1.根据题目要求配置IP地址,修改设备名
2.L2W的vlan10绑定端口G1/0/1,vlan20绑定端口G1/0/1
3.交换机相连接口只放行vlan10 20,其余均不放行。
4.交换机与pc相连链路配置access模式。
5.Ce1 ce2 L2w之间配置stp,ce1 为vlan10的主根,ce2为vlan20的主根,域名为H3C
并在合适端口配置根保护,边缘端口,bpdu保护
6.CE1为vlan10主,CE2为vlan20。主Vrrp主根优先级为150,备用优先级为110,配置上行链路监视,当端口故障降低优先级50
7.Ce1 ce2 与pe1连接的端口使用三层连接,
8.Pe1 pe2 pe3配置ospf 进程号1 lo0 地址为router-id 区域0,发布网段要求精确匹配
9.Ce1 ce2 配置ospf 进程号1 router-id为lo 0 地址 区域0 不允许协议报文发布到业务网段
10.Pe1 pe2 pe3 之间配置bgp 100,通过lo 0 建立ibgp, ce3 ce4配置bgp为300 通过直连端口建立ebgp
11.Ce5与pe2之间配置静态路由, pe3 与防火墙之间配置静态路由,internet与防火墙之间配置静态路由,防火墙配置区域 pe3为信任区域, internet为非信任区域
12.在防火墙配置nat,使server1可以访问internet
13.Pe1 pe2 pe3 配置mpls mpls-id为lo 0
14.Pc1 pc2 为server1 vpn1 ,pc3 server2 为vpn2
15. Ce1 ce2配置ipv6地址,配置ospfv3建立邻居,router-id是环回口地址
L2W: sysname L2W # vlan 10 # vlan 20 # stp region-configuration region-name H3C instance 1 vlan 10 instance 2 vlan 20 active region-configuration # stp bpdu-protection stp global enable # interface NULL0 # interface GigabitEthernet1/0/1 port link-mode bridge port access vlan 10 combo enable fiber stp edged-port # interface GigabitEthernet1/0/5 port link-mode bridge port access vlan 20 combo enable fiber stp edged-port # interface GigabitEthernet1/0/23 port link-mode bridge port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 10 20 combo enable fiber stp root-protection # interface GigabitEthernet1/0/24 port link-mode bridge port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 10 20 combo enable fiber CE1: sysname CE1 # track 1 interface GigabitEthernet1/0/1 # ospf 1 router-id 9.9.9.101 silent-interface Vlan-interface10 silent-interface Vlan-interface20 area 0.0.0.0 network 10.0.0.0 0.0.0.3 network 172.0.10.0 0.0.0.255 network 172.0.20.0 0.0.0.255 # ospfv3 1 router-id 9.9.9.101 area 0.0.0.0 # lldp global enable # system-working-mode standard xbar load-single password-recovery enable lpu-type f-series # vlan 1 # vlan 10 # vlan 20 # stp region-configuration region-name H3C instance 1 vlan 10 instance 2 vlan 20 active region-configuration # stp instance 1 root primary stp instance 2 root secondary stp global enable # interface NULL0 # interface LoopBack0 ip address 9.9.9.101 255.255.255.255 # interface Vlan-interface10 ip address 172.0.10.252 255.255.255.0 vrrp vrid 10 virtual-ip 172.0.10.254 vrrp vrid 10 priority 150 vrrp vrid 10 track 1 priority reduced 50 # interface Vlan-interface20 ip address 172.0.20.252 255.255.255.0 vrrp vrid 20 virtual-ip 172.0.20.254 vrrp vrid 20 priority 110 CE2: sysname CE2 # irf mac-address persistent timer irf auto-update enable undo irf link-delay irf member 1 priority 1 # track 1 interface GigabitEthernet1/0/1 # ospf 1 router-id 9.9.9.102 silent-interface Vlan-interface10 silent-interface Vlan-interface20 area 0.0.0.0 network 10.0.0.4 0.0.0.3 network 172.0.10.0 0.0.0.255 network 172.0.20.0 0.0.0.255 # ospfv3 1 router-id 9.9.9.102 area 0.0.0.0 area 0.0.0.9 # lldp global enable # system-working-mode standard xbar load-single password-recovery enable lpu-type f-series # vlan 1 # vlan 10 # vlan 20 # stp region-configuration region-name H3C instance 1 vlan 10 instance 2 vlan 20 active region-configuration # stp instance 1 root secondary stp instance 2 root primary stp global enable # interface NULL0 # interface LoopBack0 ip address 9.9.9.102 255.255.255.255 # interface Vlan-interface10 ip address 172.0.10.253 255.255.255.0 vrrp vrid 10 virtual-ip 172.0.10.254 vrrp vrid 10 priority 110 # interface Vlan-interface20 ip address 172.0.20.253 255.255.255.0 vrrp vrid 20 virtual-ip 172.0.20.254 vrrp vrid 20 priority 150 vrrp vrid 20 track 1 priority reduced 50 # interface FortyGigE1/0/53 port link-mode bridge # interface FortyGigE1/0/54 port link-mode bridge # interface GigabitEthernet1/0/1 port link-mode route combo enable fiber ip address 10.0.0.6 255.255.255.252 # interface GigabitEthernet1/0/6 port link-mode route combo enable fiber ospfv3 1 area 0.0.0.0 ipv6 address 2000::2/64 # interface GigabitEthernet1/0/2 port link-mode bridge port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 10 20 combo enable fiber # interface GigabitEthernet1/0/3 port link-mode bridge port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 10 20 combo enable fiber PE2: sysname PE2 # ip vpn-instance VPN2 route-distinguisher 2:2 vpn-target 2:2 import-extcommunity vpn-target 2:2 export-extcommunity # ospf 1 router-id 9.9.9.2 area 0.0.0.0 network 9.9.9.2 0.0.0.0 network 100.0.0.0 0.0.0.3 network 100.0.0.4 0.0.0.3 # mpls lsr-id 9.9.9.2 # system-working-mode standard xbar load-single password-recovery enable lpu-type f-series # vlan 1 # mpls ldp # interface LoopBack0 ip address 9.9.9.2 255.255.255.255 # interface GigabitEthernet0/0 port link-mode route combo enable copper ip address 100.0.0.2 255.255.255.252 mpls enable mpls ldp enable # interface GigabitEthernet0/1 port link-mode route combo enable copper ip address 100.0.0.5 255.255.255.252 mpls enable mpls ldp enable # interface GigabitEthernet0/2 port link-mode route combo enable copper ip binding vpn-instance VPN2 ip address 10.0.0.9 255.255.255.252 # bgp 100 router-id 9.9.9.2 peer 9.9.9.1 as-number 100 peer 9.9.9.1 connect-interface LoopBack0 peer 9.9.9.3 as-number 100 peer 9.9.9.3 connect-interface LoopBack0 # address-family vpnv4 peer 9.9.9.1 enable peer 9.9.9.3 enable # ip vpn-instance VPN2 # address-family ipv4 unicast import-route static # scheduler logfile size 16 # line class aux user-role network-operator # line class console user-role network-admin # line class tty user-role network-operator # line class vty user-role network-operator # line aux 0 user-role network-operator # line con 0 user-role network-admin # line vty 0 63 user-role network-operator # ip route-static vpn-instance VPN2 192.0.10.0 24 10.0.0.10 PE3: sysname H3C # ip vpn-instance VPN1 route-distinguisher 1:1 vpn-target 1:1 import-extcommunity vpn-target 1:1 export-extcommunity # ip vpn-instance VPN2 route-distinguisher 2:2 vpn-target 2:2 import-extcommunity vpn-target 2:2 export-extcommunity # ospf 1 router-id 9.9.9.3 area 0.0.0.0 network 9.9.9.3 0.0.0.0 network 100.0.0.4 0.0.0.3 # mpls lsr-id 9.9.9.3 # sysid PE3 # system-working-mode standard xbar load-single password-recovery enable lpu-type f-series # vlan 1 # mpls ldp # interface Serial1/0 # interface Serial2/0 # interface Serial3/0 # interface Serial4/0 # interface NULL0 # interface LoopBack0 ip address 9.9.9.3 255.255.255.255 # interface GigabitEthernet0/0 port link-mode route combo enable copper ip address 100.0.0.6 255.255.255.252 mpls enable mpls ldp enable # interface GigabitEthernet0/1 port link-mode route combo enable copper ip binding vpn-instance VPN1 ip address 10.0.0.13 255.255.255.252 # interface GigabitEthernet0/2 port link-mode route combo enable copper ip binding vpn-instance VPN2 ip address 10.0.0.17 255.255.255.252 # interface GigabitEthernet5/0 port link-mode route combo enable copper # interface GigabitEthernet5/1 port link-mode route combo enable copper # interface GigabitEthernet6/0 port link-mode route combo enable copper # interface GigabitEthernet6/1 port link-mode route combo enable copper # bgp 100 router-id 9.9.9.3 peer 9.9.9.1 as-number 100 peer 9.9.9.1 connect-interface LoopBack0 peer 9.9.9.2 as-number 100 peer 9.9.9.2 connect-interface LoopBack0 # address-family vpnv4 peer 9.9.9.1 enable peer 9.9.9.2 enable # ip vpn-instance VPN1 peer 10.0.0.14 as-number 300 # address-family ipv4 unicast peer 10.0.0.14 enable # ip vpn-instance VPN2 peer 10.0.0.18 as-number 300 # address-family ipv4 unicast peer 10.0.0.18 enable CE3: sysname CE3 # irf mac-address persistent timer irf auto-update enable undo irf link-delay irf member 1 priority 1 # lldp global enable # system-working-mode standard xbar load-single password-recovery enable lpu-type f-series # vlan 1 # stp global enable # interface NULL0 # interface LoopBack0 ip address 9.9.9.103 255.255.255.255 # interface FortyGigE1/0/53 port link-mode bridge # interface FortyGigE1/0/54 port link-mode bridge # interface GigabitEthernet1/0/1 port link-mode route combo enable fiber ip address 10.0.0.14 255.255.255.252 # interface GigabitEthernet1/0/2 port link-mode route combo enable fiber ip address 172.0.0.254 255.255.255.0 # bgp 300 router-id 9.9.9.103 peer 10.0.0.13 as-number 100 # address-family ipv4 unicast network 172.0.0.0 255.255.255.0 peer 10.0.0.13 enable # CE4: sysname CE4 # irf mac-address persistent timer irf auto-update enable undo irf link-delay irf member 1 priority 1 # lldp global enable # system-working-mode standard xbar load-single password-recovery enable lpu-type f-series # vlan 1 # stp global enable # interface NULL0 # interface LoopBack0 ip address 9.9.9.104 255.255.255.255 # interface FortyGigE1/0/53 port link-mode bridge # interface FortyGigE1/0/54 port link-mode bridge # interface GigabitEthernet1/0/1 port link-mode route combo enable fiber ip address 10.0.0.18 255.255.255.252 # interface GigabitEthernet1/0/2 port link-mode route combo enable fiber ip address 192.0.0.254 255.255.255.0 # bgp 300 router-id 9.9.9.104 peer 10.0.0.17 as-number 100 # address-family ipv4 unicast network 192.0.0.0 255.255.255.0 peer 10.0.0.17 enable CE5: sysname CE5 # system-working-mode standard xbar load-single password-recovery enable lpu-type f-series # vlan 1 # interface LoopBack0 ip address 9.9.9.105 255.255.255.255 # interface GigabitEthernet0/0 port link-mode route combo enable copper ip address 10.0.0.10 255.255.255.252 # interface GigabitEthernet0/1 port link-mode route combo enable copper ip address 192.0.10.254 255.255.255.0 # ip route-static 0.0.0.0 0 10.0.0.9 #
Comments NOTHING