设备连接表
设备对应表
vlan及地址规划表
生产区配置:
1、创建vlan
[A-1]vlan batch 21 22 100
[A-2]vlan batch 21 22 100
[A-3]vlan batch 21 22 100
[D-1]vlan batch 21 22 100 1102 1104 1109
[D-2]vlan batch 21 22 100 1102 1105 1110
2、配置干道IP
[A-1]int g 0/0/23
[A-1-GigabitEthernet0/0/23]port link-type trunk
[A-1-GigabitEthernet0/0/23]port trunk allow-pass vlan 21 22 23 100
[A-1-GigabitEthernet0/0/23]int g 0/0/24
[A-1-GigabitEthernet0/0/24]p l t
[A-1-GigabitEthernet0/0/24]p t a v 21 22 23 100
[A-1]port-group group-member GigabitEthernet 0/0/1 to GigabitEthernet 0/0/22
[A-1-port-group]port link-type access
[A-1-port-group]port default vlan 21
[A-2]int g 0/0/23
[A-2-GigabitEthernet0/0/23]p l t
[A-2-GigabitEthernet0/0/23]p t a v 21 22 23 100
[A-2-GigabitEthernet0/0/23]int g 0/0/24
[A-2-GigabitEthernet0/0/24]p l t
[A-2-GigabitEthernet0/0/24]p t a v 21 22 23 100
[A-2]port-group group-member g 0/0/1 to g 0/0/22
[A-2-port-group]p l a
[A-2-port-group]port default vlan 22
[A-3]int g 0/0/23
[A-3-GigabitEthernet0/0/23]p l t
[A-3-GigabitEthernet0/0/23]p t a v 21 22 23 100
[A-3]port-group group-member g 0/0/1 to g 0/0/22
[A-3-port-group]p l a
[A-3-port-group]port default vlan 23
[A-1]int vlanif 100
[A-1-Vlanif255]ip add 10.1.100.10 24
[A-2]int vlanif 100
[A-2-Vlanif100]ip add 10.1.100.11 24
[A-3]int vlanif 100
[A-3-Vlanif100]ip add 10.1.100.12 24
[D-1]int v 21
[D-1-Vlanif21]ip add 10.1.21.1 24
[D-1-Vlanif21]int v 22
[D-1-Vlanif22]ip add 10.1.22.1 24
[D-1-Vlanif22]int v 23
[D-1-Vlanif23]ip add 10.1.23.1 24
[D-1-Vlanif23]int v 100
[D-1-Vlanif100]ip add 10.1.100.6 24
[D-1-Vlanif100]int v 1102
[D-1-Vlanif1102]ip add 10.1.0.5 30
[D-1-Vlanif1102]int v 1104
[D-1-Vlanif1104]ip add 10.1.0.14 30
[D-1-Vlanif1104]int v 1109
[D-1-Vlanif1109]ip add 10.1.0.34 30
[D-2]int v 21
[D-2-Vlanif21]ip add 10.1.21.2 24
[D-2-Vlanif21]int v 22
[D-2-Vlanif22]ip add 10.1.22.2 24
[D-2-Vlanif22]int v 23
[D-2-Vlanif23]ip add 10.1.23.2 24
[D-2-Vlanif23]int v 100
[D-2-Vlanif100]ip add 10.1.100.7 24
[D-2-Vlanif255]int v 1102
[D-2-Vlanif1102]ip add 10.1.0.6 30
[D-2-Vlanif1102]int v 1105
[D-2-Vlanif1105]ip add 10.1.0.18 30
[D-2-Vlanif1105]int v 1110
[D-2-Vlanif1110]ip add 10.1.0.38 30
3、MSTP生成树
[D-1]stp mode mstp
[D-1]stp enable
[D-1]stp region-configuration
[D-1-mst-region]region-name SC
[D-1-mst-region]instance 1 vlan 21 22
[D-1-mst-region]instance 2 vlan 23
[D-1-mst-region]active region-configuration
[D-1]stp instance 1 root primary [D-1]stp instance 0 root primary
[D-1]stp instance 2 root secondary
[D-2]stp mode mstp
[D-2]stp enable
[D-2]stp region-configuration
[D-2-mst-region]region-name SC
[D-2-mst-region]instance 1 vlan 21 22
[D-2-mst-region]instance 2 vlan 23
[D-2-mst-region]active region-configuration
[D-2]stp instance 2 root primary
[D-2]stp instance 1 root secondary [D-2]stp instance 0 root secondary
[A-1]stp mode mstp
[A-1]stp enable
[A-1]stp region-configuration
[A-1-mst-region]region-name SC
[A-1-mst-region]instance 1 vlan 21 22
[A-1-mst-region]instance 2 vlan 23
[A-1-mst-region]active region-configuration
[A-2]stp mode mstp
[A-2]stp enable
[A-2]stp region-configuration
[A-2-mst-region]region-name SC
[A-2-mst-region]instance 1 v 21 22
[A-2-mst-region]instance 2 v 23
[A-2-mst-region]active region-configuration
[A-3]stp mode mstp
[A-3]stp enable
[A-3]stp region-configuration
[A-3-mst-region]region-name SC
[A-3-mst-region]instance 1 v 21 22
[A-3-mst-region]instance 2 v 23
[A-3-mst-region]active region-configuration
[A-1]stp bpdu-protection
[A-1]port-group group-member g 0/0/1 t g 0/0/22
[A-1-port-group]stp edged-port enable
[A-2]stp bpdu-protection
[A-2]port-g group-member g 0/0/1 t g 0/0/22
[A-2-port-group]stp edged-port enable
[A-3]stp bpdu-protection
[A-3]port-g group-member g 0/0/1 t g 0/0/22
[A-3-port-group]stp edged-port enable
4、VRRP 21 22 23
[D-1]int v 21
[D-1-Vlanif21]vrrp vrid 1 virtual-ip 10.1.100.254
[D-1-Vlanif21]vrrp vrid 1 priority 120
[D-1-Vlanif21]vrrp vrid 1 preempt-mode timer delay 20
[D-1-Vlanif21]vrrp vrid 1 track interface vlanif 1104 reduced 30
[D-1-Vlanif21]vrrp vrid 1 track interface vlanif 1109 reduced 30
[D-1]int v 22
[D-1-Vlanif22]vrrp vrid 1 virtual-ip 10.1.110.254
[D-1-Vlanif22]vrrp vrid 1 priority 120
[D-1-Vlanif22]vrrp vrid 1 preempt-mode timer delay 20
[D-1-Vlanif22]vrrp vrid 1 track interface vlanif 1104 reduced 30
[D-1-Vlanif22]vrrp vrid 1 track interface vlanif 1109 reduced 30
[D-1]int v 23
[D-1-Vlanif23]vrrp vrid 1 virtual-ip 10.1.120.254
[D-2]int v 21
[D-2-Vlanif21]vrrp vrid 1 virtual-ip 10.1.100.254
[D-2-Vlanif21]int v 110
[D-2-Vlanif22]vrrp vrid 1 virtual-ip 10.1.110.254
[D-2-Vlanif22]int v 120
[D-2-Vlanif23]vrrp vrid 1 virtual-ip 10.1.120.254
[D-2-Vlanif23]vrrp vrid 1 priority 120
[D-2-Vlanif23]vrrp vrid 1 preempt-mode timer delay 20
[D-2-Vlanif23]vrrp vrid 1 track interface vlanif 1105 reduced 30
[D-2-Vlanif23]vrrp vrid 1 track interface vlanif 1110 reduced 30
办公区配置
1、创建VLAN
[D-5]vlan batch 11 12 13 14 15 16 100 1103 1107 1111
[D-6]vlan batch 11 12 13 14 15 16 100 1103 1108 1112
[A-4]vlan batch 11 12 13 14 15 16 100
[A-5]vlan batch 11 12 13 14 15 16 100
配置干道IP
[A-4]int g 0/0/23
[A-4-GigabitEthernet0/0/23]p l t
[A-4-GigabitEthernet0/0/23]p t a v 11 12 13 14 15 16 100
[A-4-GigabitEthernet0/0/23]int g 0/0/24
[A-4-GigabitEthernet0/0/24]p l t
[A-4-GigabitEthernet0/0/24]p t a v 11 12 13 14 15 16 100
[A-4-GigabitEthernet0/0/24]port-group group-member g 0/0/1 t g 0/0/22
[A-4-port-group]p l a
[A-4-port-group]p d v 11
[A-4]int v 100
[A-4-Vlanif255]ip add 10.1.100.13 24
[A-5]int g 0/0/23
[A-5-GigabitEthernet0/0/23]p l t
[A-5-GigabitEthernet0/0/23]p t a v 11 12 13 14 15 16 100
[A-5-GigabitEthernet0/0/23]int g 0/0/24
[A-5-GigabitEthernet0/0/24]p l t
[A-5-GigabitEthernet0/0/24]p t a v 11 12 13 14 15 16 100
[A-5-GigabitEthernet0/0/24]q
[A-5]port-group group-member g 0/0/1 t g 0/0/22
[A-5-port-group]p l a
[A-5-port-group]p d v 14
[A-5]int v 100
[A-5-Vlanif255]ip add 10.1.100.14 24
[D-5]int Eth-Trunk 0
[D-5-Eth-Trunk0]trunkport g 0/0/1 t 0/0/2
[D-5-Eth-Trunk0]p l t
[D-5-Eth-Trunk0]p t a v 11 12 13 14 15 16 100 1103
[D-5-Eth-Trunk0]q
[D-5]int g 0/0/3
[D-5-GigabitEthernet0/0/3]p l t
[D-5-GigabitEthernet0/0/3]p t a v 11 12 13 14 15 16 100
[D-5-GigabitEthernet0/0/3]int g 0/0/4
[D-5-GigabitEthernet0/0/4]p l t
[D-5-GigabitEthernet0/0/4]p t a v 11 12 13 14 15 16 100
[D-6]int Eth-Trunk 0
[D-6-Eth-Trunk0]trunkport g 0/0/1 t 0/0/2
[D-6-Eth-Trunk0]p l t
[D-6-Eth-Trunk0]p t a v 11 12 13 14 15 16 100 1103
[D-6-Eth-Trunk0]q
[D-6]int g 0/0/3
[D-6-GigabitEthernet0/0/3]p l t
[D-6-GigabitEthernet0/0/3]p t a v 11 12 13 14 15 16 100
[D-6-GigabitEthernet0/0/3]int g 0/0/4
[D-6-GigabitEthernet0/0/4]p l t
[D-6-GigabitEthernet0/0/4]p t a v 11 12 13 14 15 16 100
[D-5]int v 11
[D-5-Vlanif11]ip add 10.1.11.1 24
[D-5-Vlanif11]int v 12
[D-5-Vlanif12]ip add 10.1.12.1 24
[D-5-Vlanif12]int v 13
[D-5-Vlanif13]ip add 10.1.13.1 24
[D-5-Vlanif13]int v 14
[D-5-Vlanif14]ip add 10.1.14.1 24
[D-5-Vlanif14]int v 15
[D-5-Vlanif15]ip add 10.1.15.1 24 [D-5-Vlanif15]int v 16 [D-5-Vlanif16]ip add 10.1.16.1 24
[D-5-Vlanif16]int v 100
[D-5-Vlanif100]ip add 10.1.100.8 24
[D-5]int v 1103
[D-5-Vlanif1103]ip add 10.1.0.9 30
[D-5-Vlanif1103]int v 1107
[D-5-Vlanif1107]ip add 10.1.0.26 30
[D-5-Vlanif1107]int v 1111
[D-5-Vlanif1111]ip add 10.1.0.42 30
[D-6]int v 11
[D-6-Vlanif11]ip add 10.1.11.2 24
[D-6-Vlanif11]int v 12
[D-6-Vlanif12]ip add 10.1.12.2 24
[D-6-Vlanif12]int v 21
[D-6-Vlanif13]ip add 10.1.13.2 24
[D-6-Vlanif13]int v 14
[D-6-Vlanif14]ip add 10.1.14.2 24
[D-6-Vlanif14]int v 15
[D-6-Vlanif15]ip add 10.1.15.2 24 [D-6-Vlanif15]int v 16 [D-6-Vlanif16]ip add 10.1.16.2 24
[D-6-Vlanif16]int v 100
[D-6-Vlanif100]ip add 10.1.100.9 24
[D-6-Vlanif100]int v 1103
[D-6-Vlanif1103]ip add 10.1.0.10 30
[D-6-Vlanif1103]int v 1108
[D-6-Vlanif1108]ip add 10.1.0.30 30
[D-6-Vlanif1108]int v 1112
[D-6-Vlanif1112]ip add 10.1.0.46 30
3、MSTP生成树
[D-5]stp mode mstp
[D-5]stp enable
[D-5]stp region-configuration
[D-5-mst-region]region-name BG
[D-5-mst-region]instance 1 vlan 11 12 13 1103
[D-5-mst-region]instance 2 vlan 14 15 16 100
[D-5-mst-region]active region-configuration [D-5]stp instance 0 root primary
[D-5]stp instance 1 root primary
[D-5]stp instance 2 root secondary
[D-6]stp m m
[D-6]stp enable
[D-6]stp region-configuration
[D-6-mst-region]region-name BG
[D-6-mst-region]instance 1 v 11 12 13 1103
[D-6-mst-region]instance 2 v 14 15 16 100
[D-6-mst-region]active region-configuration
[D-6]stp instance 2 root primary
[D-6]stp instance 0 root secondary
[D-6]stp instance 1 root secondary
[A-4]stp m m
[A-4]stp enable
[A-4]stp region-configuration
[A-4-mst-region]region-name BG
[A-4-mst-region]instance 1 vlan 11 12 13 1103
[A-4-mst-region]instance 2 vlan 14 15 16 100
[A-4-mst-region]active region-c
[A-4-mst-region]active region-configuration
[A-5]stp m m
[A-5]stp enable
[A-5]stp region-configuration
[A-5-mst-region]region-name BG
[A-5-mst-region]instance 1 vlan 11 12 13 1103
[A-5-mst-region]instance 2 vlan 14 15 16 100
[A-5-mst-region]active region-configuration
图
[A-4]stp bpdu-protection
[A-4]port-group group-member g 0/0/1 t g 0/0/22
[A-4-port-group]stp edged-port enable
[A-5]stp bpdu-protection
[A-5]port-group group-member g 0/0/1 t g 0/0/22
[A-5-port-group]stp edged-port enable
4、VRRP
[D-5]int vlanif 11
[D-5-Vlanif11]vrrp vrid 1 virtual-ip 10.1.11.254
[D-5-Vlanif11]vrrp vrid 1 priority 120
[D-5-Vlanif11]vrrp vrid 1 preempt-mode timer delay 20
[D-5-Vlanif11]vrrp vrid 1 track interface vlanif 1107 reduced 30
[D-5-Vlanif11]vrrp vrid 1 track interface vlanif 1111 reduced 30
[D-5-Vlanif11]int v 12
[D-5-Vlanif12]vrrp vrid 1 virtual-ip 10.1.12.254
[D-5-Vlanif12] vrrp vrid 1 priority 120
[D-5-Vlanif12] vrrp vrid 1 preempt-mode timer delay 20
[D-5-Vlanif12] vrrp vrid 1 track interface Vlanif1107 reduced 30
[D-5-Vlanif12] vrrp vrid 1 track interface Vlanif1111 reduced 30
[D-5-Vlanif12]
[D-5-Vlanif12]int v 13
[D-5-Vlanif13]vrrp vrid 1 virtual-ip 10.1.13.254
[D-5-Vlanif13] vrrp vrid 1 priority 120
[D-5-Vlanif13] vrrp vrid 1 preempt-mode timer delay 20
[D-5-Vlanif13] vrrp vrid 1 track interface Vlanif1107 reduced 30
[D-5-Vlanif13] vrrp vrid 1 track interface Vlanif1111 reduced 30
[D-5-Vlanif13]int v 14
[D-5-Vlanif14]vrrp vrid 1 virtual-ip 10.1.14.254
[D-5-Vlanif14]int v 15
[D-5-Vlanif15]vrrp vrid 1 virtual-ip 10.1.15.254
[D-5-Vlanif15]int v 16
[D-5-Vlanif16]vrrp vrid 1 virtual-ip 10.1.16.254
[D-6]int v 11
[D-6-Vlanif11]vrrp vrid 1 virtual-ip 10.1.11.254
[D-6-Vlanif11]int v 12
[D-6-Vlanif12]vrrp vrid 1 virtual-ip 10.1.12.254
[D-6-Vlanif12]int v 13
[D-6-Vlanif13]vrrp vrid 1 virtual-ip 10.1.13.254 [D-6-Vlanif13]int v 14 [D-6-Vlanif14]vrrp vrid 1 virtual-ip 10 . 1 . 14 .254
[D-6-Vlanif14] vrrp vrid 1 priority 120
[D-6-Vlanif14] vrrp vrid 1 preempt-mode timer delay 20
[D-6-Vlanif14] vrrp vrid 1 track interface Vlanif1108 reduced 30
[D-6-Vlanif14] vrrp vrid 1 track interface Vlanif1112 reduced 30
[D-6-Vlanif14]int v 15
[D-6-Vlanif15]vrrp vrid 1 virtual-ip 10.1.15.254
[D-6-Vlanif15] vrrp vrid 1 priority 120
[D-6-Vlanif15] vrrp vrid 1 preempt-mode timer delay 20
[D-6-Vlanif15] vrrp vrid 1 track interface Vlanif1108 reduced 30
[D-6-Vlanif15] vrrp vrid 1 track interface Vlanif1112 reduced 30 [D-6-Vlanif15]int v 16
[D-6-Vlanif16]vrrp vrid 1 virtual-ip 10.1.16.254
[D-6-Vlanif16] vrrp vrid 1 priority 120
[D-6-Vlanif16] vrrp vrid 1 preempt-mode timer delay 20
[D-6-Vlanif16] vrrp vrid 1 track interface Vlanif1108 reduced 30
[D-6-Vlanif16] vrrp vrid 1 track interface Vlanif1112 reduced 30
dis vrrp b图
服务区配置
1、创建VLAN
[D-3]vlan b 31 32 33 34 35 100
[D-4]vlan b 31 32 33 34 35 100
[C-1]vlan b 31 32 33 34 35 100 1101 1104 1105 1106 1107 1108
[C-2]vlan b 31 32 33 34 35 100 1101 1109 1110 1111 1112 1113
2、配置干道IP
[C-1]int Eth-Trunk 0
[C-1-Eth-Trunk0]trunkport g 6/0/0 t 6/0/1
[C-1-Eth-Trunk0]p l t
[C-1-Eth-Trunk0]p t a v 31 32 33 34 35 100 1101
[C-1]int g 6/0/2
[C-1-GigabitEthernet6/0/2]port link-type trunk
[C-1-GigabitEthernet6/0/2] port trunk allow-pass vlan 31 to 32 33 34 35 100
[C-1-GigabitEthernet6/0/2]int g 6/0/3
[C-1-GigabitEthernet6/0/3]port link-type trunk
[C-1-GigabitEthernet6/0/3] port trunk allow-pass vlan 31 to 32 33 34 35 100
[C-2]int Eth-Trunk 0
[C-2-Eth-Trunk0]trunkport g 6/0/0 t 6/0/1
[C-2-Eth-Trunk0]p l t
[C-2-Eth-Trunk0]p t a v 31 32 33 34 35 100 1101
[C-2]int g 6/0/4
[C-2-GigabitEthernet6/0/4]port link-type trunk
[C-2-GigabitEthernet6/0/4] port trunk allow-pass vlan 31 to 32 33 34 35 100
[C-2-GigabitEthernet6/0/4]int g 6/0/5
[C-2-GigabitEthernet6/0/5]port link-type trunk
[C-2-GigabitEthernet6/0/5] port trunk allow-pass vlan 31 to 32 33 34 35 100
[D-3]int e 0
[D-3-Eth-Trunk0]trunkport g 0/0/1 t 0/0/6
[D-3-Eth-Trunk0]p l t
[D-3-Eth-Trunk0]p t a v 31 32 33 34 35 100
[D-3]int g 0/0/2
[D-3-GigabitEthernet0/0/2]p l t
[D-3-GigabitEthernet0/0/2]p t a v 31 to 32 33 34 35 100
[D-3-GigabitEthernet0/0/2]int g 0/0/4
[D-3-GigabitEthernet0/0/4]port link-type trunk
[D-3-GigabitEthernet0/0/4] port trunk allow-pass vlan 31 to 32 33 34 35 100
[D-4]int e 0
[D-4-Eth-Trunk0]trunkport g 0/0/1 t 0/0/6
[D-4-Eth-Trunk0]p l t
[D-4-Eth-Trunk0]p t a v 31 32 33 34 35 100
[D-4]int g 0/0/3
[D-4-GigabitEthernet0/0/3]port link-type trunk
[D-4-GigabitEthernet0/0/3] port trunk allow-pass vlan 31 to 32 33 34 35 100
[D-4-GigabitEthernet0/0/3]int g 0/0/5
[D-4-GigabitEthernet0/0/5]port link-type trunk
[D-4-GigabitEthernet0/0/5] port trunk allow-pass vlan 31 to 32 33 34 35 100
[C-1]int v 100
[C-1-Vlanif100]ip add 10.1.100.2 24
[C-1-Vlanif100]int v 31
[C-1-Vlanif31]ip add 10.1.31.1 24
[C-1-Vlanif31]int v 32
[C-1-Vlanif32]ip add 10.1.32.1 24
[C-1-Vlanif32]int v 33
[C-1-Vlanif33]ip add 10.1.33.1 24
[C-1-Vlanif33]int v 34
[C-1-Vlanif34]ip add 10.1.34.1 24
[C-1-Vlanif34]int v 35 [C-1-Vlanif35]ip add 10.1.35.1 24 [C-1-Vlanif35]int v 36
[C-1-Vlanif36]ip add 10.1.36.1 24 [C-1-Vlanif36]int v 1101
[C-1-Vlanif1101]ip add 10.1.0.1 30
[C-1-Vlanif1101]int v 1104
[C-1-Vlanif1104]ip add 10.1.0.13 30
[C-1-Vlanif1104]int v 1105
[C-1-Vlanif1105]ip add 10.1.0.17 30
[C-1-Vlanif1105]int v 1106
[C-1-Vlanif1106]ip add 10.1.0.22 30
[C-1-Vlanif1106]int v 1107
[C-1-Vlanif1107]ip add 10.1.0.25 30
[C-1-Vlanif1107]int v 1108
[C-1-Vlanif1108]ip ad d 10.1.0.29 30
[C-2]int v 100
[C-2-Vlanif100]ip add 10.1.3 24
[C-2]int v 31
[C-2-Vlanif31]ip add 10.1.31.2 24
[C-2-Vlanif31]int v 32
[C-2-Vlanif32]ip add 10.1.32.2 24
[C-2-Vlanif32]int v 33
[C-2-Vlanif33]ip add 10.1.33.2 24
[C-2-Vlanif33]int v 34
[C-2-Vlanif34]ip add 10.1.34.2 24
[C-2-Vlanif34]int v 35
[C-2-Vlanif35]ip add 10.1.35.2 24 [C-2-Vlanif35]int v 36 [C-2-Vlanif36]ip add 10.1.36.2 24
[C-2-Vlanif36]int v 1101
[C-2-Vlanif1101]ip add 10.1.0.2 30
[C-2-Vlanif1101]int v 1109
[C-2-Vlanif1109]ip add 10.1.0.33 30
[C-2-Vlanif1109]int v 1110
[C-2-Vlanif1110]ip add 10.1.0.37 30
[C-2-Vlanif1110]int v 1111
[C-2-Vlanif1111]ip add 10.1.0.41 30
[C-2-Vlanif1111]int v 1112
[C-2-Vlanif1112]ip add 10.1.0.45 30
[C-2-Vlanif1112]int v 1113
[C-2-Vlanif1113]ip add 10.1.0.50 30
[D-3]int v 100
[D-3-Vlanif100]ip add 10.1.100.4 24
[D-4]int v 100
[D-4-Vlanif100]ip add 10.1.100.5 24
3、MSTP生成树
[C-1]stp m m
[C-1]stp enable
[C-1]stp region-configuration
[C-1-mst-region]region-name WFQ
[C-1-mst-region]instance 1 vlan 31 33 1101
[C-1-mst-region]instance 2 vlan 32 34 35 100
[C-1-mst-region]active region-configuration [C-1]stp instance 0 root primary
[C-1]stp instance 1 root primary
[C-1]stp instance 2 root secondary
[C-2]stp m m
[C-2]stp enable
[C-2]stp region-configuration
[C-2-mst-region]region-name WFQ
[C-2-mst-region]instance 1 vlan 31 33 1101
[C-2-mst-region]instance 2 vlan 32 34 35 100
[C-2-mst-region]active region-configuration [C-2]stp instance 0 root secondary
[C-2]stp instance 1 root secondary
[C-2]stp instance 2 root primary
[D-3]stp m m
[D-3]stp enable
[D-3]stp region-configuration
[D-3-mst-region]region-name WFQ
[D-3-mst-region]instance 1 vlan 31 33 1101
[D-3-mst-region]instance 2 vlan 32 34 35 100
[D-3-mst-region]active region-configuration
[D-4]stp m m
[D-4]stp enable
[D-4]stp region-configuration
[D-4-mst-region]region-name WFQ
[D-4-mst-region] instance 1 vlan 31 33 1101
[D-4-mst-region] instance 2 vlan 32 34 35 100
[D-4-mst-region] active region-configuration
dis stp b图
[D-3]stp bpdu-protection
[D-3]port-group group-member g 0/0/7 to GigabitEthernet 0/0/24
[D-3-port-group]stp edged-port enable
[D-4]stp bpdu-protection
[D-4]port-group group-member g 0/0/7 to GigabitEthernet 0/0/24
[D-4-port-group]stp edged-port enable
4、VRRP
[C-1]int v 31
[C-1-Vlanif31]vrrp vrid 1 virtual-ip 10.1.31.254
[C-1-Vlanif31]vrrp vrid 1 priority 120
[C-1-Vlanif31]vrrp vrid 1 preempt-mode timer delay 20
[C-1-Vlanif31]vrrp vrid 1 track interface vlanif 1106 reduced 30
[C-1-Vlanif31]int v 33
[C-1-Vlanif33] vrrp vrid 1 virtual-ip 10.1.33.254
[C-1-Vlanif33] vrrp vrid 1 priority 120
[C-1-Vlanif33] vrrp vrid 1 preempt-mode timer delay 20
[C-1-Vlanif33vrrp] vrid 1 track interface Vlanif1106 reduced 30
[C-1]int v 32
[C-1-Vlanif32] vrrp vrid 1 virtual-ip 10.1.32.254
[C-1]int v 34
[C-1-Vlanif85]vrrp vrid 1 virtual-ip 10.1.34.254
[C-1]int v 35
[C-1-Vlanif86]vrrp vrid 1 virtual-ip 10.1.35.254
[C-2]int v 32
[C-2-Vlanif32] vrrp vrid 1 virtual-ip 10.1.32.254
[C-2-Vlanif32] vrrp vrid 1 priority 120
[C-2-Vlanif32] vrrp vrid 1 preempt-mode timer delay 20
[C-2-Vlanif32] vrrp vrid 1 track interface Vlanif1113 reduced 30
[C-2]int v 34
[C-2-Vlanif34] vrrp vrid 1 virtual-ip 10.1.34.254
[C-2-Vlanif34] vrrp vrid 1 priority 120
[C-2-Vlanif34] vrrp vrid 1 preempt-mode timer delay 20
[C-2-Vlanif34] vrrp vrid 1 track interface Vlanif1113 reduced 30
[C-2]int v 35
[C-2-Vlanif80]vrrp vrid 1 virtual-ip 10.1.35.254 [C-2-Vlanif34] vrrp vrid 1 priority 120 [C-2-Vlanif34] vrrp vrid 1 preempt-mode timer delay 20 [C-2-Vlanif34] vrrp vrid 1 track interface Vlanif1113 reduced 30
[C-2]int v 31
[C-2-Vlanif81]vrrp vrid 1 virtual-ip 10.1.31.254
[C-2]int v 33
[C-2-Vlanif33]vrrp vrid 1 virtual-ip 10.1.33.254
dis vrrp b 图
路由设计
1、直连网段做通
[C-1]int g 6/0/8
[C-1-GigabitEthernet6/0/8]p l a
[C-1-GigabitEthernet6/0/8]p d v 1106
[C-1-GigabitEthernet6/0/8]int g 6/0/4
[C-1-GigabitEthernet6/0/4]p l t
[C-1-GigabitEthernet6/0/4]p t a v 1104
[C-1-GigabitEthernet6/0/4]int g 6/0/5
[C-1-GigabitEthernet6/0/5]p l t
[C-1-GigabitEthernet6/0/5]p t a v 1105
[C-1-GigabitEthernet6/0/5]int g 6/0/6
[C-1-GigabitEthernet6/0/6]p l t
[C-1-GigabitEthernet6/0/6]p t a v 1107
[C-1-GigabitEthernet6/0/6]int g 6/0/7
[C-1-GigabitEthernet6/0/7]p l t
[C-1-GigabitEthernet6/0/7]p t a v 1108
[C-2]int g 6/0/8
[C-2-GigabitEtherne6/0/8]p l a
[C-2-GigabitEthernet6/0/8]p d v 1113
[C-2-GigabitEthernet6/0/8]int g 6/0/2
[C-2-GigabitEthernet6/0/2]p l t
[C-2-GigabitEthernet6/0/2]p t a v 1109
[C-2-GigabitEthernet6/0/2]int g 6/0/3
[C-2-GigabitEthernet6/0/3]p l t
[C-2-GigabitEthernet6/0/3]p t a v 1110
[C-2-GigabitEthernet6/0/3]int g 6/0/7
[C-2-GigabitEthernet6/0/7]p l t
[C-2-GigabitEthernet6/0/7]p t a v 1111
[C-2-GigabitEthernet6/0/7]int g 6/0/6
[C-2-GigabitEthernet6/0/6]p l t
[C-2-GigabitEthernet6/0/6]p t a v 1112
2、关闭生成树
[C-1]port-group group-member g 6/0/4 t g 6/0/7
[C-1-port-group]undo stp enable
[C-2]port-group group-member g 6/0/2 t g 6/0/3 [C-2]port-group group-member g 6/0/6 t g 6/0/7
[C-2-port-group]undo stp enable
[D-1]port-group group-member g 0/0/2 [D-1]port-group group-member g 0/0/4
[D-1-port-group]undo stp enable
[D-2]port-group group-member g 0/0/3 [D-2]port-group group-member g 0/0/5
[D-2-port-group]undo stp enable
[D-5]port-group group-member g 0/0/6 t g 0/0/7
[D-5-port-group]undo stp enable
[D-6]port-group group-member g 0/0/6 t g 0/0/7
[D-6-port-group]undo stp enable
[D-1]int g 0/0/4
[D-1-GigabitEthernet0/0/4]p l t
[D-1-GigabitEthernet0/0/4]p t a v 1104
[D-1-GigabitEthernet0/0/4]int g 0/0/2
[D-1-GigabitEthernet0/0/2]p l t
[D-1-GigabitEthernet0/0/2]p t a v 1109
[D-2]int g 0/0/5
[D-2-GigabitEthernet0/0/5]p l t
[D-2-GigabitEthernet0/0/5]p t a v 1105
[D-2-GigabitEthernet0/0/5]int g 0/0/3
[D-2-GigabitEthernet0/0/3]p l t
[D-2-GigabitEthernet0/0/3]p t a v 1110
[D-5]int g 0/0/6
[D-5-GigabitEthernet0/0/6]p l t
[D-5-GigabitEthernet0/0/6]p t a v 1107
[D-5-GigabitEthernet0/0/6]int g 0/0/7
[D-5-GigabitEthernet0/0/7]p l t
[D-5-GigabitEthernet0/0/7]p t a v 1111
[D-6]int g 0/0/7
[D-6-GigabitEthernet0/0/7]p l t
[D-6-GigabitEthernet0/0/7]p t a v 1108
[D-6-GigabitEthernet0/0/7]int g 0/0/6
[D-6-GigabitEthernet0/0/6]p l t
[D-6-GigabitEthernet0/0/6]p t a v 1112
3、防火墙
[F-1]int g 0/0/0
[F-1-GigabitEthernet0/0/0]ip add 10.1.0.21 30
[F-1-GigabitEthernet0/0/0]int g 0/0/1
[F-1-GigabitEthernet0/0/1]ip add 10.1.0.49 30
[F-1]firewall zone trust
[F-1-zone-trust]add interface GigabitEthernet 0/0/0
[F-1-zone-trust]add interface GigabitEthernet 0/0/1
[F-1]firewall packet-filter default permit interzone trust local direction outbound
[F-1]firewall packet-filter default permit interzone local trust direction inbound
4、OSPF
[F-1]ospf 1 router-id 1.1.1.1
[F-1-ospf-1]a 0
[F-1-ospf-1-area-0.0.0.0]network 10.1.0.21 0.0.0.0
[F-1-ospf-1-area-0.0.0.0]network 10.1.0.49 0.0.0.0
[C-1]ospf 1 router-id 2.2.2.2
[C-1-ospf-1]a 0
[C-1-ospf-1-area-0.0.0.0]network 10.1.0.1 0.0.0.0
[C-1-ospf-1-area-0.0.0.0]network 10.1.100.2 0.0.0.0
[C-1-ospf-1-area-0.0.0.0]network 10.1.0.22 0.0.0.0
[C-1-ospf-1]a 1
[C-1-ospf-1-area-0.0.0.1]network 10.1.0.13 0.0.0.0
[C-1-ospf-1-area-0.0.0.1]network 10.1.0.17 0.0.0.0
[C-1-ospf-1]a 2
[C-1-ospf-1-area-0.0.0.2]network 10.1.0.25 0.0.0.0
[C-1-ospf-1-area-0.0.0.2]network 10.1.0.29 0.0.0.0
[C-1-ospf-1]a 3
[C-1-ospf-1-area-0.0.0.3]net 10.1.31.1 0.0.0.0
[C-1-ospf-1-area-0.0.0.3]net 10.1.32.1 0.0.0.0
[C-1-ospf-1-area-0.0.0.3]net 10.1.33.1 0.0.0.0
[C-1-ospf-1-area-0.0.0.3]net 10.1.34.1 0.0.0.0
[C-1-ospf-1-area-0.0.0.3]net 10.1.35.1 0.0.0.0
[C-2]ospf 1 router-id 3.3.3.3
[C-2-ospf-1]a 0
[C-2-ospf-1-area-0.0.0.0]net 10.1.100.3 0.0.0.0
[C-2-ospf-1-area-0.0.0.0]net 10.1.0.2 0.0.0.0
[C-2-ospf-1-area-0.0.0.0]net 10.1.0.50 0.0.0.0
[C-2-ospf-1]a 1
[C-2-ospf-1-area-0.0.0.1]net 10.1.0.33 0.0.0.0
[C-2-ospf-1-area-0.0.0.1]net 10.1.0.37 0.0.0.0
[C-2-ospf-1]a 2
[C-2-ospf-1-area-0.0.0.2]net 10.1.0.41 0.0.0.0
[C-2-ospf-1-area-0.0.0.2]net 10.1.0.45 0.0.0.0
[C-2-ospf-1]a 3
[C-2-ospf-1-area-0.0.0.3]net 10.1.31.2 0.0.0.0
[C-2-ospf-1-area-0.0.0.3]net 10.1.32.2 0.0.0.0
[C-2-ospf-1-area-0.0.0.3]net 10.1.33.2 0.0.0.0
[C-2-ospf-1-area-0.0.0.3]net 10.1.34.2 0.0.0.0
[C-2-ospf-1-area-0.0.0.3]net 10.1.35.2 0.0.0.0
[D-1]ospf 1 router-id 4.4.4.4
[D-1-ospf-1]a 1
[D-1-ospf-1-area-0.0.0.1]net 10.1.21.1 0.0.0.0
[D-1-ospf-1-area-0.0.0.1]net 10.1.22.1 0.0.0.0
[D-1-ospf-1-area-0.0.0.1]net 10.1.23.1 0.0.0.0
[D-1-ospf-1-area-0.0.0.1]net 10.1.100.6 0.0.0.0
[D-1-ospf-1-area-0.0.0.1]net 10.1.0.5 0.0.0.0
[D-1-ospf-1-area-0.0.0.1]net 10.1.0.14 0.0.0.0
[D-1-ospf-1-area-0.0.0.1]net 10.1.0.34 0.0.0.0
[D-2]ospf 1 router-id 5.5.5.5
[D-2-ospf-1]a 1
[D-2-ospf-1-area-0.0.0.1]net 10.1.21.2 0.0.0.0
[D-2-ospf-1-area-0.0.0.1]net 10.1.22.2 0.0.0.0
[D-2-ospf-1-area-0.0.0.1]net 10.1.23.2 0.0.0.0
[D-2-ospf-1-area-0.0.0.1]net 10.1.100.7 0.0.0.0
[D-2-ospf-1-area-0.0.0.1]net 10.1.0.6 0.0.0.0
[D-2-ospf-1-area-0.0.0.1]net 10.1.0.18 0.0.0.0
[D-2-ospf-1-area-0.0.0.1]net 10.1.0.38 0.0.0.0
[D-5]ospf 1 router-id 6.6.6.6
[D-5-ospf-1]a 2
[D-5-ospf-1-area-0.0.0.2]net 10.1.11.1 0.0.0.0
[D-5-ospf-1-area-0.0.0.2]net 10.1.12.1 0.0.0.0
[D-5-ospf-1-area-0.0.0.2]net 10.1.13.1 0.0.0.0
[D-5-ospf-1-area-0.0.0.2]net 10.1.14.1 0.0.0.0
[D-5-ospf-1-area-0.0.0.2]net 10.1.15.1 0.0.0.0 [D-5-ospf-1-area-0.0.0.2]net 10.1.16.1 0.0.0.0
[D-5-ospf-1-area-0.0.0.2]net 10.1.100.8 0.0.0.0
[D-5-ospf-1-area-0.0.0.2]net 10.1.0.9 0.0.0.0
[D-5-ospf-1-area-0.0.0.2]net 10.1.0.26 0.0.0.0
[D-5-ospf-1-area-0.0.0.2]net 10.1.0.42 0.0.0.0
[D-6]ospf 1 router-id 7.7.7.7
[D-6-ospf-1]a 2
[D-6-ospf-1-area-0.0.0.2]net 10.1.11.2 0.0.0.0
[D-6-ospf-1-area-0.0.0.2]net 10.1.12.2 0.0.0.0
[D-6-ospf-1-area-0.0.0.2]net 10.1.13.2 0.0.0.0
[D-6-ospf-1-area-0.0.0.2]net 10.1.14.2 0.0.0.0
[D-6-ospf-1-area-0.0.0.2]net 10.1.15.2 0.0.0.0 [D-6-ospf-1-area-0.0.0.2]net 10.1.16.2 0.0.0.0
[D-6-ospf-1-area-0.0.0.2]net 10.1.100.9 0.0.0.0
[D-6-ospf-1-area-0.0.0.2]net 10.1.0.10 0.0.0.0
[D-6-ospf-1-area-0.0.0.2]net 10.1.0.30 0.0.0.0
[D-6-ospf-1-area-0.0.0.2]net 10.1.0.46 0.0.0.0
OSPF的优化
area 1 2 作为total stub区域
[D-1]ospf 1
[D-1-ospf-1]a 1
[D-1-ospf-1-area-0.0.0.1]stub
[D-2]ospf 1
[D-2-ospf-1]a 1
[D-2-ospf-1-area-0.0.0.1]stub
[C-1]ospf 1
[C-1-ospf-1]a 1
[C-1-ospf-1-area-0.0.0.1]stub
[C-1-ospf-1-area-0.0.0.1]stub no-summary
[C-2]ospf 1
[C-2-ospf-1]a 1
[C-2-ospf-1-area-0.0.0.1]stub
[C-2-ospf-1-area-0.0.0.1]stub no-summary
[D-5]ospf 1
[D-5-ospf-1]a 2
[D-5-ospf-1-area-0.0.0.2]stub
[D-6]ospf 1
[D-6-ospf-1]a 2
[D-6-ospf-1-area-0.0.0.2]stub
[C-1]ospf 1
[C-1-ospf-1]a 2
[C-1-ospf-1-area-0.0.0.2]stub
[C-1-ospf-1-area-0.0.0.2]stub no-summary
[C-2-ospf-1]a 2
[C-2-ospf-1-area-0.0.0.2]stub
[C-2-ospf-1-area-0.0.0.2]stub no-summary
area 0区域认证 F1 C1 C2相同配置
[F-1]ospf 1
[F-1-ospf-1]a 0
[F-1-ospf-1-area-0.0.0.0]authentication-mode md5 1 huawei
网关禁默接口
[D-1]ospf 1
[D-1-ospf-1]silent-interface vlanif 21
[D-1-ospf-1]silent-interface vlanif 22
[D-1-ospf-1]silent-interface vlanif 23
[D-1-ospf-1]silent-interface vlanif 100
[D-1-ospf-1]silent-interface vlanif 1102
[D-2]ospf 1
[D-2-ospf-1]silent-interface Vlanif21
[D-2-ospf-1] silent-interface Vlanif22
[D-2-ospf-1] silent-interface Vlanif23
[D-2-ospf-1] silent-interface Vlanif100
[D-2-ospf-1] silent-interface Vlanif1102
[D-5]ospf 1
[D-5-ospf-1]silent-interface vlanif 11
[D-5-ospf-1]silent-interface vlanif 12
[D-5-ospf-1]silent-interface vlanif 13
[D-5-ospf-1]silent-interface vlanif 14
[D-5-ospf-1]silent-interface vlanif 15 [D-5-ospf-1]silent-interface vlanif 16
[D-5-ospf-1]silent-interface vlanif 100
[D-5-ospf-1]silent-interface vlanif 1103
[D-6]ospf 1
[D-6-ospf-1]silent-interface Vlanif 11
[D-6-ospf-1] silent-interface Vlanif 12
[D-6-ospf-1] silent-interface Vlanif 13
[D-6-ospf-1] silent-interface Vlanif 14
[D-6-ospf-1] silent-interface Vlanif 15 [D-6-ospf-1] silent-interface Vlanif 16
[D-6-ospf-1] silent-interface Vlanif 100
[D-6-ospf-1] silent-interface Vlanif 1103
[C-1]ospf 1
[C-1-ospf-1]silent-interface vlanif 100
[C-1-ospf-1]silent-interface vlanif 1101
[C-1-ospf-1]silent-interface vlanif 31
[C-1-ospf-1]silent-interface vlanif 32
[C-1-ospf-1]silent-interface vlanif 33
[C-1-ospf-1]silent-interface vlanif 34
[C-1-ospf-1]silent-interface vlanif 35
[C-2]ospf 1
[C-2-ospf-1]silent-interface Vlanif 100
[C-2-ospf-1] silent-interface Vlanif 1101
[C-2-ospf-1] silent-interface Vlanif 31
[C-2-ospf-1] silent-interface Vlanif 32
[C-2-ospf-1] silent-interface Vlanif 33
[C-2-ospf-1] silent-interface Vlanif 34
[C-2-ospf-1] silent-interface Vlanif 35
ospf 的网络类型p2p
[C-1]int v 1101
[C-1-Vlanif1101]ospf network-type p2p
[C-2]int v 1101
[C-2-Vlanif1101]ospf network-type p2p
[C-1-Vlanif1101]ospf timer hello 1
[C-2-Vlanif1101]ospf timer hello 1
路径
[C-1]ospf 1
[C-1-ospf-1]a 2
[C-1-ospf-1-area-0.0.0.2]def
[C-1-ospf-1-area-0.0.0.2]default-cost 5
[C-2]ospf 1
[C-2-ospf-1]a 1
[C-2-ospf-1-area-0.0.0.1]def
[C-2-ospf-1-area-0.0.0.1]default-cost 5