hcia v25实验指导书routing switching进阶

认证系列HCIA-R&S进阶实验指导书技术认证系列HCIA-R&S进阶实验指导书技术所有©技术2019。保留一切权利。本书所有内容受技术法保护，事先拥有所有，但注明其他方的内容除外。，任何人、任何组织不得将本书的任何内容以任何方式进行、经销、 、所有。商标和其他商标均为技术的商标。商标，由各自的所有人拥有。认证系列HCIA-R&S网络技术与设备实验指导书第2.5版本所有©技术2019。保留一切权利。本书所有内容受技术法保护，事先拥有所有，但注明其他方的内容除外。，任何人、任何组织不得将本书的任何内容以任何方式进行、经销、 、所有。商标和其他商标均为技术的商标。商标，由各自的所有人拥有。认证系列HCIA-R&S网络技术与设备实验指导书第2.5版本认证体系介绍认证是凭借多年信息通信技术培养经验及对行业发展的深刻ICT产业链搭载“云－管－端”融合技术，推出覆盖IP、IT、CT技术领域的认证体系，ICT全技术领域认证体系。三类技术ICT全技术领域的认证体系。HCIA企业网络工程师使用网络设备搭建小型企业路由交于企业网络技术领域具备初级知识和技能水平的专业的工程师是公认的具备小型企业网络通用技术和基本设计能力的专业。HCIP-R&S师使用云、安全和 于企业网络技术领域具备高级知识和技能水平的专业HCIP-R&S的工程师是公认的具备中小型企业网络构建和管理能力的专业。HCIE-R&S和HCIE-R&S于企业网络技术领域中具备知识和技能水平的专业HCIE-R&S能力的专业的工程师是公认的具备大型复杂企业网络构建、优化和管理。ICT世界的潮头浪尖！认证体系介绍认证是凭借多年信息通信技术培养经验及对行业发展的深刻ICT产业链搭载“云－管－端”融合技术，推出覆盖IP、IT、CT技术领域的认证体系，ICT全技术领域认证体系。三类技术ICT全技术领域的认证体系。HCIA企业网络工程师使用网络设备搭建小型企业路由交于企业网络技术领域具备初级知识和技能水平的专业的工程师是公认的具备小型企业网络通用技术和基本设计能力的专业。HCIP-R&S师使用云、安全和 于企业网络技术领域具备高级知识和技能水平的专业HCIP-R&S的工程师是公认的具备中小型企业网络构建和管理能力的专业。HCIE-R&S和HCIE-R&S于企业网络技术领域中具备知识和技能水平的专业HCIE-R&S能力的专业的工程师是公认的具备大型复杂企业网络构建、优化和管理。ICT世界的潮头浪尖！本书常用图标本书常用图标实验环境说明组网介绍HCIA-R&SHCIA-R&S的VRP基础操作、路由协议原理、以太网交换技术、广域网技术、技术等部分的实验组成。实验设备包括路由器3台，交换机4台。每套实验环境适用于2名学员同时上机操作。设备介绍实验需要，建议每套实验环境采用以下配置：设备名称、型号与版本的对应关系如下：设备名称设备型号软件版本R1AR2220EV2R7R2AR2220EV2R7R3AR2220EV2R7S1S5720-36C-EI-ACV2R8S2S5720-36C-EI-ACV2R8实验环境说明组网介绍HCIA-R&SHCIA-R&S的VRP基础操作、路由协议原理、以太网交换技术、广域网技术、技术等部分的实验组成。实验设备包括路由器3台，交换机4台。每套实验环境适用于2名学员同时上机操作。设备介绍实验需要，建议每套实验环境采用以下配置：设备名称、型号与版本的对应关系如下：设备名称设备型号软件版本R1AR2220EV2R7R2AR2220EV2R7R3AR2220EV2R7S1S5720-36C-EI-ACV2R8S2S5720-36C-EI-ACV2R8S3S5720-36C-EI-ACV2R8S4S5720-36C-EI-ACV2R8目录第一章以太网与VLAN 1实验1-1以太网接口和链路配置 1目录第一章以太网与VLAN 1实验1-1以太网接口和链路配置 1实验1-2VLAN配置 10实验1-3VLAN间路由 23实验1-4配置三层交换 30第二章企业广域网配置 47实验2-1HDLC和PPP配置 47实验2-2配置PPPoE客户端 67第三章IP安全配置 77实验3-1配置ACL过滤企业数据 77实验3-2NAT的配置 90实验3-3本地AAA配置 1043-4IPSec配置 114实验3-5GRE隧道配置 131第四章构建IPv6网络 144实验4-1部署IPv6网络 144第一章以太网与VLAN1-1以太网接口和链路配置学习目标掌握接口速率的配置方法掌握使用手动模式配置链路聚合的方法LACP模式配置链路聚合的方法LACP模式下配置接口优先级的方法拓扑图图1.1以太网链路聚合拓扑图场景您是公司的网络管理员。现在公司了两台的S5700系列的交换机，操作步骤步骤一 第一章以太网与VLAN1-1以太网接口和链路配置学习目标掌握接口速率的配置方法掌握使用手动模式配置链路聚合的方法LACP模式配置链路聚合的方法LACP模式下配置接口优先级的方法拓扑图图1.1以太网链路聚合拓扑图场景您是公司的网络管理员。现在公司了两台的S5700系列的交换机，操作步骤步骤一 以太网交换机基础配置S1与S2上G0/0/9和G0/0/10接口的速率。S1上G0/0/9和G0/0/10接口的详细信息。<Quidway>system-view[Quidway]sysnameS1[S1]displayinterfaceGigabitEthernet0/0/9GigabitEthernet0/0/9currentstate:UPLineprotocolcurrentstate:UPDescription:SwitchPort,Link-type:S2上G0/0/9和G0/0/10接口的速率。S1上G0/0/9和G0/0/10接口的详细信息。<Quidway>system-view[Quidway]sysnameS1[S1]displayinterfaceGigabitEthernet0/0/9GigabitEthernet0/0/9currentstate:UPLineprotocolcurrentstate:UPDescription:SwitchPort,Link-type:trunk(negotiated),PVID:1,TPID:8100(Hex),TheumFrameLengthis9216IPSendingFrames'FormatisPKTFMT_ETHNT_2,Hardwareaddressisd0d0-4ba6-aab0Currentsystemtime:2016-11-2314:18:37PortMode:COMMONCOPPERSpeed:1000,Duplex:FULL,Loopback:NONENegotiation:ENABLEFlow-control:DISABLEMdi:AUTO,Last300secondsinputrate256bits/sec,0packets/secLast300secondsoutputrate912bits/sec,0packets/secInputpeakrate13976bits/sec,Recordtime:2016-11-2214:59:12Outputpeakrate13976bits/sec,Recordtime:2016-11-2214:59:12Input:8802packets,1242101bytesUnicast:Discard:Frames:854,931,0,0Multicast:Jumbo:Pause:701700TotalError:CRC:Jabbers:Runts:Ignoreds:00,0,0,0,0Giants:Fragments:DropEvents:Symbols:0000Output:53495packets,7626413bytesUnicast:Discard:231,3700,0,Multicast:Jumbo:Pause:4956400TotalError:Collisions:LateCollisions:BuffersPurged:00,0,0ExcessiveCollisions:Deferreds:00Inputbandwidthutilizationthreshold:80.00%Outputbandwidthutilizationthreshold:80.00%Inputbandwidthutilization:OutputbandwidthutilizationInputbandwidthutilizationthreshold:80.00%Outputbandwidthutilizationthreshold:80.00%Inputbandwidthutilization:Outputbandwidthutilization:0%0%[S1]displayinterfaceGigabitEthernet0/0/10GigabitEthernet0/0/10currentstate:UPLineprotocolcurrentstate:UPDescription:SwitchPort,Link-type:trunk(negotiated),PVID:1,TPID:8100(Hex),TheumFrameLengthis9216IPSendingFrames'FormatisPKTFMT_ETHNT_2,Hardwareaddressisd0d0-4ba6-aab0Currentsystemtime:2016-11-2314:22:22PortMode:COMMONCOPPERSpeed:1000,Duplex:FULL,Loopback:NONENegotiation:ENABLEFlow-control:DISABLEMdi:AUTO,Last300secondsinputrate72bits/sec,0packets/secLast300secondsoutputrate1024bits/sec,0packets/secInputpeakrate14032bits/sec,Recordtime:2016-11-2214:59:12Outputpeakrate14032bits/sec,Recordtime:2016-11-2214:59:12Input:7025packets,786010bytesUnicast:Discard:Frames:0,Multicast:0,Jumbo:7025000,0Pause:TotalError:CRC:Jabbers:Runts:Ignoreds:00,0,0,0,0Giants:Fragments:Symbols:0000Output:54507packets,7979793bytesUnicast:Discard:150,4648,0,Multicast:Jumbo:Pause:4970900TotalError:Collisions:LateCollisions:BuffersPurged:00,ExcessiveCollisions:0,Deferreds:000Inputbandwidthutilizationthreshold:80.00%Outputbandwidthutilizationthreshold:Inputbandwidthutilizationthreshold:80.00%Outputbandwidthutilizationthreshold:80.00%Inputbandwidthutilization:Outputbandwidthutilization:0%0%S1上的G0/0/9和G0/0/10接口的速率配置为100Mbit/s。[S1]interfaceGigabitEthernet0/0/9[S1-GigabitEthernet0/0/9]undonegotiationauto[S1-GigabitEthernet0/0/9]speed100[S1-GigabitEthernet0/0/9]quit[S1]interfaceGigabitEthernet0/0/10[S1-GigabitEthernet0/0/10]undonegotiationauto[S1-GigabitEthernet0/0/10]speed100同样的方法将S2上的G0/0/9和G0/0/10接口的速率配置为100Mbit/s。<Quidway>system-view[Quidway]sysnameS2[S2]interfaceGigabitEthernet0/0/9[S2-GigabitEthernet0/0/9]undonegotiationauto[S2-GigabitEthernet0/0/9]speed100[S2-GigabitEthernet0/0/9]quit[S2]interfaceGigabitEthernet0/0/10[S2-GigabitEthernet0/0/10]undonegotiationauto[S2-GigabitEthernet0/0/10]speed100G0/0/9和G0/0/10接口的速率已配置[S1]displayinterfaceGigabitEthernet0/0/9GigabitEthernet0/0/9currentstate:UPLineprotocolcurrentstate:UPDescription:SwitchPort,Link-type:trunk(negotiated),。PVID:1,TPID:8100(Hex),TheumFrameLengthis9216IPSendingFrames'FormatisPKTFMT_ETHNT_2,Hardwareaddressisd0d0-4ba6-aab0Currentsystemtime:2016-11-2314:29:45PortMode:COMMONCOPPERSpeed:100,Duplex:FULL,Loopback:NONENegotiation:DISABLEFlow-control:DISABLEMdi:AUTO,……outputomit……[S1]displayinterfaceGigabitEthernet0/0/10GigabitEthernet0/0/10currentstate:UPLineprotocolcurrentstate:UPDescription:SwitchPort,Link-type:trunk(negotiated),PVID[S1]displayinterfaceGigabitEthernet0/0/10GigabitEthernet0/0/10currentstate:UPLineprotocolcurrentstate:UPDescription:SwitchPort,Link-type:trunk(negotiated),PVID:1,TPID:8100(Hex),TheumFrameLengthis9216IPSendingFrames'FormatisPKTFMT_ETHNT_2,Hardwareaddressisd0d0-4ba6-aab0Currentsystemtime:2016-11-2314:32:53PortMode:COMMONCOPPERSpeed:100,Duplex:FULL,Loopback:NONENegotiation:DISABLEFlow-control:DISABLEMdi:AUTO,……outputomit……步骤二配置手动模式的链路聚合在S1和S2上创建Eth-Trunk1，然后将G0/0/9和G0/0/10接口加入[S1]interfaceEth-Trunk1[S1-Eth-Trunk1]quit[S1]interfaceGigabitEthernet0/0/9[S1-GigabitEthernet0/0/9]eth-trunk1[S1-GigabitEthernet0/0/9]quit[S1]interfaceGigabitEthernet0/0/10[S1-GigabitEthernet0/0/10]eth-trunk1[S2]interfaceEth-Trunk1[S2-Eth-Trunk1]quit[S2]interfaceGigabitEthernet0/0/9[S2-GigabitEthernet0/0/9]eth-trunk1[S2-GigabitEthernet0/0/9]quit[S2]interfaceGigabitEthernet0/0/10[S2-GigabitEthernet0/0/10]eth-trunk1的配置结果。[S1]displayeth-trunk1Eth-Trunk1'sstateinformationis:WorkingMode:NORMALLeastActive-linknumber:1Operatestatus:upHasharithmetic:AccordingtoSIP-XOR-DIPMaxBandwidth-affected-linknumber:8NumberOfUpPortInTrunk:2PortNameStatusWeightGigabitEthernet0/0/9 Up 1[S2]displayeth-trunk1Eth-Trunk1'sstateinformationis:WorkingMode:NORMALHasharithmetic:AccordingtoSIP-XOR-DIPLeast[S2]displayeth-trunk1Eth-Trunk1'sstateinformationis:WorkingMode:NORMALHasharithmetic:AccordingtoSIP-XOR-DIPLeastActive-linknumber:1Operatestatus:upMaxBandwidth-affected-linknumber:8NumberOfUpPortInTrunk:2PortNameStatusWeight工作正常，成员接口都已正确加入。步骤三LACP和S2上的G0/0/9和G0/0/10接口下的配置。[S1]interfaceGigabitEthernet0/0/9eth-trunk[S1-GigabitEthernet0/0/9]quit[S1]interfaceGigabitEthernet0/0/10[S1-GigabitEthernet0/0/10]undoeth-trunk[S2]interfaceGigabitEthernet0/0/9eth-trunk[S2-GigabitEthernet0/0/9]quit[S2]interfaceGigabitEthernet0/0/10[S2-GigabitEthernet0/0/10]undoeth-trunk创建Eth-Trunk1并配置该Eth-Trunk为静态LACP模式。然后将G0/0/9和G0/0/10接口加入Eth-Trunk1。[S1]interfaceEth-Trunk1[S1-Eth-Trunk1]m[S1-Eth-Trunk1]quitacp[S1]interfaceGigabitEthernet0/0/9[S1-GigabitEthernet0/0/9]eth-trunk1[S1-GigabitEthernet0/0/9]quit[S1]interfaceGigabitEthernet0/0/10[S1-GigabitEthernet0/0/10]eth-trunk1[S2]interfaceEth-Trunk1[S2-Eth-Trunk1]macpGigabitEthernet0/0/9 Up 1GigabitEthernet0/0/10 Up 1GigabitEthernet0/0/10 Up 1[S2-Eth-Trunk1]quit[S2]interfaceGigabitEthernet0/0/9[S2-GigabitEthernet0/0/9]eth-trunk1[S2-GigabitEthernet0/0/9]quit[S2]interfaceGigabitEthernet0/0/10[S2-GigabitEthernet0/0/10]eth-trunk1查看交换机上Eth-Trunk的信息，查看链路是否协商 。[S1]displayeth-trunkEth-Trunk1'sstateinformationis:Local:LAGID:1PreemptDelay:[S2-Eth-Trunk1]quit[S2]interfaceGigabitEthernet0/0/9[S2-GigabitEthernet0/0/9]eth-trunk1[S2-GigabitEthernet0/0/9]quit[S2]interfaceGigabitEthernet0/0/10[S2-GigabitEthernet0/0/10]eth-trunk1查看交换机上Eth-Trunk的信息，查看链路是否协商 。[S1]displayeth-trunkEth-Trunk1'sstateinformationis:Local:LAGID:1PreemptDelay:DisabledSystemPriority:32768LeastActive-linknumber:1Operatestatus:upWorkingMode:LACPHasharithmetic:AccordingtoSIP-XOR-DIPSystemID:d0d0-4ba6-aab0MaxActive-linknumber:8NumberOfUpPortInTrunk:2ActorPortNameGigabitEthernet0/0/9StatusPortTypePortPriPortNoPortKeyPortStateWeightSelected100MSelected100M12289289101111001011110011Partner:ActorPortNameGigabitEthernet0/0/9SysPri3276832768SystemIDd0d0-4ba6-ac20d0d0-4ba6-ac20PortPriPortNoPortKeyPortState3276832768122892891011110010111100在S1上配置LACP的系统优先级为100，使其成为LACP主动端。[S1]lacppriority100配置接口的优先级确定活动链路。[S1]interfaceGigabitEthernet0/0/9[S1-GigabitEthernet0/0/9]lacppriority100[S1-GigabitEthernet0/0/9]quit[S1]interfaceGigabitEthernet0/0/10[S1-GigabitEthernet0/0/10]lacppriority100的配置结果。[S1]displayeth-trunk1Eth-Trunk1'sstateinformationis:Local:LAGID:1PreemptDelay:DisabledWorkingMode:LACPHasharithmetic:AccordingtoSIP-XOR-DIP3276832768SystemPriority:100LeastActive-linknumber:1Operatestatus:upSystemID:d0d0-4ba6-aab0MaxActive-linknumber:8NumberOfUpPortInTrunk:2ActorPortNameGigabitEthernet0/0/9StatusPortTypePortPriPortNoPortKeyPortStateWeightSelectedSystemPriority:100LeastActive-linknumber:1Operatestatus:upSystemID:d0d0-4ba6-aab0MaxActive-linknumber:8NumberOfUpPortInTrunk:2ActorPortNameGigabitEthernet0/0/9StatusPortTypePortPriPortNoPortKeyPortStateWeightSelected100MSelected100M12289289101111001011110011Partner:ActorPortNameGigabitEthernet0/0/9SysPri3276832768SystemIDd0d0-4ba6-ac20d0d0-4ba6-ac20PortPriPortNoPortKeyPortState3276832768122892891011110010111100[S2]displayeth-trunk1Eth-Trunk1'sstateinformationis:Local:LAGID:1PreemptDelay:DisabledSystemPriority:32768LeastActive-linknumber:1Operatestatus:upWorkingMode:LACPHasharithmetic:AccordingtoSIP-XOR-DIPSystemID:d0d0-4ba6-ac20MaxActive-linknumber:8NumberOfUpPortInTrunk:2ActorPortNameGigabitEthernet0/0/9StatusPortTypePortPriPortNoPortKeyPortStateWeightSelected100MSelected100M327683276812289289101111001011110011Partner:ActorPortNameGigabitEthernet0/0/9SysPri100100SystemIDd0d0-4ba6-aab0d0d0-4ba6-aab0PortPriPortNoPortKeyPortState122892891011110010111100配置文件[S1]displaycurrent-configuration#!SoftwareVersionV200R008C00SPC500sysnameS1#lacppriority100#interfaceEth-Trunk1100100100m#acpinterfaceGigabitEthernet0/0/9eth-trunk1m#acpinterfaceGigabitEthernet0/0/9eth-trunk1lacppriority100undonegotiationautospeed100#interfaceGigabitEthernet0/0/10eth-trunk1lacppriority100undonegotiationautospeed100#return[S2]displaycurrent-configuration#!SoftwareVersionV200R008C00SPC500sysnameS2#interfaceEth-Trunk1m#acpinterfaceGigabitEthernet0/0/9eth-trunk1undonegotiationautospeed100#interfaceGigabitEthernet0/0/10eth-trunk1undonegotiationautospeed100#return1-2VLAN学习目标的创建方法和Trunk类型接口的配置方法接口的配置方法VLAN关联的配置方法拓扑图图1.21-2VLAN学习目标的创建方法和Trunk类型接口的配置方法接口的配置方法VLAN关联的配置方法拓扑图图1.2VLAN配置实验拓扑图场景VLAN来洪。本实验中，您需要在交换机S1和S2上进行VLAN配置。广播流量的泛操作步骤步骤一实验环境准备1开始配置。如果使用的设备包含上一个实验的配置，请直接从步骤2开始配置。1并配置该Eth-Trunk为静态LACPG0/0/9和G0/0/10接口加入Eth-Trunk1。<Quidway>system-view[Quidway]sysnameS1[S1]interface操作步骤步骤一实验环境准备1开始配置。如果使用的设备包含上一个实验的配置，请直接从步骤2开始配置。1并配置该Eth-Trunk为静态LACPG0/0/9和G0/0/10接口加入Eth-Trunk1。<Quidway>system-view[Quidway]sysnameS1[S1]interfaceEth-trunk1[S1-Eth-Trunk1]m[S1-Eth-Trunk1]quitacp[S1]interfaceGigabitEthernet0/0/9[S1-GigabitEthernet0/0/9]eth-trunk1GigabitEthernet0/0/10[S1-GigabitEthernet0/0/10]eth-trunk1<Quidway>system-view[Quidway]sysnameS2[S2]interfaceeth-trunk1[S2-Eth-Trunk1]macp[S2-Eth-Trunk1]trunkportGigabitEthernet0/0/9[S2-Eth-Trunk1]trunkportGigabitEthernet0/0/10步骤二S3上的E0/0/1和E0/0/7端口以及S4上的E0/0/1和E0/0/14端口。<Quidway>system-viewEntersystemview,returnuserviewwithCtrl+Z.[Quidway]sysnameS3[S3]interfaceGigabitEthernet0/0/1[S3-GigabitEthernet0/0/1]quit[S3]interfaceGigabitEthernet0/0/7<Quidway>system-viewEntersystemview,returnuserviewwithCtrl+Z.[Quidway]sysnameS4[S4]interfaceGigabitEthernet0/0/1[S4-GigabitEthernet0/0/1]shutdown[S4-GigabitEthernet0/0/1]quit[S4]interfaceGigabitEthernet0/0/14[Quidway]sysnameS4[S4]interfaceGigabitEthernet0/0/1[S4-GigabitEthernet0/0/1]shutdown[S4-GigabitEthernet0/0/1]quit[S4]interfaceGigabitEthernet0/0/14交换机端口的类型默认为Hybrid端口。将Eth-Trunk1的端口类型配置为Trunk，并的报文通过该端口。[S1]interfaceEth-Trunk1[S1-Eth-Trunk1]portlink-typetrunk[S1-Eth-Trunk1]porttrunkallow-passvlanall[S2]interfaceEth-Trunk1[S2-Eth-Trunk1]portlink-typetrunk[S2-Eth-Trunk1]porttrunkallow-passvlanall步骤三创建VLAN本实验中将S3、R1、R3和S4设备作为客户端主机。在S1和S2上分别创建VLAN中。将所有连接客户端的端口类型配置为Access。在S1上，将端口G0/0/13和G0/0/1分别加入到VLAN3和VLAN4。在S2上，将端口G0/0/3和G0/0/6分别加入VLAN4和VLAN2。[S1]interfaceGigabitEthernet0/0/13[S1-GigabitEthernet0/0/13]portlink-typeaccess[S1-GigabitEthernet0/0/13]quit[S1]interfaceGigabitEthernet0/0/1[S1-GigabitEthernet0/0/1]portlink-typeaccess[S1-GigabitEthernet0/0/1]quit[S1]vlan2[S1-vlan2]vlan3[S1-vlan3]portGigabitEthernet0/0/13[S1-vlan3]vlan4[S1-vlan4]portGigabitEthernet0/0/1[S2]vlanbatch2to4[S2]interfaceGigabitEthernet0/0/3[S2-GigabitEthernet0/0/3]portlink-typeaccess[S2-GigabitEthernet0/0/3]portdefaultvlan4[S2-GigabitEthernet0/0/3]quit[S2]interfaceGigabitEthernet0/0/6[S2-GigabitEthernet0/0/6]portlink-typeaccess[S2-GigabitEthernet0/0/6]portdefaultvlan2和S2上已<S1>displayvlanThetotalnumberofvlansis:4VLAN中。U:Up;D:Down;[S2]interfaceGigabitEthernet0/0/6[S2-GigabitEthernet0/0/6]portlink-typeaccess[S2-GigabitEthernet0/0/6]portdefaultvlan2和S2上已<S1>displayvlanThetotalnumberofvlansis:4VLAN中。U:Up;D:Down;TG:Tagged;ST:Vlan-stacking;*:Management-vlan;UT:Untagged;MP:Vlan-mapping;#:ProtocolTransparent-vlan;VIDTypePorts1commonUT:GE0/0/2(U)GE0/0/6(D)GE0/0/12(D)GE0/0/17(D)GE0/0/21(U)GE0/0/25(D)Eth-Trunk1(U)UT:GE0/0/13(U)TG:Eth-Trunk1(U)GE0/0/3(U)GE0/0/7(D)GE0/0/14(U)GE0/0/18(D)GE0/0/22(U)GE0/0/26(D)XGE0/0/2(D)GE0/0/4(U)GE0/0/8(D)GE0/0/15(D)GE0/0/19(D)GE0/0/23(U)GE0/0/27(D)XGE0/0/3(D)GE0/0/5(U)GE0/0/11(D)GE0/0/16(D)GE0/0/20(D)GE0/0/24(D)GE0/0/28(D)XGE0/0/4(D)23commoncommon4commonUT:GE0/0/1(U)TG:Eth-Trunk1(U)VIDStatusPropertyMAC-LRNStatisticsDescription1234enabledefaultdefaultdefaultdefaultenabledisabledisabledisabledisableVLAN0001VLAN0002VLAN0003VLAN0004<S2>displayvlanThetotalnumberofvlansis:4U:Up;D:Down;UT:Untagged;MP:Vlan-mapping;ST:Vlan-stacking;*:Management-vlan;VIDTypePorts1commonUT:GE0/0/1(U)GE0/0/2(U)GE0/0/4(U)GE0/0/5(U)GE0/0/7(D)GE0/0/8(D)GE0/0/11(U)GE0/0/12(U)GE0/0/13(U)GE0/0/14(D)GE0/0/15(D)GE0/0/16(D)GE0/0/17(D)GE0/0/18(D)GE0/0/19(D)GE0/0/20(D)GE0/0/21(D)GE0/0/22(D)GE0/0/23(U)GE0/0/24(U)GE0/0/25(D)GE0/0/26(D)GE0/0/27(D)GE0/0/28(D)XGE0/0/1(D)XGE0/0/2(D)XGE0/0/3(D)XGE0/0/4(D)2commonUT:GE0/0/6(D)3commonTG:Eth-Trunk1(U)4commonUT:GE0/0/3(U)<S2>displayvlanThetotalnumberofvlansis:4U:Up;D:Down;UT:Untagged;MP:Vlan-mapping;ST:Vlan-stacking;*:Management-vlan;VIDTypePorts1commonUT:GE0/0/1(U)GE0/0/2(U)GE0/0/4(U)GE0/0/5(U)GE0/0/7(D)GE0/0/8(D)GE0/0/11(U)GE0/0/12(U)GE0/0/13(U)GE0/0/14(D)GE0/0/15(D)GE0/0/16(D)GE0/0/17(D)GE0/0/18(D)GE0/0/19(D)GE0/0/20(D)GE0/0/21(D)GE0/0/22(D)GE0/0/23(U)GE0/0/24(U)GE0/0/25(D)GE0/0/26(D)GE0/0/27(D)GE0/0/28(D)XGE0/0/1(D)XGE0/0/2(D)XGE0/0/3(D)XGE0/0/4(D)2commonUT:GE0/0/6(D)3commonTG:Eth-Trunk1(U)4commonUT:GE0/0/3(U)VIDStatusPropertyMAC-LRNStatisticsDescription1enabledefaultenabledisableVLAN00012enabledefaultenabledisableVLAN00023enabledefaultenabledisableVLAN00034enabledefaultenabledisableVLAN0004且Eth-Trunk1端口VLAN的报文通过。步骤四IP口分配IP地址，因此将S3和S4的本地管理接口VLANIF1作为用户接口，配置IP地址。<>system-view[]sysnameR1[R1]interfaceGigabitEthernet0/0/1[R1-GigabitEthernet0/0/1]ipaddress24[S3]interfacevlanif1[S3-vlanif1]ip步骤四IP口分配IP地址，因此将S3和S4的本地管理接口VLANIF1作为用户接口，配置IP地址。<>system-view[]sysnameR1[R1]interfaceGigabitEthernet0/0/1[R1-GigabitEthernet0/0/1]ipaddress24[S3]interfacevlanif1[S3-vlanif1]ipaddress24<>system-view[]sysnameR3[R3]interfaceGigabitEthernet0/0/2[R3-GigabitEthernet0/0/2]ipaddress24[S4]interfacevlanif1[S4-vlanif1]ipaddress24步骤五VLAN执行ping命令。同属VLAN4中的R1和R3能够相互通信。其他不同VLAN间的设备无法通信。[R1]pingPING:56databytes,pressCTRL_CtobreakReplyfrom:bytes=56Sequence=1ttl=255time=6msReplyfrom:bytes=56Sequence=2ttl=255time=2msReplyfrom:bytes=56Sequence=3ttl=255time=2msReplyfrom:bytes=56Sequence=4ttl=255time=2msReplyfrom:bytes=56Sequence=5ttl=255time=2ms---pingstatistics---5packet(s)transmitted5packet(s)received0.00%packetlossround-tripmin/avg/max=2/2/6ms[R1]pingPING:---pingstatistics---5packet(s)transmitted5packet(s)received0.00%packetlossround-tripmin/avg/max=2/2/6ms[R1]pingPING:56databytes,pressCTRL_CtobreakRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeout---pingstatistics---5packet(s)transmitted0packet(s)received100.00%packetlossR1和S3以及R3和S4之间的连通性。此处不再赘述。步骤六Hybrid或去除Hybrid端口来VLAN2和VLAN4之间可以互相通信。将S1上的G0/0/1端口和S2上的G0/0/3和G0/0/6端口的类型配置为Hybrid。同时，配置这些端口数据帧时能够去掉VLAN2和VLAN4的。[S1]interfaceGigabitEthernet0/0/1[S1-GigabitEthernet0/0/1]undoportdefaultvlan[S1-GigabitEthernet0/0/1]portlink-typehybrid[S1-GigabitEthernet0/0/1]porthybriduntaggedvlan24[S1-GigabitEthernet0/0/1]porthybridpvidvlan4[S2]interfaceGigabitEthernet0/0/3[S2-GigabitEthernet0/0/3]undoportdefaultvlan[S2-GigabitEthernet0/0/3]portlink-typehybrid[S2-GigabitEthernet0/0/3]porthybriduntaggedvlan24[S2-GigabitEthernet0/0/3]port[S2]interfaceGigabitEthernet0/0/3[S2-GigabitEthernet0/0/3]undoportdefaultvlan[S2-GigabitEthernet0/0/3]portlink-typehybrid[S2-GigabitEthernet0/0/3]porthybriduntaggedvlan24[S2-GigabitEthernet0/0/3]porthybridpvidvlan4[S2-GigabitEthernet0/0/3]quit[S2]interfaceGigabitEthernet0/0/6[S2-GigabitEthernet0/0/6]undoportdefaultvlan[S2-GigabitEthernet0/0/6]portlink-typehybrid[S2-GigabitEthernet0/0/6]porthybriduntaggedvlan24[S2-GigabitEthernet0/0/6]porthybridpvidvlan2执行porthybridpvidvlan命令，可以配置端口收到数据帧时需要给数据VLANporthybriduntaggedvlan命令可以配置该端口在VLAN。执行ping命令。测试VLAN3中的R1与R3是否还能通信。<R1>pingPING:56databytes,pressCTRL_CtobreakReplyfrom:bytes=56Sequence=1ttl=255time=1msReplyfrom:bytes=56Sequence=2ttl=255time=1msReplyfrom:bytes=56Sequence=3ttl=255time=1msReplyfrom:bytes=56Sequence=4ttl=255time=10msReplyfrom:bytes=56Sequence=5ttl=255time=1ms---pingstatistics---5packet(s)transmitted5packet(s)received0.00%packetlossround-tripmin/avg/max=1/2/10ms执行ping命令，测试VLAN2中的S4能否与VLAN4中的R1通信。<R1>pingPING:56databytes,pressCTRL_C执行ping命令，测试VLAN2中的S4能否与VLAN4中的R1通信。<R1>pingPING:56databytes,pressCTRL_CtobreakReplyfrom:bytes=56Sequence=1ttl=255time=41msReplyfrom:bytes=56Sequence=2ttl=254time=2msReplyfrom:bytes=56Sequence=3ttl=254time=3msReplyfrom:bytes=56Sequence=4ttl=254time=2msReplyfrom:bytes=56Sequence=5ttl=254time=2ms---pingstatistics---5packet(s)transmitted5packet(s)received0.00%packetlossround-tripmin/avg/max=2/10/41ms通过配置Hybrid端口，使VLAN2内的主机能够接收来自VLAN4的报文，反之亦然。而没有配置Hybrid端口的VLAN3中地址为的主机仍无法与其他VLAN主机通信。配置文件current-configuration[V200R007C00SPC600]#sysnameR1#interfaceGigabitEthernet0/0/1ipaddress#returncurrent-configuration#!SoftwareVersionV100R006C05sysnameS3#interfaceVlanif1ipaddress#interfaceGigabitEthernet0/0/1shutdown#interfaceGigabitEthernet0/0/7shutdown##!SoftwareVersionV100R006C05sysnameS3#interfaceVlanif1ipaddress#interfaceGigabitEthernet0/0/1shutdown#interfaceGigabitEthernet0/0/7shutdown#returncurrent-configuration#!SoftwareVersionV200R008C00SPC500sysnameS1#vlanbatch2to4#lacppriority100#Eth-Trunk1portlink-typetrunkporttrunkallow-passvlan2to4094macp#interfaceGigabitEthernet0/0/1portlink-typehybridporthybridpvidvlan4porthybriduntaggedvlan24#interfaceGigabitEthernet0/0/9undonegotiationautospeed100eth-trunkportlink-typehybridporthybridpvidvlan4porthybriduntaggedvlan24#interfaceGigabitEthernet0/0/9undonegotiationautospeed100eth-trunk1lacppriority100#interfaceGigabitEthernet0/0/10undonegotiationautospeed100eth-trunk1lacppriority100#interfaceGigabitEthernet0/0/13portlink-typeaccessportdefaultvlan3#returncurrent-configuration#!SoftwareVersionV200R008C00SPC500sysnameS2#vlanbatch2to4#Eth-Trunk1portlink-typetrunkporttrunkallow-passvlan2to4094macp#interfaceGigabitEthernet0/0/3portlink-typehybridporthybridpvidvlanportlink-typetrunkporttrunkallow-passvlan2to4094macp#interfaceGigabitEthernet0/0/3portlink-typehybridporthybridpvidvlan4porthybriduntaggedvlan24#interfaceGigabitEthernet0/0/9undonegotiationautospeed100eth-trunk1#interfaceGigabitEthernet0/0/10undonegotiationautospeed100eth-trunk1#interfaceGigabitEthernet0/0/6portlink-typehybridporthybridpvidvlan2porthybriduntaggedvlan24#returncurrent-configuration[V200R007C00SPC600]#sysnameR3#interfaceGigabitEthernet0/0/2ipaddress#returncurrent-configuration#!SoftwareVersion#interfaceGigabitEthernet0/0/2ipaddress#returncurrent-configuration#!SoftwareVersionV100R006C05sysnameS4#interfaceVlanif1ipaddress#interfaceGigabitEthernet0/0/1shutdown#interfaceGigabitEthernet0/0/14shutdown#return1-3VLAN学习目标Trunk接口的配置方法掌握在单个物理接口上配置多个子接口的方法VLAN间实现ARP通信的配置方法拓扑图1.3单臂路由实验拓扑图场景VLAN来1-3VLAN学习目标Trunk接口的配置方法掌握在单个物理接口上配置多个子接口的方法VLAN间实现ARP通信的配置方法拓扑图1.3单臂路由实验拓扑图场景VLAN来不同部门之间的二层通信，间的通信，网络管理员决定借助路由器，通过配置单臂路由实现R1与R3之间跨VLAN通信的需求。操作步骤步骤一实验环境准备1开始配置，然后跳过步骤2。如果使用的设备包含上一个实验的配置，请直接从步骤2开始配置。R1、R3和S1的设备名称，并按照拓扑图配置R1的G0/0/1接口的IP地址。<>system-viewEntersystemview,returnuserviewwithCtrl+Z.[]sysnameR1[R1]interface操作步骤步骤一实验环境准备1开始配置，然后跳过步骤2。如果使用的设备包含上一个实验的配置，请直接从步骤2开始配置。R1、R3和S1的设备名称，并按照拓扑图配置R1的G0/0/1接口的IP地址。<>system-viewEntersystemview,returnuserviewwithCtrl+Z.[]sysnameR1[R1]interfaceGigabitEthernet0/0/1[R1-GigabitEthernet0/0/1]ipaddress24<>system-viewEntersystemview,returnuserviewwithCtrl+Z.[]sysnameR3<Quidway>system-view[Quidway]sysnameS1步骤二为R3配置IPR3上的G0/0/1接口的IP地址。[R3]interfaceGigabitEthernet0/0/1[R3-GigabitEthernet0/0/1]ipaddress24步骤三创建VLAN在S1上创建VLAN4和VLAN8，将端口G0/0/1加入到VLAN4中，将端口G0/0/3加入到VLAN8中。[S1]vlanbatch48Info:Thisoperationmaytakeafewseconds.Pleasewaitforamoment...done.[S1]interfaceGigabitEthernet0/0/1[S1-GigabitEthernet0/0/1]portlink-typeaccess[S1-GigabitEthernet0/0/1]portdefaultvlan4[S1-GigabitEthernet0/0/1]quit[S1]interfaceGigabitEthernet0/0/3[S1-GigabitEthernet0/0/3]portlink-typeaccess[S1-GigabitEthernet0/0/3]portdefaultvlan8[S1-GigabitEthernet0/0/3]quit[S1]interfaceGigabitEthernet0/0/1[S1-GigabitEthernet0/0/1]portlink-typeaccess[S1-GigabitEthernet0/0/1]portdefaultvlan4[S1-GigabitEthernet0/0/1]quit[S1]interfaceGigabitEthernet0/0/3[S1-GigabitEthernet0/0/3]portlink-typeaccess[S1-GigabitEthernet0/0/3]portdefaultvlan8[S1-GigabitEthernet0/0/3]quit将S1连接R2路由器的G0/0/2端口配置为Trunk接口，并VLAN8的报文通过。[S1]interfaceGigabitEthernet0/0/2VLAN4和[S1-GigabitEthernet0/0/2]portlink-typetrunk[S1-GigabitEthernet0/0/2]porttrunkallow-passvlan48步骤四配置R2VLAN由于路由器只有一个实际的物理接口与交换机S1相连，而实际上不同部门的网关8的网关。<>system-viewEntersystemview,returnuserviewwithCtrl+Z.[]sysnameR2[R2]interfaceGigabitEthernet0/0/1.1[R2-GigabitEthernet0/0/1.1]ipaddress5424[R2-GigabitEthernet0/0/1.1]dot1qterminationvid4[R2-GigabitEthernet0/0/1.1]arpbroadcastenable[R2-GigabitEthernet0/0/1.1]quit[R2]interfaceGigabitEthernet0/0/1.3[R2-GigabitEthernet0/0/1.3]ipaddress5424[R2-GigabitEthernet0/0/1.3]dot1qterminationvid8[R2-GigabitEthernet0/0/1.3]arpbroadcastenable和R3上各配置一条默认路由指向各自的网关。[R1]iproute-static54[R3]iproute-static54R1与R3间的连通性。<R1>pingPING:56[R2-GigabitEthernet0/0/1.3]arpbroadcastenable和R3上各配置一条默认路由指向各自的网关。[R1]iproute-static54[R3]iproute-static54R1与R3间的连通性。<R1>pingPING:56databytes,pressCTRL_CtobreakReplyfrom:bytes=56Sequence=1ttl=254time=10msReplyfrom:bytes=56Sequence=2ttl=254time=1msReplyfrom:bytes=56Sequence=3ttl=254time=1msReplyfrom:bytes=56Sequence=4ttl=254time=10msReplyfrom:bytes=56Sequence=5ttl=254time=1ms---pingstatistics---5packet(s)transmitted5packet(s)received0.00%packetlossround-tripmin/avg/max=1/4/10ms[R2]displayiprouting-tableRouteFlags:R-relay,D-downloadtofibTables:PublicDestinations:10Routes:10Destination/MaskProtoPreCostFlagsNextHopInterface54/32Direct00DGigabitEthernet0/0/.0/24 Direct0 0 D 54 55/32Direct00DGigabitEthernet0/0/.254/32Direct00DGigabitEthernet0/0/1.355/32Direct00DGigabitEthernet0/0/1.3/8Direct00DInLoopBack0/32Direct00DInLoopBack055/32Direct00DInLoopBack055/32Direct00DInLoopBack0配置文件current-configuration[V200R007C00SPC600]#sysnameR1#interfaceGigabitEthernet0/0/1ipaddress#ip55/32Direct00DGigabitEthernet0/0/.254/32Direct00DGigabitEthernet0/0/1.355/32Direct00DGigabitEthernet0/0/1.3/8Direct00DInLoopBack0/32Direct00DInLoopBack055/32Direct00DInLoopBack055/32Direct00DInLoopBack0配置文件current-configuration[V200R007C00SPC600]#sysnameR1#interfaceGigabitEthernet0/0/1ipaddress#iproute-static54#returncurrent-configuration[V200R007C00SPC600]#sysnameR2#interfaceGigabitEthernet0/0/1#interfaceGigabitEthernet0/0/.0/24 Direct0 0 D 54 dot1qterminationvid4ipaddress54arpbroadcastenable#interfaceGigabitEthernet0/0/1.3dot1qterminationviddot1qterminationvid4ipaddress54arpbroadcastenable#interfaceGigabitEthernet0/0/1.3dot1qterminationvid8ipaddress54arpbroadcastenable#returncurrent-configuration[V200R007C00SPC600]#sysnameR3#interfaceGigabitEthernet0/0/1ipaddress#iproute-static54#returncurrent-configuration!SoftwareVersionV200R008C00SPC500#sysnameS1#vlanbatch48#interfaceGigabitEthernet0/0/1portlink-typeaccessportdefaultvlan4interfaceGigabitEthernet0/0/1portlink-typeaccessportdefaultvlan4#interfaceGigabitEthernet0/0/2portlink-typetrunkporttrunkallow-passvlan48#interfaceGigabitEthernet0/0/3portlink-typeaccessportdefaultvlan8#return1-4配置三层交换学习目标VLAN间通信的配置方法链路实现VLAN间通信的配置方法VLAN间配置动态路由协议OSPF的方法拓扑图图1.4三层交换实验拓扑图场景1-4配置三层交换学习目标VLAN间通信的配置方法链路实现VLAN间通信的配置方法VLAN间配置动态路由协议OSPF的方法拓扑图图1.4三层交换实验拓扑图场景VLAN间通信。作为企业的网络管理员，您需要在三层交换机配置VLANIF接口的三层功能，使得如上网络能够进行三层通信，还需要配置路由协议。操作步骤步骤一实验环境准备12。如果使用的设备包含上一个实验的配置，请直接从步骤2开始配置。IP地址配置为/24，在S1和S2之间配置Eth-Trunk，并关闭S3和S4上的无关端口。<>system-viewEntersystemview,returnuserviewwithCtrl+Z.[]sysnameR1[R1]interfaceGigabitEthernet0/0/1[R1-GigabitEthernet0/0/1]ipaddress24<>system-viewIP地址配置为/24，在S1和S2之间配置Eth-Trunk，并关闭S3和S4上的无关端口。<>system-viewEntersystemview,returnuserviewwithCtrl+Z.[]sysnameR1[R1]interfaceGigabitEthernet0/0/1[R1-GigabitEthernet0/0/1]ipaddress24<>system-viewEntersystemview,returnuserviewwithCtrl+Z.[]sysnameR3<Quidway>system-view[Quidway]sysnameS1[S1]interfaceEth-Trunk1acplink-typetrunk[S1-Eth-Trunk1]porttrunkallow-passvlanall[S1]interfaceGigabitEthernet0/0/9[S1-GigabitEt