用华为模拟器ENSP编写一个电子信息学院数据中心网络及机房规划设计
作者:快盘下载 人气:- 文章目录
-
摘要
一、数据中心的拓扑和早期概念图
二、核心代码展示
- 2.读入数据
-
- 总结
摘要
;展示部分文档;想要细节文档看评论区;
电子信息学院数据中心经过几年的快速发展;已经跟不上信息化时代的步伐;硬件设备陈旧;网络冗余差;安全性差;耗能高;管理麻烦复杂;逐渐满足不了学院对数据的安全要求和管理要求;需要对数据中心重新进行规划与设计;通过更换更高性能的硬件设施;配置冗余;防火墙;远程控制;虚拟平台;技术;从设备、管理、安全等方面对数据中心存在的问题进行系统性的规划设计。根据实际配置网络和搭建设备解决了网络冗余问题;加入防火墙及一系列的策略配置解决了安全问题;集中放置解决了管理问题问题;在硬件的选取和网络搭建上解决了耗能高问题;最终在机房中通过设备的选取;设计和摆放;解决了电磁强度、屏蔽、防漏、电源质量、振动、防雷、接地和安全保卫等要求。
关键词;数据中心机房;机房环境;安全可靠;先进
一、数据中心的拓扑和早期概念图
存储网;
业务网;
管理网;
网络拓扑图结束;我们来看核心代码
二、核心代码展示
服务器配置;
外网服务器;
外网主机;
内网服务器ping;
Ping外网服务器;
连通性测试完毕。
管理网;
测试;
主机是否可以ping通服务器和外网;
测试内网;
测试外网;
测试成功
业务网;
测试;
测试成功
核心代码展示;
配置思路和布局; Sw1: <Huawei>sys Enter system view, return user view with Ctrl;Z. [Huawei]sys sw1;改名; [sw1]un in EN;关闭信息提示; Info: Information center is disabled. [sw1]VLAN batch 10 20 30 40 50 60 100 101;创建vlan; [sw1]int Vlanif 10;进入vlan10; [sw1-Vlanif10]ip ad 192.168.10.254 24;配置IP;做后面配置的网关; [sw1-Vlanif10]vrrp vrid 10 virtual-ip 192.168.10.252;配置VRRP协议的虚拟IP地址; [sw1-Vlanif10]vrrp vrid 10 priority 120;配置优先级; [sw1-Vlanif10]vrrp vrid 10 track interface GigabitEthernet 0/0/1;创建监视端口实现快速主备切换; [sw1-Vlanif10]vrrp vrid 10 track interface GigabitEthernet 0/0/2;创建监视端口实现快速主备切换; [sw1-Vlanif20]q [sw1]int Vlanif 30 [sw1-Vlanif30]ip ad 192.168.30.254 24 [sw1-Vlanif30]vrrp vrid 30 virtual-ip 192.168.30.252 [sw1-Vlanif30]vrrp vrid 30 priority 120 [sw1-Vlanif30]vrrp vrid 30 track interface GigabitEthernet 0/0/1 [sw1-Vlanif30]vrrp vrid 30 track interface GigabitEthernet 0/0/2 [sw1-Vlanif30]q [sw1]int Vlanif 40 [sw1-Vlanif40]ip ad 192.168.40.254 24 [sw1-Vlanif40]vrrp vrid 40 virtual-ip 192.168.40.252 [sw1-Vlanif40]vrrp vrid 40 priority 120[sw1-Vlanif40]vrrp vrid 40 track interface GigabitEthernet 0/0/1 [sw1-Vlanif40]vrrp vrid 40 track interface GigabitEthernet 0/0/2 [sw1-Vlanif40]q [sw1]int Vlanif 50 [sw1-Vlanif50]ip ad 192.168.50.254 24 [sw1-Vlanif50]vrrp vrid 50 virtual-ip 192.168.50.252 [sw1-Vlanif50]vrrp vrid 50 track interface GigabitEthernet 0/0/1 [sw1-Vlanif50]vrrp vrid 50 track interface GigabitEthernet 0/0/2 [sw1-Vlanif50]q [sw1]int Vlanif 60 [sw1-Vlanif60] [sw1-Vlanif60]ip address 192.168.60.254 24 [sw1-Vlanif60]vrrp vrid 60 virtual-ip 192.168.60.252 [sw1-Vlanif60]vrrp vrid 60 track interface GigabitEthernet 0/0/1 [sw1-Vlanif60]vrrp vrid 60 track interface GigabitEthernet 0/0/2 [sw1]vlan batch 5 7;创建vlan; Info: This operation may take a few seconds. Please wait for a moment...done. [sw1]int Vlanif 5 [sw1-Vlanif5]ip ad 192.168.5.2 24 [sw1-Vlanif5]int vlan7 [sw1-Vlanif7]ip ad 192.168.7.2 24 [sw1-Vlanif7]q [sw1]int g [sw1]int GigabitEthernet 0/0/1 [sw1-GigabitEthernet0/0/1]port link-type access ;配置接口类型为接入模式; [sw1-GigabitEthernet0/0/1]port default vlan 5;允许通过vlan5; [sw1-GigabitEthernet0/0/1]int g [sw1-GigabitEthernet0/0/1]q [sw1]int g [sw1]int GigabitEthernet 0/0/2 [sw1-GigabitEthernet0/0/2]port link-type access [sw1-GigabitEthernet0/0/2]port default vlan 7 [sw1-GigabitEthernet0/0/2]q [sw1] User interface con0 is available [sw1]int e [sw1]int Eth-Trunk 1;创建链路聚合端口; [sw1-Eth-Trunk1]port link-type trunk ;改为通道模式; [sw1-Eth-Trunk1]port trunk allow-pass vlan all ;允许所有vlan通过; [sw1-Eth-Trunk1]trunkport GigabitEthernet 0/0/3;加入trunk口; [sw1-Eth-Trunk1]trunkport GigabitEthernet 0/0/4 [sw1]int g [sw1]int GigabitEthernet 0/0/5 [sw1-GigabitEthernet0/0/5]port link-type trunk [sw1-GigabitEthernet0/0/5]port trunk allow-pass vlan all [sw1-GigabitEthernet0/0/5]int GigabitEthernet 0/0/6 [sw1-GigabitEthernet0/0/6]port link-type trunk [sw1-GigabitEthernet0/0/6]port trunk allow-pass vlan all [sw1-GigabitEthernet0/0/6]int GigabitEthernet 0/0/7 [sw1-GigabitEthernet0/0/7]port link-type trunk [sw1-GigabitEthernet0/0/7]port trunk allow-pass vlan all [sw1-GigabitEthernet0/0/7]int GigabitEthernet 0/0/10 [sw1-GigabitEthernet0/0/10]port link-type trunk [sw1-GigabitEthernet0/0/10]port trunk allow-pass vlan all [sw1-GigabitEthernet0/0/10]q [sw1]int GigabitEthernet 0/0/11 [sw1-GigabitEthernet0/0/8] [sw1]stp en [sw1]stp enable ;配置生成树; [sw1]stp region-configuration进入生成树配置模式; [sw1-mst-region]re [sw1-mst-region]region-name huawei;改名; [sw1-mst-region]re [sw1-mst-region]region-name [sw1-mst-region]reVision-level 5;配置生成树的权限; [sw1-mst-region]instance 1 vlan 10 20 30 100;把vlan划分到实例中; [sw1-mst-region]instance 2 vlan 40 50 60 [sw1-mst-region]active region-configuration ;激活实例; Info: This operation may take a few seconds. Please wait for a moment...done. [sw1]stp instance 1 root primary ;配置实例的优先级的主次; [sw1]stp instance 2 root secondary ;配置实例的优先级的主次; [sw1] Sw2: [sw2] [sw2]un in en Info: Information center is disabled. [sw2]vlan batch 10 20 30 40 50 60 100 101 6 8;创建vlan; Info: This operation may take a few seconds. Please wait for a moment...done. [sw2]int vlan [sw2]int Vlanif 10 [sw2-Vlanif10]ip address 192.168.10.253 24 [sw2-Vlanif10]vrrp vrid 10 virtual-ip 192.168.10.252 [sw2-Vlanif10]vrrp vrid 10 track interface GigabitEthernet 0/0/1 [sw2-Vlanif10]vrrp vrid 10 track interface GigabitEthernet 0/0/2 [sw2-Vlanif10]q [sw2]int vl [sw2]int Vlanif 20 [sw2-Vlanif20]ip address 192.168.20.253 24 [sw2-Vlanif20]vrrp vrid 20 virtual-ip 192.168.20.252 [sw2-Vlanif20]vrrp vrid 20 track interface GigabitEthernet 0/0/1 [sw2-Vlanif20]vrrp vrid 20 track interface GigabitEthernet 0/0/2 [sw2-Vlanif20]q [sw2]int Vlanif 30 [sw2-Vlanif30]ip ad 192.168.30.253 24 [sw2-Vlanif30]vrrp vrid 30 virtual-ip 192.168.30.252 [sw2-Vlanif30]vrrp vrid 30 track interface GigabitEthernet 0/0/1 [sw2-Vlanif30]vrrp vrid 30 track interface GigabitEthernet 0/0/2 [sw2-Vlanif30]q [sw2]int Vlanif 40 [sw2-Vlanif40]ip ad 192.168.40.253 24 [sw2-Vlanif40]vrrp vrid 40 virtual-ip 192.168.40.252 [sw2-Vlanif40]vrrp vrid 40 track interface GigabitEthernet 0/0/1 [sw2-Vlanif40]vrrp vrid 40 track interface GigabitEthernet 0/0/2 [sw2-Vlanif40]q [sw2]int Vlanif 50 [sw2-Vlanif50]q [sw2]int Vlanif 40 [sw2-Vlanif40]display this # interface Vlanif40 ip address 192.168.40.253 255.255.255.0 vrrp vrid 40 virtual-ip 192.168.40.252 vrrp vrid 40 track interface GigabitEthernet0/0/1 vrrp vrid 40 track interface GigabitEthernet0/0/2 # return [sw2-Vlanif40]vrrp vrid 40 priority 120 [sw2-Vlanif40]display this # interface Vlanif40 ip address 192.168.40.253 255.255.255.0 vrrp vrid 40 virtual-ip 192.168.40.252 vrrp vrid 40 priority 120 vrrp vrid 40 track interface GigabitEthernet0/0/1 vrrp vrid 40 track interface GigabitEthernet0/0/2 # return [sw2-Vlanif40]q [sw2]int v [sw2]int Vlanif 50 [sw2-Vlanif50]ip ad 192.168.50.253 24 [sw2-Vlanif50]vrrp vrid 50 virtual-ip 192.168.50.252 [sw2-Vlanif50]vrrp vrid 50 priority 120 [sw2-Vlanif50]vrrp vrid 50 track interface GigabitEthernet 0/0/1 [sw2-Vlanif50]vrrp vrid 50 track interface GigabitEthernet 0/0/2 [sw2-Vlanif50]q [sw2]int vlna [sw2]int vl [sw2]int Vlanif 60 [sw2-Vlanif60]ip ad 192.168.60.253 24 [sw2-Vlanif60]vrrp vrid 60 virtual-ip 192.168.60.252 [sw2-Vlanif60]vrrp vrid 60 priority 120 [sw2-Vlanif60]vrrp vrid 60 track interface GigabitEthernet 0/0/1 [sw2-Vlanif60]vrrp vrid 60 track interface GigabitEthernet 0/0/2 [sw2-Vlanif60] [sw2-Vlanif60]q [sw2][sw2-Vlanif60] [sw2-Vlanif60]q [sw2]int Vlanif 6 [sw2-Vlanif6]ip ad 192.168.6.2 24 [sw2-Vlanif6]q [sw2]int Vlanif 8 [sw2-Vlanif8]ip ad 192.168.8.2 24 [sw2-Vlanif8]q [sw2]int g [sw2]int GigabitEthernet 0/0/1 [sw2-GigabitEthernet0/0/1]port link-type access [sw2-GigabitEthernet0/0/1]port default vlan 8 [sw2-GigabitEthernet0/0/1]int g0/0/2 [sw2-GigabitEthernet0/0/2]port link-type access [sw2-GigabitEthernet0/0/2]port default vlan 6 [sw2-GigabitEthernet0/0/2]q [sw2]int e [sw2]int Eth-Trunk [sw2]int Eth-Trunk 1 [sw2-Eth-Trunk1]port link-type trunk [sw2-Eth-Trunk1]port trunk allow-pass vlan all [sw2-Eth-Trunk1]trunkport GigabitEthernet 0/0/3 Info: This operation may take a few seconds. Please wait for a moment...done. [sw2-Eth-Trunk1]trunkport GigabitEthernet 0/0/4 [sw2-Eth-Trunk1]q [sw2]int g [sw2]int GigabitEthernet 0/0/6 [sw2-GigabitEthernet0/0/6]port link-type trunk [sw2-GigabitEthernet0/0/6]port trunk allow-pass vlan all [sw2-GigabitEthernet0/0/6]int GigabitEthernet 0/0/7 [sw2-GigabitEthernet0/0/7]port link-type trunk [sw2-GigabitEthernet0/0/7]p [sw2-GigabitEthernet0/0/7]port trunk allow-pass vlan all [sw2-GigabitEthernet0/0/7]int GigabitEthernet 0/0/5 [sw2-GigabitEthernet0/0/5]port link-type trunk [sw2-GigabitEthernet0/0/5]port trunk allow-pass vlan all [sw2-GigabitEthernet0/0/5]int GigabitEthernet 0/0/10 [sw2-GigabitEthernet0/0/10]port link-type trunk [sw2-GigabitEthernet0/0/10]int GigabitEthernet 0/0/10 [sw2-GigabitEthernet0/0/10]int GigabitEthernet 0/0/9 [sw2-GigabitEthernet0/0/9]port link-type trunk [sw2-GigabitEthernet0/0/9]port trunk allow-pass vlan all [sw2-GigabitEthernet0/0/9]int GigabitEthernet 0/0/11 [sw2-GigabitEthernet0/0/11]port link-type trunk [sw2-GigabitEthernet0/0/11]port trunk allow-pass vlan all Sw3: <Huawei>sys Enter system view, return user view with Ctrl;Z. [Huawei]sys sw3 [sw3]un in en Info: Information center is disabled. [sw3]vlan batch vlan 10 20 30 40 50 60 100 101 [sw3]stp enable [sw3]st [sw3]stp re [sw3]stp region-configuration [sw3-mst-region]re [sw3-mst-region]region-name huawei [sw3-mst-region]re [sw3-mst-region]region-name [sw3-mst-region]revision-level 5 [sw3-mst-region]in [sw3-mst-region]instance 1 v [sw3-mst-region]instance 1 vlan 10 20 30 100 [sw3-mst-region]in [sw3-mst-region]instance 2 v [sw3-mst-region]instance 2 vlan 40 50 60 [sw3-mst-region]active region-configuration [sw3-mst-region]q [sw3]int g [sw3]int GigabitEthernet 0/0/1 [sw3-GigabitEthernet0/0/1]port link-type trunk [sw3-GigabitEthernet0/0/1]port trunk allow-pass vlan al [sw3-GigabitEthernet0/0/1]int g0/0/2 [sw3-GigabitEthernet0/0/2]port link-type trunk [sw3-GigabitEthernet0/0/2]po [sw3-GigabitEthernet0/0/2]port trunk allow-pass vlan all [sw3-GigabitEthernet0/0/2]int e0/0/1 [sw3-Ethernet0/0/1]port link-type access [sw3-Ethernet0/0/1]port default vlan 10 [sw3-Ethernet0/0/1]int e0/0/2 [sw3-Ethernet0/0/2]port link-type access [sw3-Ethernet0/0/2]port default vlan 10 [sw3-Ethernet0/0/2]q [sw3] Sw4: The device is running! <Huawei> <Huawei>sys Enter system view, return user view with Ctrl;Z. [Huawei]un in en Info: Information center is disabled. [Huawei]sys sw4 [sw4]vlan batch 10 20 30 40 50 60 100 101 Info: This operation may take a few seconds. Please wait for a moment...done. # stp region-configuration region-name huawei revision-level 5 instance 1 vlan 10 20 30 100 instance 2 vlan 40 50 60 active region-configuration # return [sw4-mst-region]st [sw4-mst-region]stp re [sw4-mst-region]q [sw4]st [sw4]stp re [sw4]stp region-configuration [sw4-mst-region]q [sw4]int g [sw4]int GigabitEthernet 0/0/1 [sw4-GigabitEthernet0/0/1]port link-type trunk [sw4-GigabitEthernet0/0/1]port trunk allow-pass vlan all [sw4-GigabitEthernet0/0/1]int g0/0/2 [sw4-GigabitEthernet0/0/2]port link-type trunk [sw4-GigabitEthernet0/0/2]port trunk allow-pass vlan all [sw4-GigabitEthernet0/0/2]q [sw4]int e [sw4]int Eth [sw4]int Ethernet0/0/1 [sw4-Ethernet0/0/1]port link-type access [sw4-Ethernet0/0/1]port default vlan 20 [sw4-Ethernet0/0/1]int e0/0/2 [sw4-Ethernet0/0/2]port link-type ac [sw4-Ethernet0/0/2]port default vlan 20 [sw4-Ethernet0/0/2]q [sw4]q <sw4>save Sw5: The device is running! <Huawei> <Huawei>sys Enter system view, return user view with Ctrl;Z. [Huawei]un in en Info: Information center is disabled. [Huawei]sys sw5 [sw5]vlan batch 10 20 30 40 50 60 100 101 [sw5]vlan batch 10 20 30 40 50 60 100 101 Info: This operation may take a few seconds. Please wait for a moment...done. [sw5]stp enable [sw5]stp region-configuration [sw5-mst-region]region-name huawei [sw5-mst-region]revision-level 5 [sw5-mst-region]instance 1 vlan 10 20 30 100 [sw5-mst-region]instance 2 vlan 40 50 60 [sw5-mst-region]active region-configuration Info: This operation may take a few seconds. Please wait for a moment...done. [sw5]int GigabitEthernet 0/0/1 [sw5-GigabitEthernet0/0/1]port link-type trunk [sw5-GigabitEthernet0/0/1]port trunk allow-pass vlan al [sw5-GigabitEthernet0/0/1]int g0/0/2 [sw5-GigabitEthernet0/0/2]port link-type trunk [sw5-GigabitEthernet0/0/2]port trunk allow-pass vlan all [sw5-GigabitEthernet0/0/2]int e [sw5-GigabitEthernet0/0/2]int e0/0/1 [sw5-Ethernet0/0/1]port link-type access [sw5-Ethernet0/0/1]port default vlan 30 [sw5-Ethernet0/0/1]int e0/0/2 [sw5-Ethernet0/0/2]port link-type access [sw5-Ethernet0/0/2]port default vlan 30 [sw5-Ethernet0/0/2] Sw6: The device is running! <Huawei> <Huawei>sys Enter system view, return user view with Ctrl;Z. [Huawei]un in en Info: Information center is disabled. [Huawei]sys ^ Error:Incomplete command found at ;^; position. [Huawei]sys sw6 [sw6]vlan batch 10 20 30 40 50 60 100 101 Info: This operation may take a few seconds. Please wait for a moment...done. [sw6]stp enable [sw6]stp enable [sw6]stp region-configuration [sw6-mst-region]region-name huawei [sw6-mst-region]region-name huawei [sw6-mst-region]revision-level 5 [sw6-mst-region]instance 1 vlan 10 20 30 100 [sw6-mst-region]instance 2 vlan 40 50 60 [sw6-mst-region]active region-configuration Info: This operation may take a few seconds. Please wait for a moment...done. [sw6-mst-region]q [sw6]int g [sw6]int GigabitEthernet 0/0/1 [sw6-GigabitEthernet0/0/1]port link-type trunk [sw6-GigabitEthernet0/0/1]port trunk allow-pass vlan all [sw6-GigabitEthernet0/0/1]int g [sw6-GigabitEthernet0/0/1]int g0/0/2 [sw6-GigabitEthernet0/0/2]port link-type trunk [sw6-GigabitEthernet0/0/2]port trunk allow-pass vlan all [sw6-GigabitEthernet0/0/2]int e0/0/1 [sw6-Ethernet0/0/1]port link-type access v [sw6-Ethernet0/0/1]port default vlan 40 [sw6-Ethernet0/0/1]int e0/0/2 [sw6-Ethernet0/0/2]port link-type access [sw6-Ethernet0/0/2]port default vlan 40 [sw6-Ethernet0/0/2] R1: [Huawei]un in en Info: Information center is disabled. [Huawei]sys R1 [R1]int g [R1]int GigabitEthernet 0/0/2 [R1-GigabitEthernet0/0/2]ip ad [R1-GigabitEthernet0/0/2]ip address 192.168.5.1 24 [R1-GigabitEthernet0/0/2]int g [R1-GigabitEthernet0/0/2]int g0/0/1 [R1-GigabitEthernet0/0/1]ip ad [R1-GigabitEthernet0/0/1]ip address 192.168.4.1 24 [R1-GigabitEthernet0/0/1]int g0/0/0 [R1-GigabitEthernet0/0/0]ip ad [R1-GigabitEthernet0/0/0]ip address 192.168.2.2 24 [R1-GigabitEthernet0/0/0] <R1> <R1> <R1> R2: <Huawei>sys Enter system view, return user view with Ctrl;Z. [Huawei]un in en Info: Information center is disabled. [Huawei]sys R2 [R2]int g [R2]int GigabitEthernet 0/0/0 [R2-GigabitEthernet0/0/0]dis [R2-GigabitEthernet0/0/0]discardth [R2-GigabitEthernet0/0/0]disp [R2-GigabitEthernet0/0/0]display th [R2-GigabitEthernet0/0/0]display this [V200R003C00] # interface GigabitEthernet0/0/0 # return [R2-GigabitEthernet0/0/0] [R2-GigabitEthernet0/0/0] [R2-GigabitEthernet0/0/0]q [R2]int g [R2]int GigabitEthernet 1/0/0 [R2-GigabitEthernet1/0/0]ip ad [R2-GigabitEthernet1/0/0]ip address 192.168.7.1 ^ Error:Incomplete command found at ;^; position. [R2-GigabitEthernet1/0/0]ip address 192.168.7.1 24 [R2-GigabitEthernet1/0/0]int g [R2-GigabitEthernet1/0/0]int g0/0/0 [R2-GigabitEthernet0/0/0]ip ad [R2-GigabitEthernet0/0/0]ip address 192.168.4.2 24 [R2-GigabitEthernet0/0/0]int g0/0/1 [R2-GigabitEthernet0/0/1]ip ad [R2-GigabitEthernet0/0/1]ip address 192.168.3.2 24 [R2-GigabitEthernet0/0/1]int g0/0/2 [R2-GigabitEthernet0/0/2]ip address 192.168.8.1 24 [R2-GigabitEthernet0/0/2] [R2-GigabitEthernet0/0/2] 防火墙的配置; FW1; <USG6000V1> <USG6000V1>sys Enter system view, return user view with Ctrl;Z. [USG6000V1]sys [USG6000V1]sysname FW1 [FW1]un in May 15 2022 01:58:59 FW1 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25.191.3 .1 configurations have been changed. The current change number is 1, the change loop count is 0, and the maximum number of records is 4095. [FW1]un in en Info: Saving log files... Info: Information center is disabled. [FW1]int g1/0/0 [FW1-GigabitEthernet1/0/0]ip ad [FW1-GigabitEthernet1/0/0]ip address 192.168.2.1 24 [FW1-GigabitEthernet1/0/0]intg1/0/1 ^ Error: Unrecognized command found at ;^; position. [FW1-GigabitEthernet1/0/0]int g1/0/1 [FW1-GigabitEthernet1/0/1]ip ad 192.168.3.1 24 [FW1-GigabitEthernet1/0/1]int g0/0/0 [FW1-GigabitEthernet0/0/0]ip ad 192.168.200.1 24 [FW1-GigabitEthernet0/0/0]int g1/0/2 [FW1-GigabitEthernet1/0/2]ip ad 200.10.10.1 30 [FW1-GigabitEthernet1/0/2]q [FW1]f [FW1]firewall z [FW1]firewall zone [FW1]firewall zone t [FW1]firewall zone trust ;配置策略;新任; [FW1-zone-trust]add interface g1/0/0;加入接口; [FW1-zone-trust]add interface g1/0/1 [FW1-zone-trust]f [FW1-zone-trust]firewall z [FW1-zone-trust]firewall z [FW1-zone-trust]q [FW1]f [FW1]firewall z [FW1]firewall zone u [FW1]firewall zone untrust ;创建不信任策略; [FW1-zone-untrust]ad [FW1-zone-untrust]add i [FW1-zone-untrust]add interface g1/0/2;加入端口; [FW1-zone-untrust]q [FW1]f [FW1]firewall d [FW1]firewall DNS [FW1]firewall detect [FW1]firewall defend [FW1]firewall zone dmz ;创建DMZ区域; [FW1-zone-dmz]ad [FW1-zone-dmz]add int g0/0/0;加入接口; Error: The interface has been added to trust security zone. [FW1]int g1/0/0 [FW1-GigabitEthernet1/0/0]service-manage all permit ;开启服务管理权限; [FW1-GigabitEthernet1/0/0]int g [FW1-GigabitEthernet1/0/0]int g1/0/1 [FW1-GigabitEthernet1/0/1]service-manage all permit [FW1]int g0/0/0 [FW1-GigabitEthernet0/0/0]service-manage all permit [FW1-GigabitEthernet0/0/0]q [FW1] [FW1] R1; [R1]os [R1]ospf 30;创建动态路由; [R1-ospf-30]area 0;创建区域; [R1-ospf-30-area-0.0.0.0]network 192.168.5.0 0.0.0.255;加入配置的IP网段; [R1-ospf-30-area-0.0.0.0]network 192.168.6.0 0.0.0.255 [R1-ospf-30-area-0.0.0.0]network 192.168.4.0 0.0.0.255 [R1-ospf-30-area-0.0.0.0]network 192.168.2.0 0.0.0.255 Sw1: <sw1>sys Enter system view, return user view with Ctrl;Z. [sw1]os [sw1]ospf 10 [sw1-ospf-10]ar [sw1-ospf-10]area 0 [sw1-ospf-10-area-0.0.0.0]netw [sw1-ospf-10-area-0.0.0.0]network 192.168.10.0 0.0.0.255 [sw1-ospf-10-area-0.0.0.0]network 192.168.20.0 0.0.0.255 [sw1-ospf-10-area-0.0.0.0]network 192.168.30.0 0.0.0.255 [sw1-ospf-10-area-0.0.0.0]network 192.168.40.0 0.0.0.255 [sw1-ospf-10-area-0.0.0.0]network 192.168.50.0 0.0.0.255 [sw1-ospf-10-area-0.0.0.0]network 192.168.60.0 0.0.0.255 [sw1-ospf-10-area-0.0.0.0]network 192.168.100.0 0.0.0.255 [sw1-ospf-10-area-0.0.0.0]network 192.168.5.0 0.0.0.255 [sw1-ospf-10-area-0.0.0.0]network 192.168.7.0 0.0.0.255 [sw1-ospf-10-area-0.0.0.0] [sw1-ospf-10-area-0.0.0.0] Sw2: [sw2]os [sw2]ospf 20 [sw2-ospf-20]ar [sw2-ospf-20]area 0 [sw2-ospf-20-area-0.0.0.0]netw [sw2-ospf-20-area-0.0.0.0]network 192.168.10.0 0.0.0.255 [sw2-ospf-20-area-0.0.0.0]network 192.168.20.0 0.0.0.255 [sw2-ospf-20-area-0.0.0.0]network 192.168.30.0 0.0.0.255 [sw2-ospf-20-area-0.0.0.0]network 192.168.40.0 0.0.0.255 [sw2-ospf-20-area-0.0.0.0]network 192.168.50.0 0.0.0.255 [sw2-ospf-20-area-0.0.0.0]network 192.168.60.0 0.0.0.255 [sw2-ospf-20-area-0.0.0.0]network 192.168.6.0 0.0.0.255 [sw2-ospf-20-area-0.0.0.0]network 192.168.8.0 0.0.0.255 [sw2-ospf-20-area-0.0.0.0] [sw2-ospf-20-area-0.0.0.0] <sw2> Fw: <FW1>sys Enter system view, return user view with Ctrl;Z. [FW1]os [FW1]ospf 50 [FW1-ospf-50]are [FW1-ospf-50]area 0 [FW1-ospf-50-area-0.0.0.0]netw [FW1-ospf-50-area-0.0.0.0]network 192.168.2.0 0.0.0.255 [FW1-ospf-50-area-0.0.0.0]network 192.168.3.0 0.0.0.255 [FW1-ospf-50-area-0.0.0.0]network 192.168.200.0 0.0.0.255 [FW1-ospf-50-area-0.0.0.0]de [FW1-ospf-50-area-0.0.0.0]default-cost [FW1-ospf-50-area-0.0.0.0]description [FW1-ospf-50-area-0.0.0.0]default-r [FW1-ospf-50-area-0.0.0.0]q [FW1-ospf-50]default-route-advertise always [FW1-ospf-50]q [FW1]ip route-static 0.0.0.0 0.0.0.0 200.10.10.2;配置静态IP; [FW1] R3: <Huawei>sys Enter system view, return user view with Ctrl;Z. [Huawei]sys R2 [R2] <Huawei>sys Enter system view, return user view with Ctrl;Z. [Huawei]sys [Huawei]sysname R2 [R2]int g0/0/0 [R2-GigabitEthernet0/0/0]ip ad 200.10.10.2 30 May 15 2022 11:36:00-08:00 R2 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP on the interface GigabitEthernet0/0/0 has entered the UP state. [R2-GigabitEthernet0/0/0] [R2-GigabitEthernet0/0/0]q [R2]un in en Info: Information center is disabled. [R2]int g0/0/1 [R2-GigabitEthernet0/0/1]ip ad 200.10.20.1 28 [R2-GigabitEthernet0/0/1] R2dhcp; R1; [R1-GigabitEthernet0/0/2]q [R1]dh [R1]dhcp en [R1]dhcp enable Info: The operation may take a few seconds. Please wait for a moment.done. [R1]ip poo [R1]ip pool vlan10 Info: It;s successful to create an IP address pool. [R1-ip-pool-vlan10]netw [R1-ip-pool-vlan10]network 192.168.10.0 ma [R1-ip-pool-vlan10]network 192.168.10.0 mask 24 [R1-ip-pool-vlan10]g [R1-ip-pool-vlan10]gateway-list 192.168.10.254 [R1-ip-pool-vlan10]dns [R1-ip-pool-vlan10]dns-list 114.114.114.114 [R1-ip-pool-vlan10]q [R1]ip poo [R1]ip pool vlan [R1]ip pool vlan20 Info: It;s successful to create an IP address pool. [R1-ip-pool-vlan20]netw [R1-ip-pool-vlan20]network 192.168.20.0 ma [R1-ip-pool-vlan20]network 192.168.20.0 mask 24 [R1-ip-pool-vlan20]g [R1-ip-pool-vlan20]gateway-list 192.168.20.254 [R1-ip-pool-vlan20]dns [R1-ip-pool-vlan20]dns-list 114.114.114.114 [R1-ip-pool-vlan20]ex [R1-ip-pool-vlan20]excluded-ip-address 192.168.20.1 192.168.20.100 [R1-ip-pool-vlan20]q [R1]ip pooo [R1]ip poo [R1]ip pool valn [R1]ip pool va [R1]ip pool vla [R1]ip pool vlan30 Info: It;s successful to create an IP address pool. [R1-ip-pool-vlan30]netw [R1-ip-pool-vlan30]network 192.168.30.0 ma [R1-ip-pool-vlan30]network 192.168.30.0 mask 24 [R1-ip-pool-vlan30]g [R1-ip-pool-vlan30]gateway-list 192.168.30.254 [R1-ip-pool-vlan30]dns [R1-ip-pool-vlan30]dns-list 114.114.114.114 [R1-ip-pool-vlan30]ex [R1-ip-pool-vlan30]excluded-ip-address 192.168.30.1 [R1-ip-pool-vlan30]q [R1]ip poo [R1]ip pool vlan [R1]ip pool vlan40 Info: It;s successful to create an IP address pool. [R1-ip-pool-vlan40]netw [R1-ip-pool-vlan40]network 192.168.40.0 ma [R1-ip-pool-vlan40]network 192.168.40.0 mask 24 [R1-ip-pool-vlan40]g [R1-ip-pool-vlan40]gateway-list 192.168.40.254 [R1-ip-pool-vlan40]dns [R1-ip-pool-vlan40]dns-list 114.114.114.114 [R1-ip-pool-vlan40]ex [R1-ip-pool-vlan40]excluded-ip-address 192.168.40.1 [R1-ip-pool-vlan40]q [R1]ip poo [R1]ip pool vlan50 Info: It;s successful to create an IP address pool. [R1-ip-pool-vlan50]netw [R1-ip-pool-vlan50]network 192.168.50.0 ma [R1-ip-pool-vlan50]network 192.168.50.0 mask 24 [R1-ip-pool-vlan50]g [R1-ip-pool-vlan50]gateway-list 192.168.50.254 [R1-ip-pool-vlan50]dns [R1-ip-pool-vlan50]dns-list 114.114.114.114 [R1-ip-pool-vlan50]ex [R1-ip-pool-vlan50]excluded-ip-address 192.168.50.1 [R1-ip-pool-vlan50]q [R1]ip pool vlan60 Info: It;s successful to create an IP address pool. [R1-ip-pool-vlan60]netw [R1-ip-pool-vlan60]network 192.168.60.0 ma [R1-ip-pool-vlan60]network 192.168.60.0 mask 24 [R1-ip-pool-vlan60]g [R1-ip-pool-vlan60]gateway-list 192.168.60.254 [R1-ip-pool-vlan60]dns [R1-ip-pool-vlan60]dns-list 114.114.114.114 [R1-ip-pool-vlan60]ex [R1-ip-pool-vlan60]excluded-ip-address 192.168.60.1 [R1-ip-pool-vlan60]q [R1] Sw1配置dhcp: <sw1> <sw1> <sw1> <sw1> <sw1>sys Enter system view, return user view with Ctrl;Z. [sw1] [sw1]ip pool vlan10 Info:It;s successful to create an IP address pool. [sw1-ip-pool-vlan10]netw [sw1-ip-pool-vlan10]network 192.168.10.0 ma [sw1-ip-pool-vlan10]network 192.168.10.0 mask 24 [sw1-ip-pool-vlan10]g [sw1-ip-pool-vlan10]gateway-list 192.168.10.252 [sw1-ip-pool-vlan10]dns [sw1-ip-pool-vlan10]dns-list 114.114.114.114 [sw1-ip-pool-vlan10]ex [sw1-ip-pool-vlan10]excluded-ip-address 192.168.10.100 192.168.10.150 [sw1-ip-pool-vlan10]dhc [sw1-ip-pool-vlan10]q [sw1]int vl [sw1]int Vlanif 10 [sw1-Vlanif10]dhcp select global [sw1-Vlanif10]q [sw1]ip poo [sw1]ip pool vlan [sw1]ip pool vlan20 [sw1]int vlan [sw1]int Vlanif 20 [sw1-Vlanif20]dhcp select global [sw1-Vlanif20]q [sw1] [sw1]ip pool vlan30 Info:It;s successful to create an IP address pool. [sw1-ip-pool-vlan30]netw [sw1-ip-pool-vlan30]network 192.168.30.0 mask 24 [sw1-ip-pool-vlan30]g [sw1-ip-pool-vlan30]gateway-list 192.168.30.252 [sw1-ip-pool-vlan30]dns [sw1-ip-pool-vlan30]dns-list 114.114.114.114 [sw1-ip-pool-vlan30]ex [sw1-ip-pool-vlan30]excluded-ip-address 192.168.30.100 192.168.30.150 [sw1-ip-pool-vlan30]q [sw1]int v [sw1]int Vlanif 30 [sw1-Vlanif30]dhcp select global [sw1-Vlanif30]q [sw1]ip poo [sw1]ip pool vlan [sw1]ip pool vlan40 Info:It;s successful to create an IP address pool. [sw1-ip-pool-vlan40]network 192.168.40.0 mask 24 [sw1-ip-pool-vlan40]dns [sw1-ip-pool-vlan40]dns-list 114.114.114.114 [sw1-ip-pool-vlan40]g [sw1-ip-pool-vlan40]gateway-list 192.168.40.252 [sw1-ip-pool-vlan40]ex [sw1-ip-pool-vlan40]excluded-ip-address 192.168.40.100 192.168.40.150 [sw1-ip-pool-vlan40]q [sw1]int v [sw1]int Vlanif 40 [sw1-Vlanif40]dhcp select global [sw1-Vlanif40]q [sw1]ip poo [sw1]ip pool v [sw1]ip pool vlan [sw1]ip pool vlan50 Info:It;s successful to create an IP address pool. [sw1-ip-pool-vlan50]network 192.168.50.0 mask 24 [sw1-ip-pool-vlan50]g [sw1-ip-pool-vlan50]gateway-list 192.168.50.252 [sw1-ip-pool-vlan50]dns [sw1-ip-pool-vlan50]dns-list 114.114.114.114 [sw1-ip-pool-vlan50]ex [sw1-ip-pool-vlan50]excluded-ip-address 192.168.50.100 192.168.50.150 [sw1-ip-pool-vlan50]q [sw1]int v [sw1]int Vlanif 50 [sw1-Vlanif50]dhcp select global [sw1-Vlanif50]q [sw1]int vlan [sw1]ip poo [sw1]ip pool v [sw1]ip pool vlan60 Info:It;s successful to create an IP address pool. [sw1-ip-pool-vlan60]netw [sw1-ip-pool-vlan60]network 192.168.60.0 ma [sw1-ip-pool-vlan60]network 192.168.60.0 mask 24 [sw1-ip-pool-vlan60]g [sw1-ip-pool-vlan60]gateway-list 192.168.60.252 [sw1-ip-pool-vlan60]dns [sw1-ip-pool-vlan60]dns-list 114.114.114.114 [sw1-ip-pool-vlan60]ex [sw1-ip-pool-vlan60]excluded-ip-address 192.168.60.100 192.168.60.150 [sw1-ip-pool-vlan60]q [sw1]int v [sw1]int Vlanif 60 [sw1-Vlanif60]dhcp select global [sw1-Vlanif60]q [sw1] Sw2dhcp配置; The device is running! <sw2>sys Enter system view, return user view with Ctrl;Z. [sw2]ip poo [sw2]ip pool vlan [sw2]ip pool vlan10 Info:It;s successful to create an IP address pool. [sw2-ip-pool-vlan10]network 192.168.10.0 mask 24 [sw2-ip-pool-vlan10]g [sw2-ip-pool-vlan10]gateway-list 192.168.10.252 [sw2-ip-pool-vlan10]dns [sw2-ip-pool-vlan10]dns-list 114.114.114.114 [sw2-ip-pool-vlan10]ex [sw2-ip-pool-vlan10]excluded-ip-address 192.168.10.100 192.168.10.150 [sw2-ip-pool-vlan10]q [sw2]int v [sw2]int Vlanif 10 [sw2-Vlanif10]dhcp select global Error: Please enable DHCP in the global view first. [sw2-Vlanif10]q [sw2]dh [sw2]dhcp enn [sw2]dhcp en [sw2]int Vlanif 10 [sw2-Vlanif10]dhcp select global [sw2-Vlanif10]q [sw2]ip poo [sw2]ip pool vlan [sw2]ip pool vlan20 Info:It;s successful to create an IP address pool. [sw2-ip-pool-vlan20]network 192.168.20.0 mask 24 [sw2-ip-pool-vlan20]dns [sw2-ip-pool-vlan20]dns-list 114.114.114.114 [sw2-ip-pool-vlan20]dns [sw2-ip-pool-vlan20]dns-list 114.114.114.114 Error:Part of the domain-name-server IP has already exist. [sw2-ip-pool-vlan20]dis [sw2-ip-pool-vlan20]display th [sw2-ip-pool-vlan20]display this # ip pool vlan20 network 192.168.20.0 mask 255.255.255.0 dns-list 114.114.114.114 # return [sw2-ip-pool-vlan20]g [sw2-ip-pool-vlan20]gateway-list 192.168.20.252 [sw2-ip-pool-vlan20]ex [sw2-ip-pool-vlan20]excluded-ip-address 192.168.20.100 192.168.20.150 [sw2-ip-pool-vlan20]q [sw2]int v [sw2]int Vlanif 20 [sw2-Vlanif20]dh [sw2-Vlanif20]dhcp se [sw2-Vlanif20]dhcp select g [sw2-Vlanif20]dhcp select global [sw2-Vlanif20]q [sw2]ip poo [sw2]ip pool v [sw2]ip pool vlan30 Info:It;s successful to create an IP address pool. [sw2-ip-pool-vlan30]network 192.168.30.0 mask 24 [sw2-ip-pool-vlan30]dns [sw2-ip-pool-vlan30]dns-list 114.114.114.114 [sw2-ip-pool-vlan30]g [sw2-ip-pool-vlan30]gateway-list 192.168.30.252 [sw2-ip-pool-vlan30]ex [sw2-ip-pool-vlan30]excluded-ip-address 192.168.30.100 192.168.30.150 [sw2-ip-pool-vlan30]q [sw2]int v [sw2]int Vlanif 30 [sw2-Vlanif30]dhcp select global [sw2-Vlanif30]q [sw2]ip pool vlan40 Info:It;s successful to create an IP address pool. [sw2-ip-pool-vlan40]network 192.168.40.0 mask 24 [sw2-ip-pool-vlan40]g [sw2-ip-pool-vlan40]gateway-list 192.168.40.252 [sw2-ip-pool-vlan40]dns [sw2-ip-pool-vlan40]dns-list 114.114.114.114 [sw2-ip-pool-vlan40]ex [sw2-ip-pool-vlan40]excluded-ip-address 192.168.40.100 192.168.40.150 [sw2-ip-pool-vlan40]q [sw2]int v [sw2]int Vlanif 40 [sw2-Vlanif40]dhcp select global [sw2-Vlanif40]q [sw2]ip poo [sw2]ip pool v [sw2]ip pool vlan50 Info:It;s successful to create an IP address pool. [sw2-ip-pool-vlan50]netw [sw2-ip-pool-vlan50]network 192.168.50.0ma [sw2-ip-pool-vlan50]network 192.168.50.0 ma [sw2-ip-pool-vlan50]network 192.168.50.0 mask 24 [sw2-ip-pool-vlan50]g [sw2-ip-pool-vlan50]gateway-list 192.168.50.252 [sw2-ip-pool-vlan50]dns [sw2-ip-pool-vlan50]dns-list 114.114.114.114. [sw2]int v [sw2]int Vlanif 50 [sw2-Vlanif50]dh [sw2-Vlanif50]dhcp se [sw2-Vlanif50]dhcp select g [sw2-Vlanif50]dhcp select global [sw2-Vlanif50]q [sw2]ip pool vlan60 Info:It;s successful to create an IP address pool. [sw2-ip-pool-vlan60]netw [sw2-ip-pool-vlan60]network 192.168.60.0 ma [sw2-ip-pool-vlan60]network 192.168.60.0 mask 24 [sw2-ip-pool-vlan60]g [sw2-ip-pool-vlan60]gateway-list 192.168.60.252 [sw2-ip-pool-vlan60]dns [sw2-ip-pool-vlan60]dns-list 114.114.114.114 [sw2-ip-pool-vlan60]ex [sw2-ip-pool-vlan60]excluded-ip-address 192.168.60.100 192.168.60.150 [sw2-ip-pool-vlan60]q [sw2]int v [sw2]int Vlanif 60 [sw2-Vlanif60]dh [sw2-Vlanif60]dhcp se [sw2-Vlanif60]dhcp select g [sw2-Vlanif60]dhcp select global [sw2-Vlanif60]q [sw2]
总结
本人也是一个大学生;这个设计配置和文档都是可以直接做毕业设计的;有人想要的话可以加我可以做完整辅导
加载全部内容