实验要求
1、SW3：正常情况SW1—FW1—SW1—R5故障情况SW2—FW2—FW2—R62、SW4：正常情况SW2—FW2—FW2—R6故障情况SW1—FW1—SW1—R53、整个交换网络实现负载分担 创建vlan、生成树、VRRP
LSW3：
[LSW3]vlan batch 2 3
[LSW3]interface GigabitEthernet 0/0/3
[LSW3-GigabitEthernet0/0/3]port link-type trunk
[LSW3-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 3
[LSW3]interface g 0/0/4
[LSW3-GigabitEthernet0/0/4]port link-type trunk
[LSW3-GigabitEthernet0/0/4]port trunk allow-pass vlan 2 3
[LSW3]stp enable
[LSW3]stp mode mstp
[LSW3]stp region-configuration
[LSW3-mst-region]region-name haihai
[LSW3-mst-region]instance 1 vlan 2
[LSW3-mst-region]instance 2 vlan 3
[LSW3-mst-region]active region-configuration
[LSW3]stp instance 1 root primary
[LSW3]stp instance 2 root secondary
[LSW3]stp instance 0 root primary
[LSW3]interface Vlanif 2
[LSW3-Vlanif2]ip address 192.168.2.1 24
[LSW3-Vlanif2]vrrp vrid 1 virtual-ip 192.168.2.254
[LSW3-Vlanif2]vrrp vrid 1 priority 120
[LSW3-Vlanif2]vrrp vrid 1 preempt-mode timer delay 20
[LSW3-Vlanif2]vrrp vrid 1 track interface GigabitEthernet 0/0/1 reduced 15
[LSW3-Vlanif2]vrrp vrid 1 track interface GigabitEthernet 0/0/2 reduced 15
[LSW3]interface Vlanif 3
[LSW3-Vlanif3]ip add 192.168.3.1 24
[LSW3-Vlanif3]vrrp vrid 1 virtual-ip 192.168.3.254 LSW4:
[LSW4]vlan batch 2 3
[LSW4]interface GigabitEthernet 0/0/3
[LSW4-GigabitEthernet0/0/3] port link-type trunk
[LSW4-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 3
[LSW4]interface GigabitEthernet 0/0/4
[LSW4-GigabitEthernet0/0/4] port link-type trunk
[LSW4-GigabitEthernet0/0/4] port trunk allow-pass vlan 2 3[LSW4]stp enable
[LSW4]stp mode mstp
[LSW4]stp region-configuration
[LSW4-mst-region]region-name haihai
[LSW4-mst-region]instance 1 vlan 2
[LSW4-mst-region]instance 2 vlan 3
[LSW4-mst-region]active region-configuration
[LSW4]stp instance 1 root secondary
[LSW4]stp instance 2 root primary
[LSW4]stp instance 0 root secondary
[LSW4]interface Vlanif 2
[LSW4-Vlanif2]ip add 192.168.2.2 24
[LSW4-Vlanif2]vrrp vrid 1 virtual-ip 192.168.2.254
[LSW4]interface Vlanif3
[LSW4-Vlanif3]ip address 192.168.3.2 255.255.255.0
[LSW4-Vlanif3]vrrp vrid 1 virtual-ip 192.168.3.254
[LSW4-Vlanif3]vrrp vrid 1 priority 120
[LSW4-Vlanif3]vrrp vrid 1 preempt-mode timer delay 20
[LSW4-Vlanif3] vrrp vrid 1 track interface GigabitEthernet0/0/1 reduced 15
[LSW4-Vlanif3]vrrp vrid 1 track interface GigabitEthernet0/0/2 reduced 15
LSW5：
[LSW5]vlan batch 2 3
[LSW5]interface GigabitEthernet 0/0/3
[LSW5-GigabitEthernet0/0/3]port link-type access
[LSW5-GigabitEthernet0/0/3]port default vlan 2
[LSW5]interface GigabitEthernet 0/0/4
[LSW5-GigabitEthernet0/0/4]port link-type access
[LSW5-GigabitEthernet0/0/4]port default vlan 3
[LSW5]interface GigabitEthernet 0/0/1
[LSW5-GigabitEthernet0/0/1]port link-type trunk
[LSW5-GigabitEthernet0/0/1]port trunk allow-pass vlan 2 3
[LSW5]interface GigabitEthernet 0/0/2
[LSW5-GigabitEthernet0/0/2]port link-type trunk
[LSW5-GigabitEthernet0/0/2]port trunk allow-pass vlan 2 3
[LSW5]stp enable
[LSW5]stp mode mstp
[LSW5]stp region-configuration
[LSW5-mst-region]region-name haihai
[LSW5-mst-region]instance 1 vlan 2
[LSW5-mst-region]instance 2 vlan 3
[LSW5-mst-region]active region-configuration SW1-SW2：VLAN 102 — 10.10.2.0/24
SW1-SW3：VLAN 103 — 10.10.3.0/24
SW1-SW4：VLAN 104 — 10.10.4.0/24
SW2-SW3：VLAN 203 — 10.20.3.0/24
SW2-SW4：VLAN 204 — 10.20.4.0/24
汇聚层到核心路由配置
LSW3:
[LSW3]vlan batch 103 203
[LSW3]interface GigabitEthernet 0/0/1
[LSW3-GigabitEthernet0/0/1]port link-type access
[LSW3-GigabitEthernet0/0/1]port default vlan 103
[LSW3-GigabitEthernet0/0/1]undo stp enable
[LSW3]interface GigabitEthernet 0/0/2
[LSW3-GigabitEthernet0/0/2]port link-type access
[LSW3-GigabitEthernet0/0/2]port default vlan 203
[LSW3-GigabitEthernet0/0/2]undo stp enable
[LSW3]interface Vlanif 103
[LSW3-Vlanif103]ip add 10.10.3.3 24
[LSW3]interface Vlanif 203
[LSW3-Vlanif203]ip add 10.20.3.3 24
[LSW3]ospf 1 router-id 3.3.3.3
[LSW3-ospf-1]area 0
[LSW3-ospf-1-area-0.0.0.0]network 10.10.3.3 0.0.0.0
[LSW3-ospf-1-area-0.0.0.0]network 10.20.3.3 0.0.0.0
[LSW3-ospf-1-area-0.0.0.0]network 192.168.2.1 0.0.0.0
[LSW3-ospf-1-area-0.0.0.0]network 192.168.3.1 0.0.0.0
[LSW3-ospf-1]silent-interface Vlanif 2
[LSW3-ospf-1]silent-interface Vlanif 3
LSW4：
[LSW4]vlan batch 104 204
[LSW4]interface GigabitEthernet 0/0/1
[LSW4-GigabitEthernet0/0/1]port link-type access
[LSW4-GigabitEthernet0/0/1]port default vlan 204
[LSW4-GigabitEthernet0/0/1]undo stp enable
[LSW4]interface GigabitEthernet 0/0/2
[LSW4-GigabitEthernet0/0/2]port link-type access
[LSW4-GigabitEthernet0/0/2]port default vlan 104
[LSW4-GigabitEthernet0/0/2]undo stp enable
[LSW4]interface Vlanif 104
[LSW4-Vlanif104]ip address 10.10.4.4 24
[LSW4]interface Vlanif 204
[LSW4-Vlanif204]ip add 10.20.4.4 24
[LSW4]ospf 1 router-id 4.4.4.4
[LSW4-ospf-1]area 0.0.0.0
[LSW4-ospf-1-area-0.0.0.0]network 10.10.4.4 0.0.0.0
[LSW4-ospf-1-area-0.0.0.0]network 10.20.4.4 0.0.0.0
[LSW4-ospf-1-area-0.0.0.0]network 192.168.2.2 0.0.0.0
[LSW4-ospf-1-area-0.0.0.0]network 192.168.3.2 0.0.0.0
[LSW4-ospf-1]silent-interface Vlanif 2
[LSW4-ospf-1]silent-interface Vlanif 3
VRF区域配置：
LSW1:
[LSW1]vlan batch 401 402
[LSW1]interface GigabitEthernet 0/0/1
[LSW1-GigabitEthernet0/0/1]port link-type trunk
[LSW1-GigabitEthernet0/0/1]port trunk allow-pass vlan 401 402
[LSW1]interface GigabitEthernet 0/0/4
[LSW1-GigabitEthernet0/0/4]port link-type trunk
[LSW1-GigabitEthernet0/0/4]port trunk allow-pass vlan 401 402
[LSW1]interface Vlanif 401
[LSW1-Vlanif401]ip binding vpn-instance VRF
[LSW1-Vlanif401]ip address 10.40.1.1 24
[LSW1-Vlanif401]vrrp vrid 1 virtual-ip 10.40.1.100
[LSW1-Vlanif401]vrrp vrid 1 priority 120
[LSW1-Vlanif401]vrrp vrid 1 preempt-mode timer delay 60
[LSW1-Vlanif401]vrrp vrid 1 track interface GigabitEthernet 0/0/1 reduced 30
[LSW1]interface Vlanif 402
[LSW1-Vlanif402]ip binding vpn-instance VRF
[LSW1-Vlanif402]ip address 10.40.2.1 24
[LSW1-Vlanif402]vrrp vrid 2 virtual-ip 10.40.2.100
LSW2:
[LSW2]vlan batch 401 402
[LSW2]interface GigabitEthernet 0/0/3
[LSW2-GigabitEthernet0/0/3]port link-type trunk
[LSW2-GigabitEthernet0/0/3]port trunk allow-pass vlan 401 402
[LSW2]interface GigabitEthernet 0/0/4
[LSW2-GigabitEthernet0/0/4]port link-type trunk
[LSW2-GigabitEthernet0/0/4]port trunk allow-pass vlan 401 402
[LSW2]interface Vlanif 401
[LSW2-Vlanif401]ip binding vpn-instance VRF
[LSW2-Vlanif401]ip address 10.40.1.2 24
[LSW2-Vlanif401]vrrp vrid 1 virtual-ip 10.40.1.100
[LSW2]interface Vlanif 402
[LSW2-Vlanif402]ip binding vpn-instance VRF
[LSW2-Vlanif402]ip address 10.40.2.2 24
[LSW2-Vlanif402]vrrp vrid 2 virtual-ip 10.40.2.100
[LSW2-Vlanif402]vrrp vrid 2 priority 120
[LSW2-Vlanif402]vrrp vrid 2 preempt-mode timer delay 60
[LSW2-Vlanif402]vrrp vrid 2 track interface GigabitEthernet 0/0/3 reduced 30
FW1:
[FW1]vlan batch 401 402 403 404[FW1]interface GigabitEthernet 1/0/0
[FW1-GigabitEthernet1/0/0]ip add 10.10.10.1 30
[FW1]interface GigabitEthernet 1/0/3.401
[FW1-GigabitEthernet1/0/3.401]ip add 10.40.1.10 24
[FW1-GigabitEthernet1/0/3.401]vlan-type dot1q 401
[FW1]interface GigabitEthernet 1/0/3.402
[FW1-GigabitEthernet1/0/3.402]ip address 10.40.2.10 24
[FW1-GigabitEthernet1/0/3.402]vlan-type dot1q 402
[FW1]interface GigabitEthernet 1/0/2.403
[FW1-GigabitEthernet1/0/2.403]ip address 10.40.3.10 24
[FW1-GigabitEthernet1/0/2.403]vlan-type dot1q 403
[FW1]interface GigabitEthernet 1/0/2.404
[FW1-GigabitEthernet1/0/2.404]ip add 10.40.4.10 24
[FW1-GigabitEthernet1/0/2.404]vlan-type dot1q 404
FW2:
[FW2]vlan batch 401 402 403 404
[FW2]interface GigabitEthernet 1/0/0
[FW2-GigabitEthernet1/0/0]ip add 10.10.10.2 30
[FW2]interface GigabitEthernet 1/0/2.401
[FW2-GigabitEthernet1/0/2.401]ip address 10.40.1.20 24
[FW2-GigabitEthernet1/0/2.401]vlan-type dot1q 401
[FW2]interface GigabitEthernet 1/0/2.402
[FW2-GigabitEthernet1/0/2.402]ip add 10.40.2.20 24
[FW2-GigabitEthernet1/0/2.402]vlan-type dot1q 402
[FW2]interface GigabitEthernet 1/0/3.403
[FW2-GigabitEthernet1/0/3.403]ip add 10.40.3.20 24
[FW2-GigabitEthernet1/0/3.403]vlan-type dot1q 403
[FW2]interface GigabitEthernet 1/0/1.404
[FW2-GigabitEthernet1/0/3.404]ip add 10.40.4.20 24
[FW2-GigabitEthernet1/0/3.404]vlan-type dot1q 404
划分安全区域：
FW1:
[FW1]firewall zone trust
[FW1-zone-trust]add interface GigabitEthernet 1/0/3.401
[FW1-zone-trust]add interface GigabitEthernet 1/0/3.402
[FW1]firewall zone untrust
[FW1-zone-untrust]add interface GigabitEthernet 1/0/2.403
[FW1-zone-untrust]add interface GigabitEthernet 1/0/2.404
[FW1]firewall zone dmz
[FW1-zone-dmz]add interface GigabitEthernet 1/0/0
FW2:
[FW2]firewall zone trust
[FW2-zone-trust]add interface GigabitEthernet 1/0/2.401
[FW2-zone-trust]add interface GigabitEthernet 1/0/2.402
[FW2]firewall zone untrust
[FW2-zone-untrust]add interface GigabitEthernet 1/0/3.403
[FW2-zone-untrust]add interface GigabitEthernet 1/0/3.404
[FW2]firewall zone dmz
[FW2-zone-dmz]add interface GigabitEthernet 1/0/0
LSW1、LSW2的Public配置：
LSW1:[LSW1]vlan batch 403 404
[LSW1]interface GigabitEthernet 0/0/3
[LSW1-GigabitEthernet0/0/3]port link-type trunk
[LSW1-GigabitEthernet0/0/3]port trunk allow-pass vlan 403 404
[LSW1]interface GigabitEthernet 0/0/2
[LSW1-GigabitEthernet0/0/2]port link-type trunk
[LSW1-GigabitEthernet0/0/2]port trunk allow-pass vlan 403 404
[LSW1]interface Vlanif 403
[LSW1-Vlanif403]ip address 10.40.3.1 24
[LSW1-Vlanif403]vrrp vrid 3 virtual-ip 10.40.3.100
[LSW1-Vlanif403]vrrp vrid 3 priority 120
[LSW1-Vlanif403]vrrp vrid 3 preempt-mode timer delay 60
[LSW1-Vlanif403]vrrp vrid 3 track interface GigabitEthernet 0/0/3 reduced 30
[LSW1]interface Vlanif 404
[LSW1-Vlanif404]ip add 10.40.4.1 24
[LSW1-Vlanif404]vrrp vrid 4 virtual-ip 10.40.4.100
LSW2:
[LSW2]vlan batch 403 404
[LSW2]interface GigabitEthernet 0/0/1
[LSW2-GigabitEthernet0/0/1]port link-type trunk
[LSW2-GigabitEthernet0/0/1]port trunk allow-pass vlan 403 404
[LSW2]interface GigabitEthernet 0/0/2
[LSW2-GigabitEthernet0/0/2]port link-type trunk
[LSW2-GigabitEthernet0/0/2]port trunk allow-pass vlan 403 404
[LSW2]interface Vlanif 403
[LSW2-Vlanif403]ip address 10.40.3.2 24
[LSW2-Vlanif403]vrrp vrid 3 virtual-ip 10.40.3.100
[LSW2]interface Vlanif 404
[LSW2-Vlanif404]ip address 10.40.4.2 24
[LSW2-Vlanif404]vrrp vrid 4 virtual-ip 10.40.4.100
[LSW2-Vlanif404]vrrp vrid 4 priority 120
[LSW2-Vlanif404]vrrp vrid 4 preempt-mode timer delay 60
[LSW2-Vlanif404]vrrp vrid 4 track interface GigabitEthernet 0/0/1 reduced 30
补充路由：
LSW1上行路由：VRF
[LSW1]ip route-static vpn-instance VRF 0.0.0.0 0 10.40.1.200
[LSW1]ip route-static vpn-instance VRF 0.0.0.0 0 10.40.2.200 preference 70
LSW1下行路由：Public
[LSW1]ip route-static 192.168.0.0 16 10.40.3.200
[LSW1]ip route-static 192.168.0.0 16 10.40.4.200 preference 70
LSW2上行路由：VRF
[LSW2]ip route-static vpn-instance VRF 0.0.0.0 0 10.40.2.200
[LSW2]ip route-static vpn-instance VRF 0.0.0.0 0 10.40.1.200 preference 70
LSW2下行路由：Public
[LSW2]ip route-static 192.168.0.0 16 10.40.4.200
[LSW2]ip route-static 192.168.0.0 16 10.40.3.200 preference 70
双机热备配置：
FW1:
FW1下行接口：VRF
[FW1]interface GigabitEthernet 1/0/3.401
[FW1-GigabitEthernet1/0/3.401]vrrp vrid 5 virtual-ip 10.40.1.200 active
[FW1]interface GigabitEthernet 1/0/3.402
[FW1-GigabitEthernet1/0/3.402]vrrp vrid 6 virtual-ip 10.40.2.200 standby
FW1上行接口：（Public）
[FW1]interface GigabitEthernet 1/0/2.403
[FW1-GigabitEthernet1/0/2.403]vrrp vrid 7 virtual-ip 10.40.3.200 active
[FW1]interface GigabitEthernet 1/0/2.404
[FW1-GigabitEthernet1/0/2.404]vrrp vrid 8 virtual-ip 10.40.4.200 standby
[FW1]hrp mirror session enable
[FW1]hrp interface GigabitEthernet 1/0/0 remote 10.10.10.2
[FW1]hrp enable
FW1上行路由配置：HRP_S
[FW1]ip route-static 0.0.0.0 0 10.40.3.100HRP_S
[FW1]ip route-static 0.0.0.0 0 10.40.4.100 preference 70
FW1下行路由配置：（192.168.2.0/24和192.168.3.0/24两个网段汇聚成192.168.0.0/16网段）HRP_M
[FW1]ip route-static 192.168.0.0 16 10.40.1.100HRP_M
[FW1]ip route-static 192.168.0.0 16 10.40.2.100 preference 70
FW2:
FW2下行接口：VRF
[FW2]interface GigabitEthernet 1/0/2.401
[FW2-GigabitEthernet1/0/2.401]vrrp vrid 5 virtual-ip 10.40.1.200 standby
[FW2]interface GigabitEthernet 1/0/2.402
[FW2-GigabitEthernet1/0/2.402]vrrp vrid 6 virtual-ip 10.40.2.200 active
FW2上行接口：Pubilc
[FW2]interface GigabitEthernet 1/0/3.403
[FW2-GigabitEthernet1/0/3.403]vrrp vrid 7 virtual-ip 10.40.3.200 standby
[FW2]interface GigabitEthernet 1/0/3.404
[FW2-GigabitEthernet1/0/3.404]vrrp vrid 8 virtual-ip 10.40.4.200 active
[FW2]hrp mirror session enable
[FW2]hrp interface GigabitEthernet 1/0/0 remote 10.10.10.1
[FW2]hrp enable
FW2上行路由配置：HRP_S
[FW2]ip route-static 0.0.0.0 0 10.40.4.100HRP_S
[FW2]ip route-static 0.0.0.0 0 10.40.3.100 preference 70
FW2下行路由配置：HRP_S
[FW2]ip route-static 192.168.0.0 16 10.40.2.100HRP_S
[FW2]ip route-static 192.168.0.0 16 10.40.1.100 preference 70
安全策略配置:
HRP_M
[FW1]security-policyHRP_M
[FW1-policy-security]rule name trust_to_untrustHRP_M
[FW1-policy-security-rule-trust_to_untrust]source-zone trustHRP_M
[FW1-policy-security-rule-trust_to_untrust]destination-zone untrustHRP_M
[FW1-policy-security-rule-trust_to_untrust]source-address 192.168.0.0 16HRP_M
[FW1-policy-security-rule-trust_to_untrust]action permit
SW1-SW2：VLAN 201 — 10.20.1.0/24
SW1-R5：VLAN 105 — 10.10.5.0/24
SW2-R6：VLAN 206 — 10.20.6.0/24
R5-R6：10.56.0.0/24
LSW1:
[LSW1]vlan batch 11 12
[LSW1]interface GigabitEthernet 0/0/7
[LSW1-GigabitEthernet0/0/7]port link-type access
[LSW1-GigabitEthernet0/0/7]port default vlan 11
[LSW1-GigabitEthernet0/0/7]undo stp enable
[LSW1]interface GigabitEthernet 0/0/5
[LSW1-GigabitEthernet0/0/5]port trunk allow-pass vlan 12
[LSW1-GigabitEthernet0/0/5]undo stp enable
[LSW1]interface Vlanif 11
[LSW1-Vlanif11]ip address 10.11.1.1 24
[LSW1]interface Vlanif 12
[LSW1-Vlanif12]ip add 10.12.1.1 24
[LSW1]ospf 2 router-id 1.1.1.1
[LSW1-ospf-2]area 0
[LSW1-ospf-2-area-0.0.0.0]network 10.11.1.1 0.0.0.0
[LSW1-ospf-2-area-0.0.0.0]network 10.12.1.1 0.0.0.0
LSW2:
[LSW2]vlan batch 12 22
[LSW2]interface GigabitEthernet 0/0/7
[LSW2-GigabitEthernet0/0/7]port link-type access
[LSW2-GigabitEthernet0/0/7]port default vlan 22
[LSW2-GigabitEthernet0/0/7]undo stp enable
[LSW2]interface GigabitEthernet 0/0/2
[LSW2-GigabitEthernet0/0/2]port trunk allow-pass vlan 12
[LSW2-GigabitEthernet0/0/2]undo stp enable
[LSW2]interface Vlanif 12
[LSW2-Vlanif12]ip address 10.12.1.2 24
[LSW2]interface Vlanif 22
[LSW2-Vlanif22]ip address 10.22.2.1 24
[LSW2-ospf-2]dis th
[LSW2]ospf 2 router-id 2.2.2.2
[LSW2-ospf-2] area 0.0.0.0
[LSW2-ospf-2-area-0.0.0.0]network 10.12.1.2 0.0.0.0
[LSW2-ospf-2-area-0.0.0.0]network 10.22.2.1 0.0.0.0
R1:
[R1]interface GigabitEthernet 0/0/0
[R1-GigabitEthernet0/0/0]ip add 10.11.1.2 24
[R1]interface GigabitEthernet 0/0/1
[R1-GigabitEthernet0/0/1]ip address 10.12.2.1 24
[R1-ospf-1]display this
[R1-ospf-1]ospf 1 router-id 3.3.3.3
[R1-ospf-1]area 0.0.0.0
[R1-ospf-1-area-0.0.0.0]network 10.11.1.2 0.0.0.0
[R1-ospf-1-area-0.0.0.0]network 10.12.2.1 0.0.0.0
R2:
[R2]interface GigabitEthernet 0/0/0
[R2-GigabitEthernet0/0/0]ip add 10.22.2.2 24
[R2]interface GigabitEthernet 0/0/1
[R2-GigabitEthernet0/0/1]ip add 10.12.2.2 14
[R2]ospf 1 router-id 4.4.4.4
[R2-ospf-1]area 0
[R2-ospf-1-area-0.0.0.0]network 10.22.2.2 0.0.0.0
[R2-ospf-1-area-0.0.0.0]network 10.12.2.2 0.0.0.0
外部网络
R1:
[R1]interface GigabitEthernet 0/0/2
[R1-GigabitEthernet0/0/2]ip add 12.0.0.1 24
[R1]ip route-static 0.0.0.0 0 12.0.0.100
[R1-ospf-1]default-route-advertise
[R1]acl 2000
[R1-acl-basic-2000]rule permit source 192.168.0.0 0.0.255.255
[R1]interface GigabitEthernet 0/0/2
[R1-GigabitEthernet0/0/2]nat outbound 2000
R2：
[R2]interface GigabitEthernet 0/0/2
[R2-GigabitEthernet0/0/2]ip add 13.0.0.1 24
[R2]ip route-static 0.0.0.0 0 13.0.0.100
[R2-ospf-1]default-route-advertise
[R2]acl 2000
[R2-acl-basic-2000]rule permit source 192.168.0.0 0.0.255.255
[R2]int g 0/0/2
[R2-GigabitEthernet0/0/2]nat outbound 2000
ISP:
[ISP]interface GigabitEthernet 0/0/0
[ISP-GigabitEthernet0/0/0]ip add 12.0.0.100 24
[ISP]interface GigabitEthernet 0/0/1
[ISP-GigabitEthernet0/0/1]ip add 13.0.0.100 24
[ISP]interface LoopBack 0
[ISP-LoopBack0]ip add 100.1.1.1 24
在LSW1和LSW2的OSPF进程2中引入静态路由[LSW1-ospf-2]import-route static
[LSW2-ospf-2]import-route static
测试