您好，欢迎来到爱问旅游网。
科技 教育 生活 旅游 时尚 美容 美食 健康 体育 游戏 汽车 家电
搜索
您的当前位置：首页第8章案例一故障配置(V2.3)

第8章案例一故障配置(V2.3)

来源：爱问旅游网
第8章 H3CTE故障排除综合案例一

8.1.1 参考配置

错误配置 # sysname RT1 # router id 10.10.10.1 # ip unreachables enable # ip ttl-expires enable # acl number 3001 rule 0 permit ip source 69.1.1.1 0 destination 69.1.1.2 0 # ike peer 123 pre-shared-key simple 123 remote-address 69.1.1.1 # ipsec proposal 1 # ipsec policy 1 1 isakmp security acl 3001 ike-peer 123 proposal 1 # interface Ethernet5/0 port link-mode route ospf authentication-mode md5 1 plain h3c 正确配置 # sysname RT1 # router id 10.10.10.1 # ip unreachables enable # ip ttl-expires enable # acl number 3001 rule 0 permit ip source 69.1.1.1 0 destination 69.1.1.2 0 # ike peer 123 pre-shared-key simple 123 remote-address 69.1.1.2 local-address 69.1.1.1 # ipsec proposal 1 # ipsec policy 1 1 isakmp security acl 3001 ike-peer 123 proposal 1 # interface Ethernet5/0 port link-mode route ospf authentication-mode md5 1 plain h3c - 1 -

第8章 H3CTE故障排除综合案例一

ip address 10.2.1.9 255.255.255.252 # interface Ethernet5/1 port link-mode route ospf authentication-mode md5 1 plain h3c ip address 69.1.1.1 255.255.255.252 # interface LoopBack0 ip address 10.10.10.1 255.255.255.255 # interface GigabitEthernet0/0 port link-mode route ip address 10.1.1.9 255.255.255.252 # interface GigabitEthernet0/1 port link-mode route ospf authentication-mode md5 1 plain h3c ip address 10.2.1.1 255.255.255.252 # interface Tunnel0 ip address 10.2.1.13 255.255.255.252 source 69.1.1.1 destination 69.1.1.2 keepalive 10 3 ipsec policy 1 # bgp 65131 router-id 10.10.10.1 import-route ospf 10 undo synchronization - 2 -

ip address 10.2.1.9 255.255.255.252 # interface Ethernet5/1 port link-mode route ip address 69.1.1.1 255.255.255.252 ipsec policy 1 # interface LoopBack0 ip address 10.10.10.1 255.255.255.255 # interface GigabitEthernet0/0 port link-mode route ip address 10.1.1.9 255.255.255.252 # interface GigabitEthernet0/1 port link-mode route ospf authentication-mode md5 1 plain h3c ip address 10.2.1.1 255.255.255.252 # interface Tunnel0 ip address 10.2.1.13 255.255.255.252 ospf authentication-mode md5 1 plain h3c source 69.1.1.1 destination 69.1.1.2 keepalive 10 3 # bgp 65131 router-id 10.10.10.1 import-route ospf 10 undo synchronization 第8章 H3CTE故障排除综合案例一

group in internal peer in connect-interface LoopBack0 peer 10.10.10.3 group in peer 10.10.10.4 group in peer 10.10.10.2 group in # ospf 1 area 0.0.0.0 authentication-mode md5 network 10.2.1.0 0.0.0.3 network 10.2.1.8 0.0.0.3 network 10.2.1.12 0.0.0.3 network 10.10.10.1 0.0.0.0 # ospf 10 area 0.0.0.0 network 10.1.1.8 0.0.0.3 # sysname RT2 # router id 10.10.10.2 # ip unreachables enable # ip ttl-expires enable # acl number 2001 rule 0 permit source 192.1.0.0 0.0.255.255 rule 5 permit source 172.1.1.0 0.0.0.255 - 3 -

group in internal peer in reflect-client peer in connect-interface LoopBack0 peer 10.10.10.3 group in peer 10.10.10.4 group in peer 10.10.10.2 group in # ospf 1 area 0.0.0.0 authentication-mode md5 network 10.2.1.0 0.0.0.3 network 10.2.1.8 0.0.0.3 network 10.2.1.12 0.0.0.3 network 10.10.10.1 0.0.0.0 # ospf 10 default-route-advertise always area 0.0.0.0 network 10.1.1.8 0.0.0.3 # # sysname RT2 # router id 10.10.10.2 # ip unreachables enable # ip ttl-expires enable # acl number 2001 rule 0 permit source 192.1.0.0 0.0.255.255 rule 5 permit source 172.1.1.0 0.0.0.255 第8章 H3CTE故障排除综合案例一

# local-user rt2 password simple h3c service-type ppp # interface Ethernet5/0 port link-mode route ip address 10.3.1.6 255.255.255.252 # interface Serial6/0 link-protocol ppp ppp authentication-mode chap ppp chap user rt2 ppp mp Mp-group 0 # interface Serial6/1 link-protocol ppp ppp authentication-mode chap ppp chap user rt2 ppp mp Mp-group 0 # interface Mp-group0 ip address 10.2.1.5 255.255.255.252 ospf authentication-mode md5 1 plain h3c # interface LoopBack0 ip address 10.10.10.2 255.255.255.255 # interface GigabitEthernet0/0 port link-mode route ip address 10.1.1.5 255.255.255.252 - 4 -

# local-user rt2 password simple h3c service-type ppp # interface Ethernet5/0 port link-mode route ip address 10.3.1.6 255.255.255.252 # interface Serial6/0 link-protocol ppp ppp authentication-mode chap ppp chap user rt3 ppp mp Mp-group 0 # interface Serial6/1 link-protocol ppp ppp authentication-mode chap ppp chap user rt3 ppp mp Mp-group 0 # interface Mp-group0 ip address 10.2.1.5 255.255.255.252 ospf authentication-mode md5 1 plain h3c ospf cost 1 # interface LoopBack0 ip address 10.10.10.2 255.255.255.255 # interface GigabitEthernet0/0 port link-mode route ip address 10.1.1.5 255.255.255.252 第8章 H3CTE故障排除综合案例一

# interface GigabitEthernet0/1 port link-mode route ip address 10.2.1.2 255.255.255.252 ospf authentication-mode md5 1 plain h3c # bgp 65131 router-id 10.10.10.2 import-route ospf 10 undo synchronization peer 10.3.1.5 as-number 65132 peer 10.3.1.5 route-policy 1 export group in internal peer in next-hop-local peer in connect-interface LoopBack0 peer 10.10.10.3 group in peer 10.10.10.1 group in # ospf 1 area 0.0.0.0 authentication-mode md5 network 10.2.1.0 0.0.0.3 network 10.10.10.2 0.0.0.0 network 10.2.1.4 0.0.0.3 # ospf 10 area 0.0.0.0 network 10.1.1.4 0.0.0.3 # route-policy 1 permit node 10 - 5 -

# interface GigabitEthernet0/1 port link-mode route ip address 10.2.1.2 255.255.255.252 ospf authentication-mode md5 1 plain h3c # bgp 65131 router-id 10.10.10.2 import-route ospf 10 undo synchronization peer 10.3.1.5 as-number 65132 peer 10.3.1.5 route-policy 1 export group in internal peer in next-hop-local peer in reflect-client peer in connect-interface LoopBack0 peer 10.10.10.3 group in peer 10.10.10.1 group in # ospf 1 area 0.0.0.0 authentication-mode md5 network 10.2.1.0 0.0.0.3 network 10.10.10.2 0.0.0.0 network 10.2.1.4 0.0.0.3 # ospf 10 default-route-advertise always area 0.0.0.0 network 10.1.1.4 0.0.0.3 # route-policy 1 permit node 10 第8章 H3CTE故障排除综合案例一

if-match acl 2001 # # sysname RT3 # router id 10.10.10.3 # ip unreachables enable # ip ttl-expires enable # local-user rt3 password simple h3c service-type ppp # interface Serial6/0 link-protocol ppp ppp chap user rt3 ppp mp Mp-group 0 # interface Serial6/1 link-protocol ppp ppp chap user rt3 ppp mp Mp-group 0 # interface Mp-group0 ip address 10.2.1.6 255.255.255.252 ospf authentication-mode md5 1 plain h3c - 6 -

if-match acl 2001 # # sysname RT3 # router id 10.10.10.3 # ip unreachables enable # ip ttl-expires enable # local-user rt3 password simple h3c service-type ppp # interface Serial6/0 link-protocol ppp ppp authentication-mode chap ppp chap user rt2 ppp mp Mp-group 0 # interface Serial6/1 link-protocol ppp ppp authentication-mode chap ppp chap user rt2 ppp mp Mp-group 0 # interface Mp-group0 ip address 10.2.1.6 255.255.255.252 ospf authentication-mode md5 1 plain h3c ospf cost 1 第8章 H3CTE故障排除综合案例一

# interface LoopBack0 ip address 10.10.10.3 255.255.255.255 # interface LoopBack10 ip address 172.1.2.254 255.255.255.255 # interface LoopBack20 ip address 192.1.2.254 255.255.255.255 # interface GigabitEthernet0/0 port link-mode route ip address 10.2.1.10 255.255.255.252 ospf authentication-mode md5 1 plain h3c # bgp 65131 network 172.1.2.254 255.255.255.255 network 192.1.2.254 255.255.255.255 undo synchronization group in internal peer in connect-interface LoopBack0 peer 10.10.10.1 group in peer 10.10.10.2 group in peer 10.10.10.2 route-policy 10 import # ospf 1 area 0.0.0.0 authentication-mode md5 network 10.10.10.3 0.0.0.0 network 10.2.1.4 0.0.0.0 network 10.2.1.8 0.0.0.0 # - 7 -

# interface LoopBack0 ip address 10.10.10.3 255.255.255.255 # interface LoopBack10 ip address 172.1.2.254 255.255.255.255 # interface LoopBack20 ip address 192.1.2.254 255.255.255.255 # interface GigabitEthernet0/0 port link-mode route ip address 10.2.1.10 255.255.255.252 ospf authentication-mode md5 1 plain h3c # bgp 65131 network 172.1.2.254 255.255.255.255 network 192.1.2.254 255.255.255.255 undo synchronization group in internal peer in connect-interface LoopBack0 peer 10.10.10.1 group in peer 10.10.10.2 group in peer 10.10.10.2 route-policy 10 import # ospf 1 area 0.0.0.0 authentication-mode md5 network 10.10.10.3 0.0.0.0 network 10.2.1.8 0.0.0.3 network 10.2.1.4 0.0.0.3 # 第8章 H3CTE故障排除综合案例一

route-policy 10 permit node 10 if-match ip-prefix 10 apply local-preference 200 # ip ip-prefix 10 index 10 permit 192.1.1.0 24 # # sysname RT4 # router id 10.10.10.4 # ip unreachables enable # ip ttl-expires enable # acl number 3001 rule 0 permit ip source 69.1.1.2 0 destination 69.1.1.1 0 # ike peer 123 pre-shared-key simple 123 remote-address 69.1.1.1 local-address 69.1.1.2 # ipsec proposal 1 # ipsec policy 1 1 isakmp security acl 3001 ike-peer 123 - 8 -

route-policy 10 permit node 10 if-match ip-prefix 10 apply local-preference 200 route-policy 10 permit node 20 apply local-preference 50 # ip ip-prefix 10 index 10 permit 172.1.1.0 24 # # sysname RT4 # router id 10.10.10.4 # ip unreachables enable # ip ttl-expires enable # acl number 3001 rule 0 permit ip source 69.1.1.2 0 destination 69.1.1.1 0 # ike peer 123 pre-shared-key simple 123 remote-address 69.1.1.1 local-address 69.1.1.2 # ipsec proposal 1 # ipsec policy 1 1 isakmp security acl 3001 ike-peer 123 第8章 H3CTE故障排除综合案例一

proposal 1 # interface LoopBack0 ip address 10.10.10.4 255.255.255.255 # interface LoopBack10 ip address 172.1.3.254 255.255.255.255 # interface LoopBack20 ip address 192.1.3.254 255.255.255.255 # interface GigabitEthernet0/0 port link-mode route ospf authentication-mode md5 1 plain h3c ip address 69.1.1.2 255.255.255.252 # interface Tunnel0 ip address 10.2.1.14 255.255.255.252 source 69.1.1.2 destination 69.1.1.1 keepalive 10 3 ipsec policy 1 # bgp 65131 router-id 10.10.10.1 network 172.1.3.254 255.255.255.255 network 192.1.3.254 255.255.255.255 undo synchronization group in internal peer in connect-interface LoopBack0 - 9 -

proposal 1 # interface LoopBack0 ip address 10.10.10.4 255.255.255.255 # interface LoopBack10 ip address 172.1.3.254 255.255.255.255 # interface LoopBack20 ip address 192.1.3.254 255.255.255.255 # interface GigabitEthernet0/0 port link-mode route ip address 69.1.1.2 255.255.255.252 ipsec policy 1 # interface Tunnel0 ip address 10.2.1.14 255.255.255.252 source 69.1.1.2 destination 69.1.1.1 keepalive 10 3 ospf authentication-mode md5 1 plain h3c # bgp 65131 router-id 10.10.10.4 network 172.1.3.254 255.255.255.255 network 192.1.3.254 255.255.255.255 undo synchronization group in internal peer in connect-interface LoopBack0 第8章 H3CTE故障排除综合案例一

peer 10.10.10.1 group in # ospf 1 area 0.0.0.0 network 10.10.10.4 0.0.0.0 network 10.2.1.12 0.0.0.3 # # sysname RT5 # super password level 3 simple h3c # telnet server enable # ip unreachables enable # ip ttl-expires enable # interface LoopBack0 ip address 20.20.20.1 255.255.255.255 # interface LoopBack10 ip address 172.2.1.254 255.255.255.255 # interface LoopBack20 ip address 192.2.1.254 255.255.255.255 # interface GigabitEthernet0/0 port link-mode route ip address 10.3.1.1 255.255.255.252 # - 10 -

peer 10.10.10.1 group in # ospf 1 area 0.0.0.0 network 10.10.10.4 0.0.0.0 network 10.2.1.12 0.0.0.3 # # sysname RT5 # domain default enable system # telnet server enable # ip unreachables enable # ip ttl-expires enable # interface LoopBack0 ip address 20.20.20.1 255.255.255.255 # interface LoopBack10 ip address 172.2.1.254 255.255.255.255 # interface LoopBack20 ip address 192.2.1.254 255.255.255.255 # interface GigabitEthernet0/0 port link-mode route ip address 10.3.1.1 255.255.255.252 # 第8章 H3CTE故障排除综合案例一

interface GigabitEthernet0/1 port link-mode route ip address 10.3.1.5 255.255.255.252 # bgp 65132 router-id 20.20.20.1 network 172.2.1.254 255.255.255.255 network 192.2.1.254 255.255.255.255 undo synchronization peer 10.3.1.2 as-number 65131 peer 10.3.1.6 as-number 65131 # # sysname SW1 # ip unreachables enable # vlan 1 # vlan 10 # vlan 101 to 102 # stp enable stp region-configuration instance 1 vlan 101 instance 2 vlan 102 active region-configuration - 11 -

interface GigabitEthernet0/1 port link-mode route ip address 10.3.1.5 255.255.255.252 # bgp 65132 router-id 20.20.20.1 network 172.2.1.254 255.255.255.255 network 192.2.1.254 255.255.255.255 undo synchronization peer 10.3.1.2 as-number 65131 peer 10.3.1.6 as-number 65131 # # sysname SW1 # ip unreachables enable # vlan 1 # vlan 10 # vlan 101 to 102 # stp instance 1 root secondary stp instance 2 root primary stp enable stp region-configuration region-name h3c instance 1 vlan 101 instance 2 vlan 102 active region-configuration 第8章 H3CTE故障排除综合案例一

# interface Vlan-interface10 ip address 10.1.1.10 255.255.255.252 # interface Vlan-interface101 ip address 172.1.1.1 255.255.255.0 vrrp vrid 1 virtual-ip 172.1.1.254 # interface Vlan-interface102 ip address 192.1.1.1 255.255.255.0 vrrp vrid 2 virtual-ip 192.1.1.254 # interface Ethernet1/0/1 port link-mode bridge port access vlan 10 # interface Ethernet1/0/2 port link-mode bridge port link-type trunk port trunk permit vlan 1 101 to 102 # interface Ethernet1/0/24 port link-mode bridge port link-type trunk port trunk permit vlan 1 101 to 102 # ospf 10 area 0.0.0.0 - 12 -

# interface Vlan-interface10 ip address 10.1.1.10 255.255.255.252 # interface Vlan-interface101 ip address 172.1.1.1 255.255.255.0 vrrp vrid 1 virtual-ip 172.1.1.254 # interface Vlan-interface102 ip address 192.1.1.1 255.255.255.0 vrrp vrid 2 virtual-ip 192.1.1.254 vrrp vrid 2 priority 105 vrrp vrid 2 track interface Vlan-interface10 # interface Ethernet1/0/1 port link-mode bridge port access vlan 10 # interface Ethernet1/0/2 port link-mode bridge port link-type trunk port trunk permit vlan 1 101 to 102 # interface Ethernet1/0/24 port link-mode bridge port link-type trunk port trunk permit vlan 1 101 to 102 # ospf 10 silent-interface vlan-interface101 silent-interface vlan-interface102 area 0.0.0.0 第8章 H3CTE故障排除综合案例一

network 10.1.1.8 0.0.0.3 network 172.1.1.0 0.0.0.255 network 192.1.1.0 0.0.0.255 # sysname SW2 # ip unreachables enable # acl number 3000 rule 0 permit ip source 172.2.0.0 0.0.255.255 # vlan 1 # vlan 10 # vlan 20 # vlan 101 to 102 # stp enable stp region-configuration instance 1 vlan 101 instance 2 vlan 102 active region-configuration # interface Vlan-interface10 ip address 10.1.1.6 255.255.255.252 # - 13 -

network 10.1.1.8 0.0.0.3 network 172.1.1.0 0.0.0.255 network 192.1.1.0 0.0.0.255 # # sysname SW2 # ip unreachables enable # acl number 3000 rule 0 permit ip source 172.2.0.0 0.0.255.255 # vlan 1 # vlan 10 # vlan 20 # vlan 101 to 102 # stp instance 1 root primary stp instance 2 root secondary stp enable stp region-configuration region-name h3c instance 1 vlan 101 instance 2 vlan 102 active region-configuration # interface Vlan-interface10 ip address 10.1.1.6 255.255.255.252 # 第8章 H3CTE故障排除综合案例一

interface Vlan-interface20 ip address 10.3.1.2 255.255.255.252 # interface Vlan-interface101 ip address 172.1.1.1 255.255.255.0 vrrp vrid 1 virtual-ip 172.1.1.254 # interface Vlan-interface102 ip address 192.1.1.2 255.255.255.0 vrrp vrid 2 virtual-ip 192.1.1.254 # interface Ethernet1/0/1 port link-mode bridge port access vlan 10 # interface Ethernet1/0/2 port link-mode bridge port link-type trunk port trunk permit vlan 1 101 to 102 # interface Ethernet1/0/3 port link-mode bridge port access vlan 20 # interface Ethernet1/0/24 port link-mode bridge port link-type trunk port trunk permit vlan 1 101 to 102 # bgp 65131 - 14 -

interface Vlan-interface20 ip address 10.3.1.2 255.255.255.252 # interface Vlan-interface101 ip address 172.1.1.2 255.255.255.0 vrrp vrid 1 virtual-ip 172.1.1.254 vrrp vrid 1 priority 105 vrrp vrid 1 track interface Vlan-interface10 # interface Vlan-interface102 ip address 192.1.1.2 255.255.255.0 vrrp vrid 2 virtual-ip 192.1.1.254 # interface Ethernet1/0/1 port link-mode bridge port access vlan 10 # interface Ethernet1/0/2 port link-mode bridge port link-type trunk port trunk permit vlan 1 101 to 102 # interface Ethernet1/0/3 port link-mode bridge port access vlan 20 # interface Ethernet1/0/24 port link-mode bridge port link-type trunk port trunk permit vlan 1 101 to 102 # bgp 65131 第8章 H3CTE故障排除综合案例一

network 172.1.1.0 255.255.255.0 undo synchronization peer 10.3.1.1 as-number 65132 # ospf 10 area 0.0.0.0 network 10.1.1.4 0.0.0.3 network 172.1.1.0 0.0.0.255 network 192.1.1.0 0.0.0.255 # route-policy 1 permit node 10 if-match acl 3000 # sysname SW3 # vlan 1 # vlan 101 to 102 # stp enable stp region-configuration instance 1 vlan 101 instance 2 vlan 102 active region-configuration # interface Vlan-interface101 ip address 172.1.1.100 255.255.255.0 - 15 -

network 172.1.1.0 255.255.255.0 undo synchronization peer 10.3.1.1 as-number 65132 peer 10.3.1.1 route-policy 1 import # ospf 10 silent-interface vlan-interface101 silent-interface vlan-interface102 area 0.0.0.0 network 10.1.1.4 0.0.0.3 network 172.1.1.0 0.0.0.255 network 192.1.1.0 0.0.0.255 # route-policy 1 permit node 10 if-match acl 3000 # # sysname SW3 # vlan 1 # vlan 101 to 102 # stp enable stp region-configuration region-name h3c instance 1 vlan 101 instance 2 vlan 102 active region-configuration # interface Vlan-interface101 ip address 172.1.1.100 255.255.255.0 第8章 H3CTE故障排除综合案例一

# interface Vlan-interface102 ip address 192.1.1.100 255.255.255.0 # interface Ethernet1/0/1 port link-mode bridge port link-type trunk port trunk permit vlan 1 101 to 102 # interface Ethernet1/0/2 port link-mode bridge port link-type trunk port trunk permit vlan 1 101 to 102 # interface Ethernet1/0/11 port link-mode bridge port access vlan 101 # interface Ethernet1/0/12 port link-mode bridge port access vlan 102 # ip route-static 172.0.0.0 255.0.0.0 172.1.1.254 ip route-static 192.0.0.0 255.0.0.0 # interface Vlan-interface102 ip address 192.1.1.100 255.255.255.0 # interface Ethernet1/0/1 port link-mode bridge port link-type trunk port trunk permit vlan 1 101 to 102 # interface Ethernet1/0/2 port link-mode bridge port link-type trunk port trunk permit vlan 1 101 to 102 # interface Ethernet1/0/11 port link-mode bridge port access vlan 101 # interface Ethernet1/0/12 port link-mode bridge port access vlan 102 # ip route-static 172.0.0.0 255.0.0.0 172.1.1.254 ip route-static 192.0.0.0 255.0.0.0 192.1.1.254 # 192.1.1.254 # - 16 -

第8章 H3CTE故障排除综合案例一

- 17 -

因篇幅问题不能全部显示，请点此查看更多更全内容

查看全文

Copyright © 2019- awee.cn 版权所有

违法及侵权请联系：TEL:199 1889 7713 E-MAIL:2724546146@qq.com

本站由北京市万商天勤律师事务所王兴未律师提供法律服务