网络毕业设计--基于华为ensp园区多出口带宽资源调配和管理

viso拓扑图

昨天偶然得知,本实验有很多老师拿去当案例了,建议大家参考逻辑设计,不推荐搬运

 由于之前的实验很多同学提出了问题,确实是我排版不挡导致,我重新梳理规划,发给大家。这个通信自己写的论文不太行,没有参考价值,不要再问有没有论文了

本次论文实验是园区多出口带宽资源调配和管理,大家可以参考组网结构,在此基础上可以进行各种改良,符合自己的实验需求是最终目的,下面直接上配置,想要定制的+绿泡泡18812668402

技术范围

接入层:MSTP 边缘端口

汇聚层:MSTP VRRP DHCP全局 OSPF 静态路由

核心层:OSPF QOS(MQC)

防火墙:OSPF HRP IP-LINK 策略路由 安全策略 NAT策略

---------------------------------------------------------------------------------------------------------------------------------

接入层交换机

sysname jindelou
#
vlan batch 10 to 11
#
stp region-configuration
 region-name huawei
 instance 1 vlan 10 to 12 
 instance 2 vlan 13 to 15 
 active region-configuration
#
interface Ethernet0/0/1
 port link-type access
 port default vlan 10
 stp edged-port enable
#
interface Ethernet0/0/2
 port link-type access
 port default vlan 11
 stp edged-port enable
#
interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 10 11
#
interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk allow-pass vlan 10 11

----------------------------------------------------------

sysname baiyanglou
#
vlan batch 14 to 15
#
stp region-configuration
 region-name huawei
 instance 1 vlan 10 to 12 
 instance 2 vlan 13 to 15
 active region-configuration
#
interface Ethernet0/0/1
 port link-type access
 port default vlan 14
 stp edged-port enable
#
interface Ethernet0/0/2
 port link-type access
 port default vlan 15
 stp edged-port enable
#
interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 14 15
#
interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk allow-pass vlan 14 15

-------------------------------------------------------

sysname wenshilou
#
vlan batch 12 to 13
#
stp region-configuration
 region-name huawei
 instance 1 vlan 10 to 12 
 instance 2 vlan 13 to 15
 active region-configuration
#
interface Ethernet0/0/1
 port link-type access
 port default vlan 12
 stp edged-port enable
#
interface Ethernet0/0/2
 port link-type access
 port default vlan 13
 stp edged-port enable
#
interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 12 13
#
interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk allow-pass vlan 12 13

---------------------------------------------------------------------------------------------------------------------------------

汇聚层交换机

sysname WS-SW1
#
vlan batch 10 to 15 100 to 101
#
stp instance 1 root primary
stp instance 2 root secondary
#
dhcp enable
#
stp region-configuration
 region-name huawei
 instance 1 vlan 10 to 12 
 instance 2 vlan 13 to 15 
 active region-configuration
#
ip pool vlan10
 gateway-list 192.168.10.254 
 network 192.168.10.0 mask 255.255.255.0 
#
ip pool vlan11
 gateway-list 192.168.11.254 
 network 192.168.11.0 mask 255.255.255.0 
#
ip pool vlan12
 gateway-list 192.168.12.254 
 network 192.168.12.0 mask 255.255.255.0 
#
ip pool vlan13
 gateway-list 192.168.13.254 
 network 192.168.13.0 mask 255.255.255.0 
#
ip pool vlan14
 gateway-list 192.168.14.254 
 network 192.168.14.0 mask 255.255.255.0 
#
ip pool vlan15
 gateway-list 192.168.15.254 
 network 192.168.15.0 mask 255.255.255.0 
#
interface Vlanif10
 ip address 192.168.10.252 255.255.255.0 
 vrrp vrid 10 virtual-ip 192.168.10.254
 vrrp vrid 10 priority 120
 vrrp vrid 10 preempt-mode timer delay 42
 vrrp vrid 10 track interface GigabitEthernet0/0/1 reduced 30
 dhcp select global
#
interface Vlanif11
 ip address 192.168.11.252 255.255.255.0 
 vrrp vrid 11 virtual-ip 192.168.11.254
 vrrp vrid 11 priority 120
 vrrp vrid 11 preempt-mode timer delay 42
 vrrp vrid 11 track interface GigabitEthernet0/0/1 reduced 30
 dhcp select global
#
interface Vlanif12
 ip address 192.168.12.252 255.255.255.0 
 vrrp vrid 12 virtual-ip 192.168.12.254
 vrrp vrid 12 priority 120
 vrrp vrid 12 preempt-mode timer delay 42
 vrrp vrid 12 track interface GigabitEthernet0/0/1 reduced 30
 dhcp select global
#
interface Vlanif13
 ip address 192.168.13.252 255.255.255.0 
 vrrp vrid 13 virtual-ip 192.168.13.254
 dhcp select global
#
interface Vlanif14
 ip address 192.168.14.252 255.255.255.0 
 vrrp vrid 14 virtual-ip 192.168.14.254
 dhcp select global
#
interface Vlanif15
 ip address 192.168.15.252 255.255.255.0 
 vrrp vrid 15 virtual-ip 192.168.15.254
 dhcp select global
#
interface Vlanif100
 ip address 10.1.10.1 255.255.255.252 
#
interface Vlanif101
 ip address 10.1.10.9 255.255.255.252 
#
interface Eth-Trunk1
 port link-type trunk
 port trunk allow-pass vlan 10 to 15 101
 mode lacp-static
#
interface GigabitEthernet0/0/1
 port link-type access
 port default vlan 100
#
interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk allow-pass vlan 10 to 11
#
interface GigabitEthernet0/0/3
 port link-type trunk
 port trunk allow-pass vlan 12 to 13
#
interface GigabitEthernet0/0/4
 port link-type trunk
 port trunk allow-pass vlan 14 to 15
#
interface GigabitEthernet0/0/5
 eth-trunk 1
#
interface GigabitEthernet0/0/6
 eth-trunk 1
#
ospf 1 router-id 1.1.1.1 
 area 0.0.0.0 
  authentication-mode md5 1 cipher #vCJKvae/8uqcXT}k'OIe_n#
  network 10.1.10.0 0.0.0.3 
  network 10.1.10.8 0.0.0.3 
 area 0.0.0.1 
  network 192.168.10.0 0.0.0.255 
  network 192.168.11.0 0.0.0.255 
  network 192.168.12.0 0.0.0.255 
  network 192.168.13.0 0.0.0.255 
  network 192.168.14.0 0.0.0.255 
  network 192.168.15.0 0.0.0.255 

-----------------------------------------------------------------------

sysname WS-SW2
#
vlan batch 10 to 15 100 to 101
#
stp instance 1 root secondary
stp instance 2 root primary
#
stp region-configuration
 region-name huawei
 instance 1 vlan 10 to 12 
 instance 2 vlan 13 to 15 
 active region-configuration
#
ip pool vlan10
 gateway-list 192.168.10.254 
 network 192.168.10.0 mask 255.255.255.0 
#
ip pool vlan11
 gateway-list 192.168.11.254 
 network 192.168.11.0 mask 255.255.255.0 
#
ip pool vlan12
 gateway-list 192.168.12.254 
 network 192.168.12.0 mask 255.255.255.0 
#
ip pool vlan13
 gateway-list 192.168.13.254 
 network 192.168.13.0 mask 255.255.255.0 
#
ip pool vlan14
 gateway-list 192.168.14.254 
 network 192.168.14.0 mask 255.255.255.0 
#
ip pool vlan15
 gateway-list 192.168.15.254 
 network 192.168.15.0 mask 255.255.255.0 
#
interface Vlanif10
 ip address 192.168.10.253 255.255.255.0 
 vrrp vrid 10 virtual-ip 192.168.10.254
 dhcp select global
#
interface Vlanif11
 ip address 192.168.11.253 255.255.255.0 
 vrrp vrid 11 virtual-ip 192.168.11.254
 dhcp select global
#
interface Vlanif12
 ip address 192.168.12.253 255.255.255.0 
 vrrp vrid 12 virtual-ip 192.168.12.254
 dhcp select global
#
interface Vlanif13
 ip address 192.168.13.251 255.255.255.0 
 vrrp vrid 13 virtual-ip 192.168.13.254
 vrrp vrid 13 priority 120
 vrrp vrid 13 preempt-mode timer delay 42
 vrrp vrid 13 track interface GigabitEthernet0/0/1 reduced 30
 dhcp select global
#
interface Vlanif14
 ip address 192.168.14.251 255.255.255.0 
 vrrp vrid 14 virtual-ip 192.168.14.254
 vrrp vrid 14 priority 120
 vrrp vrid 14 preempt-mode timer delay 42
 vrrp vrid 14 track interface GigabitEthernet0/0/1 reduced 30
 dhcp select global
#
interface Vlanif15
 ip address 192.168.15.251 255.255.255.0 
 vrrp vrid 15 virtual-ip 192.168.15.254
 vrrp vrid 15 priority 120
 vrrp vrid 15 preempt-mode timer delay 42
 vrrp vrid 15 track interface GigabitEthernet0/0/1 reduced 30
 dhcp select global
#
interface Vlanif100
 ip address 10.1.10.5 255.255.255.252 
#
interface Vlanif101
 ip address 10.1.10.10 255.255.255.252 
#
interface Eth-Trunk1
 port link-type trunk
 port trunk allow-pass vlan 10 to 15 101
 mode lacp-static
#
interface GigabitEthernet0/0/1
 port link-type access
 port default vlan 100
#
interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk allow-pass vlan 10 to 11
#
interface GigabitEthernet0/0/3
 port link-type trunk
 port trunk allow-pass vlan 12 to 13
#
interface GigabitEthernet0/0/4
 port link-type trunk
 port trunk allow-pass vlan 14 to 15
#
interface GigabitEthernet0/0/5
 eth-trunk 1
#
interface GigabitEthernet0/0/6
 eth-trunk 1
#
ospf 1 router-id 2.2.2.2 
 area 0.0.0.0 
  authentication-mode md5 1 cipher ~7oISC6o';EBi%T]n/.IQ_%#
  network 10.1.10.8 0.0.0.3 
  network 10.1.10.4 0.0.0.3 
 area 0.0.0.1 
  network 192.168.10.0 0.0.0.255 
  network 192.168.11.0 0.0.0.255 
  network 192.168.12.0 0.0.0.255 
  network 192.168.13.0 0.0.0.255 
  network 192.168.14.0 0.0.0.255 
  network 192.168.15.0 0.0.0.255 

---------------------------------------------------------------------------------------------------------------------------------

核心层路由器

sysname R1

acl number 2000  
 rule 5 permit source 192.168.10.0 0.0.0.255 
 rule 10 permit source 192.168.11.0 0.0.0.255 
acl number 2001  
 rule 5 permit source 192.168.12.0 0.0.0.255 
 rule 10 permit source 192.168.13.0 0.0.0.255 
acl number 2002  
 rule 5 permit source 192.168.14.0 0.0.0.255 
 rule 10 permit source 192.168.15.0 0.0.0.255 
#
traffic classifier class3 operator or
 if-match acl 2002
traffic classifier class2 operator or
 if-match acl 2001
traffic classifier class1 operator or
 if-match acl 2000
#
traffic behavior behavior1
 car cir 200000 cbs 37600000 pbs 62600000 green pass yellow pass red discard
traffic behavior behavior2
 car cir 100000 cbs 18800000 pbs 31300000 green pass yellow pass red discard
traffic behavior behavior3
 car cir 50000 cbs 9400000 pbs 15650000 green pass yellow pass red discard
#
traffic policy policy1
 classifier class1 behavior behavior1
 classifier class2 behavior behavior2
 classifier class3 behavior behavior3
#
interface GigabitEthernet0/0/0
 ip address 10.1.10.13 255.255.255.252 
#
interface GigabitEthernet0/0/1
 ip address 10.1.10.2 255.255.255.252 
 traffic-policy policy1 inbound
#
interface GigabitEthernet0/0/2
 ip address 10.1.10.17 255.255.255.252 
#
ospf 1 router-id 3.3.3.3 
 area 0.0.0.0 
  authentication-mode md5 1 cipher ~1:a.wr./6;BH^68NhwO[_F#
  network 10.1.10.0 0.0.0.3 
  network 10.1.10.12 0.0.0.3 
  network 10.1.10.16 0.0.0.3 

--------------------------------------------------

sysname R2

acl number 2000  
 rule 5 permit source 192.168.10.0 0.0.0.255 
 rule 10 permit source 192.168.11.0 0.0.0.255 
acl number 2001  
 rule 5 permit source 192.168.12.0 0.0.0.255 
 rule 10 permit source 192.168.13.0 0.0.0.255 
acl number 2002  
 rule 5 permit source 192.168.14.0 0.0.0.255 
 rule 10 permit source 192.168.15.0 0.0.0.255 
#
traffic classifier class3 operator or
 if-match acl 2002
traffic classifier class2 operator or
 if-match acl 2001
traffic classifier class1 operator or
 if-match acl 2000
#
traffic behavior behavior1
 car cir 200000 cbs 37600000 pbs 62600000 green pass yellow pass red discard
traffic behavior behavior2
 car cir 100000 cbs 18800000 pbs 31300000 green pass yellow pass red discard
traffic behavior behavior3
 car cir 50000 cbs 9400000 pbs 15650000 green pass yellow pass red discard
#
traffic policy policy1
 classifier class1 behavior behavior1
 classifier class2 behavior behavior2
 classifier class3 behavior behavior3
#
interface GigabitEthernet0/0/0
 ip address 10.1.10.21 255.255.255.252 
#
interface GigabitEthernet0/0/1
 ip address 10.1.10.6 255.255.255.252 
 traffic-policy policy1 inbound
#
interface GigabitEthernet0/0/2
 ip address 10.1.10.18 255.255.255.252 
#
ospf 1 router-id 4.4.4.4 
 area 0.0.0.0 
  authentication-mode md5 1 cipher l3(!FIA7n~ani^>"qh^;e`,#
  network 10.1.10.4 0.0.0.3 
  network 10.1.10.16 0.0.0.3 
  network 10.1.10.20 0.0.0.3 

---------------------------------------------------------------------------------------------------------------------------------

负载防火墙

sysname FW1
#
 hrp enable
 hrp interface GigabitEthernet1/0/3 remote 1.1.1.2
 hrp standby config enable
 hrp track interface GigabitEthernet1/0/0
 hrp track interface GigabitEthernet1/0/1
 hrp track interface GigabitEthernet1/0/2
 hrp track interface GigabitEthernet1/0/4
 hrp track ip-link test
#
ip-link check enable
ip-link name test
 destination 200.1.1.2 interface GigabitEthernet1/0/1 mode icmp
 destination 201.1.1.6 interface GigabitEthernet1/0/2 mode icmp
 destination 202.1.1.2 interface GigabitEthernet1/0/4 mode icmp
#
interface GigabitEthernet1/0/0
 undo shutdown
 ip address 10.1.10.14 255.255.255.252
 link-group 1
#
interface GigabitEthernet1/0/1
 undo shutdown
 ip address 200.1.1.1 255.255.255.252
 link-group 1
 service-manage ping permit
#
interface GigabitEthernet1/0/2
 undo shutdown
 ip address 201.1.1.5 255.255.255.252
 link-group 1
 service-manage ping permit
#
interface GigabitEthernet1/0/3
 undo shutdown
 ip address 1.1.1.1 255.255.255.252

#
interface GigabitEthernet1/0/4
 undo shutdown
 ip address 202.1.1.1 255.255.255.252
 link-group 1
#
firewall zone trust
 set priority 85
 add interface GigabitEthernet0/0/0
 add interface GigabitEthernet1/0/0
#
firewall zone untrust
 set priority 5
 add interface GigabitEthernet1/0/1
 add interface GigabitEthernet1/0/2
 add interface GigabitEthernet1/0/4
#
firewall zone dmz
 set priority 50
 add interface GigabitEthernet1/0/3
#
ospf 1 router-id 5.5.5.5
 default-route-advertise
 area 0.0.0.0
  authentication-mode md5 1 cipher %^%#U-PmB4R{&FA}xm-)t]IMW5M:E8yKRG)ay'"i5@5G%^%#
  network 10.1.10.12 0.0.0.3
#
ip route-static 10.0.0.0 255.0.0.0 200.1.1.2
ip route-static 20.0.0.0 255.0.0.0 201.1.1.6
ip route-static 30.0.0.0 255.0.0.0 202.1.1.2
#
security-policy
 rule name t-u
  source-zone trust
  destination-zone untrust
  source-address 192.168.10.0 mask 255.255.255.0
  source-address 192.168.11.0 mask 255.255.255.0
  source-address 192.168.12.0 mask 255.255.255.0
  source-address 192.168.13.0 mask 255.255.255.0
  source-address 192.168.14.0 mask 255.255.255.0
  source-address 192.168.15.0 mask 255.255.255.0
  action permit
#
nat-policy
 rule name t-u
  source-zone trust
  destination-zone untrust
  source-address 192.168.10.0 mask 255.255.255.0
  source-address 192.168.11.0 mask 255.255.255.0
  source-address 192.168.12.0 mask 255.255.255.0
  source-address 192.168.13.0 mask 255.255.255.0
  source-address 192.168.14.0 mask 255.255.255.0
  source-address 192.168.15.0 mask 255.255.255.0
  action source-nat easy-ip

--------------------------------------------------

sysname FW2
#
 hrp enable
 hrp interface GigabitEthernet1/0/3 remote 1.1.1.1
 hrp standby config enable
 hrp track interface GigabitEthernet1/0/0
 hrp track interface GigabitEthernet1/0/1
 hrp track interface GigabitEthernet1/0/2
 hrp track interface GigabitEthernet1/0/4
 hrp track ip-link test
#
ip-link check enable
ip-link name test
 destination 200.1.1.6 interface GigabitEthernet1/0/1 mode icmp
 destination 201.1.1.2 interface GigabitEthernet1/0/2 mode icmp
 destination 202.1.1.6 interface GigabitEthernet1/0/4 mode icmp
#
interface GigabitEthernet1/0/0
 undo shutdown
 ip address 10.1.10.22 255.255.255.252
 link-group 1
#
interface GigabitEthernet1/0/1
 undo shutdown
 ip address 200.1.1.5 255.255.255.252
 link-group 1
 service-manage ping permit
#
interface GigabitEthernet1/0/2
 undo shutdown
 ip address 201.1.1.1 255.255.255.252
 link-group 1
 service-manage ping permit
#
interface GigabitEthernet1/0/3
 undo shutdown
 ip address 1.1.1.2 255.255.255.252
#

interface GigabitEthernet1/0/4
 undo shutdown
 ip address 202.1.1.5 255.255.255.252
 link-group 1
#
firewall zone trust
 set priority 85
 add interface GigabitEthernet0/0/0
 add interface GigabitEthernet1/0/0
#
firewall zone untrust
 set priority 5
 add interface GigabitEthernet1/0/1
 add interface GigabitEthernet1/0/2
 add interface GigabitEthernet1/0/4
#
firewall zone dmz
 set priority 50
 add interface GigabitEthernet1/0/3
#
ospf 1 router-id 6.6.6.6
 default-route-advertise
 area 0.0.0.0
  authentication-mode md5 1 cipher %^%#U-PmB4R{&FA}xm-)t]IMW5M:E8yKRG)ay'"i5@5G%^%#
  network 10.1.10.20 0.0.0.3
#
ip route-static 10.0.0.0 255.0.0.0 200.1.1.6
ip route-static 20.0.0.0 255.0.0.0 201.1.1.2
ip route-static 30.0.0.0 255.0.0.0 202.1.1.6
#
security-policy
 rule name t-u
  source-zone trust
  destination-zone untrust
  source-address 192.168.10.0 mask 255.255.255.0
  source-address 192.168.11.0 mask 255.255.255.0
  source-address 192.168.12.0 mask 255.255.255.0
  source-address 192.168.13.0 mask 255.255.255.0
  source-address 192.168.14.0 mask 255.255.255.0
  source-address 192.168.15.0 mask 255.255.255.0
  action permit
#
nat-policy
 rule name t-u
  source-zone trust
  destination-zone untrust
  source-address 192.168.10.0 mask 255.255.255.0
  source-address 192.168.11.0 mask 255.255.255.0
  source-address 192.168.12.0 mask 255.255.255.0
  source-address 192.168.13.0 mask 255.255.255.0
  source-address 192.168.14.0 mask 255.255.255.0
  source-address 192.168.15.0 mask 255.255.255.0
  action source-nat easy-ip

-------------------------------------------------------------

外网路由器配置


sysname ISP1
#
interface GigabitEthernet0/0/0
 ip address 200.1.1.2 255.255.255.252 
#
interface GigabitEthernet0/0/1
 ip address 200.1.1.6 255.255.255.252 
#
interface LoopBack0
ip add 10.10.10.10 32
#
ospf 1 
 area 0.0.0.0 
  network 0.0.0.0 255.255.255.255 

----------------------------------------------
sysname ISP2
#
interface GigabitEthernet0/0/0
 ip address 201.1.1.6 255.255.255.252 
#
interface GigabitEthernet0/0/1
 ip address 201.1.1.2 255.255.255.252 

#
interface LoopBack0
ip add 20.20.20.20 32
#
ospf 1 
 area 0.0.0.0 
  network 0.0.0.0 255.255.255.255 

-----------------------------------------------
sysname ISP3
#
interface GigabitEthernet0/0/0
 ip address 202.1.1.2 255.255.255.252 
#
interface GigabitEthernet0/0/1
 ip address 202.1.1.6 255.255.255.252 
#
interface LoopBack0
ip add 30.30.30.30 32
#
ospf 1 
 area 0.0.0.0 
  network 0.0.0.0 255.255.255.255 

### ENSP 园区网络毕业设计示例 #### 设计概述 在进行基于 eNSP园区毕业设计时,重点在于创建一个既满足当前需求又具备未来扩展能力的高度可靠的网络环境。此过程涉及多个方面技术细节,包括但不限于拓扑结构的选择、路由协议的配置、安全策略的制定等[^3]。 #### 关键技术应用实例 - **MSTP (多生成树协议)** MSTP 是一种用于防止环路并提高冗余性的二层协议,在大型园区中尤为重要。通过合理规划 VLAN 根桥位置,可以有效减少广播风暴的发生几率,同时提升整个网络系统的健壮性。 ```python # 配置交换机A作为某VLAN下的根桥 [SwitchA]interface GigabitEthernet0/0/1 [SwitchA-GigabitEthernet0/0/1]stp root primary ``` - **VRRP (虚拟路由器冗余协议)** VRRP 提供了一种简单而有效的机制来增强默认关的可靠性。当主用设备发生故障时,备用设备能够迅速接管其职责,从而保证通信不中断。 ```python # 设置VRRP组优先级 [RouterA]interface GigabitEthernet0/0/1 [RouterA-GigabitEthernet0/0/1]vrrp vrid 1 priority 150 ``` - **链路聚合** 利用 LACP 或静态方式实现接口捆绑,不仅可以增加带宽还能提供路径级别的保护措施。这对于连接核心层汇聚层之间的链路尤为适用。 ```python # 创建动态LACP模式的Eth-Trunk端口 [SwitchB]interface Eth-Trunk 1 [SwitchB-Eth-Trunk1]lacp mode active ``` #### 参考资源获取途径 对于希望深入了解这些概念及其实际操作的同学来说,可以从公开平台上查找相关文档案例研究。例如,在开源工具包仓库中有详细的说明文件可供查阅,其中包含了关于如何利用华为 ENSP 平台搭建复杂企业网络的具体指南。
评论 14
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包

打赏作者

B站-白话聊网络

你的鼓励将是我创作的最大动力

¥1 ¥2 ¥4 ¥6 ¥10 ¥20
扫码支付:¥1
获取中
扫码支付

您的余额不足,请更换扫码支付或充值

打赏作者

实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值