core1

[core1]dis cu

sysname core1

vlan batch 10 20 30 40 1000

stp instance 1 root primary

stp instance 2 root secondary

cluster enable

ntdp enablendp enable

drop illegal-mac alarm

diffserv domain default

stp region-configuration

instance 1 vlan 10 20instance 2 vlan 30 40active region-configuration

drop-profile default

vlan 20

description yewu vlan 30description yewu2vlan 40description wlan

aaa

authentication-scheme defaultauthorization-scheme defaultaccounting-scheme defaultdomain defaultdomain default_adminlocal-user admin password simple adminlocal-user admin service-type http

interface Vlanif1

interface Vlanif10

description guanliip address 172.16.10.252 255.255.255.0vrrp vrid 10 virtual-ip 172.16.10.254vrrp vrid 10 priority 110vrrp vrid 10 authentication-mode simple cisco

interface Vlanif20

ip address 172.16.20.252 255.255.255.0vrrp vrid 20 virtual-ip 172.16.20.254vrrp vrid 20 priority 110vrrp vrid 20 authentication-mode simple cisco

interface Vlanif30

ip address 172.16.30.252 255.255.255.0vrrp vrid 30 virtual-ip 172.16.30.254

interface Vlanif40

ip address 172.16.40.252 255.255.255.0vrrp vrid 40 virtual-ip 172.16.40.254

interface Vlanif1000

ip address 12.12.12.1 255.255.255.0

interface MEth0/0/1

interface Eth-Trunk1

port link-type trunkport trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/1

port link-type trunk port trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/2

port link-type trunkport trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/3

port link-type trunkport trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/4

interface GigabitEthernet0/0/5

interface GigabitEthernet0/0/6

interface GigabitEthernet0/0/7

interface GigabitEthernet0/0/8

interface GigabitEthernet0/0/9

interface GigabitEthernet0/0/10

interface GigabitEthernet0/0/11

interface GigabitEthernet0/0/12

interface GigabitEthernet0/0/13

interface GigabitEthernet0/0/14

interface GigabitEthernet0/0/15

eth-trunk 1

interface GigabitEthernet0/0/16

eth-trunk 1

interface GigabitEthernet0/0/17

interface GigabitEthernet0/0/18

interface GigabitEthernet0/0/19

interface GigabitEthernet0/0/20

interface GigabitEthernet0/0/21

interface GigabitEthernet0/0/22

interface GigabitEthernet0/0/23

interface GigabitEthernet0/0/24

port link-type accessport default vlan 1000

interface NULL0

user-interface con 0

user-interface vty 0 4user privilege level 15set authentication password simple cisco

return

core2

[core1]dis cu

sysname core2

vlan batch 10 20 30 40 1000

stp instance 2 root primary

stp instance 1 root secondary

cluster enable

ntdp enablendp enable

drop illegal-mac alarm

diffserv domain default

stp region-configuration

instance 1 vlan 10 20instance 2 vlan 30 40active region-configuration

drop-profile default

vlan 10

description guanlivlan 20description yewu vlan 30description yewu2vlan 40description wlan

aaa

authentication-scheme defaultauthorization-scheme defaultaccounting-scheme defaultdomain defaultdomain default_adminlocal-user admin password simple adminlocal-user admin service-type http

interface Vlanif1

interface Vlanif10

description guanliip address 172.16.10.253 255.255.255.0vrrp vrid 10 virtual-ip 172.16.10.254vrrp vrid 10 authentication-mode simple cisco

interface Vlanif20

ip address 172.16.20.253 255.255.255.0vrrp vrid 20 virtual-ip 172.16.20.254vrrp vrid 20 authentication-mode simple cisco

interface Vlanif30

ip address 172.16.30.253 255.255.255.0vrrp vrid 30 priority 110vrrp vrid 30 virtual-ip 172.16.30.254

interface Vlanif40

ip address 172.16.40.253 255.255.255.0vrrp vrid 40 priority 110vrrp vrid 40 virtual-ip 172.16.40.254

interface Vlanif1000

ip address 13.13.13.1 255.255.255.0

interface MEth0/0/1

interface Eth-Trunk1

port link-type trunkport trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/1

port link-type trunk port trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/2

port link-type trunkport trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/3

port link-type trunkport trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/4

interface GigabitEthernet0/0/5

interface GigabitEthernet0/0/6

interface GigabitEthernet0/0/7

interface GigabitEthernet0/0/8

interface GigabitEthernet0/0/9

interface GigabitEthernet0/0/10

interface GigabitEthernet0/0/11

interface GigabitEthernet0/0/12

interface GigabitEthernet0/0/13

interface GigabitEthernet0/0/14

interface GigabitEthernet0/0/15

eth-trunk 1

interface GigabitEthernet0/0/16

eth-trunk 1

interface GigabitEthernet0/0/17

interface GigabitEthernet0/0/18

interface GigabitEthernet0/0/19

interface GigabitEthernet0/0/20

interface GigabitEthernet0/0/21

interface GigabitEthernet0/0/22

interface GigabitEthernet0/0/23

interface GigabitEthernet0/0/24

port link-type accessport default vlan 1000

interface NULL0

user-interface con 0

user-interface vty 0 4user privilege level 15set authentication password simple cisco

return

ac-wlan

[ac_wlan-wlan-view]dis cu

sysname ac_wlan

vlan batch 10 40

interface Vlanif10

ip address 172.16.10.10 255.255.255.0

interface GigabitEthernet0/0/1

port link-type trunkport trunk allow-pass vlan 2 to 4094

ip route-static 0.0.0.0 0.0.0.0 172.16.10.254

capwap source interface vlanif10 //影响AP自动上线

wlan

ac sysnetid 1

ssid-profile name wlan-net

ssid passwdvap-profile name wlan-netservice-vlan vlan-id 10ssid-profile wlan-netsecurity-profile wlan-net

rrm-profile name default

calibrate auto-channel-select disable calibrate auto-txpower-select disableap auth-mode no-authap-group name defaultradio 0vap-profile wlan-net wlan 1radio 1vap-profile wlan-net wlan 1ap-id 0 type-id 69 ap-mac 00e0-fc00-0b80 ap-sn 210235448310793D3169radio 0channel 20mhz 6eirp 127radio 1channel 20mhz 149eirp 127ap-id 1 type-id 69 ap-mac 00e0-fc94-65f0 ap-sn 210235448310CE5B2806provision-ap[ac_wlan-wlan-view]

test

中小型网络拓扑配置点啥？后期会以上图配置以下技术点！

1、VRRP2、链路聚合3、FW1\fw2 HA4、ospf5、nat6、映射内部服务器7、ipse ***与分布互通8、wlan覆盖9、DHCP10、BFD11、vlan

本来想搞完第一次发那个图（下图）融入上面的全部技术，但是一万个草拟吗做了两次模拟器挂了不搞。就这么多吧！！！！！！