防火墙双机热备综合 实验配置

使用ospf连接 

 

交换机3配置文件

<Huawei>dis cu
#
sysname Huawei
#
vlan batch 20 30

#
interface Vlanif1
#
interface MEth0/0/1
#
interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
#
interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
#
interface GigabitEthernet0/0/3
 port link-type access
 port default vlan 20
#
interface GigabitEthernet0/0/4
 port link-type access
 port default vlan 30
#
interface GigabitEthernet0/0/5
 port link-type access
 port default vlan 20
#
interface GigabitEthernet0/0/6
 port link-type access
 port default vlan 30
#

#
interface NULL0
#
user-interface con 0
user-interface vty 0 4
#
return

交换机1配置

<Huawei>dis cu
#
sysname Huawei
#
vlan batch 20 30

#
interface Vlanif1
#
interface MEth0/0/1
#
interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
#
interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
#
interface GigabitEthernet0/0/3
#
interface GigabitEthernet0/0/4
#
interface GigabitEthernet0/0/5
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
#

return

交换机2配置

<Huawei>dis cu
#
sysname Huawei
#
vlan batch 20 30

#
interface Vlanif1
#
interface MEth0/0/1
#
interface GigabitEthernet0/0/1
#
interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
#
interface GigabitEthernet0/0/3
#
interface GigabitEthernet0/0/4
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
#
interface GigabitEthernet0/0/5
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094

return

路由器配置

<Huawei>dis cu
[V200R003C00]
#
 snmp-agent local-engineid 800007DB03000000000000
 snmp-agent 
#
bfd
#

firewall zone Local
 priority 15
#
interface GigabitEthernet0/0/0
 ip address 100.0.0.254 255.255.255.0 
#
interface GigabitEthernet0/0/1
 ip address 11.0.0.2 255.255.255.0 
#
interface GigabitEthernet0/0/2
 ip address 12.0.0.2 255.255.255.0 
#
interface NULL0
#
bfd 1 bind peer-ip 12.0.0.1 source-ip 12.0.0.2
 discriminator local 2
 discriminator remote 1
 commit
#
ospf 1 
 area 0.0.0.0 
  network 11.0.0.0 0.0.0.255 
  network 12.0.0.0 0.0.0.255 
  network 100.0.0.0 0.0.0.255 
#
user-interface con 0
 authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac

防火墙1 WEB配置

 防火墙2

防火墙路由表

双机热备配置防火墙1

 

 防火墙2

 

 策略配置

 

IP-LINK