1、根据要求在ENSP当中构建网络。【30分】
注意:得分点在于和效果图一样,效果图中得设备一个都不能少,必须跟效果图得图标一样才能得30分,反之0分。
2、根据需求给端口配置access口和trunk口(要求与PC相连得access口,其他口配置trunk口)。【70分】
Access口配置实例:(20分)
参考命令:
port link-type access
trunk口配置样例:(5分)
参考命令:
port link-type trunk
port trunk allow-pass vlan all
注意:必须有命令截图,有命令截图得70分,不然0分。
3、在路由器上和防火墙上面配置路由规则保证两个PC机之间的流量通信。【100分】
注意:具体路由规则不做限制,要求必须有命令截图,而且必须保证流量经过所有设备,最后是的两个PCping通得结果为准。
根据上述题意来完成ensp组网要求。
拓扑图和设备跟上图一样,根据第二题题意得知不能使用三层交换机进行vlan互通,需配置单臂路由。
下面配置参考命令:
LSW2:
<Huawei>undo terminal monitor
<Huawei>system-view
[Huawei]vlan batch 10 20
[Huawei]interface Ethernet0/0/1
[Huawei-Ethernet0/0/1]port link-type access
[Huawei-Ethernet0/0/1]port default vlan 10
[Huawei]interface Ethernet0/0/2
[Huawei-Ethernet0/0/2]port link-type access
[Huawei-Ethernet0/0/2]port default vlan 20
[Huawei]interface GigabitEthernet0/0/1
[Huawei-GigabitEthernet0/0/1]port link-type trunk
[Huawei-GigabitEthernet0/0/1]port trunk allow-pass vlan 10 20
AR2:
如果交换机和路由器用trunk模式相连,且让其vlan互通,那么路由器需要配置单臂路由。
<Huawei>undo terminal monitor
<Huawei>system-view
[Huawei]interface GigabitEthernet0/0/1.1 //创建子接口
[Huawei-GigabitEthernet0/0/1.1] dot1q termination vid 10
[Huawei-GigabitEthernet0/0/1.1] ip address 192.168.10.1 255.255.255.0
[Huawei-GigabitEthernet0/0/1.1] arp broadcast enable //开启arp转发
[Huawei]interface GigabitEthernet 0/0/1.2
[Huawei-GigabitEthernet0/0/1.2] dot1q termination vid 20
[Huawei-GigabitEthernet0/0/1.2] ip address 192.168.20.1 255.255.255.0
[Huawei-GigabitEthernet0/0/1.2] arp broadcast enable
[Huawei]interface GigabitEthernet 0/0/0
[Huawei-GigabitEthernet0/0/0]ip address 192.168.6.1 24
配置dhcp(可选,也可以手动给pc配置ip)
[Huawei]dhcp enable
[Huawei]ip pool 10
[Huawei-ip-pool-10]gateway-list 192.168.10.1
[Huawei-ip-pool-10]network 192.168.10.0 mask 255.255.255.0
[Huawei-ip-pool-10]dns-list 8.8.8.8
[Huawei]interface GigabitEthernet 0/0/1.1
[Huawei-GigabitEthernet0/0/1.1]dhcp select global //dhcp开启全局分配
[Huawei]ip pool 20
[Huawei-ip-pool-20]gateway-list 192.168.20.1
[Huawei-ip-pool-20]network 192.168.20.0 mask 255.255.255.0
[Huawei-ip-pool-20]dns-list 8.8.8.8
[Huawei]interface GigabitEthernet 0/0/1.2
[Huawei-GigabitEthernet0/0/1.2]dhcp select global
FW2:
默认用户名、密码
Username:admin
Password:Admin@123
<USG6000V1>undo terminal monitor
<USG6000V1>system-view
[USG6000V1]firewall zone trust
[USG6000V1-zone-trust]add interface GigabitEthernet 1/0/0
[USG6000V1-GigabitEthernet1/0/0]ip address 192.168.6.2 255.255.255.0
[USG6000V1-GigabitEthernet1/0/0]service-manage all permit
[USG6000V1]security-policy
[USG6000V1-policy-security]rule name aa
[USG6000V1-policy-security-rule-aa]source-zone any
[USG6000V1-policy-security-rule-aa]destination-zone any
[USG6000V1-policy-security-rule-aa]source-address any
[USG6000V1-policy-security-rule-aa]action permit
[USG6000V1]ip route-static 192.168.10.0 24 192.168.6.1
[USG6000V1]ip route-static 192.168.20.0 24 192.168.6.1
至此完成ensp模拟考题