eNSP校园网（企业网）详细拓扑完整设计及相关配置文件资源包

//展示设备配置的详细信息 dis cu //展示交换机上一步配置的信息 dis this //展示交换机上相应vlan配置的网关信息 dis ip int brief JR-SW1 vlan batch 10 20 30 40 50 60 200 900 interface Ethernet0/0/1 port link-type access port default vlan 10 interface GigabitEthernet0/0/1 port link-type trunk port trunk allow-pass vlan 10 900 JR-SW2 vlan batch 10 20 30 40 50 60 200 900 interface Ethernet0/0/1 port link-type access port default vlan 20 # [JR-SW2]port-g g e0/0/2 to e0/0/22 [JR-SW2-port-group]port link-type access 20 900 [JR-SW2-port-group]port de vlan 20 JR-SW3 vlan batch 10 20 30 40 50 60 200 900 interface Ethernet0/0/1 port link-type access port default vlan 30 # interface GigabitEthernet0/0/1 port link-type trunk port trunk allow-pass vlan 30 900 JR-SW4 vlan batch 10 20 30 40 50 60 200 900 interface Ethernet0/0/1 port link-type access port default vlan 40 interface GigabitEthernet0/0/1 port link-type trunk port trunk allow-pass vlan 40 900 JR-SW5 vlan batch 10 20 30 40 50 60 200 900 interface Ethernet0/0/1 port link-type access port default vlan 50 interface GigabitEthernet0/0/1 port link-type trunk port trunk allow-pass vlan 50 900 JR-SW6 vlan batch 10 20 30 40 50 60 200 900 interface Ethernet0/0/1 port link-type access port default vlan 60 interface GigabitEthernet0/0/1 port link-type trunk port trunk allow-pass vlan 60 900 JR-SW7 vlan batch 10 20 30 40 50 60 200 900 # interface Ethernet0/0/1 port link-type trunk port trunk allow-pass vlan 900 # interface Ethernet0/0/2 port link-type access port default vlan 900 # interface Ethernet0/0/3 port link-type access port default vlan 900 # interface Ethernet0/0/4 port link-type trunk port trunk allow-pass vlan 900 # HJ-SW1 vlan batch 10 20 30 40 50 60 200 900 interface GigabitEthernet0/0/1 port link-type trunk port trunk allow-pass vlan 10 20 900 # interface GigabitEthernet0/0/2 port link-type trunk port trunk allow-pass vlan 10 900 # interface GigabitEthernet0/0/3 port link-type trunk port trunk allow-pass vlan 20 900 # interface GigabitEthernet0/0/4 port link-type trunk port trunk allow-pass vlan 10 20 900 HJ-SW2 vlan batch 10 20 30 40 50 60 200 900 interface GigabitEthernet0/0/1 port link-type trunk port trunk allow-pass vlan 30 900 # interface GigabitEthernet0/0/2 port link-type trunk port trunk allow-pass vlan 30 900 # interface GigabitEthernet0/0/3 port link-type trunk port trunk allow-pass vlan 30 900 HJ-SW3 vlan batch 10 20 30 40 50 60 200 900 interface GigabitEthernet0/0/1 port link-type trunk port trunk allow-pass vlan 40 900 # interface GigabitEthernet0/0/2 port link-type trunk port trunk allow-pass vlan 40 900 # interface GigabitEthernet0/0/3 port link-type trunk port trunk allow-pass vlan 40 900 HJ-SW4 vlan batch 10 20 30 40 50 60 200 900 interface GigabitEthernet0/0/1 port link-type trunk port trunk allow-pass vlan 50 900 # interface GigabitEthernet0/0/2 port link-type trunk port trunk allow-pass vlan 50 900 # interface GigabitEthernet0/0/3 port link-type trunk port trunk allow-pass vlan 50 900 HJ-SW5 vlan batch 10 20 30 40 50 60 200 900 interface GigabitEthernet0/0/1 port link-type trunk port trunk allow-pass vlan 60 900 # interface GigabitEthernet0/0/2 port link-type trunk port trunk allow-pass vlan 60 900 # interface GigabitEthernet0/0/3 port link-type trunk port trunk allow-pass vlan 60 900 HX-SW1 //核心层交换机1需要划分所有的vlan与服务器vlan通过 vlan batch 10 20 30 40 50 60 200 800 900 # interface GigabitEthernet0/0/1 port link-type trunk port trunk allow-pass vlan 10 20 900 # interface GigabitEthernet0/0/2 port link-type trunk port trunk allow-pass vlan 30 900 # interface GigabitEthernet0/0/3 port link-type trunk port trunk allow-pass vlan 40 900 # interface GigabitEthernet0/0/4 port link-type trunk port trunk allow-pass vlan 50 900 # interface GigabitEthernet0/0/5 port link-type trunk port trunk allow-pass vlan 60 900 # 外网出口 interface GigabitEthernet0/0/9 port link-type access port default vlan 800 # interface Vlanif10 ip address 192.168.10.1 255.255.255.0 # interface Vlanif20 ip address 192.168.20.1 255.255.255.0 # interface Vlanif30 ip address 192.168.30.1 255.255.255.0 # interface Vlanif40 ip address 192.168.40.1 255.255.255.0 # interface Vlanif50 ip address 192.168.50.1 255.255.255.0 # interface Vlanif60 ip address 192.168.60.1 255.255.255.0 # interface Vlanif200防火墙配置中删除了此条命令 ip address 192.168.200.1 255.255.255.0 # interface Vlanif800 ip address 192.168.254.2 255.255.255.0 链路聚合 # interface Eth-Trunk1 mode lacp-static interface GigabitEthernet0/0/6 eth-trunk 1 # interface GigabitEthernet0/0/7 eth-trunk 1 # interface Eth-Trunk1 port link-type trunk port trunk allow-pass vlan 10 20 30 40 50 60 200 900 # HX-SW2 vlan batch 10 20 30 40 50 60 200 800 900 # interface GigabitEthernet0/0/1 port link-type trunk port trunk allow-pass vlan 10 20 900 # interface GigabitEthernet0/0/2 port link-type trunk port trunk allow-pass vlan 30 900 # interface GigabitEthernet0/0/3 port link-type trunk port trunk allow-pass vlan 40 900 # interface GigabitEthernet0/0/4 port link-type trunk port trunk allow-pass vlan 50 900 # interface GigabitEthernet0/0/5 port link-type trunk port trunk allow-pass vlan 60 900 # //外网出口 interface GigabitEthernet0/0/8 port link-type access port default vlan 801 # interface Vlanif10 ip address 192.168.10.1 255.255.255.0 # interface Vlanif20 ip address 192.168.20.1 255.255.255.0 # interface Vlanif30 ip address 192.168.30.1 255.255.255.0 # interface Vlanif40 ip address 192.168.40.1 255.255.255.0 # interface Vlanif50 ip address 192.168.50.1 255.255.255.0 # interface Vlanif60 ip address 192.168.60.1 255.255.255.0 # interface Vlanif200防火墙配置中删除了此条命令 ip address 192.168.200.1 255.255.255.0 # interface Vlanif800 ip address 192.168.254.2 255.255.255.0 链路聚合 # interface Eth-Trunk1 mode lacp-static interface GigabitEthernet0/0/6 eth-trunk 1 # interface GigabitEthernet0/0/7 eth-trunk 1 # interface Eth-Trunk1 port link-type trunk port trunk allow-pass vlan 10 20 30 40 50 60 200 900 mode lacp-static 2.MSTP配置 # 所有汇聚，核心交换机，以及JR-SW7应做以下配置，还有服务器的交换机。 stp region-configuration region-name aa revision-level 1 instance 1 vlan 10 20 200 900 instance 2 vlan 30 40 50 60 active region-configuration # # 核心交换机做以下配置，注意别搞混了,不然阻塞效果会失效 HX-SW1: stp instance 1 root primary stp instance 2 root secondary HX-SW2: stp instance 1 root secondary stp instance 2 root primary # 3.VRRP配置 HX-SW1: # interface Vlanif10 ip address 192.168.10.254 255.255.255.0 vrrp vrid 10 virtual-ip 192.168.10.1 vrrp vrid 10 priority 105 # interface Vlanif20 ip address 192.168.20.254 255.255.255.0 vrrp vrid 20 virtual-ip 192.168.20.1 vrrp vrid 20 priority 105 # interface Vlanif30 ip address 192.168.30.254 255.255.255.0 vrrp vrid 30 virtual-ip 192.168.30.1 # interface Vlanif40 ip address 192.168.40.254 255.255.255.0 vrrp vrid 40 virtual-ip 192.168.40.1 # interface Vlanif50 ip address 192.168.50.254 255.255.255.0 vrrp vrid 50 virtual-ip 192.168.50.1 # interface Vlanif60 ip address 192.168.60.254 255.255.255.0 vrrp vrid 60 virtual-ip 192.168.60.1 # interface Vlanif200//防火墙配置中删除了此条命令 ip address 192.168.200.254 255.255.255.0 vrrp vrid 200 virtual-ip 192.168.200.1 vrrp vrid 200 priority 105 # interface Vlanif900 ip address 192.168.9.254 255.255.255.0 vr