2021-04-25

r1

snmp-agent local-engineid 800007DB03000000000000
snmp-agent

clock timezone China-Standard-Time minus 08:00:00

portal local-server load portalpage.zip

drop illegal-mac alarm

set cpu-usage threshold 80 restore 75

dhcp enable

ip pool vlan11
gateway-list 192.168.11.254
network 192.168.11.0 mask 255.255.255.0
excluded-ip-address 192.168.11.251 192.168.11.252

ip pool vlan12
gateway-list 192.168.12.254
network 192.168.12.0 mask 255.255.255.0
excluded-ip-address 192.168.12.251 192.168.12.252

ip pool vlan13
gateway-list 192.168.13.254
network 192.168.13.0 mask 255.255.255.0
excluded-ip-address 192.168.13.251 192.168.13.252

ip pool vlan14
gateway-list 192.168.14.254
network 192.168.14.0 mask 255.255.255.0
excluded-ip-address 192.168.14.251 192.168.14.252

aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher % % K8m.Nt84DZ}e#<0`8bmE3Uw}% %
local-user admin service-type http

firewall zone Local
priority 15

interface GigabitEthernet0/0/0
ip address 192.168.20.2 255.255.255.0
dhcp select relay
dhcp select global

interface GigabitEthernet0/0/1

interface GigabitEthernet0/0/2

interface NULL0

ip route-static 192.168.0.0 255.255.0.0 192.168.20.1

user-interface con 0
authentication-mode password
user-interface vty 0 4
user-interface vty 16 20

---

r2

snmp-agent local-engineid 800007DB03000000000000
snmp-agent

clock timezone China-Standard-Time minus 08:00:00

portal local-server load portalpage.zip

drop illegal-mac alarm

set cpu-usage threshold 80 restore 75

dhcp enable

ip pool vlan11
gateway-list 192.168.11.254
network 192.168.11.0 mask 255.255.255.0
excluded-ip-address 192.168.11.251 192.168.11.252

ip pool vlan12
gateway-list 192.168.12.254
network 192.168.12.0 mask 255.255.255.0
excluded-ip-address 192.168.12.251 192.168.12.252

ip pool vlan13
gateway-list 192.168.13.254
network 192.168.13.0 mask 255.255.255.0
excluded-ip-address 192.168.13.251 192.168.13.252

ip pool vlan14
gateway-list 192.168.14.254
network 192.168.14.0 mask 255.255.255.0
excluded-ip-address 192.168.14.251 192.168.14.252

aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher % % K8m.Nt84DZ}e#<0`8bmE3Uw}% %
local-user admin service-type http

firewall zone Local
priority 15

interface GigabitEthernet0/0/0
ip address 192.168.21.2 255.255.255.0
dhcp select global

interface GigabitEthernet0/0/1

interface GigabitEthernet0/0/2

interface NULL0

ip route-static 192.168.0.0 255.255.0.0 192.168.21.1

user-interface con 0
authentication-mode password
user-interface vty 0 4
user-interface vty 16 20

wlan ac

---

r3

snmp-agent local-engineid 800007DB03000000000000
snmp-agent

clock timezone China-Standard-Time minus 08:00:00

portal local-server load portalpage.zip

drop illegal-mac alarm

set cpu-usage threshold 80 restore 75

acl number 2000
rule 10 deny source 192.168.13.0 0.0.0.255
rule 20 permit

aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher % % K8m.Nt84DZ}e#<0`8bmE3Uw}% %
local-user admin service-type http

firewall zone Local
priority 15

interface GigabitEthernet0/0/0
ip address 200.1.1.100 255.255.255.0
nat outbound 2000

interface GigabitEthernet0/0/1
ip address 192.168.30.1 255.255.255.0

interface GigabitEthernet0/0/2
ip address 192.168.31.1 255.255.255.0

interface NULL0

ospf 1 router-id 4.4.4.4
area 0.0.0.0
network 192.168.30.0 0.0.0.255
network 192.168.31.0 0.0.0.255
area 0.0.0.3
network 200.1.1.0 0.0.0.255
stub no-summary

ip route-static 0.0.0.0 0.0.0.0 200.1.1.1

user-interface con 0
authentication-mode password
user-interface vty 0 4
user-interface vty 16 20

wlan ac

---

r4

snmp-agent local-engineid 800007DB03000000000000
snmp-agent

clock timezone China-Standard-Time minus 08:00:00

portal local-server load portalpage.zip

drop illegal-mac alarm

set cpu-usage threshold 80 restore 75

aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher % % K8m.Nt84DZ}e#<0`8bmE3Uw}% %
local-user admin service-type http

firewall zone Local
priority 15

interface GigabitEthernet0/0/0
ip address 200.1.1.1 255.255.255.0

interface GigabitEthernet0/0/1

interface GigabitEthernet0/0/2

interface NULL0

user-interface con 0
authentication-mode password
user-interface vty 0 4
user-interface vty 16 20

wlan ac

---

sw1

sysname Huawei

vlan batch 11 to 14

cluster enable
ntdp enable
ndp enable

drop illegal-mac alarm

diffserv domain default

stp region-configuration
region-name dhcp
instance 1 vlan 11
instance 2 vlan 12
instance 3 vlan 13
instance 4 vlan 14
active region-configuration

drop-profile default

aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password simple admin
local-user admin service-type http

interface Vlanif1

interface MEth0/0/1

interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/2
port link-type access
port default vlan 11

interface GigabitEthernet0/0/3
port link-type access
port default vlan 11

interface GigabitEthernet0/0/10
port link-type trunk
port trunk allow-pass vlan 2 to 4094

user-interface con 0
user-interface vty 0 4

---

sw2

sysname Huawei

vlan batch 11 to 14

cluster enable
ntdp enable
ndp enable

drop illegal-mac alarm

diffserv domain default

stp region-configuration
region-name dhcp
instance 1 vlan 11
instance 2 vlan 12
instance 3 vlan 13
instance 4 vlan 14
active region-configuration

drop-profile default

aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password simple admin
local-user admin service-type http

interface Vlanif1

interface MEth0/0/1

interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/2
port link-type access
port default vlan 12

interface GigabitEthernet0/0/3
port link-type access
port default vlan 12

interface GigabitEthernet0/0/10
port link-type trunk
port trunk allow-pass vlan 2 to 4094

user-interface con 0
user-interface vty 0 4

---

sw3

sysname Huawei

vlan batch 11 to 14

cluster enable
ntdp enable
ndp enable

drop illegal-mac alarm

diffserv domain default

stp region-configuration
region-name dhcp
instance 1 vlan 11
instance 2 vlan 12
instance 3 vlan 13
instance 4 vlan 14
active region-configuration

drop-profile default

aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password simple admin
local-user admin service-type http

interface Vlanif1

interface MEth0/0/1

interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/2
port link-type access
port default vlan 13

interface GigabitEthernet0/0/3
port link-type access
port default vlan 13

interface GigabitEthernet0/0/10
port link-type trunk
port trunk allow-pass vlan 2 to 4094

user-interface con 0
user-interface vty 0 4

---

sw4

sysname Huawei

vlan batch 11 to 14

cluster enable
ntdp enable
ndp enable

drop illegal-mac alarm

diffserv domain default

stp region-configuration
region-name dhcp
instance 1 vlan 11
instance 2 vlan 12
instance 3 vlan 13
instance 4 vlan 14
active region-configuration

drop-profile default

aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password simple admin
local-user admin service-type http

interface Vlanif1

interface MEth0/0/1

interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/2
port link-type access
port default vlan 14

interface GigabitEthernet0/0/3
port link-type access
port default vlan 14

interface GigabitEthernet0/0/10
port link-type trunk
port trunk allow-pass vlan 2 to 4094

user-interface con 0
user-interface vty 0 4

---

sw5

sysname Huawei

vlan batch 11 to 14 20 30

stp instance 1 priority 0
stp instance 2 priority 0
stp instance 3 priority 8192
stp instance 4 priority 8192

cluster enable
ntdp enable
ndp enable

drop illegal-mac alarm

dhcp enable

diffserv domain default

stp region-configuration
region-name dhcp
instance 1 vlan 11
instance 2 vlan 12
instance 3 vlan 13
instance 4 vlan 14
active region-configuration

drop-profile default

aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password simple admin
local-user admin service-type http

interface Vlanif1

interface Vlanif11
ip address 192.168.11.251 255.255.255.0
vrrp vrid 11 virtual-ip 192.168.11.254
vrrp vrid 11 priority 200
dhcp select relay
dhcp relay server-ip 192.168.20.2
dhcp relay server-ip 192.168.21.2

interface Vlanif12
ip address 192.168.12.251 255.255.255.0
vrrp vrid 12 virtual-ip 192.168.12.254
vrrp vrid 12 priority 200
dhcp select relay
dhcp relay server-ip 192.168.20.2
dhcp relay server-ip 192.168.21.2

interface Vlanif13
ip address 192.168.13.251 255.255.255.0
vrrp vrid 13 virtual-ip 192.168.13.254
dhcp select relay
dhcp relay server-ip 192.168.20.2
dhcp relay server-ip 192.168.21.2

interface Vlanif14
ip address 192.168.14.251 255.255.255.0
vrrp vrid 14 virtual-ip 192.168.14.254
dhcp select relay
dhcp relay server-ip 192.168.20.2
dhcp relay server-ip 192.168.21.2

interface Vlanif20
ip address 192.168.20.1 255.255.255.0

interface Vlanif30
ip address 192.168.30.2 255.255.255.0

interface MEth0/0/1

interface GigabitEthernet0/0/1
port link-type access
port default vlan 20

interface GigabitEthernet0/0/2
port link-type trunk
port trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/3
port link-type trunk
port trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/4
port link-type trunk
port trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/5
port link-type trunk
port trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/6
port link-type access
port default vlan 30

interface GigabitEthernet0/0/24
port link-type trunk
port trunk allow-pass vlan 2 to 4094

interface NULL0

ospf 1 router-id 2.2.2.2
import-route direct
area 0.0.0.0
network 192.168.30.0 0.0.0.255
area 0.0.0.1
network 192.168.11.0 0.0.0.255
network 192.168.12.0 0.0.0.255
network 192.168.13.0 0.0.0.255
network 192.168.14.0 0.0.0.255

user-interface con 0
user-interface vty 0 4

---

sw6

sysname Huawei

vlan batch 11 to 14 21 30 to 31

stp instance 1 priority 8192
stp instance 2 priority 8192
stp instance 3 priority 0
stp instance 4 priority 0

cluster enable
ntdp enable
ndp enable

drop illegal-mac alarm

dhcp enable

diffserv domain default

stp region-configuration
region-name dhcp
instance 1 vlan 11
instance 2 vlan 12
instance 3 vlan 13
instance 4 vlan 14
active region-configuration

drop-profile default

aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password simple admin
local-user admin service-type http

interface Vlanif1

interface Vlanif11
ip address 192.168.11.252 255.255.255.0
vrrp vrid 11 virtual-ip 192.168.11.254
dhcp select relay
dhcp relay server-ip 192.168.20.2
dhcp relay server-ip 192.168.21.2

interface Vlanif12
ip address 192.168.12.252 255.255.255.0
vrrp vrid 12 virtual-ip 192.168.12.254
dhcp select relay
dhcp relay server-ip 192.168.20.2
dhcp relay server-ip 192.168.21.2

interface Vlanif13
ip address 192.168.13.252 255.255.255.0
vrrp vrid 13 virtual-ip 192.168.13.254
vrrp vrid 13 priority 200
dhcp select relay
dhcp relay server-ip 192.168.20.2
dhcp relay server-ip 192.168.21.2

interface Vlanif14
ip address 192.168.14.252 255.255.255.0
vrrp vrid 14 virtual-ip 192.168.14.254
vrrp vrid 14 priority 200
dhcp select relay
dhcp relay server-ip 192.168.20.2
dhcp relay server-ip 192.168.21.2

interface Vlanif21
ip address 192.168.21.1 255.255.255.0

interface Vlanif31
ip address 192.168.31.2 255.255.255.0

interface MEth0/0/1

interface GigabitEthernet0/0/1
port link-type access
port default vlan 21

interface GigabitEthernet0/0/2
port link-type trunk
port trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/3
port link-type trunk
port trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/4
port link-type trunk
port trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/5
port link-type trunk
port trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/6
port link-type access
port default vlan 31

interface GigabitEthernet0/0/24
port link-type trunk
port trunk allow-pass vlan 2 to 4094

interface NULL0

ospf 1 router-id 3.3.3.3
area 0.0.0.0
network 192.168.31.0 0.0.0.255
area 0.0.0.2
network 192.168.11.0 0.0.0.255
network 192.168.12.0 0.0.0.255
network 192.168.13.0 0.0.0.255
network 192.168.14.0 0.0.0.255

user-interface con 0
user-interface vty 0 4