HCIA综合实验

配置涉及华为设备的网络连接,包括VLAN的创建和配置,如201、205和101至103,Eth-Trunk接口的设置用于链路聚合,OSPF路由协议用于网络互通,以及NAT策略进行地址转换。同时,使用ACL进行流量控制,如允许特定IP范围的访问。

1.实验要求

 

<Huawei>sys

[Huawei]vlan batch 201 205

[Huawei]int g0/0/4

[Huawei-GigabitEthernet0/0/4]port link-type hybrid

[Huawei-GigabitEthernet0/0/4]port hybrid pvid vlan 201

[Huawei-GigabitEthernet0/0/4]port hybrid untagged vlan 201

[Huawei-GigabitEthernet0/0/4]int g0/0/5

[Huawei-GigabitEthernet0/0/5]port link-type hybrid

[Huawei-GigabitEthernet0/0/5]port hybrid pvid vlan 201

[Huawei-GigabitEthernet0/0/5]port hybrid untagged vlan 201

[Huawei-GigabitEthernet0/0/5]int g0/0/06

[Huawei-GigabitEthernet0/0/6]port link-type hybrid

[Huawei-GigabitEthernet0/0/6]port hybrid pvid vlan 205

[Huawei-GigabitEthernet0/0/6]port hybrid untagged vlan 205

[Huawei-GigabitEthernet0/0/6]q

[Huawei]int Eth-Trunk 1

[Huawei-Eth-Trunk1]mode lacp-static

[Huawei-Eth-Trunk1]max active-linknumber 2

[Huawei-Eth-Trunk1]trunkport GigabitEthernet 0/0/1 to 0/0/3

[Huawei-Eth-Trunk1]port link-type trunk

[Huawei-Eth-Trunk1]port trunk allow-pass vlan 201 205

LSW-1F的配置:

<Huawei>sy

[Huawei]vlan batch 201 205 101 103

[Huawei]int g0/0/04

[Huawei-GigabitEthernet0/0/4]port link-type hybrid

[Huawei-GigabitEthernet0/0/4]port hybrid pvid vlan 101

[Huawei-GigabitEthernet0/0/4]port hybrid untagged vlan 101

[Huawei-GigabitEthernet0/0/4]int g0/0/5

[Huawei-GigabitEthernet0/0/5]port link-type hybrid

[Huawei-GigabitEthernet0/0/5]port hybrid pvid vlan 103

[Huawei-GigabitEthernet0/0/5]port hybrid untagged vlan 103

[Huawei-GigabitEthernet0/0/5]q

[Huawei]int Eth-Trunk 1

[Huawei-Eth-Trunk1]mode lacp-static

[Huawei-Eth-Trunk1]max active-linknumber 2

[Huawei-Eth-Trunk1]trunkport GigabitEthernet 0/0/1 to 0/0/3

[Huawei-Eth-Trunk1]port link-type trunk

[Huawei-Eth-Trunk1]port trunk allow-pass vlan 201 205

[Huawei-Eth-Trunk1]q

[Huawei]int g0/0/24

[Huawei-GigabitEthernet0/0/24]port link-type hybrid

[Huawei-GigabitEthernet0/0/24]port hybrid untagged vlan 201 205 101 103

AR1:

<ISPRouter>sy

[ISPRouter]rou id 1.1.1.1

[ISPRouter]ospf 1

[ISPRouter-ospf-1]a 0

[ISPRouter-ospf-1-area-0.0.0.0]q

[ISPRouter-ospf-1]q

[ISPRouter]dhcp enable

[ISPRouter]int g0/0/0

[ISPRouter-GigabitEthernet0/0/0]ip add 172.19.79.254 22

[ISPRouter-GigabitEthernet0/0/0]dhcp select interface

[ISPRouter-GigabitEthernet0/0/0]q

[ISPRouter]

[ISPRouter]int g0/0/01

[ISPRouter-GigabitEthernet0/0/1]ip add 14.1.1.1 24

[ISPRouter-GigabitEthernet0/0/1]o e 1 a 0

[ISPRouter-GigabitEthernet0/0/1]int g0/0/02

[ISPRouter-GigabitEthernet0/0/2]ip add 13.1.1.1 24

[ISPRouter-GigabitEthernet0/0/2]o e 1 a 0

[ISPRouter-GigabitEthernet0/0/2]q

[ISPRouter]acl 2000

[ISPRouter-acl-basic-2000]rule  5 permit source 172.19.79.254 0.0.3.255

[ISPRouter-acl-basic-2000]q

[ISPRouter]int g0/0/01

[ISPRouter-GigabitEthernet0/0/1]nat outbound 2000

[ISPRouter-GigabitEthernet0/0/1]q

[ISPRouter]int g0/0/2

[ISPRouter-GigabitEthernet0/0/2]nat outbound 2000

[ISPRouter-GigabitEthernet0/0/2]q

AR2:

<Huawei>sy

[Huawei]rou id 2.2.2.2

[Huawei]ospf 1

[Huawei-ospf-1]a 0

[Huawei-ospf-1-area-0.0.0.0]q

[Huawei-ospf-1]q

[Huawei]dhcp enable

[Huawei]int g0/0/0

[Huawei-GigabitEthernet0/0/0]ip add 24.1.1.2 24

[Huawei-GigabitEthernet0/0/0]o e 1 a 0

[Huawei-GigabitEthernet0/0/0]int g0/0/01

[Huawei-GigabitEthernet0/0/1]ip add 23.1.1.2 24

[Huawei-GigabitEthernet0/0/1]o e 1 a 0

[Huawei-GigabitEthernet0/0/1]int g0/0/02

[Huawei-GigabitEthernet0/0/2]ip add 192.19.79.254 24

[Huawei-GigabitEthernet0/0/2]dhcp select interface

[Huawei-GigabitEthernet0/0/2]o e 1 a 0

[Huawei-GigabitEthernet0/0/2]q

[Huawei]acl 2000

[Huawei-acl-basic-2000]rule 5 permit source 192.19.79.0 0.0.0.255

[Huawei-acl-basic-2000]q

[Huawei]acl 2001

[Huawei-acl-basic-2001]rule 5  deny source 192.19.79.0 0.0.0.255

[Huawei-acl-basic-2001]q

[Huawei]int g0/0/1

[Huawei-GigabitEthernet0/0/1]nat outbound 2001

[Huawei-GigabitEthernet0/0/1]q

[Huawei]int g0/0/0

[Huawei-GigabitEthernet0/0/0]nat outbound 2000

AR3:

<Huawei>sy

[Huawei]rou id 3.3.3.3

[Huawei]ospf 1

[Huawei-ospf-1]a 0

[Huawei-ospf-1-area-0.0.0.0]

[Huawei-ospf-1-area-0.0.0.0]q

[Huawei-ospf-1]q

[Huawei]int g0/0/01

[Huawei-GigabitEthernet0/0/1]ip add 23.1.1.3 24

[Huawei-GigabitEthernet0/0/1]o e 1 a 0

[Huawei-GigabitEthernet0/0/1]q

[Huawei]int g0/0/2

[Huawei-GigabitEthernet0/0/2]ip add 13.1.1.3 24

[Huawei-GigabitEthernet0/0/2]o e 1 a 0

[Huawei-GigabitEthernet0/0/2]int g0/0/0

[Huawei-GigabitEthernet0/0/0]ip add 61.11.32.121 16

[Huawei-GigabitEthernet0/0/0]q

[Huawei]ip route-static 0.0.0.0 0 61.11.32.254

[Huawei]ip route-static 8.8.8.8 32 61.11.32.254

[Huawei]ospf 1

[Huawei-ospf-1]import-route static

[Huawei-ospf-1]q

[Huawei]acl

[Huawei]acl 2000

[Huawei-acl-basic-2000]rule 5 permit source 13.1.1.1 0.0.0.255

[Huawei-acl-basic-2000]rule 10 deny source 0.0.0.0 255.255.255.255

[Huawei-acl-basic-2000]q

[Huawei]int g0/0/0

[Huawei-GigabitEthernet0/0/0]traffic-filter outbound acl 2000

AR4:

<Huawei>sy

[Huawei]ospf 1

[Huawei-ospf-1]a 0

[Huawei-ospf-1-area-0.0.0.0]q

[Huawei-ospf-1]q

[Huawei]int g0/0/02

[Huawei-GigabitEthernet0/0/2]ip add 172.18.29.253

[Huawei-GigabitEthernet0/0/2]ip add 172.18.29.254 22

[Huawei-GigabitEthernet0/0/2]int g0/0/0

[Huawei-GigabitEthernet0/0/0]ip add 24.1.1.4 24

[Huawei-GigabitEthernet0/0/0]o e 1 a 0

[Huawei-GigabitEthernet0/0/0]int g0/0/1

[Huawei-GigabitEthernet0/0/1]ip add 14.1.1.4 24

[Huawei-GigabitEthernet0/0/1]o e 1 a 0

R1:

<Huawei>sys

[Huawei]int g0/0/0

[Huawei-GigabitEthernet0/0/0]ip add 61.11.32.254 16

[Huawei-GigabitEthernet0/0/0]int loo 0

[Huawei-LoopBack0]ip add 8.8.8.8 32

[Huawei-LoopBack0]q

[Huawei]ip route-static 0.0.0.0 0 61.11.32.121

HCIA综合实验拓扑中,DHCP的配置是实现网络自动化和简化IP地址管理的重要环节。以下是基于引用内容总结出的DHCP配置指南: ### 配置DHCP服务 1. **启用DHCP功能** 在交换机或路由器上启用DHCP功能,确保设备能够作为DHCP服务器运行。例如,在华为设备中可以通过以下命令启用DHCP: ```bash dhcp enable ``` 2. **创建VLAN并分配接口** 根据网络需求创建多个VLAN,并将相应的物理接口划入对应的VLAN。例如,创建VLAN 10、20、30、40,并将接口G0/0/2和G0/0/3设置为Trunk模式以允许多个VLAN通过: ```bash vlan batch 10 20 30 40 interface GigabitEthernet0/0/2 port link-type trunk port trunk allow-pass vlan 10 20 30 40 interface GigabitEthernet0/0/3 port link-type trunk port trunk allow-pass vlan 10 20 30 40 ``` 3. **配置VLAN接口IP地址** 为每个VLAN接口配置IP地址,并指定其作为DHCP服务器的角色。例如,为VLANIF10、VLANIF20、VLANIF30和VLANIF40分别配置IP地址并启用DHCP服务: ```bash interface Vlanif10 ip address 192.168.10.254 255.255.255.0 dhcp select interface interface Vlanif20 ip address 192.168.20.254 255.255.255.0 dhcp select interface interface Vlanif30 ip address 192.168.30.254 255.255.255.0 dhcp select interface interface Vlanif40 ip address 192.168.40.254 255.255.255.0 dhcp select interface ``` 4. **验证DHCP配置** 确保客户端设备能够成功从DHCP服务器获取IP地址。可以通过查看DHCP服务器的状态和客户端的日志来验证配置是否正确。 ### 注意事项 - **安全性**:确保只有授权的设备可以访问DHCP服务器,防止未经授权的设备获取IP地址。 - **冗余性**:在大型网络中,建议部署多个DHCP服务器以提高可靠性和负载均衡[^2]。 - **兼容性**:确保DHCP服务器与客户端设备兼容,特别是在使用特定选项(如DNS服务器地址)时。 通过以上步骤,可以在HCIA综合实验拓扑中有效地配置DHCP服务,从而简化IP地址管理和提升网络效率。
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值