华为mstp、vrrp、ospf、isis、bgp等综合一起排错

最终实现左边私网和右边私网全部ping通

SW1

vlan batch 12 34

stp region-configuration //mstp配置

region-name test

instance 12 vlan 12

instance 34 vlan 34

active region-configuration

interface GigabitEthernet0/0/3

port link-type trunk

port trunk allow-pass vlan 12 34

interface GigabitEthernet0/0/4

port link-type trunk

port trunk allow-pass vlan 12 34

interface GigabitEthernet0/0/10

port link-type access

port default vlan 12

interface GigabitEthernet0/0/11

port link-type access

port default vlan 12

SW2

vlan batch 12 34

stp region-configuration

region-name test

instance 12 vlan 12

instance 34 vlan 34

active region-configuration

interface GigabitEthernet0/0/3

port link-type trunk

port trunk allow-pass vlan 12 34

interface GigabitEthernet0/0/4

port link-type trunk

port trunk allow-pass vlan 12 34

interface GigabitEthernet0/0/10

port link-type access

port default vlan 34

interface GigabitEthernet0/0/11

port link-type access

port default vlan 34

SW3

vlan batch 12 to 13 34

stp instance 12 root primary //设置为主根

stp instance 34 root secondary //设置为备根

stp region-configuration

region-name test

instance 12 vlan 12

instance 34 vlan 34

active region-configuration

interface Vlanif12

ip address 192.168.12.3 255.255.255.0

vrrp vrid 1 virtual-ip 192.168.12.254 //vrrp配置

vrrp vrid 1 priority 150

interface Vlanif13

ip address 10.0.13.3 255.255.255.0

interface Vlanif34

ip address 192.168.34.3 255.255.255.0

vrrp vrid 2 virtual-ip 192.168.34.254

interface MEth0/0/1

interface GigabitEthernet0/0/1

port link-type access

port default vlan 13

interface GigabitEthernet0/0/2

interface GigabitEthernet0/0/3

port link-type trunk

port trunk allow-pass vlan 12 34

interface GigabitEthernet0/0/4

port link-type trunk

port trunk allow-pass vlan 12 34

ip route-static 0.0.0.0 0.0.0.0 10.0.13.1

SW4

vlan batch 12 14 34

stp instance 12 root secondary

stp instance 34 root primary

stp region-configuration

region-name test

instance 12 vlan 12

instance 34 vlan 34

active region-configuration

interface Vlanif12

ip address 192.168.12.4 255.255.255.0

vrrp vrid 1 virtual-ip 192.168.12.254

interface Vlanif14

ip address 10.0.14.4 255.255.255.0

interface Vlanif34

ip address 192.168.34.4 255.255.255.0

vrrp vrid 2 virtual-ip 192.168.34.254

vrrp vrid 2 priority 150

interface MEth0/0/1

interface GigabitEthernet0/0/1

interface GigabitEthernet0/0/2

port link-type access

port default vlan 14

interface GigabitEthernet0/0/3

port link-type trunk

port trunk allow-pass vlan 12 34

interface GigabitEthernet0/0/4

port link-type trunk

port trunk allow-pass vlan 12 34

ip route-static 0.0.0.0 0.0.0.0 10.0.14.1

R1

interface GigabitEthernet0/0/0

ip address 10.0.12.1 255.255.255.0

interface GigabitEthernet0/0/1

ip address 10.0.13.1 255.255.255.0

interface GigabitEthernet0/0/2

ip address 10.0.14.1 255.255.255.0

interface LoopBack0

ip address 10.0.1.1 255.255.255.255

bgp 100

router-id 10.0.1.1

peer 10.0.2.2 as-number 100

peer 10.0.2.2 connect-interface LoopBack0

ipv4-family unicast

undo synchronization

import-route static //导入静态,刚好静态通过ip route-static查看只有12、34段

peer 10.0.2.2 enable

peer 10.0.2.2 next-hop-local

ospf 1 router-id 10.0.1.1

area 0.0.0.0

network 10.0.1.1 0.0.0.0

network 10.0.12.1 0.0.0.0

ip route-static 192.168.12.0 255.255.255.0 10.0.13.3

ip route-static 192.168.12.0 255.255.255.0 10.0.14.4 preference 70

ip route-static 192.168.34.0 255.255.255.0 10.0.13.3 preference 70

ip route-static 192.168.34.0 255.255.255.0 10.0.14.4

//让12和34段的回去的包走原来出去的路径回包,源进源出

R2

isis 1

cost-style wide

network-entity 49.0001.0000.0000.0002.00

import-route ospf 1 level-1 //右边和r3建立的是级别1,这里导入ospf必须选择级别1

interface GigabitEthernet0/0/0

ip address 10.0.12.2 255.255.255.0

interface GigabitEthernet0/0/1

ip address 10.0.23.2 255.255.255.0

isis enable 1

isis circuit-level level-1 //只和右边r3建立的是级别1,所以不让这个口发级别2的包出

interface LoopBack0

ip address 10.0.2.2 255.255.255.255

isis enable 1

bgp 100

router-id 10.0.2.2

peer 10.0.1.1 as-number 100

peer 10.0.1.1 connect-interface LoopBack0

peer 10.0.3.3 as-number 100

peer 10.0.3.3 connect-interface LoopBack0

ipv4-family unicast

undo synchronization

peer 10.0.1.1 enable

peer 10.0.1.1 reflect-client

peer 10.0.3.3 enable

peer 10.0.3.3 reflect-client

ospf 1 router-id 10.0.2.2

import-route isis 1

area 0.0.0.0

network 10.0.2.2 0.0.0.0

network 10.0.12.2 0.0.0.0

R3

dhcp enable

ip pool test

gateway-list 192.168.56.254

network 192.168.56.0 mask 255.255.255.0

excluded-ip-address 192.168.56.6

dns-list 192.168.1.1

isis 1

is-level level-1

cost-style wide

network-entity 49.0001.0000.0000.0003.00

firewall zone Local

priority 15

interface GigabitEthernet0/0/0

interface GigabitEthernet0/0/1

ip address 10.0.23.3 255.255.255.0

isis enable 1

interface GigabitEthernet0/0/2.35 //用子接口

dot1q termination vid 35

ip address 10.0.35.3 255.255.255.0

arp broadcast enable

dhcp select global

interface LoopBack0

ip address 10.0.3.3 255.255.255.255

isis enable 1

bgp 100

router-id 10.0.3.3

peer 10.0.2.2 as-number 100

peer 10.0.2.2 connect-interface LoopBack0

ipv4-family unicast

undo synchronization

import-route static //导入静态,刚好静态通过ip route-static查看只有56段

peer 10.0.2.2 enable

peer 10.0.2.2 next-hop-local

ip route-static 192.168.56.0 255.255.255.0 10.0.35.5

SW5

vlan batch 35 56

dhcp enable

interface Vlanif35

ip address 10.0.35.5 255.255.255.0

interface Vlanif56

ip address 192.168.56.254 255.255.255.0

dhcp select relay //中继R3上面的dhcp地址池

dhcp relay server-ip 10.0.35.3

interface GigabitEthernet0/0/2

port link-type trunk

port trunk allow-pass vlan 35

interface GigabitEthernet0/0/4

port link-type trunk

port trunk allow-pass vlan 56

ip route-static 0.0.0.0 0.0.0.0 10.0.35.3

SW6

vlan batch 56

interface GigabitEthernet0/0/4

port link-type trunk

port trunk allow-pass vlan 56

interface GigabitEthernet0/0/10

port link-type access

port default vlan 56

interface GigabitEthernet0/0/11

port link-type access

port default vlan 56

相关推荐
绿箭柠檬茶22 分钟前
Ubuntu 服务器配置转发网络访问
服务器·网络·ubuntu
real 11 小时前
传输层协议UDP
网络·网络协议·udp
獭.獭.1 小时前
Linux -- 信号【上】
linux·运维·服务器
路由侠内网穿透2 小时前
本地部署 GPS 跟踪系统 Traccar 并实现外部访问
运维·服务器·网络·windows·tcp/ip
Devil枫3 小时前
鸿蒙深链落地实战:从安全解析到异常兜底的全链路设计
安全·华为·harmonyos
广州腾科助你拿下华为认证4 小时前
华为考试:HCIE数通考试难度分析
大数据·华为
与天仙漫步星海4 小时前
华为基本命令
华为
ZERO_pan5 小时前
服务器装机遇到的问题
运维·服务器
l1t5 小时前
利用DeepSeek实现服务器客户端模式的DuckDB原型
服务器·c语言·数据库·人工智能·postgresql·协议·duckdb
杀气丶5 小时前
Linux下运行芙蕾雅天堂2【俄文简译L2FATER】
运维·服务器·天堂2·l2fater·l2fater.cn