip address 192.168.30.1 255.255.255.0 
[AR3-GigabitEthernet0/0/1.30]
[AR3-GigabitEthernet0/0/1.30] arp broadcast enable
[AR3-GigabitEthernet0/0/1.30]
[AR3-GigabitEthernet0/0/1.30]interface GigabitEthernet0/0/1.40
[AR3-GigabitEthernet0/0/1.40]
[AR3-GigabitEthernet0/0/1.40] dot1q termination vid 40
[AR3-GigabitEthernet0/0/1.40]
[AR3-GigabitEthernet0/0/1.40] ip address 192.168.40.1 255.255.255.0 
[AR3-GigabitEthernet0/0/1.40]
[AR3-GigabitEthernet0/0/1.40] arp broadcast enable
[AR3-GigabitEthernet0/0/1.40]

4.在所有交换机之间配置Trunk,允许相关的流量可以通过。

5.内网配置0SPF实现内网全网互通

[AR2]ospf 100 
[AR2-ospf-100]
[AR2-ospf-100] area 0.0.0.0 
[AR2-ospf-100-area-0.0.0.0]
[AR2-ospf-100-area-0.0.0.0]  network 10.1.12.0 0.0.0.255 
[AR2-ospf-100-area-0.0.0.0]
[AR2-ospf-100-area-0.0.0.0]  network 192.168.10.0 0.0.0.255 
[AR2-ospf-100-area-0.0.0.0]
[AR2-ospf-100-area-0.0.0.0]  network 192.168.20.0 0.0.0.255 
[AR2-ospf-100-area-0.0.0.0]

[AR3]ospf 100 
[AR3-ospf-100]
[AR3-ospf-100] area 0.0.0.0 
[AR3-ospf-100-area-0.0.0.0]
[AR3-ospf-100-area-0.0.0.0]  network 10.1.13.0 0.0.0.255 
[AR3-ospf-100-area-0.0.0.0]
[AR3-ospf-100-area-0.0.0.0]  network 192.168.30.0 0.0.0.255 
[AR3-ospf-100-area-0.0.0.0]
[AR3-ospf-100-area-0.0.0.0]  network 192.168.40.0 0.0.0.255 
[AR3-ospf-100-area-0.0.0.0]

[AR1]ospf 100 
[AR1-ospf-100]
[AR1-ospf-100] default-route-advertise
[AR1-ospf-100]
[AR1-ospf-100] area 0.0.0.0 
[AR1-ospf-100-area-0.0.0.0]
[AR1-ospf-100-area-0.0.0.0]  network 10.1.12.0 0.0.0.255 
[AR1-ospf-100-area-0.0.0.0]
[AR1-ospf-100-area-0.0.0.0]  network 10.1.13.0 0.0.0.255 

6.R1上配置静态路由通过以太口转发数据，串行链路作为备份离有使用

[AR1]ip route-static 0.0.0.0 0.0.0.0 12.1.1.2
[AR1]
[AR1]ip route-static 0.0.0.0 0.0.0.0 21.1.1.2 preference 70

7.配置Easy IP，只有内部VLAN 10和VLAN 20可以访问互联网

[AR1]acl number 2000  
[AR1-acl-basic-2000]
[AR1-acl-basic-2000] rule 5 permit source 192.168.10.0 0.0.0.255 
[AR1-acl-basic-2000]
[AR1-acl-basic-2000] rule 10 permit source 192.168.20.0 0.0.0.255 
[AR1-acl-basic-2000]
[AR1-acl-basic-2000]interface Serial1/0/0
[AR1-Serial1/0/0]
[AR1-Serial1/0/0] nat outbound 2000
[AR1-Serial1/0/0]
[AR1-Serial1/0/0]interface GigabitEthernet0/0/0
[AR1-GigabitEthernet0/0/0]
[AR1-GigabitEthernet0/0/0] nat outbound 2000

8.R4与R5直接配置链路聚合

[AR4]interface Eth-Trunk1
[AR4-Eth-Trunk1]
[AR4-Eth-Trunk1] undo portswitch
[AR4-Eth-Trunk1]
[AR4-Eth-Trunk1] ip address 45.1.1.1 255.255.255.0 
[AR4-Eth-Trunk1]
[AR4-Eth-Trunk1] mode lacp-static
[AR4-Eth-Trunk1]interface GigabitEthernet0/0/1
[AR4-GigabitEthernet0/0/1]
[AR4-GigabitEthernet0/0/1] eth-trunk 1
Info: This operation may take a few seconds. Please wait for a moment...done.
[AR4-GigabitEthernet0/0/1]
[AR4-GigabitEthernet0/0/1]interface GigabitEthernet0/0/2
[AR4-GigabitEthernet0/0/2]
[AR4-GigabitEthernet0/0/2] eth-trunk 1
Info: This operation may take a few seconds. Please wait for a moment...done.
[AR4-GigabitEthernet0/0/2]

<AR5>SYS
[AR5]interface Eth-Trunk1
[AR5-Eth-Trunk1]
[AR5-Eth-Trunk1] undo portswitch
[AR5-Eth-Trunk1]
[AR5-Eth-Trunk1] ip address 45.1.1.2 255.255.255.0 
[AR5-Eth-Trunk1]
[AR5-Eth-Trunk1] mode lacp-static
[AR5-Eth-Trunk1]
[AR5-Eth-Trunk1]interface GigabitEthernet0/0/1
[AR5-GigabitEthernet0/0/1]
[AR5-GigabitEthernet0/0/1] eth-trunk 1
Info: This operation may take a few seconds. Please wait for a moment...done.
[AR5-GigabitEthernet0/0/1]
[AR5-GigabitEthernet0/0/1]interface GigabitEthernet0/0/2
[AR5-GigabitEthernet0/0/2]
[AR5-GigabitEthernet0/0/2] eth-trunk 1

9.PC6通过DHCP获取IP地址

interface GigabitEthernet0/0/0
 dhcp select interface