Preface

Some friends who have just come into contact with network configuration are not very clear about the deployment of enterprise intranet or campus network , Share a Huawei conventional campus network deployment configuration , This will have a clear concept of the basic network configuration deployment .

One 、 Topology diagram and topology description

Topology description ：
There are administration department and finance department in the park network , They correspond to each other vlan10 and vlan20, Are connected to the access switch JR_SW1 and JR_SW2;
Access switch offline PC, The upper link is trunk Mode and core switch LSW1 Connected to a , The service network segment gateway starts at LSW1 Go up and use DHCP Way to business PC Distribute IP,LSW1 Responsible for forwarding intranet services ;
LSW1 And the export router AR1 The Internet segment is 10.1.1.0/30,AR1 And telecommunications ISP The Internet segment of the Internet router is 101.1.1.0/30.
.

Two 、 Configuration steps

PC To configure
Each business network segment PC Just configure DHCP Get it .

ISP1_ Telecom router configuration
Analog operator , Only need to be in the interface ge0/0/0 Pick up the interface IP that will do .

[ISP1_DX]interface g0/0/0
[ISP1_DX-GigabitEthernet0/0/0]ip address 101.1.1.1 30

Access switch configuration
JR_SW1 and JR_SW2 The configuration is the same , Here we use JR_SW1 For example
Corresponding vlan

[JR_SW1]vlan 10
[JR_SW1]vlan 20

Set the interface type to access, And add corresponding vlan

[JR_SW1]interface e0/0/2
[JR_SW1-Ethernet0/0/2]port link-type access
[JR_SW1-Ethernet0/0/2]port default vlan 10
[JR_SW1]interface e0/0/3
[JR_SW1-Ethernet0/0/3]port link-type access
[JR_SW1-Ethernet0/0/3]port default vlan 20

Set the uplink interface type to trunk, Release all vlan

[JR_SW1]interface g0/0/1
[JR_SW1-GigabitEthernet0/0/1]port link-type trunk
[JR_SW1-GigabitEthernet0/0/1]port trunk allow-pass vlan all

Core switch LSW1 To configure
Corresponding vlan,vlan99 For uplink interconnection vlan

[LSW1]vlan 10
[LSW1]vlan 20
[LSW1]vlan 99

Turn on dhcp, Configure accordingly vlan Interface IP And open the global dhcp

[LSW1]dhcp enable
[LSW1]interface Vlanif 10
[LSW1-Vlanif10]ip address 192.168.10.1 24
[LSW1-Vlanif10]dhcp select global
[LSW1]interface Vlanif 20
[LSW1-Vlanif20]ip address 192.168.20.1 24
[LSW1-Vlanif20]dhcp select global
[LSW1]interface Vlanif 99
[LSW1-Vlanif10]ip address 10.1.1.2 30

To configure vlan10 and vlan20 Of dhcp Address pool , And specify the gateway and DNS

[LSW1]ip pool vlan10
[LSW1-ip-pool-vlan10]gateway-list 192.168.10.1
[LSW1-ip-pool-vlan10]network 192.168.10.0 mask 255.255.255.0
[LSW1-ip-pool-vlan10]dns-list 114.114.114.114
[LSW1]ip pool vlan20
[LSW1-ip-pool-vlan20]gateway-list 192.168.20.1
[LSW1-ip-pool-vlan20]network 192.168.20.0 mask 255.255.255.0
[LSW1-ip-pool-vlan20]dns-list 114.114.114.114

Configure the corresponding interface

[LSW1]interface g0/0/2
[LSW1-GigabitEthernet0/0/2]port link-type trunk
[LSW1-GigabitEthernet0/0/2]port trunk allow-pass vlan all
[LSW1]interface g0/0/3
[LSW1-GigabitEthernet0/0/3]port link-type trunk
[LSW1-GigabitEthernet0/0/3]port trunk allow-pass vlan all
[LSW1]interface g0/0/1
[LSW1-GigabitEthernet0/0/1]port link-type access
[LSW1-GigabitEthernet0/0/1]port default vlan 99

Configure a default static route , Specify the next hop as AR1 Interface IP（ notes ： The default route is generally to the external network ）

[LSW1]ip route-static 0.0.0.0 0 10.1.1.1

AR1 To configure , Be careful AR1 Configured nat step , I often come across .
Configure the corresponding interface IP

[AR1]interface g0/0/0
[AR1-GigabitEthernet0/0/0]ip address 101.1.1.2 30
[AR1]interface g0/0/1
[AR1-GigabitEthernet0/0/1]ip address 10.1.1.1 30

notes ： below nat The configuration steps of are very important
To configure acl Access control list to match internal network segment , Notice the Internet segment 10.1.1.0/30

[AR1]acl 2000
[AR1-acl-basic-2000]rule permit source 192.168.10.0 0.0.0.255
[AR1-acl-basic-2000]rule permit source 192.168.20.0 0.0.0.255
[AR1-acl-basic-2000]rule permit source 10.1.1.0 0.0.0.3

Configure on the corresponding interface nat Transform matching acl2000

[AR1-GigabitEthernet0/0/0]nat outbound 2000

Configure a default static path to point to the Internet , The two detailed routes point to the internal business network segment

[AR1]ip route-static 0.0.0.0 0 101.1.1.1
[AR1]ip route-static 192.168.10.0 24 10.1.1.2
[AR1]ip route-static 192.168.20.0 24 10.1.1.2

3、 ... and 、 Verify configuration

View each PC Whether or not to get DHCP Address , With PC1 For example , You can see that you have successfully obtained DHCP Of IP Address .

Ping ISP1_ Interface of telecommunication router IP And different network segments IP, Sure ping through , It shows that there is no problem with external network and internal business forwarding .

summary

This is a common case of campus network configuration , Mastering the specific points is very helpful for later learning various deployment configurations .
Original documents , If there are mistakes or improvements , Please point out the correction .