先来看一下我设计的拓扑图：
这个是我的设计总图
下面来看一下我的设计总思路和配置：
Sw1:
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]sys sw1（改名）
[sw1]un in EN（关闭信息提示）
Info: Information center is disabled.
[sw1]VLAN batch 10 20 30 40 50 60 100 101（创建vlan）
[sw1]int Vlanif 10（进入vlan10）
[sw1-Vlanif10]ip ad 192.168.10.254 24（配置IP，做后面配置的网关）
[sw1-Vlanif10]vrrp vrid 10 virtual-ip 192.168.10.252（配置VRRP协议的虚拟IP地址）
[sw1-Vlanif10]vrrp vrid 10 priority 120（配置优先级）
[sw1-Vlanif10]vrrp vrid 10 track interface GigabitEthernet 0/0/1（创建监视端口实现快速主备切换）
[sw1-Vlanif10]vrrp vrid 10 track interface GigabitEthernet 0/0/2（创建监视端口实现快速主备切换）
[sw1-Vlanif10]q（推出）
[sw1]int Vlanif 20（进入vlan20）
[sw1-Vlanif20]ip address 192.168.20.254 24(配置IP）
[sw1-Vlanif20]vrrp vrid 20 virtual-ip 192.168.20.252（配置虚拟IP）
[sw1-Vlanif20]vrrp vrid 20 priority 120（配置优先级）
[sw1-Vlanif20]vrrp vrid 20 track interface GigabitEthernet 0/0/1（创建监视端口实现快速主备切换）
[sw1-Vlanif20]vrrp vrid 20 track interface GigabitEthernet 0/0/2（创建监视端口实现快速主备切换）
[sw1-Vlanif20]q
[sw1]int Vlanif 30
[sw1-Vlanif30]ip ad 192.168.30.254 24
[sw1-Vlanif30]vrrp vrid 30 virtual-ip 192.168.30.252
[sw1-Vlanif30]vrrp vrid 30 priority 120
[sw1-Vlanif30]vrrp vrid 30 track interface GigabitEthernet 0/0/1
[sw1-Vlanif30]vrrp vrid 30 track interface GigabitEthernet 0/0/2
[sw1-Vlanif30]q
[sw1]int Vlanif 40
[sw1-Vlanif40]ip ad 192.168.40.254 24
[sw1-Vlanif40]vrrp vrid 40 virtual-ip 192.168.40.252
[sw1-Vlanif40]vrrp vrid 40 priority 120[sw1-Vlanif40]vrrp vrid 40 track interface GigabitEthernet 0/0/1
[sw1-Vlanif40]vrrp vrid 40 track interface GigabitEthernet 0/0/2
[sw1-Vlanif40]q
[sw1]int Vlanif 50
[sw1-Vlanif50]ip ad 192.168.50.254 24
[sw1-Vlanif50]vrrp vrid 50 virtual-ip 192.168.50.252
[sw1-Vlanif50]vrrp vrid 50 track interface GigabitEthernet 0/0/1
[sw1-Vlanif50]vrrp vrid 50 track interface GigabitEthernet 0/0/2
[sw1-Vlanif50]q
Info: This operation may take a few seconds. Please wait for a moment...done.
[sw1]int Vlanif 5
[sw1-Vlanif5]ip ad 192.168.5.2 24
[sw1-Vlanif5]int vlan7
[sw1-Vlanif7]ip ad 192.168.7.2 24
[sw1-Vlanif7]q
[sw1]int g
[sw1]int GigabitEthernet 0/0/1
[sw1-GigabitEthernet0/0/1]port link-type access （配置接口类型为接入模式）
[sw1-GigabitEthernet0/0/1]port default vlan 5（允许通过vlan5）
[sw1-GigabitEthernet0/0/1]int g
[sw1-GigabitEthernet0/0/1]q
[sw1]int g
[sw1]int GigabitEthernet 0/0/2
[sw1-GigabitEthernet0/0/2]port link-type access
[sw1-GigabitEthernet0/0/2]port default vlan 7
[sw1-GigabitEthernet0/0/2]q
[sw1] User interface con0 is available
[sw1]int e
[sw1]int Eth-Trunk 1（创建链路聚合端口）
[sw1-GigabitEthernet0/0/10]q
[sw1]int GigabitEthernet 0/0/11
[sw1-GigabitEthernet0/0/11]port link-type trunk
[sw1-GigabitEthernet0/0/11]port trunk allow-pass vlan all
[sw1-GigabitEthernet0/0/11]int GigabitEthernet 0/0/12
[sw1-GigabitEthernet0/0/12]port link-type trunk
[sw1-GigabitEthernet0/0/12]port trunk allow-pass vlan all
[sw1-GigabitEthernet0/0/12]int GigabitEthernet 0/0/9
[sw1-GigabitEthernet0/0/9]port link-type trunk
[sw1-GigabitEthernet0/0/9]port trunk allow-pass vlan all
[sw1-GigabitEthernet0/0/9]int GigabitEthernet 0/0/8
[sw1-GigabitEthernet0/0/8]port link-type trunk
[sw1-GigabitEthernet0/0/8]port trunk allow-pass vlan all
[sw1-GigabitEthernet0/0/8]port trunk pvid vlan 101
[sw1-GigabitEthernet0/0/8]
[sw1]stp en
[sw1]stp enable （配置生成树）
[sw1]stp region-configuration进入生成树配置模式）
[sw1-mst-region]re
[sw1-mst-region]region-name huawei（改名）
[sw1-mst-region]re
[sw1-mst-region]region-name
[sw1-mst-region]revision-level 5（配置生成树的权限）
[sw1-mst-region]instance 1 vlan 10 20 30 100（把vlan划分到实例中）
[sw1-mst-region]instance 2 vlan 40 50 60
[sw1-mst-region]active region-configuration （激活实例）
Info: This operation may take a few seconds. Please wait for a moment...done.
[sw1]stp instance 1 root primary （配置实例的优先级的主次）
[sw1]stp instance 2 root secondary （配置实例的优先级的主次）
[sw1]Sw2:
[sw2]:
[sw2]un in en
Info: Information center is disabled.
[sw2]vlan batch 10 20 30 40 50 60 100 101 6 8（创建vlan）
Info: This operation may take a few seconds. Please wait for a moment...done.
[sw2]int vlan
[sw2]int Vlanif 10
[sw2-Vlanif10]ip address 192.168.10.253 24
[sw2-Vlanif10]vrrp vrid 10 virtual-ip 192.168.10.252
[sw2-Vlanif10]vrrp vrid 10 track interface GigabitEthernet 0/0/1
[sw2-Vlanif10]vrrp vrid 10 track interface GigabitEthernet 0/0/2
[sw2-Vlanif10]q
[sw2]int vl
[sw2]int Vlanif 20
[sw2-Vlanif20]ip address 192.168.20.253 24
[sw2-Vlanif20]vrrp vrid 20 virtual-ip 192.168.20.252
[sw2-Vlanif20]vrrp vrid 20 track interface GigabitEthernet 0/0/1
[sw2-Vlanif20]vrrp vrid 20 track interface GigabitEthernet 0/0/2
[sw2-Vlanif20]q
[sw2]int Vlanif 30
[sw2-Vlanif30]ip ad 192.168.30.253 24
[sw2-Vlanif30]vrrp vrid 30 virtual-ip 192.168.30.252
[sw2-Vlanif30]vrrp vrid 30 track interface GigabitEthernet 0/0/1
[sw2-Vlanif30]vrrp vrid 30 track interface GigabitEthernet 0/0/2
[sw2-Vlanif30]q
[sw2]int Vlanif 40
[sw2-Vlanif40]ip ad 192.168.40.253 24
[sw2-Vlanif40]vrrp vrid 40 virtual-ip 192.168.40.252
[sw2-Vlanif40]vrrp vrid 40 track interface GigabitEthernet 0/0/1
[sw2-Vlanif40]vrrp vrid 40 track interface GigabitEthernet 0/0/2
[sw2-Vlanif40]q
[sw2]int Vlanif 50
[sw2-Vlanif50]q
[sw2]int Vlanif 40
[sw2-Vlanif40]display this
#
interface Vlanif40
ip address 192.168.40.253 255.255.255.0
vrrp vrid 40 virtual-ip 192.168.40.252
vrrp vrid 40 track interface GigabitEthernet0/0/1
vrrp vrid 40 track interface GigabitEthernet0/0/2
#
return
[sw2-Vlanif40]vrrp vrid 40 priority 120
[sw2-Vlanif40]display this
#
interface Vlanif40
ip address 192.168.40.253 255.255.255.0
vrrp vrid 40 virtual-ip 192.168.40.252
vrrp vrid 40 priority 120
vrrp vrid 40 track interface GigabitEthernet0/0/1
vrrp vrid 40 track interface GigabitEthernet0/0/2
#
[sw2-Vlanif60]vrrp vrid 60 track interface GigabitEthernet 0/0/1
[sw2-Vlanif60]vrrp vrid 60 track interface GigabitEthernet 0/0/2
[sw2-Vlanif60]
[sw2-Vlanif60]q
[sw2][sw2-Vlanif60]
[sw2-Vlanif60]q
[sw2]int Vlanif 6
[sw2-Vlanif6]ip ad 192.168.6.2 24
[sw2-Vlanif6]q
[sw2]int Vlanif 8
[sw2-Vlanif8]ip ad 192.168.8.2 24
[sw2-Vlanif8]q
[sw2]int g
[sw2]int GigabitEthernet 0/0/1
[sw2-GigabitEthernet0/0/1]port link-type access
[sw2-GigabitEthernet0/0/1]port default vlan 8
[sw2-GigabitEthernet0/0/7]port trunk allow-pass vlan all
[sw2-GigabitEthernet0/0/7]int GigabitEthernet 0/0/5
[sw2-GigabitEthernet0/0/5]port link-type trunk
[sw2-GigabitEthernet0/0/5]port trunk allow-pass vlan all
[sw2-GigabitEthernet0/0/5]int GigabitEthernet 0/0/10
[sw2-GigabitEthernet0/0/10]port link-type trunk
[sw2-GigabitEthernet0/0/10]int GigabitEthernet 0/0/10
[sw2-GigabitEthernet0/0/10]int GigabitEthernet 0/0/9
[sw2-GigabitEthernet0/0/9]port link-type trunk
[sw2-GigabitEthernet0/0/9]port trunk allow-pass vlan all
[sw2-GigabitEthernet0/0/9]int GigabitEthernet 0/0/11
[sw2-GigabitEthernet0/0/11]port link-type trunk
[sw2-GigabitEthernet0/0/11]port trunk allow-pass vlan all
[sw2-GigabitEthernet0/0/11]
[sw2]st
[sw2]stp en
[sw2]stp enable
[sw2]st
[sw2]stp re
[sw2]stp region-configuration
[sw2-mst-region]re
[sw2-mst-region]region-name huawei
[sw2-mst-region]re
[sw2-mst-region]region-name
[sw2-mst-region]revision-level 5
[sw2-mst-region]instance 1 vlan 10 20 30
[sw2-mst-region]instance 2 vlan 40 50 60
[sw2-mst-region]undo instance 1 vlan 10 20 30
[sw2-mst-region]instance 1 vlan 10 20 30 100
[sw2]stp instance 1 root secondary
[sw2]stp instance 2 root primary
[sw2]Sw3:
<Huawei>sys
[Huawei]sys sw3
[sw3]un in en
Info: Information center is disabled.
[sw3]vlan batch vlan 10 20 30 40 50 60 100 101
[sw3]stp enable
[sw3]st
[sw3]stp re
[sw3]stp region-configuration
[sw3-mst-region]re
[sw3-mst-region]region-name huawei
[sw3-mst-region]re
[sw3-mst-region]region-name
[sw3-mst-region]revision-level 5
[sw3-mst-region]in
[sw3-mst-region]instance 1 v
[sw3-mst-region]instance 1 vlan 10 20 30 100
[sw3-mst-region]in
[sw3-mst-region]instance 2 v
[sw3-mst-region]instance 2 vlan 40 50 60
[sw3-mst-region]active region-configuration
[sw3-mst-region]q
[sw3]int g
[sw3]int GigabitEthernet 0/0/1
[sw3-GigabitEthernet0/0/1]port link-type trunk
[sw3-GigabitEthernet0/0/1]port trunk allow-pass vlan al
[sw3-GigabitEthernet0/0/1]int g0/0/2
[sw3-GigabitEthernet0/0/2]port link-type trunk
[sw3-GigabitEthernet0/0/2]po
[sw3-GigabitEthernet0/0/2]port trunk allow-pass vlan all
[sw3-GigabitEthernet0/0/2]int e0/0/1
[sw3-Ethernet0/0/1]port link-type access
[sw3-Ethernet0/0/1]port default vlan 10
[sw3-Ethernet0/0/1]int e0/0/2
[sw3-Ethernet0/0/2]port link-type access
[sw3-Ethernet0/0/2]port default vlan 10
[sw3-Ethernet0/0/2]q
[sw3]
Sw4:
The device is running!
<Huawei>
[sw4-mst-region]st
[sw4-mst-region]stp re
[sw4-mst-region]q
[sw4]st
[sw4]stp re
[sw4]stp region-configuration
[sw4-mst-region]q
[sw4]int g
[sw4]int GigabitEthernet 0/0/1
[sw4-GigabitEthernet0/0/1]port link-type trunk
[sw4-GigabitEthernet0/0/1]port trunk allow-pass vlan all
[sw4-GigabitEthernet0/0/1]int g0/0/2
[sw4-GigabitEthernet0/0/2]port link-type trunk
[sw4-GigabitEthernet0/0/2]port trunk allow-pass vlan all
[sw4-GigabitEthernet0/0/2]q
[sw4]int e
[sw4]int Eth
[sw4]int Ethernet0/0/1
[sw4-Ethernet0/0/1]port link-type access
[sw4-Ethernet0/0/1]port default vlan 20
[sw4-Ethernet0/0/1]int e0/0/2
[sw4-Ethernet0/0/2]port link-type ac
[sw4-Ethernet0/0/2]port default vlan 20
[sw4-Ethernet0/0/2]q
[sw4]q
<sw4>saveSw5:
The device is running!:
<Huawei>
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]un in en
Info: Information center is disabled.
[Huawei]sys sw5
[sw5]vlan batch 10 20 30 40 50 60 100 101
[sw5]vlan batch 10 20 30 40 50 60 100 101
Info: This operation may take a few seconds. Please wait for a moment...done.
[sw5]stp enable
[sw5]stp region-configuration
[sw5-mst-region]region-name huawei
[sw5-mst-region]revision-level 5
[sw5
[sw5-GigabitEthernet0/0/2]port link-type trunk
[sw5-GigabitEthernet0/0/2]port trunk allow-pass vlan all
[sw5-GigabitEthernet0/0/2]int e
[sw5-GigabitEthernet0/0/2]int e0/0/1
[sw5-Ethernet0/0/1]port link-type access
[sw5-Ethernet0/0/1]port default vlan 30
[sw5-Ethernet0/0/1]int e0/0/2
[sw5-Ethernet0/0/2]port link-type access
[sw5-Ethernet0/0/2]port default vlan 30
[sw5-Ethernet0/0/2]Sw6:
The device is running!
<Huawei>
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]un in en
Info: Information center is disabled.
[Huawei]sys
^
Error:Incomplete command found at '^' position.
[Huawei]sys sw6
[sw6]vlan batch 10 20 30 40 50 60 100 101
Info: This operation may take a few seconds. Please wait for a moment...done.
[sw6]stp enable
[sw6]stp enable
[sw6]stp region-configuration
[sw6-mst-region]region-name huawei
[sw6-mst-region]region-name huawei
[sw6-mst-region]revision-level 5
[sw6-mst-region]instance 1 vlan 10 20 30 100
[sw6-mst-region]instance 2 vlan 40 50 60
[sw6-mst-region]active region-configuration
Info: This operation may take a few seconds. Please wait for a moment...done.
[sw6-mst-region]q
[sw6]int g
[sw6]int
[sw6-GigabitEthernet0/0/2]port trunk allow-pass vlan all
[sw6-GigabitEthernet0/0/2]int e0/0/1
[sw6-Ethernet0/0/1]port link-type access
v
[sw6-Ethernet0/0/1]port default vlan 40
[sw6-Ethernet0/0/1]int e0/0/2
[sw6-Ethernet0/0/2]port link-type access
[sw6-Ethernet0/0/2]port default vlan 40
[sw6-Ethernet0/0/2]Sw7:
The device is running!:
<Huawei>
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]in un en
^
Error:Ambiguous command found at '^' position.
[Huawei]un in en
Info: Information center is disabled.
[Huawei]sys sw7
[sw7]vlan batch 10 20 30 40 50 60 100 101
[sw7]
[sw7]vlan batch 10 20 30 40 50 60 100 101
[sw7]vlan batch 10 20 30 40 50 60 100 101
Info: This operation may take a few seconds. Please wait for a moment...done.
[sw7]stp enable
[sw7]stp enable
[sw7]stp region-configuration
[sw7-mst-region]region-name huawei
[sw7-mst-region]region-name huawei
[sw7-mst-region]revision-level 5
[sw7-mst-region]instance 1 vlan 10 20 30 100
[sw7-mst-region]instance 2 vlan 40 50 60
[sw7-mst-region]active region-configuration
Info: This operation may take a few seconds. Please wait for a moment...done.
[sw7-mst-region]q
[sw7]int g
[sw7]int GigabitEthernet 0/0/1
[sw7-GigabitEthernet0/0/2]int e0/0/1
[sw7-Ethernet0/0/1]port link-type access
[sw7-Ethernet0/0/1]port default vlan 50
[sw7-Ethernet0/0/1]int e0/0/2
[sw7-Ethernet0/0/2]port link-type access
[sw7-Ethernet0/0/2]port default vlan 50
[sw7-Ethernet0/0/2]Sw8:
The device is running!
<Huawei>
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]un in en
Info: Information center is disabled.
[Huawei]sys sw8
[sw8]v
[sw8]vlan b
[sw8]vlan batch 10 20 30 40 50 60 100 101
Info: This operation may take a few seconds. Please wait for a moment...done.
[sw8]stp enable
[sw8]stp enable
[sw8]stp region-configuration
[sw8-mst-region]region-name huawei
[sw8-mst-region]region-name huawei
[sw8-mst-region]revision-level 5
[sw8-mst-region]instance 1 vlan 10 20 30 100
[sw8-mst-region]instance 2 vlan 40 50 60
[sw8-mst-region]active region-configuration
Info: This operation may take a few seconds. Please wait for a moment...done.
[sw8-mst-region]int g
[sw8-mst-region]q
[sw8]int g
[sw8]int GigabitEthernet 0/0/1
[sw8-Ethernet0/0/1]port default vlan 60
[sw8-Ethernet0/0/1]int e0/0/2
[sw8-Ethernet0/0/2]port link-type access
[sw8-Ethernet0/0/2]port default vlan 60
[sw8-Ethernet0/0/2]q
[sw8]AC1:
The device is running!
<AC6605>sys
Enter system view, return user view with Ctrl+Z.
[AC6605]sys AC1
[AC1]v
[AC1]vl
[AC1]vlan 100 101
^
Error: Too many parameters found at '^' position.
[AC1]vl
[AC1]vlan b
[AC1]vlan batch 100 101
Info: This operation may take a few seconds. Please wait for a moment...done.
[AC1]int v
[AC1]int Vlanif 100
[AC1-Vlanif100]ip ad 192.168.100.1 24
[AC1-Vlanif100]q
[AC1]dhcp enable （开启DHCP功能）
Info: The operation may take a few seconds. Please wait for a moment.done.
[AC1]int v
[AC1]int Vlanif 100（进入vlan100）
[AC1-Vlanif100]dhcp select global （DHCP配置指向全局）
[AC1-Vlanif100]q
[AC1]int v
[AC1]int Vlanif 101
[AC1-Vlanif101]ip ad 192.168.101.1 24（配置IP）
[AC1-Vlanif101]dhcp select interface （DHCP配置指向全局）
[AC1-Vlanif101]q
[AC1]ip poo
[AC1]ip pool v
[AC1]ip pool vlan100（创建地址池）
Info: It is successful to create an IP address pool.
[AC1-ip-pool-vlan100]ga
[AC1-ip-pool-vlan100]gateway-list 192.168.100.254（配置网关）
[AC1-ip-pool-vlan100]netw
[AC1-ip-pool-vlan100]network 192.168.100.0（配置地址池网段）
[AC1-ip-pool-vlan100]dn
[AC1-ip-pool-vlan100]dns-list 192.168.200.4（配置DNS）
[AC1-ip-pool-vlan100]ex
[AC1-ip-pool-vlan100]excluded-ip-address 192.168.100.1（配置排除地址）
[AC1-ip-pool-vlan100]q
[AC1-wlan-view]ap-group name ap-huawei（建立AP组创建名字）
Info: This operation may take a few seconds. Please wait for a moment.done.
[AC1-wlan-ap-group-ap-huawei]q
[AC1-wlan-view]re
[AC1-wlan-view]regulatory-domain-profile n
[AC1-wlan-view]regulatory-domain-profile name huawei-domin（指定域管理模块并设置域管理名）
[AC1-wlan-regulate-domain-huawei-domin]cou
[AC1-wlan-regulate-domain-huawei-domin]country-code cn （选择国家代码进行配置设定）
[AC1-wlan-regulate-domain-huawei-domin]country-code CN
[AC1-wlan-ap-0]ap
[AC1-wlan-ap-0]ap-system-profile
^
Error: Incomplete command found at '^' position.
[AC1-wlan-ap-0]ap-system-profile
^
Error: Incomplete command found at '^' position.
[AC1-wlan-view]venue-name-profile
[AC1-wlan-view]vap-profile n
[AC1-wlan-view]vap-profile name vap-1 （VAP名称）
[AC1-wlan-vap-prof-vap-1]forward-mode tunnel
Info: This operation may take a few seconds, please wait.done.
[AC1-wlan-vap-prof-vap-1]se
[AC1-wlan-vap-prof-vap-1]security-profile
[AC1-wlan-vap-prof-vap-1]service-mode
[AC1-wlan-vap-prof-vap-1]service-vlan v
[AC1-wlan-vap-prof-vap-1]service-vlan vlan-id 100
Info: This operation may take a few seconds, please wait.done.
[AC1-wlan-vap-prof-vap-1]s
[AC1-wlan-vap-prof-vap-1]security-profile se
[AC1-wlan-vap-prof-vap-1]security-profile sec
Info: This operation may take a few seconds, please wait.done.
[AC1-wlan-vap-prof-vap-1]se
[AC1-wlan-vap-prof-vap-1]service-vlan
[AC1-wlan-vap-prof-vap-1]security-profile
[AC1-wlan-vap-prof-vap-1]service-mode
[AC1-wlan-vap-prof-vap-1]service-vlan
[AC1-wlan-vap-prof-vap-1]security-profile
[AC1-wlan-vap-prof-vap-1]ss
[AC1-wlan-vap-prof-vap-1]ssid-profile ssid-1
Info: This operation may take a few seconds, please wait.done.
[AC1-wlan-vap-prof-vap-1]q
[AC1-wlan-view]ap
[AC1-wlan-view]ap-
[AC1-wlan-view]ap-group n
[AC1-wlan-view]ap-group name ap
[AC1-wlan-view]ap-group name ap-huawei（创建AP组名称）
[AC1-wlan-ap-group-ap-huawei]vap-profile vap-1 wlan 1 radio 0（VAP模板名称）
Info: This operation may take a few seconds, please wait...done.
[AC1-wlan-ap-group-ap-huawei]q
[AC1-wlan-view]q
[AC1]R1:
[Huawei]un in en
Info: Information center is disabled.
[Huawei]sys R1
[R1]int g
[R1]int GigabitEthernet 0/0/2
[R1-GigabitEthernet0/0/2]ip ad
[R1-GigabitEthernet0/0/2]ip address 192.168.5.1 24
[R1-GigabitEthernet0/0/2]int g
[R1-GigabitEthernet0/0/2]int g0/0/1
[R1-GigabitEthernet0/0/1]ip ad
[R1-GigabitEthernet0/0/1]ip address 192.168.4.1 24
[R1-GigabitEthernet0/0/1]int g0/0/0
[R1-GigabitEthernet0/0/0]ip ad
[R1-GigabitEthernet0/0/0]ip address 192.168.2.2 24
[R1-GigabitEthernet0/0/0]
<R1>
<R1>
<R1>R2:
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]un in en
Info: Information center is disabled.
[Huawei]sys R2
[R2]int g
[R2]int GigabitEthernet 0/0/0
[R2-GigabitEthernet0/0/0]dis
[R2-GigabitEthernet0/0/0]discardth
[R2-GigabitEthernet0/0/0]disp
[R2-GigabitEthernet0/0/0]display th
[R2-GigabitEthernet0/0/0]display this
[V200R003C00]
#
interface GigabitEthernet0/0/0
#
return
[R2-GigabitEthernet0/0/0]
[R2-GigabitEthernet0/0/0]
[R2-GigabitEthernet0/0/0]q
[R2]int g
[R2]int GigabitEthernet 1/0/0
[R2-GigabitEthernet1/0/0]ip ad
[R2-GigabitEthernet1/0/0]ip address 192.168.7.1
^
Error:Incomplete command found at '^' position.
[R2-GigabitEthernet0/0/2]ip address 192.168.8.1 24
[R2-GigabitEthernet0/0/2]
[R2-GigabitEthernet0/0/2]防火墙的配置：
FW1：
<USG6000V1>
<USG6000V1>sys
Enter system view, return user view with Ctrl+Z.
[USG6000V1]sys
[USG6000V1]sysname FW1
[FW1]un in
May 15 2022 01:58:59 FW1 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25.191.3
.1 configurations have been changed. The current change number is 1, the change
loop count is 0, and the maximum number of records is 4095.
[FW1]un in en
Info: Saving log files...
Info: Information center is disabled.
[FW1]int g1/0/0
[FW1-GigabitEthernet1/0/0]ip ad
[FW1-GigabitEthernet1/0/0]ip address 192.168.2.1 24
[FW1-GigabitEthernet1/0/0]intg1/0/1
^
Error: Unrecognized command found at '^' position.
[FW1-GigabitEthernet1/0/0]int g1/0/1
[FW1-GigabitEthernet1/0/1]ip ad 192.168.3.1 24
[FW1-GigabitEthernet1/0/1]int g0/0/0
[FW1-GigabitEthernet0/0/0]ip ad 192.168.200.1 24
[FW1-GigabitEthernet0/0/0]int g1/0/2
[FW1-GigabitEthernet1/0/2]ip ad 200.10.10.1 30
[FW1-GigabitEthernet1/0/2]q
[FW1]f
[FW1]firewall z
[FW1]firewall zone
[FW1]firewall zone t
[FW1]firewall zone trust （配置策略：新任）
[FW1-zone-trust]add interface g1/0/0（加入接口）
[FW1-zone-trust]add interface g1/0/1
[FW1-zone-trust]f
[FW1-zone-trust]firewall z
[FW1-zone-trust]firewall z
[FW1-zone-trust]q
[FW1]f
[FW1]firewall z
[FW1]firewall zone u
[FW1]firewall zone untrust （创建不信任策略）
[FW1-zone-untrust]ad
[FW1-zone-untrust]add i
[FW1-zone-untrust]add interface g1/0/2（加入端口）
[FW1-zone-untrust]q
[FW1]f
[FW1]firewall d
[FW1]firewall dns
[FW1]firewall detect
[FW1]firewall defend
[FW1]firewall zone dmz （创建DMZ区域）
[FW1-zone-dmz]ad
[FW1-zone-dmz]add int g0/0/0（加入接口）
Error: The interface has been added to trust security zone.
[FW1-zone-dmz]q
[FW1]se
[FW1]security-policy（进入安全策略）
[FW1]
R1：
[R1]os
[R1]ospf 30（创建动态路由）
[R1-ospf-30]area 0（创建区域）
[R1-ospf-30-area-0.0.0.0]network 192.168.5.0 0.0.0.255（加入配置的IP网段）
[R1-ospf-30-area-0.0.0.0]network 192.168.6.0 0.0.0.255
[R1-ospf-30-area-0.0.0.0]network 192.168.4.0 0.0.0.255
[R1-ospf-30-area-0.0.0.0]network 192.168.2.0 0.0.0.255
Sw1:
<sw1>sys
Enter system view, return user view with Ctrl+Z.
[sw1]os
[sw1]ospf 10
[sw1-ospf-10]ar
[sw1-ospf-10]area 0
[sw1-ospf-10-area-0.0.0.0]netw
[sw1-ospf-10-area-0.0.0.0]network 192.168.10.0 0.0.0.255
[sw1-ospf-10-area-0.0.0.0]network 192.168.20.0 0.0.0.255
[sw1-ospf-10-area-0.0.0.0]network 192.168.30.0 0.0.0.255
[sw1-ospf-10-area-0.0.0.0]network 192.168.40.0 0.0.0.255
[sw1-ospf-10-area-0.0.0.0]network 192.168.50.0 0.0.0.255
[sw1-ospf-10-area-0.0.0.0]network 192.168.60.0 0.0.0.255
[sw1-ospf-10-area-0.0.0.0]network 192.168.100.0 0.0.0.255
[sw1-ospf-10-area-0.0.0.0]network 192.168.5.0 0.0.0.255
[sw1-ospf-10-area-0.0.0.0]network 192.168.7.0 0.0.0.255
[sw1-ospf-10-area-0.0.0.0]
[sw1-ospf-10-area-0.0.0.0]
Sw2:
[sw2]os
[sw2]ospf 20
[sw2-ospf-20]ar
[sw2-ospf-20]area 0
[sw2-ospf-20-area-0.0.0.0]netw
[sw2-ospf-20-area-0.0.0.0]network 192.168.10.0 0.0.0.255
[sw2-ospf-20-area-0.0.0.0]network 192.168.20.0 0.0.0.255
[sw2-ospf-20-area-0.0.0.0]network 192.168.30.0 0.0.0.255
[sw2-ospf-20-area-0.0.0.0]network 192.168.40.0 0.0.0.255
[sw2-ospf-20-area-0.0.0.0]network 192.168.50.0 0.0.0.255
[sw2-ospf-20-area-0.0.0.0]network 192.168.60.0 0.0.0.255
[sw2-ospf-20-area-0.0.0.0]network 192.168.6.0 0.0.0.255
[sw2-ospf-20-area-0.0.0.0]network 192.168.8.0 0.0.0.255
[sw2-ospf-20-area-0.0.0.0]
[sw2-ospf-20-area-0.0.0.0]
<sw2>
Fw:
<FW1>sys
Enter system view, return user view with Ctrl+Z.
[FW1]os
[FW1]ospf 50
[FW1-ospf-50]are
[FW1-ospf-50]area 0
[FW1-ospf-50-area-0.0.0.0]netw
[FW1-ospf-50-area-0.0.0.0]network 192.168.2.0 0.0.0.255
[FW1-ospf-50-area-0.0.0.0]network 192.168.3.0 0.0.0.255
[FW1-ospf-50-area-0.0.0.0]network 192.168.200.0 0.0.0.255
[FW1-ospf-50-area-0.0.0.0]de
[FW1-ospf-50-area-0.0.0.0]default-cost
[FW1-ospf-50-area-0.0.0.0]description
[FW1-ospf-50-area-0.0.0.0]default-r
[FW1-ospf-50-area-0.0.0.0]q
[FW1-ospf-50]default-route-advertise always
[FW1-ospf-50]q
[FW1]ip route-static 0.0.0.0 0.0.0.0 200.10.10.2（配置静态IP）
[FW1]R3:
<Huawei>sys
[Huawei]sys R2
[R2]
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]sys
[Huawei]sysname R2
[R2]int g0/0/0
[R2-GigabitEthernet0/0/0]ip ad 200.10.10.2 30
May 15 2022 11:36:00-08:00 R2 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP
on the interface GigabitEthernet0/0/0 has entered the UP state.
[R2-GigabitEthernet0/0/0]
[R2-GigabitEthernet0/0/0]q
[R2]un in en
Info: Information center is disabled.
[R2]int g0/0/1
[R2-GigabitEthernet0/0/1]ip ad 200.10.20.1 28
[R2-GigabitEthernet0/0/1]R1：
R1]dh
[R1]dhcp en
[R1]dhcp enable
Info: The operation may take a few seconds. Please wait for a moment.done.
[R1]ip poo
[R1]ip pool vlan10
Info: It's successful to create an IP address pool.
[R1-ip-pool-vlan10]netw
[R1-ip-pool-vlan10]network 192.168.10.0 ma
[R1-ip-pool-vlan10]network 192.168.10.0 mask 24
[R1-ip-pool-vlan10]g
[R1-ip-pool-vlan10]gateway-list 192.168.10.254
[R1-ip-pool-vlan10]dns
[R1-ip-pool-vlan10]dns-list 114.114.114.114
[R1-ip-pool-vlan10]q
[R1]ip poo
[R1]ip pool vlan
[R1]ip pool vlan20
Info: It's successful to create an IP address pool.
[R1-ip-pool-vlan20]netw
[R1-ip-pool-vlan20]network 192.168.20.0 ma
[R1-ip-pool-vlan20]network 192.168.20.0 mask 24
[R1-ip-pool-vlan20]g
[R1-ip-pool-vlan20]gateway-list 192.168.20.254
[R1-ip-pool-vlan20]dns
[R1-ip-pool-vlan20]dns-list 114.114.114.114
[R1-ip-pool-vlan20]ex
[R1-ip-pool-vlan20]excluded-ip-address 192.168.20.1 192.168.20.100
[R1-ip-pool-vlan20]q
[R1]ip pooo
[R1]ip poo
[R1]ip pool valn
[R1]ip pool va
[R1]ip pool vla
[R1]ip pool vlan30
Info: It's successful to create an IP address pool.
[R1-ip-pool-vlan30]netw
[R1-ip-pool-vlan30]network 192.168.30.0 ma
[R1-ip-pool-vlan30]network 192.168.30.0 mask 24
[R1-ip-pool-vlan30]g
[R1-ip-pool-vlan30]gateway-list 192.168.30.254
[R1-ip-pool-vlan30]dns
[R1-ip-pool-vlan30]dns-list 114.114.114.114
[R1-ip-pool-vlan30]ex
[R1-ip-pool-vlan30]excluded-ip-address 192.168.30.1
[R1-ip-pool-vlan30]q
[R1]ip poo
[R1]ip pool vlan
[R1]ip pool vlan40
Info: It's successful to create an IP address pool.
[R1-ip-pool-vlan40]netw
[R1-ip-pool-vlan40]network 192.168.40.0 ma
[R1-ip-pool-vlan40]network 192.168.40.0 mask 24
[R1-ip-pool-vlan40]g
[R1-ip-pool-vlan40]gateway-list 192.168.40.254
[R1-ip-pool-vlan40]dns
[R1-ip-pool-vlan40]dns-list 114.114.114.114
[R1-ip-pool-vlan40]ex
[R1-ip-pool-vlan40]excluded-ip-address 192.168.40.1
[R1]ip pool vlan60
Info: It's successful to create an IP address pool.
[R1-ip-pool-vlan60]netw
[R1-ip-pool-vlan60]network 192.168.60.0 ma
[R1-ip-pool-vlan60]network 192.168.60.0 mask 24
[R1-ip-pool-vlan60]g
[R1-ip-pool-vlan60]gateway-list 192.168.60.254
[R1-ip-pool-vlan60]dns
[R1-ip-pool-vlan60]dns-list 114.114.114.114
[R1-ip-pool-vlan60]ex
[R1-ip-pool-vlan60]excluded-ip-address 192.168.60.1
[R1-ip-pool-vlan60]q
[R1]Sw1配置dhcp:
<sw1>
<sw1>
<sw1>
<sw1>sys
Enter system view, return user view with Ctrl+Z.
[sw1]
[sw1]ip pool vlan10
Info:It's successful to create an IP address pool.
[sw1-ip-pool-vlan10]netw
[sw1-ip-pool-vlan10]network 192.168.10.0 ma
[sw1-ip-pool-vlan10]network 192.168.10.0 mask 24
[sw1-ip-pool-vlan10]g
[sw1-ip-pool-vlan10]gateway-list 192.168.10.252
[sw1-ip-pool-vlan10]dns
[sw1-ip-pool-vlan10]dns-list 114.114.114.114
[sw1-ip-pool-vlan10]ex
[sw1-ip-pool-vlan10]excluded-ip-address 192.168.10.100 192.168.10.150
[sw1-ip-pool-vlan10]dhc
[sw1-ip-pool-vlan10]q
[sw1]int vl
[sw1]int Vlanif 10
[sw1-Vlanif10]dhcp select global
[sw1-Vlanif10]q
[sw1]ip poo
[sw1]ip pool vlan
[sw1]ip pool vlan20
Info:It's successful to create an IP address pool.
[sw1-ip-pool-vlan20]netw
[sw1-ip-pool-vlan20]network 192.168.20.0 ma
[sw1-ip-pool-vlan20]network 192.168.20.0 mask 24
[sw1-ip-pool-vlan20]g
[sw1-ip-pool-vlan20]gateway-list 192.168.20.252
[sw1-ip-pool-vlan20]dns
[sw1-ip-pool-vlan20]dns-list 114.114.114.114
[sw1-ip-pool-vlan20]ex
[sw1-ip-pool-vlan20]excluded-ip-address 192.168.20.100 192.168.20.150
[sw1-ip-pool-vlan20]q
[sw1]int vlan
[sw1]int Vlanif 20
[sw1-Vlanif20]dhcp select global
[sw1-Vlanif20]q
[sw1]
[sw1]ip pool vlan30
Info:It's successful to create an IP address pool.
[sw1-ip-pool-vlan30]netw
[sw1-ip-pool-vlan30]network 192.168.30.0 mask 24
[sw1-ip-pool-vlan30]g
[sw1-ip-pool-vlan30]gateway-list 192.168.30.252
[sw1-ip-pool-vlan30]dns
[sw1-ip-pool-vlan30]dns-list 114.114.114.114
[sw1-ip-pool-vlan30]ex
[sw1-ip-pool-vlan30]excluded-ip-address 192.168.30.100 192.168.30.150
[sw1-ip-pool-vlan30]q
[sw1]int v
[sw1]int Vlanif 30
[sw1-Vlanif30]dhcp select global
[sw1-Vlanif30]q
[sw1]ip poo
[sw1]ip pool vlan
[sw1]ip pool vlan40
Info:It's successful to create an IP address pool.
[sw1-ip-pool-vlan40]network 192.168.40.0 mask 24
[sw1-ip-pool-vlan40]dns
[sw1-ip-pool-vlan40]dns-list 114.114.114.114
[sw1-ip-pool-vlan40]g
[sw1-ip-pool-vlan40]gateway-list 192.168.40.252
[sw1-ip-pool-vlan40]ex
[sw1-ip-pool-vlan40]excluded-ip-address 192.168.40.100 192.168.40.150
[sw1-ip-pool-vlan40]q
[sw1]int v
[sw1]int Vlanif 40
[sw1-Vlanif40]dhcp select global
[sw1-Vlanif40]q
[sw1]ip poo
[sw1]ip pool v
[sw1]ip pool vlan
[sw1]ip pool vlan50
Info:It's successful to create an IP address pool.
[sw1-ip-pool-vlan50]network 192.168.50.0 mask 24
[sw1-ip-pool-vlan50]g
[sw1-ip-pool-vlan50]gateway-list 192.168.50.252
[sw1-ip-pool-vlan50]dns
[sw1-ip-pool-vlan50]dns-list 114.114.114.114
[sw1-ip-pool-vlan50]ex
[sw1-ip-pool-vlan50]excluded-ip-address 192.168.50.100 192.168.50.150
[sw1-ip-pool-vlan50]q
[sw1]int v
252
[sw1-ip-pool-vlan60]dns
[sw1-ip-pool-vlan60]dns-list 114.114.114.114
[sw1-ip-pool-vlan60]ex
[sw1-ip-pool-vlan60]excluded-ip-address 192.168.60.100 192.168.60.150
[sw1-ip-pool-vlan60]q
[sw1]int v
[sw1]int Vlanif 60
[sw1-Vlanif60]dhcp select global
[sw1-Vlanif60]q
[sw1]Sw2dhcp配置：
The device is running!
<sw2>sys
Enter system view, return user view with Ctrl+Z.
[sw2]ip poo
[sw2]ip pool vlan
[sw2]ip pool vlan10
Info:It's successful to create an IP address pool.
[sw2-ip-pool-vlan10]network 192.168.10.0 mask 24
[sw2-ip-pool-vlan10]g
[sw2-ip-pool-vlan10]gateway-list 192.168.10.252
[sw2-ip-pool-vlan10]dns
[sw2-ip-pool-vlan10]dns-list 114.114.114.114
[sw2-ip-pool-vlan10]ex
[sw2-ip-pool-vlan10]excluded-ip-address 192.168.10.100 192.168.10.150
[sw2-ip-pool-vlan10]q
[sw2]int v
[sw2]int Vlanif 10
[sw2-Vlanif10]dhcp select global
Error: Please enable DHCP in the global view first.
[sw2-Vlanif10]q
[sw2]dh
[sw2]dhcp enn
[sw2]dhcp en
[sw2]int Vlanif 10
[sw2-Vlanif10]dhcp select global
[sw2-Vlanif10]q
[sw2]ip poo
[sw2]ip pool vlan
[sw2]ip pool vlan20
Info:It's successful to create an IP address pool.
[sw2-ip-pool-vlan20]network 192.168.20.0 mask 24
[sw2-ip-pool-vlan20]dns
[sw2-ip-pool-vlan20]dns-list 114.114.114.114
[sw2-ip-pool-vlan20]dns
[sw2-ip-pool-vlan20]dns-list 114.114.114.114
Error:Part of the domain-name-server IP has already exist.
[sw2-ip-pool-vlan20]dis
[sw2-ip-pool-vlan20]display th
[sw2-ip-pool-vlan20]display this
#
ip pool vlan20
network 192.168.20.0 mask 255.255.255.0
dns-list 114.114.114.114
#
return
[sw2-ip-pool-vlan20]g
[sw2-ip-pool-vlan20]gateway-list 192.168.20.252
[sw2-ip-pool-vlan20]ex
[sw2-ip-pool-vlan20]excluded-ip-address 192.168.20.100 192.168.20.150
[sw2-ip-pool-vlan20]q
[sw2]int v
[sw2]int Vlanif 20
[sw2-Vlanif20]dh
[sw2-Vlanif20]dhcp se
[sw2-Vlanif20]dhcp select g
[sw2-Vlanif20]dhcp select global
[sw2-Vlanif20]q
[sw2]ip poo
[sw2]ip pool v
[sw2]ip pool vlan30
Info:It's successful to create an IP address pool.
[sw2-ip-pool-vlan30]network 192.168.30.0 mask 24
[sw2-ip-pool-vlan30]dns
[sw2-ip-pool-vlan40]gateway-list 192.168.40.252
[sw2-ip-pool-vlan40]dns
[sw2-ip-pool-vlan40]dns-list 114.114.114.114
[sw2-ip-pool-vlan40]ex
[sw2-ip-pool-vlan40]excluded-ip-address 192.168.40.100 192.168.40.150
[sw2-ip-pool-vlan40]q
[sw2]int v
[sw2]int Vlanif 40
[sw2-Vlanif40]dhcp select global
[sw2-Vlanif40]q
[sw2]ip poo
[sw2]ip pool v
[sw2]ip pool vlan50
Info:It's successful to create an IP address pool.
[sw2-ip-pool-vlan50]netw
[sw2-ip-pool-vlan50]network 192.168.50.0ma
[sw2-ip-pool-vlan50]network 192.168.50.0 ma
[sw2-ip-pool-vlan50]network 192.168.50.0 mask 24
[sw2-ip-pool-vlan50]g
[sw2-ip-pool-vlan50]gateway-list 192.168.50.252
[sw2-ip-pool-vlan50]dns
[sw2-ip-pool-vlan50]dns-list 114.114.114.114.
^
Error: Wrong parameter found at '^' position.
[sw2-ip-pool-vlan50]dns-list 114.114.114.114
[sw2-ip-pool-vlan50]ex
[sw2-ip-pool-vlan50]excluded-ip-address 192.168.50.100 192.168.50.150
[sw2-ip-pool-vlan50]q
[sw2]int v
[sw2]int Vlanif 50
[sw2-Vlanif50]dh
[sw2-Vlanif50]dhcp se
[sw2-Vlanif50]dhcp select g
[sw2-Vlanif50]dhcp select global
[sw2-Vlanif60]dh
[sw2-Vlanif60]dhcp se
[sw2-Vlanif60]dhcp select g
[sw2-Vlanif60]dhcp select global
[sw2-Vlanif60]q
[sw2]
Telnet远程控制：
R2:
[R2]int v
[R2]int vt
[R2]us
[R2]user-i
[R2]user-interface v
[R2]user-interface vty 0 4(进入vty模式）
[R2-ui-vty0-4]au
[R2-ui-vty0-4]authentication-mode pa
[R2-ui-vty0-4]authentication-mode password （进入配置密码）
Please configure the login password (maximum length 16):wanglong
[R2-ui-vty0-4]us
[R2-ui-vty0-4]user l
[R2-ui-vty0-4]user le
[R2-ui-vty0-4]user pr
[R2-ui-vty0-4]user privilege l
[R2-ui-vty0-4]user privilege level 3（设置权限）
[R2-ui-vty0-4]
[R2-ui-vty0-4]
R1:结果：
R1：
[R1]us
[R1]user-in
[R1]user-interface v
[R1]user-interface vty 0 4
[R1-ui-vty0-4]au
[R1-ui-vty0-4]authentication-mode pa
[R1-ui-vty0-4]authentication-mode password si
[R1-ui-vty0-4]authentication-mode password s
[R1-ui-vty0-4]authentication-mode password
Please configure the login password (maximum length 16):wanglong
[R1-ui-vty0-4]us
[R1-ui-vty0-4]user p
[R1-ui-vty0-4]user privilege l
[R1-ui-vty0-4]user privilege level 3
[R1-ui-vty0-4]q
[R1]
Sw14:
<Huawei>
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]int g
[Huawei]int GigabitEthernet 0/0/1
[Huawei-GigabitEthernet0/0/1]dis
[Huawei-GigabitEthernet0/0/1]display th
[Huawei-GigabitEthernet0/0/1]display this
#
interface GigabitEthernet0/0/1
#
return
[Huawei-GigabitEthernet0/0/1]q
[Huawei]po
[Huawei]port lin
[Huawei]int g
rds is 4095.
[Huawei-Vlanif10]q
[Huawei]user-interface vty 0 4
[Huawei-ui-vty0-4]authentication-mode password
[Huawei-ui-vty0-4]set authentication password simple wanglong
[Huawei-ui-vty0-4]q
[Huawei]
May 17 2022 16:17:12-08:00 Huawei DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5
.25.191.3.1 configurations have been changed. The current change number is 8, th
e change loop count is 0, and the maximum number of records is 4095.
[Huawei]
测试结果都没有问题主要实现了远程控制，动态路由，DHCP，无线，防火墙，服务器集群的配置，网络规划，服务器的配置和设置后续发，有问题或者想要拓扑图的留邮箱就行，本人也才大学，不太会写，想讨论的可以说，也可以留下问题。