1、链路聚合
Agg_SW1
<Huawei>sy
[Huawei]sysn Agg_SW1
[Agg_SW1]u in e
[Agg_SW1]int eth 1
[Agg_SW1-Eth-Trunk1]m l
[Agg_SW1-Eth-Trunk1]trunkport g 0/0/3 t 0/0/5
[Agg_SW1-Eth-Trunk1]max active-linknumber 2
Agg_SW2
<Huawei>sy
sysn Agg_SW2
[Agg_SW2]u in e
Info: Information center is disabled.
[Agg_SW2]int eth 1
[Agg_SW2-Eth-Trunk1]tr
[Agg_SW2-Eth-Trunk1]m l
[Agg_SW2-Eth-Trunk1]tr
[Agg_SW2-Eth-Trunk1]trunkport g 0/0/3 t 0/0/5
[Agg_SW2-Eth-Trunk1]max active-linknumber 2
2、VLAN IP地址 3、Trunk
Agg_SW1
[Agg_SW1]v b 10 11 13 20 30
[Agg_SW1]int eth 1
[Agg_SW1-Eth-Trunk1]p l t
[Agg_SW1-Eth-Trunk1]p t a v 10 11 13 20 30
[Agg_SW1-Eth-Trunk1]p t p v 1
[Agg_SW1-Eth-Trunk1]q
[Agg_SW1]port-group group-member g 0/0/1 g 0/0/6
[Agg_SW1-port-group]p l t
[Agg_SW1-port-group]p t a v 10 11 13 20 30
[Agg_SW1-port-group]p t p v 1
[Agg_SW1-port-group]q
[Agg_SW1]int g0/0/2
[Agg_SW1-GigabitEthernet0/0/2]p l a
[Agg_SW1-GigabitEthernet0/0/2]p d v 11
[Agg_SW1-GigabitEthernet0/0/2]int g0/0/7
[Agg_SW1-GigabitEthernet0/0/7]p l t
[Agg_SW1-GigabitEthernet0/0/7]p t a v 30
[Agg_SW1-GigabitEthernet0/0/7]p t p v 30
[Agg_SW1-GigabitEthernet0/0/7]int vl 10
[Agg_SW1-Vlanif10]ip a 172.16.10.1 24
[Agg_SW1-Vlanif10]int vl 11
[Agg_SW1-Vlanif11]ip a 172.16.11.11 24
[Agg_SW1-Vlanif11]int vl 20
[Agg_SW1-Vlanif20]ip a 172.16.20.1 24
Agg_SW2
[Agg_SW2]v b 10 11 13 20 30
[Agg_SW2]int eth 1
[Agg_SW2-Eth-Trunk1]p l t
[Agg_SW2-Eth-Trunk1]p t a v 10 11 13 20 30
[Agg_SW2-Eth-Trunk1]p t p v 1
[Agg_SW2-Eth-Trunk1]q
[Agg_SW2]port-g g g 0/0/2 g0/0/6
[Agg_SW2-port-group]p l t
[Agg_SW2-port-group]p t a v 10 11 13 20 30
[Agg_SW2-port-group]p t p v 1
[Agg_SW2-port-group]q
[Agg_SW2]int g0/0/1
[Agg_SW2-GigabitEthernet0/0/1]p l a
[Agg_SW2-GigabitEthernet0/0/1]p d v 13
[Agg_SW2-GigabitEthernet0/0/1]int vl 10
[Agg_SW2-Vlanif10]ip a 172.16.10.2 24
[Agg_SW2-Vlanif10]int vl 13
[Agg_SW2-Vlanif13]ip a 172.16.13.11 24
[Agg_SW2-Vlanif13]int vl 20
[Agg_SW2-Vlanif20]ip a 172.16.20.2 24
AC1
<AC6005>sy
[AC6005]sysn AC1
[AC1]u in e
[AC1]v b 10 20 30
[AC1]int g0/0/1
[AC1-GigabitEthernet0/0/1]p l t
[AC1-GigabitEthernet0/0/1]p t a v 10 20 30
[AC1-GigabitEthernet0/0/1]p t p v 30
[AC1]int vl 30
[AC1-Vlanif30]ip a 172.16.30.1 24
Acc_SW1
<Huawei>sy
[Huawei]sysn Acc_SW1
[Acc_SW1]u in
[Acc_SW1]v b 10 20 30
[Acc_SW1]port-g g g0/0/1 g0/0/2
[Acc_SW1-port-group]p l t
[Acc_SW1-port-group]p t a v 10 20 30
[Acc_SW1-port-group]p t p v 1
[Acc_SW1-port-group]q
[Acc_SW1]int g0/0/3
[Acc_SW1-GigabitEthernet0/0/3]p l a
[Acc_SW1-GigabitEthernet0/0/3]p d v 10
[Acc_SW1-GigabitEthernet0/0/3]int g0/0/4
[Acc_SW1-GigabitEthernet0/0/4]p l a
[Acc_SW1-GigabitEthernet0/0/4]p d v 20
[Acc_SW1-GigabitEthernet0/0/4]int g0/0/5
[Acc_SW1-GigabitEthernet0/0/5]p l t
[Acc_SW1-GigabitEthernet0/0/5]p t a v 10 20 30
[Acc_SW1-GigabitEthernet0/0/5]p t p v 30
Acc_SW2
<Huawei>sy
[Huawei]sysn Acc_SW2
[Acc_SW2]u in e
[Acc_SW2]v b 10 20 30
[Acc_SW2]port-g g g0/0/1 g0/0/2
[Acc_SW2-port-group]p l t
[Acc_SW2-port-group]p t a v 10 20 30
[Acc_SW2-port-group]p t p v 1
[Acc_SW2-port-group]q
[Acc_SW2]int g0/0/3
[Acc_SW2-GigabitEthernet0/0/3]p l a
[Acc_SW2-GigabitEthernet0/0/3]p d v 10
[Acc_SW2-GigabitEthernet0/0/3]int g0/0/4
[Acc_SW2-GigabitEthernet0/0/4]p l a
[Acc_SW2-GigabitEthernet0/0/4]p d v 20
[Acc_SW2-GigabitEthernet0/0/4]int g0/0/5
[Acc_SW2-GigabitEthernet0/0/5]p l t
[Acc_SW2-GigabitEthernet0/0/5]p t a v 10 20 30
[Acc_SW2-GigabitEthernet0/0/5]p t p v 30
Core_RT_AR3260
<Huawei>sy
[Huawei]sysn Core_RT_AR3260
[Core_RT_AR3260]u in e
[Core_RT_AR3260]int g0/0/1
[Core_RT_AR3260-GigabitEthernet0/0/1]ip a 172.16.11.1 24
[Core_RT_AR3260-GigabitEthernet0/0/1]int g0/0/0
[Core_RT_AR3260-GigabitEthernet0/0/0]ip a 172.16.13.1 24
[Core_RT_AR3260-GigabitEthernet0/0/0]int s1/0/0
[Core_RT_AR3260-Serial1/0/0]ip a 172.20.50.1 24
[Core_RT_AR3260-Serial1/0/0]int lo 0
[Core_RT_AR3260-LoopBack0]ip a 1.1.1.1 32
Edu_R1-AR3260
<Huawei>sy
[Huawei]sysn Edu_R1-AR3260
[Edu_R1-AR3260]u in e
[Edu_R1-AR3260]int g0/0/0
[Edu_R1-AR3260-GigabitEthernet0/0/0]ip a 172.22.20.254 24
[Edu_R1-AR3260-GigabitEthernet0/0/0]int g0/0/1
[Edu_R1-AR3260-GigabitEthernet0/0/1]ip a 172.22.10.1 24
[Edu_R1-AR3260-GigabitEthernet0/0/1]int s1/0/0
[Edu_R1-AR3260-Serial1/0/0]ip a 172.20.50.10 24
4、MSTP
Agg_SW1
[Agg_SW1]stp m m
[Agg_SW1]stp re
[Agg_SW1-mst-region]ins 1 v 10 11 30
[Agg_SW1-mst-region]ins 2 v 13 20
[Agg_SW1-mst-region]ac re
[Agg_SW1-mst-region]q
[Agg_SW1]stp i 1 r p
[Agg_SW1]stp i 2 r s
[Agg_SW1]stp bpdu-protection
[Agg_SW1]int g0/0/2
[Agg_SW1-GigabitEthernet0/0/2]stp e e
[Agg_SW1-GigabitEthernet0/0/2]q
Agg_SW2
<Agg_SW2>sy
[Agg_SW2]stp m m
[Agg_SW2]stp re
[Agg_SW2-mst-region]region-name AHDY
[Agg_SW2-mst-region]revision-level 1
[Agg_SW2-mst-region]ins 1 v 10 11 30
[Agg_SW2-mst-region]ins 2 v 13 20
[Agg_SW2-mst-region]ac re
[Agg_SW2-mst-region]q
[Agg_SW2]stp i 2 r p
[Agg_SW2]stp i 1 r s
[Agg_SW2]stp bpdu-protection
[Agg_SW2]int g0/0/1
[Agg_SW2-GigabitEthernet0/0/1]stp e e
Acc_SW1
[Acc_SW1]stp m m
[Acc_SW1]stp re
[Acc_SW1-mst-region]re AHDY
[Acc_SW1-mst-region]rev 1
[Acc_SW1-mst-region]ins 1 v 10 11 30
[Acc_SW1-mst-region]ins 2 v 13 20
[Acc_SW1-mst-region]ac re
[Acc_SW1-mst-region]q
[Acc_SW1]stp bpdu-protection
[Acc_SW1]port-g g g0/0/3 g0/0/4
[Acc_SW1-port-group]stp e e
[Acc_SW1-port-group]q
Acc_SW2
[Acc_SW2]stp m m
[Acc_SW2]stp re
[Acc_SW2-mst-region]re AHDY
[Acc_SW2-mst-region]rev 1
[Acc_SW2-mst-region]ins 1 v 10 11 30
[Acc_SW2-mst-region]ins 2 v 13 20
[Acc_SW2-mst-region]ac re
[Acc_SW2-mst-region]q
[Acc_SW2]stp bpdu-protection
[Acc_SW2]port-g g g0/0/3 g0/0/4
[Acc_SW2-port-group]stp e e
[Acc_SW2-port-group]q
[Acc_SW2]
5、VRRP
Agg_SW1
[Agg_SW1]int vl 10
[Agg_SW1-Vlanif10]vrrp vrid 1 vi 172.16.10.254
[Agg_SW1-Vlanif10]vrrp vrid 1 pri 200
[Agg_SW1-Vlanif10]vrrp vrid 1 track i g 0/0/1 r 120
[Agg_SW1-Vlanif10]int vl 20
[Agg_SW1-Vlanif20]vrrp vrid 2 vi 172.16.20.254
Agg_SW2
[Agg_SW2]int vl 10
[Agg_SW2-Vlanif10]vrrp vrid 1 vi 172.16.10.254
[Agg_SW2-Vlanif10]int vl 20
[Agg_SW2-Vlanif20]vrrp vrid 2 vi 172.16.20.254
[Agg_SW2-Vlanif20]vrrp vrid 2 pri 200
[Agg_SW2-Vlanif20]vrrp vrid 2 track i g 0/0/1 r 120
6、动态路由
Agg_SW1
[Agg_SW1]ospf
[Agg_SW1-ospf-1]a 0
[Agg_SW1-ospf-1-area-0.0.0.0]net 172.16.11.0 0.0.0.255
[Agg_SW1-ospf-1-area-0.0.0.0]q
[Agg_SW2-ospf-1]i d
Agg_SW2
[Agg_SW2]ospf
[Agg_SW2-ospf-1]a 0
[Agg_SW2-ospf-1-area-0.0.0.0]net 172.16.13.0 0.0.0.255
[Agg_SW2-ospf-1-area-0.0.0.0]q
[Agg_SW2-ospf-1]i d
Core_RT_AR3260
[Core_RT_AR3260]ospf
[Core_RT_AR3260-ospf-1]a 0
[Core_RT_AR3260-ospf-1-area-0.0.0.0]n 1.1.1.1 0.0.0.0
[Core_RT_AR3260-ospf-1-area-0.0.0.0]net 172.16.11.0 0.0.0.255
[Core_RT_AR3260-ospf-1-area-0.0.0.0]net 172.16.13.0 0.0.0.255
7、DHCP
Core_RT_AR3260
[Core_RT_AR3260]dhcp e
[Core_RT_AR3260]ip pool A
[Core_RT_AR3260-ip-pool-A]n 172.16.10.0 m 24
[Core_RT_AR3260-ip-pool-A]g 172.16.10.254
[Core_RT_AR3260-ip-pool-A]d 8.8.8.8
[Core_RT_AR3260-ip-pool-A]excluded-ip-address 172.16.10.1 172.16.10.2
[Core_RT_AR3260-ip-pool-A]q
[Core_RT_AR3260]ip pool B
[Core_RT_AR3260-ip-pool-B]net 172.16.20.0 m 24
[Core_RT_AR3260-ip-pool-B]g 172.16.20.254
[Core_RT_AR3260-ip-pool-B]d 114.114.114.114
[Core_RT_AR3260-ip-pool-B]excluded-ip-address 172.16.20.1 172.16.20.2
[Core_RT_AR3260-ip-pool-B]int g0/0/0
[Core_RT_AR3260-GigabitEthernet0/0/0]dhcp se g
[Core_RT_AR3260-GigabitEthernet0/0/0]int g0/0/1
[Core_RT_AR3260-GigabitEthernet0/0/1]dhcp se g
Agg_SW1
[Agg_SW1]dhcp en
[Agg_SW1]int vl 10
[Agg_SW1-Vlanif10]dhcp se re
[Agg_SW1-Vlanif10]dhcp re server-ip 172.16.11.1
[Agg_SW1-Vlanif10]int vl 20
[Agg_SW1-Vlanif20]dhcp se re
[Agg_SW1-Vlanif20]dhcp re server-ip 172.16.13.1
Agg_SW2
[Agg_SW2]dhcp e
[Agg_SW2]int vl 10
[Agg_SW2-Vlanif10]dhcp se re
[Agg_SW2-Vlanif10]dhcp re server-ip 172.16.11.1
[Agg_SW2-Vlanif10]int vl 20
[Agg_SW2-Vlanif20]dhcp se re
[Agg_SW2-Vlanif20]dhcp re server-ip 172.16.13.1
8、AP 9、WLAN
Core_RT_AR3260
[Core_RT_AR3260]ip pool A
[Core_RT_AR3260-ip-pool-A]excluded-ip-address 172.16.10.1 172.16.10.2
[Core_RT_AR3260-ip-pool-A]q
[Core_RT_AR3260]ip pool B
[Core_RT_AR3260-ip-pool-B]excluded-ip-address 172.16.20.1 172.16.20.2
AC1
[AC1]capwap source ip-address 172.16.30.1
[AC1]dhcp e
[AC1]int vl 30
[AC1-Vlanif30]dhcp se in
[AC1-Vlanif30]dhcp server lease unlimited
[AC1-Vlanif30]q
[AC1]vlan pool sta-pool
[AC1-vlan-pool-sta-pool]vlan 10 20
[AC1-vlan-pool-sta-pool]assignment hash
[AC1-vlan-pool-sta-pool]q
[AC1]wlan
[AC1-wlan-view]regulatory-domain-profile n default ## 域配置默认就是cn，这步可省略
[AC1-wlan-regulate-domain-default]country-code cn
[AC1-wlan-regulate-domain-default]q
[AC1-wlan-view]ssid-profile n wlan-net
[AC1-wlan-ssid-prof-wlan-net]ssid wlan-net
[AC1-wlan-ssid-prof-wlan-net]q
[AC1-wlan-view]security-profile n wlan-net
[AC1-wlan-sec-prof-wlan-net]security wpa-wpa2 psk pass-phrase huawei123 aes
[AC1-wlan-sec-prof-wlan-net]q
[AC1-wlan-view]vap-profile n wlan-net
[AC1-wlan-vap-prof-wlan-net]ssid-profile wlan-net
[AC1-wlan-vap-prof-wlan-net]security-profile wlan-net
[AC1-wlan-vap-prof-wlan-net]forward-mode direct-forward ## 默认就是直接转发，可不做
[AC1-wlan-vap-prof-wlan-net]service-vlan vlan-pool sta-pool
[AC1-wlan-vap-prof-wlan-net]q
[AC1-wlan-view]ap-group n Office_AP
[AC1-wlan-ap-group-Office_AP]regulatory-domain-profile default
[AC1-wlan-ap-group-Office_AP]vap-profile wlan-net wlan 1 radio 0 ## radio 0 即为所需的2.4GHz
[AC1-wlan-ap-group-Office_AP]q
[AC1-wlan-view]ap-id 0 ap-mac 00e0-fc8b-3eb0 ## 都是同一个拓扑,MAC地址理论也应一致
[AC1-wlan-ap-0]ap-name AP1
[AC1-wlan-ap-0]ap-group Office_AP
[AC1-wlan-ap-0]q
[AC1-wlan-view]ap-id 1 ap-mac 00e0-fc1c-0a20
[AC1-wlan-ap-1]ap-name AP2
[AC1-wlan-ap-1]ap-group Office_AP
10、出口设计
10.1(可选)
Edu_R1-AR3260
[Edu_R1-AR3260]aaa
[Edu_R1-AR3260-aaa]local-user huawei password cipher Huawei123
[Edu_R1-AR3260-aaa]local-user huawei service-type ppp
[Edu_R1-AR3260-aaa]int s1/0/0
[Edu_R1-AR3260-Serial1/0/0]ppp authentication-mode chap
[Edu_R1-AR3260-Serial1/0/0]ppp chap user huawei
Core_RT_AR3260
[Core_RT_AR3260]aaa
[Core_RT_AR3260-aaa]local-user huawei password cipher Huawei123
[Core_RT_AR3260-aaa]local-user huawei service-type ppp
[Core_RT_AR3260-aaa]int s1/0/0
[Core_RT_AR3260-Serial1/0/0]ppp chap user huawei
10.2
Core_RT_AR3260
[Core_RT_AR3260]ip route-static 172.22.20.0 24 172.20.50.10
[Core_RT_AR3260]ip route-static 172.22.10.0 24 172.20.50.10
Edu_R1-AR3260
[Edu_R1-AR3260]ip route-static 0.0.0.0 0 172.20.50.1
11、路由引入
Core_RT_AR3260
[Core_RT_AR3260]ospf
[Core_RT_AR3260-ospf-1]import-route static
12、访问控制
Edu_R1-AR3260
[Edu_R1-AR3260]acl 3000
[Edu_R1-AR3260-acl-adv-3000]rule permit ip source 172.22.10.0 0.0.0.255 destination 172.22.20.0 0.0.0.255
[Edu_R1-AR3260-acl-adv-3000]rule deny ip source any
[Edu_R1-AR3260-acl-adv-3000]q
[Edu_R1-AR3260]int g0/0/0
[Edu_R1-AR3260-GigabitEthernet0/0/0]traffic-filter outbound acl 3000
13、自行测试