實驗要求和實驗成果如圖所示。

LSW2不需要其他配置，其下就一臺設(shè)備，不需要區(qū)分。

LSW3配置如下：

<Huawei>sy?? ?
Enter system view, return user view with Ctrl+Z.
[Huawei]un in en?? ??? ?//關(guān)閉系統(tǒng)提示信息
Info: Information center is disabled.
[Huawei]vlan 20?? ??? ?//創(chuàng)建vlan20
[Huawei-vlan20]q
[Huawei]int e0/0/2
[Huawei-Ethernet0/0/2]port link-type access ?? ?
[Huawei-Ethernet0/0/2]q
[Huawei]vlan 30?? ??? ?//創(chuàng)建vlan30
[Huawei-vlan30]q
[Huawei]int e0/0/2?? ?
[Huawei-Ethernet0/0/2]port default vlan 20 ?? ?//將vlan 20劃分進2號端口
[Huawei-Ethernet0/0/2]int e0/0/3
[Huawei-Ethernet0/0/3]port link-type access?
[Huawei-Ethernet0/0/3]port default vlan 20
[Huawei-Ethernet0/0/3]port default vlan 30
[Huawei-Ethernet0/0/3]dis this ?? ??? ?//展示當前配置了什么
#?? ??? ?
interface Ethernet0/0/3
?port link-type access
?port default vlan 30
#
return
[Huawei-Ethernet0/0/3]q
[Huawei]int e0/0/1
[Huawei-Ethernet0/0/1]port link-type trunk ?? ?//配置trunk模式
[Huawei-Ethernet0/0/1]port trunk allow-pass vlan all

LSW1配置如下：

<Huawei>sy
Enter system view, return user view with Ctrl+Z.
[Huawei]un in en
Info: Information center is disabled.
[Huawei]vlan batch 10 20 30 40 ? ??? ?//批量創(chuàng)建 vlan
/*10 20 30 為pc1-3 vlan40為服務(wù)器*/
Info: This operation may take a few seconds. Please wait for a moment...done.
[Huawei]int vlan 10
[Huawei-Vlanif10]ip add 192.168.10.254 24?? ?//充當網(wǎng)關(guān)
[Huawei-Vlanif10]int vlan 20
[Huawei-Vlanif20]ip add 192.168.20.254 24
[Huawei-Vlanif20]int vlan 30
[Huawei-Vlanif30]ip add 192.168.30.254 24
[Huawei-Vlanif30]int vlan 40
[Huawei-Vlanif40]ip add 172.16.100.254 24
[Huawei-Vlanif40]q
[Huawei]int g0/0/1
[Huawei-GigabitEthernet0/0/1]port link-type access?
[Huawei-GigabitEthernet0/0/1]port default vlan 40
[Huawei-GigabitEthernet0/0/1]int g0/0/2?? ?
[Huawei-GigabitEthernet0/0/2]port link-type access?
[Huawei-GigabitEthernet0/0/2]port default vlan 10
[Huawei-GigabitEthernet0/0/2]int g0/0/3
[Huawei-GigabitEthernet0/0/3]port link-type trunk ?? ?
[Huawei-GigabitEthernet0/0/3]port trunk allow-pass vlan all
[Huawei-GigabitEthernet0/0/3]q
[Huawei]dhcp enable?
Info: The operation may take a few seconds. Please wait for a moment.done.
[Huawei]int g0/0/2
[Huawei-GigabitEthernet0/0/2]int vlan 10?? ?//為01端口配置dhcp服務(wù)器地址
[Huawei-Vlanif10]dhcp select interface ?? ?
[Huawei-Vlanif10]dhcp server dns-list 172.16.100.1?
[Huawei-Vlanif10]dis this?
#
interface Vlanif10
?ip address 192.168.10.254 255.255.255.0
?dhcp select interface
?dhcp server dns-list 172.16.100.1
#
return
[Huawei-Vlanif10]int vlan 20
[Huawei-Vlanif20] dhcp select interface?? ??? ?
[Huawei-Vlanif20] dhcp server dns-list 172.16.100.1
[Huawei-Vlanif20]int vlan 30
[Huawei-Vlanif30] dhcp select interface
[Huawei-Vlanif30] dhcp server dns-list 172.16.100.1
[Huawei-Vlanif30]q

[Huawei]dis ip int brief?

[Huawei]vlan 100?? ??? ?//創(chuàng)建vlan100與路由器連接
[Huawei-vlan100]q
[Huawei]int g0/0/4
[Huawei-GigabitEthernet0/0/4]port link-type access?
[Huawei-GigabitEthernet0/0/4]port default vlan 100?? ?
[Huawei-GigabitEthernet0/0/4]q
[Huawei]int vlan 100
[Huawei-Vlanif100]ip add 10.10.10.2 24
[Huawei-Vlanif100]q
[Huawei]ping 10.10.10.1
? PING 10.10.10.1: 56 ?data bytes, press CTRL_C to break
? ? Reply from 10.10.10.1: bytes=56 Sequence=1 ttl=255 time=70 ms
? ? Reply from 10.10.10.1: bytes=56 Sequence=2 ttl=255 time=50 ms
? ? Reply from 10.10.10.1: bytes=56 Sequence=3 ttl=255 time=20 ms
? ? Reply from 10.10.10.1: bytes=56 Sequence=4 ttl=255 time=10 ms
? ? Reply from 10.10.10.1: bytes=56 Sequence=5 ttl=255 time=50 ms

? --- 10.10.10.1 ping statistics ---
? ? 5 packet(s) transmitted
? ? 5 packet(s) received
? ? 0.00% packet loss
? ? round-trip min/avg/max = 10/40/70 ms
[Huawei]ip route-static 0.0.0.0 0.0.0.0 10.10.10.1?? ??? ?//告訴交換機出去的數(shù)據(jù)的下一跳

AR1的配置如下：

<Huawei>sy
Enter system view, return user view with Ctrl+Z.
[Huawei]un in en
Info: Information center is disabled.
[Huawei]int g0/0/0
[Huawei-GigabitEthernet0/0/0]ip add 10.10.10.1 24
[Huawei-GigabitEthernet0/0/0]q
[Huawei]int g0/0/1
[Huawei-GigabitEthernet0/0/1]ip add 64.1.1.1 24
[Huawei-GigabitEthernet0/0/1]q
[Huawei]ip route-static 0.0.0.0 0.0.0.0 64.1.1.10?? ?//配置靜態(tài)路由告訴設(shè)備出去的下一跳
[Huawei]ip route-static 192.168.0.0 255.255.0.0 10.10.10.2?? ?//告訴設(shè)備進來的下一跳
[Huawei]ip route-static 172.16.100.0 255.255.0.0 10.10.10.2?? ?//同上
Info: The destination address and mask of the configured static route mismatched
, and the static route 172.16.0.0/16 was generated.
[Huawei]acl 2000?? ?//配置輸入輸出規(guī)則 名稱?? ?
[Huawei-acl-basic-2000]rule permit ?source 192.168.0.0 0.0.255.255
[Huawei-acl-basic-2000]q
[Huawei]nat address-group 1 64.1.1.5 64.1.1.5?? ?//nat地址組名稱為1
[Huawei]int g0/0/1?? ?
[Huawei-GigabitEthernet0/0/1]nat outbound 2000 address-group 1?? ?//將規(guī)則作用于2000出去的數(shù)據(jù)使用地址組里的IP
[Huawei-GigabitEthernet0/0/1]q
[Huawei]acl 2001
[Huawei-acl-basic-2001]rule deny source 192.168.10.0 0.0.0.255
[Huawei-acl-basic-2001]rule permit source any
[Huawei-acl-basic-2001]int g0/0/0
[Huawei-GigabitEthernet0/0/0]traffic-filter inbound acl 2001?? ?//將2001作用于內(nèi)部所有數(shù)據(jù)
[Huawei-GigabitEthernet0/0/0]q
[Huawei]int g0/0/1
[Huawei-GigabitEthernet0/0/1]nat server global 64.1.1.3 ?inside 172.16.100.1?? ?將內(nèi)部IP轉(zhuǎn)換為外部IP

其余設(shè)備為基礎(chǔ)配置，只需要看圖配置就可以完成本次實驗。