ENSP MPLS TE实验

最近考试、测试的特别多，今天跟大家分享个以最少的设备数量，搭建一个多协议的网络

需求如下：

1、路由器、交换机基本配置方法

2、静态路由技术

3、虚拟局域网技术

4、链路聚合技术

5、三层交换技术

6、DHCP技术

7、动态路由技术RIP或OSPF

8、ACL访问控制列表技术

一般来说看到这些需求第一反应就是小型企业网络，这里还缺了个nat的需求，但是没有给出

拓扑图如下：

配置思路

二层

二层中需要的技术就是stp、vlan，那么stp可以扩展到mstp，vlan无非就是接口状态，acc和trunk，还可以开启边缘端口，汇聚/核心交换机之间配置链路聚合

三层

三层网关利用vrrp主备优先级和mstp的多实例进行呼应，动态路由选择ospf

出口设备配置静态路由，acl，ospf下发缺省路由

这么一来协议加起来差不多7-8种，所以基本可以满足老师的任何需求，以上所说的都是常见需求和技术，如果老师稍微专业，可能会提出一些偏特性的知识，或是中高级的知识，那么关注我，我会持续更新内容哦

配置如下

接入交换机配置（sw3、sw4）

sw3交换机配置
 sysname LSW3
vlan batch 10 20
stp region-configuration
 region-name huawei
 instance 1 vlan 10 20
 instance 2 vlan 30 40
 active region-configurationinterface Ethernet0/0/2
 port link-type trunk
 port trunk allow-pass vlan 10 20interface Ethernet0/0/3
 port link-type trunk
 port trunk allow-pass vlan 30 40interface Ethernet0/0/11
 port link-type access
 port default vlan 10
 stp edged-port enableinterface Ethernet0/0/12
 port link-type access
 port default vlan 20
 stp edged-port enablesw4交换机配置
 sysname LSW4vlan batch 30 40
stp region-configuration
 region-name huawei
 instance 1 vlan 10 20
 instance 2 vlan 30 40
 active region-configurationinterface Ethernet0/0/2
 port link-type trunk
 port trunk allow-pass vlan 30 40interface Ethernet0/0/3
 port link-type trunk
 port trunk allow-pass vlan 30 40interface Ethernet0/0/11
 port link-type access
 port default vlan 30
 stp edged-port enableinterface Ethernet0/0/12
 port link-type access
 port default vlan 40
 stp edged-port enablesw1交换机配置
 sysname LSW1二层配置
 vlan batch 10 20 30 40 100stp instance 1 root primary
 stp instance 2 root secondarystp region-configuration
 region-name huawei
 instance 1 vlan 10 20
 instance 2 vlan 30 40
 active region-configurationinterface Eth-Trunk1
 port link-type trunk
 port trunk allow-pass vlan 10 20 30 40interface GigabitEthernet0/0/1
 port link-type access
 port default vlan 100interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk allow-pass vlan 10 20interface GigabitEthernet0/0/3
 port link-type trunk
 port trunk allow-pass vlan 30 40interface GigabitEthernet0/0/11
 eth-trunk 1interface GigabitEthernet0/0/12
 eth-trunk 1dhcp配置
 dhcp enableip pool vlan10
 gateway-list 192.168.1.254
 network 192.168.1.0 mask 255.255.255.0ip pool vlan20
 gateway-list 192.168.2.254
 network 192.168.2.0 mask 255.255.255.0ip pool vlan30
 gateway-list 192.168.3.254
 network 192.168.3.0 mask 255.255.255.0ip pool vlan40
 gateway-list 192.168.4.254
 network 192.168.4.0 mask 255.255.255.0三层网关及vrrp配置
 interface Vlanif10
 ip address 192.168.1.252 255.255.255.0
 vrrp vrid 10 virtual-ip 192.168.1.254
 vrrp vrid 10 priority 120
 dhcp select globalinterface Vlanif20
 ip address 192.168.2.252 255.255.255.0
 vrrp vrid 20 virtual-ip 192.168.2.254
 vrrp vrid 20 priority 120
 dhcp select globalinterface Vlanif30
 ip address 192.168.3.252 255.255.255.0
 vrrp vrid 30 virtual-ip 192.168.3.254
 dhcp select globalinterface Vlanif40
 ip address 192.168.4.252 255.255.255.0
 vrrp vrid 40 virtual-ip 192.168.4.254
 dhcp select globalinterface Vlanif100
 ip address 192.168.100.2 255.255.255.252三层路由配置
 ospf 1 router-id 1.1.1.1
 area 0.0.0.0
 network 192.168.1.0 0.0.0.255
 network 192.168.2.0 0.0.0.255
 network 192.168.3.0 0.0.0.255
 network 192.168.4.0 0.0.0.255
 network 192.168.100.0 0.0.0.255sw2交换机配置
 sysname LSW2二层vlan配置
 vlan batch 10 20 30 40 100stp instance 1 root secondary
 stp instance 2 root primarystp region-configuration
 region-name huawei
 instance 1 vlan 10 20
 instance 2 vlan 30 40
 active region-configurationinterface Eth-Trunk1
 port link-type trunk
 port trunk allow-pass vlan 10 20 30 40interface GigabitEthernet0/0/1
 port link-type access
 port default vlan 100interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk allow-pass vlan 10 20interface GigabitEthernet0/0/3
 port link-type trunk
 port trunk allow-pass vlan 30 40interface GigabitEthernet0/0/11
 eth-trunk 1interface GigabitEthernet0/0/12
 eth-trunk 1地址池配置
 dhcp enableip pool vlan10
 gateway-list 192.168.1.254
 network 192.168.1.0 mask 255.255.255.0ip pool vlan20
 gateway-list 192.168.2.254
 network 192.168.2.0 mask 255.255.255.0ip pool vlan30
 gateway-list 192.168.3.254
 network 192.168.3.0 mask 255.255.255.0ip pool vlan40
 gateway-list 192.168.4.254
 network 192.168.4.0 mask 255.255.255.0三层网关及vrrp配置
 interface Vlanif10
 ip address 192.168.1.253 255.255.255.0
 vrrp vrid 10 virtual-ip 192.168.1.254
 dhcp select globalinterface Vlanif20
 ip address 192.168.2.253 255.255.255.0
 vrrp vrid 20 virtual-ip 192.168.2.254
 dhcp select globalinterface Vlanif30
 ip address 192.168.3.253 255.255.255.0
 vrrp vrid 30 virtual-ip 192.168.3.254
 vrrp vrid 30 priority 120
 dhcp select globalinterface Vlanif40
 ip address 192.168.4.253 255.255.255.0
 vrrp vrid 40 virtual-ip 192.168.4.254
 vrrp vrid 40 priority 120
 dhcp select globalinterface Vlanif100
 ip address 192.168.101.2 255.255.255.252路由配置
 ospf 1 router-id 1.1.1.2
 area 0.0.0.0
 network 192.168.1.0 0.0.0.255
 network 192.168.2.0 0.0.0.255
 network 192.168.3.0 0.0.0.255
 network 192.168.4.0 0.0.0.255
 network 192.168.101.0 0.0.0.255sysname AR1
acl number 2000
 rule 5 permit source 192.168.1.0 0.0.0.255
 rule 10 permit source 192.168.2.0 0.0.0.255
 rule 15 permit source 192.168.3.0 0.0.0.255
 rule 20 permit source 192.168.4.0 0.0.0.255interface GigabitEthernet0/0/0
 ip address 100.1.1.1 255.255.255.252
 nat outbound 2000interface GigabitEthernet0/0/1
 ip address 192.168.100.1 255.255.255.252interface GigabitEthernet0/0/2
 ip address 192.168.101.1 255.255.255.252ospf 1 router-id 1.1.1.3
 default-route-advertise
 area 0.0.0.0
 network 192.168.100.0 0.0.0.255
 network 192.168.101.0 0.0.0.255ip route-static 0.0.0.0 0.0.0.0 100.1.1.2

以上配置可直接复制到设备中，最后测试结果即可

MSTP验证

链路聚合验证

vrrp验证

dhcp验证

ospf验证

nat验证