- 1【AI OpenDevin】开源AI程序员，帮您写代码，开发程序_opendevin怎么使用
- 2sourceTree中git工作流使用_sourcetree git工作流不能用
- 3【计算机毕业设计】基于微信小程序的开发项目150套(附源码+演示视频+LW)
- 4【2024 信息素养大赛c++模拟题】算法创意实践挑战赛（基于 C++）_温州市信息素养提升实践活动计算思维项目c++作品
- 5【数据库&sql】EXISTS、NOT EXISTS、IN、NOT IN的分析及示例_sql 查询 not exists
- 6全网最全深度学习案例整理汇总
- 7【软件工程】建模工具之开发各阶段绘图——UML2.0常用图实践技巧（功能用例图、静态类图、动态序列图&状态图&活动图）_功能模块用uml拿个图
- 8【解决】报错：部署Deformable-DETR环境问题_no module named 'deformable_detr_ops
- 9EEPROM AT24C08的操作_at24c08 page addr
- 10FFmpeg音视频开发知识点（二）_avcodec_receive_frame -11
华为ENSP综合实验：eth-trunk、vlan底层、vrrp负载分担、MSTP、DHCP中继_ensp dhcp vrrp
赞
踩
文章目录
- 前言
- 一、实验目的：在局域网内实验，dhcp服务器负责地址分配、核心交换机做链路聚合增加带宽
- 二、使用步骤
- 1、eth-trunk配置
- 2、VLAN二层配置
- 3、MSTP配置
- 4、vrrp负载分担
- 5、DHCP中继服务器
实验结果：PC1、PC2数据往LSW1走、PC3、PC4数据往LSW2走，当LW1设备g0/0/4断开，则切换到LW2上，PC1、PC2从LSW2路径走，往DHCP获取地址。当LW2设备g0/0/4链路断开，PC3、PC4能从LSW1链路走，往DHCP获取地址，具体配置如下（局域网dhcp服务器配置及负载分担）
1、eth-trunk配置：
LSW1:
sy
un in en (关闭信息提示)
interface Eth-Trunk1
port link-type trunk
port trunk allow-pass vlan 2 to 4094
trunkport g 0/0/1 to 0/0/3 加入端口
LSW2:
sy
un in en (关闭信息提示)
interface Eth-Trunk1
port link-type trunk
port trunk allow-pass vlan 2 to 4094
trunkport g 0/0/1 to 0/0/32、vlan二层配置：
LSW1:
vlan batch 10 20 30 40 100
int g0/0/4
port link-type access
port default vlan 100
int g0/0/5
port link-t trunk
port trunk allow-p vlan 10 20
int g0/0/6
port link-t trunk
port trunk allow-p vlan 30 40
LSW2:
vlan batch 10 20 30 40 101
int g0/0/4
port link-type access
port default vlan 101
int g0/0/5
port link-t trunk
port trunk allow-p vlan 10 20
int g0/0/6
port link-t trunk
port trunk allow-p vlan 30 40
JIERU1:
sy
un in en
vlan batch 10 20 30 40
int g0/0/1
port link-t trunk
port trunk allow-p vlan 10 20
int g0/0/2
port link-t trunk
port trunk allow-p vlan 10 20
int g0/0/3
port link-type access
port default vlan 10
int g0/0/4
port link-type access
port default vlan 20
JIERU2:
sy
un in en
vlan batch 10 20 30 40
int g0/0/1
port link-t trunk
port trunk allow-p vlan 30 40
int g0/0/2
port link-t trunk
port trunk allow-p vlan 30 40
int g0/0/3
port link-type access
port default vlan 30
int g0/0/4
port link-type access
port default vlan 40
3、MSTP配置：LSW1:
stp enable
stp region-configuration
region-name 1
instance 1 vlan 10 20
instance 2 vlan 30 40
active region-configuration
stp instance 1 root primary 主根桥
stp instance 2 root secondary 备用根桥
LSW2:
stp enable
stp region-configuration
region-name 1
instance 1 vlan 10 20
instance 2 vlan 30 40
active region-configuration
stp instance 1 root secondary
stp instance 2 root primary
JIERU1:
stp enable
stp region-configuration
region-name 1
instance 1 vlan 10 20
instance 2 vlan 30 40
active region-configuration
JIERU2:
stp enable
stp region-configuration
region-name 1
instance 1 vlan 10 20
instance 2 vlan 30 40
active region-configuration -
4、虚拟地址及vrrp配置：
LSW1:
interface Vlanif10
ip address 10.1.1.254 255.255.255.0
vrrp vrid 1 virtual-ip 10.1.1.1 vrrp虚拟网关
vrrp vrid 1 priority 120 vrrp优先级（越大越优先）
vrrp vrid 1 track interface GigabitEthernet0/0/4 reduced 50 端口监视
interface Vlanif20
ip address 20.1.1.254 255.255.255.0
vrrp vrid 2 virtual-ip 20.1.1.1
vrrp vrid 2 priority 120
vrrp vrid 2 track interface GigabitEthernet0/0/4 reduced 50
interface Vlanif30
ip address 30.1.1.254 255.255.255.0
vrrp vrid 3 virtual-ip 30.1.1.1
ip address 40.1.1.254 255.255.255.0
vrrp vrid 4 virtual-ip 40.1.1.1
int vlanif 100
ip address 100.1.1.1 24
LSW2:
interface Vlanif10
ip address 10.1.1.253 255.255.255.0
vrrp vrid 1 virtual-ip 10.1.1.1
interface Vlanif20
ip address 20.1.1.253 255.255.255.0
vrrp vrid 2 virtual-ip 20.1.1.1
interface Vlanif30
ip address 30.1.1.253 255.255.255.0
vrrp vrid 3 virtual-ip 30.1.1.1
vrrp vrid 3 priority 120
vrrp vrid 3 track interface GigabitEthernet0/0/4 reduced 50
interface Vlanif40
ip address 40.1.1.253 255.255.255.0
vrrp vrid 4 virtual-ip 40.1.1.1
vrrp vrid 4 priority 120
vrrp vrid 4 track interface GigabitEthernet0/0/4 reduced 50
interface vlanif 101
ip address 101.1.1.1 24
5、配置dhcp服务器、dhcp中继、dhcp snooping、静态路由策略：
DHCP服务器： sy un in en sys DHCP dhcp enable 开启服务 ip pool 10 gateway-list 10.1.1.1 network 10.1.1.0 mask 255.255.255.0 excluded-ip-address 10.1.1.253 10.1.1.254 dns-list 8.8.8.8 # ip pool 20 gateway-list 20.1.1.1 network 20.1.1.0 mask 255.255.255.0 excluded-ip-address 20.1.1.253 20.1.1.254 dns-list 8.8.8.8 # ip pool 30 gateway-list 30.1.1.1 network 30.1.1.0 mask 255.255.255.0 excluded-ip-address 30.1.1.253 30.1.1.254 dns-list 8.8.8.8 # ip pool 40 gateway-list 40.1.1.1 network 40.1.1.0 mask 255.255.255.0 excluded-ip-address 40.1.1.253 40.1.1.254 dns-list 8.8.8.8 interface GigabitEthernet0/0/0 ip address 100.1.1.2 255.255.255.0 dhcp select global # interface GigabitEthernet0/0/1 ip address 101.1.1.2 255.255.255.0 dhcp select global interface LoopBack0 ip address 5.5.5.5 255.255.255.0 # ip route-static 10.1.1.0 255.255.255.0 100.1.1.1 ip route-static 10.1.1.0 255.255.255.0 101.1.1.1 preference 70 ip route-static 20.1.1.0 255.255.255.0 100.1.1.1 ip route-static 20.1.1.0 255.255.255.0 101.1.1.1 preference 70 ip route-static 30.1.1.0 255.255.255.0 100.1.1.1 preference 70 ip route-static 30.1.1.0 255.255.255.0 101.1.1.1 ip route-static 40.1.1.0 255.255.255.0 100.1.1.1 preference 70 ip route-static 40.1.1.0 255.255.255.0 101.1.1.1 LSW1中继： dhcp en int v 10 dhcp select relay dhcp relay server-ip 100.1.1.2 int v 20 dhcp select relay dhcp relay server-ip 100.1.1.2 int v 30 dhcp select relay dhcp relay server-ip 100.1.1.2 int v 40 dhcp select relay dhcp relay server-ip 100.1.1.2 ip route-static 0.0.0.0 0 100.1.1.2 LSW2中继： dhcp en int v 10 dhcp select relay dhcp relay server-ip 101.1.1.2 int v 20 dhcp select relay dhcp relay server-ip 101.1.1.2 int v 30 dhcp select relay dhcp relay server-ip 101.1.1.2 int v 40 dhcp select relay dhcp relay server-ip 101.1.1.2 ip route-static 0.0.0.0 0 101.1.1.2 JIERU1 DHCP snooping配置： dhcp en dhcp snooping en vlan 10 dhcp snooping enable vlan 20 dhcp snooping enable int g/0/1 dhcp snooping enable dhcp snooping trusted int g0/0/2 dhcp snooping enable dhcp snooping trusted JIERU2 DHCP snooping配置： dhcp en dhcp snooping en vlan 30 dhcp snooping enable vlan 40 dhcp snooping enable int g/0/1 dhcp snooping enable dhcp snooping trusted int g0/0/2 dhcp snooping enable dhcp snooping trusted
均能获取地址，切访问到DHCP 回环网口5.5.5.5 实验完成
-
总结
这个实验结合了华为多种策略协议，适合做公司、部门内部网络规划，其中在在这个基础上可以添加ACL访问控制禁止部门互访，AC部署无线网络，也可以部署FTP、DNS、www服务器。在这个基础上可以增加多种网络元素，但也有不足之处，即没有做好核心部分下行的网络冗余及聚合链路的多样配置，当核心的下行接口故障，PC端则无法获取到地址，这个我目前还在寻找解决的方法，如有大神知晓，请留言相告，不胜感激。
