项目要求如下：1. Shown in FIG blue region at the enterprise network, the red region of the provider network;
2. run MSTP, VLAN 10 and vlan 20 such that traffic load balancing;
3.SW1 is a master gateway vlan 10, SW1, on to vlan backup gateway 20;
4.SW2 vlan master gateway 20 is, SW2 is vlan backup gateway 10;
5.DHCP server vlan 66, gateway SW2 above;
6. intranet or static routing protocol running the OSPF routing protocol ;
7.PC1, PC2 and automatically obtain ip address can ping each other with PC3.
项目拓扑图如下：
第一步：配置基本网络；SW1配置
sysname SW1
vlan batch 10 20 30 40 66
interface GigabitEthernet 0/0/1
port link-type trunk
port trunk allow-pass vlan all
interface GigabitEthernet 0/0/2
port link-type trunk
port trunk allow-pass vlan all
interface GigabitEthernet 0/0/3
port link-type access
port default vlan 30
interface Vlanif 30
ip address 192.168.30.2 24
SW2配置
sysname SW2
vlan batch 10 20 30 40 66
interface GigabitEthernet 0/0/1
port link-type trunk
port trunk allow-pass vlan all
interface GigabitEthernet 0/0/2
port link-type trunk
port trunk allow-pass vlan all
port link-type access
port default vlan 40
interface GigabitEthernet 0/0/3
port link-type access
port default vlan 66
interface GigabitEthernet 0/0/4
port link-type access
port default vlan 40
interface Vlanif 40
ip address 192.168.40.2 24
SW3配置
sysname SW3
vlan batch 10 20
interface Ethernet0/0/1
port link-type trunk
port trunk allow-pass vlan all
interface Ethernet0/0/2
port link-type trunk
port trunk allow-pass vlan all
interface Ethernet0/0/3
port link-type access
port default vlan 10
interface Ethernet0/0/4
port link-type access
port default vlan 20
R1配置
sysname R1
interface g0/0/0
ip address 192.168.30.1 24
interface g0/0/1
ip address 192.168.40.1 24
interface g0/0/2
ip address 100.1.1.2 24
quit
R2配置
sysname R2
interface g0/0/0
ip address 100.1.1.1 24
interface g0/0/1
ip address 200.1.1.254 24
quit
第二步：配置MSTP;配置STP命令
SW1
stp region-configuration
region-name ntd
instance 10 vlan 10
instance 20 vlan 20
active region-configuration
quit
stp instance 10 priority 4096
stp instance 20 priority 8192
SW2
stp region-configuration
region-name ntd
instance 10 vlan 10
instance 20 vlan 20
active region-configuration
quit
stp instance 10 priority 8192
stp instance 20 priority 4096
SW3
stp region-configuration
region-name ntd
instance 10 vlan 10
instance 20 vlan 20
active region-configuration
quit
第三步：配置VRRP；配置VRRP命令
SW1
interface Vlanif10
ip address 192.168.10.251 255.255.255.0
vrrp vrid 10 virtual-ip 192.168.10.250
vrrp vrid 10 priority 200
interface Vlanif20
ip address 192.168.20.251 255.255.255.0
vrrp vrid 10 virtual-ip 192.168.20.250
interface Vlanif66
ip address 192.168.66.251 255.255.255.0
SW2
interface Vlanif10
ip address 192.168.10.252 255.255.255.0
vrrp vrid 10 virtual-ip 192.168.10.250
interface Vlanif20
ip address 192.168.20.252 255.255.255.0
vrrp vrid 20 virtual-ip 192.168.20.250
vrrp vrid 10 priority 200
interface Vlanif66
ip address 192.168.66.252 255.255.255.0
第四步：配置DHCP;配置DHCP命令
SW1
dhcp enable
interface Vlanif 10
dhcp select relay
dhcp relay server-ip 192.168.66.250
interface Vlanif 20
dhcp select relay
dhcp relay server-ip 192.168.66.250
SW2
dhcp enable
interface Vlanif 10
dhcp select relay
dhcp relay server-ip 192.168.66.250
interface Vlanif 20
dhcp select relay
dhcp relay server-ip 192.168.66.250
DHCP
sysname DHCP
dhcp enable
interface g0/0/0
ip address 192.168.66.250 24
dhcp select global
quit
ip pool p1
gateway-list 192.168.10.250
network 192.168.10.0 mask 255.255.255.0
excluded-ip-address 192.168.10.251 192.168.10.252
lease day 7 hour 0 minute 0
dns-list 8.8.8.8
ip pool p2
gateway-list 192.168.20.250
network 192.168.20.0 mask 255.255.255.0
excluded-ip-address 192.168.20.251 192.168.20.252
lease day 7 hour 0 minute 0
dns-list 8.8.8.8
第五步：配置OSPF;配置OSPF命令
R1
ospf 1
area 0
network 192.168.30.0 0.0.0.255
network 192.168.40.0 0.0.0.255
ip route-static 0.0.0.0 0.0.0.0 100.1.1.1
SW1
ospf 1
area 0
network 192.168.10.0 0.0.0.255
network 192.168.20.0 0.0.0.255
network 192.168.30.0 0.0.0.255
network 192.168.66.0 0.0.0.255
SW2
ospf 1
area 0
network 192.168.10.0 0.0.0.255
network 192.168.20.0 0.0.0.255
network 192.168.40.0 0.0.0.255
network 192.168.66.0 0.0.0.255
DHCP
ospf 1
area 0
network 192.168.66.0 0.0.0.255
第六步：配置NAT；配置NAT命令
acl number 2000
rule 10 permit source 192.168.0.0 0.0.255.255
interface GigabitEthernet0/0/2
nat outbound 2000
最后进行验证：Verify the SW1 follows:
Verify the SW2 as follows: 
PC1 verified as follows:
项目实验完成！！！！