使用ospf连接
交换机3配置文件
<Huawei>dis cu
#
sysname Huawei
#
vlan batch 20 30
#
interface Vlanif1
#
interface MEth0/0/1
#
interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
interface GigabitEthernet0/0/2
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
interface GigabitEthernet0/0/3
port link-type access
port default vlan 20
#
interface GigabitEthernet0/0/4
port link-type access
port default vlan 30
#
interface GigabitEthernet0/0/5
port link-type access
port default vlan 20
#
interface GigabitEthernet0/0/6
port link-type access
port default vlan 30
#
#
interface NULL0
#
user-interface con 0
user-interface vty 0 4
#
return
交换机1配置
<Huawei>dis cu
#
sysname Huawei
#
vlan batch 20 30
#
interface Vlanif1
#
interface MEth0/0/1
#
interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
interface GigabitEthernet0/0/2
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
interface GigabitEthernet0/0/3
#
interface GigabitEthernet0/0/4
#
interface GigabitEthernet0/0/5
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
return
交换机2配置
<Huawei>dis cu
#
sysname Huawei
#
vlan batch 20 30
#
interface Vlanif1
#
interface MEth0/0/1
#
interface GigabitEthernet0/0/1
#
interface GigabitEthernet0/0/2
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
interface GigabitEthernet0/0/3
#
interface GigabitEthernet0/0/4
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
interface GigabitEthernet0/0/5
port link-type trunk
port trunk allow-pass vlan 2 to 4094
return
路由器配置
<Huawei>dis cu
[V200R003C00]
#
snmp-agent local-engineid 800007DB03000000000000
snmp-agent
#
bfd
#
firewall zone Local
priority 15
#
interface GigabitEthernet0/0/0
ip address 100.0.0.254 255.255.255.0
#
interface GigabitEthernet0/0/1
ip address 11.0.0.2 255.255.255.0
#
interface GigabitEthernet0/0/2
ip address 12.0.0.2 255.255.255.0
#
interface NULL0
#
bfd 1 bind peer-ip 12.0.0.1 source-ip 12.0.0.2
discriminator local 2
discriminator remote 1
commit
#
ospf 1
area 0.0.0.0
network 11.0.0.0 0.0.0.255
network 12.0.0.0 0.0.0.255
network 100.0.0.0 0.0.0.255
#
user-interface con 0
authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac
防火墙1 WEB配置
防火墙2
防火墙路由表
双机热备配置防火墙1
防火墙2
策略配置
IP-LINK