0
0

华为ensp模拟校园网/企业网实例（附完整设备配置命令和ensp项目）

文章简介：本文用华为ensp对企业网络进行了规划和模拟，也同样适用于校园、医院等场景，文章附完整设备配置命令。附件为ensp项目，如有需要可下载后联系作者，提供售后服务，可以根据定制化需求做修改。ensp项目下载地址：

华为ensp模拟企业网络规划与设计.zip_基于ensp的校园网网络拓扑结构-网络基础文档类资源-CSDN下载

作者简介：网络工程师，希望能认识更多的小伙伴一起交流，可私信或QQ号：1686231613

一、摘要

  1.   本文用到的技术：VLAN,各终端地址使用静态地址分配；核心设备之间使用链路聚合，MSTP,VRRP协议提高办公效率；网络设备之间使用 运行OSPF协议；防火墙使用NAT技术，保证信息安全；搭建无线网络保证无线网络全公司覆盖，提高办公效率。

二、网络拓扑图

三、IP地址及VLAN规划

VLAN编号

网络地址

子网掩码

区域

VLAN10

192.168.10.5

255.255.255.0

市场部

VLAN20

192.168.20.5

255.255.255.0

财务部

VLAN30

192.168.30.5

255.255.255.0

行政部

VLAN40

192.168.40.5

255.255.255.0

研发部

VLAN50

192.168.50.10

255.255.255.0

食堂

VLAN90

192.168.90.5

255.255.255.0

人事部

VLAN100

192.168.100.5

255.255.255.0

测试部

四、设备选型

1.核心层交换机

参数项

华为S9306

产品类型

路由交换机

POE交换机

应用层级

三层

背板带宽

6Tbps

包转发率

1152Mpps

端口结构

模块化

电源功率

1600W

2.汇聚层交换机

参数项

华为S5720-36C-EI-28S-AC

产品类型

千兆以太网交换机

应用层级

三层

背板带宽

598Gbps/5.98Tbps

包转发率

222Mpps

端口结构

非模块化

传输速率

10/100/1000

电源功率

47.9W

3.接入层交换机

参数项

华为S5720-52p-SI-AC

产品类型

千兆以太网交换机

应用层级

三层

包转发率

96Mpps

端口结构

非模块化

端口数量

52

背板带宽

336Gdps/3.024Tdps

传输速率（Mbps）

10/100/1000

五、综合布线

六、设备完整配置命令

  1. 核心交换机：
  2. #
  3. sysname Huawei
  4. #
  5. vlan batch 10 20 30 40 50 60 70 80 90 100
  6. #
  7. stp instance 0 priority 0
  8. stp instance 1 priority 0
  9. stp instance 2 priority 0
  10. stp instance 3 priority 4096
  11. stp instance 4 priority 4096
  12. stp instance 5 priority 4096
  13. stp instance 8 priority 4096
  14. #
  15. cluster enable
  16. ntdp enable
  17. ndp enable
  18. #
  19. undo nap slave enable
  20. #
  21. drop illegal-mac alarm
  22. #
  23. diffserv domain default
  24. #
  25. stp region-configuration
  26.  region-name qian
  27.  instance 1 vlan 10
  28.  instance 2 vlan 20
  29.  instance 3 vlan 30
  30.  instance 4 vlan 40
  31.  instance 5 vlan 50
  32.  instance 8 vlan 80
  33.  active region-configuration
  34. #
  35. drop-profile default
  36. #
  37. aaa
  38.  authentication-scheme default
  39.  authorization-scheme default
  40.  accounting-scheme default
  41.  domain default
  42.  domain default_admin
  43.  local-user qian password simple qian123
  44.  local-user qian privilege level 3
  45.  local-user qian service-type telnet
  46.  local-user admin password simple admin
  47.  local-user admin service-type http
  48. #
  49. interface Vlanif1
  50. #
  51. interface Vlanif10
  52.  ip address 192.168.10.2 255.255.255.0
  53.  vrrp vrid 1 virtual-ip 192.168.10.1
  54.  vrrp vrid 1 priority 120
  55. #
  56. interface Vlanif20
  57.  ip address 192.168.20.2 255.255.255.0
  58.  vrrp vrid 2 virtual-ip 192.168.20.1
  59.  vrrp vrid 2 priority 120
  60. #
  61. interface Vlanif30
  62.  ip address 192.168.30.2 255.255.255.0
  63.  vrrp vrid 3 virtual-ip 192.168.30.1
  64. #
  65. interface Vlanif40
  66.  ip address 192.168.40.2 255.255.255.0
  67.  vrrp vrid 4 virtual-ip 192.168.40.1
  68. #
  69. interface Vlanif50
  70.  ip address 192.168.50.2 255.255.255.0
  71.  vrrp vrid 5 virtual-ip 192.168.50.1
  72. #
  73. interface Vlanif70
  74.  ip address 192.168.70.1 255.255.255.0
  75. #
  76. interface Vlanif80
  77.  ip address 192.168.80.2 255.255.255.0
  78.  vrrp vrid 8 virtual-ip 192.168.80.1
  79. #
  80. interface Vlanif90
  81.  ip address 192.168.90.2 255.255.255.0
  82.  vrrp vrid 9 virtual-ip 192.168.90.1
  83.  vrrp vrid 9 priority 120
  84. #
  85. interface Vlanif100
  86.  ip address 192.168.100.2 255.255.255.0
  87.  vrrp vrid 10 virtual-ip 192.168.100.1
  88. #
  89. interface MEth0/0/1
  90. #
  91. interface Eth-Trunk1
  92.  port link-type trunk
  93.  port trunk allow-pass vlan 2 to 4094
  94.  mode lacp-static
  95. #
  96. interface GigabitEthernet0/0/1
  97.  eth-trunk 1
  98. #
  99. interface GigabitEthernet0/0/2
  100.  eth-trunk 1
  101. #
  102. interface GigabitEthernet0/0/3
  103.  port link-type trunk
  104.  port trunk allow-pass vlan 2 to 4094
  105. #
  106. interface GigabitEthernet0/0/4
  107.  port link-type trunk
  108.  port trunk allow-pass vlan 2 to 4094
  109. #
  110. interface GigabitEthernet0/0/5
  111.  port link-type trunk
  112.  port trunk allow-pass vlan 2 to 4094
  113. #
  114. interface GigabitEthernet0/0/6
  115.  port link-type trunk
  116.  port trunk allow-pass vlan 2 to 4094
  117. #
  118. interface GigabitEthernet0/0/7
  119.  port link-type access
  120.  port default vlan 70
  121. #
  122. interface GigabitEthernet0/0/8
  123.  port link-type trunk
  124.  port trunk allow-pass vlan 2 to 4094
  125. #
  126. interface GigabitEthernet0/0/9
  127. #
  128. interface GigabitEthernet0/0/10
  129. #
  130. interface GigabitEthernet0/0/11
  131. #
  132. interface GigabitEthernet0/0/12
  133. #
  134. interface GigabitEthernet0/0/13
  135. #
  136. interface GigabitEthernet0/0/14
  137. #
  138. interface GigabitEthernet0/0/15
  139. #
  140. interface GigabitEthernet0/0/16
  141. #
  142. interface GigabitEthernet0/0/17
  143. #
  144. interface GigabitEthernet0/0/18
  145. #
  146. interface GigabitEthernet0/0/19
  147. #
  148. interface GigabitEthernet0/0/20
  149.  port link-type trunk
  150.  port trunk allow-pass vlan 2 to 4094
  151. #
  152. interface GigabitEthernet0/0/21
  153. #
  154. interface GigabitEthernet0/0/22
  155. #
  156. interface GigabitEthernet0/0/23
  157. #
  158. interface GigabitEthernet0/0/24
  159. #
  160. interface NULL0
  161. #
  162. ospf 1
  163.  import-route direct
  164.  area 0.0.0.0
  165.   network 192.168.70.0 0.0.0.255
  166.   network 192.168.80.0 0.0.0.255
  167. #
  168. user-interface con 0
  169. user-interface vty 0 4
  170.  authentication-mode aaa
  171. #
  172. port-group qian
  173.  group-member GigabitEthernet0/0/3
  174.  group-member GigabitEthernet0/0/4
  175.  group-member GigabitEthernet0/0/5
  176.  group-member GigabitEthernet0/0/6
  177. #
  178. return
  180. 汇聚层交换机：
  181. #
  182. sysname Huawei
  183. #
  184. vlan batch 10 20 30 90 150 200
  185. #
  186. cluster enable
  187. ntdp enable
  188. ndp enable
  189. #
  190. drop illegal-mac alarm
  191. #
  192. diffserv domain default
  193. #
  194. stp region-configuration
  195.  region-name qian
  196.  instance 1 vlan 10
  197.  instance 2 vlan 20
  198.  instance 3 vlan 30
  199.  instance 4 vlan 40
  200.  instance 5 vlan 50
  201.  instance 8 vlan 80
  202.  active region-configuration
  203. #
  204. drop-profile default
  205. #
  206. aaa
  207.  authentication-scheme default
  208.  authorization-scheme default
  209.  accounting-scheme default
  210.  domain default
  211.  domain default_admin
  212.  local-user admin password simple admin
  213.  local-user admin service-type http
  214. #
  215. interface Vlanif1
  216. #
  217. interface MEth0/0/1
  218. #
  219. interface Ethernet0/0/1
  220.  port link-type trunk
  221.  port trunk allow-pass vlan 2 to 4094
  222. #
  223. interface Ethernet0/0/2
  224.  port link-type trunk
  225.  port trunk allow-pass vlan 2 to 4094
  226. #
  227. interface Ethernet0/0/3
  228.  port link-type trunk
  229.  port trunk allow-pass vlan 2 to 4094
  230. #
  231. interface Ethernet0/0/4
  232.  port link-type trunk
  233.  port trunk allow-pass vlan 2 to 4094
  234. #
  235. interface Ethernet0/0/5
  236.  port link-type trunk
  237.  port trunk allow-pass vlan 2 to 4094
  238. #
  239. interface Ethernet0/0/6
  240. #
  241. interface Ethernet0/0/7
  242. #
  243. interface Ethernet0/0/8
  244. #
  245. interface Ethernet0/0/9
  246. #
  247. interface Ethernet0/0/10
  248. #
  249. interface Ethernet0/0/11
  250. #
  251. interface Ethernet0/0/12
  252. #
  253. interface Ethernet0/0/13
  254. #
  255. interface Ethernet0/0/14
  256. #
  257. interface Ethernet0/0/15
  258. #
  259. interface Ethernet0/0/16
  260. #
  261. interface Ethernet0/0/17
  262. #
  263. interface Ethernet0/0/18
  264. #
  265. interface Ethernet0/0/19
  266. #
  267. interface Ethernet0/0/20
  268. #
  269. interface Ethernet0/0/21
  270. #
  271. interface Ethernet0/0/22
  272. #
  273. interface GigabitEthernet0/0/1
  274. #
  275. interface GigabitEthernet0/0/2
  276. #
  277. interface NULL0
  278. #
  279. user-interface con 0
  280. user-interface vty 0 4
  281. #
  282. port-group qian
  283.  group-member Ethernet0/0/1
  284.  group-member Ethernet0/0/2
  285.  group-member Ethernet0/0/3
  286.  group-member Ethernet0/0/4
  287.  group-member Ethernet0/0/5
  288. #
  289. return
  291. 接入层交换机：
  292. #
  293. sysname Huawei
  294. #
  295. vlan batch 10
  296. #
  297. cluster enable
  298. ntdp enable
  299. ndp enable
  300. #
  301. drop illegal-mac alarm
  302. #
  303. diffserv domain default
  304. #
  305. drop-profile default
  306. #
  307. aaa
  308.  authentication-scheme default
  309.  authorization-scheme default
  310.  accounting-scheme default
  311.  domain default
  312.  domain default_admin
  313.  local-user admin password simple admin
  314.  local-user admin service-type http
  315. #
  316. interface Vlanif1
  317. #
  318. interface MEth0/0/1
  319. #
  320. interface Ethernet0/0/1
  321.  port link-type trunk
  322.  port trunk allow-pass vlan 2 to 4094
  323. #
  324. interface Ethernet0/0/2
  325.  port link-type access
  326.  port default vlan 10
  327. #
  328. interface Ethernet0/0/3
  329.  port link-type access
  330.  port default vlan 10
  331. #
  332. interface Ethernet0/0/4
  333.  port link-type access
  334.  port default vlan 10
  335. #
  336. interface Ethernet0/0/5
  337.  port link-type access
  338.  port default vlan 10
  339. #
  340. interface Ethernet0/0/6
  341. #
  342. interface Ethernet0/0/7
  343. #
  344. interface Ethernet0/0/8
  345. #
  346. interface Ethernet0/0/9
  347. #
  348. interface Ethernet0/0/10
  349. #
  350. interface Ethernet0/0/11
  351. #
  352. interface Ethernet0/0/12
  353. #
  354. interface Ethernet0/0/13
  355. #
  356. interface Ethernet0/0/14
  357. #
  358. interface Ethernet0/0/15
  359. #
  360. interface Ethernet0/0/16
  361. #
  362. interface Ethernet0/0/17
  363. #
  364. interface Ethernet0/0/18
  365. #
  366. interface Ethernet0/0/19
  367. #
  368. interface Ethernet0/0/20
  369. #
  370. interface Ethernet0/0/21
  371. #
  372. interface Ethernet0/0/22
  373. #
  374. interface GigabitEthernet0/0/1
  375. #
  376. interface GigabitEthernet0/0/2
  377. #
  378. interface NULL0
  379. #
  380. user-interface con 0
  381. user-interface vty 0 4
  382. #
  383. port-group qian
  384.  group-member Ethernet0/0/2
  385.  group-member Ethernet0/0/3
  386.  group-member Ethernet0/0/4
  387.  group-member Ethernet0/0/5
  388. #
  389. return
  391. 其余设备配置请联系作者获取

七、网络测试

1.网络连通测试

2.链路备份功能测试

3.服务器ftp服务测试

4、http服务测试

5、无线上网连通测试

6.查看生成树

7.查看Vrrp及链路聚合

8.查看路由表

9.查看OSPF路由表

标签： http 网络安全 tcp/ip
本文转载自: https://blog.csdn.net/m0_59193722/article/details/119391956
版权归原作者 legenndary 所有， 如有侵权，请联系我们删除。
登录后发布评论

“华为ensp模拟校园网/企业网实例（附完整设备配置命令和ensp项目）”的评论:

还没有评论
关于作者
...
overfit同步小助手
文章同步
相关阅读

网络安全法-网络运行安全

使用selenium/drissionpage时如何阻止chrome自动跳转http到https

docker desktop 里部署的Open WebUI 管理员密码忘记了的处理方法

在ubuntu20.04中搭建onsite比赛运行环境

利用开源的低代码表单设计器FcDesigner高效管理和渲染复杂表单结构

Kafka学习笔记

【前端】浏览器输入url到页面呈现发生了什么？