Reference configuration
1 Modify device name
SW1 vlan batch 2 to 4
SW2 vlan batch 2
SW3 vlan batch 2 to 3
2 Disable configuration prompts un in en
5. Enter the port connected to the computer and configure the following commands
Port link-type access
Port default vlan 2
int g0/0/15
Port link-type access
Port default vlan 2
6. Link aggregation — all three switches must do this
Int Eth-Trunk 1
Mode manual load-balance
Trunkport g 0/0/1
Trunkport g 0/0/2
Int Eth-Trunk 2
Mode manual load-balance
Trunkport g 0/0/1
Trunkport g 0/0/2
Int g0/0/24
Port lint-type acc
Port de vlan 40
Int Eth-trunk 1(2)
Port lint-type trunk
Port trunk all vlan 2 3
7 Rapid Spanning Tree
SW1 Stp mode rs
SW1 Stp root primary
SW2 Stp mode rs
SW2 stp root secondary
8. Configure addresses
Int vlan 2
Ip add 192.168.2.254 24
Int vlan 4
IP add 192.168.4.254 24
Int vlan 3
Ip add 192.168.3.254 24
Then configure the IP addresses given for the ports
9. OSPF
AR1：ip route-static 0.0.0.0 0 110.1.1.1
Ospf 10
Default-route-advertise tells others that I have a route
Area 0
Net 192.168.5.0 0.0.0.255
Net 192.168.4.0 0.0.0.255
Net 110.1.1.0 0.0.0.7 can be omitted in real engineering practice, but it must be included to get the marks
AR2： ip route-static 200.1.1.0 255.255.255.0 100.1.1.1
ospf 10
default-route-advertise
area 0.0.0.0
network 100.1.1.0 0.0.0.255
network 200.1.1.0 0.0.0.255
SW1：ospf 10
A 0
Net 192.168.2.0 0.0.0.255
Net 192.168.3.0 0.0.0.255
Net 192.168.4.0 0.0.0.255
10. NAT
AR1
Acl 2000
Rule 5 permit source 192.168.2.0 0.0.0.255
Rule 10 deny
#The automatically added rule 5 indicates the execution sequence number; the smaller the number, the higher the priority of execution. By default, the first rule is numbered 5 and the second is 10.
Q
Int s4/0/01
Nat outbound 2000
Configure ACL 3000 to deny all source addresses from pinging (ICMP protocol) the internal web
Server 192.168.5.100 allows other IPs to pass through
Acl 3000
Rule deny icmp source 192.168.10.X 0.0.0.255 destination 192.168.50.100
Configure the ACL to deny the 192.168.10.X subnet from accessing 192.168.50.100, and allow its HTTP access to Server1
Enter the interface and bind ACL 3000 to the port
Int g0/0/xxx
Traffic-filter inbound acl 3000
PPP protocol, CHAP protocol
Enter the ports connecting the two ARs to configure
AR1 ：link-protocol ppp
ip address 100.1.1.1 255.255.255.248
ppp authentication-mode chap
AR2 ：link-protocol ppp
ip address 100.1.1.2 255.255.255.248
ppp authentication-mode chap
Reference ·1
Authenticator
[Huawei-aaa]local-user actorw password cipher huawei
[Huawei-aaa]local-user actorw service-type ppp
// First create the user and set the user type to ppp
[Huawei]int s4/0/0
[Huawei-Serial4/0/0]link-protocol ppp Change the link type to ppp
[Huawei-Serial4/0/0]ppp authentication-mode chap Change the encryption method to CHAP authentication
[Huawei-Serial4/0/0]ppp chap user actorw Set the authentication name to the username of the user just created
[Huawei-Serial4/0/0]ip address ppp-negotiate Enable IP negotiation
Authenticated party
[Huawei]int s4/0/0
[Huawei-Serial4/0/0]link-protocol ppp
[Huawei-Serial4/0/0]remote address 12.1.1.1 Assign the peer an IP address of 12.1.1.1
[Huawei-Serial4/0/0]ppp chap user actorw Confirm the authentication name — the account created by the authenticator
[Huawei-Serial4/0/0]ppp chap password cipher huawei Confirm the authentication password (cipher) — the password of the account created by the authenticator
[Huawei-Serial4/0/0]ip address 12.1.1.2 24 Assign an IP address to interface S4/0/0
If you enjoyed this, leave a comment~