实验手册14个经典企业网综合案例

实验一管理网络设备（ 实验二以太网端口汇 实验三STP的基本配 实验四Trunk的基本配 实验五VLAN间的三层通 实验八PPP、FR配置实 实验九RIP协议配 实验十OSPF协议配 实验十一和地址转换实 案例三校园网案例分 实验一管理网络设备（图1-配置路由器的ipPCip 配置完路由器的ip地址，你还需要配置PCip地址（anone方式[Quidway]User-interfacevty0 [Quidway-ui-vty0]userprivilegelevel bpassword方式[Quidway]User-interfacevty0[Quidway-ui-vty0]setauthenticationpasswordsimple123[Quidway-ui-vty0]userprivilegelevel[Quidway]User-interfacevty0[Quidway-ui-vty0]userprivilegelevel[Quidway]local- passwordsimple 设置用户 service- netlevel3实验二1.11.21.3Formatted:BulletsFormatted:Bulletsand交换机Sw1[H3C]sysname [Sw1]interfaceVlan-interface [Sw1-Vlan-interface1]ipadd IP[Sw1- 0/1]speed [Sw1- 0/1]duplex 0/2]speed100 [Sw1]link-aggregati 0/1to 0/2both端口绑交换机Sw2[H3C]sysname[Sw2]interfaceVlan-interface[Sw2-Vlan-interface1]ipadd 0/1]speed100 0/2]speed100 [Sw2]link-aggregati 0/1to 0/2备注：如果用S3900、S3600系列的交换机做portlinkaggregation命令如下：交换机Sw1[Sw1]link-aggregationgroup1 1/0/1]speed100 1/0/2]speed100 交换机Sw2[Sw2]link-aggregationgroup1mode 1/0/1]speed100 1/0/2]speed100 Formatted:BulletsFormatted:BulletsandFormatted:BulletsandFormatted:BulletsandMasterport:Ethe Othersub-ports:EtheFormatted:BulletsFormatted:Bulletsand 实验三STP1.1 图1- 操作命令开启/stp{enable|disableRSTP的交换机工作在STP兼容模式或者RSTP模式下stpmode{stp|rstp配置交换机的BPDUstpbpdu-配置特定交换机的Bridgestpprioritybridge-stprootstproot配置特定交换机的ForwardDelaystptimerforward-delaystptimero配置特定交换机的MaxAgestptimermax-agestptimeout-factor操作命令配置特定端口的Pathstpcost在指定端口上开启stp在指定端口上关闭stp配置特定端口为边缘端口/stpedged-port{enable|disablestploop-配置特定端口的mCheckstpmcheck{primary|stppoint-to-point{auto|-false|-true}stpportpriorityport-配置交换机的Rootstproot-stptransmit-limit操作命令disystp[interfaceinterface-listRSTP的调试开关（收发报文、[undo]debuggingstp{error|eventpacket|allterminal在system-view视图下，运行stpenable。2：端口状态切换手动断开SwitchBSwitchCSwitchC任务3：RSTP的两种工作模式在system-view视图下，运行stpmoderstp|stp。4：其他可选配置[SwitchA]stpenable[SwitchB]stpenable[SwitchC]stpenable[SwitchA]disystp[SwitchB]disystp[SwitchA]disystpinterfaceethe0/1ethe0/3[SwitchB]disystpinterfaceethe0/1ethe0/2[SwitchC]disystpinterfaceethe0/2ethe0/3 1.71.5STP时，显然这个组网图会导致交换机之间的环路的存在，主要表现就是出现广播风暴，交换机数据转发灯不停的闪烁。广播风暴可能会导致连接在交换机网口上的PC反应速STP以后再将其插上，实验四TrunkSwitchEEEPCA：/24，PCB：/24PCC：/24，PCD：/24创建两个VLAN：VLAN2和VLAN3，配置端口 0/1到 0/9到 0/17为Trunk端口，并允许所有VLAN可以通过[SwitchA]vlan[SwitchA-vlan2]portethe 0/1toethe [SwitchA]vlan3 0/9to [SwitchB]vlan[SwitchB-vlan2]portEthe 0/1toEthe [SwitchB]vlan3[SwitchB-vlan3]port 0/9to [SwitchA]interface 0/17]portlink-type 0/17]porttrunkpermitvl允许所有VLAN通[SwitchB]interface [SwitchB-Ethe 0/17]portlink-typetrunk[SwitchB-Ethe 0/17]porttrunkpermitvll实验五VLANFormatted:BulletsFormatted:Bulletsand SwitchE E E PFormatted:BulletsandFormatted:Bulletsand CDvlan,SwithcAvlan5,SwithcBvlan2vlan3Formatted:BulletsFormatted:Bulletsand操作命令interfacevlan-interfacevlan-iproute-static<ip_address>[<mask>|<masklen>]interface_name>|<gateway_address>[yFormatted:BulletsFormatted:BulletsandFormatted:BulletsFormatted:Bulletsand1PCIP地址及网关地址Formatted:BulletsandPCBIP10.13.2/24/24；PCCIP10.15.2/24/24，PCDIPFormatted:Bulletsand2、配置VLAN在交换机A上创建三个VLAN：VLAN2、VLAN3和VLAN4，配置端口Ethe 0/1属于VLAN2；端口Ethe 0/12属于VLAN3； 0/17属于VLAN4。在交换机B上创建三个VLAN：VLAN5、VLAN6和VLAN4，配置端口Ethe 0/1属于VLAN5，端口Ethe 端口Ethe 0/17属于VLAN4。Formatted:BulletsandFormatted:BulletsandSwitchA上创建三个三层虚接口，并配置IP地址VLAN2IPVLAN3IPVLAN4IPSwitchB上创建三个三层虚接口，并配置IP地址VLAN5IPVLAN6IPVLAN4IP在SwitchA上配置两静态路由：iproute-staticiproute-staticiproute-staticiproute-staticFormatted:BulletsFormatted:Bulletsand1.5.1VLAN[SwitchA]vlan[SwitchA-vlan2]portEthe [SwitchA]vlan3[SwitchA-vlan3]portEthe [SwitchA]vlan4[SwitchA-vlan4]port [SwitchB]vlan[SwitchB-vlan5]portEthe [SwitchB]vlan6[SwitchB-vlan6]portEthe [SwitchB]vlan4[SwitchB-vlan4]port Formatted:BulletsFormatted:Bulletsand[SwitchA]interfaceVlan-interface[SwitchA-Vlan-interface2]ipaddress[SwitchA]interfacevlan-interface3[SwitchA-Vlan-interface3]ipaddress[SwitchA]interfacevlan-interface4[SwitchA-Vlan-interface4]ipaddress[SwitchB]interfaceVlan-interface[SwitchB-Vlan-interface5]ipaddress[SwitchB]interfacevlan-interface6[SwitchB-Vlan-interface6]ipaddress[SwitchB]interfacevlan-interface4[SwitchB-Vlan-interface4]ipaddressFormatted:BulletsFormatted:Bulletsand[SwitchA]iproute-static[SwitchA]iproute-static[SwitchB]iproute-static[SwitchB]iproute-staticDHCPServerDHCPServer功能实现对用户IP地址的动态分配。[RTA]intethe 0/0]ipaddressDHCP[Quidway]dhcp[Quidway]dhcpserverforbidden-ip[Quidway]interfacevlan[Quidway-Vlan-interface1]ipaddress[Quidway]dhcpserverip-pool1 workmask[Quidway-dhcp-pool-1]gateway-list[Quidway-dhcp-pool-1]dns-list5215 [Quidway]<Quidway>Formatted:BulletsandFormatted:Bulletsand实验七文件传输协议配置Formatted:Formatted:Bulletsand

图11图1-[Quidway]interface 0/0]ipaddress[Quidway]ftp[Quidway]User-interfacevty0[Quidway-ui-vty0]authentication-mode[Quidway-ui-vty0]userprivilegelevel[Quidway]local- passwordsimple 设置用户 service-typeftplevel 实验八PPP、FRFormatted:BulletsFormatted:BulletsandFormatted:BulletsFormatted:Bulletsand Quidway QuidwayFormatted:BulletsandFormatted:BulletsandFormatted:BulletsFormatted:BulletsandFormatted:BulletsFormatted:Bulletsand6PAP1.6验证配置完毕后，两台设备间能通[Quidway2]:56databytes,pressCTRL_CtobreakReplyfrom:bytes=56Sequence=1ttl=255time=28msReplyfrom:bytes=56Sequence=2ttl=255time=28msReplyfrom:bytes=56Sequence=3ttl=255time=28msReplyfrom:bytes=56Sequence=4ttl=255time=28msReplyfrom:bytes=56Sequence=5ttl=255time=28ms---statistics--5packet(s)5packet(s)0.00%packetround-tripmin/avg/max=28/28/28Formatted:BulletsFormatted:BulletsandFormatted:BulletsFormatted:Bulletsand[Quidway1-S3/0/0]ipaddress[Quidway2-S3/0/0]ipaddressFormatted:BulletsandFormatted:Bulletsand[Quidway1-S3/0/0]link-protocolppp[Quidway2-S3/0/0]link-protocolFormatted:BulletsFormatted:Bulletsand[Quidway1-S3/0/0]pppauthentication-modepap[Quidway1]local-user[Quidway1-local-user]passwordcipher123456[Quidway1-local-user]service-typeppp[Quidway1-S3/0/0]shutdown[Quidway1-S3/0/0]undo[Quidway2-S3/0/0]ppppaplocal- passwordcipher[Quidway2-S3/0/0]shutdown[Quidway2-S3/0/0]undoshutdown[Quidway1-S3/0/0]pppauthentication-modechap[Quidway1]local-user [Quidway1-local-user ]passwordcipher123456[Quidway1-local-user ]service-typeppp[Quidway1-S3/0/0]pppchapuser [Quidway1-S3/0/0]shutdown[Quidway1-S3/0/0]undoshutdown [Quidway2-local-user ]passwordcipher123456[Quidway2-local-user ]service-typeppp[Quidway2-S3/0/0]pppchapuser [Quidway2-S3/0/0]shutdown[Quidway2-S3/0/0]undoshutdownFormatted:BulletsFormatted:Bulletsand[Quidway1-Serial3/0/0]ipaddress[Quidway2-Serial3/0/0]ipaddress[Quidway1-Serial3/0/0]link-protocolfr[Quidway1-Serial3/0/0]frinterface-typedce[Quidway1-Serial3/0/0]frdlci20[Quidway1-Serial3/0/0]fr（frmapip[Quidway2-Serial3/0/0]link-protocolfr[Quidway2-Serial3/0/0]frinterface-typedte[Quidway2-Serial3/0/0]frinarp（frmapip[Quidway1-Serial3/0/0]shutdown[Quidway1-Serial3/0/0]undoshutdown[Quidway2-Serial3/0/0]shutdown[Quidway2-Serial3/0/0]undoshutdown实验九RIPFormatted:BulletsFormatted:BulletsandFormatted:Bulletsand图15Formatted:Bulletsand得A和C的网段可以互访。Formatted:BulletsFormatted:Bulletsand在指定的网络接口上应用在指定的网络接口上应用指定接口的RIP版本为RIP-2Formatted:BulletsFormatted:Bulletsand

Formatted:BulletsandFormatted:Bulletsand 1.4 yiprouting-tableRoutingTable:publiDestination/MaskProtocolPre 100 100 100 RTA可以自动学习到其他网段的路由，RTB :56databytes,pressCTRL_CtoReplyfrom:bytes=56Sequence=1ttl=254time=2msReplyfrom:bytes=56Sequence=2ttl=254time=2msReplyfrom:bytes=56Sequence=3ttl=254time=2msReplyfrom:bytes=56Sequence=4ttl=254time=2msReplyfrom:bytes=56Sequence=5ttl=254time=2ms--- statistics--5packet(s)5packet(s)0.00%packetround-tripmin/avg/max=2/2/21.261.5配置参 Formatted:Bulletsand[RTA]interface 0/0]ipaddress 0/0]ripversion2 [RTA]interfaceLoopBack0 [RTA-LoopBack0]ipaddress32[RTA-LoopBack0]ripversion2multicast work[RTA-rip]undo [RTB]interface 0/0]ipaddress30 0/0]ripversion2multicast [RTB]interfaceLoopBack[RTB-LoopBack0]ipaddress32[RTB-LoopBack0]ripversion2multicast[RTB]interface[RTB-Serial1/0]ipaddress30[RTB-Serial1/0]ripversion2multicast[RTB-riwork[RTB-riwork[RTB-riwork[RTB-rip]undosummary[RTC]interface[RTC-Serial1/0]ipaddress30[RTC-Serial1/0]ripversion2multicast[RTC]interfaceLoopBack[RTC-LoopBack0]ipaddress32[RTC-LoopBack0]ripversion2multicast[RTC-riwork [RTC-rip]undosummary实验十OSPFFormatted:BulletsFormatted:Bulletsand启动ospf协议Formatted:BulletsFormatted:Bulletsand yiprouting-tableRoutingTable:publiDestination/MaskProtocolPre 100 100 100 RTA可以自动学习到其他网段的路由，RTB并且，从RTA上可以通RTC的loopback地Formatted:BulletsFormatted:Bulletsand[RTA]interface 0/0]ipaddress30 [RTA]interfaceLoopBack[RTA-LoopBack0]ipaddress32[RTA]router-id [RTA]ospf[RTA-ospf-1]area work[RTA-ospf-1-area-0.0.0.work[RTB]interface 0/0]ipaddress30 [RTB]interfaceLoopBack[RTB-LoopBack0]ipaddress32[RTB]interface[RTB-Serial1/0]ipaddress30[RTBA]router-id[RTBA]ospf[RTBA-ospf-1]area work work[RTBA-ospf-1]area1 work[RTC]interface[RTC-Serial1/0]ipaddress30[RTC]interfaceLoopBack[RTC-LoopBack0]ipaddress32[RTCA]router-id[RTCA]ospf[RTCA-ospf-1]area work实验十一和地址转换实Formatted:BulletsFormatted:Bulletsand

Formatted:Bulletsand图1-7图1-11Formatted:BulletsandPc1Pc2RTAe0/0，交换机做透传，RTA要求：a在RTA上启用NAT功能，使pc能够到RTB。b在RTA上起用firewall功能，pc2RTBFormatted:BulletsFormatted:BulletsandFormatted:BulletsFormatted:Bulletsand一、采用EasyIP[H3C]sysname[RTA]interface [RTA]interfaceEthe 0/0ipaddress24 [RTA-acl-adv-3000]ruledenyipsource0destination制定相关规则，pc2RTB[RTA]interfaceEthe 0/0]firewallpacket-filter3000inbound[H3C]sysnameRTB[RTBA-Serial2/0]ipaddress Formatted:BulletsFormatted:Bulletsand[H3C]sysname[RTA]interface [RTA]interfaceEthe 0/0ipaddress24 [RTA]aclnumber2000 建立基本控制列表[RTA-acl-adv-2000]rulepermitsourceany [RTA]nataddress-group10 [RTA-acl-adv-3000]ruledenyipsource192.168.130destination制定相关规则，pc2RTB[RTA]interfaceEthe 0/0]firewallpacket-filter3000inboundFormatted:BulletsFormatted:Bulletsand[H3C]sysnameRTB[RTBA-Serial2/0]ipaddressFormatted:BulletsFormatted:BulletsandFormatted:BulletsFormatted:Bulletsand

s2/1 Loopvlan2 Pc1192.168.1Formatted:BulletsFormatted:Bulletsand[SWA]vlan[SWA-vlan2]portethe [SWA]interfacevlan2[SWA-vlan-interface2]ipaddress[SWA]interfacevlan[SWA-vlan-interface1]ipaddress[SWA]iproute-static0 RTB的配置[RTB]interface 0/0]ipaddress30[RTB]interfaces2/0[RTB-s2/0]ipaddress[RTB]iproute-static24 work[RTB-s2/0]ripversion2[RTB-rip]import-route [RTB-rip]import-route [RTC]interface[RTC-S2/0]ipaddress30[RTC]interfaces2/1[RTC-S2/1]ipaddress30[RTC-riwork[RTC]interfaces2/0[RTC-S2/0]ripversion2multicast[RTC]routerid[RTC-ospf-1]area[RTC-ospf-1-area0.0.0.work[RTC-ospf-1]import-route [RTC-ospf-1]import-route [RTC-rip]import-route [RTC-rip]import-route [RTD]interface[RTD-Serial2/1]ipaddress[RTD]interfaceLoopBack[RTD-LoopBack1]ipaddress[RTD]routerid[RTD-ospf-1]area work workL2TP（PPPOE拨入）用户连接Inte 后，由LAC向LNS发起Tunnel连接的请求；LNS接受此连接请求，LAC与LNS之间建立一条虚拟Tunnel； 用户通过为.com接入，使用缺省的本地认证。本例中LAC侧的 1/0/0是用户接入接口，与通道相连的串口IP地址为LNSIP地址为，虚拟模板的IP

1、本实验中，pc机用来模拟接入用户，作为PPPOE端，LAC用来模拟PPPOE[Quidway]sysnameLAC[LAC]Local-uservpdnuser[LAC-luser-vpdnuser]passwordsimple [LAC-luser-vpdnuser]service-typeppp#配 [LAC-]scheme#[LAC]l2tpenable[LAC]l2tp-group[LAC-l2tp1]tunnelname[LAC-l2tp1]startl2tpip #启用通道验证并设置通道验证[LAC-l2tp1]tunnel[LAC-l2tp1]tunnelpasswordsimpleQuidway[LAC-l2tp1]quit#[LAC]interfacevirtual-temte te0]pppauthentication-modepap te0]quit#[LAC]interface 0/0]pppoe-serverbindvirtual-temple[Quidway]sysnameLNS[LNS]Local-uservpdnuser[LNS-luser-vpdnuser]passwordsimple [LNS-luser-vpdnuser]service-typeppp[LNS] .com]scheme .com]ippool1[LNS]interfacevirtuel- te te1]ipaddress24 te1]remoteaddresspool1 [LNS]l2tpenable[LNS]l2tp-group[LNS-l2tp]tunnelname[LNS-l2tp]allowl2tpvirtuall-tem te1remo [LNS-l2tp]tunnelauthentication[LNS-l2tp]tunnelpasswordsimplePC上 个新的PPPOE连接。 .com， [LAC]dis yl2tptunnel//显示通道信息[LAC]dis yl2tpsession//显示会话信息[LNS]dis yl2tptunnel//显示通道信息[LNS]dis yl2tpsession//显示会话信息实验十四虚拟路由冗余协议（VRRP）RTA、RTB10RTAMaster，RTB担Slave。Master。PCA10虚拟的IPPCARTA到达PCC，PCB的数据经过RTBPCC，配置端口IP配置端口IP在RTA和RTB的 RTApriority120，RTBpriority100（100是默认值，不在RTA和RTB的 Systemview:returntouserviewwithCtrl+Z.[Quidway]sysnameRou ]interface -Ethe 0/0]ipaddress ]interfaceSerial -Serial2/0]ipaddressSystemView:returntoUserViewwithCtrl+Z.[Quidway]sysnameRouterB[RouterB]interface 0/0]ipaddress [RouterB]interfaceSerial[RouterB-Serial2/1]ipaddressRTC的端口IPSystemView:returntoUserViewwithCtrl+Z.[Quidway]sysnameRouterC[RouterC]interface 0/0]ipaddress [RouterC]interfaceSerial[RouterC-Serial1/0]ipaddress[RouterC]interfaceSerial[RouterC-Serial1/1]ipaddress ]routerid -ospf-1]area work work[RouterB]routerid[RouterB-ospf-1]area work work[RouterC]routerid[RouterC-ospf-1]area[RouterC-ospf-1-area-0.0.0.work[RouterC-ospf-1-area-0.0.0.work workVRRP ]vrrp- ]interface 0/0]vrrpvrid10virtual-ip 0/0]vrrpvrid10priority120 0/0]vrrpvrid20virtual-ip 0/0]vrrpvrid20priority100 [RouterB]interfaceEthe 0/0]vrrpvrid10virtual-ip 0/0]vrrpvrid10priority 0/0]vrrpvrid20virtual-ip 0/0]vrrpvrid20priorityFormatted:BulletsFormatted:BulletsandLoop0

RTB、RTCPPP协议，由于环境较为恶劣，RTA:s0:/16e1:/30loop0:/32RTB:s0:/16s1:/30loop0:/32RTC:s0:/16s1:/30loop0:/32RTD:s0:/16e1:/30loop0:/32Formatted:BulletsFormatted:Bulletsand3PAP1.7验证配置完毕后，两台设备间能通[RTA]:56databytes,pressCTRL_CtobreakReplyfrom:bytes=56Sequence=1ttl=255time=28msReplyfrom:bytes=56Sequence=2ttl=255time=28msReplyfrom:bytes=56Sequence=3ttl=255time=28msReplyfrom:bytes=56Sequence=4ttl=255time=28msReplyfrom:bytes=56Sequence=5ttl=255time=28ms---statistics--5packet(s)5packet(s)0.00%packetround-tripmin/avg/max=28/28/28Formatted:BulletsFormatted:Bulletsand[RTA]interface 0/1]ipaddress30 [RTA]interfaceLoopBack[RTA-LoopBack0]ipaddress32[RTA]interface[RTA-Serial1/0]ipaddress16 work work work ]passwordcipher123456 ]service-typeppp[RTB]interfaceSerial1/1[RTB-Serial1/1]pppauthentication-modechap[RTB-Serial1/1]pppchapuser[RTB-Serial1/1]ipaddress30[RTB]interfaceLoopBack[RTB-LoopBack0]ipaddress32[RTB]interface[RTB-Serial1/0]ipaddress16[RTB-riwork[RTB-riwork[RTB-riwork ]passwordcipher123456 ]service-typeppp[RTC]interfaceSerial1/1[RTC-Serial1/1]pppchap[RTC-Serial1/1]ipaddress30[RTC]interfaceLoopBack0[RTC-LoopBack0]ipaddress32[RTC]interface[RTC-Serial1/0]ipaddress16[RTC-Serial1/0]link-protocolfr[RTC-Serial1/0]frinterface-typedce[RTC-Serial1/0]frdlci100[RTC-riwork[RTC-riwork[RTC-riwork[RTC-rip]peer [RTD]interface 0/1]ipaddress30 [RTD]interfaceLoopBack[RTD-LoopBack0]ipaddress32[RTD]interface[RTD-Serial1/0]ipaddress16[RTD-Serial1/0]link-protocolfr[RTD-riwork[RTD-riwork[RTD-riwork[RTD-rip]peerRIP协议配置完成，查看路由表，观察每台设备是否有全网路由。然后将其改为V2版本。[RTA-rip]undo 0/1]ripversion2multicast[RTA-LoopBack0]ripversion2multicast[RTA-Serial1/0]ripversion2multicast[RTB-rip]undo[RTB-Serial1/1]ripversion2multicast[RTB-LoopBack0]ripversion2multicast[RTB-Serial1/0]ripversion2multicast[RTC-rip]undo[RTC-Serial1/1]ripversion2multicast[RTC-LoopBack0]ripversion2multicast[RTC-Serial1/0]ripversion2multicast[RTD-rip]undo 0/1]ripversion2multicast[RTD-LoopBack0]ripversion2multicast[RTD-Serial1/0]ripversion2multicast

交换机

VLAN VLAN

2121 路由器做NAT上公网。为了 路由器和INTE 4、最终全网能实现互通；并且都能 PC1:/24网关:/24PC2:/24网关:/24PC3:/24网关:/24PC4:/24网关:/24L3vlan100和vlan200L3交换机和路由器之间网段为/24网1和路由器之间网段为/24网段

2和路由器之间网段为/24网段2分配给用户IP地址为 /24网段出接口IP为:/30,网关为/30[H3C]sysnameswa[swa]vlan100[swa-vlan100]portethe [swa]vlan200[swa-vlan200]port [swa]link-aggregationgroup1mode[swa]interfaceethe [swa-e0/23]speed100[swa-e0/23]portlink-aggregationgroup1[swa-e0/23]portlink-typetrunk[swa-e0/23]porttrunkpermitvlan100200[swa]interfaceethe [swa-e0/24]speed100[swa-e0/24]portlink-aggregationgroup1[swa-e0/24]portlink-typetrunk[swa-e0/24]porttrunkpermitvlan100[swb]vlan100[swb]vlan[swb]link-aggregationgroup1mode[swb]interfaceethe [swb-e0/23]speed100[swb-e0/23]portlink-aggregationgroup1[swb-e0/23]portlink-typetrunk[swb-e0/23]porttrunkpermitvlan100200[swb]interfaceethe [swb-e0/24]speed100[swb-e0/24]portlink-aggregationgroup1[swb-e0/24]portlink-typetrunk[swb-e0/24]porttrunkpermitvlan100200[swb]interfacevlan100[swb-vlan-interface100]ipaddress[swb]interfacevlan[swb-vlan-interface200]ipaddress[swb]interfacevlan[swb-vlan-interface1]ipaddress192168.3.1[swb]routerid[swb-ospf-1]area[swb-ospf-1-area0.0.0.work[swb-ospf-1-area0.0.0.work[swb-ospf-1-area0.0.0.work[H3C]sysnameRTC[RTC]interfaceethe [RTC-e0/1]ipaddress24[RTC]interfaceethe [RTC-e0/1]ipaddress30[RTC]interfaces2/0[RTC-s2/0]ipaddress24[RTC]interfaces2/1[RTC-s2/1]ipaddress[RTC-ospf-1-area0.0.0.work[RTC-ospf-1-area0.0.0.work[RTC-ospf-1-area0.0.0.work[RTC]iproute-static0- [RTC]aclnumber[RTC-acl-adv-2000]rulepermitsourceany[RTC]interfaceethe [RTC-e0/0]natoutbound2000[RTC]firewallenable[RTC]aclnumber3000[RTC-acl-adv-3000]ruledenyipsource55destination55[RTC]interfaces2/0[RTC-s2/0]firewallpacket-filter30001路由器配置:[H3C]sysnameRTD[RTD-e0/0]ipaddress24[RTD]interfaces2/0[RTD-s2/0]ipaddress[RTD]routerid[RTD-ospf-1-area0.0.0.work