HCIP-二层综合实验-开发者社区

作业要求：

1、内网IP地址使用172.16.0.0/16分配
2、sW1和sw2之间互为备份
3、VRRP/STP/VLAN/Eth-trunk均使用
4、所有pc均通过oHcP获取IP地址
5、ISP只能配置IP地址
6、所有电脑可以正常访问IsP路由器环回

172.16.0.0/16
172.16.0.0/24
172.16.0.00 000000/26
vlan2:172.16.0.0/26
sw1vlan2:172.16.0.1/26
sw2vlan2:172.16.0.2/26
虚拟网关:172.16.0.62/26
vlan3:172.16.0.64/26
sw1vlan3:172.16.0.65/26
sw2vlan3:172.16.0.66/26
虚拟网关:172.16.0.126/26
vlan10:172.16.0.128/26
sw1vlan10:172.16.0.129/26
r1g0/0/1:172.16.0.130/26
vlan20:172.16.0.192/26
sw2vlan20:172.16.0.193/26
r1g0/0/0:172.16.0.194/26

<sw1>sys [Huawei]sysname sw1 [sw1]int Eth-Trunk 0 [sw1-Eth-Trunko]trunkport GigabitEthernet 0/0/1 to 0/0/2 [sw1-Eth-Trunko]q [sw1]vlan batch 2 3 10 20 [swl]dis vlan [sw1]port-group group-member GigabitEthernet 0/0/3 to GigabitEthernet 0/0/4 [sw1-port-group]port link-type trunk [sw1-GigabitEthernet0/0/3]port link-type trunk [sw1-GigabitEthernet0/0/4]port link-type trunk [sw1-port-group]port trunk allow-pass vlan 2 3 [sw1-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 3 [sw1-GigabitEthernet0/0/4]port trunk allow-pass vlan 2 3 [sw1-port-group]q [sw1]int [sw1]interface Eth-Trunk 0 [sw1-Eth-Trunk0]port link-type trunk [sw1-Eth-Trunk0]port trunk allow-pass vlan 2 3 10 20 [sw1-Eth-Trunk0]q [sw1]inter [sw1]interface g [sw1]interface GigabitEthernet 0/0/5 [sw1-GigabitEthernet0/0/5]port link-type access [sw1-GigabitEthernet0/0/5]port default vlan 10 [sw1-GigabitEthernet0/0/5]q [sw1]dis vlan The total number of vlans is : 5 -------------------------------------------------------------------------------- U: Up; D: Down; TG: Tagged; UT: Untagged; MP: Vlan-mapping; ST: Vlan-stacking; #: ProtocolTransparent-vlan; *: Management-vlan; -------------------------------------------------------------------------------- VID Type Ports -------------------------------------------------------------------------------- 1 common UT:GE0/0/3(U) GE0/0/4(U) GE0/0/6(D) GE0/0/7(D) GE0/0/8(D) GE0/0/9(D) GE0/0/10(D) GE0/0/11(D) GE0/0/12(D) GE0/0/13(D) GE0/0/14(D) GE0/0/15(D) GE0/0/16(D) GE0/0/17(D) GE0/0/18(D) GE0/0/19(D) GE0/0/20(D) GE0/0/21(D) GE0/0/22(D) GE0/0/23(D) GE0/0/24(D) Eth-Trunk0(U) 2 common TG:GE0/0/3(U) GE0/0/4(U) Eth-Trunk0(U) 3 common TG:GE0/0/3(U) GE0/0/4(U) Eth-Trunk0(U) 10 common UT:GE0/0/5(U) TG:Eth-Trunk0(U) 20 common TG:Eth-Trunk0(U) VID Status Property MAC-LRN Statistics Description -------------------------------------------------------------------------------- 1 enable default enable disable VLAN 0001 2 enable default enable disable VLAN 0002 3 enable default enable disable VLAN 0003 10 enable default enable disable VLAN 0010 20 enable default enable disable VLAN 0020

<Huawei>undo t m Info: Current terminal monitor is off. <Huawei>sys Enter system view, return user view with Ctrl+Z. [Huawei]sys sw2 [sw2]interface Eth-Trunk 0 [sw2-Eth-Trunk0]trunkport GigabitEthernet 0/0/1 to 0/0/2 [sw2-Eth-Trunk0]q [sw2]vlan b [sw2]vlan batch 2 3 10 20 [sw2]port-group group-member GigabitEthernet 0/0/3 to GigabitEthernet 0/0/4 [sw2-port-group]po li t [sw2-GigabitEthernet0/0/3]po li t [sw2-GigabitEthernet0/0/4]po li t [sw2-port-group]po t a v 2 3 [sw2-GigabitEthernet0/0/3]po t a v 2 3 [sw2-GigabitEthernet0/0/4]po t a v 2 3 [sw2-port-group]q [sw2]interface Eth-Trunk 0 [sw2-Eth-Trunk0]po li t [sw2-Eth-Trunk0]po t a v 10 20 2 3 [sw2-Eth-Trunk0]q [sw2]interface GigabitEthernet 0/0/5 [sw2-GigabitEthernet0/0/5]po li ac [sw2-GigabitEthernet0/0/5]po de v 20 [sw2-GigabitEthernet0/0/5]q [sw2]dis vlan The total number of vlans is : 5 -------------------------------------------------------------------------------- U: Up; D: Down; TG: Tagged; UT: Untagged; MP: Vlan-mapping; ST: Vlan-stacking; #: ProtocolTransparent-vlan; *: Management-vlan; -------------------------------------------------------------------------------- VID Type Ports -------------------------------------------------------------------------------- 1 common UT:GE0/0/3(U) GE0/0/4(U) GE0/0/6(D) GE0/0/7(D) GE0/0/8(D) GE0/0/9(D) GE0/0/10(D) GE0/0/11(D) GE0/0/12(D) GE0/0/13(D) GE0/0/14(D) GE0/0/15(D) GE0/0/16(D) GE0/0/17(D) GE0/0/18(D) GE0/0/19(D) GE0/0/20(D) GE0/0/21(D) GE0/0/22(D) GE0/0/23(D) GE0/0/24(D) Eth-Trunk0(U) 2 common TG:GE0/0/3(U) GE0/0/4(U) Eth-Trunk0(U) 3 common TG:GE0/0/3(U) GE0/0/4(U) Eth-Trunk0(U) 10 common TG:Eth-Trunk0(U) 20 common UT:GE0/0/5(U) TG:Eth-Trunk0(U) VID Status Property MAC-LRN Statistics Description -------------------------------------------------------------------------------- 1 enable default enable disable VLAN 0001 2 enable default enable disable VLAN 0002 3 enable default enable disable VLAN 0003 10 enable default enable disable VLAN 0010 20 enable default enable disable VLAN 0020

<Huawei>undo t m Info: Current terminal monitor is off. <Huawei>sys Enter system view, return user view with Ctrl+Z. [Huawei]sys sw3 [sw3]vlan b [sw3]vlan batch 2 3 [sw3]interface GigabitEthernet 0/0/3 [sw3-GigabitEthernet0/0/3]po li ac [sw3-GigabitEthernet0/0/3]po de v 2 [sw3-GigabitEthernet0/0/3]q [sw3]int g0/0/4 [sw3-GigabitEthernet0/0/4]po li ac [sw3-GigabitEthernet0/0/4]po de v 3 [sw3-GigabitEthernet0/0/4]q [sw3]port-group group-member GigabitEthernet 0/0/1 to GigabitEthernet 0/0/2 [sw3-port-group]po li t [sw3-GigabitEthernet0/0/1]po li t [sw3-GigabitEthernet0/0/2]po li t [sw3-port-group]po t a v 2 3 [sw3-GigabitEthernet0/0/1]po t a v 2 3 [sw3-GigabitEthernet0/0/2]po t a v 2 3 [sw3-port-group]q [sw3]dis vlan The total number of vlans is : 3 -------------------------------------------------------------------------------- U: Up; D: Down; TG: Tagged; UT: Untagged; MP: Vlan-mapping; ST: Vlan-stacking; #: ProtocolTransparent-vlan; *: Management-vlan; -------------------------------------------------------------------------------- VID Type Ports -------------------------------------------------------------------------------- 1 common UT:GE0/0/1(U) GE0/0/2(U) GE0/0/5(D) GE0/0/6(D) GE0/0/7(D) GE0/0/8(D) GE0/0/9(D) GE0/0/10(D) GE0/0/11(D) GE0/0/12(D) GE0/0/13(D) GE0/0/14(D) GE0/0/15(D) GE0/0/16(D) GE0/0/17(D) GE0/0/18(D) GE0/0/19(D) GE0/0/20(D) GE0/0/21(D) GE0/0/22(D) GE0/0/23(D) GE0/0/24(D) 2 common UT:GE0/0/3(U) TG:GE0/0/1(U) GE0/0/2(U) 3 common UT:GE0/0/4(U) TG:GE0/0/1(U) GE0/0/2(U) VID Status Property MAC-LRN Statistics Description -------------------------------------------------------------------------------- 1 enable default enable disable VLAN 0001 2 enable default enable disable VLAN 0002 3 enable default enable disable VLAN 0003

<Huawei>undo t m Info: Current terminal monitor is off. <Huawei>sys Enter system view, return user view with Ctrl+Z. [Huawei]sys sw4 [sw4]vlan b 2 3 [sw4]int g0/0/3 [sw4-GigabitEthernet0/0/3]po li ac [sw4-GigabitEthernet0/0/3]po de v 2 [sw4-GigabitEthernet0/0/3]q [sw4]int g0/0/4 [sw4-GigabitEthernet0/0/4]po li ac [sw4-GigabitEthernet0/0/4]po de v 3 [sw4-GigabitEthernet0/0/4]q [sw4]port-group group-member GigabitEthernet 0/0/1 to GigabitEthernet 0/0/2 [sw4-port-group]po li t [sw4-GigabitEthernet0/0/1]po li t [sw4-GigabitEthernet0/0/2]po li t [sw4-port-group]po t a v 2 3 [sw4-GigabitEthernet0/0/1]po t a v 2 3 [sw4-GigabitEthernet0/0/2]po t a v 2 3 [sw4-port-group]dis vlan The total number of vlans is : 3 -------------------------------------------------------------------------------- U: Up; D: Down; TG: Tagged; UT: Untagged; MP: Vlan-mapping; ST: Vlan-stacking; #: ProtocolTransparent-vlan; *: Management-vlan; -------------------------------------------------------------------------------- VID Type Ports -------------------------------------------------------------------------------- 1 common UT:GE0/0/1(U) GE0/0/2(U) GE0/0/5(D) GE0/0/6(D) GE0/0/7(D) GE0/0/8(D) GE0/0/9(D) GE0/0/10(D) GE0/0/11(D) GE0/0/12(D) GE0/0/13(D) GE0/0/14(D) GE0/0/15(D) GE0/0/16(D) GE0/0/17(D) GE0/0/18(D) GE0/0/19(D) GE0/0/20(D) GE0/0/21(D) GE0/0/22(D) GE0/0/23(D) GE0/0/24(D) 2 common UT:GE0/0/3(U) TG:GE0/0/1(U) GE0/0/2(U) 3 common UT:GE0/0/4(U) TG:GE0/0/1(U) GE0/0/2(U) VID Status Property MAC-LRN Statistics Description -------------------------------------------------------------------------------- 1 enable default enable disable VLAN 0001 2 enable default enable disable VLAN 0002 3 enable default enable disable VLAN 0003

[sw1]stp enable [sw1]stp mode mstp [sw1]stp region-configuration [sw1-mst-region]region-name aa [sw1-mst-region]instance 1 vlan 2 [sw1-mst-region]instance 2 vlan 3 [sw1-mst-region]active region-configuration [sw1-mst-region]display this # stp region-configuration region-name aa instance 1 vlan 2 instance 2 vlan 3 active region-configuration # return [sw1-mst-region]q

[sw2]stp enable [sw2]stp mode mstp [sw2]stp region-configuration [sw2-mst-region]region-name aa [sw2-mst-region]instance 1 vlan 2 [sw2-mst-region]instance 2 vlan 3 [sw2-mst-region]active region-configuration [sw2-mst-region]dis this # stp region-configuration region-name aa instance 1 vlan 2 instance 2 vlan 3 active region-configuration # return [sw2-mst-region]q

[sw3]stp enable [sw3]stp mode mstp [sw3]stp region-configuration [sw3-mst-region]region-name aa [sw3-mst-region]instance 1 vlan 2 [sw3-mst-region]instance 2 vlan 3 [sw3-mst-region]active region-configuration [sw3-mst-region]dis this # stp region-configuration region-name aa instance 1 vlan 2 instance 2 vlan 3 active region-configuration # return [sw3-mst-region]q

[sw4]stp enable [sw4]stp mode mstp [sw4]stp region-configuration [sw4-mst-region]region-name aa [sw4-mst-region]instance 1 vlan 2 [sw4-mst-region]instance 2 vlan 3 [sw4-mst-region]active region-configuration [sw4-mst-region]dis this # stp region-configuration region-name aa instance 1 vlan 2 instance 2 vlan 3 active region-configuration # return [sw4-mst-region]q

[sw1]stp instance 1 root primary [sw1]stp instance 2 root secondary [sw1]dis stp brief MSTID Port Role STP State Protection 0 GigabitEthernet0/0/3 DESI FORWARDING NONE 0 GigabitEthernet0/0/4 DESI FORWARDING NONE 0 GigabitEthernet0/0/5 DESI FORWARDING NONE 0 Eth-Trunk0 ROOT FORWARDING NONE 1 GigabitEthernet0/0/3 DESI FORWARDING NONE 1 GigabitEthernet0/0/4 DESI FORWARDING NONE 1 Eth-Trunk0 DESI FORWARDING NONE 2 GigabitEthernet0/0/3 DESI FORWARDING NONE 2 GigabitEthernet0/0/4 DESI FORWARDING NONE 2 Eth-Trunk0 DESI FORWARDING NONE

[sw2]stp instance 1 root secondary [sw2]stp instance 2 root primary [sw2]dis stp brief MSTID Port Role STP State Protection 0 GigabitEthernet0/0/3 DESI FORWARDING NONE 0 GigabitEthernet0/0/4 DESI FORWARDING NONE 0 GigabitEthernet0/0/5 DESI FORWARDING NONE 0 Eth-Trunk0 DESI FORWARDING NONE 1 GigabitEthernet0/0/3 DESI DISCARDING NONE 1 GigabitEthernet0/0/4 DESI DISCARDING NONE 1 Eth-Trunk0 ROOT FORWARDING NONE 2 GigabitEthernet0/0/3 DESI FORWARDING NONE 2 GigabitEthernet0/0/4 DESI FORWARDING NONE 2 Eth-Trunk0 DESI FORWARDING NONE

[sw3]port-group group-member GigabitEthernet 0/0/3 to GigabitEthernet 0/0/4 [sw3-port-group]stp edged-port enable [sw3-GigabitEthernet0/0/3]stp edged-port enable [sw3-GigabitEthernet0/0/4]stp edged-port enable [sw3-port-group]q [sw3]stp bpdu-protection

[sw4]port-group group-member GigabitEthernet 0/0/3 to GigabitEthernet 0/0/4 [sw4-port-group]stp edged-port enable [sw4-GigabitEthernet0/0/3]stp edged-port enable [sw4-GigabitEthernet0/0/4]stp edged-port enable [sw4-port-group]q [sw4]stp bpdu-protection

[sw1]interface Vlanif 2 [sw1-Vlanif2]ip add 172.16.0.1 26 [sw1-Vlanif2]vrrp vrid 1 virtual-ip 172.16.0.62 [sw1-Vlanif2]vrrp vrid 1 priority 120 [sw1-Vlanif2]vrrp vrid 1 track interface GigabitEthernet 0/0/5 reduced 30 [sw1-Vlanif2]q [sw1]interface Vlanif 3 [sw1-Vlanif3]ip add 172.16.0.65 26 [sw1-Vlanif3]vrrp vrid 2 virtual-ip 172.16.0.126 [sw1-Vlanif3]q [sw1]dis vrrp b VRID State Interface Type Virtual IP ---------------------------------------------------------------- 1 Master Vlanif2 Normal 172.16.0.62 2 Master Vlanif3 Normal 172.16.0.126 ---------------------------------------------------------------- Total:2 Master:2 Backup:0 Non-active:0

[sw2]interface Vlanif 2 [sw2-Vlanif2]ip add 172.16.0.2 26 [sw2-Vlanif2]vrrp vrid 1 virtual-ip 172.16.0.62 [sw2-Vlanif2]q [sw2]interface Vlanif 3 [sw2-Vlanif3]ip add 172.16.0.66 26 [sw2-Vlanif3]vrrp vrid 2 virtual-ip 172.16.0.126 [sw2-Vlanif3]vrrp vrid 2 priority 120 [sw2-Vlanif3]vrrp vrid 2 track interface GigabitEthernet 0/0/5 reduced 30 [sw2-Vlanif3]q [sw2]dis vrrp b VRID State Interface Type Virtual IP ---------------------------------------------------------------- 1 Backup Vlanif2 Normal 172.16.0.62 2 Master Vlanif3 Normal 172.16.0.126 ---------------------------------------------------------------- Total:2 Master:1 Backup:1 Non-active:0

[sw1]dhcp enable Info: The operation may take a few seconds. Please wait for a moment.done. [sw1]ip pool aa Info:It's successful to create an IP address pool. [sw1-ip-pool-aa]network 172.16.0.0 mask 26 [sw1-ip-pool-aa]gateway-list 172.16.0.62 [sw1-ip-pool-aa]dns-list 8.8.8.8 [sw1-ip-pool-aa]q [sw1]ip pool bb Info:It's successful to create an IP address pool. [sw1-ip-pool-bb]net 172.16.0.64 mask 26 [sw1-ip-pool-bb]gateway-list 172.16.0.126 [sw1-ip-pool-bb]dns-list 8.8.8.8 [sw1-ip-pool-bb]q [sw1]interface Vlanif 2 [sw1-Vlanif2]dhcp select global [sw1-Vlanif2]inter v 3 [sw1-Vlanif3]dhcp s g [sw1-Vlanif3]q

[sw2]dhcp en Info: The operation may take a few seconds. Please wait for a moment.done. [sw2]ip pool aa Info:It's successful to create an IP address pool. [sw2-ip-pool-aa]gateway-list 172.16.0.62 [sw2-ip-pool-aa]network 172.16.0.0 mask 255.255.255.192 [sw2-ip-pool-aa]dns-list 8.8.8.8 [sw2-ip-pool-aa]q [sw2]ip pool bb Info:It's successful to create an IP address pool. [sw2-ip-pool-bb]gateway-list 172.16.0.126 [sw2-ip-pool-bb]network 172.16.0.64 mask 255.255.255.192 [sw2-ip-pool-bb]dns-list 8.8.8.8 [sw2-ip-pool-bb]q [sw2]interface v 2 [sw2-Vlanif2]dhcp s g [sw2-Vlanif2]int v 3 [sw2-Vlanif3]dhcp s g [sw2-Vlanif3]q

每台电脑都需要开启DHCP

使用ipconfig命令查看IP地址应用情况

[sw1]inter v 10 [sw1-Vlanif10]ip add 172.16.0.129 26 [sw1-Vlanif10]q

[sw2]inter v 20 [sw2-Vlanif20]ip add 172.16.0.193 26 [sw2-Vlanif20]q

<Huawei>sys Enter system view, return user view with Ctrl+Z. [Huawei]sys r1 [r1]int g 0/0/1 [r1-GigabitEthernet0/0/1]ip add 172.16.0.130 26 [r1-GigabitEthernet0/0/1]int g0/0/0 [r1-GigabitEthernet0/0/0]ip add 172.16.0.194 26 [r1-GigabitEthernet0/0/0]int g0/0/2 [r1-GigabitEthernet0/0/2]ip add 12.0.0.1 24 [r1-GigabitEthernet0/0/2]q

[sw1]ip route-static 0.0.0.0 0 172.16.0.130

[sw2]ip route-static 0.0.0.0 0 172.16.0.194

[r1]ip route-static 172.16.0.0 26 172.16.0.129 [r1]ip route-static 172.16.0.0 26 172.16.0.193 [r1]ip route-static 172.16.0.64 26 172.16.0.129 [r1]ip route-static 172.16.0.64 26 172.16.0.193 [r1]ip route-static 0.0.0.0 0 12.0.0.2

<Huawei>sys Enter system view, return user view with Ctrl+Z. [Huawei]sys isp [isp]int g0/0/0 [isp-GigabitEthernet0/0/0]ip add 12.0.0.2 24 [isp-GigabitEthernet0/0/0]int l0 [isp-LoopBack0]ip add 2.2.2.2 24 [isp-LoopBack0]q

[r1]acl 2000 [r1-acl-basic-2000]rule permit source 172.16.0.0 0.0.0.255 [r1-acl-basic-2000]q [r1]int g0/0/2 [r1-GigabitEthernet0/0/2]nat outbound 2000 [r1-GigabitEthernet0/0/2]q