当前位置：文档之家 › 华为eNSP实验指南

华为eNSP实验指南

  • 格式：doc
  • 大小：271.51 KB
  • 文档页数：64

VLAN的基础配置VLAN最基本实验，1和3属于VLAN2，相互不通；2和4属于VLAN3，可以ping通。

===================================================================== [SW1]di cu#sysname SW1#vlan batch 2 to 3#cluster enablentdp enablendp enable#drop illegal-mac alarm#diffserv domain default#drop-profile default#aaaauthentication-scheme default authorization-scheme default accounting-scheme defaultdomain defaultdomain default_adminlocal-user admin password simple admin local-user admin service-type http#interface Vlanif1#interface MEth0/0/1#interface Ethernet0/0/1port link-type accessport default vlan 2#interface Ethernet0/0/2port link-type accessport default vlan 3#interface Ethernet0/0/3#interface Ethernet0/0/4#interface Ethernet0/0/5#interface Ethernet0/0/6##interface Ethernet0/0/8 #interface Ethernet0/0/9 #interface Ethernet0/0/10 #interface Ethernet0/0/11 #interface Ethernet0/0/12 #interface Ethernet0/0/13 #interface Ethernet0/0/14 #interface Ethernet0/0/15 #interface Ethernet0/0/16 #interface Ethernet0/0/17 #interface Ethernet0/0/18 #interface Ethernet0/0/19 #interface Ethernet0/0/20 #interface Ethernet0/0/21 #port link-type trunkport trunk allow-pass vlan 3#interface GigabitEthernet0/0/1#interface GigabitEthernet0/0/2#interface NULL0#user-interface con 0user-interface vty 0 4#Return===================================================================== [SW2]di cu#sysname SW2#vlan batch 2 to 3#cluster enablentdp enablendp enable#drop illegal-mac alarm#diffserv domain default#drop-profile default#aaaauthentication-scheme default authorization-scheme default accounting-scheme defaultdomain defaultdomain default_adminlocal-user admin password simple admin local-user admin service-type http#interface Vlanif1#interface MEth0/0/1#interface Ethernet0/0/1port link-type accessport default vlan 2#interface Ethernet0/0/2port link-type accessport default vlan 3#interface Ethernet0/0/3#interface Ethernet0/0/4#interface Ethernet0/0/5#interface Ethernet0/0/6##interface Ethernet0/0/8 #interface Ethernet0/0/9 #interface Ethernet0/0/10 #interface Ethernet0/0/11 #interface Ethernet0/0/12 #interface Ethernet0/0/13 #interface Ethernet0/0/14 #interface Ethernet0/0/15 #interface Ethernet0/0/16 #interface Ethernet0/0/17 #interface Ethernet0/0/18 #interface Ethernet0/0/19 #interface Ethernet0/0/20 #interface Ethernet0/0/21 #port link-type trunkport trunk allow-pass vlan 3#interface GigabitEthernet0/0/1#interface GigabitEthernet0/0/2#interface NULL0#user-interface con 0user-interface vty 0 4#port-group link-type#returnVLAN间路由注：在pc1和pc2上面配置好ip地址和网关===================================================================== [SW1]di cu#sysname SW1#vlan batch 2 to 3#cluster enablentdp enablendp enable#drop illegal-mac alarm#diffserv domain default#drop-profile default#aaaauthentication-scheme default authorization-scheme default accounting-scheme defaultdomain defaultdomain default_adminlocal-user admin password simple admin local-user admin service-type http#interface Vlanif1#interface Vlanif2ip address 192.168.2.254 255.255.255.0 #interface Vlanif3ip address 192.168.3.254 255.255.255.0 #interface MEth0/0/1#interface Ethernet0/0/1port link-type accessport default vlan 2#interface Ethernet0/0/2port link-type accessport default vlan 3#interface Ethernet0/0/3#interface Ethernet0/0/4#interface Ethernet0/0/5#interface Ethernet0/0/6#interface Ethernet0/0/7#interface Ethernet0/0/8#interface Ethernet0/0/9#interface Ethernet0/0/10#interface Ethernet0/0/11#interface Ethernet0/0/12#interface Ethernet0/0/13#interface Ethernet0/0/14#interface Ethernet0/0/15#interface Ethernet0/0/16#interface Ethernet0/0/17#interface Ethernet0/0/18#interface Ethernet0/0/19#interface Ethernet0/0/20#interface Ethernet0/0/21#interface Ethernet0/0/22#interface GigabitEthernet0/0/1 #interface GigabitEthernet0/0/2 #interface NULL0#user-interface con 0user-interface vty 0 4#return===================================================================== [R1]di cu#sysname R1#aaaauthentication-scheme defaultauthorization-scheme defaultaccounting-scheme defaultdomain defaultdomain default_adminlocal-user admin password cipher OOCM4m($F4ajUn1vMEIBNUw#local-user admin service-type http#firewall zone Localpriority 16#interface Ethernet0/0/0#interface Ethernet0/0/0.1vlan-type dot1q 2ip address 192.168.2.254 255.255.255.0 #interface Ethernet0/0/0.3vlan-type dot1q 3ip address 192.168.3.254 255.255.255.0 #interface Ethernet0/0/1#interface Serial0/0/0link-protocol ppp#interface Serial0/0/1link-protocol ppp#interface Serial0/0/2link-protocol ppp#interface Serial0/0/3link-protocol ppp#interface GigabitEthernet0/0/0#interface GigabitEthernet0/0/1#interface GigabitEthernet0/0/2#interface GigabitEthernet0/0/3#wlan#interface NULL0#user-interface con 0user-interface vty 0 4user-interface vty 16 20#return===================================================================== [SW1]di cu#sysname SW1#vlan batch 2 to 3#cluster enablentdp enablendp enable#drop illegal-mac alarm#diffserv domain default#drop-profile default#aaaauthentication-scheme defaultauthorization-scheme default accounting-scheme defaultdomain defaultdomain default_adminlocal-user admin password simple admin local-user admin service-type http#interface Vlanif1#interface MEth0/0/1#interface Ethernet0/0/1port link-type accessport default vlan 2#interface Ethernet0/0/2port link-type accessport default vlan 3#interface Ethernet0/0/3#interface Ethernet0/0/4#interface Ethernet0/0/5#interface Ethernet0/0/6#interface Ethernet0/0/7#interface Ethernet0/0/8#interface Ethernet0/0/9#interface Ethernet0/0/10#interface Ethernet0/0/11#interface Ethernet0/0/12#interface Ethernet0/0/13#interface Ethernet0/0/14#interface Ethernet0/0/15#interface Ethernet0/0/16#interface Ethernet0/0/17#interface Ethernet0/0/18#interface Ethernet0/0/19#interface Ethernet0/0/20#interface Ethernet0/0/21port link-type trunkport trunk allow-pass vlan 2 to 4094 #interface Ethernet0/0/22port link-type trunkport trunk allow-pass vlan 2 to 4094#interface GigabitEthernet0/0/1#interface GigabitEthernet0/0/2#interface NULL0#user-interface con 0user-interface vty 0 4#return===================================================================== [SW2]di cu#sysname SW2#vlan batch 3#cluster enablentdp enablendp enable#drop illegal-mac alarm#diffserv domain default#drop-profile default#authentication-scheme default authorization-scheme default accounting-scheme defaultdomain defaultdomain default_adminlocal-user admin password simple admin local-user admin service-type http#interface Vlanif1#interface MEth0/0/1#interface Ethernet0/0/1port link-type accessport default vlan 3#interface Ethernet0/0/2#interface Ethernet0/0/3#interface Ethernet0/0/4#interface Ethernet0/0/5#interface Ethernet0/0/6#interface Ethernet0/0/7#interface Ethernet0/0/8interface Ethernet0/0/9#interface Ethernet0/0/10#interface Ethernet0/0/11#interface Ethernet0/0/12#interface Ethernet0/0/13#interface Ethernet0/0/14#interface Ethernet0/0/15#interface Ethernet0/0/16#interface Ethernet0/0/17#interface Ethernet0/0/18#interface Ethernet0/0/19#interface Ethernet0/0/20#interface Ethernet0/0/21#interface Ethernet0/0/22port link-type trunkport trunk allow-pass vlan 2 to 4094interface GigabitEthernet0/0/1#interface GigabitEthernet0/0/2#interface NULL0#user-interface con 0user-interface vty 0 4#return静态路由===================================================================== [R1]di cu#sysname R1#aaaauthentication-scheme defaultauthorization-scheme defaultaccounting-scheme defaultdomain defaultdomain default_adminlocal-user admin password cipher OOCM4m($F4ajUn1vMEIBNUw#local-user admin service-type http #firewall zone Localpriority 16#interface Ethernet0/0/0ip address 12.1.1.1 255.255.255.0 #interface Ethernet0/0/1#interface Serial0/0/0link-protocol ppp#interface Serial0/0/1link-protocol ppp#interface Serial0/0/2link-protocol ppp#interface Serial0/0/3link-protocol ppp#interface GigabitEthernet0/0/0#interface GigabitEthernet0/0/1#interface GigabitEthernet0/0/2#interface GigabitEthernet0/0/3##interface NULL0#interface LoopBack0#ip route-static 23.1.1.0 255.255.255.0 12.1.1.2#user-interface con 0user-interface vty 0 4user-interface vty 16 20#Return===================================================================== [R2]di cu#sysname R2#aaaauthentication-scheme defaultauthorization-scheme defaultaccounting-scheme defaultdomain defaultdomain default_adminlocal-user admin password cipher OOCM4m($F4ajUn1vMEIBNUw#local-user admin service-type http#firewall zone Localpriority 16interface Ethernet0/0/0ip address 12.1.1.2 255.255.255.0 #interface Ethernet0/0/1ip address 23.1.1.1 255.255.255.0 #interface Serial0/0/0link-protocol ppp#interface Serial0/0/1link-protocol ppp#interface Serial0/0/2link-protocol ppp#interface Serial0/0/3link-protocol ppp#interface GigabitEthernet0/0/0#interface GigabitEthernet0/0/1#interface GigabitEthernet0/0/2#interface GigabitEthernet0/0/3#wlan#interface NULL0user-interface con 0user-interface vty 0 4user-interface vty 16 20#return===================================================================== [R3]di cu#sysname R3#aaaauthentication-scheme defaultauthorization-scheme defaultaccounting-scheme defaultdomain defaultdomain default_adminlocal-user admin password cipher OOCM4m($F4ajUn1vMEIBNUw#local-user admin service-type http#firewall zone Localpriority 16#interface Ethernet0/0/0ip address 23.1.1.2 255.255.255.0#interface Ethernet0/0/1#interface Serial0/0/0link-protocol ppp#interface Serial0/0/1link-protocol ppp#interface Serial0/0/2link-protocol ppp#interface Serial0/0/3link-protocol ppp#interface GigabitEthernet0/0/0#interface GigabitEthernet0/0/1#interface GigabitEthernet0/0/2#interface GigabitEthernet0/0/3#wlan#interface NULL0#ip route-static 12.1.1.0 255.255.255.0 23.1.1.1 #user-interface con 0user-interface vty 0 4user-interface vty 16 20#returnRIP===================================================================== [R1]di cu#sysname R1#aaaauthentication-scheme defaultauthorization-scheme defaultaccounting-scheme defaultdomain defaultdomain default_adminlocal-user admin password cipher OOCM4m($F4ajUn1vMEIBNUw#local-user admin service-type http#firewall zone Localpriority 16#interface Ethernet0/0/0ip address 192.168.1.254 255.255.255.0#interface Ethernet0/0/1#interface Serial0/0/0link-protocol pppip address 12.1.1.1 255.255.255.0 #interface Serial0/0/1link-protocol ppp#interface Serial0/0/2link-protocol ppp#interface Serial0/0/3link-protocol ppp#interface GigabitEthernet0/0/0#interface GigabitEthernet0/0/1#interface GigabitEthernet0/0/2#interface GigabitEthernet0/0/3#wlan#interface NULL0#rip 1undo summaryversion 2network 12.0.0.0network 192.168.1.0#user-interface con 0user-interface vty 0 4user-interface vty 16 20#return===================================================================== [R2]di cu#sysname R2#aaaauthentication-scheme defaultauthorization-scheme defaultaccounting-scheme defaultdomain defaultdomain default_adminlocal-user admin password cipher OOCM4m($F4ajUn1vMEIBNUw#local-user admin service-type http#firewall zone Localpriority 16#interface Ethernet0/0/0ip address 192.168.2.254 255.255.255.0#interface Ethernet0/0/1#interface Serial0/0/0link-protocol pppip address 12.1.1.2 255.255.255.0 #interface Serial0/0/1link-protocol pppip address 23.1.1.1 255.255.255.0 #interface Serial0/0/2link-protocol ppp#interface Serial0/0/3link-protocol ppp#interface GigabitEthernet0/0/0#interface GigabitEthernet0/0/1#interface GigabitEthernet0/0/2#interface GigabitEthernet0/0/3#wlan#interface NULL0#rip 1undo summaryversion 2network 23.0.0.0network 12.0.0.0network 192.168.2.0#user-interface con 0user-interface vty 0 4user-interface vty 16 20===================================================================== [R3]di cu#sysname R3#aaaauthentication-scheme defaultauthorization-scheme defaultaccounting-scheme defaultdomain defaultdomain default_adminlocal-user admin password cipher OOCM4m($F4ajUn1vMEIBNUw#local-user admin service-type http#firewall zone Localpriority 16#interface Ethernet0/0/0ip address 192.168.3.254 255.255.255.0#interface Ethernet0/0/1#interface Serial0/0/0link-protocol pppip address 23.1.1.2 255.255.255.0 #interface Serial0/0/1link-protocol ppp#interface Serial0/0/2link-protocol ppp#interface Serial0/0/3link-protocol ppp#interface GigabitEthernet0/0/0#interface GigabitEthernet0/0/1#interface GigabitEthernet0/0/2#interface GigabitEthernet0/0/3#wlan#interface NULL0#rip 1undo summaryversion 2network 23.0.0.0network 192.168.3.0#user-interface con 0user-interface vty 0 4user-interface vty 16 20#ReturnOSPF基本的ospf配置====================================================================== [R1]di cu#sysname R1#aaaauthentication-scheme defaultauthorization-scheme defaultaccounting-scheme defaultdomain defaultdomain default_adminlocal-user admin password cipher OOCM4m($F4ajUn1vMEIBNUw#local-user admin service-type http#firewall zone Localpriority 16#interface Ethernet0/0/0#interface Ethernet0/0/1#interface Serial0/0/0link-protocol pppip address 12.1.1.1 255.255.255.0 #interface Serial0/0/1link-protocol ppp#interface Serial0/0/2link-protocol ppp#interface Serial0/0/3link-protocol ppp#interface GigabitEthernet0/0/0#interface GigabitEthernet0/0/1#interface GigabitEthernet0/0/2#interface GigabitEthernet0/0/3#wlan#interface NULL0interface LoopBack0ip address 1.1.1.1 255.255.255.0#ospf 100 router-id 1.1.1.1area 0.0.0.1network 12.1.1.0 0.0.0.255network 1.1.1.0 0.0.0.255#user-interface con 0user-interface vty 0 4user-interface vty 16 20#return====================================================================== [R2]di cu#sysname R2#aaaauthentication-scheme defaultauthorization-scheme defaultaccounting-scheme defaultdomain defaultdomain default_adminlocal-user admin password cipher OOCM4m($F4ajUn1vMEIBNUw#local-user admin service-type http#firewall zone Localpriority 16interface Ethernet0/0/0#interface Ethernet0/0/1#interface Serial0/0/0link-protocol pppip address 12.1.1.2 255.255.255.0 #interface Serial0/0/1link-protocol pppip address 23.1.1.1 255.255.255.0 #interface Serial0/0/2link-protocol ppp#interface Serial0/0/3link-protocol ppp#interface GigabitEthernet0/0/0#interface GigabitEthernet0/0/1#interface GigabitEthernet0/0/2#interface GigabitEthernet0/0/3#wlan#interface NULL0interface LoopBack0ip address 2.2.2.2 255.255.255.0#ospf 100 router-id 2.2.2.2area 0.0.0.1network 12.1.1.0 0.0.0.255network 23.1.1.0 0.0.0.255network 2.2.2.0 0.0.0.255#user-interface con 0user-interface vty 0 4user-interface vty 16 20#return====================================================================== [R3]di cu#sysname R3#aaaauthentication-scheme defaultauthorization-scheme defaultaccounting-scheme defaultdomain defaultdomain default_adminlocal-user admin password cipher OOCM4m($F4ajUn1vMEIBNUw#local-user admin service-type http#firewall zone Localpriority 16#interface Ethernet0/0/0#interface Ethernet0/0/1#interface Serial0/0/0link-protocol pppip address 23.1.1.2 255.255.255.0 #interface Serial0/0/1link-protocol ppp#interface Serial0/0/2link-protocol ppp#interface Serial0/0/3link-protocol ppp#interface GigabitEthernet0/0/0#interface GigabitEthernet0/0/1#interface GigabitEthernet0/0/2#interface GigabitEthernet0/0/3#wlan#interface NULL0#interface LoopBack0ip address 3.3.3.3 255.255.255.0#ospf 100 router-id 3.3.3.3area 0.0.0.1network 23.1.1.0 0.0.0.255network 3.3.3.0 0.0.0.255#user-interface con 0user-interface vty 0 4user-interface vty 16 20#return多区域的OSPF======================================================================[R1]di cu#sysname R1#aaaauthentication-scheme defaultauthorization-scheme defaultaccounting-scheme defaultdomain defaultdomain default_adminlocal-user admin password cipher OOCM4m($F4ajUn1vMEIBNUw# local-user admin service-type http#firewall zone Localpriority 16#interface Ethernet0/0/0#interface Ethernet0/0/1#interface Serial0/0/0link-protocol ppp#interface Serial0/0/1link-protocol ppp#interface Serial0/0/2link-protocol ppp#interface Serial0/0/3link-protocol ppp#interface GigabitEthernet0/0/0ip address 123.1.1.1 255.255.255.0 #interface GigabitEthernet0/0/1#interface GigabitEthernet0/0/2#interface GigabitEthernet0/0/3#wlan#interface NULL0#interface LoopBack0ip address 1.1.1.1 255.255.255.0#interface LoopBack1ip address 1.1.2.1 255.255.255.0#interface LoopBack2ip address 1.1.3.1 255.255.255.0#interface LoopBack3ip address 1.1.4.1 255.255.255.0#ospf 100 router-id 1.1.1.1area 0.0.0.2abr-summary 1.1.0.0 255.255.248.0network 123.1.1.0 0.0.0.255network 1.1.1.0 0.0.0.255#user-interface con 0user-interface vty 0 4user-interface vty 16 20#return====================================================================== [R2]di cu#sysname R2#aaaauthentication-scheme defaultauthorization-scheme defaultaccounting-scheme defaultdomain defaultdomain default_adminlocal-user admin password cipher OOCM4m($F4ajUn1vMEIBNUw#local-user admin service-type http#firewall zone Localpriority 16#interface Ethernet0/0/0#interface Ethernet0/0/1#interface Serial0/0/0link-protocol ppp#interface Serial0/0/1link-protocol ppp#interface Serial0/0/2link-protocol ppp#interface Serial0/0/3link-protocol ppp#interface GigabitEthernet0/0/0ip address 123.1.1.2 255.255.255.0 #interface GigabitEthernet0/0/1#interface GigabitEthernet0/0/2#interface GigabitEthernet0/0/3#wlan#interface NULL0#interface LoopBack0ip address 2.2.2.2 255.255.255.0 #ospf 100 router-id 2.2.2.2area 0.0.0.2network 2.2.2.0 0.0.0.255network 123.1.1.0 0.0.0.255#user-interface con 0user-interface vty 0 4user-interface vty 16 20#Return====================================================================== [R3]di cu#sysname R3#aaaauthentication-scheme defaultauthorization-scheme defaultaccounting-scheme defaultdomain defaultdomain default_adminlocal-user admin password cipher OOCM4m($F4ajUn1vMEIBNUw#local-user admin service-type http#firewall zone Localpriority 16#interface Ethernet0/0/0#interface Ethernet0/0/1#interface Serial0/0/0link-protocol pppip address 34.1.1.3 255.255.255.0 #interface Serial0/0/1link-protocol ppp#interface Serial0/0/2link-protocol ppp#interface Serial0/0/3link-protocol ppp#interface GigabitEthernet0/0/0ip address 123.1.1.3 255.255.255.0 #interface GigabitEthernet0/0/1#interface GigabitEthernet0/0/2#interface GigabitEthernet0/0/3#wlan#interface NULL0#interface LoopBack0ip address 3.3.3.3 255.255.255.0 #ospf 100 router-id 3.3.3.3area 0.0.0.0network 34.1.1.0 0.0.0.255area 0.0.0.2network 3.3.3.0 0.0.0.255network 123.1.1.0 0.0.0.255#user-interface con 0user-interface vty 0 4user-interface vty 16 20#return====================================================================== [R4]di cu#sysname R4#aaaauthentication-scheme defaultauthorization-scheme defaultaccounting-scheme defaultdomain defaultdomain default_adminlocal-user admin password cipher OOCM4m($F4ajUn1vMEIBNUw#local-user admin service-type http#firewall zone Localpriority 16#interface Ethernet0/0/0#interface Ethernet0/0/1#interface Serial0/0/0link-protocol pppip address 34.1.1.4 255.255.255.0 #interface Serial0/0/1link-protocol pppip address 45.1.1.4 255.255.255.0 #interface Serial0/0/2link-protocol ppp#interface Serial0/0/3link-protocol ppp#interface GigabitEthernet0/0/0#interface GigabitEthernet0/0/1#interface GigabitEthernet0/0/2#interface GigabitEthernet0/0/3#wlan#interface NULL0#interface LoopBack0ip address 4.4.4.4 255.255.255.0 #ospf 100 router-id 4.4.4.4area 0.0.0.0network 34.1.1.0 0.0.0.255network 4.4.4.0 0.0.0.255area 0.0.0.1network 45.1.1.0 0.0.0.255#user-interface con 0user-interface vty 0 4user-interface vty 16 20#Return====================================================================== [R5]di cu#sysname R5#aaaauthentication-scheme defaultauthorization-scheme defaultaccounting-scheme defaultdomain defaultdomain default_adminlocal-user admin password cipher OOCM4m($F4ajUn1vMEIBNUw#local-user admin service-type http#firewall zone Localpriority 16#interface Ethernet0/0/0##interface Serial0/0/0link-protocol pppip address 45.1.1.5 255.255.255.0 #interface Serial0/0/1link-protocol ppp#interface Serial0/0/2link-protocol ppp#interface Serial0/0/3link-protocol ppp#interface GigabitEthernet0/0/0#interface GigabitEthernet0/0/1#interface GigabitEthernet0/0/2#interface GigabitEthernet0/0/3#wlan#interface NULL0#interface LoopBack0ip address 5.5.0.5 255.255.255.0 #ip address 5.5.1.5 255.255.255.0#interface LoopBack2ip address 5.5.2.5 255.255.255.0#ospf 100 router-id 5.5.5.5area 0.0.0.1abr-summary 5.5.0.0 255.255.252.0network 45.1.1.0 0.0.0.255network 1.1.1.0 0.0.0.255network 5.5.0.0 0.0.0.255network 5.5.1.0 0.0.0.255network 5.5.2.0 0.0.0.255#user-interface con 0user-interface vty 0 4user-interface vty 16 20#return路由重分布这里只列举了一种，其他的都大概相似，不一一列举了左边RIPv2，右边OSPF====================================================================== [R1]dis cu#sysname R1#aaaauthentication-scheme defaultauthorization-scheme defaultaccounting-scheme defaultdomain defaultdomain default_adminlocal-user admin password cipher OOCM4m($F4ajUn1vMEIBNUw# local-user admin service-type http#firewall zone Localpriority 16#interface Ethernet0/0/0ip address 12.1.1.1 255.255.255.0#interface Ethernet0/0/1#interface Serial0/0/0link-protocol ppp#interface Serial0/0/1link-protocol ppp#interface Serial0/0/2link-protocol ppp#interface Serial0/0/3link-protocol ppp#interface GigabitEthernet0/0/0#interface GigabitEthernet0/0/1#interface GigabitEthernet0/0/2#interface GigabitEthernet0/0/3#wlan#interface NULL0#interface LoopBack0ip address 1.1.1.1 255.255.255.0#rip 1version 2network 1.0.0.0network 12.0.0.0#user-interface con 0user-interface vty 0 4user-interface vty 16 20#Return========================================================================= [R2] dis cu#。

合集下载

华为配置实验报告

华为配置实验报告

一、实验目的本次实验旨在通过华为网络设备，掌握网络配置的基本技能，熟悉华为设备的配置界面和命令，并能够独立完成以下任务：1. 配置IP地址2. 宣告OSPF3. 引入默认路由4. 路由汇总5. 配置完全Stub区域6. 修改接口Cost实现合理分流，确保来回路径一致7. 修改网络类型，加快收敛8. 配置出口NAT，实现外网连通性9. 增强安全性二、实验环境1. 华为交换机：S5700-28P2. 华为路由器：AR22003. 实验软件：华为eNSP（企业网络仿真器）三、实验步骤1. 配置IP地址- 在交换机上配置VLAN，并为其分配Access接口。

- 为路由器接口配置IP地址。

2. 宣告OSPF- 在路由器上启用OSPF协议。

- 配置OSPF进程ID。

- 宣告OSPF网络。

3. 引入默认路由- 在路由器上配置默认路由，指向下一跳路由器。

4. 路由汇总- 配置路由汇总，减少路由表项。

5. 配置完全Stub区域- 在OSPF区域中配置完全Stub区域，禁止区域内的路由器学习其他区域的路由信息。

6. 修改接口Cost实现合理分流- 根据网络流量需求，修改接口Cost值，实现合理分流。

7. 修改网络类型，加快收敛- 根据网络需求，修改OSPF网络类型，加快收敛速度。

8. 配置出口NAT，实现外网连通性- 配置NAT地址转换，实现内网设备访问外网。

9. 增强安全性- 配置访问控制列表（ACL），限制对网络设备的访问。

- 配置IPsec VPN，保障数据传输安全。

四、实验结果与分析1. 成功配置了IP地址、OSPF、默认路由、路由汇总、完全Stub区域等。

2. 修改接口Cost值，实现了合理分流。

3. 修改网络类型，加快了收敛速度。

4. 配置出口NAT，实现了外网连通性。

5. 增强了网络设备的安全性。

五、实验总结通过本次实验，我们掌握了以下技能：1. 华为设备的配置界面和命令。

2. 网络配置的基本技能。

3. OSPF多区域配置的规划和实施。

实验4-1 直连路由配置【基于华为ensp】

实验4-1 直连路由配置【基于华为ensp】

实验4-1 直连路由配置一、实验背景二、实验目的（1）掌握路由器接口配置过程（2）掌握直连路由项自动生成过程（3）掌握路由器逐跳转发过程（4）掌握IPoE工作原理三、实验设备ensp软件，路由器AR1220，交换机S5700两台，PC四台。

四、实验步骤1、新建拓扑图2、PC配置IP地址、子网掩码PC1 IP地址：192.168.1.1 子网掩码：255.255.255.0 网关：192.168.1.254 PC2 IP地址：192.168.1.2 子网掩码：255.255.255.0 网关：192.168.1.254 PC3 IP地址：192.168.2.1 子网掩码：255.255.255.0 网关：192.168.2.254 PC4 IP地址：192.168.2.2 子网掩码：255.255.255.0 网关：192.168.2.2543、路由器AR1配置<Huawei>system-view[Huawei]undo info-center enable[Huawei]sysname R1[R1]interface GigabitEthernet 0/0/0[R1-GigabitEthernet0/0/0]ip address 192.168.1.254 24[R1-GigabitEthernet0/0/0]quit[R1]interface GigabitEthernet 0/0/1[R1-GigabitEthernet0/0/1]ip address 192.168.2.254 24[R1-GigabitEthernet0/0/1]quit4、通过ping检测网络连通性通过PC1去ping检测与PC3、PC2、PC4的网络连通情况注意：如果以上ping结果显示PC1与PC2、PC3、PC4可以通信，，则说明已经达到了实验结果要求。

5、保存实验配置R1配置：<R1>saveThe current configuration will be written to the device.Are you sure to continue?[Y/N]y这个时候，输入y，确认保存配置最后，保存实验设计文件五、实验总结。

eNSP实验操作

eNSP实验操作

eNSP实验操作⽬录基本操作 (2)路由器 (2)动态路由 (2)RIP (2)OSPF (3)VLAN (3)链路聚合 (3)Vlan间路由 (3)DHCP (4)STP (4)ACL (4)基本ACL (4)⾼级ACL (4)调⽤ACL (4)NAT (4)静态NA T (4)END (5)eNSP实验操作基本操作修改时间clock datetime 16:29:30 2016 01-20保存saveThe current configuration will be written to the device. Are you sure to continue?[Y/N]y登陆为管理员账户sys 或system viewEnter system view, return user view with Ctrl+Z. [Huawei]重启reboot修改名称[Huawei]sysname R1[R1]配置console(管理)密码[Huawei]user-interface console 0[Huawei-ui-console0]authentication-mode password [Huawei-ui-console0]set authentication password cipher 123456 Ping[Huawei]ping –a 192.168.1.1 12.1.1.1路由器修改⽹关[Huawei]interface GigabitEthernet 0/0/0ip address 192.168.1.1 255.255.255.0[Huawei]interface GigabitEthernet 0/0/1或[Huawei-GigabitEthernet0/0/0]int g 0/0/1查看路由器信息[Huawei]display this若查看全部信息则[Huawei]display current-configuration查看端⼝信息[Huawei]display ip interface brief开关端⼝[Huawei]shutdown[Huawei]undo shutdown反向操作undo路由器Telnet远程控制telnet 192.168.1.2 设置Telnet(vty)接⼝密码[Huawei]user-interface vty 0 4[Huawei-ui-vty0-4]set authentication passwprd ?Cipher 密⽂显⽰Simple 明⽂显⽰提升⽤户权限[Huawei-ui-vty0-4]user privilege level 3抓包右键设配->数据抓包查看路由表[Huawei]display ip routing-table增加路由表[Huawei]ip route-static ⽬的⽹络⼦⽹掩码出接⼝/下⼀跳[Huawei]ip route-static 192.168.2.0 24 12.1.1.2查看ARP表项[Huawei]arp -a提⾼路由优先级[Huawei]ip route-static 192.168.2.0 24 12.1.1.2 preference 50动态路由RIP配置RIP（更新⾄v2）[Huawei]rip[Huawei]version 2[Huawei]network 192.168.1.0[Huawei]network 12.0.0.0RIP(v2)认证[Huawei]interface GigabitEthernet 0/0/0[Huawei]rip authentication-mode md5/simple 123456 md5 密⽂simple 明⽂更改RIP跳数[Huawei]interface GigabitEthernet 0/0/0[Huawei]rip metricout 5抑制RIP[Huawei]rip[Huawei]silent interfaceOSPF配置OSPF[Huawei]ospf[Huawei]area 0[Huawei]network 192.168.1.0 0.0.0.255[Huawei]area 1[Huawei]network 12.1.1.0 0.0.0.255重置OSPF进程reset ospf process查看OSPF邻居[Huawei]display ospf peer brief修改routeID[Huawei]ospf router-id 1.1.1.1OSPF认证接⼝[Huawei]interface GigabitEthernet 0/0/0[Huawei]ospf authentication-mode ?hmac-md5keychain 密⽂认证md5null 空认证simple 明⽂认证[Huawei]ospf authentication-mode md5 123456修改DR优先级[Huawei]interface GigabitEthernet 0/0/0[Huawei]ospf dr-priority 0VLAN查看vlan[Huawei]display vlan查看关⼝vlan[Huawei]display port vlan创建vlan[Huawei]vlan 10[Huawei]vlan batch 30 40 50[Huawei]vlan batch 30 to 40配置设置PC-S链路类型[Huawei]interface Eth0/0/1[Huawei-Ethernet0/0/1]port link-type access设置PC-S所属vlan[Huawei]interface Eth0/0/1[Huawei-Ethernet0/0/1]port default vlan 10 配置设置S-S链路类型[Huawei]interface Eth0/0/1[Huawei-Ethernet0/0/1]port link-type trunk设置S-S允许通过的vlan[Huawei]interface Eth0/0/1[Huawei-Ethernet0/0/1]port trunk allow-pass vlan 9 10修改端⼝PVID[Huawei]interface Eth0/0/1[Huawei-Ethernet0/0/1]port trunk pvid vlan 10查看PVID[Huawei-Ethernet0/0/1]interface Ethernet0/0/1配置设置hybrid链路类型[Huawei]interface Eth0/0/1[Huawei-Ethernet0/0/1]port link-type hybrid⼿⼯定义hybrid允许通过vlan、动作[Huawei]interface Eth0/0/1[Huawei-Ethernet0/0/1]port hybrid tagged vlan 10 20 [Huawei-Ethernet0/0/1]port hybrid untagged vlan 9 10链路聚合创建虚拟接⼝[Huawei]interface Eth-Trunk 12[Huawei- Eth-Trunk12]interface G0/0/1[Huawei-GE0/0/1]Eth-trunk 12[Huawei-GE0/0/1]interface G0/0/2[Huawei-GE0/0/1]Eth-trunk 12查看链路聚合信息[Huawei]display interface eth-trunk 1Vlan间路由三级交换机配置对交换机[Huawei]vlan batch 10 20[Huawei]interface GE0/0/1[Huawei-GE0/0/1]port link-type trunk[Huawei-GE0/0/1]port trunk allow-pass vlan 10 20对路由器[Huawei]vlan 30[Huawei-vlan30] interface GigabitEthernet 0/0/1[Huawei-GigabitEthernet0/0/1]port link-type access[Huawei-GigabitEthernet0/0/1]port default vlan 30[Huawei]interface Vlanif 30[Huawei-Vlanif30]ip address 192.168.3.1 24三级交换机⽹关[Huawei]int g 0/0/1[Huawei-GE0/0/1]port link-type trunk[Huawei-GE0/0/1]port trunk allow-pass vlan 10 20 [Huawei] vlan batch 10 20 [Huawei]interface Vlanif 10[Huawei-Vlanif10]ip address 192.168.1.124[Huawei]interface Vlanif 20[Huawei-Vlanif20]ip address 192.168.2.1 24路由器单臂路由设置⼦接⼝[Huawei]interface g0/0/1. ?<1-4096>[Huawei]interface g0/0/1.1[Huawei-G0/0/1.1]dot1q termination vid 10[Huawei-G0/0/1.1]arp broadcast enable[Huawei-G0/0/1.1]ip address 192.168.1.1 24DHCP基于接⼝地址池开启DHCP功能[Huawei]dhcp enable关联接⼝和接⼝地址池[Huawei]interface GigabitEthernet0/0/0[Huawei-GEthernet0/0/0]dhcp select interface设置DNS[Huawei-GEthernet0/0/0]dhcp server dns-list 8.8.8.8设置租期时间[Huawei-GEthernet0/0/0]dhcp server lease day ？Hour minute基于全局地址池[Huawei]开启功能同上[Huawei]ip pool Huawei设置掩码[Huawei-ip-pool-Huawei]network 1.1.1.0 mask 24 设置⽹关[Huawei-ip-pool-Huawei]gateway-list 1.1.1.1设置DNS[Huawei-GEthernet0/0/0]dhcp server dns-list 8.8.8.8设置租期时间[Huawei-ip-pool-Huawei]lease day 10调⽤地址池[Huawei]interface GigabitEthernet0/0/1[Huawei-GigabitEthernet0/0/1]dhcp select global关联接⼝和接⼝地址池[Huawei]interface GigabitEthernet0/0/0[Huawei-GEthernet0/0/0]dhcp select interface STP开启STP[Huawei]stp mode stp改优先级[Huawei]stp priority 4096<0-65536> step 4096查看stp端⼝[Huawei]display stp brief阻塞ALTE Discarding 丢弃正常ROOT ForwardingACL基本ACL[Huawei]acl 2000[Huawei-acl-basic-2000]rule ？<0-4294967294> Step 5deny 拒绝permit 允许[Huawei-acl-basic-2000]rule deny source 192.168.2.00.0.0.255⾼级ACL[Huawei]acl 3000[Huawei-acl-basic-3000]rule denyIp tcp udp 。

华为模拟器eNSP使用指南——VRP的基本操作

华为模拟器eNSP使用指南——VRP的基本操作

华为模拟器eNSP使用指南——VRP的基本操作上文讲述了华为模拟器eNSP的基本设置，本文分享一些华为网络设备操作系统VRP的一些基本操作。

VRP是华为数通产品的通用网络操作系统平台，有一致的网络界面、用户界面和管理界面。

在VRP 操作系统中，可以通过命令对设备发送各种命令实现设备的配置和日常维护操作。

1 VRP简介用户登录华为的交换机或者路由器后显示命令行提示符，即进入命令行接口CLI（Command Line Interface）。

命令行接口是用户与路由器进行交互的常用工具。

2 实验拓扑本文讲述VRP的基本操作，因此实验拓扑比较简单，直接使用一个路由器即可，网络拓扑如下图所示3 查看路由器的基本信息启动设备，双击进入命令行界面，输入display version可以显示系统软件版本和硬件的基本信息，如下图所示，包含了VRP的操作系统版本信息、设备型号等4 命令行的帮助4.1 完全帮助：输入一个命令，后接空格和“？”相关命令interface ?操作界面如下图所示，获取interface视图下所有命令及简单的描述信息4.2 部分帮助：输入一个字符，后紧接着“？”相关命令：rou?如下图所示显示了以rou开头的所有命令信息5 修改路由器时钟为了保证网络中的所有设备有准确的时钟信号，用户可以设置系统时钟。

更加常用的方法是使用ntp服务器实现全网网络时钟的同步，这个后续文章讲解。

相关命令clock dataetime 12:00:00: 2018-11-11如下图所示，要擅于使用帮助命令6 查看配置信息相关命令display current-configuration如下图所示，可以使用简写dis cu，如下图所示可以查看接口信息相关命令dis int g 0/0/0如下图所示，可以查看接口的状态信息，物理状态、接口地址和其他的一些统计信息。

下文预告，华为模拟器eNSP常用的IP相关命令如有问题请在评论区留言讨论，若需更多帮助，请私信关注。