技術考核1
實驗拓撲：
實驗需求
1.按照圖示配置IP地址設備名
2.在SW1和SW2之間配置鏈路聚合增加鏈路帶寬，提高可靠性
3.PC5和PC6屬于VLAN10， PC7和PC8屬于VLAN20
4.SW1和SW2屬于二層交換機，SW3為三層交換機（VLAN100用于對接R4）,在交換機之間相連的鏈路
放行相關VLAN（不允許放行所有VLAN）
5.SW3作為DHCP服務器，配置兩個地址池，分別為192.168.1.0/24網段和192.168.2.0/24網段網關分
別為192.168.1.254和192.168.2.254，dns統一為114.114.114.114；分別排除地址段192.168.1.1-
192.168.10和192.168.2.1-192.168.2.10
6.在R4上配置靜態路由，使其有到達各個部門的路由，在R3上配置默認路由，使其全網互通
7.在R4上配置Telnet服務使兩個部門都能登錄到R4
實驗步驟
1、配置ip地址
r4：
<H3C>sys
System View: return to User View with Ctrl+Z.
[H3C]sysname r4
[r4]int g0/0
[r4-GigabitEthernet0/0]ip add 172.16.1.1 30
[r4-GigabitEthernet0/0]qu
[r4]int LoopBack 0
[r4-LoopBack0]ip add 100.1.1.1 32
[r4-LoopBack0]qusw3：
<H3C>sys
System View: return to User View with Ctrl+Z.
[H3C]sysname sw3
--創建vlan
[sw3]vlan 10
[sw3-vlan10]qu
[sw3]vlan 20
[sw3-vlan20]qu
[sw3]vlan 100
[sw3-vlan100]qu
--進入vlan 配置ip地址
[sw3]int vlan 10
[sw3-Vlan-interface10]ip add 192.168.1.254 24
[sw3-Vlan-interface10]qu
[sw3]int vlan 20
[sw3-Vlan-interface20]ip add 192.168.2.254 24
[sw3-Vlan-interface20]quit
[sw3]int vlan 100
[sw3-Vlan-interface100]ip add 172.16.1.2 30
[sw3-Vlan-interface100]quit
2.在SW1和SW2之間配置鏈路聚合增加鏈路帶寬，提高可靠性
sw1：
<H3C>sys
System View: return to User View with Ctrl+Z.
[H3C]sysname sw1
[sw1]int Bridge-Aggregation 1
[sw1-Bridge-Aggregation1]quit
[sw1]int g1/0/3
[sw1-GigabitEthernet1/0/3]port link-aggregation group 1
[sw1-GigabitEthernet1/0/3]qu
[sw1]int g1/0/4
[sw1-GigabitEthernet1/0/4]port link-aggregation group 1sw2：
<H3C>sys
System View: return to User View with Ctrl+Z.
[H3C]sysname sw2
[sw2]int Bridge-Aggregation 1
[sw2-Bridge-Aggregation1]qu
[sw2]int g1/0/3
[sw2-GigabitEthernet1/0/3]port link-aggregation group 1
[sw2-GigabitEthernet1/0/3]qu
[sw2]int g1/0/4
[sw2-GigabitEthernet1/0/4]port link-aggregation group 1
3.PC5和PC6屬于VLAN10， PC7和PC8屬于VLAN20
[sw1]vlan 10
[sw1-vlan10]port g1/0/1
[sw1-vlan10]port g1/0/2
[sw1-vlan10]qu[sw2]vlan 20
[sw2-vlan20]port g1/0/1
[sw2-vlan20]port g1/0/2
[sw2-vlan20]qu
4.SW1和SW2屬于二層交換機，SW3為三層交換機（VLAN100用于對接R4）,在交換機之間相連的鏈路 放行相關VLAN（不允許放行所有VLAN）
注釋：
1、以上我們配置完鏈路聚合，我們應該在鏈路聚合里面將鏈路改為trunk，并且放行vlan10、20
2、因為sw1的g1/0/5這個端口他是處于連接sw3的，這個端口需要配置vlan10、20通行，所有也要為trunk鏈路
3、因為sw2的g1/0/5這個端口他是處于連接sw3的，這個端口需要配置vlan10、20通行，所有也要為trunk鏈路
4、在sw3與sw1和sw2相連的接口同樣配置trunk，并允許vlan10、20通行
5、將sw3與r4相連的鏈路加入vlan100
1、將鏈路聚合配置為trunk，并放行vlan10、20
[sw1]int Bridge-Aggregation 1
[sw1-Bridge-Aggregation1]port link-type trunk
Configuring GigabitEthernet1/0/3 done.
Configuring GigabitEthernet1/0/4 done.
[sw1-Bridge-Aggregation1]port trunk permit vlan 10 20
Configuring GigabitEthernet1/0/3 done.
Configuring GigabitEthernet1/0/4 done.[sw2]int Bridge-Aggregation 1
[sw2-Bridge-Aggregation1]port link-type trunk
Configuring GigabitEthernet1/0/3 done.
Configuring GigabitEthernet1/0/4 done.
[sw2-Bridge-Aggregation1]port trunk permit vlan 10 20
Configuring GigabitEthernet1/0/3 done.
Configuring GigabitEthernet1/0/4 done.
2、配置sw1的g1/0/5為trunk鏈路，并放行vlan10 20
[sw1]int g1/0/5
[sw1-GigabitEthernet1/0/5]port link-type trunk
[sw1-GigabitEthernet1/0/5]port trunk permit vlan 10 20
[sw1-GigabitEthernet1/0/5]dis th
#
interface GigabitEthernet1/0/5port link-mode bridgeport link-type trunkport trunk permit vlan 1 10 20combo enable fiber
#
return
3、配置sw2的g1/0/5為trunk鏈路，并放行vlan10 20
[sw2]int g1/0/5
[sw2-GigabitEthernet1/0/5]port link-type trunk
[sw2-GigabitEthernet1/0/5]port trunk permit vlan 10 20
[sw2]int g1/0/5
[sw2-GigabitEthernet1/0/5]dis th
#
interface GigabitEthernet1/0/5port link-mode bridgeport link-type trunkport trunk permit vlan 1 10 20combo enable fiber
#
return
4、在sw3與sw1和sw2相連的接口同樣配置trunk，并允許vlan10、20通行
[sw3]int g1/0/1
[sw3-GigabitEthernet1/0/1]port link-type trunk
[sw3-GigabitEthernet1/0/1]port trunk permit vlan 10 20
[sw3-GigabitEthernet1/0/1]qu
[sw3]int g1/0/2
[sw3-GigabitEthernet1/0/2]port link-type trunk
[sw3-GigabitEthernet1/0/2]port trunk permit vlan 10 20
5、將sw3與r4相連的端口加入vlan100
[sw3]vlan 100
[sw3-vlan100]port g1/0/3
[sw3-vlan100]qu
5.SW3作為DHCP服務器，配置兩個地址池，分別為192.168.1.0/24網段和192.168.2.0/24網段網關分 別為192.168.1.254和192.168.2.254，dns統一為114.114.114.114；分別排除地址段192.168.1.1- 192.168.10和192.168.2.1-192.168.2.10
[sw3]dhcp enable
[sw3]dhcp server ip-pool 1
[sw3-dhcp-pool-1]network 192.168.1.0 mask 255.255.255.0
[sw3-dhcp-pool-1]gateway-list 192.168.1.254
[sw3-dhcp-pool-1]dns-list 114.114.114.114[sw3]dhcp server ip-pool 2
[sw3-dhcp-pool-2]network 192.168.2.0 mask 255.255.255.0
[sw3-dhcp-pool-2]gateway-list 192.168.2.254
[sw3-dhcp-pool-2]dns-list 114.114.114.114[sw3]dhcp server forbidden-ip 192.168.1.1 192.168.1.10
[sw3]dhcp server forbidden-ip 192.168.2.1 192.168.2.10--查看pc端自動獲取dhcp情況
[sw3]dis dhcp server ip-in-use
IP address Client identifier/ Lease expiration TypeHardware address
192.168.1.11 0030-6362-362e-3361- Aug 3 17:22:09 2025 Auto(C) 6131-2e30-3530-362d- 4745-302f-302f-31
192.168.1.12 0030-6362-362e-3365- Aug 3 17:22:12 2025 Auto(C) 3439-2e30-3630-362d- 4745-302f-302f-31
192.168.2.11 0030-6362-362e-3430- Aug 3 17:22:22 2025 Auto(C) 3530-2e30-3730-362d- 4745-302f-302f-31
192.168.2.12 0030-6362-362e-3433- Aug 3 17:22:41 2025 Auto(C) 3530-2e30-3830-362d- 4745-302f-302f-31
6.在R4上配置靜態路由，使其有到達各個部門的路由，在sw3上配置默認路由，使其全網互通
注釋
1、在r4上配置到達其他1.0和2.0網段的靜態路由，下一跳為vlan100的ip地址。
2、在sw3上配置到達r4上的默認路由
1、在r4上配置到達其他1.0和2.0網段的靜態路由，下一跳為vlan100的ip地址。
[r4]ip route-static 192.168.1.0 24 172.16.1.2 --配置到達1.0網段路由
[r4]ip route-static 192.168.2.0 24 172.16.1.2 --配置到達2.0網段路由
--查看
[r4]dis th
#sysname r4
#system-working-mode standardxbar load-singlepassword-recovery enablelpu-type f-series
#scheduler logfile size 16
#ip route-static 192.168.1.0 24 172.16.1.2ip route-static 192.168.2.0 24 172.16.1.2
#domain default enable system
#
return
測試一下sw3能否 ping通pc端，結果如下：可以
[sw3]ping 192.168.1.11
Ping 192.168.1.11 (192.168.1.11): 56 data bytes, press CTRL_C to break
56 bytes from 192.168.1.11: icmp_seq=0 ttl=255 time=1.425 ms
56 bytes from 192.168.1.11: icmp_seq=1 ttl=255 time=1.216 ms
56 bytes from 192.168.1.11: icmp_seq=2 ttl=255 time=1.377 ms
56 bytes from 192.168.1.11: icmp_seq=3 ttl=255 time=1.233 ms
56 bytes from 192.168.1.11: icmp_seq=4 ttl=255 time=1.106 ms--- Ping statistics for 192.168.1.11 ---[sw3]ping 192.168.1.12
Ping 192.168.1.12 (192.168.1.12): 56 data bytes, press CTRL_C to break
56 bytes from 192.168.1.12: icmp_seq=0 ttl=255 time=1.610 ms
56 bytes from 192.168.1.12: icmp_seq=1 ttl=255 time=1.192 ms
56 bytes from 192.168.1.12: icmp_seq=2 ttl=255 time=1.283 ms
56 bytes from 192.168.1.12: icmp_seq=3 ttl=255 time=1.224 ms
56 bytes from 192.168.1.12: icmp_seq=4 ttl=255 time=1.028 ms--- Ping statistics for 192.168.1.12 ---[sw3]ping 192.168.2.11
Ping 192.168.2.11 (192.168.2.11): 56 data bytes, press CTRL_C to break
56 bytes from 192.168.2.11: icmp_seq=0 ttl=255 time=2.065 ms
56 bytes from 192.168.2.11: icmp_seq=1 ttl=255 time=1.241 ms
56 bytes from 192.168.2.11: icmp_seq=2 ttl=255 time=1.229 ms
56 bytes from 192.168.2.11: icmp_seq=3 ttl=255 time=1.113 ms
56 bytes from 192.168.2.11: icmp_seq=4 ttl=255 time=1.152 ms--- Ping statistics for 192.168.2.11 ---[sw3]ping 192.168.2.12
Ping 192.168.2.12 (192.168.2.12): 56 data bytes, press CTRL_C to break
56 bytes from 192.168.2.12: icmp_seq=0 ttl=255 time=1.283 ms
56 bytes from 192.168.2.12: icmp_seq=1 ttl=255 time=1.217 ms
56 bytes from 192.168.2.12: icmp_seq=2 ttl=255 time=1.212 ms
56 bytes from 192.168.2.12: icmp_seq=3 ttl=255 time=1.252 ms
56 bytes from 192.168.2.12: icmp_seq=4 ttl=255 time=1.282 ms--- Ping statistics for 192.168.2.12 ---
2、在sw3上配置到達r4上的默認路由
[sw3]ip route-static 0.0.0.0 0 172.16.1.1--測試
[sw3]ping 172.16.1.1
Ping 172.16.1.1 (172.16.1.1): 56 data bytes, press CTRL_C to break
56 bytes from 172.16.1.1: icmp_seq=0 ttl=255 time=0.769 ms
56 bytes from 172.16.1.1: icmp_seq=1 ttl=255 time=0.670 ms
56 bytes from 172.16.1.1: icmp_seq=2 ttl=255 time=0.635 ms
56 bytes from 172.16.1.1: icmp_seq=3 ttl=255 time=0.754 ms
56 bytes from 172.16.1.1: icmp_seq=4 ttl=255 time=0.671 ms--- Ping statistics for 172.16.1.1 ---
-------能夠ping通，全網互通成功
7.在R4上配置Telnet服務使兩個部門都能登錄到R4
[r4]telnet server enable
[r4]local-user lcy class manage
New local user added.
[r4-luser-manage-lcy]password simple admin@12345
[r4-luser-manage-lcy]service-type telnet
[r4-luser-manage-lcy]authorization-attribute user-role level-15
[r4]user-interface vty 0 4
[r4-line-vty0-4]authentication-mode scheme
[r4-line-vty0-4]user-role level-15
[r4-line-vty0-4]qu
測試：
pc5連接telnet
<H3C>telnet 172.16.1.1
Trying 172.16.1.1 ...
Press CTRL+K to abort
Connected to 172.16.1.1 ...******************************************************************************
* Copyright (c) 2004-2021 New H3C Technologies Co., Ltd. All rights reserved.*
* Without the owner's prior written consent, *
* no decompiling or reverse-engineering shall be allowed. *
******************************************************************************Login: lcy
Password:
<r4>
pc6連接telnet
<H3C>telnet 172.16.1.1
Trying 172.16.1.1 ...
Press CTRL+K to abort
Connected to 172.16.1.1 ...******************************************************************************
* Copyright (c) 2004-2021 New H3C Technologies Co., Ltd. All rights reserved.*
* Without the owner's prior written consent, *
* no decompiling or reverse-engineering shall be allowed. *
******************************************************************************Login: lcy
Password:
<r4>
pc7連接telnet
<H3C>telnet 172.16.1.1
Trying 172.16.1.1 ...
Press CTRL+K to abort
Connected to 172.16.1.1 ...******************************************************************************
* Copyright (c) 2004-2021 New H3C Technologies Co., Ltd. All rights reserved.*
* Without the owner's prior written consent, *
* no decompiling or reverse-engineering shall be allowed. *
******************************************************************************Login: lcy
Password:
<r4>
pc8連接telnet
<H3C>telnet 172.16.1.1
Trying 172.16.1.1 ...
Press CTRL+K to abort
Connected to 172.16.1.1 ...******************************************************************************
* Copyright (c) 2004-2021 New H3C Technologies Co., Ltd. All rights reserved.*
* Without the owner's prior written consent, *
* no decompiling or reverse-engineering shall be allowed. *
******************************************************************************Login: lcy
Password:
<r4>
-組件)
