搜索
综合项目实施需求分析（共计70分）//含配置文件某公司总部设在哈尔滨，分别在长春市、沈阳市设有分支机构，根据公司业务不断发展需要，公司要进行信息化建设，完成总部与分支机构的互通互联，保证通信网络的安全可靠传输。项目拓扑图：项目需求如下：1、要求实现哈尔滨总部与长春分公司和沈阳分公司互通互联，哈尔滨总部包含vlan2和vlan3两个虚拟局域网，长春分公司包含vlan4和vlan5两个虚拟局域网，沈阳分公司包含vlan6和vlan7两个虚拟局域网。（10分）2、根据项目拓扑图合理规划ip地址，包括（设备的管理ip、设备互联ip地址、vlan子网ip地址、ospfrouterid的规划），提交ip地址规划文档。要求在192.168.1.0/24的这个网段上划分6个子网，分别分配给以上6个虚拟局域网使用。。（10分）3、哈尔滨总部要求实现双核心双链路互联（eth-trunk技术），保证链路级可靠性和网关级可靠性（mstp+vrrp技术）。（10分）4、哈尔滨总部到长春分支机构采用ppp链路互联，并且实现设备的认证（chap认证技术）。（10分）5、哈尔滨总部到沈阳分支机构采用FR帧中继链路互联，哈尔滨总部端设为DCE端，沈阳分公司设为DTE端。（10分）6、长春分支机构内部互通互联，沈阳分支机构内部互通互联。（10分）7、全网使用ospf路由协议完成全网路由，其中哈尔滨总部划分在area0区域、长春分公司划分在area1区域并且设置成为totallystub区域、沈阳分公司划分在area2区域并且设置成为totallystub区域。（10分）一、IP地址规划：序号VLANID起始结束子网掩码网关地址12192.168.1.1192.168.1.30255.255.255.224(27)192.168.1.123192.168.1.33192.168.1.62255.255.255.224(27)192.168.1.3334192.168.1.65192.168.1.95255.255.255.224(27)192.168.1.6545192.168.1.97192.168.1.126255.255.255.224(27)192.168.1.9756192.168.1.129192.168.1.158255.255.255.224(27)192.168.1.12967192.168.1.161192.168.1.190255.255.255.224(27)192.168.1.161二、踩坑注意点：1、totallyStub需要用HCNP中的OSPF特殊区域知识点；2、帧中继默认属于非广播型网络，在配置OSPF的时候，需要配置静态映射，并广播。同时在OSPF中手动添加邻居。三、配置文件：《herb-AR0》#sysnameherb_AR0#routerid3.3.3.3#aaaauthentication-schemedefaultauthorization-schemedefaultaccounting-schemedefaultdomaindefaultdomaindefault_adminlocal-useradminpasswordcipher7GbD!EkMQ%]@l3D+mKgUlk#local-useradminservice-typehttplocal-userhuaweipasswordcipherIzn3*-jWu1dlx3Fo4OG@L7/#local-userhuaweiservice-typeppp#firewallzoneLocalpriority16#interfaceEthernet0/0/0#interfaceEthernet0/0/1#interfaceSerial0/0/0link-protocolppppppauthentication-modechapipaddress192.168.3.253255.255.255.252#interfaceSerial0/0/1link-protocolfrfrinterface-typedcefrdlci100frmapip192.168.4.254100broadcastfastfeelingipaddress192.168.4.253255.255.255.252#interfaceSerial0/0/2link-protocolppp#interfaceSerial0/0/3link-protocolppp#interfaceGigabitEthernet0/0/0descriptionherb_AR0toherb_s5700-lsw0ipaddress192.168.1.254255.255.255.252#interfaceGigabitEthernet0/0/1descriptionherb_AR0toherb_s5700-lsw1ipaddress192.168.2.254255.255.255.252#interfaceGigabitEthernet0/0/2#interfaceGigabitEthernet0/0/3#wlan#interfaceNULL0#interfaceLoopBack0ipaddress10.1.1.1255.255.255.0#ospf1peer192.168.4.254area0.0.0.0network192.168.1.2540.0.0.0network192.168.2.2540.0.0.0network10.1.1.10.0.0.0area0.0.0.1network192.168.3.2530.0.0.0stubno-summaryarea0.0.0.2network192.168.4.2530.0.0.0stubno-summary#user-interfacecon0user-interfacevty04user-interfacevty1620#Return《herb-lsw0》#sysnameherb_s5700-lsw0#routerid1.1.1.1#vlanbatch2to3100#stpinstance1rootprimarystpinstance2rootsecondary#clusterenablentdpenablendpenable#dropillegal-macalarm#dhcpenable#diffservdomaindefault#stpregion-configurationregion-nameRG1instance1vlan2instance2vlan3activeregion-configuration#drop-profiledefault#aaaauthentication-schemedefaultauthorization-schemedefaultaccounting-schemedefaultdomaindefaultdomaindefault_adminlocal-useradminpasswordsimpleadminlocal-useradminservice-typehttp#interfaceVlanif1#interfaceVlanif2ipaddress192.168.1.2255.255.255.224vrrpvrid1virtual-ip192.168.1.1vrrpvrid1priority120vrrpvrid1trackinterfaceGigabitEthernet0/0/1reduced60dhcpselectinterfacedhcpserverexcluded-ip-address192.168.1.3dhcpserverleaseday3hour0minute0dhcpserverdns-list192.168.1.1#interfaceVlanif3ipaddress192.168.1.34255.255.255.224vrrpvrid1virtual-ip192.168.1.33dhcpselectinterfacedhcpserverexcluded-ip-address192.168.1.35dhcpserverleaseday3hour0minute0dhcpserverdns-list192.168.1.33#interfaceVlanif100ipaddress192.168.1.253255.255.255.252#interfaceMEth0/0/1#interfaceEth-Trunk1portlink-typetrunkporttrunkallow-passvlan2to3stproot-protection#interfaceGigabitEthernet0/0/1portlink-typeaccessportdefaultvlan100#interfaceGigabitEthernet0/0/2descriptions5700-lsw0-to-AR1200-AR0portlink-typeaccessportdefaultvlan100#interfaceGigabitEthernet0/0/3portlink-typetrunkporttrunkallow-passvlan2to4094#interfaceGigabitEthernet0/0/4eth-trunk1#interfaceGigabitEthernet0/0/5eth-trunk1#interfaceGigabitEthernet0/0/6#interfaceGigabitEthernet0/0/7#interfaceGigabitEthernet0/0/8#interfaceGigabitEthernet0/0/9#interfaceGigabitEthernet0/0/10#interfaceGigabitEthernet0/0/11#interfaceGigabitEthernet0/0/12#interfaceGigabitEthernet0/0/13#interfaceGigabitEthernet0/0/14#interfaceGigabitEthernet0/0/15#interfaceGigabitEthernet0/0/16#interfaceGigabitEthernet0/0/17#interfaceGigabitEthernet0/0/18#interfaceGigabitEthernet0/0/19#interfaceGigabitEthernet0/0/20#interfaceGigabitEthernet0/0/21#interfaceGigabitEthernet0/0/22#interfaceGigabitEthernet0/0/23descriptionhero_s5700_lsw0tohero_s3700_lsw2portlink-typetrunkporttrunkallow-passvlan2to3#interfaceGigabitEthernet0/0/24#interfaceNULL0#ospf1area0.0.0.0descriptionbaerb_zongbu_area0network192.168.1.2530.0.0.0network192.168.1.00.0.0.31network192.168.1.320.0.0.31#user-interfacecon0user-interfacevty04#Return《herb-lsw1》#sysnameherb_s5700-lsw1#routerid2.2.2.2#vlanbatch2to3200#stpinstance1rootsecondarystpinstance2rootprimary#clusterenablentdpenablendpenable#dropillegal-macalarm#dhcp