实验要求和实验成果如图所示。
LSW2不需要其他配置，其下就一台设备，不需要区分。
LSW3配置如下：
**<Huawei>sy
Enter system view, return user view with Ctrl+Z.
Huaweiun in en //关闭系统提示信息
Info: Information center is disabled.
Huaweivlan 20 //创建vlan20
Huawei-vlan20q
Huaweiint e0/0/2
Huawei-Ethernet0/0/2port link-type access
Huawei-Ethernet0/0/2q
Huaweivlan 30 //创建vlan30
Huawei-vlan30q
Huaweiint e0/0/2
Huawei-Ethernet0/0/2port default vlan 20 //将vlan 20划分进2号端口
Huawei-Ethernet0/0/2int e0/0/3
Huawei-Ethernet0/0/3port link-type access
Huawei-Ethernet0/0/3port default vlan 20
Huawei-Ethernet0/0/3port default vlan 30
Huawei-Ethernet0/0/3dis this //展示当前配置了什么
interface Ethernet0/0/3
port link-type access
port default vlan 30
return
Huawei-Ethernet0/0/3q
Huaweiint e0/0/1
Huawei-Ethernet0/0/1port link-type trunk //配置trunk模式
Huawei-Ethernet0/0/1port trunk allow-pass vlan all**
LSW1配置如下：
**<Huawei>sy
Enter system view, return user view with Ctrl+Z.
Huaweiun in en
Info: Information center is disabled.
Huaweivlan batch 10 20 30 40 //批量创建 vlan
/*10 20 30 为pc1-3 vlan40为服务器*/
Info: This operation may take a few seconds. Please wait for a moment...done.
Huaweiint vlan 10
Huawei-Vlanif10ip add 192.168.10.254 24 //充当网关
Huawei-Vlanif10int vlan 20
Huawei-Vlanif20ip add 192.168.20.254 24
Huawei-Vlanif20int vlan 30
Huawei-Vlanif30ip add 192.168.30.254 24
Huawei-Vlanif30int vlan 40
Huawei-Vlanif40ip add 172.16.100.254 24
Huawei-Vlanif40q
Huaweiint g0/0/1
Huawei-GigabitEthernet0/0/1port link-type access
Huawei-GigabitEthernet0/0/1port default vlan 40
Huawei-GigabitEthernet0/0/1int g0/0/2
Huawei-GigabitEthernet0/0/2port link-type access
Huawei-GigabitEthernet0/0/2port default vlan 10
Huawei-GigabitEthernet0/0/2int g0/0/3
Huawei-GigabitEthernet0/0/3port link-type trunk
Huawei-GigabitEthernet0/0/3port trunk allow-pass vlan all
Huawei-GigabitEthernet0/0/3q
Huaweidhcp enable
Info: The operation may take a few seconds. Please wait for a moment.done.
Huaweiint g0/0/2
Huawei-GigabitEthernet0/0/2int vlan 10 //为01端口配置dhcp服务器地址
Huawei-Vlanif10dhcp select interface
Huawei-Vlanif10dhcp server dns-list 172.16.100.1
Huawei-Vlanif10dis this
interface Vlanif10
ip address 192.168.10.254 255.255.255.0
dhcp select interface
dhcp server dns-list 172.16.100.1
return
Huawei-Vlanif10int vlan 20
Huawei-Vlanif20 dhcp select interface
Huawei-Vlanif20 dhcp server dns-list 172.16.100.1
Huawei-Vlanif20int vlan 30
Huawei-Vlanif30 dhcp select interface
Huawei-Vlanif30 dhcp server dns-list 172.16.100.1
Huawei-Vlanif30q**
Huaweidis ip int brief
Huaweivlan 100 //创建vlan100与路由器连接
Huawei-vlan100q
Huaweiint g0/0/4
Huawei-GigabitEthernet0/0/4port link-type access
Huawei-GigabitEthernet0/0/4port default vlan 100
Huawei-GigabitEthernet0/0/4q
Huaweiint vlan 100
Huawei-Vlanif100ip add 10.10.10.2 24
Huawei-Vlanif100q
Huaweiping 10.10.10.1
PING 10.10.10.1: 56 data bytes, press CTRL_C to break
Reply from 10.10.10.1: bytes=56 Sequence=1 ttl=255 time=70 ms
Reply from 10.10.10.1: bytes=56 Sequence=2 ttl=255 time=50 ms
Reply from 10.10.10.1: bytes=56 Sequence=3 ttl=255 time=20 ms
Reply from 10.10.10.1: bytes=56 Sequence=4 ttl=255 time=10 ms
Reply from 10.10.10.1: bytes=56 Sequence=5 ttl=255 time=50 ms
--- 10.10.10.1 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 10/40/70 ms
Huaweiip route-static 0.0.0.0 0.0.0.0 10.10.10.1 //告诉交换机出去的数据的下一跳
AR1的配置如下：
<Huawei>sy
Enter system view, return user view with Ctrl+Z.
Huaweiun in en
Info: Information center is disabled.
Huaweiint g0/0/0
Huawei-GigabitEthernet0/0/0ip add 10.10.10.1 24
Huawei-GigabitEthernet0/0/0q
Huaweiint g0/0/1
Huawei-GigabitEthernet0/0/1ip add 64.1.1.1 24
Huawei-GigabitEthernet0/0/1q
Huaweiip route-static 0.0.0.0 0.0.0.0 64.1.1.10 //配置静态路由告诉设备出去的下一跳
Huaweiip route-static 192.168.0.0 255.255.0.0 10.10.10.2 //告诉设备进来的下一跳
Huaweiip route-static 172.16.100.0 255.255.0.0 10.10.10.2 //同上
Info: The destination address and mask of the configured static route mismatched
, and the static route 172.16.0.0/16 was generated.
Huaweiacl 2000 //配置输入输出规则 名称
Huawei-acl-basic-2000rule permit source 192.168.0.0 0.0.255.255
Huawei-acl-basic-2000q
Huaweinat address-group 1 64.1.1.5 64.1.1.5 //nat地址组名称为1
Huaweiint g0/0/1
Huawei-GigabitEthernet0/0/1nat outbound 2000 address-group 1 //将规则作用于2000出去的数据使用地址组里的IP
Huawei-GigabitEthernet0/0/1q
Huaweiacl 2001
Huawei-acl-basic-2001rule deny source 192.168.10.0 0.0.0.255
Huawei-acl-basic-2001rule permit source any
Huawei-acl-basic-2001int g0/0/0
Huawei-GigabitEthernet0/0/0traffic-filter inbound acl 2001 //将2001作用于内部所有数据
Huawei-GigabitEthernet0/0/0q
Huaweiint g0/0/1
Huawei-GigabitEthernet0/0/1nat server global 64.1.1.3 inside 172.16.100.1 将内部IP转换为外部IP
其余设备为基础配置，只需要看图配置就可以完成本次实验。