HCIE 小文档（日更）
main
菜单
本页目录

要求

  • 管理网络：

    1. 二层组网+DHCP位于AC
    2. 管理vlan100

  • 业务网络：

    1. 网关与DHCP服务器为SW1，隧道转发
    2. SSID1：Employee
    3. SSID：Guest
    4. 密码都是Huawei@123 WPA2+AES
    5. 位于同一个组，所有射频都放
    6. 业务vlan：51（Employee） 101（Guest）

配置

预览图

image-2-ifpf.png

AC1


<AC1>sys
Enter system view, return user view with Ctrl+Z.
[AC1]dis cu
#
 sysname AC1
#
 set memory-usage threshold 0
#
ssl renegotiation-rate 1 
#
vlan batch 51 100 to 101
#
authentication-profile name default_authen_profile
authentication-profile name dot1x_authen_profile
authentication-profile name mac_authen_profile
authentication-profile name portal_authen_profile
authentication-profile name macportal_authen_profile
#
dhcp enable
#
diffserv domain default
#
radius-server template default
#
pki realm default
 rsa local-key-pair default
 enrollment self-signed
#
ike proposal default
 encryption-algorithm aes-256 
 dh group14 
 authentication-algorithm sha2-256 
 authentication-method pre-share
 integrity-algorithm hmac-sha2-256 
 prf hmac-sha2-256 
#
free-rule-template name default_free_rule
#
portal-access-profile name portal_access_profile
#
aaa
 authentication-scheme default
 authentication-scheme radius
  authentication-mode radius
 authorization-scheme default
 accounting-scheme default
 domain default
  authentication-scheme radius
  radius-server default
 domain default_admin
  authentication-scheme default
 local-user admin password irreversible-cipher $1a$`egl/2$~A/$<|Z5JqFc!~GOk+0E1o
$;g!l,:_J8\T$@FpD4`U%Q$
 local-user admin privilege level 15
 local-user admin service-type http
#
interface Vlanif51
 ip address 10.10.20.2 255.255.255.0
#
interface Vlanif100
 ip address 10.10.10.1 255.255.255.0
 dhcp select interface
#
interface Vlanif101
 ip address 10.10.30.22 255.255.255.0
#
interface MEth0/0/1
 undo negotiation auto
 duplex half
#
interface GigabitEthernet0/0/1
 port hybrid tagged vlan 51 100 to 101
#
interface GigabitEthernet0/0/2
#
interface GigabitEthernet0/0/3
#
interface GigabitEthernet0/0/4
#
interface GigabitEthernet0/0/5
#
interface GigabitEthernet0/0/6
#
interface GigabitEthernet0/0/7
#
interface GigabitEthernet0/0/8
#
interface GigabitEthernet0/0/9
#
interface GigabitEthernet0/0/10
#
interface GigabitEthernet0/0/11
#
interface GigabitEthernet0/0/12
#
interface GigabitEthernet0/0/13
#
interface GigabitEthernet0/0/14
#
interface GigabitEthernet0/0/15
#
interface GigabitEthernet0/0/16
#
interface GigabitEthernet0/0/17
#
interface GigabitEthernet0/0/18
#
interface GigabitEthernet0/0/19
#
interface GigabitEthernet0/0/20
#
interface GigabitEthernet0/0/21
 undo negotiation auto
 duplex half
#
interface GigabitEthernet0/0/22
 undo negotiation auto
 duplex half
#
interface GigabitEthernet0/0/23
 undo negotiation auto
 duplex half
#
interface GigabitEthernet0/0/24
 undo negotiation auto
 duplex half
#
interface XGigabitEthernet0/0/1
#
interface XGigabitEthernet0/0/2
#
interface NULL0
#
 snmp-agent local-engineid 800007DB03000000000000
 snmp-agent 
#
ssh server secure-algorithms cipher aes256_ctr aes128_ctr
ssh server key-exchange dh_group14_sha1
ssh client secure-algorithms cipher aes256_ctr aes128_ctr
ssh client secure-algorithms hmac sha2_256
ssh client key-exchange dh_group14_sha1
#
ip route-static 10.10.20.0 255.255.255.0 10.10.10.2
ip route-static 10.10.30.0 255.255.255.0 10.10.10.2
#
capwap source interface vlanif100
#
user-interface con 0
 authentication-mode password
user-interface vty 0 4
 protocol inbound all
user-interface vty 16 20
 protocol inbound all
#
wlan
 traffic-profile name default
 security-profile name default
 security-profile name default-wds
 security-profile name ESC_AP1_AP2
  security wpa2 psk pass-phrase %^%#[(ot7&cy0F1JRl->YsJO|QZ|O}_9h:whu$QzZgqW%^%#
 aes
 security-profile name default-mesh
 ssid-profile name Guest
  ssid Guest
 ssid-profile name default
 ssid-profile name Employee
  ssid Employee
 vap-profile name default
 vap-profile name VAP_AP1
  forward-mode tunnel
  service-vlan vlan-id 51
  ssid-profile Employee
  security-profile ESC_AP1_AP2
 vap-profile name VAP_AP2
  forward-mode tunnel
  service-vlan vlan-id 101
  ssid-profile Guest
  security-profile ESC_AP1_AP2
 wds-profile name default
 mesh-handover-profile name default
 mesh-profile name default
 regulatory-domain-profile name default
 air-scan-profile name default
 rrm-profile name default
 radio-2g-profile name default
 radio-5g-profile name default
 wids-spoof-profile name default
 wids-profile name default
 wireless-access-specification
 ap-system-profile name default
 port-link-profile name default
 wired-port-profile name default
 serial-profile name preset-enjoyor-toeap 
 ap auth-mode no-auth
 ap-group name default
 ap-group name GRP_AP1_AP2
  radio 0
   vap-profile VAP_AP1 wlan 1
   vap-profile VAP_AP2 wlan 2
  radio 1
   vap-profile VAP_AP1 wlan 1
   vap-profile VAP_AP2 wlan 2
  radio 2
   vap-profile VAP_AP1 wlan 1
   vap-profile VAP_AP2 wlan 2
 ap-id 0 type-id 61 ap-mac 00e0-fcef-6200 ap-sn 210235448310F7176239
  ap-name AP1
  ap-group GRP_AP1_AP2
 ap-id 1 type-id 61 ap-mac 00e0-fc17-2e20 ap-sn 2102354483106903FF36
  ap-name AP2
  ap-group GRP_AP1_AP2
 provision-ap
#
dot1x-access-profile name dot1x_access_profile
#
mac-access-profile name mac_access_profile
#
return
[AC1]

SW1

sys
Enter system view, return user view with Ctrl+Z.
[SW1]dis cu
#
sysname SW1
#
vlan batch 51 100 to 101
#
cluster enable
ntdp enable
ndp enable
#
drop illegal-mac alarm
#
dhcp enable
#
diffserv domain default
#
drop-profile default
#
aaa
 authentication-scheme default
 authorization-scheme default
 accounting-scheme default
 domain default
 domain default_admin
 local-user admin password simple admin
 local-user admin service-type http
#
interface Vlanif1
#
interface Vlanif51
 ip address 10.10.20.1 255.255.255.0
 dhcp select interface
 dhcp select relay
 dhcp relay server-ip 10.10.10.1
#
interface Vlanif100
 ip address 10.10.10.2 255.255.255.0
#
interface Vlanif101
 ip address 10.10.30.1 255.255.255.0
 dhcp select interface
 dhcp select relay
 dhcp relay server-ip 10.10.10.1
#
interface MEth0/0/1
#
interface GigabitEthernet0/0/1
 port hybrid tagged vlan 51 100
#
interface GigabitEthernet0/0/2
 port hybrid tagged vlan 100 to 101
#
interface GigabitEthernet0/0/3
 port hybrid tagged vlan 51 100 to 101
#
interface GigabitEthernet0/0/4
#
interface GigabitEthernet0/0/5
#
interface GigabitEthernet0/0/6
#
interface GigabitEthernet0/0/7
#
interface GigabitEthernet0/0/8
#
interface GigabitEthernet0/0/9
#
interface GigabitEthernet0/0/10
#
interface GigabitEthernet0/0/11
#
interface GigabitEthernet0/0/12
#
interface GigabitEthernet0/0/13
#
interface GigabitEthernet0/0/14
#
interface GigabitEthernet0/0/15
#
interface GigabitEthernet0/0/16
#
interface GigabitEthernet0/0/17
#
interface GigabitEthernet0/0/18
#
interface GigabitEthernet0/0/19
#
interface GigabitEthernet0/0/20
#
interface GigabitEthernet0/0/21
#
interface GigabitEthernet0/0/22
#
interface GigabitEthernet0/0/23
#
interface GigabitEthernet0/0/24
#
interface NULL0
#
user-interface con 0
user-interface vty 0 4
#
return
[SW1]

SW2

sys
Enter system view, return user view with Ctrl+Z.
[Huawei]dis cu
#
sysname Huawei
#
vlan batch 51 100
#
cluster enable
ntdp enable
ndp enable
#
drop illegal-mac alarm
#
diffserv domain default
#
drop-profile default
#
aaa
 authentication-scheme default
 authorization-scheme default
 accounting-scheme default
 domain default
 domain default_admin
 local-user admin password simple admin
 local-user admin service-type http
#
interface Vlanif1
#
interface MEth0/0/1
#
interface Ethernet0/0/1
 port hybrid tagged vlan 51 100
#
interface Ethernet0/0/2
 port hybrid tagged vlan 51 100
#
interface Ethernet0/0/3
#
interface Ethernet0/0/4
#
interface Ethernet0/0/5
#
interface Ethernet0/0/6
#
interface Ethernet0/0/7
#
interface Ethernet0/0/8
#
interface Ethernet0/0/9
#
interface Ethernet0/0/10
#
interface Ethernet0/0/11
#
interface Ethernet0/0/12
#
interface Ethernet0/0/13
#
interface Ethernet0/0/14
#
interface Ethernet0/0/15
#
interface Ethernet0/0/16
#
interface Ethernet0/0/17
#
interface Ethernet0/0/18
#
interface Ethernet0/0/19
#
interface Ethernet0/0/20
#
interface Ethernet0/0/21
#
interface Ethernet0/0/22
#
interface GigabitEthernet0/0/1
#
interface GigabitEthernet0/0/2
#
interface NULL0
#
user-interface con 0
user-interface vty 0 4
#
return
[Huawei]

SW3

sys
Enter system view, return user view with Ctrl+Z.
[Huawei]dis cu
#
sysname Huawei
#
vlan batch 100 to 101
#
cluster enable
ntdp enable
ndp enable
#
drop illegal-mac alarm
#
diffserv domain default
#
drop-profile default
#
aaa
 authentication-scheme default
 authorization-scheme default
 accounting-scheme default
 domain default
 domain default_admin
 local-user admin password simple admin
 local-user admin service-type http
#
interface Vlanif1
#
interface MEth0/0/1
#
interface Ethernet0/0/1
 port hybrid tagged vlan 100 to 101
#
interface Ethernet0/0/2
 port hybrid tagged vlan 100 to 101
#
interface Ethernet0/0/3
#
interface Ethernet0/0/4
#
interface Ethernet0/0/5
#
interface Ethernet0/0/6
#
interface Ethernet0/0/7
#
interface Ethernet0/0/8
#
interface Ethernet0/0/9
#
interface Ethernet0/0/10
#
interface Ethernet0/0/11
#
interface Ethernet0/0/12
#
interface Ethernet0/0/13
#
interface Ethernet0/0/14
#
interface Ethernet0/0/15
#
interface Ethernet0/0/16
#
interface Ethernet0/0/17
#
interface Ethernet0/0/18
#
interface Ethernet0/0/19
#
interface Ethernet0/0/20
#
interface Ethernet0/0/21
#
interface Ethernet0/0/22
#
interface GigabitEthernet0/0/1
#
interface GigabitEthernet0/0/2
#
interface NULL0
#
user-interface con 0
user-interface vty 0 4
#
return
[Huawei]

SW4

sys
Enter system view, return user view with Ctrl+Z.
[Huawei]dis cu
#
sysname Huawei
#
vlan batch 51 100
#
cluster enable
ntdp enable
ndp enable
#
drop illegal-mac alarm
#
diffserv domain default
#
drop-profile default
#
aaa
 authentication-scheme default
 authorization-scheme default
 accounting-scheme default
 domain default
 domain default_admin
 local-user admin password simple admin
 local-user admin service-type http
#
interface Vlanif1
#
interface MEth0/0/1
#
interface Ethernet0/0/1
 port hybrid pvid vlan 51
 port hybrid untagged vlan 51 100
#
interface Ethernet0/0/2
 port hybrid tagged vlan 51 100
#
interface Ethernet0/0/3
#
interface Ethernet0/0/4
#
interface Ethernet0/0/5
#
interface Ethernet0/0/6
#
interface Ethernet0/0/7
#
interface Ethernet0/0/8
#
interface Ethernet0/0/9
#
interface Ethernet0/0/10
#
interface Ethernet0/0/11
#
interface Ethernet0/0/12
#
interface Ethernet0/0/13
#
interface Ethernet0/0/14
#
interface Ethernet0/0/15
#
interface Ethernet0/0/16
#
interface Ethernet0/0/17
#
interface Ethernet0/0/18
#
interface Ethernet0/0/19
#
interface Ethernet0/0/20
#
interface Ethernet0/0/21
#
interface Ethernet0/0/22
#
interface GigabitEthernet0/0/1
#
interface GigabitEthernet0/0/2
#
interface NULL0
#
user-interface con 0
user-interface vty 0 4
#
return
[Huawei]

SW5

sys
Enter system view, return user view with Ctrl+Z.
[SW5]dis cu
#
sysname SW5
#
vlan batch 100 to 101
#
cluster enable
ntdp enable
ndp enable
#
drop illegal-mac alarm
#
diffserv domain default
#
drop-profile default
#
aaa
 authentication-scheme default
 authorization-scheme default
 accounting-scheme default
 domain default
 domain default_admin
 local-user admin password simple admin
 local-user admin service-type http
#
interface Vlanif1
#
interface MEth0/0/1
#
interface Ethernet0/0/1
 port hybrid pvid vlan 100
 port hybrid untagged vlan 100 to 101
#
interface Ethernet0/0/2
 port hybrid tagged vlan 100 to 101
#
interface Ethernet0/0/3
#
interface Ethernet0/0/4
#
interface Ethernet0/0/5
#
interface Ethernet0/0/6
#
interface Ethernet0/0/7
#
interface Ethernet0/0/8
#
interface Ethernet0/0/9
#
interface Ethernet0/0/10
#
interface Ethernet0/0/11
#
interface Ethernet0/0/12
#
interface Ethernet0/0/13
#
interface Ethernet0/0/14
#
interface Ethernet0/0/15
#
interface Ethernet0/0/16
#
interface Ethernet0/0/17
#
interface Ethernet0/0/18
#
interface Ethernet0/0/19
#
interface Ethernet0/0/20
#
interface Ethernet0/0/21
#
interface Ethernet0/0/22
#
interface GigabitEthernet0/0/1
#
interface GigabitEthernet0/0/2
#
interface NULL0
#
user-interface con 0
user-interface vty 0 4
#
return
[SW5]
上一篇 笔记以及实验手册
下一篇 DAY 4 WLAN双机热备（未做）