企业中组网方案配置

一、网络拓扑

image.png

二、配置命令

交换机SW01配置
sysname ZQ-BJBJ-APN-SW01-BOCE

vlan batch 4 12 39 112

cluster enable
ntdp enable
ndp enable

drop illegal-mac alarm

diffserv domain default

drop-profile default

aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user boce password cipher &&B;,<:XDS8)MDA,+7;_L!!!
local-user boce privilege level 15
local-user boce service-type telnet
local-user admin password simple admin
local-user admin service-type http

interface Vlanif1

interface Vlanif4
description yewu
ip address 192.168.4.2 255.255.255.224
vrrp vrid 4 virtual-ip 192.168.4.1
vrrp vrid 4 track interface GigabitEthernet0/1/1 reduced 20

interface Vlanif12
description hengchuan
ip address 192.168.4.53 255.255.255.252
ospf network-type p2p

interface Vlanif39
description wangguan
ip address 172.31.30.4 255.255.255.240

interface Vlanif112
description TO FW01
ip address 192.168.4.58 255.255.255.252
ospf network-type p2p

interface MEth0/0/1

interface Eth-Trunk1
port link-type trunk
port trunk allow-pass vlan 4 12

interface GigabitEthernet0/0/1
description TO-[ZQ-BJBJ-APN-SW02-BOCE]-GE-0/0/1-2*1G
eth-trunk 1

interface GigabitEthernet0/0/2
description TO-[ZQ-BJBJ-APN-SW02-BOCE]-GE-0/0/2-2*1G
eth-trunk 1

interface GigabitEthernet0/0/3

interface GigabitEthernet0/0/4

interface GigabitEthernet0/0/5

interface GigabitEthernet0/0/6
description TO-[DK-C12IPS-1-BOCE]-GE-1/0/0-1*1G
port link-type access
port default vlan 4

interface GigabitEthernet0/0/7
description TO-[DK-C12IPS-1-BOCE]-GE-1/0/3-1*1G
port link-type access
port default vlan 4

interface GigabitEthernet0/0/8
description TO-[DK-C12IPS-1-BOCE]-GE-1/0/4-1*1G
port link-type access
port default vlan 4

interface GigabitEthernet0/0/9
description TO-[DK-C12IPS-1-BOCE]-GE-1/0/5-1*1G
port link-type access
port default vlan 4

interface GigabitEthernet0/0/10
description TO-[DK-C12IPS-1-BOCE]-GE-1/0/6-1*1G
port link-type access
port default vlan 4

interface GigabitEthernet0/0/11
description TO-[DK-C12IPS-2-BOCE]-GE-1/0/1-1*1G
port link-type access
port default vlan 4

interface GigabitEthernet0/0/12
description TO-[DK-C12IPS-2-BOCE]-GE-1/0/3-1*1G
port link-type access
port default vlan 4

interface GigabitEthernet0/0/13
description TO-[DK-C12IPS-2-BOCE]-GE-1/0/4-1*1G
port link-type access
port default vlan 4

interface GigabitEthernet0/0/14
description TO-[DK-C12IPS-2-BOCE]-GE-1/0/5-1*1G
port link-type access
port default vlan 4

interface GigabitEthernet0/0/15
description TO-[DK-C12IPS-2-BOCE]-GE-1/0/6-1*1G
port link-type access
port default vlan 4

interface GigabitEthernet0/0/16

interface GigabitEthernet0/0/17

interface GigabitEthernet0/0/18

interface GigabitEthernet0/0/19

interface GigabitEthernet0/0/20

interface GigabitEthernet0/0/21

interface GigabitEthernet0/0/22

interface GigabitEthernet0/0/23

interface GigabitEthernet0/0/24

interface GigabitEthernet0/1/1
port link-type access
port default vlan 112
description TO-[ZQ-BJBJ-BS-SBC-FW01-E8000E-CMNET]-GE-1/2/12-1*1G

interface GigabitEthernet0/1/2

interface GigabitEthernet0/1/3
port link-type access
port default vlan 39
description TO-[ZQ-BJBJ-BS-SBC-SW01-S9303-WG]-GE-2/0/9-1*1G

interface GigabitEthernet0/1/4

interface NULL0

ospf 1
area 0.0.0.0
network 192.168.4.52 0.0.0.3
network 192.168.4.56 0.0.0.3
network 192.168.4.0 0.0.0.31

user-interface con 0
authentication-mode password
user-interface vty 0 4
authentication-mode aaa
user privilege level 15

Return
交换机SW02配置
sysname ZQ-BJBJ-APN-SW02-BOCE

vlan batch 4 12 39 112

cluster enable
ntdp enable
ndp enable

drop illegal-mac alarm

diffserv domain default

drop-profile default

interface Vlanif1

interface Vlanif4
description yewu
ip address 192.168.4.3 255.255.255.224
vrrp vrid 4 virtual-ip 192.168.4.1

interface Vlanif12
description hengchuan
ip address 192.168.4.54 255.255.255.252
ospf network-type p2p

interface Vlanif39
description wangguan
ip address 172.31.30.5 255.255.255.240

interface Vlanif112
description TO FW02
ip address 192.168.4.62 255.255.255.252
ospf network-type p2p

interface MEth0/0/1

interface Eth-Trunk1
port link-type trunk
port trunk allow-pass vlan 4 12

interface GigabitEthernet0/0/1
description TO-[ZQ-BJBJ-APN-SW01-BOCE]-GE-0/0/1-2*1G
eth-trunk 1

interface GigabitEthernet0/0/2
description TO-[ZQ-BJBJ-APN-SW01-BOCE]-GE-0/0/2-2*1G
eth-trunk 1

interface GigabitEthernet0/0/3

interface GigabitEthernet0/0/4

interface GigabitEthernet0/0/5

interface GigabitEthernet0/0/6
description TO-[DK-C12IPS-2-BOCE]-GE-1/0/7-1*1G
port link-type access
port default vlan 4

interface GigabitEthernet0/0/7
description TO-[DK-C12IPS-2-BOCE]-GE-1/0/8-1*1G
port link-type access
port default vlan 4

interface GigabitEthernet0/0/8
description TO-[DK-C12IPS-2-BOCE]-GE-1/0/9-1*1G
port link-type access
port default vlan 4

interface GigabitEthernet0/0/9
description TO-[DK-C12IPS-2-BOCE]-GE-1/0/10-1*1G
port link-type access
port default vlan 4

interface GigabitEthernet0/0/10
description TO-[DK-C12IPS-2-BOCE]-GE-1/0/11-1*1G
port link-type access
port default vlan 4

interface GigabitEthernet0/0/11
description TO-[DK-C12IPS-1-BOCE]-GE-1/0/7-1*1G
port link-type access
port default vlan 4

interface GigabitEthernet0/0/12
description TO-[DK-C12IPS-1-BOCE]-GE-1/0/8-1*1G
port link-type access
port default vlan 4

interface GigabitEthernet0/0/13
description TO-[DK-C12IPS-1-BOCE]-GE-1/0/9-1*1G
port link-type access
port default vlan 4

interface GigabitEthernet0/0/14
description TO-[DK-C12IPS-1-BOCE]-GE-1/0/10-1*1G
port link-type access
port default vlan 4

interface GigabitEthernet0/0/15
description TO-[DK-C12IPS-1-BOCE]-GE-1/0/11-1*1G
port link-type access
port default vlan 4