【ensp】MSTP+VRRP+DHCP+NAT+OSPF+SSH+telnet

目录

1.任务描述

2.拓扑图

4.IP规划

5.具体配置

6.实验结果


1.任务描述

1、在局域网中部署环路规避方案

为避免网络接入设备上出现环路,影响全网运行状态。要求在网络接入交换机SW1、SW2上进行防环处理。具体要求如下所示。

        (1)在连接PC机端口上开启Portfast和BPDUguard防护功能。

2、部署MSTP及HSRP技术,实现网络冗余。

在校本部的SW1、SW2、SW3、SW4交换机上配置PVST防止二层环路。

(1)在本部的网络中配置PVST,要求来自VLAN10、VLAN30、VLAN100中的数据流经过S3交换机转发,一旦S3交换机失效时,经过S4交换机转发。要求来自VLAN20、VLAN40中的数据流经过S4交换机转发,一旦S4交换机失效时,经过S3交换机转发。

(2)配置本部网络中的SW3交换机作为VLAN10、VLAN30、VLAN100的主根、VLAN20、VLAN40的从根;配置SW4交换机作为VLAN20、VLAN40的主根、VLAN10、VLAN30、VLAN100的从根。其中,主根交换机的优先级为4096;从根交换机的优先级为8192。

(3)在校本部网络中汇聚交换机SW3和SW4上配置HSRP,实现网络中的主机的网关冗余,所配置的参数要求如表1所示。其中,在交换机S3、S4上设置各HSRP组中的高优先级设置为150,低优先级设置为120。

(4)为提升校本部网络的冗余功能,在汇聚交换机SW3与SW4之间部署2条互联链路(Gi0/3、Gi0/4),并采取LACP动态聚合模式配置二层链路聚合。其它接口根据网络互联需要,进行静态链路聚合配置,生成聚合接口1。

                                               表1  交换机SW3和SW4上的VRRP参数

VLAN

HSRP备份组号

HSRP虚拟IP

VLAN10

10

192.168.10.254

VLAN20

20

192.168.20.254

VLAN30

30

192.168.30.254

VLAN40

40

192.168.40.254

VLAN100

100

192.168.100.254

3、部署全网路由协议,实现全网的互联互通。

在本部的网络中使用多区域OSPF协议组网(OSPF 100),实现全网的互联互通,具体要求如下。

(1)本部网络的所有设备都在OSPF区域0。

(2)要求业务网段(VLAN 10、VLAN 20、VLAN 30、VLAN40、VLAN100)中不出现协议报文。

(3)优化全网的OSPF配置,尽量加快OSPF路由收敛。

4、部署DHCP服务和DHCP中继。

在DHCP-Server上做DHCP服务,在SW3、SW4的VLAN10、VLAN40上配置DHCP中继,,实现IP地址的自动分配,具体要求如下:

(1)在DHCP-Server上做DHCP服务,能够为VLAN10、VLAN40自动分配IP地址。

5、部署分部

    (1)在分部上做单臂路由,使得分部的PC机能够正常上网

6、出口设备上部署NAT,实现远程接入。

出口设备上部署NAT,实现远程接入,具体配置参数如下。

(1)在本部网络中出口路由器R3上,配置NAT,实现本部网络中的所有VLAN都能够访问到1.1.1.1

(2)在分部网络中出口路由器R4上,配置NAT,实现分部网络中的VLAN50能够访问到1.1.1.1

7、远程管理

(1)为本部R3路由器和DHCP服务器开启相应的SSH服务端功能,用户名和密码为admin.

(2)为本部的所有交换机开启Telent功能,对所有的Telent用户采用本地认证的方式,创建本地用户,设定用户名和密码为admin

2.拓扑图

【ensp】MSTP+VRRP+DHCP+NAT+OSPF+SSH+telnet_第1张图片

4.IP规划

设备

接口/VLAN

二层或三层规划

设备

接口/VLAN

二层或三层规划

SW1

VLAN10

G0/0/1

SW2

VLAN10

G0/0/1

VLAN20

G0/0/2

VLAN20

G0/0/2

VLAN30

VLAN30

VLAN40

VLAN40

VLAN100

192.168.100.1/24

VLAN100

192.168.100.2/24

SW3

VLAN10

192.168.10.252/24

SW4

VLAN10

192.168.10.253/24

VLAN20

192.168.20.252/24

VLAN20

192.168.20.253/24

VLAN30

192.168.30.252/24

VLAN30

192.168.30.253/24

VLAN40

192.168.40.252/24

VLAN40

192.168.40.253/24

VLAN100

192.168.100.252/24

VLAN100

192.168.100.253/24

G0/0/5

10.1.13.2/30

G0/0/5

10.1.24.1/30

G0/0/6

10.1.23.1/30

G0/0/6

10.1.14.2/30

R1

G0/0/0

10.1.13.1/30

R2

G0/0/0

10.1.24.2/30

G0/0/1

10.1.14.1/30

G0/0/1

10.1.23.2/30

G0/0/2

10.2.12.1/30

G0/0/2

10.2.12.2/30

G1/0/0

10.2.13.1/30

G1/0/0

10.2.23.1/30

G2/0/0

10.3.11.1/30

LoopBack0

11.11.11.2/32

LoopBack0

11.11.11.1/32

R3

G0/0/0

10.2.13.2/30

R4

S1/0/0

200.200.200.1/24

G0/0/1

10.2.23.2/30

G0/0/0.50

172.16.50.254/24

S1/0/0

100.100.100.1/24

G0/0/0.60

172.16.60.254/24

LoopBack0

11.11.11.3/32

Inter

S1/0/0

100.100.100.2/24

SW5

VLAN50

G0/0/1

S1/0/1

200.200.200.2/24

VLAN60

G0/0/2

LoopBack0

1.1.1.1/32

DHCP-Server

G0/0/0

10.3.11.2/30

LoopBack0

11.11.11.4/32

PC1

VLAN10

DHCP获取

PC2

VLAN20

192.168.20.1/24

PC3

VLAN30

192.168.30.1/24

PC4

VLAN40

DHCP获取

PC5

VLAN50

172.16.50.1/24

PC6

VLAN60

172.16.60.1/24

5.具体配置

sys

[Huawei]un in en

Info: Information center is disabled.

[Huawei]sysname SW1

[SW1]vlan batch  10 20 30 40 100

[SW1]int vlan 100

[SW1-Vlanif100]ip add 192.168.100.1 24

[SW1-Vlanif100]int g0/0/1

[SW1-GigabitEthernet0/0/1]port link-type access

[SW1-GigabitEthernet0/0/1]port default vlan 10

[SW1-GigabitEthernet0/0/1]int g0/0/2

[SW1-GigabitEthernet0/0/2]port link-type access

[SW1-GigabitEthernet0/0/2]port default vlan 20

[SW1-GigabitEthernet0/0/2]q

[SW1]int g0/0/3

[SW1-GigabitEthernet0/0/3]port link-type trunk   

[SW1-GigabitEthernet0/0/3]port trunk allow-pass vlan 10 20 30 40 100

[SW1-GigabitEthernet0/0/3]int g0/0/4

[SW1-GigabitEthernet0/0/4]port link-type trunk   

[SW1-GigabitEthernet0/0/4]port trunk allow-pass vlan 10 20 30 40 100

//开启Portfast和BPDUguard防护功能

[SW1-Vlanif100]int g0/0/1

[SW1-GigabitEthernet0/0/1]stp bpdu-filter enable

[SW1-GigabitEthernet0/0/1]stp edged-port enable

[SW1-Vlanif100]int g0/0/2

[SW1-GigabitEthernet0/0/2]stp bpdu-filter enable

[SW1-GigabitEthernet0/0/2]stp edged-port enable

//telnet

[SW1]aaa

[SW1-aaa]local-user admin password cipher admin

[SW1-aaa]local-user admin privilege level 15

[SW1-aaa]local-user admin service-type telnet

[SW1-aaa]q

[SW1]user-interface vty 0 4

[SW1-ui-vty0-4]authentication-mode aaa

sys

[Huawei]un in en

Info: Information center is disabled.

[Huawei]sysname SW2

[SW2]vlan batch 10 20 30 40 100

[SW2]int vlan 100

[SW2-Vlanif100]ip add 192.168.100.2 24

[SW2-Vlanif100]int g0/0/1

[SW2-GigabitEthernet0/0/1]port link-type access

[SW2-GigabitEthernet0/0/1]port default vlan 30

[SW2-GigabitEthernet0/0/1]int g0/0/2

[SW2-GigabitEthernet0/0/2]port link-type access

[SW2-GigabitEthernet0/0/2]port default vlan 40

[SW2-GigabitEthernet0/0/2]q

[SW2]int g0/0/3

[SW2-GigabitEthernet0/0/3]port link-type trunk   

[SW2-GigabitEthernet0/0/3]port trunk allow-pass vlan 10 20 30 40 100

[SW2-GigabitEthernet0/0/3]int g0/0/4

[SW2-GigabitEthernet0/0/4]port link-type trunk   

[SW2-GigabitEthernet0/0/4]port trunk allow-pass vlan 10 20 30 40 100

//开启Portfast和BPDUguard防护功能

[SW2-Vlanif100]int g0/0/1

[SW2-GigabitEthernet0/0/1]stp bpdu-filter enable

[SW2-GigabitEthernet0/0/1]stp edged-port enable

[SW2-Vlanif100]int g0/0/2

[SW2-GigabitEthernet0/0/2]stp bpdu-filter enable

[SW2-GigabitEthernet0/0/2]stp edged-port enable

//telnet

[SW2]aaa

[SW2-aaa]local-user admin password cipher admin

[SW2-aaa]local-user admin privilege level 15

[SW2-aaa]local-user admin service-type telnet

[SW2-aaa]q

[SW2]user-interface vty 0 4

[SW2-ui-vty0-4]authentication-mode aaa

sys

[Huawei]un in en

[Huawei]sysname SW3

[SW3]vlan batch  5 6 10 20 30 40 100

[SW3]int vlan 10

[SW3-Vlanif10]ip add 192.168.10.252 24

[SW3-Vlanif10]int vlan 20

[SW3-Vlanif20]ip add 192.168.20.252 24

[SW3-Vlanif20]int vlan 30

[SW3-Vlanif30]ip add 192.168.30.252 24

[SW3-Vlanif30]int vlan 40

[SW3-Vlanif40]ip add 192.168.40.252 24

[SW3-Vlanif40]int vlan 100

[SW3-Vlanif100]ip add 192.168.100.252 24

[SW3-Vlanif100]int vlan 5

[SW3-Vlanif5]ip add 10.1.13.2 30

[SW3-Vlanif5]int vlan 6

[SW3-Vlanif6]ip add 10.1.23.1 30

[SW3-Vlanif6]int g0/0/5

[SW3-GigabitEthernet0/0/5]port link-type access

[SW3-GigabitEthernet0/0/5]port default vlan 5

[SW3-GigabitEthernet0/0/5]int g0/0/6

[SW3-GigabitEthernet0/0/6]port link-type access

[SW3-GigabitEthernet0/0/6]port default vlan 6

[SW3-GigabitEthernet0/0/6]int g0/0/1

[SW3-GigabitEthernet0/0/1]port link-type trunk   

[SW3-GigabitEthernet0/0/1]port trunk allow-pass vlan 10 20 30 40 100

[SW3-GigabitEthernet0/0/1]int g0/0/2

[SW3-GigabitEthernet0/0/2]port link-type trunk   

[SW3-GigabitEthernet0/0/2]port trunk allow-pass vlan 10 20 30 40 100

[SW3-GigabitEthernet0/0/2]q

//VRRP

[SW3]int vlan 10

[SW3-Vlanif10]vrrp vrid 10 virtual-ip 192.168.10.254

[SW3-Vlanif10]vrrp vrid 10 priority 150

[SW3-Vlanif10]int vlan 20

[SW3-Vlanif20]vrrp vrid 20 virtual-ip 192.168.20.254

[SW3-Vlanif20]vrrp vrid 20 priority 120

[SW3-Vlanif20]int vlan 30

[SW3-Vlanif30]vrrp vrid 30 virtual-ip 192.168.30.254

[SW3-Vlanif30]vrrp vrid 30 priority 150

[SW3-Vlanif30]int vlan 40

[SW3-Vlanif40]vrrp vrid 40 virtual-ip 192.168.40.254

[SW3-Vlanif40]vrrp vrid 40 priority 120

[SW3-Vlanif40]int vlan 100

[SW3-Vlanif100]vrrp vrid 100 virtual-ip 192.168.100.254

[SW3-Vlanif100]vrrp vrid 100 priority 150

[SW3-Vlanif100]q

// Eth-Trunk

[SW3]int Eth-Trunk 1

[SW3-Eth-Trunk1]port link-type trunk   

[SW3-Eth-Trunk1]port trunk allow-pass vlan 10 20 30 40 100

[SW3-Eth-Trunk1]int g0/0/3

[SW3-GigabitEthernet0/0/3]eth-trunk 1

Info: This operation may take a few seconds. Please wait for a moment...done.

[SW3-GigabitEthernet0/0/3]int g0/0/4

[SW3-GigabitEthernet0/0/4]eth-trunk 1

Info: This operation may take a few seconds. Please wait for a moment...done.

[SW3-GigabitEthernet0/0/4]q

//MSTP

[SW3]stp mode mstp

[SW3]stp region-configuration

[SW3-mst-region]region-name mstp

[SW3-mst-region]instance 1 vlan 10 30 100

[SW3-mst-region]instance 2 vlan 20 40

[SW3-mst-region]active region-configuration

Info: This operation may take a few seconds. Please wait for a moment...done.

[SW3-mst-region]q

[SW3]stp instance 1 priority 4096

[SW3]stp instance 2 priority 8192

[SW3]dhcp enable

Info: The operation may take a few seconds. Please wait for a moment.done.

//DHCP中继

[SW3]int vlan 10

[SW3-Vlanif10]dhcp select relay

[SW3-Vlanif10]dhcp relay server-ip 10.3.11.2  

[SW3-Vlanif10]int vlan 40

[SW3-Vlanif40]dhcp select relay

[SW3-Vlanif40]dhcp relay server-ip 10.3.11.2

[SW3-Vlanif40]q

//OSPF

[SW3]ospf 100

[SW3-ospf-100]area 0

[SW3-ospf-100-area-0.0.0.0]net 192.168.10.0 0.0.0.255

[SW3-ospf-100-area-0.0.0.0]net 192.168.20.0 0.0.0.255

[SW3-ospf-100-area-0.0.0.0]net 192.168.30.0 0.0.0.255

[SW3-ospf-100-area-0.0.0.0]net 192.168.40.0 0.0.0.255

[SW3-ospf-100-area-0.0.0.0]net 192.168.100.0 0.0.0.255

[SW3-ospf-100-area-0.0.0.0]net 10.1.13.0 0.0.0.3

[SW3-ospf-100-area-0.0.0.0]net 10.1.23.0 0.0.0.3

[SW3]ospf 100

[SW3-ospf-100] silent-interface vlanif 10

[SW3-ospf-100] silent-interface vlanif 20

[SW3-ospf-100] silent-interface vlanif 30

[SW3-ospf-100] silent-interface vlanif 40

[SW3-ospf-100] silent-interface vlanif 100

//优化全网的OSPF配置,尽量加快OSPF路由收敛

[SW3]int vlan 5

[SW3-Vlanif5] ospf network-type p2p

[SW3]int vlan 6

[SW3-Vlanif6] ospf network-type p2p 

//telnet

[SW3]aaa

[SW3-aaa]local-user admin password cipher admin

[SW3-aaa]local-user admin privilege level 15

[SW3-aaa]local-user admin service-type telnet

[SW3-aaa]q

[SW3]user-interface vty 0 4

[SW3-ui-vty0-4]authentication-mode aaa

sys

[Huawei]un in en

[Huawei]sysname SW4

[SW4]vlan batch 5 6 10 20 30 40 100

[SW4]int vlan 10

[SW4-Vlanif10]ip add 192.168.10.253 24

[SW4-Vlanif10]int vlan 20

[SW4-Vlanif20]ip add 192.168.20.253 24

[SW4-Vlanif20]int vlan 30

[SW4-Vlanif30]ip add 192.168.30.253 24

[SW4-Vlanif30]int vlan 40

[SW4-Vlanif40]ip add 192.168.40.253 24

[SW4-Vlanif40]int vlan 100

[SW4-Vlanif100]ip add 192.168.100.253 24

[SW4-Vlanif100]int vlan 5

[SW4-Vlanif5]ip add 10.1.24.1 30

[SW4-Vlanif5]int vlan 6

[SW4-Vlanif6]ip add 10.1.14.2 30

[SW4-Vlanif6]int g0/0/5

[SW4-GigabitEthernet0/0/5]port link-type access

[SW4-GigabitEthernet0/0/5]port default vlan 5

[SW4-GigabitEthernet0/0/5]int g0/0/6

[SW4-GigabitEthernet0/0/6]port link-type access

[SW4-GigabitEthernet0/0/6]port default vlan 6

[SW4-GigabitEthernet0/0/6]int g0/0/1

[SW4-GigabitEthernet0/0/1]port link-type trunk   

[SW4-GigabitEthernet0/0/1]port trunk allow-pass vlan 10 20 30 40 100

[SW4-GigabitEthernet0/0/1]int g0/0/2

[SW4-GigabitEthernet0/0/2]port link-type trunk   

[SW4-GigabitEthernet0/0/2]port trunk allow-pass vlan 10 20 30 40 100

[SW4-GigabitEthernet0/0/2]q

//VRRP

[SW4]int vlan 10

[SW4-Vlanif10]vrrp vrid 10 virtual-ip 192.168.10.254

[SW4-Vlanif10]vrrp vrid 10 priority 120 

[SW4-Vlanif10]int vlan 20

[SW4-Vlanif20]vrrp vrid 20 virtual-ip 192.168.20.254

[SW4-Vlanif20]vrrp vrid 20 priority 150 

[SW4-Vlanif20]int vlan 30

[SW4-Vlanif30]vrrp vrid 30 virtual-ip 192.168.30.254

[SW4-Vlanif30]vrrp vrid 30 priority 120  

[SW4-Vlanif30]int vlan 40

[SW4-Vlanif40]vrrp vrid 40 virtual-ip 192.168.40.254

[SW4-Vlanif40]vrrp vrid 40 priority 150  

[SW4-Vlanif40]int vlan 100

[SW4-Vlanif100]vrrp vrid 100 virtual-ip 192.168.100.254

[SW4-Vlanif100]vrrp vrid 100 priority 120

[SW4-Vlanif100]q

// Eth-Trunk

[SW4]int Eth-Trunk 1

[SW4-Eth-Trunk1]port link-type trunk   

[SW4-Eth-Trunk1]port trunk allow-pass vlan 10 20 30 40 100

[SW4-Eth-Trunk1]int g0/0/3

[SW4-GigabitEthernet0/0/3]eth-trunk 1

Info: This operation may take a few seconds. Please wait for a moment...done.

[SW4-GigabitEthernet0/0/3]int g0/0/4

[SW4-GigabitEthernet0/0/4]eth-trunk 1

Info: This operation may take a few seconds. Please wait for a moment...done.

[SW4-GigabitEthernet0/0/4]q

//MSTP

[SW4]stp mode mstp

[SW4]stp region-configuration

[SW4-mst-region]region-name mstp

[SW4-mst-region]instance 1 vlan 10 30 100

[SW4-mst-region]instance 2 vlan 20 40

[SW4-mst-region]active region-configuration

Info: This operation may take a few seconds. Please wait for a moment...done.

[SW4-mst-region]q

[SW4]stp instance 2 priority 4096

[SW4]stp instance 1 priority 8192

//DHCP中继

[SW4]dhcp enable

[SW4]int vlan 10

[SW4-Vlanif10]dhcp select relay

[SW4-Vlanif10]dhcp relay server-ip 10.3.11.2  

[SW4-Vlanif10]int vlan 40

[SW4-Vlanif40]dhcp select relay

[SW4-Vlanif40]dhcp relay server-ip 10.3.11.2

[SW4-Vlanif40]q

//OSPF

[SW4]ospf 100

[SW4-ospf-100]area 0

[SW4-ospf-100-area-0.0.0.0]net 192.168.10.0 0.0.0.255

[SW4-ospf-100-area-0.0.0.0]net 192.168.20.0 0.0.0.255

[SW4-ospf-100-area-0.0.0.0]net 192.168.30.0 0.0.0.255

[SW4-ospf-100-area-0.0.0.0]net 192.168.40.0 0.0.0.255

[SW4-ospf-100-area-0.0.0.0]net 192.168.100.0 0.0.0.255

[SW4-ospf-100-area-0.0.0.0]net 10.1.14.0 0.0.0.3

[SW4-ospf-100-area-0.0.0.0]net 10.1.24.0 0.0.0.3

[SW4]ospf 100

[SW4-ospf-100] silent-interface vlanif 10

[SW4-ospf-100] silent-interface vlanif 20

[SW4-ospf-100] silent-interface vlanif 30

[SW4-ospf-100] silent-interface vlanif 40

[SW4-ospf-100] silent-interface vlanif 100

//优化全网的OSPF配置,尽量加快OSPF路由收敛

[SW4]int vlan 5

[SW4-Vlanif5] ospf network-type p2p

[SW4]int vlan 6

[SW4-Vlanif6] ospf network-type p2p

//telnet

[SW4]aaa

[SW4-aaa]local-user admin password cipher admin

[SW4-aaa]local-user admin privilege level 15

[SW4-aaa]local-user admin service-type telnet

[SW4-aaa]q

[SW4]user-interface vty 0 4

[SW4-ui-vty0-4]authentication-mode aaa

sys

[R1]int g0/0/0

[R1-GigabitEthernet0/0/0]ip add 10.1.13.1 30

[R1-GigabitEthernet0/0/0]int g0/0/1

[R1-GigabitEthernet0/0/1]ip add 10.1.14.1 30

[R1-GigabitEthernet0/0/1]int g0/0/2

[R1-GigabitEthernet0/0/2]ip add 10.2.12.1 30

[R1-GigabitEthernet0/0/2]int g1/0/0

[R1-GigabitEthernet1/0/0]ip add 10.2.13.1 30

[R1-GigabitEthernet1/0/0]int g2/0/0

[R1-GigabitEthernet2/0/0]ip add 10.3.11.1 30

[R1-GigabitEthernet2/0/0]int loopback 0

[R1-LoopBack0]ip add 11.11.11.1 32

[R1-LoopBack0]q

//优化全网的OSPF配置,尽量加快OSPF路由收敛

[R1]int g0/0/0

[R1-GigabitEthernet0/0/0] ospf network-type p2p

[R1]int g0/0/1

[R1-GigabitEthernet0/0/1] ospf network-type p2p

[R1]int g0/0/2

[R1-GigabitEthernet0/0/2] ospf network-type p2p

[R1]int g1/0/0

[R1-GigabitEthernet1/0/0] ospf network-type p2p

[R1]int g2/0/0

[R1-GigabitEthernet2/0/0] ospf network-type p2p

//OSPF

[R1]ospf 100

[R1-ospf-100]area 0

[R1-ospf-100-area-0.0.0.0]net 10.1.13.0 0.0.0.3

[R1-ospf-100-area-0.0.0.0]net 10.1.14.0 0.0.0.3

[R1-ospf-100-area-0.0.0.0]net 10.2.12.0 0.0.0.3

[R1-ospf-100-area-0.0.0.0]net 10.2.13.0 0.0.0.3

[R1-ospf-100-area-0.0.0.0]net 10.3.11.0 0.0.0.3

[R1] ssh client first-time enable    //SSH客户端

sys

[R2]int g0/0/0

[R2-GigabitEthernet0/0/0]ip add 10.1.24.2 30

[R2-GigabitEthernet0/0/0]int g0/0/1

[R2-GigabitEthernet0/0/1]ip add 10.1.23.2 30

[R2-GigabitEthernet0/0/1]int g0/0/2

[R2-GigabitEthernet0/0/2]ip add 10.2.12.2 30

[R2-GigabitEthernet0/0/2]int g1/0/0

[R2-GigabitEthernet1/0/0]ip add 10.2.23.1 30

[R2-GigabitEthernet1/0/0]int loopback 0

[R2-LoopBack0]ip add 11.11.11.2 32

[R2-LoopBack0]q

//优化全网的OSPF配置,尽量加快OSPF路由收敛

[R2]int g0/0/0

[R2-GigabitEthernet0/0/0] ospf network-type p2p

[R2]int g0/0/1

[R2-GigabitEthernet0/0/1] ospf network-type p2p

[R2]int g0/0/2

[R2-GigabitEthernet0/0/2] ospf network-type p2p

[R2]int g1/0/0

[R2-GigabitEthernet1/0/0] ospf network-type p2p

//OSPF

[R2]ospf 100

[R2-ospf-100]area 0

[R2-ospf-100-area-0.0.0.0]net 10.1.23.0 0.0.0.3

[R2-ospf-100-area-0.0.0.0]net 10.1.24.0 0.0.0.3

[R2-ospf-100-area-0.0.0.0]net 10.2.12.0 0.0.0.3

[R2-ospf-100-area-0.0.0.0]net 10.2.23.0 0.0.0.3

sys

[R3]int g0/0/0

[R3-GigabitEthernet0/0/0]ip add 10.2.13.2 30

[R3-GigabitEthernet0/0/0] ospf network-type p2p

[R3-GigabitEthernet0/0/0]int g0/0/1

[R3-GigabitEthernet0/0/1]ip add 10.2.23.2 30

[R3-GigabitEthernet0/0/1] ospf network-type p2p

[R3-GigabitEthernet0/0/1]int s1/0/0

[R3-Serial1/0/0]ip add 100.100.100.1 24

[R3-Serial1/0/0]int loopback 0

[R3-LoopBack0]ip add 11.11.11.3 32

[R3-LoopBack0]q

//OSPF

[R3]ospf 100

[R3-ospf-100]default-route-advertise  //下发默认路由

[R3-ospf-100]area 0

[R3-ospf-100-area-0.0.0.0]net 10.2.13.0 0.0.0.3

[R3-ospf-100-area-0.0.0.0]net 10.2.23.0 0.0.0.3

//NAT

[R3]acl 2000

[R3-acl-basic-2000]rule permit source any

[R3-acl-basic-2000]int s1/0/0

[R3-Serial1/0/0]nat outbound 2000

[R3]ip route-static 0.0.0.0 0.0.0.0 100.100.100.2

//SSH

[R3]rsa local-key-pair create

The key name will be: Host

% RSA keys defined for Host already exist.

Confirm to replace them? (y/n)[n]:y

The range of public key size is (512 ~ 2048).

NOTES: If the key modulus is greater than 512,

       It will take a few minutes.

Input the bits in the modulus[default = 512]:1024

Generating keys...

................................................................................

[R3]user-interface vty 0 4

[R3-ui-vty0-4]authentication-mode aaa

[R3-ui-vty0-4]protocol inbound ssh

[R3-ui-vty0-4]aaa

[R3-aaa]

[R3-aaa]local-user admin service-type ssh

[R3-aaa]local-user admin password cipher admin

[R3-aaa]local-user admin privilege level 15

[R3-aaa]ssh user admin authentication-type password

[R3]stelnet server enable

Info: Succeeded in starting the STELNET server.

sys

[Huawei]un in en

Info: Information center is disabled.

[Huawei]sysname DHCP-S

[DHCP-S]dhcp enable

Info: The operation may take a few seconds. Please wait for a moment.done.

[DHCP-S]ip pool vlan10

Info: It's successful to create an IP address pool.

[DHCP-S-ip-pool-vlan10]gateway-list 192.168.10.254

[DHCP-S-ip-pool-vlan10]network 192.168.10.0 mask 255.255.255.0

[DHCP-S-ip-pool-vlan10]dns-list 8.8.8.8

[DHCP-S-ip-pool-vlan10]excluded-ip-address 192.168.10.252 192.168.10.253

[DHCP-S-ip-pool-vlan10]q

[DHCP-S]ip pool vlan40

Info: It's successful to create an IP address pool.

[DHCP-S-ip-pool-vlan40]gateway-list 192.168.40.254

[DHCP-S-ip-pool-vlan40]network 192.168.40.0 mask 255.255.255.0

[DHCP-S-ip-pool-vlan40]dns-list 8.8.8.8

[DHCP-S-ip-pool-vlan40]excluded-ip-address 192.168.40.252 192.168.40.253

[DHCP-S-ip-pool-vlan40]q

[DHCP-S]int g0/0/0

[DHCP-S-GigabitEthernet0/0/0]ip add 10.3.11.2 30

[DHCP-S-GigabitEthernet0/0/0]dhcp select global

[DHCP-S-GigabitEthernet0/0/0]int loopback 0

[DHCP-S-LoopBack0]ip add 11.11.11.4 32

[DHCP-S-LoopBack0]q

//OSPF

[DHCP-S]ospf 100

[DHCP-S-ospf-100]area 0

[DHCP-S-ospf-100-area-0.0.0.0]net 10.3.11.0 0.0.0.3

//SSH

[DHCP-S]rsa local-key-pair create

The key name will be: Host

% RSA keys defined for Host already exist.

Confirm to replace them? (y/n)[n]:y

The range of public key size is (512 ~ 2048).

NOTES: If the key modulus is greater than 512,

       It will take a few minutes.

Input the bits in the modulus[default = 512]:1024

Generating keys...

................................................................................

[DHCP-S]user-interface vty 0 4

[DHCP-S-ui-vty0-4]authentication-mode aaa

[DHCP-S-ui-vty0-4]protocol inbound ssh

[DHCP-S-ui-vty0-4]aaa

[DHCP-S-aaa]

[DHCP-S-aaa]local-user admin service-type ssh

[DHCP-S-aaa]local-user admin password cipher admin

[DHCP-S-aaa]local-user admin privilege level 15

[DHCP-S-aaa]ssh user admin authentication-type password

[DHCP-S]stelnet server enable

Info: Succeeded in starting the STELNET server.

sys

[Huawei]un in en

Info: Information center is disabled.

[Huawei]sysname R4

[R4]int s1/0/0

[R4-Serial1/0/0]ip add 200.200.200.1 24

//单臂路由

[R4-Serial1/0/0]int g0/0/0.50

[R4-GigabitEthernet0/0/0.50]ip add 172.16.50.254 24

[R4-GigabitEthernet0/0/0.50]dot1q termination vid 50

[R4-GigabitEthernet0/0/0.50]arp broadcast enable

[R4-GigabitEthernet0/0/0.50]int g0/0/0.60

[R4-GigabitEthernet0/0/0.60]ip add 172.16.60.254 24

[R4-GigabitEthernet0/0/0.60]dot1q termination vid 60

[R4-GigabitEthernet0/0/0.60]arp broadcast enable

[R4-GigabitEthernet0/0/0.60]q

//NAT

[R4]acl 2000

[R4-acl-basic-2000]rule 5 permit source 172.16.50.0 0.0.0.255

[R4-acl-basic-2000]rule deny source any

[R4-acl-basic-2000]int s1/0/0

[R4-Serial1/0/0]nat outbound 2000

[R4] ip route-static 0.0.0.0 0.0.0.0 200.200.200.2

sys

[Huawei]un in en

Info: Information center is disabled.

[Huawei]sysname SW5

[SW5]vlan batch 50 60

Info: This operation may take a few seconds. Please wait for a moment...done.

[SW5]int g0/0/3

[SW5-GigabitEthernet0/0/3]port link-type trunk

[SW5-GigabitEthernet0/0/3]port trunk allow-pass vlan 50 60

[SW5-GigabitEthernet0/0/3]int g0/0/1

[SW5-GigabitEthernet0/0/1]port link-type access

[SW5-GigabitEthernet0/0/1]port default vlan 50

[SW5-GigabitEthernet0/0/1]int g0/0/2

[SW5-GigabitEthernet0/0/2]port link-type access

[SW5-GigabitEthernet0/0/2]port default vlan 60

6.实验结果

        一个比较简单的实验,图太多我就不贴了,赶时间啊哈哈哈哈

最后感谢指正。

你可能感兴趣的:(ssh,网络,华为)