真机实验模拟

 设备连接表

 设备对应表

 vlan及地址规划表


生产区配置:

1、创建vlan

[A-1]vlan batch  21 22 100

[A-2]vlan batch  21 22 100

[A-3]vlan batch  21 22 100

[D-1]vlan batch  21 22 100 1102 1104 1109

[D-2]vlan batch  21 22 100 1102 1105 1110

2、配置干道IP

[A-1]int g 0/0/23
[A-1-GigabitEthernet0/0/23]port link-type trunk
[A-1-GigabitEthernet0/0/23]port trunk allow-pass vlan 21 22 23 100
[A-1-GigabitEthernet0/0/23]int g 0/0/24
[A-1-GigabitEthernet0/0/24]p l t
[A-1-GigabitEthernet0/0/24]p t a v 21 22 23 100  
[A-1]port-group group-member GigabitEthernet 0/0/1 to GigabitEthernet 0/0/22
[A-1-port-group]port link-type access
[A-1-port-group]port default vlan 21

[A-2]int g 0/0/23
[A-2-GigabitEthernet0/0/23]p l t
[A-2-GigabitEthernet0/0/23]p t a v 21 22 23 100
[A-2-GigabitEthernet0/0/23]int g 0/0/24
[A-2-GigabitEthernet0/0/24]p l t
[A-2-GigabitEthernet0/0/24]p t a v 21 22 23 100
[A-2]port-group group-member g 0/0/1 to g 0/0/22
[A-2-port-group]p l a
[A-2-port-group]port default vlan 22

[A-3]int g 0/0/23
[A-3-GigabitEthernet0/0/23]p l t
[A-3-GigabitEthernet0/0/23]p t a v 21 22 23 100
[A-3]port-group group-member g 0/0/1 to g 0/0/22
[A-3-port-group]p l a
[A-3-port-group]port default vlan 23

[D-1]int Eth-Trunk 0
[D-1-Eth-Trunk0]trunkport g0/0/1
[D-1-Eth-Trunk0]trunkport g0/0/6
[D-1-Eth-Trunk0]p l t
[D-1-Eth-Trunk0]p t a v 21 22 23 100
[D-1]int g 0/0/3
[D-1-GigabitEthernet0/0/3]p l t
[D-1-GigabitEthernet0/0/3]p t a v 21 22 23 100
[D-1-GigabitEthernet0/0/3]int g 0/0/5
[D-1-GigabitEthernet0/0/5]p l t
[D-1-GigabitEthernet0/0/5]p t a v 21 22 23 100
[D-2]int Eth-Trunk 0
[D-2-Eth-Trunk0]trunkport g0/0/1
[D-2-Eth-Trunk0]trunkport g0/0/6
[D-2-Eth-Trunk0]p l t
[D-2-Eth-Trunk0]p t a v 21 22 23 100
[D-2-Eth-Trunk0]q
[D-2]int g 0/0/2
[D-2-GigabitEthernet0/0/2]p l t
[D-2-GigabitEthernet0/0/2]p t a v 21 22 23 100
[D-2-GigabitEthernet0/0/2]int g 0/0/4
[D-2-GigabitEthernet0/0/4]p l t
[D-2-GigabitEthernet0/0/4]p t a v 21 22 23 100
[D-2]int g 0/0/7
[D-2-GigabitEthernet0/0/7]p l t
[D-2-GigabitEthernet0/0/7]p t a v 21 22 23 100
IP

[A-1]int vlanif 100
[A-1-Vlanif255]ip add 10.1.100.10 24
 

[A-2]int vlanif 100
[A-2-Vlanif100]ip add 10.1.100.11 24

[A-3]int vlanif 100
[A-3-Vlanif100]ip add 10.1.100.12 24

[D-1]int v 21
[D-1-Vlanif21]ip add 10.1.21.1 24
[D-1-Vlanif21]int v 22
[D-1-Vlanif22]ip add 10.1.22.1 24
[D-1-Vlanif22]int v 23
[D-1-Vlanif23]ip add 10.1.23.1 24
[D-1-Vlanif23]int v 100
[D-1-Vlanif100]ip add 10.1.100.6 24
[D-1-Vlanif100]int v 1102
[D-1-Vlanif1102]ip add 10.1.0.5 30
[D-1-Vlanif1102]int v 1104
[D-1-Vlanif1104]ip add 10.1.0.14 30
[D-1-Vlanif1104]int v 1109
[D-1-Vlanif1109]ip add 10.1.0.34 30
 

[D-2]int v 21
[D-2-Vlanif21]ip add 10.1.21.2 24
[D-2-Vlanif21]int v 22
[D-2-Vlanif22]ip add 10.1.22.2 24
[D-2-Vlanif22]int v 23
[D-2-Vlanif23]ip add 10.1.23.2 24
[D-2-Vlanif23]int v 100
[D-2-Vlanif100]ip add 10.1.100.7 24
[D-2-Vlanif255]int v 1102
[D-2-Vlanif1102]ip add 10.1.0.6 30
[D-2-Vlanif1102]int v 1105
[D-2-Vlanif1105]ip add 10.1.0.18 30
[D-2-Vlanif1105]int v 1110
[D-2-Vlanif1110]ip add 10.1.0.38 30

3、MSTP生成树

[D-1]stp mode mstp
[D-1]stp enable
[D-1]stp region-configuration
[D-1-mst-region]region-name SC
[D-1-mst-region]instance 1 vlan 21 22
[D-1-mst-region]instance 2 vlan 23
[D-1-mst-region]active region-configuration

[D-1]stp instance 1 root primary                                                                                                          [D-1]stp instance 0 root primary
[D-1]stp instance 2 root secondary

[D-2]stp mode mstp
[D-2]stp enable
[D-2]stp region-configuration 
[D-2-mst-region]region-name SC
[D-2-mst-region]instance 1 vlan 21 22
[D-2-mst-region]instance 2 vlan 23    
[D-2-mst-region]active region-configuration 

[D-2]stp instance 2 root primary
[D-2]stp instance 1 root secondary                                                                                                  [D-2]stp instance 0 root secondary   

[A-1]stp mode mstp
[A-1]stp enable
[A-1]stp region-configuration 
[A-1-mst-region]region-name SC
[A-1-mst-region]instance 1 vlan 21 22
[A-1-mst-region]instance 2 vlan 23
[A-1-mst-region]active region-configuration

[A-2]stp mode mstp
[A-2]stp enable
[A-2]stp region-configuration 
[A-2-mst-region]region-name SC
[A-2-mst-region]instance 1 v 21 22 
[A-2-mst-region]instance 2 v 23
[A-2-mst-region]active region-configuration 

[A-3]stp mode mstp
[A-3]stp enable
[A-3]stp region-configuration 
[A-3-mst-region]region-name SC
[A-3-mst-region]instance 1 v 21 22 
[A-3-mst-region]instance 2 v 23
[A-3-mst-region]active region-configuration

 [A-1]stp bpdu-protection
[A-1]port-group group-member g 0/0/1 t g 0/0/22
[A-1-port-group]stp edged-port enable

[A-2]stp bpdu-protection   
[A-2]port-g group-member g 0/0/1 t g 0/0/22
[A-2-port-group]stp edged-port enable

[A-3]stp bpdu-protection   
[A-3]port-g group-member g 0/0/1 t g 0/0/22
[A-3-port-group]stp edged-port enable

4、VRRP 21 22 23

[D-1]int v 21
[D-1-Vlanif21]vrrp vrid 1 virtual-ip 10.1.100.254
[D-1-Vlanif21]vrrp vrid 1 priority 120
[D-1-Vlanif21]vrrp vrid 1 preempt-mode timer delay 20
[D-1-Vlanif21]vrrp vrid 1 track interface vlanif 1104 reduced 30
[D-1-Vlanif21]vrrp vrid 1 track interface vlanif 1109 reduced 30

[D-1]int v 22
[D-1-Vlanif22]vrrp vrid 1 virtual-ip 10.1.110.254
[D-1-Vlanif22]vrrp vrid 1 priority 120
[D-1-Vlanif22]vrrp vrid 1 preempt-mode timer delay 20
[D-1-Vlanif22]vrrp vrid 1 track interface vlanif 1104 reduced 30
[D-1-Vlanif22]vrrp vrid 1 track interface vlanif 1109 reduced 30

[D-1]int v 23
[D-1-Vlanif23]vrrp vrid 1 virtual-ip 10.1.120.254

[D-2]int v 21
[D-2-Vlanif21]vrrp vrid 1 virtual-ip 10.1.100.254
[D-2-Vlanif21]int v 110
[D-2-Vlanif22]vrrp vrid 1 virtual-ip 10.1.110.254
[D-2-Vlanif22]int v 120
[D-2-Vlanif23]vrrp vrid 1 virtual-ip 10.1.120.254
[D-2-Vlanif23]vrrp vrid 1 priority 120
[D-2-Vlanif23]vrrp vrid 1 preempt-mode timer delay 20
[D-2-Vlanif23]vrrp vrid 1 track interface vlanif 1105 reduced 30
[D-2-Vlanif23]vrrp vrid 1 track interface vlanif 1110 reduced 30


 

 办公区配置

 1、创建VLAN

[D-5]vlan batch 11 12 13 14 15 16 100 1103 1107 1111

[D-6]vlan batch 11 12 13 14 15 16 100 1103 1108 1112

[A-4]vlan batch 11 12 13 14 15 16 100

[A-5]vlan batch 11 12 13 14 15 16 100

配置干道IP

[A-4]int g 0/0/23
[A-4-GigabitEthernet0/0/23]p l t
[A-4-GigabitEthernet0/0/23]p t a v 11 12 13 14 15 16 100
[A-4-GigabitEthernet0/0/23]int g 0/0/24
[A-4-GigabitEthernet0/0/24]p l t
[A-4-GigabitEthernet0/0/24]p t a v 11 12 13 14 15 16 100
[A-4-GigabitEthernet0/0/24]port-group group-member g 0/0/1 t g 0/0/22
[A-4-port-group]p l a
[A-4-port-group]p d v 11

[A-4]int v 100
[A-4-Vlanif255]ip add 10.1.100.13 24

[A-5]int g 0/0/23
[A-5-GigabitEthernet0/0/23]p l t
[A-5-GigabitEthernet0/0/23]p t a v 11 12 13 14 15 16 100
[A-5-GigabitEthernet0/0/23]int g 0/0/24
[A-5-GigabitEthernet0/0/24]p l t
[A-5-GigabitEthernet0/0/24]p t a v 11 12 13 14 15 16 100
[A-5-GigabitEthernet0/0/24]q
[A-5]port-group group-member g 0/0/1 t g 0/0/22
[A-5-port-group]p l a
[A-5-port-group]p d v 14

[A-5]int v 100
[A-5-Vlanif255]ip add 10.1.100.14 24
 

[D-5]int Eth-Trunk 0
[D-5-Eth-Trunk0]trunkport g 0/0/1 t 0/0/2
[D-5-Eth-Trunk0]p l t
[D-5-Eth-Trunk0]p t a v 11 12 13 14 15 16 100 1103
[D-5-Eth-Trunk0]q
[D-5]int g 0/0/3
[D-5-GigabitEthernet0/0/3]p l t
[D-5-GigabitEthernet0/0/3]p t a v 11 12 13 14 15 16 100 
[D-5-GigabitEthernet0/0/3]int g 0/0/4
[D-5-GigabitEthernet0/0/4]p l t
[D-5-GigabitEthernet0/0/4]p t a v 11 12 13 14 15 16 100 

[D-6]int Eth-Trunk 0
[D-6-Eth-Trunk0]trunkport g 0/0/1 t 0/0/2
[D-6-Eth-Trunk0]p l t
[D-6-Eth-Trunk0]p t a v 11 12 13 14 15 16 100 1103
[D-6-Eth-Trunk0]q
[D-6]int g 0/0/3
[D-6-GigabitEthernet0/0/3]p l t
[D-6-GigabitEthernet0/0/3]p t a v 11 12 13 14 15 16 100
[D-6-GigabitEthernet0/0/3]int g 0/0/4
[D-6-GigabitEthernet0/0/4]p l t
[D-6-GigabitEthernet0/0/4]p t a v 11 12 13 14 15 16 100 

[D-5]int v 11
[D-5-Vlanif11]ip add 10.1.11.1 24
[D-5-Vlanif11]int v 12
[D-5-Vlanif12]ip add 10.1.12.1 24
[D-5-Vlanif12]int v 13
[D-5-Vlanif13]ip add 10.1.13.1 24
[D-5-Vlanif13]int v 14
[D-5-Vlanif14]ip add 10.1.14.1 24
[D-5-Vlanif14]int v 15
[D-5-Vlanif15]ip add 10.1.15.1 24                                                                                                      [D-5-Vlanif15]int v 16                                                                                                                          [D-5-Vlanif16]ip add 10.1.16.1 24                  
[D-5-Vlanif16]int v 100
[D-5-Vlanif100]ip add 10.1.100.8 24
[D-5]int v 1103
[D-5-Vlanif1103]ip add 10.1.0.9 30
[D-5-Vlanif1103]int v 1107
[D-5-Vlanif1107]ip add 10.1.0.26 30
[D-5-Vlanif1107]int v 1111
[D-5-Vlanif1111]ip add 10.1.0.42 30

[D-6]int v 11
[D-6-Vlanif11]ip add 10.1.11.2 24
[D-6-Vlanif11]int v 12
[D-6-Vlanif12]ip add 10.1.12.2 24
[D-6-Vlanif12]int v 21
[D-6-Vlanif13]ip add 10.1.13.2 24
[D-6-Vlanif13]int v 14
[D-6-Vlanif14]ip add 10.1.14.2 24
[D-6-Vlanif14]int v 15
[D-6-Vlanif15]ip add 10.1.15.2 24                                                                                                      [D-6-Vlanif15]int v 16                                                                                                                          [D-6-Vlanif16]ip add 10.1.16.2 24                                                       
[D-6-Vlanif16]int v 100
[D-6-Vlanif100]ip add 10.1.100.9 24
[D-6-Vlanif100]int v 1103
[D-6-Vlanif1103]ip add 10.1.0.10 30
[D-6-Vlanif1103]int v 1108
[D-6-Vlanif1108]ip add 10.1.0.30 30
[D-6-Vlanif1108]int v 1112
[D-6-Vlanif1112]ip add 10.1.0.46 30

3、MSTP生成树

[D-5]stp mode mstp
[D-5]stp enable
[D-5]stp region-configuration 
[D-5-mst-region]region-name BG
[D-5-mst-region]instance 1 vlan 11 12 13 1103
[D-5-mst-region]instance 2 vlan 14 15 16 100
[D-5-mst-region]active region-configuration                                                                                        [D-5]stp instance 0 root primary                 
[D-5]stp instance 1 root primary
[D-5]stp instance 2 root secondary

[D-6]stp m m
[D-6]stp enable
[D-6]stp region-configuration 
[D-6-mst-region]region-name BG
[D-6-mst-region]instance 1 v 11 12 13 1103
[D-6-mst-region]instance 2 v  14 15 16 100
[D-6-mst-region]active region-configuration 
[D-6]stp instance 2 root primary
[D-6]stp instance 0 root secondary
[D-6]stp instance 1 root secondary

[A-4]stp m m
[A-4]stp enable    
[A-4]stp region-configuration 
[A-4-mst-region]region-name BG
[A-4-mst-region]instance 1 vlan 11 12 13 1103
[A-4-mst-region]instance 2 vlan 14 15 16 100
[A-4-mst-region]active region-c    
[A-4-mst-region]active region-configuration 

[A-5]stp m m
[A-5]stp enable
[A-5]stp region-configuration 
[A-5-mst-region]region-name BG
[A-5-mst-region]instance 1 vlan 11 12 13 1103
[A-5-mst-region]instance 2 vlan 14 15 16 100
[A-5-mst-region]active region-configuration 

[A-4]stp bpdu-protection 
[A-4]port-group group-member g 0/0/1 t g 0/0/22
[A-4-port-group]stp edged-port enable

[A-5]stp bpdu-protection 
[A-5]port-group group-member g 0/0/1 t g 0/0/22
[A-5-port-group]stp edged-port enable 

4、VRRP

[D-5]int vlanif 11
[D-5-Vlanif11]vrrp vrid 1 virtual-ip 10.1.11.254
[D-5-Vlanif11]vrrp vrid 1 priority 120
[D-5-Vlanif11]vrrp vrid 1 preempt-mode timer delay 20
[D-5-Vlanif11]vrrp vrid 1 track interface vlanif 1107 reduced 30
[D-5-Vlanif11]vrrp vrid 1 track interface vlanif 1111 reduced 30

[D-5-Vlanif11]int v 12
[D-5-Vlanif12]vrrp vrid 1 virtual-ip 10.1.12.254
[D-5-Vlanif12] vrrp vrid 1 priority 120
[D-5-Vlanif12] vrrp vrid 1 preempt-mode timer delay 20
[D-5-Vlanif12] vrrp vrid 1 track interface Vlanif1107 reduced 30
[D-5-Vlanif12] vrrp vrid 1 track interface Vlanif1111 reduced 30
[D-5-Vlanif12]

[D-5-Vlanif12]int v 13
[D-5-Vlanif13]vrrp vrid 1 virtual-ip 10.1.13.254
[D-5-Vlanif13] vrrp vrid 1 priority 120
[D-5-Vlanif13] vrrp vrid 1 preempt-mode timer delay 20
[D-5-Vlanif13] vrrp vrid 1 track interface Vlanif1107 reduced 30
[D-5-Vlanif13] vrrp vrid 1 track interface Vlanif1111 reduced 30

[D-5-Vlanif13]int v 14
[D-5-Vlanif14]vrrp vrid 1 virtual-ip 10.1.14.254
[D-5-Vlanif14]int v 15
[D-5-Vlanif15]vrrp vrid 1 virtual-ip 10.1.15.254
[D-5-Vlanif15]int v 16
[D-5-Vlanif16]vrrp vrid 1 virtual-ip 10.1.16.254                                                                                        

[D-6]int v 11
[D-6-Vlanif11]vrrp vrid 1 virtual-ip 10.1.11.254
[D-6-Vlanif11]int v 12
[D-6-Vlanif12]vrrp vrid 1 virtual-ip 10.1.12.254
[D-6-Vlanif12]int v 13
[D-6-Vlanif13]vrrp vrid 1 virtual-ip 10.1.13.254                                                                                  [D-6-Vlanif13]int v 14                                                                                                                      [D-6-Vlanif14]vrrp vrid 1 virtual-ip 10 . 1 . 14 .254                                                                             
[D-6-Vlanif14] vrrp vrid 1 priority 120
[D-6-Vlanif14] vrrp vrid 1 preempt-mode timer delay 20
[D-6-Vlanif14] vrrp vrid 1 track interface Vlanif1108 reduced 30
[D-6-Vlanif14] vrrp vrid 1 track interface Vlanif1112 reduced 30
[D-6-Vlanif14]int v 15
[D-6-Vlanif15]vrrp vrid 1 virtual-ip 10.1.15.254
[D-6-Vlanif15] vrrp vrid 1 priority 120
[D-6-Vlanif15] vrrp vrid 1 preempt-mode timer delay 20
[D-6-Vlanif15] vrrp vrid 1 track interface Vlanif1108 reduced 30
[D-6-Vlanif15] vrrp vrid 1 track interface Vlanif1112 reduced 30                                                        [D-6-Vlanif15]int v 16
[D-6-Vlanif16]vrrp vrid 1 virtual-ip 10.1.16.254
[D-6-Vlanif16] vrrp vrid 1 priority 120
[D-6-Vlanif16] vrrp vrid 1 preempt-mode timer delay 20
[D-6-Vlanif16] vrrp vrid 1 track interface Vlanif1108 reduced 30
[D-6-Vlanif16] vrrp vrid 1 track interface Vlanif1112 reduced 30  

dis vrrp b图

服务区配置

 1、创建VLAN

[D-3]vlan b 31 32 33 34 35 100

[D-4]vlan b 31 32 33 34 35 100

[C-1]vlan b 31 32 33 34 35 100 1101 1104 1105 1106 1107 1108

[C-2]vlan b 31 32 33 34 35 100 1101 1109 1110 1111 1112 1113

2、配置干道IP

[C-1]int Eth-Trunk 0
[C-1-Eth-Trunk0]trunkport g 6/0/0 t 6/0/1
[C-1-Eth-Trunk0]p l t
[C-1-Eth-Trunk0]p t a v 31 32 33 34 35 100 1101
[C-1]int g 6/0/2
[C-1-GigabitEthernet6/0/2]port link-type trunk
[C-1-GigabitEthernet6/0/2] port trunk allow-pass vlan 31 to 32 33 34 35 100
[C-1-GigabitEthernet6/0/2]int g 6/0/3
[C-1-GigabitEthernet6/0/3]port link-type trunk
[C-1-GigabitEthernet6/0/3] port trunk allow-pass vlan 31 to 32 33 34 35 100

[C-2]int Eth-Trunk 0
[C-2-Eth-Trunk0]trunkport g 6/0/0 t 6/0/1
[C-2-Eth-Trunk0]p l t
[C-2-Eth-Trunk0]p t a v 31 32 33 34 35 100 1101
[C-2]int g 6/0/4
[C-2-GigabitEthernet6/0/4]port link-type trunk
[C-2-GigabitEthernet6/0/4] port trunk allow-pass vlan 31 to  32 33 34 35 100
[C-2-GigabitEthernet6/0/4]int g 6/0/5
[C-2-GigabitEthernet6/0/5]port link-type trunk
[C-2-GigabitEthernet6/0/5] port trunk allow-pass vlan 31 to  32 33 34 35 100

[D-3]int e 0
[D-3-Eth-Trunk0]trunkport g 0/0/1 t 0/0/6
[D-3-Eth-Trunk0]p l t
[D-3-Eth-Trunk0]p t a v 31 32 33 34 35 100 
[D-3]int g 0/0/2
[D-3-GigabitEthernet0/0/2]p l t
[D-3-GigabitEthernet0/0/2]p t a v 31 to  32 33 34 35 100
[D-3-GigabitEthernet0/0/2]int g 0/0/4
[D-3-GigabitEthernet0/0/4]port link-type trunk
[D-3-GigabitEthernet0/0/4] port trunk allow-pass vlan 31 to 32 33 34 35 100

[D-4]int e 0
[D-4-Eth-Trunk0]trunkport g 0/0/1 t 0/0/6
[D-4-Eth-Trunk0]p l t
[D-4-Eth-Trunk0]p t a v 31 32 33 34 35 100
[D-4]int g 0/0/3
[D-4-GigabitEthernet0/0/3]port link-type trunk
[D-4-GigabitEthernet0/0/3] port trunk allow-pass vlan 31 to 32 33 34 35 100
[D-4-GigabitEthernet0/0/3]int g 0/0/5
[D-4-GigabitEthernet0/0/5]port link-type trunk
[D-4-GigabitEthernet0/0/5] port trunk allow-pass vlan 31 to 32 33 34 35 100

[C-1]int v 100
[C-1-Vlanif100]ip add 10.1.100.2 24
[C-1-Vlanif100]int v 31
[C-1-Vlanif31]ip add 10.1.31.1 24
[C-1-Vlanif31]int v 32
[C-1-Vlanif32]ip add 10.1.32.1 24
[C-1-Vlanif32]int v 33
[C-1-Vlanif33]ip add 10.1.33.1 24
[C-1-Vlanif33]int v 34
[C-1-Vlanif34]ip add 10.1.34.1 24
[C-1-Vlanif34]int v 35                                                                                                                          [C-1-Vlanif35]ip add 10.1.35.1 24                                                                                                      [C-1-Vlanif35]int v 36         
[C-1-Vlanif36]ip add 10.1.36.1 24                                                                                                      [C-1-Vlanif36]int v 1101
[C-1-Vlanif1101]ip add 10.1.0.1 30
[C-1-Vlanif1101]int v 1104
[C-1-Vlanif1104]ip add 10.1.0.13 30
[C-1-Vlanif1104]int v 1105
[C-1-Vlanif1105]ip add 10.1.0.17 30
[C-1-Vlanif1105]int v 1106
[C-1-Vlanif1106]ip add 10.1.0.22 30
[C-1-Vlanif1106]int v 1107
[C-1-Vlanif1107]ip add 10.1.0.25 30
[C-1-Vlanif1107]int v 1108
[C-1-Vlanif1108]ip ad        d 10.1.0.29 30

[C-2]int v 100
[C-2-Vlanif100]ip add 10.1.3 24
[C-2]int v 31
[C-2-Vlanif31]ip add 10.1.31.2 24
[C-2-Vlanif31]int v 32
[C-2-Vlanif32]ip add 10.1.32.2 24
[C-2-Vlanif32]int v 33
[C-2-Vlanif33]ip add 10.1.33.2 24
[C-2-Vlanif33]int v 34
[C-2-Vlanif34]ip add 10.1.34.2 24
[C-2-Vlanif34]int v 35
[C-2-Vlanif35]ip add 10.1.35.2 24                                                                                                      [C-2-Vlanif35]int v 36                                                                                                                          [C-2-Vlanif36]ip add 10.1.36.2 24           
[C-2-Vlanif36]int v 1101
[C-2-Vlanif1101]ip add 10.1.0.2 30
[C-2-Vlanif1101]int v 1109
[C-2-Vlanif1109]ip add 10.1.0.33 30
[C-2-Vlanif1109]int v 1110
[C-2-Vlanif1110]ip add 10.1.0.37 30
[C-2-Vlanif1110]int v 1111
[C-2-Vlanif1111]ip add 10.1.0.41 30
[C-2-Vlanif1111]int v 1112
[C-2-Vlanif1112]ip add 10.1.0.45 30
[C-2-Vlanif1112]int v 1113
[C-2-Vlanif1113]ip add 10.1.0.50 30

[D-3]int v 100
[D-3-Vlanif100]ip add 10.1.100.4 24

[D-4]int v 100
[D-4-Vlanif100]ip add 10.1.100.5 24

3、MSTP生成树

[C-1]stp m m
[C-1]stp enable   
[C-1]stp region-configuration 
[C-1-mst-region]region-name WFQ
[C-1-mst-region]instance 1 vlan 31 33 1101
[C-1-mst-region]instance 2 vlan 32 34 35 100
[C-1-mst-region]active region-configuration                                                                                        [C-1]stp instance 0 root primary  
[C-1]stp instance 1 root primary
[C-1]stp instance 2 root secondary

[C-2]stp m m
[C-2]stp enable
[C-2]stp region-configuration
[C-2-mst-region]region-name WFQ
[C-2-mst-region]instance 1 vlan 31 33 1101  
[C-2-mst-region]instance 2 vlan 32 34 35 100
[C-2-mst-region]active region-configuration                                                                                        [C-2]stp instance 0 root secondary          
[C-2]stp instance 1 root secondary
[C-2]stp instance 2 root primary

[D-3]stp m m
[D-3]stp enable
[D-3]stp region-configuration 
[D-3-mst-region]region-name WFQ
[D-3-mst-region]instance 1 vlan 31 33 1101
[D-3-mst-region]instance 2 vlan 32 34 35 100
[D-3-mst-region]active region-configuration 
 

[D-4]stp m m
[D-4]stp enable
[D-4]stp region-configuration
[D-4-mst-region]region-name WFQ
[D-4-mst-region] instance 1 vlan 31 33 1101
[D-4-mst-region] instance 2 vlan 32 34 35 100
[D-4-mst-region] active region-configuration
 dis stp b图

 [D-3]stp bpdu-protection
[D-3]port-group group-member g 0/0/7 to GigabitEthernet 0/0/24
[D-3-port-group]stp edged-port enable

[D-4]stp bpdu-protection
[D-4]port-group group-member g 0/0/7 to GigabitEthernet 0/0/24 
[D-4-port-group]stp edged-port enable 

4、VRRP

[C-1]int v 31
[C-1-Vlanif31]vrrp vrid 1 virtual-ip 10.1.31.254
[C-1-Vlanif31]vrrp vrid 1 priority 120
[C-1-Vlanif31]vrrp vrid 1 preempt-mode timer delay 20
[C-1-Vlanif31]vrrp vrid 1 track interface vlanif 1106 reduced 30

[C-1-Vlanif31]int v 33
[C-1-Vlanif33] vrrp vrid 1 virtual-ip 10.1.33.254
[C-1-Vlanif33] vrrp vrid 1 priority 120
[C-1-Vlanif33] vrrp vrid 1 preempt-mode timer delay 20
[C-1-Vlanif33vrrp] vrid 1 track interface Vlanif1106 reduced 30

[C-1]int v 32
[C-1-Vlanif32] vrrp vrid 1 virtual-ip 10.1.32.254
 

[C-1]int v 34
[C-1-Vlanif85]vrrp vrid 1 virtual-ip 10.1.34.254
[C-1]int v 35
[C-1-Vlanif86]vrrp vrid 1 virtual-ip 10.1.35.254
 

[C-2]int v 32
[C-2-Vlanif32] vrrp vrid 1 virtual-ip 10.1.32.254
[C-2-Vlanif32] vrrp vrid 1 priority 120
[C-2-Vlanif32] vrrp vrid 1 preempt-mode timer delay 20
[C-2-Vlanif32] vrrp vrid 1 track interface Vlanif1113 reduced 30
[C-2]int v 34
[C-2-Vlanif34] vrrp vrid 1 virtual-ip 10.1.34.254
[C-2-Vlanif34] vrrp vrid 1 priority 120
[C-2-Vlanif34] vrrp vrid 1 preempt-mode timer delay 20
[C-2-Vlanif34] vrrp vrid 1 track interface Vlanif1113 reduced 30
[C-2]int v 35
[C-2-Vlanif80]vrrp vrid 1 virtual-ip 10.1.35.254                                                                                  [C-2-Vlanif34] vrrp vrid 1 priority 120                                                                                                  [C-2-Vlanif34] vrrp vrid 1 preempt-mode timer delay 20                                                                    [C-2-Vlanif34] vrrp vrid 1 track interface Vlanif1113 reduced 30 
[C-2]int v 31
[C-2-Vlanif81]vrrp vrid 1 virtual-ip 10.1.31.254
[C-2]int v 33
[C-2-Vlanif33]vrrp vrid 1 virtual-ip 10.1.33.254

dis vrrp b 图

路由设计

1、直连网段做通

[C-1]int g 6/0/8
[C-1-GigabitEthernet6/0/8]p l a
[C-1-GigabitEthernet6/0/8]p d v 1106
[C-1-GigabitEthernet6/0/8]int g 6/0/4
[C-1-GigabitEthernet6/0/4]p l t
[C-1-GigabitEthernet6/0/4]p t a v 1104
[C-1-GigabitEthernet6/0/4]int g 6/0/5
[C-1-GigabitEthernet6/0/5]p l t
[C-1-GigabitEthernet6/0/5]p t a v 1105
[C-1-GigabitEthernet6/0/5]int g 6/0/6
[C-1-GigabitEthernet6/0/6]p l t
[C-1-GigabitEthernet6/0/6]p t a v 1107
[C-1-GigabitEthernet6/0/6]int g 6/0/7
[C-1-GigabitEthernet6/0/7]p l t
[C-1-GigabitEthernet6/0/7]p t a v 1108

[C-2]int g 6/0/8
[C-2-GigabitEtherne6/0/8]p l a
[C-2-GigabitEthernet6/0/8]p d v 1113
[C-2-GigabitEthernet6/0/8]int g 6/0/2
[C-2-GigabitEthernet6/0/2]p l t
[C-2-GigabitEthernet6/0/2]p t a v 1109
[C-2-GigabitEthernet6/0/2]int g 6/0/3
[C-2-GigabitEthernet6/0/3]p l t
[C-2-GigabitEthernet6/0/3]p t a v 1110
[C-2-GigabitEthernet6/0/3]int g 6/0/7
[C-2-GigabitEthernet6/0/7]p l t
[C-2-GigabitEthernet6/0/7]p t a v 1111
[C-2-GigabitEthernet6/0/7]int g 6/0/6
[C-2-GigabitEthernet6/0/6]p l t
[C-2-GigabitEthernet6/0/6]p t a v 1112
 

2、关闭生成树

[C-1]port-group group-member g 6/0/4 t g 6/0/7
[C-1-port-group]undo stp enable
 

[C-2]port-group group-member g 6/0/2 t g 6/0/3                                                                                [C-2]port-group group-member g 6/0/6 t g 6/0/7                 
[C-2-port-group]undo stp enable 

[D-1]port-group group-member g 0/0/2                                                                                              [D-1]port-group group-member g 0/0/4  
[D-1-port-group]undo stp enable

[D-2]port-group group-member g 0/0/3                                                                                              [D-2]port-group group-member g 0/0/5   
[D-2-port-group]undo stp enable

[D-5]port-group group-member g 0/0/6 t g 0/0/7
[D-5-port-group]undo stp enable
 

[D-6]port-group group-member g 0/0/6 t g 0/0/7
[D-6-port-group]undo stp enable

[D-1]int g 0/0/4
[D-1-GigabitEthernet0/0/4]p l t
[D-1-GigabitEthernet0/0/4]p t a v 1104
[D-1-GigabitEthernet0/0/4]int g 0/0/2
[D-1-GigabitEthernet0/0/2]p l t
[D-1-GigabitEthernet0/0/2]p t a v 1109

[D-2]int g 0/0/5
[D-2-GigabitEthernet0/0/5]p l t
[D-2-GigabitEthernet0/0/5]p t a v 1105
[D-2-GigabitEthernet0/0/5]int g 0/0/3
[D-2-GigabitEthernet0/0/3]p l t
[D-2-GigabitEthernet0/0/3]p t a v 1110
 

[D-5]int g 0/0/6
[D-5-GigabitEthernet0/0/6]p l t
[D-5-GigabitEthernet0/0/6]p t a v 1107
[D-5-GigabitEthernet0/0/6]int g 0/0/7
[D-5-GigabitEthernet0/0/7]p l t 
[D-5-GigabitEthernet0/0/7]p t a v 1111
 

[D-6]int g 0/0/7
[D-6-GigabitEthernet0/0/7]p l t
[D-6-GigabitEthernet0/0/7]p t a v 1108
[D-6-GigabitEthernet0/0/7]int g 0/0/6
[D-6-GigabitEthernet0/0/6]p l t
[D-6-GigabitEthernet0/0/6]p t a v 1112
 

3、防火墙

[F-1]int g 0/0/0
[F-1-GigabitEthernet0/0/0]ip add 10.1.0.21 30
[F-1-GigabitEthernet0/0/0]int g 0/0/1
[F-1-GigabitEthernet0/0/1]ip add 10.1.0.49 30

[F-1]firewall zone trust
[F-1-zone-trust]add interface GigabitEthernet 0/0/0
[F-1-zone-trust]add interface GigabitEthernet 0/0/1

[F-1]firewall packet-filter default permit interzone trust local direction outbound 

[F-1]firewall packet-filter default permit interzone local trust direction inbound 
 

4、OSPF

[F-1]ospf 1 router-id 1.1.1.1
[F-1-ospf-1]a 0
[F-1-ospf-1-area-0.0.0.0]network 10.1.0.21 0.0.0.0
[F-1-ospf-1-area-0.0.0.0]network 10.1.0.49 0.0.0.0
 

[C-1]ospf 1 router-id 2.2.2.2
[C-1-ospf-1]a 0
[C-1-ospf-1-area-0.0.0.0]network 10.1.0.1 0.0.0.0
[C-1-ospf-1-area-0.0.0.0]network 10.1.100.2 0.0.0.0
[C-1-ospf-1-area-0.0.0.0]network 10.1.0.22 0.0.0.0

[C-1-ospf-1]a 1
[C-1-ospf-1-area-0.0.0.1]network 10.1.0.13 0.0.0.0
[C-1-ospf-1-area-0.0.0.1]network 10.1.0.17 0.0.0.0

[C-1-ospf-1]a 2
[C-1-ospf-1-area-0.0.0.2]network 10.1.0.25 0.0.0.0
[C-1-ospf-1-area-0.0.0.2]network 10.1.0.29 0.0.0.0
 

[C-1-ospf-1]a 3
[C-1-ospf-1-area-0.0.0.3]net 10.1.31.1 0.0.0.0
[C-1-ospf-1-area-0.0.0.3]net 10.1.32.1 0.0.0.0
[C-1-ospf-1-area-0.0.0.3]net 10.1.33.1 0.0.0.0
[C-1-ospf-1-area-0.0.0.3]net 10.1.34.1 0.0.0.0
[C-1-ospf-1-area-0.0.0.3]net 10.1.35.1 0.0.0.0
 

[C-2]ospf 1 router-id 3.3.3.3
[C-2-ospf-1]a 0
[C-2-ospf-1-area-0.0.0.0]net 10.1.100.3 0.0.0.0
[C-2-ospf-1-area-0.0.0.0]net 10.1.0.2 0.0.0.0
[C-2-ospf-1-area-0.0.0.0]net 10.1.0.50 0.0.0.0

[C-2-ospf-1]a 1
[C-2-ospf-1-area-0.0.0.1]net 10.1.0.33 0.0.0.0
[C-2-ospf-1-area-0.0.0.1]net 10.1.0.37 0.0.0.0

[C-2-ospf-1]a 2
[C-2-ospf-1-area-0.0.0.2]net 10.1.0.41 0.0.0.0
[C-2-ospf-1-area-0.0.0.2]net 10.1.0.45 0.0.0.0

[C-2-ospf-1]a 3
[C-2-ospf-1-area-0.0.0.3]net 10.1.31.2 0.0.0.0
[C-2-ospf-1-area-0.0.0.3]net 10.1.32.2 0.0.0.0
[C-2-ospf-1-area-0.0.0.3]net 10.1.33.2 0.0.0.0
[C-2-ospf-1-area-0.0.0.3]net 10.1.34.2 0.0.0.0
[C-2-ospf-1-area-0.0.0.3]net 10.1.35.2 0.0.0.0

[D-1]ospf 1 router-id 4.4.4.4
[D-1-ospf-1]a 1
[D-1-ospf-1-area-0.0.0.1]net 10.1.21.1 0.0.0.0
[D-1-ospf-1-area-0.0.0.1]net 10.1.22.1 0.0.0.0
[D-1-ospf-1-area-0.0.0.1]net 10.1.23.1 0.0.0.0
[D-1-ospf-1-area-0.0.0.1]net 10.1.100.6 0.0.0.0
[D-1-ospf-1-area-0.0.0.1]net 10.1.0.5 0.0.0.0
[D-1-ospf-1-area-0.0.0.1]net 10.1.0.14 0.0.0.0
[D-1-ospf-1-area-0.0.0.1]net 10.1.0.34 0.0.0.0

[D-2]ospf 1 router-id 5.5.5.5
[D-2-ospf-1]a 1
[D-2-ospf-1-area-0.0.0.1]net 10.1.21.2 0.0.0.0
[D-2-ospf-1-area-0.0.0.1]net 10.1.22.2 0.0.0.0
[D-2-ospf-1-area-0.0.0.1]net 10.1.23.2 0.0.0.0
[D-2-ospf-1-area-0.0.0.1]net 10.1.100.7 0.0.0.0
[D-2-ospf-1-area-0.0.0.1]net 10.1.0.6 0.0.0.0
[D-2-ospf-1-area-0.0.0.1]net 10.1.0.18 0.0.0.0
[D-2-ospf-1-area-0.0.0.1]net 10.1.0.38 0.0.0.0

[D-5]ospf 1 router-id 6.6.6.6
[D-5-ospf-1]a 2
[D-5-ospf-1-area-0.0.0.2]net 10.1.11.1 0.0.0.0
[D-5-ospf-1-area-0.0.0.2]net 10.1.12.1 0.0.0.0
[D-5-ospf-1-area-0.0.0.2]net 10.1.13.1 0.0.0.0
[D-5-ospf-1-area-0.0.0.2]net 10.1.14.1 0.0.0.0
[D-5-ospf-1-area-0.0.0.2]net 10.1.15.1 0.0.0.0                                                                                  [D-5-ospf-1-area-0.0.0.2]net 10.1.16.1 0.0.0.0        
[D-5-ospf-1-area-0.0.0.2]net 10.1.100.8 0.0.0.0
[D-5-ospf-1-area-0.0.0.2]net 10.1.0.9 0.0.0.0
[D-5-ospf-1-area-0.0.0.2]net 10.1.0.26 0.0.0.0
[D-5-ospf-1-area-0.0.0.2]net 10.1.0.42 0.0.0.0

[D-6]ospf 1 router-id 7.7.7.7
[D-6-ospf-1]a 2
[D-6-ospf-1-area-0.0.0.2]net 10.1.11.2 0.0.0.0
[D-6-ospf-1-area-0.0.0.2]net 10.1.12.2 0.0.0.0
[D-6-ospf-1-area-0.0.0.2]net 10.1.13.2 0.0.0.0
[D-6-ospf-1-area-0.0.0.2]net 10.1.14.2 0.0.0.0
[D-6-ospf-1-area-0.0.0.2]net 10.1.15.2 0.0.0.0                                                                                  [D-6-ospf-1-area-0.0.0.2]net 10.1.16.2 0.0.0.0       
[D-6-ospf-1-area-0.0.0.2]net 10.1.100.9 0.0.0.0
[D-6-ospf-1-area-0.0.0.2]net 10.1.0.10 0.0.0.0
[D-6-ospf-1-area-0.0.0.2]net 10.1.0.30 0.0.0.0
[D-6-ospf-1-area-0.0.0.2]net 10.1.0.46 0.0.0.0

OSPF的优化

area 1 2 作为total stub区域

[D-1]ospf 1
[D-1-ospf-1]a 1
[D-1-ospf-1-area-0.0.0.1]stub

[D-2]ospf 1
[D-2-ospf-1]a 1
[D-2-ospf-1-area-0.0.0.1]stub

[C-1]ospf 1 
[C-1-ospf-1]a 1
[C-1-ospf-1-area-0.0.0.1]stub
[C-1-ospf-1-area-0.0.0.1]stub no-summary

[C-2]ospf 1
[C-2-ospf-1]a 1
[C-2-ospf-1-area-0.0.0.1]stub
[C-2-ospf-1-area-0.0.0.1]stub no-summary

[D-5]ospf 1 
[D-5-ospf-1]a 2
[D-5-ospf-1-area-0.0.0.2]stub

[D-6]ospf 1
[D-6-ospf-1]a 2
[D-6-ospf-1-area-0.0.0.2]stub
 

[C-1]ospf 1
[C-1-ospf-1]a 2
[C-1-ospf-1-area-0.0.0.2]stub
[C-1-ospf-1-area-0.0.0.2]stub no-summary 

[C-2-ospf-1]a 2
[C-2-ospf-1-area-0.0.0.2]stub
[C-2-ospf-1-area-0.0.0.2]stub no-summary 

 area 0区域认证   F1 C1 C2相同配置

[F-1]ospf 1 
[F-1-ospf-1]a 0
[F-1-ospf-1-area-0.0.0.0]authentication-mode md5 1 huawei

网关禁默接口

[D-1]ospf 1
[D-1-ospf-1]silent-interface  vlanif 21
[D-1-ospf-1]silent-interface vlanif 22
[D-1-ospf-1]silent-interface vlanif 23
[D-1-ospf-1]silent-interface vlanif 100
[D-1-ospf-1]silent-interface vlanif 1102

 [D-2]ospf 1
[D-2-ospf-1]silent-interface Vlanif21
[D-2-ospf-1] silent-interface Vlanif22
[D-2-ospf-1] silent-interface Vlanif23
[D-2-ospf-1] silent-interface Vlanif100
[D-2-ospf-1] silent-interface Vlanif1102

[D-5]ospf 1
[D-5-ospf-1]silent-interface vlanif 11
[D-5-ospf-1]silent-interface vlanif 12
[D-5-ospf-1]silent-interface vlanif 13
[D-5-ospf-1]silent-interface vlanif 14
[D-5-ospf-1]silent-interface vlanif 15                                                                                                  [D-5-ospf-1]silent-interface vlanif 16       
[D-5-ospf-1]silent-interface vlanif 100
[D-5-ospf-1]silent-interface vlanif 1103

[D-6]ospf 1
[D-6-ospf-1]silent-interface Vlanif 11
[D-6-ospf-1] silent-interface Vlanif 12
[D-6-ospf-1] silent-interface Vlanif 13
[D-6-ospf-1] silent-interface Vlanif 14
[D-6-ospf-1] silent-interface Vlanif 15                                                                                                [D-6-ospf-1] silent-interface Vlanif 16                        
[D-6-ospf-1] silent-interface Vlanif 100
[D-6-ospf-1] silent-interface Vlanif 1103

 [C-1]ospf 1
[C-1-ospf-1]silent-interface vlanif 100
[C-1-ospf-1]silent-interface vlanif 1101
[C-1-ospf-1]silent-interface vlanif 31
[C-1-ospf-1]silent-interface vlanif 32
[C-1-ospf-1]silent-interface vlanif 33
[C-1-ospf-1]silent-interface vlanif 34
[C-1-ospf-1]silent-interface vlanif 35

[C-2]ospf 1
[C-2-ospf-1]silent-interface Vlanif 100
[C-2-ospf-1] silent-interface Vlanif 1101
[C-2-ospf-1] silent-interface Vlanif 31
[C-2-ospf-1] silent-interface Vlanif 32
[C-2-ospf-1] silent-interface Vlanif 33
[C-2-ospf-1] silent-interface Vlanif 34
[C-2-ospf-1] silent-interface Vlanif 35

ospf 的网络类型p2p

[C-1]int v 1101
[C-1-Vlanif1101]ospf network-type p2p

[C-2]int v 1101
[C-2-Vlanif1101]ospf network-type p2p

[C-1-Vlanif1101]ospf timer hello 1

[C-2-Vlanif1101]ospf timer hello 1

路径

[C-1]ospf 1


[C-1-ospf-1]a 2 
[C-1-ospf-1-area-0.0.0.2]def    
[C-1-ospf-1-area-0.0.0.2]default-cost  5

 [C-2]ospf 1
[C-2-ospf-1]a 1
[C-2-ospf-1-area-0.0.0.1]def    
[C-2-ospf-1-area-0.0.0.1]default-cost 5

  • 26
    点赞
  • 27
    收藏
    觉得还不错? 一键收藏
  • 0
    评论

“相关推荐”对你有帮助么?

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值