您现在的位置是：首页 >其他 >HCIA-综合实验(答案篇)网站首页其他

第二题

sy

sy HZ-EDU-Edge

sy

HZ-XiaoYuan-Edge

sy

sy SH-XiaoYuan-Edge

sy

sy Core1

sy

sy Core2

sy

sy Agg01

sy

sy Agg02

sy

sy Acc02

sy

sy Acc01

第三体

interface Eth-Trunk1

 mode lacp-static

 max active-linknumber 1

 自己添加接口

第四题

acc01

vlan b 10 20

port-g g g0/0/1 g0/0/2

port link-type t

port t a v 10 20

undo port t a v 1

port trunk pvid v 1

q

int e 0/0/1

port link-type h

port hybrid untagged v 10

port  hybrid pvid V 10

int e0/0/2

port link-type  h

port hybrid  untagged  v 20

port hybrid  pvid  v 20

acc02

vlan b 10 20

port-g g g0/0/1 g0/0/2

port link-type t

port t a v 10 20

undo port t a v 1

port trunk pvid v 1

q

int e 0/0/1

port link-type  a

port default v 10

int e 0/0/2

port link-type  a

port default v 20

agg01

vlan b 10 20 100

port-g g g0/0/1 g0/0/2

port link-type t

port t a v 10 20

undo port t a v 1

port trunk pvid v 1

q

int e1

port link-type trunk

port trunk a v 10 20

port trunk pvid  v 1

int g0/0/6

port link-type a

port de v 100

agg2

vlan b 10 20 200

port-g g g0/0/1 g0/0/2

port link-type t

port t a v 10 20

undo port t a v 1

port trunk pvid v 1

q

int e1

port link-type trunk

port trunk a v 10 20

port trunk pvid  v 1

int g0/0/6

port link-type a

port de v 200

第五题

1.

agg01

stp m rst

stp priority 4096

stp root primary

agg02

stp m rst

stp priority  8192

stp root se

2，

acc02

port-g g e0/0/1 e0/0/2

stp edged-port enable

q

stp bpdu-protection

acc01

port-g g e0/0/1 e0/0/2

stp edged-port enable

q

stp bpdu-protection

3.

acc01

int g0/0/2

stp cost 20000

stp loop-protection

q

acc02

int g0/0/2

stp cost 20000

stp loop-protection

q

agg01

int g0/0/2

stp cost 200000

stp loop-protection

q

agg02

int g0/0/2

stp cost 200000

stp loop-protection

q

4.

agg01

int g0/0/6

stp root-protection

agg02

int g0/0/6

stp root-protection

第六题

agg01

int v 10

ip add 192.168.10.1 24

int v 20

ip add 192.168.20.1 24

int v 100

ip add 10.1.100.1 30

int l0

ip add 1.1.1.1 32

agg02

int v 10

ip add 192.168.10.2 24

int v 20

ip add 192.168.20.2 24

int v 200

ip add 10.1.200.1 30

int l0

ip add 2.2.2.2 32

core1

int g0/0/0

ip add 10.1.100.2 30

int g0/0/1

ip add 10.1.12.1 30

int g0/0/2

ip add 10.1.22.1 30

int l0

ip add 3.3.3.3 32

core2

int g0/0/0

ip add 10.1.200.2 30

int g0/0/1

ip add 10.1.12.2 30

int g0/0/2

ip add 10.1.33.1 30

int l0

ip add 4.4.4.4 32

HZ-XiaoYuan-Edge

int g0/0/0

ip add 10.1.22.2 30

int g0/0/1

ip add 10.1.33.2 30

int g0/0/2

ip add 172.16.1.1 30

int s 1/0/0

ip add 202.1.1.1 30

int l 0

ip add 5.5.5.5 32

SH-XiaoYuan-Edge

int g0/0/0

ip add 192.168.30.254 24

int g0/0/1

ip add 172.16.1.2 30

in l0

ip add 6.6.6.6 32

HZ-EDU-Edge

int s 1/0/0

ip add 202.1.1.2 30

int g0/0/0

ip add 8.8.8.1 24

第七题

agg01

interface Vlanif10

vrrp vrid 1 virtual-ip 192.168.10.254

vrrp vrid 1 priority 120

vrrp vrid 1 track interface g0/0/6 reduced 30

vrrp v 1 preempt-mode timer  delay 10

vrrp v 1 a m huawei

int v 20

vrrp vrid 2 virtual-ip 192.168.20.254

vrrp v 2 a s huawei

agg02

interface Vlanif10

vrrp vrid 1 virtual-ip 192.168.10.254

vrrp v 1 a m huawei

int v 20

vrrp vrid 2 virtual-ip 192.168.20.254

vrrp vrid 2 priority 120

vrrp vrid 2 track interface g0/0/6 reduced 30

vrrp v 2 preempt-mode timer  delay 10

vrrp v 2 a s huawei

第八题

agg01

ospf 1

 area 0.0.0.0

  network 192.168.10.1 0.0.0.0

  network 192.168.20.1 0.0.0.0

  network 10.1.100.1 0.0.0.0

  network 1.1.1.1 0.0.0.0

  authentication-mode md5  1 cipher Huawei

agg02

ospf 1

 area 0.0.0.0

  network 192.168.10.2 0.0.0.0

  network 192.168.20.2 0.0.0.0

  network 10.1.200.1 0.0.0.0

  network 2.2.2.2 0.0.0.0

  authentication-mode md5  1 cipher Huawei

core1

ospf 1

 area 0.0.0.0

  network 3.3.3.3 0.0.0.0

  network 10.1.12.1 0.0.0.0

  network 10.1.22.1 0.0.0.0

  network 10.1.100.2 0.0.0.0

  authentication-mode md5  1 cipher Huawei

core2

ospf 1

 area 0.0.0.0

  network 4.4.4.4 0.0.0.0

  network 10.1.12.2 0.0.0.0

  network 10.1.33.1 0.0.0.0

  network 10.1.200.2 0.0.0.0

  authentication-mode md5  1 cipher Huawei

HZ-XiaoYuan-Edge

ospf 1

 area 0.0.0.0

  network 5.5.5.5 0.0.0.0

  network 10.1.22.2 0.0.0.0

  network 10.1.33.2 0.0.0.0

  network 172.16.1.1 0.0.0.0

  network 202.1.1.1 0.0.0.0

  authentication-mode md5  1 cipher Huawei

SH-XiaoYuan-Edge

ospf 1

 area 0.0.0.0

  network 6.6.6.6 0.0.0.0

  network 172.16.1.2 0.0.0.0

  network 192.168.30.254 0.0.0.0

  authentication-mode md5  1 cipher Huawei

7.

ospf dr-priority 255

8.

agg01

interface Vlanif10

ospf cost 100

interface Vlanif20

ospf cost 100

agg02

interface Vlanif10

ospf cost 100

interface Vlanif20

ospf cost 100

cpre2

int g0/0/2

ospf cost  100

 HZ-XiaoYuan- Edge

int g0/0/1

ospf cost  100

9.HZ-XiaoYuan-Edge

int g0/0/2

ospf network-type p2p

第九题

1.HZ-XiaoYuan-Edge

AAA

local-user user1 password cipher Huawei@123

local-user papservice-type ppp

interface Serial1/0/0

link-protocol ppp

ppp authentication-mode pap

HZ-EDU-Edge

interface Serial1/0/0

link-protocol ppp

ppp pap local-user user1 password sim Huawei@123

2.HZ-EDU-Edge

AAA

local-user user2 password cipher Huawei

local-user chap service-type ppp

interfaceSerial1/0/0

link-protocol ppp

ppp authentication-mode chap

HZ-XiaoYuan-Edge

interface Serial1/0/0

link-protocol ppp

ppp chap user user2

ppp chap password cipher Huawei

第十题

HZ-XiaoYuan-Edge 

ip route-static 0.0.0.0 0.0.0.0 172.16.1.2

ip route-static 8.8.8.8 255.255.255.255 202.1.1.2

ospf 1

import-route static cost 1 type 2

HZ-EDU-Edge 

ip route-static 192.168.0.0 16 202.1.1.1

ip route-static 0.0.0.0 0 202.1.1.1

第十一题

1.

agg02

dhcp en

int v 20

dhcp select interface

dhcp server dns-list 8.8.8.8

SH-XiaoYuan-Edge

dhcp en

ip pool 1

gateway-list 192.168.30.254

network 192.168.30.0 mask 255.255.255.0

dns-list 8.8.8.8

int g0/0/0

dhcp select gl    

第十二题

1.

nat address-group 1 202.1.1.10 202.1.1.20

acl number 2000  

rule 5 permit source 192.160.2.0 8.8.8.8

rule 10 permit source 192.160.20.0 8.8.8.8

nat outbound 2000 address-group 1

2.

acl number 2001  

rule 5 permit source 192.168.30.0 0.0.0.25

int s1/0/0

nat outbound 2001

3.

int s1/0/0

nat ser protocol  tcp global 203.1.1.1 telnet insi

de 1.1.1.1 telnet

4.

user-interface vty 0 4

 user privilege level 3

 set authentication password cipher Huawei

5.

int s1/0/0

nat server protocol tcp  global 203.1.1.1 ftp insi

de 2.2.2.2 ftp

aaa

local-user ftp password cipher Huawei

local-user ftp privilege level 3

local-user ftp service-type ftp

q

user-interface vty 0 4

authentication-mode aaa

6.

int s1/0/0

nat server protocol  tcp global 203.1.1.2 80 insid

e 192.168.20.10

第十三题

acl 3000

rule deny icmp source 192.168.10.20 0.0.0.0 desti

nation 8.8.8.8 0.0.0.0

int s1/0/0

traffic-filter outbound acl 3000

第十四题

acl 3000

rule permit tcp  source 1.1.1.1 0.0.0.0 destinati

on 6.6.6.6 0.0.0.0

int g0/0/1

traffic-filter inbound acl 3000

q

aaa

local-user telnet password cipher Huawei@123

local-user telnet privilege level 15

user-interface vty 0 4

authentication-mode aaa