eNSP企业级复杂拓扑

很懒的程序员雄2026-05-09 10:55

一、接入层交换机SW3配置

|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| Plain Text system-view sysname SW3 vlan 10 interface Ethernet0/0/1 port link-type access port default vlan 10 stp edged-port enable interface GigabitEthernet0/0/1 port link-type trunk port trunk allow-pass vlan 10 quit |

二、接入层交换机SW4配置

|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| Plain Text system-view sysname SW4 vlan 20 interface Ethernet0/0/1 port link-type access port default vlan 20 stp edged-port enable interface GigabitEthernet0/0/1 port link-type trunk port trunk allow-pass vlan 20 quit |

三、接入层交换机SW5配置

|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| Plain Text system-view sysname SW5 vlan 30 interface Ethernet0/0/1 port link-type access port default vlan 30 stp edged-port enable interface GigabitEthernet0/0/1 port link-type trunk port trunk allow-pass vlan 30 quit |

四、接入层交换机SW6配置

|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| Plain Text system-view sysname SW6 vlan 40 interface Ethernet0/0/1 port link-type access port default vlan 40 stp edged-port enable interface GigabitEthernet0/0/1 port link-type trunk port trunk allow-pass vlan 40 quit |

五、服务器接入交换机SW12配置

|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| Plain Text system-view sysname SW12 vlan batch 100 interface Ethernet0/0/0 port link-type access port default vlan 100 interface Ethernet0/0/1 port link-type access port default vlan 100 interface GigabitEthernet0/0/2 port link-type trunk port trunk allow-pass vlan 100 quit |

六、主核心交换机SW1配置

|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| Plain Text system-view sysname SW1 vlan batch 10 20 30 40 100 interface Vlanif10 ip address 192.168.3.252 255.255.255.0 vrrp vrid 10 virtual-ip 192.168.3.254 vrrp vrid 10 priority 120 interface Vlanif20 ip address 192.168.53.252 255.255.255.0 vrrp vrid 20 virtual-ip 192.168.53.254 vrrp vrid 20 priority 120 interface Vlanif30 ip address 192.168.63.252 255.255.255.0 vrrp vrid 30 virtual-ip 192.168.63.254 interface Vlanif40 ip address 192.168.73.252 255.255.255.0 vrrp vrid 40 virtual-ip 192.168.73.254 interface GigabitEthernet0/0/1 port link-type trunk port trunk allow-pass vlan 10 20 interface GigabitEthernet0/0/2 port link-type trunk port trunk allow-pass vlan 30 40 interface Eth-Trunk1 mode lacp-static trunkport GigabitEthernet0/0/23 trunkport GigabitEthernet0/0/24 port link-type trunk port trunk allow-pass vlan 10 20 30 40 100 interface GigabitEthernet0/0/23 eth-trunk 1 interface GigabitEthernet0/0/24 eth-trunk 1 stp mode mstp stp region-configuration region-name MSTP-REGION instance 1 vlan 10 20 instance 2 vlan 30 40 active quit stp instance 1 root primary stp instance 2 root secondary ospf 1 router-id 1.1.1.1 area 0 network 192.168.3.0 0.0.0.255 network 192.168.53.0 0.0.0.255 network 192.168.63.0 0.0.0.255 network 192.168.73.0 0.0.0.255 network 10.10.4.0 0.0.0.255 network 10.20.3.0 0.0.0.31 quit |

七、备核心交换机SW2配置

|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| Plain Text system-view sysname SW2 vlan batch 10 20 30 40 100 interface Vlanif10 ip address 192.168.3.253 255.255.255.0 vrrp vrid 10 virtual-ip 192.168.3.254 interface Vlanif20 ip address 192.168.53.253 255.255.255.0 vrrp vrid 20 virtual-ip 192.168.53.254 interface Vlanif30 ip address 192.168.63.253 255.255.255.0 vrrp vrid 30 virtual-ip 192.168.63.254 vrrp vrid 30 priority 120 interface Vlanif40 ip address 192.168.73.253 255.255.255.0 vrrp vrid 40 virtual-ip 192.168.73.254 vrrp vrid 40 priority 120 interface GigabitEthernet0/0/1 port link-type trunk port trunk allow-pass vlan 10 20 interface GigabitEthernet0/0/2 port link-type trunk port trunk allow-pass vlan 30 40 interface Eth-Trunk1 mode lacp-static trunkport GigabitEthernet0/0/23 trunkport GigabitEthernet0/0/24 port link-type trunk port trunk allow-pass vlan 10 20 30 40 100 interface GigabitEthernet0/0/23 eth-trunk 1 interface GigabitEthernet0/0/24 eth-trunk 1 stp mode mstp stp region-configuration region-name MSTP-REGION instance 1 vlan 10 20 instance 2 vlan 30 40 active quit stp instance 1 root secondary stp instance 2 root primary ospf 1 router-id 2.2.2.2 area 0 network 192.168.3.0 0.0.0.255 network 192.168.53.0 0.0.0.255 network 192.168.63.0 0.0.0.255 network 192.168.73.0 0.0.0.255 network 10.10.4.0 0.0.0.255 network 10.20.3.0 0.0.0.31 quit |

八、防火墙FW1配置

|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| Plain Text system-view sysname FW1 undo info-center enable interface GigabitEthernet1/0/0 ip address 10.10.4.254 255.255.255.0 service-manage ping permit interface GigabitEthernet1/0/1 ip address 10.20.3.1 255.255.255.224 service-manage ping permit interface GigabitEthernet1/0/2 ip address 202.108.100.1 255.255.255.0 service-manage ping permit firewall zone trust add interface GigabitEthernet1/0/0 add interface GigabitEthernet1/0/1 firewall zone untrust add interface GigabitEthernet1/0/2 security-policy rule name trust_to_untrust source-zone trust destination-zone untrust source-address 192.168.0.0 mask 255.255.0.0 action permit quit nat-policy rule name nat_all source-zone trust destination-zone untrust action source-nat easy-ip quit ospf 1 router-id 3.3.3.3 area 0 network 10.10.4.0 0.0.0.255 network 10.20.3.0 0.0.0.31 network 202.108.100.0 0.0.0.255 quit |

九、外网路由器AR3配置

|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| Plain Text system-view sysname AR3 interface GigabitEthernet0/0/0 ip address 202.3.101.2 255.255.255.224 interface GigabitEthernet0/0/1 ip address 202.3.103.1 255.255.255.224 interface GigabitEthernet0/0/2 ip address 203.108.100.1 255.255.255.0 ospf 1 router-id 4.4.4.4 area 0 network 202.3.101.0 0.0.0.31 network 202.3.103.0 0.0.0.31 network 203.108.100.0 0.0.0.255 quit ip route-static 0.0.0.0 0.0.0.0 202.3.101.1 |

十、外网路由器AR4配置

|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| Plain Text system-view sysname AR4 interface GigabitEthernet0/0/0 ip address 202.3.102.2 255.255.255.224 interface GigabitEthernet0/0/1 ip address 202.3.103.2 255.255.255.224 interface GigabitEthernet0/0/2 ip address 204.108.100.1 255.255.255.0 ospf 2 router-id 5.5.5.5 area 0 network 202.3.102.0 0.0.0.31 network 202.3.103.0 0.0.0.31 network 204.108.100.0 0.0.0.255 quit rip 1 version 2 network 172.16.0.0 import-route ospf 2 quit ospf 2 import-route rip 1 quit |

十一、分支核心交换机SW8配置

|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| Plain Text system-view sysname SW8 vlan batch 50 60 interface Vlanif50 ip address 172.16.3.254 255.255.255.0 interface Vlanif60 ip address 172.16.53.254 255.255.255.0 interface GigabitEthernet0/0/1 ip address 204.108.100.2 255.255.255.0 rip 1 version 2 network 172.16.0.0 network 204.108.100.0 quit interface GigabitEthernet0/0/2 port link-type trunk port trunk allow-pass vlan 50 interface GigabitEthernet0/0/3 port link-type trunk port trunk allow-pass vlan 60 quit |

十二、分支接入交换机SW10配置

|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| Plain Text system-view sysname SW10 vlan 50 interface Ethernet0/0/1 port link-type access port default vlan 50 stp edged-port enable interface GigabitEthernet0/0/1 port link-type trunk port trunk allow-pass vlan 50 quit |

十三、分支接入交换机SW11配置

|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| Plain Text system-view sysname SW11 vlan 60 interface Ethernet0/0/1 port link-type access port default vlan 60 stp edged-port enable interface GigabitEthernet0/0/1 port link-type trunk port trunk allow-pass vlan 60 quit |

PC静态IP配置参考

  1. PC1：192.168.3.10/24(192.168.3.10/24) 网关192.168.3.254(192.168.3.254)
  1. PC2：192.168.53.10/24(192.168.53.10/24) 网关192.168.53.254(192.168.53.254)
  1. PC3：192.168.63.10/24(192.168.63.10/24) 网关192.168.63.254(192.168.63.254)
  1. PC4：192.168.73.10/24(192.168.73.10/24) 网关192.168.73.254(192.168.73.254)
  1. PC6：172.16.3.10/24(172.16.3.10/24) 网关172.16.3.254(172.16.3.254)
  1. PC7：172.16.53.10/24(172.16.53.10/24) 网关172.16.53.254(172.16.53.254)
  1. DNS服务器：10.10.4.2/24(10.10.4.2/24) 网关10.10.4.254(10.10.4.254)
  1. WWW服务器：10.10.4.3/24(10.10.4.3/24) 网关10.10.4.254(10.10.4.254)
相关推荐
疯狂打码的少年1 小时前
【计算机网络】TCP/IP协议族（四层体系结构，与OSI对比）
网络·笔记·tcp/ip·计算机网络
snow@li1 小时前
服务器运维：Linux命令速查手册（全景梳理）
linux·服务器·网络
handler011 小时前
【Linux】线程与虚拟内存的底层世界
linux·运维·服务器·c++·线程·虚拟地址空间·共享内存
布莱克6052 小时前
TCP 三次握手与四次挥手详解
服务器·网络·tcp/ip·计算机网络·网络编程
新时代牛马2 小时前
实时 Linux：PREEMPT_RT、延迟来源与观测
linux·运维·服务器
微露清风2 小时前
# Linux 进程全景：从 PCB 到 O(1) 调度队列
linux·服务器
zhexunnb2 小时前
深挖SAP系统模块价值，助力无锡制造企业打通数字化全链路
运维
anxiao_m3 小时前
2026企业AI数字孪生选型攻略，不同场景对应不同解决方案
大数据·网络·数据库
weipt3 小时前
利用wsl给windows电脑上安装一个ubuntu
linux·运维·ubuntu
jarreyer3 小时前
【软件操作】加快资源管理器打开速度
运维
热门推荐
01国内可直接用、免费额度/永久免费的大模型API清单（含 SiliconFlow、火山、阿里、智谱、百度、Kimi、DeepSeek、DMXAPI 等）02如何新建文件夹？ 电脑新建文件夹的4种方法03GitHub 镜像站点04历年考研数学一、数学二、数学三真题试卷及答案PDF05蜘蛛磁力 搜索引擎大全，如何使用蜘蛛磁力查找磁力链接06微信历史版本含下载地址（ Windows PC | 安卓 | MAC ）及设置微信不更新072026 国产 AI 大模型横评：DeepSeek、通义千问、Kimi、文心一言、星火、豆包谁更能打？08ZCode 周末送额度活动开启：3 亿 Token 免费领取09【一等奖版】2026 国赛 A题 药材的烘干问题10Agnes AI 免费 API 接入指南：文本、生图、生视频，一套接口全免费