新华三杯2022全国赛解题过程
转载自:新华三杯2022全国赛解题过程
2022年新华三杯解题
图片
1.根据题目要求配置IP地址,修改设备名
2.L2W的vlan10绑定端口G1/0/1,vlan20绑定端口G1/0/1
3.交换机相连接口只放行vlan10 20，其余均不放行。
4.交换机与pc相连链路配置access模式。
5.Ce1 ce2 L2w之间配置stp，ce1 为vlan10的主根，ce2为vlan20的主根，域名为H3C
并在合适端口配置根保护，边缘端口，bpdu保护
6.CE1为vlan10主，CE2为vlan20。主Vrrp主根优先级为150，备用优先级为110，配置上行链路监视，当端口故障降低优先级50
7.Ce1 ce2 与pe1连接的端口使用三层连接，
8.Pe1 pe2 pe3配置ospf 进程号1 lo0 地址为router-id 区域0，发布网段要求精确匹配
9.Ce1 ce2 配置ospf 进程号1 router-id为lo 0 地址 区域0 不允许协议报文发布到业务网段
10.Pe1 pe2 pe3 之间配置bgp 100，通过lo 0 建立ibgp， ce3 ce4配置bgp为300 通过直连端口建立ebgp
11.Ce5与pe2之间配置静态路由， pe3 与防火墙之间配置静态路由，internet与防火墙之间配置静态路由，防火墙配置区域 pe3为信任区域， internet为非信任区域
12.在防火墙配置nat，使server1可以访问internet
13.Pe1 pe2 pe3 配置mpls mpls-id为lo 0
14.Pc1 pc2 为server1 vpn1 ，pc3 server2 为vpn2
- Ce1 ce2配置ipv6地址，配置ospfv3建立邻居，router-id是环回口地址
最近太忙了，这个实验是我的朋友（睡个好觉）配置出来的，我把配置文件放在文章结尾，需要朋友可以下载！
图片
L2W：
sysname L2W
vlan 10
vlan 20
stp region-configuration
region-name H3C
instance 1 vlan 10
instance 2 vlan 20
active region-configuration
stp bpdu-protection
stp global enable
interface NULL0
interface GigabitEthernet1/0/1
port link-mode bridge
port access vlan 10
combo enable fiber
stp edged-port
interface GigabitEthernet1/0/5
port link-mode bridge
port access vlan 20
combo enable fiber
stp edged-port
interface GigabitEthernet1/0/23
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 10 20
combo enable fiber
stp root-protection
interface GigabitEthernet1/0/24
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 10 20
combo enable fiber
CE1：
sysname CE1
track 1 interface GigabitEthernet1/0/1
ospf 1 router-id 9.9.9.101
silent-interface Vlan-interface10
silent-interface Vlan-interface20
area 0.0.0.0
network 10.0.0.0 0.0.0.3
network 172.0.10.0 0.0.0.255
network 172.0.20.0 0.0.0.255
ospfv3 1
router-id 9.9.9.101
area 0.0.0.0
lldp global enable
system-working-mode standard
xbar load-single
password-recovery enable
lpu-type f-series
vlan 1
vlan 10
vlan 20
stp region-configuration
region-name H3C
instance 1 vlan 10
instance 2 vlan 20
active region-configuration
stp instance 1 root primary
stp instance 2 root secondary
stp global enable
interface NULL0
interface LoopBack0
ip address 9.9.9.101 255.255.255.255
interface Vlan-interface10
ip address 172.0.10.252 255.255.255.0
vrrp vrid 10 virtual-ip 172.0.10.254
vrrp vrid 10 priority 150
vrrp vrid 10 track 1 priority reduced 50
interface Vlan-interface20
ip address 172.0.20.252 255.255.255.0
vrrp vrid 20 virtual-ip 172.0.20.254
vrrp vrid 20 priority 110
CE2：
sysname CE2
irf mac-address persistent timer
irf auto-update enable
undo irf link-delay
irf member 1 priority 1
track 1 interface GigabitEthernet1/0/1
ospf 1 router-id 9.9.9.102
silent-interface Vlan-interface10
silent-interface Vlan-interface20
area 0.0.0.0
network 10.0.0.4 0.0.0.3
network 172.0.10.0 0.0.0.255
network 172.0.20.0 0.0.0.255
ospfv3 1
router-id 9.9.9.102
area 0.0.0.0
area 0.0.0.9
lldp global enable
system-working-mode standard
xbar load-single
password-recovery enable
lpu-type f-series
vlan 1
vlan 10
vlan 20
stp region-configuration
region-name H3C
instance 1 vlan 10
instance 2 vlan 20
active region-configuration
stp instance 1 root secondary
stp instance 2 root primary
stp global enable
interface NULL0
interface LoopBack0
ip address 9.9.9.102 255.255.255.255
interface Vlan-interface10
ip address 172.0.10.253 255.255.255.0
vrrp vrid 10 virtual-ip 172.0.10.254
vrrp vrid 10 priority 110
interface Vlan-interface20
ip address 172.0.20.253 255.255.255.0
vrrp vrid 20 virtual-ip 172.0.20.254
vrrp vrid 20 priority 150
vrrp vrid 20 track 1 priority reduced 50
interface FortyGigE1/0/53
port link-mode bridge
interface FortyGigE1/0/54
port link-mode bridge
interface GigabitEthernet1/0/1
port link-mode route
combo enable fiber
ip address 10.0.0.6 255.255.255.252
interface GigabitEthernet1/0/6
port link-mode route
combo enable fiber
ospfv3 1 area 0.0.0.0
ipv6 address 2000::2/64
interface GigabitEthernet1/0/2
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 10 20
combo enable fiber
interface GigabitEthernet1/0/3
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 10 20
combo enable fiber
PE2：
sysname PE2
ip vpn-instance VPN2
route-distinguisher 2:2
vpn-target 2:2 import-extcommunity
vpn-target 2:2 export-extcommunity
ospf 1 router-id 9.9.9.2
area 0.0.0.0
network 9.9.9.2 0.0.0.0
network 100.0.0.0 0.0.0.3
network 100.0.0.4 0.0.0.3
mpls lsr-id 9.9.9.2
system-working-mode standard
xbar load-single
password-recovery enable
lpu-type f-series
vlan 1
mpls ldp
interface LoopBack0
ip address 9.9.9.2 255.255.255.255
interface GigabitEthernet0/0
port link-mode route
combo enable copper
ip address 100.0.0.2 255.255.255.252
mpls enable
mpls ldp enable
interface GigabitEthernet0/1
port link-mode route
combo enable copper
ip address 100.0.0.5 255.255.255.252
mpls enable
mpls ldp enable
interface GigabitEthernet0/2
port link-mode route
combo enable copper
ip binding vpn-instance VPN2
ip address 10.0.0.9 255.255.255.252
bgp 100
router-id 9.9.9.2
peer 9.9.9.1 as-number 100
peer 9.9.9.1 connect-interface LoopBack0
peer 9.9.9.3 as-number 100
peer 9.9.9.3 connect-interface LoopBack0
address-family vpnv4
peer 9.9.9.1 enable
peer 9.9.9.3 enable
ip vpn-instance VPN2
address-family ipv4 unicast
import-route static
scheduler logfile size 16
line class aux
user-role network-operator
line class console
user-role network-admin
line class tty
user-role network-operator
line class vty
user-role network-operator
line aux 0
user-role network-operator
line con 0
user-role network-admin
line vty 0 63
user-role network-operator
ip route-static vpn-instance VPN2 192.0.10.0 24 10.0.0.10
PE3：
sysname H3C
ip vpn-instance VPN1
route-distinguisher 1:1
vpn-target 1:1 import-extcommunity
vpn-target 1:1 export-extcommunity
ip vpn-instance VPN2
route-distinguisher 2:2
vpn-target 2:2 import-extcommunity
vpn-target 2:2 export-extcommunity
ospf 1 router-id 9.9.9.3
area 0.0.0.0
network 9.9.9.3 0.0.0.0
network 100.0.0.4 0.0.0.3
mpls lsr-id 9.9.9.3
sysid PE3
system-working-mode standard
xbar load-single
password-recovery enable
lpu-type f-series
vlan 1
mpls ldp
interface Serial1/0
interface Serial2/0
interface Serial3/0
interface Serial4/0
interface NULL0
interface LoopBack0
ip address 9.9.9.3 255.255.255.255
interface GigabitEthernet0/0
port link-mode route
combo enable copper
ip address 100.0.0.6 255.255.255.252
mpls enable
mpls ldp enable
interface GigabitEthernet0/1
port link-mode route
combo enable copper
ip binding vpn-instance VPN1
ip address 10.0.0.13 255.255.255.252
interface GigabitEthernet0/2
port link-mode route
combo enable copper
ip binding vpn-instance VPN2
ip address 10.0.0.17 255.255.255.252
interface GigabitEthernet5/0
port link-mode route
combo enable copper
interface GigabitEthernet5/1
port link-mode route
combo enable copper
interface GigabitEthernet6/0
port link-mode route
combo enable copper
interface GigabitEthernet6/1
port link-mode route
combo enable copper
bgp 100
router-id 9.9.9.3
peer 9.9.9.1 as-number 100
peer 9.9.9.1 connect-interface LoopBack0
peer 9.9.9.2 as-number 100
peer 9.9.9.2 connect-interface LoopBack0
address-family vpnv4
peer 9.9.9.1 enable
peer 9.9.9.2 enable
ip vpn-instance VPN1
peer 10.0.0.14 as-number 300
address-family ipv4 unicast
peer 10.0.0.14 enable
ip vpn-instance VPN2
peer 10.0.0.18 as-number 300
address-family ipv4 unicast
peer 10.0.0.18 enable
CE3：
sysname CE3
irf mac-address persistent timer
irf auto-update enable
undo irf link-delay
irf member 1 priority 1
lldp global enable
system-working-mode standard
xbar load-single
password-recovery enable
lpu-type f-series
vlan 1
stp global enable
interface NULL0
interface LoopBack0
ip address 9.9.9.103 255.255.255.255
interface FortyGigE1/0/53
port link-mode bridge
interface FortyGigE1/0/54
port link-mode bridge
interface GigabitEthernet1/0/1
port link-mode route
combo enable fiber
ip address 10.0.0.14 255.255.255.252
interface GigabitEthernet1/0/2
port link-mode route
combo enable fiber
ip address 172.0.0.254 255.255.255.0
bgp 300
router-id 9.9.9.103
peer 10.0.0.13 as-number 100
address-family ipv4 unicast
network 172.0.0.0 255.255.255.0
peer 10.0.0.13 enable
CE4：
sysname CE4
irf mac-address persistent timer
irf auto-update enable
undo irf link-delay
irf member 1 priority 1
lldp global enable
system-working-mode standard
xbar load-single
password-recovery enable
lpu-type f-series
vlan 1
stp global enable
interface NULL0
interface LoopBack0
ip address 9.9.9.104 255.255.255.255
interface FortyGigE1/0/53
port link-mode bridge
interface FortyGigE1/0/54
port link-mode bridge
interface GigabitEthernet1/0/1
port link-mode route
combo enable fiber
ip address 10.0.0.18 255.255.255.252
interface GigabitEthernet1/0/2
port link-mode route
combo enable fiber
ip address 192.0.0.254 255.255.255.0
bgp 300
router-id 9.9.9.104
peer 10.0.0.17 as-number 100
address-family ipv4 unicast
network 192.0.0.0 255.255.255.0
peer 10.0.0.17 enable
CE5：
sysname CE5
system-working-mode standard
xbar load-single
password-recovery enable
lpu-type f-series
vlan 1
interface LoopBack0
ip address 9.9.9.105 255.255.255.255
interface GigabitEthernet0/0
port link-mode route
combo enable copper
ip address 10.0.0.10 255.255.255.252
interface GigabitEthernet0/1
port link-mode route
combo enable copper
ip address 192.0.10.254 255.255.255.0
ip route-static 0.0.0.0 0 10.0.0.9
配置就完成了。给大家看看新华三奖
图片
拓扑下载：
链接：https://pan.baidu.com/s/1nkrDlh5cxyUj1AvO5ZAd_Q?pwd=zeng
提取码：zeng
--来自百度网盘超级会员V1的分享
Comments NOTHING