[华为ensp]双核心的园区网
(给部分只会emm......借鉴的朋友提个醒，在group-member e0/0/2 to e0/0/20是所选，所以到了p l t那会给2-20端口都配置上trunk，别紧张，不是你问题)完成上述配置后，PC1可以ping通HTTP2服务器，Client1可以访问HTTP2服务器的HTTP站点，如果不能就要检查上述是否正确。本次实验主要目的是采用双核心的冗余网络，采用MSTP和VRRP技术，
·
本次实验主要目的是采用双核心的冗余网络，采用MSTP和VRRP技术，
保障网络的稳定性和高可用性，并实现流量负载均衡。
本次实验使用华为ensp进行实验
以下为本次拓扑图
S1配置为如下，S2、S3基本相似
[S1]vlan 10
[S1-vlan10]q
[S1]po 1
[S1-port-group-1]gr
[S1-port-group-1]group-member e0/0/2 to e0/0/3
[S1-port-group-1]port li
[S1-port-group-1]port link-t
[S1-port-group-1]port link-type a
[S1-port-group-1]port link-type access
[S1-Ethernet0/0/2]port link-type access
[S1-Ethernet0/0/3]port link-type access
[S1-port-group-1]po de vl 10
[S1-Ethernet0/0/2]po de vl 10
[S1-Ethernet0/0/3]po de vl 10
[S1-port-group-1]int g0/0/1
[S1-port-group-1]q
[S1]int g0/0/1
[S1-GigabitEthernet0/0/1]po li tr
[S1-GigabitEthernet0/0/1]po tr al vl 1 10
[S1-GigabitEthernet0/0/1]int g0/0/2
[S1-GigabitEthernet0/0/2]po li tr
[S1-GigabitEthernet0/0/2]po tr al vl 1 10
[S1-GigabitEthernet0/0/2]S2配置
[S2]vl ba 20
[S2]po 1
[S2-port-group-1]gr e0/0/2 to e0/0/3
[S2-port-group-1]p l a
[S2-Ethernet0/0/2]p l a
[S2-Ethernet0/0/3]p l a
[S2-port-group-1]p d v 20
[S2-Ethernet0/0/2]p d v 20
[S2-Ethernet0/0/3]p d v 20
[S2-port-group-1]q
[S2]int g0/0/1
[S2-GigabitEthernet0/0/1]p l t
[S2-GigabitEthernet0/0/1]p t a v 1 20
[S2-GigabitEthernet0/0/1]int g0/0/2
[S2-GigabitEthernet0/0/2]p l t
[S2-GigabitEthernet0/0/2]p t a v 1 20
[S2-GigabitEthernet0/0/2]S3配置
[Huawei]un in e
[Huawei]sy S3
[S3]vl ba 30
[S3]po 1
[S3-port-group-1]gr e0/0/2 to e0/0/3
[S3-port-group-1]p l a
[S3-Ethernet0/0/2]p l a
[S3-Ethernet0/0/3]p l a
[S3-port-group-1]p d v 30
[S3-Ethernet0/0/2]p d v 30
[S3-Ethernet0/0/3]p d v 30
[S3-port-group-1]q
[S3]int g0/0/1
[S3-GigabitEthernet0/0/1]p l t
[S3-GigabitEthernet0/0/1]p t a v 1 30
[S3-GigabitEthernet0/0/1]int g0/0/2
[S3-GigabitEthernet0/0/2]p l t
[S3-GigabitEthernet0/0/2]p t a v 1 30
[S3-GigabitEthernet0/0/2]S4配置
(给部分只会emm......借鉴的朋友提个醒，在group-member e0/0/2 to e0/0/20是所选，所以到了p l t那会给2-20端口都配置上trunk，别紧张，不是你问题)
[Huawei]un in e
Info: Information center is disabled.
[Huawei]sy S4
[S4]vl ba 100
[S4]po 1
[S4-port-group-1]gr e0/0/2 to e0/0/20
[S4-port-group-1]p d v 100
[S4-port-group-1]q
[S4]int g0/0/1
[S4-GigabitEthernet0/0/1]p l t
[S4-GigabitEthernet0/0/1]p t a v 1 100
[S4-GigabitEthernet0/0/1]int g0/0/2
[S4-GigabitEthernet0/0/2]p l t
[S4-GigabitEthernet0/0/2]p t a v 1 100
[S4-GigabitEthernet0/0/2]核心层交换机SC1配置
[Huawei]un in e
Info: Information center is disabled.
[Huawei]sy SC1
[SC1]vl ba 10 20 30 100 201
[SC1]int g0/0/2
[SC1-GigabitEthernet0/0/2]p l t
[SC1-GigabitEthernet0/0/2]p t a v 1 10
[SC1-GigabitEthernet0/0/2]int g0/0/3
[SC1-GigabitEthernet0/0/3]p l t
[SC1-GigabitEthernet0/0/3]p t a v 1 20
[SC1-GigabitEthernet0/0/3]int g0/0/4
[SC1-GigabitEthernet0/0/4]p l t
[SC1-GigabitEthernet0/0/4]p t a v 1 30
[SC1-GigabitEthernet0/0/4]int g0/0/21
[SC1-GigabitEthernet0/0/21]p l t
[SC1-GigabitEthernet0/0/21]p t a v 1 100
[SC1-GigabitEthernet0/0/21]int g0/0/24
[SC1-GigabitEthernet0/0/24]p l a
[SC1-GigabitEthernet0/0/24]p d v 201
[SC1-GigabitEthernet0/0/24]q
[SC1]int v10
[SC1-Vlanif10]ip add 172.31.10.252 24
[SC1-Vlanif10]int v20
[SC1-Vlanif20]ip add 172.31.20.252 24
[SC1-Vlanif20]int v30
[SC1-Vlanif30]ip add 172.31.30.252 24
[SC1-Vlanif30]int v100
[SC1-Vlanif100]ip add 172.31.100.252 24
[SC1-Vlanif100]int v201
[SC1-Vlanif201]ip add 172.31.201.254 24
[SC1]int Eth-Trunk 1
[SC1-Eth-Trunk1]p l t
[SC1-Eth-Trunk1]p t a v 1 10 20 30 100
[SC1-Eth-Trunk1]q
[SC1]int g0/0/22
[SC1-GigabitEthernet0/0/22]eth-trunk 1
[SC1-GigabitEthernet0/0/22]int g0/0/23
[SC1-GigabitEthernet0/0/23]eth-trunk 1
[SC1-GigabitEthernet0/0/23]q
SC2
[Huawei]un in e
[Huawei]sy SC2
[SC2]vl ba 10 20 30 100 202
[SC2]int g0/0/2
[SC2-GigabitEthernet0/0/2]p l t
[SC2-GigabitEthernet0/0/2]p t a v 1 10
[SC2-GigabitEthernet0/0/2]int g0/0/3
[SC2-GigabitEthernet0/0/3]p l t
[SC2-GigabitEthernet0/0/3]p t a v 1 20
[SC2-GigabitEthernet0/0/3]int g0/0/4
[SC2-GigabitEthernet0/0/4]p l t
[SC2-GigabitEthernet0/0/4]p t a v 1 30
[SC2-GigabitEthernet0/0/4]int g0/0/21
[SC2-GigabitEthernet0/0/21]p l t
[SC2-GigabitEthernet0/0/21]p t a v 1 100
[SC2-GigabitEthernet0/0/21]int g0/0/24
[SC2-GigabitEthernet0/0/24]p l a
[SC2-GigabitEthernet0/0/24]p d v 202
[SC2-GigabitEthernet0/0/24]int v10
[SC2-Vlanif10]ip add 172.31.10.253 24
[SC2-Vlanif10]int v20
[SC2-Vlanif20]ip add 172.31.20.253 24
[SC2-Vlanif20]int v30
[SC2-Vlanif30]ip add 172.31.30.253 24
[SC2-Vlanif30]int v100
[SC2-Vlanif100]ip add 172.31.100.253 24
[SC2-Vlanif100]int v202
[SC2-Vlanif202]ip add 172.31.202.254 24
[SC2-Vlanif202]q
[SC2]int e1
[SC2-Eth-Trunk1]p l t
[SC2-Eth-Trunk1]p t a v 1 10 20 30 100
[SC2-Eth-Trunk1]int g0/0/22
[SC2-GigabitEthernet0/0/22]e 1
[SC2-GigabitEthernet0/0/22]int g0/0/23
[SC2-GigabitEthernet0/0/23]e 1
[SC2-GigabitEthernet0/0/23]q
[SC2]q路由器Out配置
<Huawei>sy
Enter system view, return user view with Ctrl+Z.
[Huawei]un in e
Info: Information center is disabled.
[Huawei]sy Out
[Out]int s1/0/0
[Out-Serial1/0/0]ip add 100.100.100.1 30
[Out-Serial1/0/0]int g0/0/1
[Out-GigabitEthernet0/0/1]ip add 172.31.201.1 24
[Out-GigabitEthernet0/0/1]int g0/0/2
[Out-GigabitEthernet0/0/2]int g0/0/0
[Out-GigabitEthernet0/0/0]ip add 172.31.202.1 24
[Out-GigabitEthernet0/0/0]q路由器ISP的基本配置
<Huawei>sy
Enter system view, return user view with Ctrl+Z.
[Huawei]un in e
Info: Information center is disabled.
[Huawei]sy ISP
[ISP]int s1/0/0
[ISP-Serial1/0/0]ip add 100.100.100.2 30
[ISP-Serial1/0/0]int g0/0/0
[ISP-GigabitEthernet0/0/0]ip add 100.100.110.2 30
[ISP-GigabitEthernet0/0/0]int g0/0/1
[ISP-GigabitEthernet0/0/1]ip add 100.100.120.2 30
[ISP-GigabitEthernet0/0/1]q
[ISP]qPC1~PC4设置为DHCP
Client1~2设置如下
Server配置如下
S1交换机上配置MSTP
[S1]stp re
[S1]stp region-configuration
[S1-mst-region]re
[S1-mst-region]region-name test
[S1-mst-region]region-name
[S1-mst-region]revision-level 1
[S1-mst-region]instance 1 vlan 1 10 20
[S1-mst-region]instance 2 vlan 30 100
[S1-mst-region]active region-configuration
[S1-mst-region]qS2交换机配置MSTP
[S2]stp re
[S2]stp region-configuration
[S2-mst-region]region-name test
[S2-mst-region]revision-level 1
[S2-mst-region]instance 1 vlan 1 10 20
[S2-mst-region]instance 2 vlan 30 100
[S2-mst-region]active region-configuration
[S2-mst-region]qS3交换机配置MTSP
[S3]stp re
[S3]stp region-configuration
[S3-mst-region]region-name test
[S3-mst-region]revision-level 1
[S3-mst-region]instance 1 vlan 1 10 20
[S3-mst-region]instance 2 vlan 30 100
[S3-mst-region]active region-configuration
[S3-mst-region]qSC1上配置SC1
[SC1]stp instance 1 priority 4096
[SC1]stp instance 2 priority 0
[SC1]stp region-configuration
[SC1-mst-region]region-name test
[SC1-mst-region]revision-level 1
[SC1-mst-region]instance 1 vlan 1 10 20
[SC1-mst-region]instance 2 v
[SC1-mst-region]instance 2 vlan 30 100
[SC1-mst-region]active region-configuration
[SC1-mst-region]q在SC1上配置DHCP
[SC1]dhcp en
[SC1]ip pool vlan10
[SC1-ip-pool-vlan10]net 172.31.10.0 mask 255.255.255.0
[SC1-ip-pool-vlan10]excluded-ip-address 172.31.10.252 172.31.10.253
[SC1-ip-pool-vlan10]gateway-list 172.31.10.254
[SC1-ip-pool-vlan10]dns-list 114.114.114.114
[SC1-ip-pool-vlan10]q
[SC1]ip pool vlan20
[SC1-ip-pool-vlan20]net 172.31.20.0 mask 255.255.255.0
[SC1-ip-pool-vlan20]excluded-ip-address 172.31.20.252 172.31.20.253
[SC1-ip-pool-vlan20]gateway-list 172.31.20.254
[SC1-ip-pool-vlan20]gateway-list 114.114.114.114
Error:The network section should be within the subnet of the pool.
[SC1-ip-pool-vlan20]dns-list 114.114.114.114
[SC1-ip-pool-vlan20]q
[SC1]ip pool vlan30
Info:It's successful to create an IP address pool.
[SC1-ip-pool-vlan30]network 172.31.30.0 mask 255.255.255.0
[SC1-ip-pool-vlan30]excluded-ip-address 172.31.30.252 172.31.30.253
[SC1-ip-pool-vlan30]gateway-list 172.31.30.25
[SC1-ip-pool-vlan30]dns-list 114.114.114.114
[SC1-ip-pool-vlan30]q
[SC1]int v10
[SC1-Vlanif10]dhcp select global
[SC1-Vlanif10]int v20
[SC1-Vlanif20]dhcp select global
[SC1-Vlanif20]int v30
[SC1-Vlanif30]dhcp select global
[SC1-Vlanif30]q
[SC1]qSC2也和上一样
SC1交换机上配置VRRP
[SC1]INT V
[SC1]INT Vlanif 10
[SC1-Vlanif10]vrrp vrid 10 virtual-ip 172.31.10.254
[SC1-Vlanif10]vrrp vrid 10 track interface GigabitEthernet 0/0/24 re
[SC1-Vlanif10]vrrp vrid 10 track interface GigabitEthernet 0/0/24 reduced 30
[SC1-Vlanif10]vrrp vrid 10 preempt timer delay 10
[SC1-Vlanif10]int v20
[SC1-Vlanif20]vrrp vrid 20 virtual-ip 172.31.20.254
[SC1-Vlanif20]vrrp vrid 20 priority 120
[SC1-Vlanif20]vrrp vrid 20 track interface g0/0/24 reduced 30
[SC1-Vlanif20]vrrp vrid 20 preempt timer delay 10
[SC1-Vlanif20]int v30
[SC1-Vlanif30]vrrp vrid 30 virtual-ip 172.31.30.254
[SC1-Vlanif30]vrrp vrid 30 priority t
[SC1-Vlanif30]vrrp vrid 30 pre
[SC1-Vlanif30]vrrp vrid 30 preempt t
[SC1-Vlanif30]vrrp vrid 30 preempt timer d
[SC1-Vlanif30]vrrp vrid 30 preempt timer delay 0
[SC1-Vlanif30]q
[SC1]int v100
[SC1-Vlanif100]vrrp vrid 100 virtual-ip 172.31.100.254
[SC1-Vlanif100]vrrp vrid 100 priority 100
[SC1-Vlanif100]vrrp vrid 100 preempt timer delay 0
[SC1-Vlanif100]q
[SC1]qSC2上配置VRRP
[SC2]int v
[SC2]int Vlanif 10
[SC2-Vlanif10]vrrp vr
[SC2-Vlanif10]vrrp vrid 10 v
[SC2-Vlanif10]vrrp vrid 10 virtual-ip 172.31.10.254
[SC2-Vlanif10]vrrp vrid 10 priority 100
[SC2-Vlanif10]vrrp vrid 10 preempt timer d
[SC2-Vlanif10]int v20
[SC2-Vlanif20]vrrp vrid 20 virtual-ip 172.31.20.254
[SC2-Vlanif20]vrrp vrid 20 preempt timer delay 0
[SC2-Vlanif20]int v30
[SC2-Vlanif30]vrrp vrid 30 virtual-ip 172.31.30.254
[SC2-Vlanif30]vrrp vrid 30 priority 120
[SC2-Vlanif30]vrrp vrid 30 track interface g0/0/24 reduced 30
[SC2-Vlanif30]vrrp vrid 30 preempt timer d
[SC2-Vlanif30]vrrp vrid 30 preempt timer delay 0
[SC2-Vlanif30]int v100
[SC2-Vlanif100]vrrp vrid 100 virtual-ip 172.31.100.254
[SC2-Vlanif100]vrrp vrid 100 track interface g0/0/24 reduced 30
[SC2-Vlanif100]vrrp vrid 100 preempt timer delay 10
[SC2-Vlanif100]q在out上面配置OSPF
[Out]ip route-static 0.0.0.0 0 100.100.100.2
[Out]ospf 1
[Out-ospf-1]default-route-advertise
[Out-ospf-1]area 0
[Out-ospf-1-area-0.0.0.0]network 172.31.201.0 0.0.0.255
[Out-ospf-1-area-0.0.0.0]natwork 172.31.202.0 0.0.0.255
[Out-ospf-1-area-0.0.0.0]quit
[Out-ospf-1]quit
[Out]quit
<Out>save
在核心层交换机上配置SC1上配置OSPF协议
[SC1]ospf 1
[SC1-ospf-1]area 0
[SC1-ospf-1-area-0.0.0.0]network 172.31.10.0 0.0.0.255
[SC1-ospf-1-area-0.0.0.0]network 172.31.20.0 0.0.0.255
[SC1-ospf-1-area-0.0.0.0]network 172.31.30.0 0.0.0.255
[SC1-ospf-1-area-0.0.0.0]network 172.31.100.0 0.0.0.255
[SC1-ospf-1-area-0.0.0.0]network 172.31.202.0 0.0.0.255
[SC1-ospf-1-area-0.0.0.0]quit
[SC1-ospf-1]quit
[SC1]quit
<SC1>save
在路由器OUT上配置Easy IP和NAT Server
[Out]acl 2000
[Out-acl-basic-2000]rule 5 permit source 172.31.0.0 0.0.255.255
[Out-acl-basic-2000]quit
[Out]interface Serial 1/0/0
[Out-Serial1/0/0]nat outbound 2000
[Out-Serial1/0/0]quit
[Out]interface Serial 1/0/0
[Out-Serial1/0/0]nat server protocol tcp global current-interface 80 inside 172.
31.100.1 80
Warning:The port 80 is well-known port. If you continue it may cause function fa
ilure.
Are you sure to continue?[Y/N]:y
[Out-Serial1/0/0]quit
[Out]quit
<Out>save完成上述配置后，PC1可以ping通HTTP2服务器，Client1可以访问HTTP2服务器的HTTP站点，如果不能就要检查上述是否正确
有“AI”的1024 = 2048，欢迎大家加入2048 AI社区
更多推荐
3
0- 0
已为社区贡献2条内容
所有评论(0)