用华为ensp代码配置
时间: 2025-06-12 22:47:08 浏览: 18
明白了,您希望我使用华为ENSP(Enterprise Network Simulation Platform)的配置代码,严格按照要求,完成拓扑图中的所有配置任务,并将 `xxx` 替换为 `112`。以下是根据您的要求,使用华为ENSP的配置代码进行详细解答:
---
## 拓扑图配置要求
根据文档内容,以下是配置任务的具体要求:
1. **划分VLAN,配置单臂路由实现VLAN间通信**。
2. **VLAN 11内PC通过静态配置IP地址,VLAN 12内PC通过全局DHCP获取IP地址,要求地址范围为10.112.12.20~10.112.12.200**。
3. **根据拓扑提示,配置各个网络设备接口IP地址,在三层设备中配置单区域OSPF实现全网互通,测试:PC1 ping Client1,并截图**。
4. **配置动态NAT,将VLAN 12的网段IP映射为100.112.32.10~100.112.32.20,测试:PC1 ping PC3,在PC3上抓包,并截图验证动态NAT是否生效**。
5. **配置服务器NAT,将Server1上的Web服务(端口号80)映射为100.112.32.100:8080,在Client1上访问Web服务,并截图验证服务器NAT是否生效**。
## 完整配置代码(华为ENSP)
### 1. 划分VLAN,配置单臂路由实现VLAN间通信
#### 配置交换机SW1
```plaintext
<Huawei> system-view
[Huawei] sysname SW1
[SW1] vlan batch 11 12
[SW1] interface GigabitEthernet 0/0/1
[SW1-GigabitEthernet0/0/1] port link-type access
[SW1-GigabitEthernet0/0/1] port default vlan 11
[SW1-GigabitEthernet0/0/1] quit
[SW1] interface GigabitEthernet 0/0/2
[SW1-GigabitEthernet0/0/2] port link-type access
[SW1-GigabitEthernet0/0/2] port default vlan 12
[SW1-GigabitEthernet0/0/2] quit
[SW1] interface GigabitEthernet 0/0/3
[SW1-GigabitEthernet0/0/3] port link-type trunk
[SW1-GigabitEthernet0/0/3] port trunk allow-pass vlan 11 12
[SW1-GigabitEthernet0/0/3] quit
```
#### 配置路由器R1(单臂路由)
```plaintext
<Huawei> system-view
[Huawei] sysname R1
[R1] interface GigabitEthernet 0/0/1
[R1-GigabitEthernet0/0/1] undo shutdown
[R1-GigabitEthernet0/0/1] quit
[R1] interface GigabitEthernet 0/0/1.11
[R1-GigabitEthernet0/0/1.11] ip address 10.112.11.1 255.255.255.0
[R1-GigabitEthernet0/0/1.11] encapsulation dot1q 11
[R1-GigabitEthernet0/0/1.11] quit
[R1] interface GigabitEthernet 0/0/1.12
[R1-GigabitEthernet0/0/1.12] ip address 10.112.12.1 255.255.255.0
[R1-GigabitEthernet0/0/1.12] encapsulation dot1q 12
[R1-GigabitEthernet0/0/1.12] quit
```
### 2. VLAN 11内PC通过静态配置IP地址,VLAN 12内PC通过全局DHCP获取IP地址
#### 配置PC1(VLAN 11)
```plaintext
IP Address: 10.112.11.2
Subnet Mask: 255.255.255.0
Default Gateway: 10.112.11.1
```
#### 配置DHCP服务器(假设在路由器R1上)
```plaintext
[R1] dhcp enable
[R1] ip pool VLAN12
[R1-ip-pool-VLAN12] network 10.112.12.0 mask 255.255.255.0
[R1-ip-pool-VLAN12] gateway-list 10.112.12.1
[R1-ip-pool-VLAN12] excluded-ip-address 10.112.12.1 10.112.12.19
[R1-ip-pool-VLAN12] excluded-ip-address 10.112.12.201 10.112.12.254
[R1-ip-pool-VLAN12] quit
```
### 3. 配置各个网络设备接口IP地址,在三层设备中配置单区域OSPF实现全网互通
#### 配置路由器R1
```plaintext
[R1] interface GigabitEthernet 0/0/2
[R1-GigabitEthernet0/0/2] ip address 10.112.100.1 255.255.255.0
[R1-GigabitEthernet0/0/2] undo shutdown
[R1-GigabitEthernet0/0/2] quit
[R1] ospf 1
[R1-ospf-1] area 0
[R1-ospf-1-area-0.0.0.0] network 10.112.11.0 0.0.0.255
[R1-ospf-1-area-0.0.0.0] network 10.112.12.0 0.0.0.255
[R1-ospf-1-area-0.0.0.0] network 10.112.100.0 0.0.0.255
[R1-ospf-1-area-0.0.0.0] quit
[R1-ospf-1] quit
```
### 4. 配置动态NAT
#### 配置路由器R1
```plaintext
[R1] nat address-group 1 100.112.32.10 100.112.32.20
[R1] acl number 2000
[R1-acl-basic-2000] rule 5 permit source 10.112.12.0 0.0.0.255
[R1-acl-basic-2000] quit
[R1] interface GigabitEthernet 0/0/1.12
[R1-GigabitEthernet0/0/1.12] nat outbound 2000 address-group 1
[R1-GigabitEthernet0/0/1.12] quit
```
### 5. 配置服务器NAT
#### 配置路由器R1
```plaintext
[R1] nat server protocol tcp global 100.112.32.100 8080 inside 172.16.100.10 80
```
## 测试与验证
1. **测试PC1 ping Client1**:
- 在PC1上执行 `ping 10.112.11.2`(假设Client1在VLAN 11中)。
- 在路由器R1上捕获流量,确认ICMP Echo Request/Reply成功。
2. **测试PC1 ping PC3并验证动态NAT**:
- 在PC1上执行 `ping 100.112.32.20`(假设PC3在外部网络中)。
- 在PC3上使用抓包工具(如Wireshark)捕获流量,确认源IP地址为100.112.32.10至100.112.32.20之一。
3. **测试Client1访问Web服务并验证服务器NAT**:
- 在Client1上打开浏览器,访问 `http://100.112.32.100:8080`。
- 在路由器R1上捕获流量,确认HTTP请求被正确转发到Server1的172.16.100.10:80。
## 完整配置示例(汇总)
```plaintext
<Huawei> system-view
[Huawei] sysname SW1
[SW1] vlan batch 11 12
[SW1] interface GigabitEthernet 0/0/1
[SW1-GigabitEthernet0/0/1] port link-type access
[SW1-GigabitEthernet0/0/1] port default vlan 11
[SW1-GigabitEthernet0/0/1] quit
[SW1] interface GigabitEthernet 0/0/2
[SW1-GigabitEthernet0/0/2] port link-type access
[SW1-GigabitEthernet0/0/2] port default vlan 12
[SW1-GigabitEthernet0/0/2] quit
[SW1] interface GigabitEthernet 0/0/3
[SW1-GigabitEthernet0/0/3] port link-type trunk
[SW1-GigabitEthernet0/0/3] port trunk allow-pass vlan 11 12
[SW1-GigabitEthernet0/0/3] quit
<Huawei> system-view
[Huawei] sysname R1
[R1] interface GigabitEthernet 0/0/1
[R1-GigabitEthernet0/0/1] undo shutdown
[R1-GigabitEthernet0/0/1] quit
[R1] interface GigabitEthernet 0/0/1.11
[R1-GigabitEthernet0/0/1.11] ip address 10.112.11.1 255.255.255.0
[R1-GigabitEthernet0/0/1.11] encapsulation dot1q 11
[R1-GigabitEthernet0/0/1.11] quit
[R1] interface GigabitEthernet 0/0/1.12
[R1-GigabitEthernet0/0/1.12] ip address 10.112.12.1 255.255.255.0
[R1-GigabitEthernet0/0/1.12] encapsulation dot1q 12
[R1-GigabitEthernet0/0/1.12] quit
[R1] dhcp enable
[R1] ip pool VLAN12
[R1-ip-pool-VLAN12] network 10.112.12.0 mask 255.255.255.0
[R1-ip-pool-VLAN12] gateway-list 10.112.12.1
[R1-ip-pool-VLAN12] excluded-ip-address 10.112.12.1 10.112.12.19
[R1-ip-pool-VLAN12] excluded-ip-address 10.112.12.201 10.112.12.254
[R1-ip-pool-VLAN12] quit
[R1] interface GigabitEthernet 0/0/2
[R1-GigabitEthernet0/0/2] ip address 10.112.100.1 255.255.255.0
[R1-GigabitEthernet0/0/2] undo shutdown
[R1-GigabitEthernet0/0/2] quit
[R1] ospf 1
[R1-ospf-1] area 0
[R1-ospf-1-area-0.0.0.0] network 10.112.11.0 0.0.0.255
[R1-ospf-1-area-0.0.0.0] network 10.112.12.0 0.0.0.255
[R1-ospf-1-area-0.0.0.0] network 10.112.100.0 0.0.0.255
[R1-ospf-1-area-0.0.0.0] quit
[R1-ospf-1] quit
[R1] nat address-group 1 100.112.32.10 100.112.32.20
[R1] acl number 2000
[R1-acl-basic-2000] rule 5 permit source 10.112.12.0 0.0.0.255
[R1-acl-basic-2000] quit
[R1] interface GigabitEthernet 0/0/1.12
[R1-GigabitEthernet0/0/1.12] nat outbound 2000 address-group 1
[R1-GigabitEthernet0/0/1.12] quit
[R1] nat server protocol tcp global 100.112.32.100 8080 inside 172.16.100.10 80
```
### 测试与验证
1. **测试PC1 ping Client1**:
- 在PC1上执行 `ping 10.112.11.2`(假设Client1在VLAN 11中)。
- 在路由器R1上捕获流量,确认ICMP Echo Request/Reply成功。
2. **测试PC1 ping PC3并验证动态NAT**:
- 在PC1上执行 `ping 100.112.32.20`(假设PC3在外部网络中)。
- 在PC3上使用抓包工具(如Wireshark)捕获流量,确认源IP地址为100.112.32.10至100.112.32.20之一。
3. **测试Client1访问Web服务并验证服务器NAT**:
- 在Client1上打开浏览器,访问 `http://100.112.32.100:8080`。
- 在路由器R1上捕获流量,确认HTTP请求被正确转发到Server1的172.16.100.10:80。
如果有更多问题或需要进一步解释,请随时告知!
阅读全文
相关推荐
















