1.根据题目要求配置IP地址,修改设备名
2.L2W的vlan10绑定端口G1/0/1,vlan20绑定端口G1/0/1
3.交换机相连接口只放行vlan10 20，其余均不放行。
4.交换机与pc相连链路配置access模式。
5.Ce1 ce2 L2w之间配置stp，ce1 为vlan10的主根，ce2为vlan20的主根，域名为H3C
并在合适端口配置根保护，边缘端口，bpdu保护
6.CE1为vlan10主，CE2为vlan20。主Vrrp主根优先级为150，备用优先级为110，配置上行链路监视，当端口故障降低优先级50
7.Ce1 ce2 与pe1连接的端口使用三层连接，
8.Pe1 pe2 pe3配置ospf 进程号1 lo0 地址为router-id 区域0，发布网段要求精确匹配
9.Ce1 ce2 配置ospf 进程号1 router-id为lo 0 地址 区域0 不允许协议报文发布到业务网段
10.Pe1 pe2 pe3 之间配置bgp 100，通过lo 0 建立ibgp， ce3 ce4配置bgp为300 通过直连端口建立ebgp
11.Ce5与pe2之间配置静态路由， pe3 与防火墙之间配置静态路由，internet与防火墙之间配置静态路由，防火墙配置区域 pe3为信任区域， internet为非信任区域
12.在防火墙配置nat，使server1可以访问internet
13.Pe1 pe2 pe3 配置mpls mpls-id为lo 0
14.Pc1 pc2 为server1 vpn1 ，pc3 server2 为vpn2
15. Ce1 ce2配置ipv6地址，配置ospfv3建立邻居，router-id是环回口地址
L2W：
sysname L2W
#
vlan 10
#
vlan 20
#
stp region-configuration
region-name H3C
instance 1 vlan 10
instance 2 vlan 20
active region-configuration
#
stp bpdu-protection
stp global enable
#
interface NULL0
#
interface GigabitEthernet1/0/1
port link-mode bridge
port access vlan 10
combo enable fiber
stp edged-port
#
interface GigabitEthernet1/0/5
port link-mode bridge
port access vlan 20
combo enable fiber
stp edged-port
#
interface GigabitEthernet1/0/23
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 10 20
combo enable fiber
stp root-protection
#
interface GigabitEthernet1/0/24
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 10 20
combo enable fiber
CE1：
sysname CE1
#
track 1 interface GigabitEthernet1/0/1
#
ospf 1 router-id 9.9.9.101
silent-interface Vlan-interface10
silent-interface Vlan-interface20
area 0.0.0.0
network 10.0.0.0 0.0.0.3
network 172.0.10.0 0.0.0.255
network 172.0.20.0 0.0.0.255
#
ospfv3 1
router-id 9.9.9.101
area 0.0.0.0
#
lldp global enable
#
system-working-mode standard
xbar load-single
password-recovery enable
lpu-type f-series
#
vlan 1
#
vlan 10
#
vlan 20
#
stp region-configuration
region-name H3C
instance 1 vlan 10
instance 2 vlan 20
active region-configuration
#
stp instance 1 root primary
stp instance 2 root secondary
stp global enable
#
interface NULL0
#
interface LoopBack0
ip address 9.9.9.101 255.255.255.255
#
interface Vlan-interface10
ip address 172.0.10.252 255.255.255.0
vrrp vrid 10 virtual-ip 172.0.10.254
vrrp vrid 10 priority 150
vrrp vrid 10 track 1 priority reduced 50
#
interface Vlan-interface20
ip address 172.0.20.252 255.255.255.0
vrrp vrid 20 virtual-ip 172.0.20.254
vrrp vrid 20 priority 110
CE2：
sysname CE2
#
irf mac-address persistent timer
irf auto-update enable
undo irf link-delay
irf member 1 priority 1
#
track 1 interface GigabitEthernet1/0/1
#
ospf 1 router-id 9.9.9.102
silent-interface Vlan-interface10
silent-interface Vlan-interface20
area 0.0.0.0
network 10.0.0.4 0.0.0.3
network 172.0.10.0 0.0.0.255
network 172.0.20.0 0.0.0.255
#
ospfv3 1
router-id 9.9.9.102
area 0.0.0.0
area 0.0.0.9
#
lldp global enable
#
system-working-mode standard
xbar load-single
password-recovery enable
lpu-type f-series
#
vlan 1
#
vlan 10
#
vlan 20
#
stp region-configuration
region-name H3C
instance 1 vlan 10
instance 2 vlan 20
active region-configuration
#
stp instance 1 root secondary
stp instance 2 root primary
stp global enable
#
interface NULL0
#
interface LoopBack0
ip address 9.9.9.102 255.255.255.255
#
interface Vlan-interface10
ip address 172.0.10.253 255.255.255.0
vrrp vrid 10 virtual-ip 172.0.10.254
vrrp vrid 10 priority 110
#
interface Vlan-interface20
ip address 172.0.20.253 255.255.255.0
vrrp vrid 20 virtual-ip 172.0.20.254
vrrp vrid 20 priority 150
vrrp vrid 20 track 1 priority reduced 50
#
interface FortyGigE1/0/53
port link-mode bridge
#
interface FortyGigE1/0/54
port link-mode bridge
#
interface GigabitEthernet1/0/1
port link-mode route
combo enable fiber
ip address 10.0.0.6 255.255.255.252
#
interface GigabitEthernet1/0/6
port link-mode route
combo enable fiber
ospfv3 1 area 0.0.0.0
ipv6 address 2000::2/64
#
interface GigabitEthernet1/0/2
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 10 20
combo enable fiber
#
interface GigabitEthernet1/0/3
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 10 20
combo enable fiber
PE2：
sysname PE2
#
ip vpn-instance VPN2
route-distinguisher 2:2
vpn-target 2:2 import-extcommunity
vpn-target 2:2 export-extcommunity
#
ospf 1 router-id 9.9.9.2
area 0.0.0.0
network 9.9.9.2 0.0.0.0
network 100.0.0.0 0.0.0.3
network 100.0.0.4 0.0.0.3
#
mpls lsr-id 9.9.9.2
#
system-working-mode standard
xbar load-single
password-recovery enable
lpu-type f-series
#
vlan 1
#
mpls ldp
#
interface LoopBack0
ip address 9.9.9.2 255.255.255.255
#
interface GigabitEthernet0/0
port link-mode route
combo enable copper
ip address 100.0.0.2 255.255.255.252
mpls enable
mpls ldp enable
#
interface GigabitEthernet0/1
port link-mode route
combo enable copper
ip address 100.0.0.5 255.255.255.252
mpls enable
mpls ldp enable
#
interface GigabitEthernet0/2
port link-mode route
combo enable copper
ip binding vpn-instance VPN2
ip address 10.0.0.9 255.255.255.252
#
bgp 100
router-id 9.9.9.2
peer 9.9.9.1 as-number 100
peer 9.9.9.1 connect-interface LoopBack0
peer 9.9.9.3 as-number 100
peer 9.9.9.3 connect-interface LoopBack0
#
address-family vpnv4
peer 9.9.9.1 enable
peer 9.9.9.3 enable
#
ip vpn-instance VPN2
#
address-family ipv4 unicast
import-route static
#
scheduler logfile size 16
#
line class aux
user-role network-operator
#
line class console
user-role network-admin
#
line class tty
user-role network-operator
#
line class vty
user-role network-operator
#
line aux 0
user-role network-operator
#
line con 0
user-role network-admin
#
line vty 0 63
user-role network-operator
#
ip route-static vpn-instance VPN2 192.0.10.0 24 10.0.0.10
PE3：
sysname H3C
#
ip vpn-instance VPN1
route-distinguisher 1:1
vpn-target 1:1 import-extcommunity
vpn-target 1:1 export-extcommunity
#
ip vpn-instance VPN2
route-distinguisher 2:2
vpn-target 2:2 import-extcommunity
vpn-target 2:2 export-extcommunity
#
ospf 1 router-id 9.9.9.3
area 0.0.0.0
network 9.9.9.3 0.0.0.0
network 100.0.0.4 0.0.0.3
#
mpls lsr-id 9.9.9.3
#
sysid PE3
#
system-working-mode standard
xbar load-single
password-recovery enable
lpu-type f-series
#
vlan 1
#
mpls ldp
#
interface Serial1/0
#
interface Serial2/0
#
interface Serial3/0
#
interface Serial4/0
#
interface NULL0
#
interface LoopBack0
ip address 9.9.9.3 255.255.255.255
#
interface GigabitEthernet0/0
port link-mode route
combo enable copper
ip address 100.0.0.6 255.255.255.252
mpls enable
mpls ldp enable
#
interface GigabitEthernet0/1
port link-mode route
combo enable copper
ip binding vpn-instance VPN1
ip address 10.0.0.13 255.255.255.252
#
interface GigabitEthernet0/2
port link-mode route
combo enable copper
ip binding vpn-instance VPN2
ip address 10.0.0.17 255.255.255.252
#
interface GigabitEthernet5/0
port link-mode route
combo enable copper
#
interface GigabitEthernet5/1
port link-mode route
combo enable copper
#
interface GigabitEthernet6/0
port link-mode route
combo enable copper
#
interface GigabitEthernet6/1
port link-mode route
combo enable copper
#
bgp 100
router-id 9.9.9.3
peer 9.9.9.1 as-number 100
peer 9.9.9.1 connect-interface LoopBack0
peer 9.9.9.2 as-number 100
peer 9.9.9.2 connect-interface LoopBack0
#
address-family vpnv4
peer 9.9.9.1 enable
peer 9.9.9.2 enable
#
ip vpn-instance VPN1
peer 10.0.0.14 as-number 300
#
address-family ipv4 unicast
peer 10.0.0.14 enable
#
ip vpn-instance VPN2
peer 10.0.0.18 as-number 300
#
address-family ipv4 unicast
peer 10.0.0.18 enable
CE3：
sysname CE3
#
irf mac-address persistent timer
irf auto-update enable
undo irf link-delay
irf member 1 priority 1
#
lldp global enable
#
system-working-mode standard
xbar load-single
password-recovery enable
lpu-type f-series
#
vlan 1
#
stp global enable
#
interface NULL0
#
interface LoopBack0
ip address 9.9.9.103 255.255.255.255
#
interface FortyGigE1/0/53
port link-mode bridge
#
interface FortyGigE1/0/54
port link-mode bridge
#
interface GigabitEthernet1/0/1
port link-mode route
combo enable fiber
ip address 10.0.0.14 255.255.255.252
#
interface GigabitEthernet1/0/2
port link-mode route
combo enable fiber
ip address 172.0.0.254 255.255.255.0
#
bgp 300
router-id 9.9.9.103
peer 10.0.0.13 as-number 100
#
address-family ipv4 unicast
network 172.0.0.0 255.255.255.0
peer 10.0.0.13 enable
#
CE4：
sysname CE4
#
irf mac-address persistent timer
irf auto-update enable
undo irf link-delay
irf member 1 priority 1
#
lldp global enable
#
system-working-mode standard
xbar load-single
password-recovery enable
lpu-type f-series
#
vlan 1
#
stp global enable
#
interface NULL0
#
interface LoopBack0
ip address 9.9.9.104 255.255.255.255
#
interface FortyGigE1/0/53
port link-mode bridge
#
interface FortyGigE1/0/54
port link-mode bridge
#
interface GigabitEthernet1/0/1
port link-mode route
combo enable fiber
ip address 10.0.0.18 255.255.255.252
#
interface GigabitEthernet1/0/2
port link-mode route
combo enable fiber
ip address 192.0.0.254 255.255.255.0
#
bgp 300
router-id 9.9.9.104
peer 10.0.0.17 as-number 100
#
address-family ipv4 unicast
network 192.0.0.0 255.255.255.0
peer 10.0.0.17 enable
CE5：
sysname CE5
#
system-working-mode standard
xbar load-single
password-recovery enable
lpu-type f-series
#
vlan 1
#
interface LoopBack0
ip address 9.9.9.105 255.255.255.255
#
interface GigabitEthernet0/0
port link-mode route
combo enable copper
ip address 10.0.0.10 255.255.255.252
#
interface GigabitEthernet0/1
port link-mode route
combo enable copper
ip address 192.0.10.254 255.255.255.0
#
ip route-static 0.0.0.0 0 10.0.0.9
#
Comments NOTHING