Huawei Switching Devices-Enterprise Network Redundancy Design-Configuration

Step 1 Vlan, Trunk, Eth-Trunk configuration

Step 2 MSTP configuration

Step 3 VRRP configuration

Step 4 BFD and VRRP linkage configuration

Step 5 ospf configuration

Step 6 DHCP relay configuration

Step 7 Telnet remote configuration

Huawei, H3C, and Cisco simulators will be shared with everyone so that everyone can learn together.

Link: https://pan.baidu.com/s/1M4HJeOoCJfbaN7eem5PogA

Extraction code: faty

All network devices are fully configured:

HX_SW1 complete configuration :

<HX_SW1>sys

Enter system view, return user view with Ctrl+Z.

[HX_SW1]dis with

#

sysname HX_SW1

#

undo info-center enable

#

vlan batch 10 20 30 40 50 200 800

#

stp instance 1 root primary

stp instance 2 root secondary

#

cluster enable

ntdp enable

ndp enable

#

undo nap slave enable

#

drop illegal-mac alarm

#

dhcp enable

#

diffserv domain default

#

stp region-configuration

 region-name faty

 revision-level 1

 instance 1 vlan 10 20 50

 instance 2 vlan 30 40

 active region-configuration

#

bfd

#

drop-profile default

#

aaa

 authentication-scheme default

 authorization-scheme default

 accounting-scheme default

 domain default

 domain default_admin

 local-user admin password cipher %O'KCYR90a)NZPO3JBXBHA!!

 local-user admin privilege level 15

 local-user admin service-type telnet

#

interface Vlanif1

#

interface Vlanif10

 ip address 192.168.10.253 255.255.255.0

 vrrp vrid 10 virtual-ip 192.168.10.1

 vrrp vrid 10 priority 120

 vrrp vrid 10 track interface GigabitEthernet0/0/3

 vrrp vrid 10 track bfd-session session-name 1

 dhcp select relay

 dhcp relay server-ip 192.168.50.100

#

interface Vlanif20

 ip address 192.168.20.253 255.255.255.0

 vrrp vrid 20 virtual-ip 192.168.20.1

 vrrp vrid 20 priority 120

 vrrp vrid 20 track interface GigabitEthernet0/0/3

 vrrp vrid 20 track bfd-session session-name 1

 dhcp select relay

 dhcp relay server-ip 192.168.50.100

#

interface Vlanif30

 ip address 192.168.30.253 255.255.255.0

 vrrp vrid 30 virtual-ip 192.168.30.1

 dhcp select relay

 dhcp relay server-ip 192.168.50.100

#

interface Vlanif40

 ip address 192.168.40.253 255.255.255.0

 vrrp vrid 40 virtual-ip 192.168.40.1

 dhcp select relay

 dhcp relay server-ip 192.168.50.100

#

interface Vlanif50

 ip address 192.168.50.253 255.255.255.0

 vrrp vrid 50 virtual-ip 192.168.50.1

 vrrp vrid 50 priority 120

 vrrp vrid 50 track interface GigabitEthernet0/0/2

 vrrp vrid 50 track bfd-session session-name 1

 dhcp select relay

 dhcp relay server-ip 192.168.50.100

#

interface Vlanif200

 ip address 192.168.200.253 255.255.255.0

#

interface Vlanif800

 ip address 192.168.12.2 255.255.255.0

#

interface MEth0/0/1

#

interface Eth-Trunk2

 port link-type trunk

 port trunk allow-pass vlan 2 to 4094

 mode lacp-static

#

interface GigabitEthernet0/0/1

 port link-type access

 port default vlan 800

#

interface GigabitEthernet0/0/2

 port link-type trunk

 port trunk allow-pass vlan 50 200

#

interface GigabitEthernet0/0/3

 port link-type trunk

 port trunk allow-pass vlan 10 20 200

#

interface GigabitEthernet0/0/4

 port link-type trunk

 port trunk allow-pass vlan 30 40 200

#

interface GigabitEthernet0/0/5

 eth-trunk 2

#

interface GigabitEthernet0/0/6

 eth-trunk 2

#

interface GigabitEthernet0/0/7

#

interface GigabitEthernet0/0/8

#

interface GigabitEthernet0/0/9

#

interface GigabitEthernet0/0/10

#

interface GigabitEthernet0/0/11

#

interface GigabitEthernet0/0/12

#

interface GigabitEthernet0/0/13

#

interface GigabitEthernet0/0/14

#

interface GigabitEthernet0/0/15

#

interface GigabitEthernet0/0/16

#

interface GigabitEthernet0/0/17

#

interface GigabitEthernet0/0/18

#

interface GigabitEthernet0/0/19

#

interface GigabitEthernet0/0/20

#

interface GigabitEthernet0/0/21

#

interface GigabitEthernet0/0/22

#

interface GigabitEthernet0/0/23

#

interface GigabitEthernet0/0/24

#

interface NULL0

#

bfd 1 bind peer-ip 192.168.12.1 source-ip 192.168.12.2 auto

 commit

#

ospf 1

 area 0.0.0.0

  network 192.168.10.0 0.0.0.255

  network 192.168.20.0 0.0.0.255

  network 192.168.30.0 0.0.0.255

  network 192.168.40.0 0.0.0.255

  network 192.168.50.0 0.0.0.255

  network 192.168.12.0 0.0.0.255

  network 192.168.200.0 0.0.0.255

#

user-interface con 0

user-interface vty 0 4

 authentication-mode aaa

 user privilege level 15

#

Return

HX_SW2 complete configuration

<HX_SW2>system-view

Enter system view, return user view with Ctrl+Z.

[HX_SW2]dis with

#

sysname HX_SW2

#

undo info-center enable

#

vlan batch 10 20 30 40 50 200 801

#

stp instance 1 root secondary

stp instance 2 root primary

#

cluster enable

ntdp enable

ndp enable

#

undo nap slave enable

#

drop illegal-mac alarm

#

dhcp enable

#

diffserv domain default

#

stp region-configuration

 region-name faty

 revision-level 1

 instance 1 vlan 10 20 50

 instance 2 vlan 30 40

 active region-configuration

#

bfd

#

drop-profile default

#

aaa

 authentication-scheme default

 authorization-scheme default

 accounting-scheme default

 domain default

 domain default_admin

 local-user admin password cipher %O'KCYR90a)NZPO3JBXBHA!!

 local-user admin privilege level 15

 local-user admin service-type telnet

#

interface Vlanif1

#

interface Vlanif10

 ip address 192.168.10.254 255.255.255.0

 vrrp vrid 10 virtual-ip 192.168.10.1

 dhcp select relay

 dhcp relay server-ip 192.168.50.100

#

interface Vlanif20

 ip address 192.168.20.254 255.255.255.0

 vrrp vrid 20 virtual-ip 192.168.20.1

 dhcp select relay

 dhcp relay server-ip 192.168.50.100

#

interface Vlanif30

 ip address 192.168.30.254 255.255.255.0

 vrrp vrid 30 virtual-ip 192.168.30.1

 vrrp vrid 30 priority 120

 vrrp vrid 30 track interface GigabitEthernet0/0/4

 vrrp vrid 30 track bfd-session session-name 2

 dhcp select relay

 dhcp relay server-ip 192.168.50.100

#

interface Vlanif40

 ip address 192.168.40.254 255.255.255.0

 vrrp vrid 40 virtual-ip 192.168.40.1

 vrrp vrid 40 priority 120

 vrrp vrid 40 track interface GigabitEthernet0/0/4

 vrrp vrid 40 track bfd-session session-name 2

 dhcp select relay

 dhcp relay server-ip 192.168.50.100

#

interface Vlanif50

 ip address 192.168.50.254 255.255.255.0

 vrrp vrid 50 virtual-ip 192.168.50.1

 dhcp select relay

 dhcp relay server-ip 192.168.50.100

#

interface Vlanif200

 ip address 192.168.200.254 255.255.255.0

#

interface Vlanif801

 ip address 192.168.23.2 255.255.255.0

#

interface MEth0/0/1

#

interface Eth-Trunk2

 port link-type trunk

 port trunk allow-pass vlan 2 to 4094

 mode lacp-static

#

interface GigabitEthernet0/0/1

 port link-type trunk

 port trunk allow-pass vlan 50 200

#

interface GigabitEthernet0/0/2

 port link-type access

 port default vlan 801

#

interface GigabitEthernet0/0/3

 port link-type trunk

 port trunk allow-pass vlan 10 20 200

#

interface GigabitEthernet0/0/4

 port link-type trunk

 port trunk allow-pass vlan 2 to 4094

#

interface GigabitEthernet0/0/5

 eth-trunk 2

#

interface GigabitEthernet0/0/6

 eth-trunk 2

#

interface GigabitEthernet0/0/7

#

interface GigabitEthernet0/0/8

#

interface GigabitEthernet0/0/9

#

interface GigabitEthernet0/0/10

#

interface GigabitEthernet0/0/11

#

interface GigabitEthernet0/0/12

#

interface GigabitEthernet0/0/13

#

interface GigabitEthernet0/0/14

#

interface GigabitEthernet0/0/15

#

interface GigabitEthernet0/0/16

#

interface GigabitEthernet0/0/17

#

interface GigabitEthernet0/0/18

#

interface GigabitEthernet0/0/19

#

interface GigabitEthernet0/0/20

#

interface GigabitEthernet0/0/21

#

interface GigabitEthernet0/0/22

#

interface GigabitEthernet0/0/23

#

interface GigabitEthernet0/0/24

#

interface NULL0

#

bfd 2 bind peer-ip 192.168.23.1 source-ip 192.168.23.2 auto

 commit

#

ospf 1

 area 0.0.0.0

  network 192.168.10.0 0.0.0.255

  network 192.168.20.0 0.0.0.255

  network 192.168.30.0 0.0.0.255

  network 192.168.40.0 0.0.0.255

  network 192.168.50.0 0.0.0.255

  network 192.168.23.0 0.0.0.255

  network 192.168.200.0 0.0.0.255

#

user-interface con 0

user-interface vty 0 4

 authentication-mode aaa

 user privilege level 15

#

Return

HJ_SW3 configuration :

<HJ_SW3>system-view

Enter system view, return user view with Ctrl+Z.

[HJ_SW3]dis with

#

sysname HJ_SW3

#

undo info-center enable

#

vlan batch 10 20 30 40 50 200

#

cluster enable

ntdp enable

ndp enable

#

undo nap slave enable

#

drop illegal-mac alarm

#

diffserv domain default

#

stp region-configuration

 region-name faty

 revision-level 1

 instance 1 vlan 10 20 50

 instance 2 vlan 30 40

 active region-configuration

#

drop-profile default

#

aaa

 authentication-scheme default

 authorization-scheme default

 accounting-scheme default

 domain default

 domain default_admin

 local-user admin password cipher %O'KCYR90a)NZPO3JBXBHA!!

 local-user admin privilege level 15

 local-user admin service-type telnet

#

interface Vlanif1

#

interface Vlanif200

 ip address 192.168.200.30 255.255.255.0

#

interface MEth0/0/1

#

interface Eth-Trunk1

 port link-type trunk

 port trunk allow-pass vlan 20 200

 mode lacp-static

#

interface GigabitEthernet0/0/1

 port link-type trunk

 port trunk allow-pass vlan 10 200

#

interface GigabitEthernet0/0/2

 eth-trunk 1

#

interface GigabitEthernet0/0/3

 port link-type trunk

 undo port trunk allow-pass vlan 1

 port trunk allow-pass vlan 10 20 200

#

interface GigabitEthernet0/0/4

 port link-type trunk

 undo port trunk allow-pass vlan 1

 port trunk allow-pass vlan 10 20 200

#

interface GigabitEthernet0/0/5

 eth-trunk 1

#

interface GigabitEthernet0/0/6

#

interface GigabitEthernet0/0/7

#

interface GigabitEthernet0/0/8

#

interface GigabitEthernet0/0/9

#

interface GigabitEthernet0/0/10

#

interface GigabitEthernet0/0/11

#

interface GigabitEthernet0/0/12

#

interface GigabitEthernet0/0/13

#

interface GigabitEthernet0/0/14

#

interface GigabitEthernet0/0/15

#

interface GigabitEthernet0/0/16

#

interface GigabitEthernet0/0/17

#

interface GigabitEthernet0/0/18

#

interface GigabitEthernet0/0/19

#

interface GigabitEthernet0/0/20

#

interface GigabitEthernet0/0/21

#

interface GigabitEthernet0/0/22

#

interface GigabitEthernet0/0/23

#

interface GigabitEthernet0/0/24

#

interface NULL0

#

user-interface con 0

user-interface vty 0 4

 authentication-mode aaa

 user privilege level 15

#

Return

HJ_SW4 configuration

<HJ_SW4>system-view

Enter system view, return user view with Ctrl+Z.

[HJ_SW4]dis with

#

sysname HJ_SW4

#

undo info-center enable

#

vlan batch 10 20 30 40 50 200

#

cluster enable

ntdp enable

ndp enable

#

undo nap slave enable

#

drop illegal-mac alarm

#

diffserv domain default

#

stp region-configuration

 region-name faty

 revision-level 1

 instance 1 vlan 10 20 50

 instance 2 vlan 30 40

 active region-configuration

#

drop-profile default

#

aaa

 authentication-scheme default

 authorization-scheme default

 accounting-scheme default

 domain default

 domain default_admin

 local-user admin password cipher %O'KCYR90a)NZPO3JBXBHA!!

 local-user admin privilege level 15

 local-user admin service-type telnet

#

interface Vlanif1

#

interface Vlanif200

 ip address 192.168.200.40 255.255.255.0

#

interface MEth0/0/1

#

interface GigabitEthernet0/0/1

 port link-type trunk

 port trunk allow-pass vlan 30 200

#

interface GigabitEthernet0/0/2

 port link-type trunk

 port trunk allow-pass vlan 40 200

#

interface GigabitEthernet0/0/3

 port link-type trunk

 port trunk allow-pass vlan 30 40 200

#

interface GigabitEthernet0/0/4

 port link-type trunk

 port trunk allow-pass vlan 30 40 200

#

interface GigabitEthernet0/0/5

#

interface GigabitEthernet0/0/6

#

interface GigabitEthernet0/0/7

#

interface GigabitEthernet0/0/8

#

interface GigabitEthernet0/0/9

#

interface GigabitEthernet0/0/10

#

interface GigabitEthernet0/0/11

#

interface GigabitEthernet0/0/12

#

interface GigabitEthernet0/0/13

#

interface GigabitEthernet0/0/14

#

interface GigabitEthernet0/0/15

#

interface GigabitEthernet0/0/16

#

interface GigabitEthernet0/0/17

#

interface GigabitEthernet0/0/18

#

interface GigabitEthernet0/0/19

#

interface GigabitEthernet0/0/20

#

interface GigabitEthernet0/0/21

#

interface GigabitEthernet0/0/22

#

interface GigabitEthernet0/0/23

#

interface GigabitEthernet0/0/24

#

interface NULL0

#

user-interface con 0

user-interface vty 0 4

 authentication-mode aaa

 user privilege level 15

#

Return

JR_SW5 configuration:

<JR_SW5>sys

Enter system view, return user view with Ctrl+Z.

[JR_SW5]dis with

#

sysname JR_SW5

#

undo info-center enable

#

vlan batch 10 20 30 40 50 200

#

cluster enable

ntdp enable

ndp enable

#

undo nap slave enable

#

drop illegal-mac alarm

#

diffserv domain default

#

drop-profile default

#

aaa

 authentication-scheme default

 authorization-scheme default

 accounting-scheme default

 domain default

 domain default_admin

 local-user admin password cipher %O'KCYR90a)NZPO3JBXBHA!!

 local-user admin privilege level 15

 local-user admin service-type telnet

#

interface Vlanif1

#

interface Vlanif200

 ip address 192.168.200.50 255.255.255.0

#

interface MEth0/0/1

#

interface Ethernet0/0/1

 port link-type trunk

 port trunk allow-pass vlan 10 200

#

interface Ethernet0/0/2

 port link-type access

 port default vlan 10

#

interface Ethernet0/0/3

#

interface Ethernet0/0/4

#

interface Ethernet0/0/5

#

interface Ethernet0/0/6

#

interface Ethernet0/0/7

#

interface Ethernet0/0/8

#

interface Ethernet0/0/9

#

interface Ethernet0/0/10

#

interface Ethernet0/0/11

#

interface Ethernet0/0/12

#

interface Ethernet0/0/13

#

interface Ethernet0/0/14

#

interface Ethernet0/0/15

#

interface Ethernet0/0/16

#

interface Ethernet0/0/17

#

interface Ethernet0/0/18

#

interface Ethernet0/0/19

#

interface Ethernet0/0/20

#

interface Ethernet0/0/21

#

interface Ethernet0/0/22

#

interface GigabitEthernet0/0/1

#

interface GigabitEthernet0/0/2

#

interface NULL0

#

user-interface con 0

user-interface vty 0 4

 authentication-mode aaa

 user privilege level 15

#

Return

JR_SW6 configuration

<JR_SW6>system-view

Enter system view, return user view with Ctrl+Z.

[JR_SW6]dis with

#

sysname JR_SW6

#

undo info-center enable

#

vlan batch 10 20 30 40 50 200

#

cluster enable

ntdp enable

ndp enable

#

undo nap slave enable

#

drop illegal-mac alarm

#

diffserv domain default

#

drop-profile default

#

aaa

 authentication-scheme default

 authorization-scheme default

 accounting-scheme default

 domain default

 domain default_admin

 local-user admin password cipher %O'KCYR90a)NZPO3JBXBHA!!

 local-user admin privilege level 15

 local-user admin service-type telnet

#

interface Vlanif1

#

interface Vlanif200

 ip address 192.168.200.60 255.255.255.0

#

interface MEth0/0/1

#

interface Eth-Trunk1

 port link-type trunk

 port trunk allow-pass vlan 20 200

 mode lacp-static

#

interface Ethernet0/0/1

 port link-type access

 port default vlan 20

#

interface Ethernet0/0/2

 eth-trunk 1

#

interface Ethernet0/0/3

 eth-trunk 1

#

interface Ethernet0/0/4

#

interface Ethernet0/0/5

#

interface Ethernet0/0/6

#

interface Ethernet0/0/7

#

interface Ethernet0/0/8

#

interface Ethernet0/0/9

#

interface Ethernet0/0/10

#

interface Ethernet0/0/11

#

interface Ethernet0/0/12

#

interface Ethernet0/0/13

#

interface Ethernet0/0/14

#

interface Ethernet0/0/15

#

interface Ethernet0/0/16

#

interface Ethernet0/0/17

#

interface Ethernet0/0/18

#

interface Ethernet0/0/19

#

interface Ethernet0/0/20

#

interface Ethernet0/0/21

#

interface Ethernet0/0/22

#

interface GigabitEthernet0/0/1

#

interface GigabitEthernet0/0/2

#

interface NULL0

#

user-interface con 0

user-interface vty 0 4

 authentication-mode aaa

 user privilege level 15

#

Return

JR_SW7 configuration:

<JR_SW7>system-view

Enter system view, return user view with Ctrl+Z.

[JR_SW7]this cu

#

sysname JR_SW7

#

undo info-center enable

#

vlan batch 10 20 30 40 50 200

#

cluster enable

ntdp enable

ndp enable

#

undo nap slave enable

#

drop illegal-mac alarm

#

diffserv domain default

#

drop-profile default

#

aaa

 authentication-scheme default

 authorization-scheme default

 accounting-scheme default

 domain default

 domain default_admin

 local-user admin password cipher %O'KCYR90a)NZPO3JBXBHA!!

 local-user admin privilege level 15

 local-user admin service-type telnet

#

interface Vlanif1

#

interface Vlanif200

 ip address 192.168.200.70 255.255.255.0

#

interface MEth0/0/1

#

interface Ethernet0/0/1

 port link-type trunk

 port trunk allow-pass vlan 30 200

#

interface Ethernet0/0/2

 port link-type access

 port default vlan 30

#

interface Ethernet0/0/3

#

interface Ethernet0/0/4

#

interface Ethernet0/0/5

#

interface Ethernet0/0/6

#

interface Ethernet0/0/7

#

interface Ethernet0/0/8

#

interface Ethernet0/0/9

#

interface Ethernet0/0/10

#

interface Ethernet0/0/11

#

interface Ethernet0/0/12

#

interface Ethernet0/0/13

#

interface Ethernet0/0/14

#

interface Ethernet0/0/15

#

interface Ethernet0/0/16

#

interface Ethernet0/0/17

#

interface Ethernet0/0/18

#

interface Ethernet0/0/19

#

interface Ethernet0/0/20

#

interface Ethernet0/0/21

#

interface Ethernet0/0/22

#

interface GigabitEthernet0/0/1

#

interface GigabitEthernet0/0/2

#

interface NULL0

#

user-interface con 0

user-interface vty 0 4

 authentication-mode aaa

 user privilege level 15

#

Return

JR_SW8 configuration :

<JR_SW8>system-view

Enter system view, return user view with Ctrl+Z.

[JR_SW8]dis with

#

sysname JR_SW8

#

undo info-center enable

#

vlan batch 10 20 30 40 50 200

#

cluster enable

ntdp enable

ndp enable

#

undo nap slave enable

#

drop illegal-mac alarm

#

diffserv domain default

#

drop-profile default

#

aaa

 authentication-scheme default

 authorization-scheme default

 accounting-scheme default

 domain default

 domain default_admin

 local-user admin password cipher %O'KCYR90a)NZPO3JBXBHA!!

 local-user admin privilege level 15

 local-user admin service-type telnet

#

interface Vlanif1

#

interface Vlanif200

 ip address 192.168.200.80 255.255.255.0

#

interface MEth0/0/1

#

interface Ethernet0/0/1

 port link-type access

 port default vlan 40

#

interface Ethernet0/0/2

 port link-type trunk

 port trunk allow-pass vlan 40 200

#

interface Ethernet0/0/3

#

interface Ethernet0/0/4

#

interface Ethernet0/0/5

#

interface Ethernet0/0/6

#

interface Ethernet0/0/7

#

interface Ethernet0/0/8

#

interface Ethernet0/0/9

#

interface Ethernet0/0/10

#

interface Ethernet0/0/11

#

interface Ethernet0/0/12

#

interface Ethernet0/0/13

#

interface Ethernet0/0/14

#

interface Ethernet0/0/15

#

interface Ethernet0/0/16

#

interface Ethernet0/0/17

#

interface Ethernet0/0/18

#

interface Ethernet0/0/19

#

interface Ethernet0/0/20

#

interface Ethernet0/0/21

#

interface Ethernet0/0/22

#

interface GigabitEthernet0/0/1

#

interface GigabitEthernet0/0/2

#

interface NULL0

#

user-interface con 0

user-interface vty 0 4

 authentication-mode aaa

 user privilege level 15

#

Return

JR_SW9 configuration:

<JR_SW9>system-view

Enter system view, return user view with Ctrl+Z.

[JR_SW9]dis cu

#

sysname JR_SW9

#

undo info-center enable

#

vlan batch 10 20 30 40 50 200

#

cluster enable

ntdp enable

ndp enable

#

undo nap slave enable

#

drop illegal-mac alarm

#

diffserv domain default

#

stp region-configuration

 region-name faty

 revision-level 1

 instance 1 vlan 10 20 50

 instance 2 vlan 30 40

 active region-configuration

#

drop-profile default

#

aaa

 authentication-scheme default

 authorization-scheme default

 accounting-scheme default

 domain default

 domain default_admin

 local-user admin password cipher %O'KCYR90a)NZPO3JBXBHA!!

 local-user admin privilege level 15

 local-user admin service-type telnet

#

interface Vlanif1

#

interface Vlanif200

 ip address 192.168.200.90 255.255.255.0

#

interface MEth0/0/1

#

interface GigabitEthernet0/0/1

 port link-type trunk

 port trunk allow-pass vlan 50 200

#

interface GigabitEthernet0/0/2

 port link-type trunk

 port trunk allow-pass vlan 50 200

#

interface GigabitEthernet0/0/3

 port link-type access

 port default vlan 50

#

interface GigabitEthernet0/0/4

 port link-type access

 port default vlan 50

#

interface GigabitEthernet0/0/5

#

interface GigabitEthernet0/0/6

#

interface GigabitEthernet0/0/7

#

interface GigabitEthernet0/0/8

#

interface GigabitEthernet0/0/9

#

interface GigabitEthernet0/0/10

#

interface GigabitEthernet0/0/11

#

interface GigabitEthernet0/0/12

#

interface GigabitEthernet0/0/13

#

interface GigabitEthernet0/0/14

#

interface GigabitEthernet0/0/15

#

interface GigabitEthernet0/0/16

#

interface GigabitEthernet0/0/17

#

interface GigabitEthernet0/0/18

#

interface GigabitEthernet0/0/19

#

interface GigabitEthernet0/0/20

#

interface GigabitEthernet0/0/21

#

interface GigabitEthernet0/0/22

#

interface GigabitEthernet0/0/23

#

interface GigabitEthernet0/0/24

#

interface NULL0

#

user-interface con 0

user-interface vty 0 4

 authentication-mode aaa

 user privilege level 15

#

return

AR1 configuration:

<AR1>system-view

Enter system view, return user view with Ctrl+Z.

[AR1]dis with

[V200R003C00]

#

 sysname AR1

#

 snmp-agent local-engineid 800007DB03000000000000

 snmp-agent

#

 clock timezone China-Standard-Time minus 08:00:00

#

portal local-server load flash:/portalpage.zip

#

 drop illegal-mac alarm

#

 wlan ac-global carrier id other ac id 0

#

 set cpu-usage threshold 80 restore 75

#

bfd

#

aaa

 authentication-scheme default

 authorization-scheme default

 accounting-scheme default

 domain default

 domain default_admin

 local-user admin password cipher %$%$e\fH=U&3QV<Ou`NLv":&3Ff`%$%$

 local-user admin privilege level 15

 local-user admin service-type telnet

#

firewall zone Local

 priority 15

#

interface GigabitEthernet0/0/0

 ip address 14.1.1.1 255.255.255.0

#

interface GigabitEthernet0/0/1

 ip address 192.168.12.1 255.255.255.0

#

interface GigabitEthernet0/0/2

 ip address 192.168.23.1 255.255.255.0

#

interface NULL0

#

bfd 1 bind peer-ip 192.168.12.2 source-ip 192.168.12.1 auto

 commit

#

bfd 2 bind peer-ip 192.168.23.2 source-ip 192.168.23.1 auto

 commit

#

ospf 1

 area 0.0.0.0

  network 14.1.1.0 0.0.0.255

  network 192.168.12.0 0.0.0.255

  network 192.168.23.0 0.0.0.255

#

user-interface con 0

 authentication-mode password

user-interface vty 0 4

 authentication-mode aaa

 user privilege level 15

user-interface vty 16 20

#

wool and

#

Return

DHCP(AR2) configuration:

<dhcp>system-view

Enter system view, return user view with Ctrl+Z.

[dhcp]dis with

[V200R003C00]

#

 sysname dhcp

#

 snmp-agent local-engineid 800007DB03000000000000

 snmp-agent

#

 clock timezone China-Standard-Time minus 08:00:00

#

portal local-server load flash:/portalpage.zip

#

 drop illegal-mac alarm

#

 wlan ac-global carrier id other ac id 0

#

 set cpu-usage threshold 80 restore 75

#

dhcp enable

#

ip pool vlan10

 gateway-list 192.168.10.1

 network 192.168.10.0 mask 255.255.255.0

 excluded-ip-address 192.168.10.250 192.168.10.254

 lease day 0 hour 8 minute 0

 dns-list 114.114.114.114

#

ip pool vlan20

 gateway-list 192.168.20.1

 network 192.168.20.0 mask 255.255.255.0

 excluded-ip-address 192.168.20.250 192.168.20.254

 lease day 0 hour 8 minute 0

 dns-list 114.114.114.114

#

ip pool vlan30

 gateway-list 192.168.30.1

 network 192.168.30.0 mask 255.255.255.0

 excluded-ip-address 192.168.30.250 192.168.30.254

 lease day 0 hour 8 minute 0

 dns-list 114.114.114.114

#

ip pool vlan40

 gateway-list 192.168.40.1

 network 192.168.40.0 mask 255.255.255.0

 excluded-ip-address 192.168.40.250 192.168.40.254

 lease day 0 hour 8 minute 0

 dns-list 114.114.114.114

#

ip pool vlan50

 gateway-list 192.168.50.1

 network 192.168.50.0 mask 255.255.255.0

 excluded-ip-address 192.168.50.250 192.168.50.254

 lease day 0 hour 8 minute 0

 dns-list 114.114.114.114

#

aaa

 authentication-scheme default

 authorization-scheme default

 accounting-scheme default

 domain default

 domain default_admin

 local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$

 local-user admin service-type http

#

firewall zone Local

 priority 15

#

interface GigabitEthernet0/0/0

 ip address 192.168.50.100 255.255.255.0

 dhcp select global

#

interface GigabitEthernet0/0/1

#

interface GigabitEthernet0/0/2

#

interface NULL0

#

ip route-static 0.0.0.0 0.0.0.0 192.168.50.1

#

user-interface con 0

 authentication-mode password

user-interface vty 0 4

user-interface vty 16 20

#

wool and

#

Return

Branch AR3 configuration:

<FZ_R3>system-view

Enter system view, return user view with Ctrl+Z.

[FZ_R3]dis with

[V200R003C00]

#

 sysname FZ_R3

#

 snmp-agent local-engineid 800007DB03000000000000

 snmp-agent

#

 clock timezone China-Standard-Time minus 08:00:00

#

portal local-server load flash:/portalpage.zip

#

 drop illegal-mac alarm

#

 wlan ac-global carrier id other ac id 0

#

 set cpu-usage threshold 80 restore 75

#

aaa

 authentication-scheme default

 authorization-scheme default

 accounting-scheme default

 domain default

 domain default_admin

 local-user admin password cipher %$%$VmgH6,xbBEUDo(O6j]=/3FF[%$%$

 local-user admin privilege level 15

 local-user admin service-type telnet

#

firewall zone Local

 priority 15

#

interface GigabitEthernet0/0/0

 ip address 14.1.1.2 255.255.255.0

#

interface GigabitEthernet0/0/1

 ip address 192.168.100.1 255.255.255.0

#

interface GigabitEthernet0/0/2

#

interface NULL0

#

ospf 1

 area 0.0.0.0

  network 14.1.1.0 0.0.0.255

  network 192.168.100.0 0.0.0.255

#

user-interface con 0

 authentication-mode password

user-interface vty 0 4

 authentication-mode aaa

 user privilege level 15

user-interface vty 16 20

#

wool and

#

return

Guess you like

Origin blog.csdn.net/qq_42966610/article/details/130102087