HCIA综合实验

2501_94685729

315人浏览 · 2026-04-11 23:08:28

2501_94685729 · 2026-04-11 23:08:28 发布

一、企业A内网配置思路
1、配置IP地址
2、配置vlan技术
（1）创建vlan
（2）将接口加到相应vlan
（3）配置trunk链路，放行相应vlan
（4）配置单臂路由子接口
3、配置DHCP技术
（1）启动DHCP服务
（2）创建地址池
（3）在网关接口下发DHCP服务，是的PC获得IP地址
4、配置OSPF协议
（1）创建OSPF的协议进程，配置RID
（2）进入相应的area，network网段（接口地址）
（3）查看OSPF的邻居表、路由表。做全网通测试---ping测试
5、配置OSPF的区域汇总--ABR汇总，精简路由表的路由条目数量。
6、配置静态路由空接口防环
7、配置OPSF区域0的认证
8、配置easy ip 实现内网访问外网
9、让OSPF协议下发缺省，给内网路由器，保证内网设备访问外网
10、配置telnet服务器，配置NAT SERVER实现外网访问内网的服务
11、配置基础ACL和高级ACL实现访问控制
二、企业B内网配置思路
1、配置IP地址
2、配置vlan技术
3、配置DHCP技术，使得PC获得IP地址
4、配置静态路由协议，使得全网通（PING）
5、配置静态路由空接口防环
6、配置静态缺省保证内网设备访问
7、配置静态浮动路由，实现正常走千兆，千兆故障时，走百兆
三、公网通
1、配置IP地址
1、配置IP地址

（1）路由器接口IP配置（R1、R2、R3、telnet-server

<R1> system-view
[R1] sysname R1
[R1] interface GigabitEthernet 0/0/0
[R1-GigabitEthernet0/0/0] undo shutdown
[R1-GigabitEthernet0/0/0] quit
[R1] interface GigabitEthernet 0/0/1
[R1-GigabitEthernet0/0/1] ip address 172.16.67.1 255.255.255.0
[R1-GigabitEthernet0/0/1] undo shutdown
[R1-GigabitEthernet0/0/1] quit

<R2> system-view
[R2] sysname R2
[R2] interface GigabitEthernet 0/0/0
[R2-GigabitEthernet0/0/0] ip address 172.16.67.2 255.255.255.0
[R2-GigabitEthernet0/0/0] undo shutdown
[R2-GigabitEthernet0/0/0] quit
[R2] interface GigabitEthernet 0/0/1
[R2-GigabitEthernet0/0/1] undo shutdown
[R2-GigabitEthernet0/0/1] quit
[R2] interface GigabitEthernet 0/0/2
[R2-GigabitEthernet0/0/2] ip address 172.16.2.1 255.255.255.0
[R2-GigabitEthernet0/0/2] undo shutdown
[R2-GigabitEthernet0/0/2] quit

<R3> system-view
[R3] sysname R3
[R3] interface GigabitEthernet 0/0/0
[R3-GigabitEthernet0/0/0] ip address 172.16.2.2 255.255.255.0
[R3-GigabitEthernet0/0/0] undo shutdown
[R3-GigabitEthernet0/0/0] quit
[R3] interface GigabitEthernet 0/0/1
[R3-GigabitEthernet0/0/1] ip address 172.16.129.1 255.255.255.0
[R3-GigabitEthernet0/0/1] undo shutdown
[R3-GigabitEthernet0/0/1] quit
[R3] interface Ethernet 4/0/0
[R3-Ethernet4/0/0] ip address 172.16.130.1 255.255.255.0
[R3-Ethernet4/0/0] undo shutdown
[R3-Ethernet4/0/0] quit
[R3] interface GigabitEthernet 0/0/2
[R3-GigabitEthernet0/0/2] ip address 100.0.0.1 255.255.255.0
[R3-GigabitEthernet0/0/2] undo shutdown
[R3-GigabitEthernet0/0/2] quit
<telnet-server> system-view
[telnet-server] sysname telnet-server
[telnet-server] interface GigabitEthernet 0/0/0
[telnet-server-GigabitEthernet0/0/0] ip address 172.16.65.253 255.255.255.0
[telnet-server-GigabitEthernet0/0/0] undo shutdown
[telnet-server-GigabitEthernet0/0/0] quit
[telnet-server] ip route-static 0.0.0.0 0.0.0.0 172.16.65.254

Great Life 20:57:48
2、配置VLAN技术（严格按你给的4小步）

（1）创建VLAN

（2）将接口加到相应VLAN

（3）配置Trunk链路，放行相应VLAN

（4）配置单臂路由子接口

# ========== SW1 接入接口配置 ==========
# 连接PC1的接口加入vlan10
[SW1] interface Ethernet 0/0/1
[SW1-Ethernet0/0/1] port link-type access
[SW1-Ethernet0/0/1] port default vlan 10
[SW1-Ethernet0/0/1] undo shutdown
[SW1-Ethernet0/0/1] quit
# 连接PC2的接口加入vlan20
[SW1] interface Ethernet 0/0/2
[SW1-Ethernet0/0/2] port link-type access
[SW1-Ethernet0/0/2] port default vlan 20
[SW1-Ethernet0/0/2] undo shutdown
[SW1-Ethernet0/0/2] quit
# 连接telnet-server的接口加入vlan20
[SW1] interface Ethernet 0/0/3
[SW1-Ethernet0/0/3] port link-type access
[SW1-Ethernet0/0/3] port default vlan 20
[SW1-Ethernet0/0/3] undo shutdown
[SW1-Ethernet0/0/3] quit
# ========== SW2 接入接口配置 ==========
# 连接PC3的接口加入vlan40
[SW2] interface Ethernet 0/0/1
[SW2-Ethernet0/0/1] port link-type access
[SW2-Ethernet0/0/1] port default vlan 40
[SW2-Ethernet0/0/1] undo shutdown
[SW2-Ethernet0/0/1] quit
# 连接PC4的接口加入vlan40
[SW2] interface Ethernet 0/0/2
[SW2-Ethernet0/0/2] port link-type access
[SW2-Ethernet0/0/2] port default vlan 40
[SW2-Ethernet0/0/2] undo shutdown
[SW2-Ethernet0/0/2] quit

# ========== SW1 上行Trunk（连接R1） ==========
[SW1] interface GigabitEthernet 0/0/1
[SW1-GigabitEthernet0/0/1] port link-type trunk
[SW1-GigabitEthernet0/0/1] port trunk allow-pass vlan 10 20  # 放行vlan10、20
[SW1-GigabitEthernet0/0/1] undo shutdown
[SW1-GigabitEthernet0/0/1] quit
# ========== SW2 上行Trunk（连接R2） ==========
[SW2] interface GigabitEthernet 0/0/1
[SW2-GigabitEthernet0/0/1] port link-type trunk
[SW2-GigabitEthernet0/0/1] port trunk allow-pass vlan 40  # 放行vlan40
[SW2-GigabitEthernet0/0/1] undo shutdown
[SW2-GigabitEthernet0/0/1] quit
# ========== R1 子接口配置（vlan10、vlan20网关） ==========
# vlan10子接口
[R1] interface GigabitEthernet 0/0/0.10
[R1-GigabitEthernet0/0/0.10] dot1q termination vid 10  # 封装vlan10标签
[R1-GigabitEthernet0/0/0.10] ip address 172.16.64.254 255.255.255.0  # vlan10网关
[R1-GigabitEthernet0/0/0.10] arp broadcast enable  # 开启ARP广播，PC才能通信
[R1-GigabitEthernet0/0/0.10] quit
# vlan20子接口
[R1] interface GigabitEthernet 0/0/0.20
[R1-GigabitEthernet0/0/0.20] dot1q termination vid 20
[R1-GigabitEthernet0/0/0.20] ip address 172.16.65.254 255.255.255.0  # vlan20网关
[R1-GigabitEthernet0/0/0.20] arp broadcast enable
[R1-GigabitEthernet0/0/0.20] quit
# ========== R2 子接口配置（vlan40网关） ==========
[R2] interface GigabitEthernet 0/0/1.40
[R2-GigabitEthernet0/0/1.40] dot1q termination vid 40
[R2-GigabitEthernet0/0/1.40] ip address 172.16.0.254 255.255.255.0  # vlan40网关
[R2-GigabitEthernet0/0/1.40] arp broadcast enable
[R2-GigabitEthernet0/0/1.40] quit

3、配置DHCP技术）

（1）启动DHCP服务
（2）创建地址池
（3）在网关接口下发DHCP服务

# ========== R1 开启DHCP ==========
[R1] dhcp enable
# ========== R2 开启DHCP ==========
[R2] dhcp enable
# ========== R1 创建vlan10、vlan20地址池 ==========
# vlan10地址池
[R1] ip pool vlan10
[R1-ip-pool-vlan10] network 172.16.64.0 mask 255.255.255.0
[R1-ip-pool-vlan10] gateway-list 172.16.64.254
[R1-ip-pool-vlan10] dns-list 8.8.8.8 114.114.114.114
[R1-ip-pool-vlan10] lease day 0 hour 2 minute 0
[R1-ip-pool-vlan10] quit
# vlan20地址池
[R1] ip pool vlan20
[R1-ip-pool-vlan20] network 172.16.65.0 mask 255.255.255.0
[R1-ip-pool-vlan20] gateway-list 172.16.65.254
[R1-ip-pool-vlan20] dns-list 8.8.8.8 114.114.114.114
[R1-ip-pool-vlan20] lease day 0 hour 2 minute 0
[R1-ip-pool-vlan20] quit
# ========== R2 创建vlan40地址池 ==========
[R2] ip pool vlan40
[R2-ip-pool-vlan40] network 172.16.0.0 mask 255.255.255.0
[R2-ip-pool-vlan40] gateway-list 172.16.0.254
[R2-ip-pool-vlan40] dns-list 8.8.8.8 114.114.114.114
[R2-ip-pool-vlan40] lease day 0 hour 2 minute 0
[R2-ip-pool-vlan40] quit
# ========== R1 子接口开启DHCP ==========
[R1] interface GigabitEthernet 0/0/0.10
[R1-GigabitEthernet0/0/0.10] dhcp select global # 调用全局地址池
[R1-GigabitEthernet0/0/0.10] quit
[R1] interface GigabitEthernet 0/0/0.20
[R1-GigabitEthernet0/0/0.20] dhcp select global
[R1-GigabitEthernet0/0/0.20] quit
# ========== R2 子接口开启DHCP ==========
[R2] interface GigabitEthernet 0/0/1.40
[R2-GigabitEthernet0/0/1.40] dhcp select global
[R2-GigabitEthernet0/0/1.40] quit

4、配置OSPF协议

（1）创建OSPF的协议进程，配置RID
（2）进入相应的area，network网段
（3）查看OSPF邻居表、路由表，做全网通ping测试

5、配置OSPF的区域汇总--ABR汇总
6、配置静态路由空接口防环
[R2] ospf 1
[R2-ospf-1] area 1
[R2-ospf-1-area-0.0.0.1] abr-summary 172.16.64.0 255.255.192.0 # /18掩码
[R2-ospf-1-area-0.0.0.1] quit
[R2-ospf-1] quit
[R2] ip route-static 172.16.64.0 255.255.192.0 NULL 0
7、配置OSPF区域0的认证
# ========== R2 配置 ==========
[R2] ospf 1
[R2-ospf-1] area 0
[R2-ospf-1-area-0.0.0.0] authentication-mode simple cipher Huawei@123
[R2-ospf-1-area-0.0.0.0] quit
[R2-ospf-1] quit
# ========== R3 配置（密码必须一致） ==========
[R3] ospf 1
[R3-ospf-1] area 0
[R3-ospf-1-area-0.0.0.0] authentication-mode simple cipher Huawei@123
[R3-ospf-1-area-0.0.0.0] quit
[R3-ospf-1] quit
8、配置Easy IP实现内网访问外网
# 1. 配置基础ACL，匹配企业A+B内网所有网段
[R3] acl number 2000
[R3-acl-basic-2000] rule permit source 172.16.0.0 0.0.255.255
[R3-acl-basic-2000] quit

# 2. 在公网接口配置Easy IP NAT
[R3] interface GigabitEthernet 0/0/2
[R3-GigabitEthernet0/0/2] nat outbound 2000 # 用公网接口IP做地址转换
[R3-GigabitEthernet0/0/2] quit
11、配置基础ACL和高级ACL实现访问控制

（1）基础ACL示例（限制vlan10访问vlan20）
[R1] acl number 2001
[R1-acl-basic-2001] rule deny source 172.16.64.0 0.0.0.255
[R1-acl-basic-2001] rule permit source any
[R1-acl-basic-2001] quit
[R1] interface GigabitEthernet 0/0/0.10
[R1-GigabitEthernet0/0/0.10] packet-filter acl 2001 inbound
[R1-GigabitEthernet0/0/0.10] quit
（2）高级ACL示例（限制PC1访问外网HTTP，允许其他）
[R3] acl number 3000
[R3-acl-adv-3000] rule deny tcp source 172.16.64.1 0 destination-port eq 80
[R3-acl-adv-3000] rule permit ip source any
[R3-acl-adv-3000] quit
[R3] interface GigabitEthernet 0/0/0
[R3-GigabitEthernet0/0/0] packet-filter acl 3000 inbound
[R3-GigabitEthernet0/0/0] quit

全网配置静态路由

[r3]ip route-static 172.16.131.0 24 172.16.129.2
[r3]ip route-static 172.16.132.0 24 172.16.129.2
[r3]ip route-static 172.16.133.0 24 172.16.129.2
[r3]ip route-static 172.16.134.0 24 172.16.129.2
[r3]ip route-static 172.16.128.0 25 172.16.129.2
[r3]ip route-static 172.16.128.128 25 172.16.129.2
[r3]ip route-static 172.16.128.128 25 172.16.130.2

[r3]ip route-static 172.16.128.0 25 172.16.130.2

[r3]ip route-static 172.16.131.0 24 172.16.130.2

[r3]ip route-static 172.16.132.0 24 172.16.130.2

[r3]ip route-static 172.16.133.0 24 172.16.130.2

[r3]ip route-static 172.16.134.0 24 172.16.130.2

[r4]ip route-static 172.16.133.0 24 172.16.131.2
[r4]ip route-static 172.16.128.0 25 172.16.131.2
[r4]ip route-static 172.16.128.128 25 172.16.131.2

[r5]ip route-static 172.16.129.0 24 172.16.131.1

[r5]ip route-static 172.16.130.0 24 172.16.131.1

[r5]ip route-static 172.16.132.0 24 172.16.131.1

[r5]ip route-static 172.16.134.0 24 172.16.133.2
[r5]ip route-static 172.16.128.0 25 172.16.133.2
[r5]ip route-static 172.16.128.128 25 172.16.133.2
[r6]ip route-static 172.16.129.0 24 172.16.132.1
[r6]ip route-static 172.16.130.0 24 172.16.132.1
[r6]ip route-static 172.16.131.0 24 172.16.132.1
[r6]ip route-static 172.16.133.0 24 172.16.134.2
[r6]ip route-static 172.16.128.0 25 172.16.134.2
[r6]ip route-static 172.16.128.128 25 172.16.134.2

[r7]ip route-static 172.16.131.0 24 172.16.133.1
[r7]ip route-static 172.16.129.0 24 172.16.133.1
[r7]ip route-static 172.16.130.0 24 172.16.133.1
[r7]ip route-static 172.16.132.0 24 172.16.134.1
[r7]ip route-static 172.16.130.0 24 172.16.134.1
[r7]ip route-static 172.16.129.0 24 172.16.134.1

配置静态路由空接口防环 [r3]ip route-static 172.16.128.0 24 172.16.130.2 [r4]ip route-static 172.16.128.0 24 172.16.132.2
[r4]ip route-static 172.16.128.0 24 172.16.131.2
[r5]ip route-static 172.16.128.0 24 172.16.133.2
[r6]ip route-static 172.16.128.0 24 172.16.134.2 [r7]ip route-static 172.16.128.0 24 NULL 0 6.配置浮动静态路由 [r3]ip route-static 172.16.131.0 24 172.16.130.2 preference 100 [r3]ip route-static 172.16.132.0 24 172.16.130.2 preference 100 [r3]ip route-static 172.16.133.0 24 172.16.130.2 preference 100 [r3]ip route-static 172.16.134.0 24 172.16.130.2 preference 100 [r3]ip route-static 172.16.128.0 25 172.16.130.2 preference 100 [r3]ip route-static 172.16.128.128 25 172.16.130.2 preference 100

DAMO开发者矩阵

DAMO开发者矩阵，由阿里巴巴达摩院和中国互联网协会联合发起，致力于探讨最前沿的技术趋势与应用成果，搭建高质量的交流与分享平台，推动技术创新与产业应用链接，围绕“人工智能与新型计算”构建开放共享的开发者生态。

更多推荐

AI Agent评测基准：从单体到多智能体的性能度量

想象一下，你走进一间未来风格的办公室，你的数字助手已经根据你的日程安排了会议，准备了相关资料，甚至预见到你可能需要的咖啡已经"告诉"了咖啡机。在另一个角落，几个软件机器人正在协作解决一个复杂的物流问题，它们自动分工、协商、调整策略，最终找到最优解。这不仅仅是科幻小说中的场景，而是AI Agent技术正在逐步实现的未来。近年来，AI Agent（智能体）技术取得了令人瞩目的进展。从简单的聊天机器人到

DAMO开发者矩阵

基于 Skip Graph 的 Harness 分布式服务发现

想象你在一个10000平方米的超级玩具工厂里，每个车间（服务节点）负责生产不同的零件（服务）。比如“齿轮车间”生产各种齿轮，“马达车间”生产马达，“组装车间”需要从齿轮车间拿10个齿轮、从马达车间拿5个马达才能拼出一个完整的机器人。如果组装车间每次都要跑到门口的“保安室登记册”（中心化服务发现）查齿轮和马达车间的位置，保安室突然停电（单点故障）怎么办？或者保安室登记册太厚了（数据量过大）找起来要半