当前位置： 首页 > news >正文

H3CNE小小综合实验

news 2025/7/19 7:14:34

实验拓扑图

在这里插入图片描述

实验需求

  1. 按照图示配置IP地址
  2. 在SW1和SW2之间配置链路聚合增加链路带宽，提高可靠性
  3. PC5和PC6属于VLAN10， PC7和PC8属于VLAN20
  4. SW1和SW2属于二层交换机，SW3为三层交换机（VLAN100用于对接R4）,在交换机之间相连的链路
    放行相关VLAN（不允许放行所有VLAN）
  5. SW3作为DHCP服务器，配置两个地址池，分别为192.168.1.0/24网段和192.168.2.0/24网段网关分
    别为192.168.1.254和192.168.2.254，dns统一为114.114.114.114；分别排除地址段192.168.1.1-
    192.168.10和192.168.2.1-192.168.2.10
  6. 在R4上配置静态路由，使其有到达各个部门的路由，在SW3上配置默认路由，使其全网互通
  7. 在R4上配置Telnet服务使两个部门都能登录到R4

实现步骤

1.配置IP地址
[R4]int g0/0
[R4-GigabitEthernet0/0]ip address 192.16.1.1 30
[R4-GigabitEthernet0/0]int l0
[R4-LoopBack0]ip address 100.1.1.1 32
[R4-LoopBack0]quit
[R4]
[R4]dis ip int b
*down: administratively down
(s): spoofing  (l): loopback
Interface           Physical Protocol IP address/Mask    VPN instance Description  
GE0/0               up       up       192.16.1.1/30      --           --
GE0/1               down     down     --                 --           --
GE0/2               down     down     --                 --           --
GE5/0               down     down     --                 --           --
GE5/1               down     down     --                 --           --
GE6/0               down     down     --                 --           --
GE6/1               down     down     --                 --           --
Loop0               up       up(s)    100.1.1.1/32       --           --
Ser1/0              down     down     --                 --           --
Ser2/0              down     down     --                 --           --
Ser3/0              down     down     --                 --           --
Ser4/0              down     down     --                 --           --
Vlan10              down     down     --                 --           --
Vlan20              down     down     --                 --           --
Vlan100             down     down     --                 --           --

[SW3]vlan 10
[SW3-vlan10]int vlan 10
[SW3-Vlan-interface10]ip address 192.168.1.254 24
[SW3-Vlan-interface10]vlan 20
[SW3-vlan20]int vlan 20
[SW3-Vlan-interface20]ip address 192.168.2.254 24
[SW3-Vlan-interface20]vlan 100
[SW3-vlan100]int vlan 100
[SW3-Vlan-interface100]ip address 172.16.1.2 30
[SW3-Vlan-interface100]dis ip int b
*down: administratively down
(s): spoofing  (l): loopback
Interface                Physical Protocol IP Address      Description 
MGE0/0/0                 down     down     --              --
Vlan10                   down     down     192.168.1.254   --
Vlan20                   down     down     192.168.2.254   --
Vlan100                  down     down     172.16.1.2      --
2.在SW1和SW2之间配置链路聚合增加链路带宽，提高可靠性
[SW1]interface Bridge-Aggregation 1
[SW1-Bridge-Aggregation1]interface range g1/0/3 to g1/0/4
[SW1-if-range]port link-aggregation group 1
[SW1-if-range]dis th
#
interface GigabitEthernet1/0/3port link-mode bridgecombo enable fiberport link-aggregation group 1
#
return
[SW2]interface Bridge-Aggregation 1
[SW2-Bridge-Aggregation1]int range g1/0/3 to g1/0/4
[SW2-if-range]port link-aggregation group 1
[SW2-if-range]dis th
#
interface GigabitEthernet1/0/3port link-mode bridgecombo enable fiberport link-aggregation group 1
#
return
3.PC5和PC6属于VLAN10， PC7和PC8属于VLAN20
[SW1]vlan 10
[SW1-vlan10]port g1/0/1
[SW1-vlan10]port g1/0/2
[SW1-vlan10]vlan 20
[SW1-vlan20]quit
[SW2]vlan 20
[SW2-vlan20]port g1/0/1
[SW2-vlan20]port g1/0/2
[SW2-vlan20]quit
[SW2]vlan 10
[SW2-vlan10]quit
4.SW1和SW2属于二层交换机，SW3为三层交换机（VLAN100用于对接R4）,在交换机之间相连的链路放行相关VLAN（不允许放行所有VLAN）
[SW1]int g1/0/5
[SW1-GigabitEthernet1/0/5]port link-type trunk 
[SW1-GigabitEthernet1/0/5]port trunk permit vlan 10 20
[SW1-GigabitEthernet1/0/5]dis th
#
interface GigabitEthernet1/0/5port link-mode bridgeport link-type trunkport trunk permit vlan 1 10 20combo enable fiber
#
return
[SW1-GigabitEthernet1/0/5]quit
[SW1]int Bridge-Aggregation 1
[SW1-Bridge-Aggregation1]port link-type trunk 
Configuring GigabitEthernet1/0/3 done.
Configuring GigabitEthernet1/0/4 done.
[SW1-Bridge-Aggregation1]port trunk permit vlan 10 20
Configuring GigabitEthernet1/0/3 done.
Configuring GigabitEthernet1/0/4 done.
[SW1-Bridge-Aggregation1]dis th
#
interface Bridge-Aggregation1port link-type trunkport trunk permit vlan 1 10 20
#
return
[SW2]int g1/0/5
[SW2-GigabitEthernet1/0/5]port link-type trunk 
[SW2-GigabitEthernet1/0/5]port trunk permit vlan 10 20
[SW2-GigabitEthernet1/0/5]dis th
#
interface GigabitEthernet1/0/5port link-mode bridgeport link-type trunkport trunk permit vlan 1 10 20combo enable fiber
#
return
[SW2-GigabitEthernet1/0/5]quit
[SW2]int Bridge-Aggregation 1
[SW2-Bridge-Aggregation1]port link-type trunk 
Configuring GigabitEthernet1/0/3 done.
Configuring GigabitEthernet1/0/4 done.
[SW2-Bridge-Aggregation1]port trunk permit vlan 10 20
Configuring GigabitEthernet1/0/3 done.
Configuring GigabitEthernet1/0/4 done.
[SW2-Bridge-Aggregation1]dis th
#
interface Bridge-Aggregation1port link-type trunkport trunk permit vlan 1 10 20
#
return
[SW3]int g1/0/1
[SW3-GigabitEthernet1/0/1]port link-type trunk 
[SW3-GigabitEthernet1/0/1]port trunk permit vlan 10 20
[SW3-GigabitEthernet1/0/1]dis th
#
interface GigabitEthernet1/0/1port link-mode bridgeport link-type trunkport trunk permit vlan 1 10 20combo enable fiber
#
return
[SW3-GigabitEthernet1/0/1]int g1/0/2
[SW3-GigabitEthernet1/0/2]port link-type trunk 
[SW3-GigabitEthernet1/0/2]port trunk permit vlan 10 20
[SW3-GigabitEthernet1/0/2]dis th
#
interface GigabitEthernet1/0/2port link-mode bridgeport link-type trunkport trunk permit vlan 1 10 20combo enable fiber
#
return
[SW3]vlan 100
[SW3-vlan100]port g1/0/3
[SW3-vlan100]dis th
#
vlan 100
#
return
5.SW3作为DHCP服务器，配置两个地址池，分别为192.168.1.0/24网段和192.168.2.0/24网段网关分别为192.168.1.254和192.168.2.254，dns统一为114.114.114.114；分别排除地址段192.168.1.1-192.168.10和192.168.2.1-192.168.2.10
[SW3]dhcp enable 
[SW3]dhcp server  ip-pool 1
[SW3-dhcp-pool-1]network 192.168.1.0 mask 255.255.255.0
[SW3-dhcp-pool-1]gateway-list 192.168.1.254
[SW3-dhcp-pool-1]dns-list 114.114.114.114
[SW3-dhcp-pool-1]dis th
#
dhcp server ip-pool 1gateway-list 192.168.1.254network 192.168.1.0 mask 255.255.255.0dns-list 114.114.114.114
#
return
[SW3-dhcp-pool-1]quit
[SW3]dhcp enable 
[SW3]dhcp server  ip-pool 2
[SW3-dhcp-pool-2]network 192.168.2.0 mask 255.255.255.0
[SW3-dhcp-pool-2]gateway-list 192.168.2.254
[SW3-dhcp-pool-2]dns-list 114.114.114.114
[SW3-dhcp-pool-2]dis th
#
dhcp server ip-pool 2gateway-list 192.168.2.254network 192.168.2.0 mask 255.255.255.0dns-list 114.114.114.114
#
return
[SW3-dhcp-pool-2]quit
[SW3]dhcp server forbidden-ip 192.168.1.1 192.168.1.10
[SW3]dhcp server forbidden-ip 192.168.2.1 192.168.2.10
[SW3]dis dhcp server ip-in-use 
IP address       Client identifier/    Lease expiration      TypeHardware address
192.168.1.11     0034-3063-362e-3561-  Jul 13 16:30:06 2025  Auto(C)            3462-2e30-3530-362d-                                           4745-302f-302f-31                                              
192.168.1.12     0034-3063-362e-3631-  Jul 13 16:30:12 2025  Auto(C)            6134-2e30-3630-362d-                                           4745-302f-302f-31                                              
192.168.2.11     0034-3063-362e-3636-  Jul 13 16:30:28 2025  Auto(C)            3361-2e30-3730-362d-                                           4745-302f-302f-31                                              
192.168.2.12     0034-3063-362e-3639-  Jul 13 16:30:29 2025  Auto(C)            6536-2e30-3830-362d-                                           4745-302f-302f-31                                              [SW3]display dhcp server free-ip 
Pool name: 1Network: 192.168.1.0 mask 255.255.255.0IP ranges from 192.168.1.11 to 192.168.1.253Pool name: 2Network: 192.168.2.0 mask 255.255.255.0IP ranges from 192.168.2.11 to 192.168.2.253
![30c3bb0300b5498dafb05618bf59f8e2](C:\Users\YDH\Pictures\H3CNE小小综合\30c3bb0300b5498dafb05618bf59f8e2.png)![30c3bb0300b5498dafb05618bf59f8e2](C:\Users\YDH\Pictures\H3CNE小小综合\30c3bb0300b5498dafb05618bf59f8e2.png)

在这里插入图片描述
在这里插入图片描述
在这里插入图片描述

在这里插入图片描述

6.在R4上配置静态路由，使其有到达各个部门的路由，在SW3上配置默认路由，使其全网互通
[R4]ip route-static 192.168.1.0 24 172.16.1.2
[R4]ip route-static 192.168.2.0 24 172.16.1.2
[R4]dis th
#sysname R4
#telnet server enable
#system-working-mode standardxbar load-singlepassword-recovery enablelpu-type f-series
#scheduler logfile size 16
#ip route-static 192.168.1.0 24 172.16.1.2ip route-static 192.168.2.0 24 172.16.1.2
#domain default enable system
#
return
[SW3]ip route-static 0.0.0.0 0 172.16.1.1
[SW3]dis th
#sysname SW3
#irf mac-address persistent timerirf auto-update enableundo irf link-delayirf member 1 priority 1
#dhcp enabledhcp server forbidden-ip 192.168.1.1 192.168.1.10dhcp server forbidden-ip 192.168.2.1 192.168.2.10
#lldp global enable
#system-working-mode standardxbar load-singlepassword-recovery enablelpu-type f-series
#stp global enable
#scheduler logfile size 16
#ip route-static 0.0.0.0 0 172.16.1.1
#              domain default enable system
#              
return
7.查看是否实现全网互通
[R4]ping 192.168.1.11
Ping 192.168.1.11 (192.168.1.11): 56 data bytes, press CTRL+C to break
56 bytes from 192.168.1.11: icmp_seq=0 ttl=254 time=3.713 ms
56 bytes from 192.168.1.11: icmp_seq=1 ttl=254 time=1.901 ms
56 bytes from 192.168.1.11: icmp_seq=2 ttl=254 time=2.361 ms
56 bytes from 192.168.1.11: icmp_seq=3 ttl=254 time=1.748 ms
56 bytes from 192.168.1.11: icmp_seq=4 ttl=254 time=3.588 ms
8.在R4上配置Telnet服务使两个部门都能登录到R4
[R4]telnet server enable
[R4]local-user admin class manage 
New local user added.
[R4-luser-manage-admin]password simple 123456.com
[R4-luser-manage-admin]authorization-attribute user-role level-15
[R4-luser-manage-admin]service-type telnet
[R4-luser-manage-admin]quit
[R4]user-interface vty 0 4
[R4-line-vty0-4]authentication-mode scheme 
[R4-line-vty0-4]user-role level-15
[R4-line-vty0-4]display this
#
line aux 0user-role network-operator
#
line con 0user-role network-admin
#
line vty 0 4authentication-mode schemeuser-role level-15user-role network-operator
#
line vty 5 63user-role network-operator
#
return
[R4-line-vty0-4]
<H3C>telnet 172.16.1.1
Trying 172.16.1.1 ...
Press CTRL+K to abort
Connected to 172.16.1.1 ...******************************************************************************
* Copyright (c) 2004-2021 New H3C Technologies Co., Ltd. All rights reserved.*
* Without the owner's prior written consent,                                 *
* no decompiling or reverse-engineering shall be allowed.                    *
******************************************************************************Login: admin
Password: 
<R4>
<R4>display usersIdx  Line     Idle       Time              Pid     Type0    CON 0    00:05:10   Jul 12 19:23:16   11054        
+ 66   VTY 0    00:00:00   Jul 12 19:32:46   11067   TEL  Following are more details.
VTY 0   :User name: adminLocation: 192.168.1.11+    : Current operation user.F    : Current operation user works in async mode.
<R4>
http://www.lryc.cn/news/592191.html

相关文章：

  • js中的微任务和宏任务的理解
  • 【宇树科技：未来1-3年，机器人可流水线打螺丝】
  • 脚手架本地link标准流程
  • Java HashMap高频面试题深度解析
  • SpringBoot-27-企业云端开发实践之跨域认证JWT
  • BGP的“聪明选路”遇上了TCP的“路径洁癖”，需人工调和
  • jar命令提取 JAR 文件
  • Esbuild-新一代极速前端构建打包工具
  • PE系统机器视觉实战（直播回放）
  • 提示工程核心概念：与AI清晰沟通的艺术
  • wx小程序设置沉浸式导航文字高度问题
  • ::v-deep 是 Vue 中用于 ‌样式穿透（深度选择器）‌ 的语法
  • 自然语言处理：AI 如何听懂人类的 “话”？​
  • 香港服务器SSH安全加固方案与密钥认证实践
  • 多模态大模型重构人机交互，全感官时代已来
  • 从算力到智能资产：Sol long引领A I A g ent赋能设备的价值重构
  • 雪豹大模型驱动效率革命 华鼎冷链科技重构餐饮供应链神经网络
  • Mock 单元测试
  • 物流3D工业相机：解锁自动化物流新纪元
  • Python Pandas 实践学习笔记（1）
  • GISBox切片器技术解析：RVT模型到3DTiles瓦片的高性能转换方案
  • elasticsearch+logstash+kibana+filebeat实现niginx日志收集（未过滤日志内容）
  • 使用 C++ 和 OpenCV 进行表面划痕检测
  • 算法-动态规划
  • Paimon对比基于消息队列（如Kafka）的传统实时数仓方案的优势
  • 【动态规划 解析】
  • centos7安装MySQL8.4手册
  • 【PTA数据结构 | C语言版】二叉堆的快速建堆操作
  • Vue常见指令
  • Webpack 项目优化详解