拓扑

配置

配置底层信息：

AR1

[Huawei]sysnameAR1//修改主机名称#接口互通配置[AR1]intGigabitEthernet0/0/0[AR1-GigabitEthernet0/0/0]ipaddress10.1.12.124[AR1]intGigabitEthernet0/0/1[AR1-GigabitEthernet0/0/1]ipaddress10.1.13.124#当作外部通信地址[AR1]interfaceLoopBack0[AR1-LoopBack0]ip address 1.1.1.1 32

AR2

[Huawei]sysnameAR2//修改主机名#配置互联地址[AR2]intGigabitEthernet0/0/0[AR2-GigabitEthernet0/0/0]ip address 10.1.12.2 24#配置主机网关地址[AR2]intGigabitEthernet0/0/1[AR2-GigabitEthernet0/0/1]ipaddress192.168.1.224

AR3

[Huawei]sysnameAR3//修改主机名//配置接口互联地址[AR3]intGigabitEthernet0/0/[AR3-GigabitEthernet0/0/0]ipaddress10.1.13.324//配置网关地址[AR3]intGigabitEthernet0/0/1[AR3-GigabitEthernet0/0/1]ipaddress192.168.1.324

配置Easy ip：

AR2：

#写一条Acl将需要NAT的地址抓出来[AR2]acl2000[AR2-acl-basic-2000]rule 1 permit source 192.168.1.0 0.0.0.255#将NAT挂接到接口上[AR2]intGigabitEthernet0/0/0[AR2-GigabitEthernet0/0/0]nat outbound 2000#写一条通往出口路由的路由[AR2]ip route-static 0.0.0.0 0.0.0.0 10.1.12.1

AR3：

#配置同上[AR3]access-user[AR3]acl2000[AR3-acl-basic-2000]rule1permitsource192.168.1.00.0.0.255[AR3]intGigabitEthernet0/0/0[AR3-GigabitEthernet0/0/0]natoutbound2000[AR3]ip route-static 0.0.0.0 0.0.0.0 10.1.13.1

搭建DHCP服务器：

AR2：

[AR2]ippoolpc1//创建全局地址池[AR2-ip-pool-pc1]network192.168.1.0mask24//创建地址池范围[AR2-ip-pool-pc1]gateway-list192.168.1.2192.168.1.3//配置DHCP网关[AR2-ip-pool-pc1]leaseday0hour3minute30//配置租期[AR2-ip-pool-pc1]dns-list114.114.114.114//配置DNS[AR2-ip-pool-pc1]excluded-ip-address192.168.1.1//排除地址//静态绑定某个主机拿到固定地址[AR2-ip-pool-pc1]static-bind ip-address 192.168.1.100 mac-address 5489-98B9-1067 [AR2]dhcpenable//开启DHCP服务[AR2]interfaceGigabitEthernet0/0/1[AR2-GigabitEthernet0/0/1]dhcpselectglobal//接口上应用全局地址池

AR3

#AR3同理AR2[AR3]dhcpenable[AR3]ip pool pc2Info:It'ssuccessfultocreateanIPaddresspool.[AR3-ip-pool-pc2]network192.168.1.0mask24[AR3-ip-pool-pc2]gateway-list192.168.1.3[AR3-ip-pool-pc2]dns-list114.114.114.114[AR3-ip-pool-pc2]leaseday0hour3minute30[AR3-ip-pool-pc2]intg0/0/0[AR3-GigabitEthernet0/0/0]dhcp select global

配置VRRP：

AR2：

[AR2]intGigabitEthernet0/0/1//配置备份组和虚拟网关地址[AR2-GigabitEthernet0/0/1]vrrpvrid1virtual-ip192.168.1.1//配置优先级，默认100[AR2-GigabitEthernet0/0/1]vrrpvrid1priority150//配置抢占延迟时间为20S[AR2-GigabitEthernet0/0/1]vrrpvrid1preempt-modetimerdelay20//检测上行链路故障时，优先级减少30[AR2-GigabitEthernet0/0/1]vrrpvrid1trackinterfaceGigabitEthernet0/0/0reduced30

AR3：

//配置与AR2同理[AR3]intGigabitEthernet0/0/1[AR3-GigabitEthernet0/0/1]vrrpvrid1virtual-ip192.168.1.1[AR3-GigabitEthernet0/0/1]vrrpvrid1preempt-modetimerdelay20[AR3-GigabitEthernet0/0/1]vrrp vrid 1 track interface GigabitEthernet 0/0/0 reduced 30

链路聚合配置：

LSW1:

#使得VLAN可以通过交换机上去[LSW1]intGigabitEthernet0/0/1[LSW1-GigabitEthernet0/0/1]port trunk allow-pass vlan all interfaceEth-Trunk1//创建端口聚合组modelacp-static//配置聚合模式为LACPleastactive-linknumber4//聚合成员最低阀值数量4，低于4个活动成员此接口会自动down（默认情况阀值数量为1）//将端口加入聚合组[LSW1-Eth-Trunk1]trunkportGigabitEthernet0/0/3[LSW1-Eth-Trunk1]trunkport GigabitEthernet 0/0/4#配置trunk[LSW1-Eth-Trunk1]portlink-typetrunk[LSW1-Eth-Trunk1]port trunk allow-pass vlan all

LSW2：

#配置和LSW1类似[LSW2]int GigabitEthernet 0/0/1[LSW2-GigabitEthernet0/0/1]portlink-typetrunk[LSW2-GigabitEthernet0/0/1]porttrunkallow-passvlanall[LSW2]intEth-Trunk1[LSW2-Eth-Trunk1]modelacp-static[LSW2-Eth-Trunk1]leastactive-linknumber4[LSW2-Eth-Trunk1]trunkportGigabitEthernet0/0/3[LSW2-Eth-Trunk1]trunkportGigabitEthernet0/0/4[LSW2-Eth-Trunk1]portlink-typetrunk[LSW2-Eth-Trunk1]porttrunkallow-passvlanall