【正文】 172． 17． 1． 98 56 256 JMJSXY_SS_6H_E352_IDF2_1 172． 17． 1． 99 57 257 JMJSXY_SS_6H_E352_IDF2_2 172． 17． 1． 100 58 258 JMJSXY_SS_6H_E352_IDF3_1 172． 17． 1． 101 59 259 JMJSXY_SS_6H_E352_IDF3_2 172． 17． 1． 102 60 260 校園網(wǎng)實(shí)施方案 16 宿舍 7 號(hào)樓 JMJSXY_SS_7H_E328_IDF1_1 172． 17． 1． 103 61 261 JMJSXY_SS_7H_E352_IDF1_2 172． 17． 1． 104 JMJSXY_SS_7H_E352_IDF1_3 172． 17． 1． 105 62 262 JMJSXY_SS_7H_E328_IDF2_1 172． 17． 1． 106 63 263 JMJSXY_SS_7H_E352_IDF2_2 172． 17． 1． 107 JMJSXY_SS_7H_E352_IDF2_3 172． 17． 1． 108 64 264 宿舍 8 號(hào)樓 JMJSXY_SS_8H_E328_IDF1_1 172． 17． 1． 109 65 265 JMJSXY_SS_8H_E352_IDF1_2 172． 17． 1． 110 66 266 JMJSXY_SS_8H_E352_IDF1_3 172． 17． 1． 111 67 267 JMJSXY_SS_8H_E328_IDF2_1 172． 17． 1． 112 68 268 JMJSXY_SS_8H_E352_IDF2_2 172． 17． 1． 113 JMJSXY_SS_8H_E352_IDF2_3 172． 17． 1． 114 69 269 JMJSXY_SS_8H_E328_IDF3_1 172． 17． 1． 115 70 270 JMJSXY_SS_8H_E352_IDF3_2 172． 17． 1． 116 JMJSXY_SS_8H_E352_IDF3_3 172． 17． 1． 117 71 271 . 路由策略 本期工程中，新增網(wǎng)絡(luò)設(shè)備與原有網(wǎng)絡(luò)統(tǒng)一使用 OSPF 作為內(nèi)部路由協(xié)議。網(wǎng)絡(luò)的路由表由 OSPF 維護(hù)，以實(shí)現(xiàn) 校園 網(wǎng)內(nèi)部的尋址。 而防火墻連接華為 S8505 用路由協(xié)議。 如下圖 ： 校園網(wǎng)實(shí)施方案 17 各設(shè)備使用的路由協(xié)議如下： 設(shè)備連接情況 路由協(xié)議 NE40 連接教育網(wǎng) NAT 路由策略 NE40 連接 CHINANET NAT 路由策略 NE40 連接防火墻華為 500F 靜態(tài)路由 防火墻華為 500F 連接華為 S8505A 靜態(tài)路由 華為 S8505A 連接華為 S8505B OSPF 華為 S8505A 連接華為 S6505A OSPF 華為 S8505A 連接華為 S6505B OSPF 華為 S8505A 連接華為 S6505C OSPF 華為 S8505B 連接華為 S6505A OSPF 華為 S8505B 連接華為 S6505B OSPF 校園網(wǎng)實(shí)施方案 18 華為 S8505B 連接華為 S6505C OSPF OSPF 所對(duì)應(yīng) IP 地址和 Vlan ID Vlan ID IP 地址 設(shè)備名 端口號(hào) Vlan 901 S8512A 2/1/1 S8512B 2/1/1 Vlan 902 S8512A 2/1/2 S5606A 2/1/1 Vlan 903 S8512A 2/1/2 S6506A 2/1/2 Vlan 904 S8512A 2/1/3 S6506B 2/1/1 Vlan 905 S8512A 2/1/4 S6506C 2/1/1 Vlan 906 S8512B 2/1/4 S6506C 2/1/2 Vlan 907 S8512B 2/1/3 S6506B 2/1/2 . 系統(tǒng)基本配置系統(tǒng)基本配置 . 配置各個(gè)核心交換機(jī)器設(shè)備步驟如下： 由于本期工程接入層交換機(jī)比較多，所以為了節(jié)省配置時(shí)間我們使用批處理，基本配置模塊如下： . S8512A 配置模板 systemview sysname 8512A 校園網(wǎng)實(shí)施方案 19 super password level 3 cipher huawei userinterface vty 0 4 user privilege level 1 set authentication password cipher huawei idletimeout 30 0 userinterface aux 0 user privilege level 1 set authentication password cipher huawei idletimeout 30 0 vlan 901 vlan 902 vlan 904 vlan 905 vlan 910 interface vlaninterface 901 ip address undo shut quit interface vlaninterface 902 ip address undo shut quit 校園網(wǎng)實(shí)施方案 20 interface vlaninterface 904 ip address undo shut quit interface vlaninterface 905 ip address undo shut quit interface vlaninterface 910 ip address undo shut quit interface GigabitEther 2/1/1 des To_S8512B port access vlan 901 undo shut quit interface GigabitEther 2/1/2 des To_S6505A port access vlan 902 undo shut quit interface GigabitEther 2/1/3 des To_S6505B port access vlan 904 undo shut quit 校園網(wǎng)實(shí)施方案 21 interface GigabitEther 2/1/4 des To_S6505C port access vlan 905 undo shut quit interface GigabitEther 2/1/5 des To_serverA port access vlan 910 undo shut quit interface GigabitEther 2/1/6 des To_ServerB port access vlan 910 undo shut quit ip routestatic ospf area 0 work work work work importroute direct importroute static defaultrouteadvertise quit 校園網(wǎng)實(shí)施方案 22 . S8512B 配置模板 systemview sysname 8512A super password level 3 cipher huawei userinterface vty 0 4 user privilege level 1 set authentication password cipher huawei idletimeout 30 0 userinterface aux 0 user privilege level 1 set authentication password cipher huawei idletimeout 30 0 vlan 901 vlan 903 vlan 906 vlan 907 interface vlaninterface 901 ip address undo shut quit interface vlaninterface 903 ip address 校園網(wǎng)實(shí)施方案 23 undo shut quit interface vlaninterface 906 ip address undo shut quit interface vlaninterface 907 ip address undo shut quit interface GigabitEther 2/1/1 des To_S8512A port access vlan 901 undo shut quit interface GigabitEther 2/1/2 des To_S6505A port access vlan 903 undo shut quit interface GigabitEther 2/1/3 des To_S6505B port access vlan 907 undo shut quit interface GigabitEther 2/1/4 校園網(wǎng)實(shí)施方案 24 des To_S6505C port access vlan 906 undo shut quit ospf area 0 work work work work importroute direct quit . 5624P 配置模板 systemview sysname 85624P super password level 3 cipher huawei userinterface vty 0 4 user privilege level 1 set authentication password cipher huawei idletimeout 30 0 userinterface aux 0 user privilege level 1 set authentication password cipher huawei idletimeout 30 0 校園網(wǎng)實(shí)施方案 25 vlan 311 interface vlaninterface 301 ip address undo shut quit interface GigabitEther 1/1/1 des To_1000F port access vlan 311 undo shut quit interface GigabitEther 1/1/2 des To_SeverA port access vlan 311 undo shut quit interface GigabitEther 1/1/3 des To_SeverB port access vlan 311 undo shut quit interface GigabitEther 1/1/4 des To_SeverC port access vlan 311 undo shut quit 校園網(wǎng)實(shí)施方案 26 interface GigabitEther 1