eNSP综合实验

 L2S1:

创建vlan    vlan batch 11 to 14 

配置生成树，创建实例

配置各端口类型

 

 配置内网主机访问权限

acl number 3000
 rule permit tcp (source any) destination 192.168.15.100 0 destination-port eq ftp time-ran
ge worktime
 rule permit tcp (source any) destination 192.168.15.100 0 destination-port eq www time-ra
nge worktime
 rule deny tcp (source any destination any) destination-port eq ftp time-range worktime
 rule deny tcp (source any destination any) destination-port eq www time-range worktime
 rule permit ip (source any destination any)

不允许vlan 11与vlan 12 互相访问，创建3001

加入对应访问控制列表

 interface GigabitEthernet0/0/1
 traffic-filter outbound acl 3000

interface GigabitEthernet0/0/2
 traffic-filter outbound acl 3000

interface Ethernet0/0/1
 traffic-filter inbound acl 3001

L3S1：

创建vlan 并配置相应端口（链路聚合）

vlan batch 11 to 15 21

interface GigabitEthernet0/0/1
 port link-type access
 port default vlan 21

interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk allow-pass vlan all

interface GigabitEthernet0/0/10
 port link-type access
 port default vlan 15

配置链路聚合，模式为手动，负载均衡源目地

interface Eth-Trunk1
 port link-type trunk
 port trunk allow-pass vlan all
mode manual load-balance 
load-balance src-dst-ip
interface GigabitEthernet0/0/23
 eth-trunk 1
interface GigabitEthernet0/0/24
 eth-trunk 1

 配置DHCP

配置vrrp并追踪上行接口

配置生成树 

stp mode mstp
stp enable
stp region-configuration
 region-name instance1
 revision-level 1
 instance 1 vlan 11 12
 instance 2 vlan 13 14
 active region-configuration

配置主根桥

stp instance 1 root pri
stp instance 2 root sec

动态路由ospf

L3S2 

创建vlan，

vlan batch 11 to 14 22

interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan all
 
interface GigabitEthernet0/0/2
 port link-type access
 port default vlan 22

配置DHCP（关宣排阻dns）

 

配置vrrp，并追踪上行接口

 

配置生成树mstp，创建两个实例

stp enable
stp mode mstp
stp region-configuration
 region-name instance1
 revision-level 1
 instance 1 vlan 11 to 12
 instance 2 vlan 13 to 14
 active region-configuration

 配置主根桥

stp  instance  1   root   pri

stp   instance   1   root     sec

配置ospf

R1 

配置aaa

aaa
 local-user huawei password cipher wei privilege level 3
 local-user huawei service-type ppp 

配置静态路由

rip

 

ospf 

 

 nat

 

 

R2

  rip 配置    

ISP