{"id":33773,"date":"2025-04-28T15:49:24","date_gmt":"2025-04-28T07:49:24","guid":{"rendered":"https:\/\/www.wsisp.com\/helps\/33773.html"},"modified":"2025-04-28T15:49:24","modified_gmt":"2025-04-28T07:49:24","slug":"%e5%85%a8%e5%9b%bd%e8%81%8c%e4%b8%9a%e9%99%a2%e6%a0%a1%e6%8a%80%e8%83%bd%e5%a4%a7%e8%b5%9b-%e7%bd%91%e7%bb%9c%e5%bb%ba%e8%ae%be%e4%b8%8e%e8%bf%90%e7%bb%b4%e6%a0%b7%e9%a2%98%e8%a7%a3%e6%9e%90","status":"publish","type":"post","link":"https:\/\/www.wsisp.com\/helps\/33773.html","title":{"rendered":"\u5168\u56fd\u804c\u4e1a\u9662\u6821\u6280\u80fd\u5927\u8d5b \u7f51\u7edc\u5efa\u8bbe\u4e0e\u8fd0\u7ef4\u6837\u9898\u89e3\u6790"},"content":{"rendered":"

\u4f60\u672a\u5fc5\u5149\u8292\u4e07\u4e08，\u4f46\u59cb\u7ec8\u6e29\u6696\u6709\u5149.<\/span><\/p>\n

\u5168\u56fd\u804c\u4e1a\u9662\u6821\u6280\u80fd\u5927\u8d5b \u7f51\u7edc\u5efa\u8bbe\u4e0e\u8fd0\u7ef4\u6837\u9898<\/span><\/h2>\n

\u8d5b\u9898\u8bf4\u660e<\/span><\/h2>\n

\u4e00\u3001\u7ade\u8d5b\u9879\u76ee\u7b80\u4ecb <\/span><\/h2>\n

\u201c <\/span>
\n \u7f51\u7edc\u5efa\u8bbe\u4e0e\u8fd0\u7ef4<\/span>
\n \u201d<\/span>
\n \u7ade\u8d5b\u5171\u5206 <\/span>
\n A<\/span>
\n ．\u7f51\u7edc\u7406\u8bba\u6d4b\u8bd5（\u4ece\u516c\u5e03\u8d5b\u9898\u6a21\u5757 \u4e00\u4e2d\u968f\u673a\u62bd\u53d6\u9009\u62e9\u989870 <\/span>
\n \u9053，\u5224\u65ad\u9898<\/span>
\n 30 <\/span>
\n \u9053<\/span>
\n ）；<\/span>
\n B<\/span>
\n ．\u7f51\u7edc\u5efa\u8bbe\u4e0e\u8c03\u8bd5；<\/span>
\n C<\/span>
\n ．\u670d \u52a1\u642d\u5efa\u4e0e\u8fd0\u7ef4\u7b49\u4e09\u4e2a\u6a21\u5757\u3002\u7ade\u8d5b\u65f6\u95f4\u5b89\u6392\u548c\u5206\u503c\u6743\u91cd\u89c1\u8868 1<\/span> <\/p>\n

\"\"<\/span> <\/p>\n

\u4e8c\u3001\u7ade\u8d5b\u6ce8\u610f\u4e8b\u9879 <\/span><\/h2>\n

1<\/span>
\n ．\u7ade\u8d5b\u671f\u95f4\u7981\u6b62\u643a\u5e26\u548c\u4f7f\u7528\u79fb\u52a8\u5b58\u50a8\u8bbe\u5907\u3001\u8ba1\u7b97\u5668\u3001\u901a\u4fe1\u5de5\u5177\u53ca \u53c2\u8003\u8d44\u6599\u3002 <\/span> <\/p>\n

2<\/span>
\n ．\u8bf7\u6839\u636e\u5927\u8d5b\u6240\u63d0\u4f9b\u7684\u7ade\u8d5b\u73af\u5883，\u68c0\u67e5\u6240\u5217\u7684\u786c\u4ef6\u8bbe\u5907\u3001\u8f6f\u4ef6\u6e05 \u5355\u3001\u6750\u6599\u6e05\u5355\u662f\u5426\u9f50\u5168，\u8ba1\u7b97\u673a\u8bbe\u5907\u662f\u5426\u80fd\u6b63\u5e38\u4f7f\u7528\u3002 <\/span> <\/p>\n

3<\/span>
\n ．\u5728\u8fdb\u884c\u4efb\u4f55\u64cd\u4f5c\u4e4b\u524d，\u8bf7\u9605\u8bfb\u6bcf\u4e2a\u90e8\u5206\u7684\u6240\u6709\u4efb\u52a1\u3002\u5404\u4efb\u52a1\u4e4b \u95f4\u53ef\u80fd\u5b58\u5728\u4e00\u5b9a\u5173\u8054\u3002 <\/span> <\/p>\n

4<\/span>
\n ．\u64cd\u4f5c\u8fc7\u7a0b\u4e2d\u9700\u8981\u53ca\u65f6\u6309\u7167\u7b54\u9898\u8981\u6c42\u4fdd\u5b58\u76f8\u5173\u7ed3\u679c\u3002\u7ade\u8d5b\u7ed3\u675f\u540e， \u6240\u6709\u8bbe\u5907\u4fdd\u6301\u8fd0\u884c\u72b6\u6001，\u8bc4\u5224\u4ee5\u6700\u540e\u63d0\u4ea4\u7684\u6210\u679c\u4e3a\u6700\u7ec8\u4f9d\u636e\u3002 <\/span> <\/p>\n

5<\/span>
\n ．\u7ade\u8d5b\u5b8c\u6210\u540e，\u7ade\u8d5b\u8bbe\u5907\u3001\u8f6f\u4ef6\u548c\u8d5b\u9898\u8bf7\u4fdd\u7559\u5728\u5ea7\u4f4d\u4e0a，\u7981\u6b62\u5c06 \u7ade\u8d5b\u6240\u7528\u7684\u6240\u6709\u7269\u54c1（\u5305\u62ec\u8bd5\u5377\u7b49）\u5e26\u79bb\u8d5b\u573a\u3002 <\/span> <\/p>\n

6<\/span>
\n ．\u7981\u6b62\u5728\u63d0\u4ea4\u8d44\u6599\u4e0a\u586b\u5199\u4e0e\u7ade\u8d5b\u65e0\u5173\u7684\u6807\u8bb0，\u5982\u8fdd\u53cd\u89c4\u5b9a，\u53ef\u89c6 \u4e3a0 <\/span>
\n \u5206\u3002<\/span> <\/p>\n

\u6a21\u5757\u4e8c：\u7f51\u7edc\u5efa\u8bbe\u4e0e\u8c03\u8bd5 <\/span><\/h2>\n

\u67d0\u96c6\u56e2\u516c\u53f8\u539f\u5728\u5317\u4eac\u5efa\u7acb\u4e86\u603b\u516c\u53f8，\u540e\u5728\u6210\u90fd\u5efa\u7acb\u4e86\u5206\u516c\u53f8，\u53c8 \u5728 \u5e7f\u4e1c\u8bbe\u7acb\u4e86\u529e\u4e8b\u5904\u3002\u96c6\u56e2\u8bbe\u6709\u4ea7\u54c1\u3001\u8425\u9500\u3001\u6cd5\u52a1\u3001\u8d22\u52a1\u3001\u4eba\u529b5 <\/span>
\n \u4e2a \u90e8 \u95e8，\u7edf\u4e00\u8fdb\u884cIP <\/span>
\n \u53ca\u4e1a\u52a1\u8d44\u6e90\u7684\u89c4\u5212\u548c\u5206\u914d，\u5168\u7f51\u91c7\u7528<\/span>
\n OSPF<\/span>
\n \u3001<\/span>
\n RIP<\/span>
\n \u3001 ISIS \u3001<\/span>
\n BGP <\/span>
\n \u8def\u7531\u534f\u8bae\u8fdb\u884c\u4e92\u8054\u4e92\u901a\u3002 2023 \u5e74\u968f\u7740\u4f01\u4e1a\u6570\u5b57\u5316\u8f6c\u578b\u5de5\u4f5c\u8fdb\u4e00\u6b65\u63a8\u8fdb，\u4e3a\u6301\u7eed\u4f18\u5316\u8fd0\u8425 \u521b\u65b0，\u5145\u5206\u6fc0\u6d3b\u6570\u636e\u8981\u7d20\u6f5c\u80fd，\u4e3a\u793e\u4f1a\u521b\u9020\u66f4\u591a\u4ef7\u503c，\u96c6\u56e2\u51b3\u5b9a\u5728\u5317 \u4eac \u5efa\u7acb\u4e24\u4e2a\u6570\u636e\u4e2d\u5fc3，\u5728\u8d35\u5dde\u5efa\u7acb\u5f02\u5730\u707e\u5907\u6570\u636e\u4e2d\u5fc3，\u4ee5\u8fbe\u5230\u5feb\u901f\u3001 \u53ef \u9760\u4ea4\u6362\u6570\u636e，\u589e\u5f3a\u4e1a\u52a1\u90e8\u7f72\u5f39\u6027\u7684\u76ee\u7684，\u5b8c\u6210\u5411\u4e24\u5730\u4e09\u4e2d\u5fc3\u6574\u4f53\u6218 \u7565\u67b6\u6784\u6f14\u8fdb，\u66f4\u597d\u7684\u670d\u52a1\u4e8e\u516c\u53f8\u5ba2\u6237\u3002 \u96c6\u56e2\u3001\u5206\u516c\u53f8\u53ca\u529e\u4e8b\u5904\u7684\u7f51\u7edc\u7ed3\u6784\u8be6\u89c1\u62d3\u6251\u56fe\u3002\u7f16\u53f7\u4e3aSW1 <\/span>
\n \u7684 \u8bbe\u5907\u4f5c\u4e3a\u96c6\u56e2\u5317\u4eac 1#DC <\/span>
\n \u6838\u5fc3\u4ea4\u6362\u673a，\u7f16\u53f7\u4e3a<\/span>
\n SW2 <\/span>
\n \u7684\u8bbe\u5907\u4f5c\u4e3a\u96c6\u56e2 \u5317\u4eac2#DC <\/span>
\n \u6838\u5fc3\u4ea4\u6362\u673a；\u7f16\u53f7\u4e3a<\/span>
\n SW3 <\/span>
\n \u7684\u8bbe\u5907\u4f5c\u4e3a\u8d35\u5dde<\/span>
\n DC <\/span>
\n \u6838\u5fc3\u4ea4\u6362 \u673a；\u7f16\u53f7FW1 <\/span>
\n \u7684\u8bbe\u5907\u4f5c\u4e3a\u96c6\u56e2\u4e92\u8054\u7f51\u51fa\u53e3\u9632\u706b\u5899；\u7f16\u53f7\u4e3a<\/span>
\n FW2 <\/span>
\n \u7684\u8bbe \u5907\u4f5c\u4e3a\u529e\u4e8b\u5904\u9632\u706b\u5899；\u7f16\u53f7\u4e3aRT1 <\/span>
\n \u7684\u8bbe\u5907\u4f5c\u4e3a\u96c6\u56e2\u6838\u5fc3\u8def\u7531\u5668；\u7f16 \u53f7\u4e3aRT2 <\/span>
\n \u7684\u8bbe\u5907\u4f5c\u4e3a\u5206\u516c\u53f8\u8def\u7531\u5668；\u7f16\u53f7\u4e3a<\/span>
\n AC1 <\/span>
\n \u7684\u8bbe\u5907\u4f5c\u4e3a\u5206\u516c\u53f8 \u7684\u6709\u7ebf\u65e0\u7ebf\u667a\u80fd\u4e00\u4f53\u5316\u63a7\u5236\u5668，\u901a\u8fc7\u4e0eAP1 <\/span>
\n \u914d\u5408\u5b9e\u73b0\u6240\u5c5e\u533a\u57df\u65e0\u7ebf \u8986\u76d6\u3002<\/span> <\/p>\n

\u7f51\u7edc\u62d3\u6251\u56fe\u53ca<\/span>
\n IP <\/span>
\n \u5730\u5740\u8868： <\/span> <\/p>\n

1. <\/span>
\n \u7f51\u7edc\u62d3\u6251\u56fe<\/span> <\/p>\n

\"\"<\/span> <\/p>\n

2. <\/span>
\n \u7f51\u7edc\u8bbe\u5907<\/span>
\n IP <\/span>
\n \u5730\u5740\u5206\u914d\u8868<\/span> <\/p>\n

\"\"<\/span> <\/p>\n

\"\" <\/p>\n

\"\" <\/p>\n

\"\" <\/p>\n

\u4e00\u3001 \u5de5\u7a0b\u7edf\u7b79 <\/span><\/h2>\n

1<\/span>． \u804c\u4e1a\u7d20\u517b<\/span><\/h3>\n

(1)<\/span>
\n \u6574\u7406\u8d5b\u4f4d，\u5de5\u5177\u3001\u8bbe\u5907\u5f52\u4f4d，\u4fdd\u6301\u8d5b\u540e\u6574\u6d01\u6709\u5e8f\u3002 <\/span> <\/p>\n

(2)<\/span>
\n \u65e0\u56e0\u9009\u624b\u539f\u56e0\u5bfc\u81f4\u8bbe\u5907\u635f\u574f\u3002 <\/span> <\/p>\n

(3)<\/span>
\n \u6062\u590d\u8c03\u8bd5\u73b0\u573a，\u4fdd\u8bc1\u7f51\u7edc\u548c\u7cfb\u7edf\u5b89\u5168\u8fd0\u884c\u3002<\/span> <\/p>\n

2<\/span>．\u7f51\u7edc\u5e03\u7ebf<\/span><\/h3>\n

\"\"<\/span><\/p>\n

(1)<\/span>
\n \u673a\u67dc\u5de6\u4fa7\u5e03\u7ebf\u9762\u677f\u7f16\u53f7 <\/span>
\n 101<\/span>
\n ；\u673a\u67dc\u53f3\u4fa7\u5e03\u7ebf\u9762\u677f\u7f16\u53f7 <\/span>
\n 102<\/span>
\n \u3002 <\/span> <\/p>\n

(2)<\/span>
\n \u9762\u5bf9\u4fe1\u606f\u5e95\u76d2\u65b9\u5411\u5de6\u4fa7\u4e3a<\/span>
\n 1 <\/span>
\n \u7aef\u53e3\u3001\u53f3\u4fa7\u4e3a<\/span>
\n 2 <\/span>
\n \u7aef\u53e3\u3002\u6240\u6709\u914d\u7ebf\u67b6\u3001 <\/span> <\/p>\n

\u6a21\u5757\u6309\u7167<\/span>
\n 568B <\/span>
\n \u6807\u51c6\u7aef\u63a5\u3002 <\/span> <\/p>\n

(3)<\/span>
\n \u4e3b\u914d\u7ebf\u533a\u914d\u7ebf\u70b9\u4e0e\u5de5\u4f5c\u533a\u914d\u7ebf\u70b9\u8fde\u7ebf\u5bf9\u5e94\u5173\u7cfb\u5982\u4e0b：<\/span> <\/p>\n

\"\"<\/span> <\/p>\n

(4)<\/span>
\n \u94fa\u8bbe\u7ebf\u7f06\u5e76\u7aef\u63a5\u3002\u622a\u53d6<\/span>
\n 2 <\/span>
\n \u6839\u9002\u5f53\u957f\u5ea6\u7684\u53cc\u7ede\u7ebf，\u4e24\u7aef\u5236\u4f5c\u6807\u7b7e， \u7a7f <\/span> <\/p>\n

\u8fc7<\/span>
\n PVC <\/span>
\n \u7ebf\u69fd\u6216\u7ebf\u7ba1\u3002\u53cc\u7ede\u7ebf\u5728\u673a\u67dc\u5185\u90e8\u8fdb\u884c\u5408\u7406\u5e03\u7ebf，\u5e76\u4e14\u901a\u8fc7 \u624e <\/span> <\/p>\n

\u5e26\u5408\u7406\u56fa\u5b9a\u3002\u5c06<\/span>
\n 2 <\/span>
\n \u6839\u53cc\u7ede\u7ebf\u7684\u4e00\u7aef，\u7aef\u63a5\u5728\u914d\u7ebf\u67b6\u76f8\u5e94\u7aef\u53e3，\u53e6\u4e00 <\/span> <\/p>\n

\u7aef\u7aef\u63a5\u4e0a<\/span>
\n RJ45 <\/span>
\n \u6a21\u5757，\u5e76\u4e14\u5b89\u88c5\u4e0a\u4fe1\u606f\u70b9\u9762\u677f，\u5e76\u6807\u6ce8\u6807\u7b7e\u3002 <\/span> <\/p>\n

(5)<\/span>
\n \u8df3\u7ebf\u5236\u4f5c\u4e0e\u6d4b\u8bd5\u3002\u622a\u53d6<\/span>
\n 2 <\/span>
\n \u6839\u5f53\u957f\u5ea6\u7684\u53cc\u7ede\u7ebf，\u7aef\u63a5\u6c34\u6676\u5934，\u6240 \u6709 <\/span> <\/p>\n

\u7f51\u7edc\u8df3\u7ebf\u8981\u6c42\u6309<\/span>
\n 568B <\/span>
\n \u6807\u51c6\u5236\u4f5c，\u4e24\u7aef\u5236\u4f5c\u6807\u7b7e，\u8fde\u63a5\u7f51\u7edc\u4fe1\u606f\u70b9 \u548c <\/span> <\/p>\n

\u76f8\u5e94\u8ba1\u7b97\u673a\u3002\u6839\u636e\u7f51\u7edc\u62d3\u6251\u8981\u6c42，\u622a\u53d6\u9002\u5f53\u957f\u5ea6\u548c\u6570\u91cf\u7684\u53cc\u7ede\u7ebf， \u7aef <\/span> <\/p>\n

\u63a5\u6c34\u6676\u5934，\u63d2\u5165\u76f8\u5e94\u8bbe\u5907\u7684\u76f8\u5173\u7aef\u53e3\u4e0a，\u5b9e\u73b0<\/span>
\n PC <\/span>
\n \u3001\u4fe1\u606f\u70b9\u9762\u677f\u3001 <\/span> <\/p>\n

\u914d\u7ebf\u67b6\u3001\u8bbe\u5907\u4e4b\u95f4\u7684\u8fde\u901a（\u63d0\u793a：\u53ef\u5229\u7528\u673a\u67dc\u4e0a\u81ea\u5e26\u7684\u8bbe\u5907\u8fdb\u884c\u901a\u65ad<\/span> <\/p>\n

\u6d4b\u8bd5）\u3002 <\/span> <\/p>\n

3<\/span>．<\/span>IP <\/span>\u89c4\u5212 <\/span><\/h3>\n

\u4e3a\u4e86\u4e0d\u65ad\u58ee\u5927\u96c6\u56e2\u4e1a\u52a1\u7ecf\u8425\u8303\u56f4，\u96c6\u56e2\u8ba1\u5212\u5728\u4e0a\u6d77\u6210\u7acb\u529e\u4e8b\u5904\u3002 <\/span> <\/p>\n

\u901a\u8fc7\u8c03\u7814，\u8ba1\u5212\u5728\u4e0a\u6d77\u529e\u4e8b\u5904\u8bbe\u7acb\u4e0e<\/span>
\n Internet<\/span>
\n \u8fde\u63a5\u7684<\/span>
\n 4 <\/span>
\n \u4e2a\u4e1a\u52a1\u90e8\u95e8， <\/span> <\/p>\n

\u6bcf\u4e2a\u4e1a\u52a1\u90e8\u95e8\u7684\u6700\u5927\u6240\u9700\u4e3b\u673a\u6570\u5982\u4e0b\u8868\u6240\u793a，\u8981\u6c42\u4ece <\/span>
\n 10.13.10.100\/19 <\/span> <\/p>\n

\u4e3b\u673a\u5730\u5740\u6240\u5728\u7f51\u7edc\u7b2c\u4e00\u4e2a\u7f51\u6bb5\u5f00\u59cb\u8fdb\u884c<\/span>
\n IP <\/span>
\n \u5730\u5740\u89c4\u5212，<\/span>
\n IP <\/span>
\n \u5730\u5740\u6309\u7167\u4e0b <\/span> <\/p>\n

\u8868\u4f9d\u6b21\u5f80\u540e\u987a\u5ef6\u89c4\u5212，\u7f51\u5173\u5730\u5740\u53d6\u6bcf\u4e2a\u7f51\u6bb5\u6700\u540e\u4e00\u4e2a\u53ef\u7528\u5730\u5740，\u8bf7\u5b8c <\/span> <\/p>\n

\u6210\u4e0b\u8868<\/span>
\n IP <\/span>
\n \u5730\u5740\u89c4\u5212\u3002<\/span> <\/p>\n

\"\"<\/span> <\/p>\n

\u4e8c\u3001\u4ea4\u6362\u914d\u7f6e <\/span><\/h2>\n

1<\/span>．\u914d\u7f6e<\/span>vlan<\/span>，<\/span>SW1 <\/span>\u3001<\/span>SW2 <\/span>\u3001<\/span>SW3 <\/span>\u3001<\/span>AC1 <\/span>\u7684\u4e8c\u5c42\u94fe\u8def\u53ea\u5141\u8bb8\u76f8\u5e94 vlan \u901a\u8fc7\u3002<\/span><\/h3>\n

\"\"<\/span> <\/p>\n

\"\"<\/span>
\n SW1:<\/p>\n

vlan 1;10;20;30;40;50<\/p>\n

vlan 1
\n!
\nvlan 10
\n name cp1
\n!
\nvlan 20
\n name yx1
\n!
\nvlan 30
\n name fw1
\n!
\nvlan 40
\n name cw1
\n!
\nvlan 50
\n name rl1<\/p>\n

Interface Ethernet1\/0\/1
\n switchport access vlan 10
\n!
\nInterface Ethernet1\/0\/2
\n switchport access vlan 20
\n!
\nInterface Ethernet1\/0\/3
\n switchport access vlan 30
\n!
\nInterface Ethernet1\/0\/4
\n switchport access vlan 40
\n!
\nInterface Ethernet1\/0\/5
\n switchport access vlan 50
\n ！
\nInterface Ethernet1\/0\/22
\n switchport mode trunk
\n switchport trunk allowed vlan 10;20;30;40;50 \/\/\u8bbe\u7f6e\u4e8c\u5c42\u94fe\u8def\u53ea\u5141\u8bb8\u76f8\u5e94vlan\u901a\u8fc7，\u54ea\u4e9b\u94fe\u8def\u662f\u4e8c\u5c42\u94fe\u8def\u5728\u201c\u7f51\u7edc\u8bbe\u5907\u8fde\u63a5\u8868\u201d\u4e2d\u6807\u6ce8\u4e86<\/p>\n

SW2：
\nvlan 1;10;20;30;40;50<\/p>\n

vlan 1
\n!
\nvlan 10
\n name cp2
\n!
\nvlan 20
\n name yx2
\n!
\nvlan 30
\n name fw2
\n!
\nvlan 40
\n name cw2
\n!
\nvlan 50
\n name rl2<\/p>\n

Interface Ethernet1\/0\/1
\n switchport access vlan 10
\n!
\nInterface Ethernet1\/0\/2
\n switchport access vlan 20
\n!
\nInterface Ethernet1\/0\/3
\n switchport access vlan 30
\n!
\nInterface Ethernet1\/0\/4
\n switchport access vlan 40
\n!
\nInterface Ethernet1\/0\/5
\n switchport access vlan 50
\n ！
\nInterface Ethernet1\/0\/22
\n switchport mode trunk
\n switchport trunk allowed vlan 10;20;30;40;50 \/\/\u8bbe\u7f6e\u4e8c\u5c42\u94fe\u8def\u53ea\u5141\u8bb8\u76f8\u5e94vlan\u901a\u8fc7，\u54ea\u4e9b\u94fe\u8def\u662f\u4e8c\u5c42\u94fe\u8def\u5728\u201c\u7f51\u7edc\u8bbe\u5907\u8fde\u63a5\u8868\u201d\u4e2d\u6807\u6ce8\u4e86
\nSW3:<\/p>\n

vlan 1;10;20;30;40;50<\/p>\n

vlan 1
\n!
\nvlan 10
\n name cp3
\n!
\nvlan 20
\n name yx3
\n!
\nvlan 30
\n name fw3
\n!
\nvlan 50
\n name rl3
\nInterface Ethernet1\/0\/1
\n switchport access vlan 10
\n!
\nInterface Ethernet1\/0\/2
\n switchport access vlan 20
\n!
\nInterface Ethernet1\/0\/3
\n switchport access vlan 30
\n!
\nInterface Ethernet1\/0\/4
\n switchport access vlan 40
\n!
\nInterface Ethernet1\/0\/5
\n switchport access vlan 50<\/p>\n<\/p>\n

2<\/span>．<\/span>SW1 <\/span>\u548c<\/span>SW2 <\/span>\u4e4b\u95f4\u5229\u7528\u4e09\u6761\u88f8\u5149\u7f06\u5b9e\u73b0\u4e92\u901a，\u5176\u4e2d\u4e00\u6761\u88f8 \u5149 \u7f06\u627f\u8f7d\u4e09\u5c42IP <\/span>\u4e1a\u52a1\u3001\u4e00\u6761\u88f8\u5149\u7f06\u627f\u8f7d<\/span>VPN <\/span>\u4e1a\u52a1\u3001\u4e00\u6761\u88f8\u5149\u7f06\u627f\u8f7d \u4e8c \u5c42\u4e1a\u52a1\u3002\u7528\u76f8\u5173\u6280\u672f\u5206\u522b\u5b9e\u73b0\u8d22\u52a1 1 <\/span>\u6bb5\u3001\u8d22\u52a1<\/span>2 <\/span>\u6bb5\u4e1a\u52a1\u8def\u7531\u8868\u4e0e\u5176 \u5b83 \u4e1a\u52a1\u8def\u7531\u8868\u9694\u79bb，\u8d22\u52a1\u4e1a\u52a1VPN <\/span>\u5b9e\u4f8b\u540d\u79f0\u4e3a<\/span>Finance<\/span>\u3002\u627f\u8f7d\u4e8c\u5c42\u4e1a \u52a1 \u7684\u53ea\u6709\u4e00\u6761\u88f8\u5149\u7f06\u901a\u9053，\u914d\u7f6e\u76f8\u5173\u6280\u672f，\u65b9\u4fbf\u540e\u7eed\u94fe\u8def\u6269\u5bb9\u4e0e\u5197\u4f59 \u5907 \u4efd，\u7f16\u53f7\u4e3a 1<\/span>，\u7528<\/span>LACP <\/span>\u534f\u8bae，<\/span>SW1 <\/span>\u4e3a<\/span>active<\/span>，<\/span>SW2 <\/span>\u4e3a<\/span>passive<\/span>；\u91c7 \u7528 \u6e90\u3001\u76ee\u7684IP \u8fdb\u884c\u5b9e\u73b0\u6d41\u91cf\u8d1f\u8f7d\u5206\u62c5\u3002 <\/span><\/h3>\n

SW1：<\/p>\n

ip vrf Finance \/\/\u521b\u5efa\u8d22\u52a1VPN\u5b9e\u4f8b
\n!
\ninterface Vlan40 \u2014\u2014 \u8d22\u52a11\u6bb5
\n ip vrf forwarding Finance \/\/\u5c06\u6b64\u63a5\u53e3\u7ed1\u5b9a\u5230vpn\u5b9e\u4f8bFinance\u4e2d（\u7ed1\u5b9a\u5b8cIP\u5730\u5740\u4f1a\u88ab\u6e05\u7a7a，\u9700\u8981\u91cd\u65b0\u914d\u7f6e）
\n ip address 10.13.14.1 255.255.255.0
\n!
\ninterface Vlan1023 –\u627f\u8f7dVPN\u4e1a\u52a1\u7684VLAN\u4e5f\u9700\u8981\u52a0\u5165\u5230VPN\u5b9e\u4f8b\u5f53\u4e2d
\n ip vrf forwarding Finance
\n ip address 10.13.255.1 255.255.255.252
\n！
\nload-balance dst-src-ip –\u8bbe\u7f6e\u6d41\u91cf\u8d1f\u8f7d\u5206\u62c5\u6a21\u5f0f\u4e3a\u6e90\u3001\u76ee\u7684IP
\n!
\nport-group 1 –\u521b\u5efa\u7f16\u53f7\u4e3a1\u7684\u7aef\u53e3\u805a\u5408\u7ec4<\/p>\n

Interface Ethernet1\/0\/22 –\u8fdb\u5165\u627f\u8f7d\u4e8c\u5c42\u4e1a\u52a1\u7684\u7aef\u53e3
\n port-group 1 mode active –\u7ed1\u5b9a\u7aef\u53e3\u805a\u5408\u7ec41\u5e76\u5c06\u6a21\u5f0f\u8bbe\u7f6e\u6210active<\/p>\n

SW2:
\nip vrf Finance
\n!
\ninterface Vlan40
\n ip vrf forwarding Finance
\n ip address 10.13.24.1 255.255.255.0
\n!
\ninterface Vlan1023
\n ip vrf forwarding Finance
\n ip address 10.13.255.2 255.255.255.252
\n!
\nload-balance dst-src-ip –\u8bbe\u7f6e\u6d41\u91cf\u8d1f\u8f7d\u5206\u62c5\u6a21\u5f0f\u4e3a\u6e90\u3001\u76ee\u7684IP
\n!
\nport-group 1 –\u521b\u5efa\u7f16\u53f7\u4e3a1\u7684\u7aef\u53e3\u805a\u5408\u7ec4<\/p>\n

Interface Ethernet1\/0\/22 –\u8fdb\u5165\u627f\u8f7d\u4e8c\u5c42\u4e1a\u52a1\u7684\u7aef\u53e3
\n port-group 1 mode passive –\u7ed1\u5b9a\u7aef\u53e3\u805a\u5408\u7ec41\u5e76\u5c06\u6a21\u5f0f\u8bbe\u7f6e\u6210passive <\/p>\n

3<\/span>．<\/span>SW3 <\/span>\u9488\u5bf9\u6bcf\u4e2a\u4e1a\u52a1<\/span>VLAN <\/span>\u7684\u7b2c\u4e00\u4e2a\u63a5\u53e3\u914d\u7f6e<\/span>Loopback <\/span>\u547d\u4ee4， \u6a21\u62df\u63a5\u53e3UP<\/span>，\u65b9\u4fbf\u540e\u7eed\u4e1a\u52a1\u9a8c\u8bc1\u4e0e\u6d4b\u8bd5\u3002 <\/span><\/h3>\n

SW3:<\/p>\n

Interface Ethernet1\/0\/1-5
\n loopback<\/p>\n

4<\/span>．\u5c06<\/span>SW3 <\/span>\u6a21\u62df\u4e3a<\/span>Internet <\/span>\u4ea4\u6362\u673a，\u5b9e\u73b0\u4e0e\u96c6\u56e2\u5176\u5b83\u4e1a\u52a1\u8def\u7531\u8868 \u9694\u79bb，Internet <\/span>\u8def\u7531\u8868<\/span>VPN <\/span>\u5b9e\u4f8b\u540d\u79f0\u4e3a<\/span>Internet<\/span>\u3002\u5c06<\/span>SW3 <\/span>\u6a21\u62df\u529e\u4e8b\u5904 \u4ea4\u6362\u673a，\u5b9e\u73b0\u4e0e\u96c6\u56e2\u5176\u5b83\u4e1a\u52a1\u8def\u7531\u8868\u9694\u79bb，\u529e\u4e8b\u5904\u8def\u7531\u8868VPN <\/span>\u5b9e\u4f8b \u540d\u79f0\u4e3aOffice<\/span>\u3002 <\/span><\/h3>\n

SW3:<\/p>\n

ip vrf Internet \/\/\u914d\u7f6eVPN \u5b9e\u4f8b\u540d\u79f0\u4e3aInternet
\n!
\nip vrf Office \/\/\u914d\u7f6eVPN \u5b9e\u4f8b\u540d\u79f0\u4e3aOffice
\n!
\ninterface Vlan110
\n ip vrf forwarding Office
\n ip address 10.13.110.1 255.255.255.0
\n ipv6 address 2001:10:13:110::1\/64 \/\/\u6ce8\u610f，\u5982\u679c\u5728\u7ed1\u5b9aVRF\u4e4b\u524d\u5df2\u6709IPv4\u5730\u5740，\u7ed1\u5b9a\u540e\u4f1a\u88ab\u5220\u9664
\n!
\ninterface Vlan120
\n ip vrf forwarding Office
\n ip address 10.13.120.1 255.255.255.0
\n ipv6 address 2001:10:13:120::1\/64
\n!
\ninterface Vlan1015
\n ip vrf forwarding Office
\n ip address 10.13.255.46 255.255.255.252
\n!
\ninterface Vlan1017
\n ip vrf forwarding Internet
\n ip address 200.200.200.1 255.255.255.252
\n!
\ninterface Vlan1018
\n ip vrf forwarding Internet
\n ip address 200.200.200.5 255.255.255.252
\n!
\ninterface Loopback2
\n ip vrf forwarding Office
\n ip address 10.13.3.2 255.255.255.255
\n ipv6 address 2001:10:13:3::2\/128
\n!
\ninterface Loopback3
\n ip vrf forwarding Internet
\n ip address 200.200.3.3 255.255.255.255
\n ipv6 address 2001:200:200:3::3\/128<\/p>\n

5<\/span>．<\/span>SW1 <\/span>\u6cd5\u52a1\u7269\u7406\u63a5\u53e3\u9650\u5236\u6536\u3001\u53d1\u6570\u636e\u5360\u7528\u7684\u5e26\u5bbd\u5206\u522b\u4e3a<\/span>100Mbps<\/span>\u3001 90Mbps，\u7981\u6b62\u91c7\u7528\u8bbf\u95ee\u63a7\u5236\u5217\u8868，\u53ea\u5141\u8bb8<\/span>IP <\/span>\u4e3b\u673a\u4f4d\u4e3a<\/span>20-30 <\/span>\u7684\u6570\u636e \u5305\u8fdb\u884c\u8f6c\u53d1；\u7981\u6b62\u914d\u7f6e\u8bbf\u95ee\u63a7\u5236\u5217\u8868，\u5b9e\u73b0\u7aef\u53e3\u95f4\u4e8c\u5c42\u6d41\u91cf\u65e0\u6cd5\u4e92\u901a， \u7ec4\u540d\u79f0FW<\/span>\u3002 <\/span><\/h3>\n

SW1:<\/p>\n

Interface Ethernet1\/0\/3 –\u6cd5\u52a1\u5bf9\u5e94\u7684\u7aef\u53e3
\n bandwidth control 100000 receive \/\/\u8bbe\u7f6e\u63a5\u6536\u5e26\u5bbd\u4e3a100Mbps
\n bandwidth control 90000 transmit \/\/\u8bbe\u7f6e\u53d1\u9001\u5e26\u5bbd\u4e3a90Mbps<\/p>\n

\u7981\u6b62\u91c7\u7528\u8bbf\u95ee\u63a7\u5236\u5217\u8868，\u53ea\u5141\u8bb8IP\u4e3b\u673a\u4f4d\u4e3a20-30\u7684\u6570\u636e\u5305\u8fdb\u884c\u8f6c\u53d1：<\/p>\n

SW1：
\nam enable –\u5168\u5c40\u542f\u7528AM\u529f\u80fd
\nInterface Ethernet1\/0\/3
\n am port –\u7aef\u53e3\u542f\u7528AM\u529f\u80fd
\n am ip-pool 10.13.13.20 10 –\u8bbe\u7f6e\u5141\u8bb8\u7684IP\u5730\u5740，\u4e0d\u5728\u8fd9\u4e2a\u8303\u56f4\u7684\u4e0d\u8f6c\u53d1\u300210.10.13.20\u540e\u9762\u8ddf\u768410\u7684\u610f\u601d\u662f20\u5f80\u540e\u5ef610\u4e2aIP，\u4e5f\u5c31\u662f\u4e3b\u673a\u4f4d20-30<\/p>\n

\u7981\u6b62\u914d\u7f6e\u8bbf\u95ee\u63a7\u5236\u5217\u8868，\u5b9e\u73b0\u7aef\u53e3\u95f4\u4e8c\u5c42\u6d41\u91cf\u65e0\u6cd5\u4e92\u901a，\u7ec4\u540d\u79f0FW：
\nSW1：
\nisolate-port apply l2 –\u8bbe\u7f6e\u7aef\u53e3\u9694\u79bb\u4e3a2\u5c42\u9694\u79bb\u6a21\u5f0f
\nisolate-port group FW switchport interface Ethernet1\/0\/3 –\u8bbe\u7f6e\u7aef\u53e3\u9694\u79bb\u7ec4FW\u5e76\u7ed1\u5b9a\u6cd5\u52a1\u5bf9\u5e94\u7684\u7aef\u53e3 <\/p>\n

6<\/span>．\u914d\u7f6e <\/span>SW1 <\/span>\u76f8\u5173\u7279\u6027\u5b9e\u73b0\u62a5\u6587\u4e0a\u9001\u8bbe\u5907<\/span>CPU <\/span>\u7684\u524d\u7aef\u6574\u4f53\u4e0a\u5bf9 \u653b\u51fb\u62a5\u6587\u8fdb\u884c\u62e6\u622a，\u5f00\u542f\u65e5\u5fd7\u8bb0\u5f55\u529f\u80fd，\u91c7\u6837\u5468\u671f 10s <\/span>\u4e00\u6b21，\u6062\u590d\u5468\u671f\u4e3a 120s<\/span>，\u4ece\u800c\u4fdd\u969c<\/span>CPU <\/span>\u7a33\u5b9a\u8fd0\u884c\u3002<\/span><\/h3>\n

SW1：
\ncpu-protect enable –\u5f00\u542fcpu\u4fdd\u62a4\u529f\u80fd
\ncpu-protect log enable –\u5f00\u542fcpu\u65e5\u5fd7\u8bb0\u5f55\u529f\u80fd
\ncpu-protect interval 10 –\u91c7\u6837\u5468\u671f10s
\ncpu-protect recovery-time 120 –\u6062\u590d\u5468\u671f120s
\ncpu-protect per-ip limit-speed 200 –\u8fd9\u4e2a\u662f\u8bbe\u5907\u9ed8\u8ba4\u6572\u4e0a\u53bb\u7684，\u4e0d\u9700\u8981\u6572
\ncpu-protect per-mac limit-speed 200 –\u8fd9\u4e2a\u4e5f\u662f\u8bbe\u5907\u9ed8\u8ba4\u6572\u4e0a\u53bb\u7684<\/p>\n

7<\/span>．\u5bf9<\/span>SW1 <\/span>\u4e0e<\/span>FW1 <\/span>\u4e92\u8fde\u6d41\u91cf\u955c\u50cf\u5230<\/span>SW1 E1\/0\/1<\/span>，\u4f1a\u8bdd\u5217\u8868\u4e3a<\/span>1<\/span>\u3002<\/span><\/h3>\n

SW1：
\nmonitor session 1 source interface Ethernet1\/0\/19 tx –\u521b\u5efa\u4e00\u4e2a\u7aef\u53e3\u955c\u50cf，\u4f1a\u8bdd\u5217\u8868\u4e3a1，\u6e90\u63a5\u53e3\u4e3aSW1\u548cFW1\u7684\u4e92\u8054\u63a5\u53e3
\nmonitor session 1 source interface Ethernet1\/0\/19 rx
\nmonitor session 1 destination interface Ethernet1\/0\/1 –\u8bbe\u7f6e\u76ee\u7684\u7aef\u53e3
\n! <\/p>\n

\u4e09\u3001\u8def\u7531\u8c03\u8bd5<\/span><\/h2>\n

1<\/span>．\u914d\u7f6e\u63a5\u53e3<\/span>ipv4 <\/span>\u5730\u5740\u548c<\/span>ipv6 <\/span>\u5730\u5740，\u4e92\u8054\u63a5\u53e3<\/span>ipv6 <\/span>\u5730\u5740\u7528\u672c\u5730 \u94fe\u8def\u5730\u5740\u3002 <\/span><\/h3>\n

RT<\/p>\n

ipv6 unicast-routing \u5f00\u542fIPV6\u672c\u5730\u94fe\u8def\u5730\u5740<\/p>\n

\u8fdb\u5165\u63a5\u53e3
\nipv6 enable <\/p>\n

2<\/span>．<\/span>SW2 <\/span>\u914d\u7f6e<\/span>DHCPv4 <\/span>\u548c<\/span>DHCPv6 <\/span>，\u5206\u522b\u4e3a\u603b\u516c\u53f8\u4ea7\u54c1 <\/span>1 <\/span>\u6bb5\u3001\u603b \u516c\u53f8\u4ea7\u54c12 <\/span>\u6bb5\u3001\u5206\u516c\u53f8<\/span>Vlan130 <\/span>\u3001\u5206\u516c\u53f8<\/span>Vlan140 <\/span>\u548c\u5206\u516c\u53f8<\/span>Vlan150 \u5206\u914d\u5730\u5740\u3002IPv4 <\/span>\u5730\u5740\u6c60\u540d\u79f0\u5206\u522b\u4e3a<\/span>Poolv4-Vlan11 <\/span>\u3001<\/span>Poolv4-Vlan21 <\/span>\u3001 Poolv4-Vlan130 \u3001<\/span>Poolv4-Vlan140 <\/span>\u3001<\/span>Poolv4-Vlan150 <\/span>，\u6392\u9664\u7f51\u5173，<\/span>DNS \u4e3a 10.13.210.101 \u548c 10.13.220.101 <\/span>\u3002 <\/span>IPv6 \u5730 \u5740 \u6c60\u540d \u79f0 \u5206 \u522b \u4e3a Poolv6-Vlan11 \u3001Poolv6-Vlan21 <\/span>\u3001<\/span>Poolv6-Vlan130 <\/span>\u3001<\/span>Poolv6-Vlan140<\/span>\u3001 Poolv6-Vlan150，<\/span>IPv6 <\/span>\u5730\u5740\u6c60\u7528\u7f51\u7edc\u524d\u7f00\u8868\u793a<\/span>, <\/span>\u6392\u9664\u7f51\u5173，<\/span>DNS \u4e3a 2400:3200::1<\/span>\u3002<\/span>PC1 <\/span>\u4fdd\u7559\u5730\u5740 <\/span>10.13.11.9 <\/span>\u548c<\/span>2001:10:13:11::9<\/span>，<\/span>PC2 <\/span>\u4fdd \u7559 \u5730\u5740 10.13.21.9 <\/span>\u548c <\/span>2001:10:13:21::9 <\/span>，<\/span>AP1 <\/span>\u4fdd\u7559\u5730\u5740 10.13.130.9 \u548c <\/span>2001:10:13:130::9<\/span>\u3002<\/span>SW1<\/span>\u3001<\/span>AC1 <\/span>\u4e2d\u7ee7\u5730\u5740\u4e3a<\/span>SW2 Loopback1 \u5730\u5740，<\/span>SW1 <\/span>\u542f\u7528<\/span>DHCPv4 <\/span>\u548c<\/span>DHCPv6 snooping<\/span>，\u5982\u679c<\/span>E1\/0\/1 \u8fde\u63a5dhcpv4 <\/span>\u670d\u52a1\u5668， \u5219\u5173\u95ed\u8be5\u7aef\u53e3，\u6062\u590d\u65f6\u95f4\u4e3a 10 <\/span>\u5206\u949f\u3002 <\/span><\/h3>\n

SW1:
\nservice dhcp \u5f00\u542fdhcp
\n!
\nip forward-protocol udp bootps \u5f00\u542fdhcp\u4e2d\u7ee7\u529f\u80fd
\n!
\nip dhcp snooping enable
\n!
\nservice dhcpv6 \u5f00\u542fdhcpv6
\n!
\nsavi enable
\n savi ipv6 dhcp-only enable
\n!
\nInterface Ethernet1\/0\/1
\n ip dhcp snooping action shutdown recovery 600 \u8bbe\u7f6e\u6062\u590d\u65f6\u95f4\u4e3a10\u5206\u949f
\n!
\ninterface Vlan10
\n no ipv6 nd suppress-ra
\n ipv6 nd managed-config-flag
\n ipv6 nd other-config-flag
\n ip helper-address 10.13.2.1
\n ipv6 dhcp relay destination 2001:10:13:2::1 \u8bbe\u7f6eDHCPv6\u4e2d\u7ee7\u76ee\u6807<\/p>\n

SW2:<\/p>\n

service dhcp
\n!
\nip forward-protocol udp bootps
\n!
\nip dhcp pool Pool-Vlan150
\n network-address 10.13.150.0 255.255.255.0
\n default-router 10.13.150.1
\n dns-server 10.13.210.101 10.13.220.101
\n!
\nip dhcp pool Poolv4-Vlan11
\n network-address 10.13.11.0 255.255.255.0
\n default-router 10.13.11.1
\n dns-server 10.13.210.101 10.13.220.101
\n!
\nip dhcp pool Poolv4-Vlan21
\n network-address 10.13.21.0 255.255.255.0
\n default-router 10.13.21.1
\n dns-server 10.13.210.101 10.13.220.101
\n!
\nip dhcp pool Poolv4-Vlan130
\n network-address 10.13.130.0 255.255.255.0
\n default-router 10.13.130.1
\n dns-server 10.13.210.101 10.13.220.101
\n!
\nip dhcp pool Poolv4-Vlan140
\n network-address 10.13.140.0 255.255.255.0
\n default-router 10.13.140.1
\n dns-server 10.13.210.101 10.13.220.101
\n!
\nip dhcp pool AP1
\n host 10.13.130.9 255.255.255.0
\n hardware-address 98-0E-24-AB-83-F1
\n!
\nip dhcp pool PC1
\n host 10.13.11.9 255.255.255.0
\n hardware-address 00-03-0F-D9-CD-C0 \u7ed1\u5b9a\u4e3b\u673amac\u5730\u5740
\n!
\nip dhcp pool PC2
\n host 10.13.21.9 255.255.255.0
\n hardware-address C0-18-03-BB-9F-94 \u7ed1\u5b9a\u4e3b\u673amac\u5730\u5740
\n!
\n!
\nservice dhcpv6
\n!
\nipv6 dhcp pool Poolv6-Vlan150
\n network-address 2001:10:13:150::1 64
\n excluded-address 2001:10:13:150::1
\n dns-server 2400:3200::1
\n!
\nipv6 dhcp pool Poolv6-Vlan140
\n network-address 2001:10:13:140::1 64
\n excluded-address 2001:10:13:140::1
\n dns-server 2400:3200::1
\n!
\nipv6 dhcp pool Poolv6-Vlan130
\n network-address 2001:10:13:130::1 64
\n static-binding 2001:10:13:130::9 98-0e-24-ab-83-f1 \u4fdd\u7559\u5730\u5740\u5e76\u4e14\u7ed1\u5b9amac\u5730\u5740
\n excluded-address 2001:10:13:130::1
\n dns-server 2400:3200::1
\n!
\nipv6 dhcp pool Poolv6-Vlan21
\n network-address 2001:10:13:21::1 64
\n static-binding 2001:10:13:21::9 c0-18-03-bb-9f-94 \u4fdd\u7559\u5730\u5740\u5e76\u4e14\u7ed1\u5b9amac\u5730\u5740
\n excluded-address 2001:10:13:21::1
\n dns-server 2400:3200::1
\n!
\nipv6 dhcp pool Poolv6-Vlan11
\n network-address 2001:10:13:11::1 64
\n static-binding 2001:10:13:11::9 00-03-0f-d9-cd-c0 \u4fdd\u7559\u5730\u5740\u5e76\u4e14\u7ed1\u5b9amac\u5730\u5740
\n excluded-address 2001:10:13:11::9
\n dns-server 2400:3200::1<\/p>\n

AC1:
\nservice dhcp
\n!
\nip forward-protocol udp bootps
\n!
\nservice dhcpv6
\n!
\ninterface Vlan130
\n no ipv6 nd suppress-ra
\n ipv6 nd managed-config-flag
\n ipv6 nd other-config-flag
\n ip helper-address 10.13.2.1
\n ipv6 dhcp relay destination 2001:10:13:2::1
\n!
\ninterface Vlan140
\n no ipv6 nd suppress-ra
\n ipv6 nd managed-config-flag
\n ipv6 nd other-config-flag
\n ip helper-address 10.13.2.1
\n ipv6 dhcp relay destination 2001:10:13:2::1
\n!
\ninterface Vlan150
\n no ipv6 nd suppress-ra
\n ipv6 nd managed-config-flag
\n ipv6 nd other-config-flag
\n ip helper-address 10.13.2.1
\n ipv6 dhcp relay destination 2001:10:13:2::1
\n! <\/p>\n

3<\/span>．<\/span>SW1 <\/span>\u3001<\/span>SW2 <\/span>\u3001<\/span>SW3 <\/span>\u3001<\/span>RT1 <\/span>\u4ee5\u592a\u94fe\u8def\u3001<\/span>RT2 <\/span>\u4ee5\u592a\u94fe\u8def\u3001<\/span>FW1 <\/span>\u3001 FW2\u3001<\/span>AC1 <\/span>\u4e4b\u95f4\u8fd0\u884c<\/span>OSPFv2 <\/span>\u548c<\/span>OSPFv3 <\/span>\u534f\u8bae（\u8def\u7531\u6a21\u5f0f\u53d1\u5e03\u7f51\u7edc\u7528 \u63a5\u53e3\u5730\u5740，BGP <\/span>\u534f\u8bae\u9664\u5916）\u3002 <\/span><\/h3>\n

(1)SW1<\/span>\u3001<\/span>SW2<\/span>\u3001<\/span>SW3<\/span>\u3001<\/span>RT1<\/span>\u3001<\/span>RT2<\/span>\u3001<\/span>FW1 <\/span>\u4e4b\u95f4<\/span>OSPFv2 <\/span>\u548c<\/span>OSPFv3 <\/span>\u534f \u8bae，\u8fdb\u7a0b 1<\/span>，\u533a\u57df<\/span>0<\/span>，\u5206\u522b\u53d1\u5e03<\/span>loopback1 <\/span>\u5730\u5740\u8def\u7531\u548c\u4ea7\u54c1\u8def\u7531， FW1 \u901a\u544a<\/span>type1 <\/span>\u9ed8\u8ba4\u8def\u7531\u3002<\/span><\/h4>\n

SW1:<\/p>\n

router ospf 1
\n ospf router-id 10.13.1.1
\n network 10.13.1.1\/32 area 0 \/\/\u53d1\u5e03loopback1\u5730\u5740\u8def\u7531
\n network 10.13.11.0\/24 area 0 \/\/\u53d1\u5e03\u4ea7\u54c1\u8def\u7531
\n network 10.13.255.0\/30 area 0
\n network 10.13.255.4\/30 area 0
\n network 10.13.255.12\/30 area 0
\n!
\nrouter ipv6 ospf 1
\n router-id 10.13.1.1
\n!
\ninterface Vlan10
\n ipv6 router ospf area 0 tag 1
\n!
\ninterface Vlan1019
\n ipv6 router ospf area 0 tag 1
\n!
\ninterface Vlan1020
\n ipv6 router ospf area 0 tag 1
\n!
\ninterface Vlan1022
\n ipv6 router ospf area 0 tag 1
\n!
\ninterface Loopback1
\n ipv6 router ospf area 0 tag 1<\/p>\n

SW2:<\/p>\n

router ospf 1
\n ospf router-id 10.13.2.1
\n network 10.13.2.1\/32 area 0 \/\/\u53d1\u5e03loopback1\u5730\u5740\u8def\u7531
\n network 10.13.255.0\/30 area 0 \/\/\u53d1\u5e03\u4ea7\u54c1\u8def\u7531
\n network 10.13.255.8\/30 area 0
\n network 10.13.255.20\/30 area 0
\n!
\nrouter ipv6 ospf 1
\n router-id 10.13.2.1
\n!
\ninterface Vlan10
\n ipv6 router ospf area 0 tag 1
\n!
\ninterface Vlan1019
\n ipv6 router ospf area 0 tag 1
\n!
\ninterface Vlan1020
\n ipv6 router ospf area 0 tag 1
\n!
\ninterface Vlan1022
\n ipv6 router ospf area 0 tag 1
\n!
\ninterface Loopback1
\n ipv6 router ospf area 0 tag 1<\/p>\n

SW3:
\nrouter ospf 1
\n ospf router-id 10.13.3.1
\n network 10.13.3.1\/32 area 0 \/\/\u53d1\u5e03loopback1\u5730\u5740\u8def\u7531
\n network 10.13.31.0\/24 area 0 \/\/\u53d1\u5e03\u4ea7\u54c1\u8def\u7531
\n network 10.13.255.4\/30 area 0
\n network 10.13.255.8\/30 area 0
\n!
\nrouter ipv6 ospf 1
\n router-id 10.13.3.1
\n!
\ninterface Vlan10
\n ipv6 router ospf area 0 tag 1
\n!
\ninterface Vlan1019
\n ipv6 router ospf area 0 tag 1
\n!
\ninterface Vlan1020
\n ipv6 router ospf area 0 tag 1
\n!
\ninterface Loopback1
\n ipv6 router ospf area 0 tag 1<\/p>\n

RT1:
\nrouter ospf 1
\nospf router-id 10.13.5.1
\nnetwork 10.13.5.1 255.255.255.255 area 0 \/\/\u53d1\u5e03loopback1\u5730\u5740\u8def\u7531
\nnetwork 10.13.255.20 255.255.255.252 area 0
\nnetwork 10.13.255.28 255.255.255.252 area 0
\nnetwork 10.13.255.16 255.255.255.252 area 0
\nnetwork 10.13.255.24 255.255.255.252 area 0
\n!
\nipv6 unicast-routing \/\/\u5f00\u542fIPv6\u5355\u64ad\u8def\u7531
\n!
\nrouter ospfv3 1
\n router-id 10.13.5.1
\n!
\ninterface Loopback1
\n ipv6 enable
\n ipv6 ospf 1 area 0
\n!
\ninterface GigaEthernet0\/0
\n ipv6 enable
\n ipv6 ospf 1 area 0
\n!
\ninterface GigaEthernet0\/1
\n ipv6 enable
\n ipv6 ospf 1 area 0
\n!
\ninterface GigaEthernet0\/2
\n ipv6 enable
\n ipv6 ospf 1 area 0
\n!
\ninterface GigaEthernet0\/3
\n ipv6 enable
\n ipv6 ospf 1 area 0
\n! <\/p>\n

RT2:
\nrouter ospf 1
\n router-id 10.13.6.1
\n network 10.13.6.1 255.255.255.255 area 0
\n network 200.200.200.4 255.255.255.252 area 0
\n network 10.13.255.28 255.255.255.252 area 0
\n network 10.13.255.40 255.255.255.252 area 0 <\/p>\n

!
\nipv6 unicast-routing \/\/\u5f00\u542fIPv6\u5355\u64ad\u8def\u7531
\n!
\nrouter ospfv3 1
\n router-id 10.13.6.1 <\/p>\n

interface Loopback1
\n ipv6 enable
\n ipv6 ospf 1 area 0
\n!
\ninterface GigaEthernet0\/0
\n ipv6 enable
\n ipv6 ospf 1 area 0
\n!
\ninterface GigaEthernet0\/1
\n ipv6 enable
\n ipv6 ospf 1 area 0
\n !
\n interface GigaEthernet0\/3
\n ipv6 enable
\n ipv6 ospf 1 area 0 <\/p>\n

FW1:
\n router ospf 1
\n router-id 10.13.7.1
\n default-information originate always type 1 \/\/\u8bbe\u7f6etype\u9ed8\u8ba4\u8def\u7531
\n network 10.13.7.1\/32 area 0
\n network 10.13.255.12\/30 area 0
\n network 200.200.200.0\/30 area 0
\n network 10.13.255.16\/30 area 0
\n !
\n ipv6 router ospf 1
\n router-id 10.13.7.1
\n !
\n interface loopback1
\n ipv6 enable
\n ipv6 ospf 1 area 0
\n !
\n interface ethernet0\/1
\n ipv6 enable
\n ipv6 ospf 1 area 0
\n !
\n interface ethernet0\/2
\n ipv6 enable
\n ipv6 ospf 1 area 0
\n !
\n interface ethernet0\/3
\n ipv6 enable
\n ipv6 ospf 1 area 0 <\/p>\n

(2)RT2 <\/span>\u4e0e<\/span>AC1 <\/span>\u4e4b\u95f4\u8fd0\u884c<\/span>OSPFv2 <\/span>\u534f\u8bae，\u8fdb\u7a0b <\/span>1<\/span>，<\/span>nssa no-summary \u533a\u57df1<\/span>；<\/span>AC1 <\/span>\u53d1\u5e03<\/span>loopback1 <\/span>\u5730\u5740\u8def\u7531\u3001\u4ea7\u54c1\u548c\u8425\u9500\u8def\u7531，\u7528<\/span>prefix-list <\/span>\u91cd\u53d1\u5e03loopback3<\/span>\u3002 <\/span><\/h4>\n

RT2:
\nrouter ospf 1
\nrouter-id 10.13.6.1
\nnetwork 10.13.255.40 255.255.255.252 area 1 \/\/\u53d1\u5e03\u4e0eAC1\u7684\u76f4\u8fde\u8def\u7531
\narea 1 nssa no-summary <\/p>\n

AC1:<\/p>\n

ip prefix-list ACL-Loopback3-IPv4 seq 5 permit 10.13.4.3\/32
\n!
\nroute-map ACL-Loopback3-IPv4 permit 10
\n match ip address prefix-list ACL-Loopback3-IPv4
\n!
\nrouter ospf 1
\nrouter-id 10.13.4.1
\narea 1 nssa no-summary
\nnetwork 10.13.4.1\/32 area 1 \/\/\u53d1\u5e03Loopback1\u5730\u5740\u8def\u7531
\nnetwork 10.13.140.0\/24 area 1 \/\/\u53d1\u5e03\u4ea7\u54c1\u8def\u7531
\nnetwork 10.13.150.0\/24 area 1 \/\/\u53d1\u5e03\u8425\u9500\u8def\u7531
\nnetwork 10.13.255.40\/30 area 1 \/\/\u53d1\u5e03\u4e0eRT2\u7684\u76f4\u8fde\u8def\u7531
\nredistribute connected route-map ACL-Loopback3-IPv4 \/\/\u91cd\u53d1\u5e03Loopback3 <\/p>\n

(3)RT2 <\/span>\u4e0e<\/span>AC1 <\/span>\u4e4b\u95f4\u8fd0\u884c<\/span>OSPFv3 <\/span>\u534f\u8bae，\u8fdb\u7a0b <\/span>1<\/span>，<\/span>stub no-summary \u533a\u57df 1<\/span>；<\/span>AC1 <\/span>\u53d1\u5e03<\/span>loopback1 <\/span>\u5730\u5740\u8def\u7531\u3001\u4ea7\u54c1\u548c\u8425\u9500\u3002<\/span><\/h4>\n

RT2:
\nrouter ospfv3 1
\nrouter-id 10.13.6.1
\n area 1 stub no-summary
\n!
\ninterface GigaEthernet0\/1
\n ipv6 enable
\n ipv6 ospf 1 area 1 <\/p>\n

AC1:
\nrouter ipv6 ospf 1
\n router-id 10.13.4.1
\n area 1 stub no-summary
\n!
\ninterface Loopback1
\n ipv6 router ospf area 1 tag 1
\n!
\ninterface Vlan1001
\n ipv6 router ospf area 1 tag 1
\n!
\ninterface Vlan140
\n ipv6 router ospf area 1 tag 1
\n!
\ninterface Vlan150
\n ipv6 router ospf area 1 tag 1 <\/p>\n

(4)SW3 <\/span>\u6a21\u62df\u529e\u4e8b\u5904\u4ea7\u54c1\u548c\u8425\u9500\u63a5\u53e3\u914d\u7f6e\u4e3a<\/span>loopback <\/span>，\u6a21\u62df\u63a5\u53e3 up\u3002<\/span>SW3 <\/span>\u6a21\u62df\u529e\u4e8b\u5904\u4e0e<\/span>FW2 <\/span>\u4e4b\u95f4\u8fd0\u884c<\/span>OSPFv2 <\/span>\u534f\u8bae，\u8fdb\u7a0b<\/span>2<\/span>，\u533a\u57df<\/span>2<\/span>，<\/span>SW3 \u6a21\u62df\u529e\u4e8b\u5904\u53d1\u5e03loopback2<\/span>\u3001\u4ea7\u54c1\u548c\u8425\u9500\u3002<\/span>SW3 <\/span>\u6a21\u62df\u529e\u4e8b\u5904\u914d\u7f6e <\/span>ipv6 \u9ed8\u8ba4\u8def\u7531；FW2 <\/span>\u5206\u522b\u914d\u7f6e\u5230<\/span>SW3 <\/span>\u6a21\u62df\u529e\u4e8b\u5904<\/span>loopback2 <\/span>\u3001\u4ea7\u54c1 \u548c\u8425\u9500\u7684ipv6 <\/span>\u660e\u7ec6\u9759\u6001\u8def\u7531，<\/span>FW2 <\/span>\u91cd\u53d1\u5e03\u9759\u6001\u8def\u7531\u5230<\/span>OSPFv3 <\/span>\u534f\u8bae\u3002 <\/span><\/h4>\n

SW3 Office:<\/p>\n

Interface Ethernet1\/0\/11 \/\/ \u6a21\u62df\u529e\u4e8b\u5904\u4ea7\u54c1\u63a5\u53e3
\n loopback
\n!
\nInterface Ethernet1\/0\/12 \/\/ \u6a21\u62df\u529e\u4e8b\u5904\u8425\u9500\u63a5\u53e3
\n loopback
\n!
\nrouter ospf 2 vrf Office
\n ospf router-id 10.13.3.2
\n network 10.13.3.2\/32 area 2 \/\/\u53d1\u5e03loopback2\u8def\u7531
\n network 10.13.110.0\/24 area 2 \/\/\u53d1\u5e03\u4ea7\u54c1\u8def\u7531
\n network 10.13.120.0\/24 area 2 \/\/\u53d1\u5e03\u8425\u9500\u8def\u7531
\n network 10.13.255.44\/30 area 2
\n!
\nrouter ipv6 ospf 2 vrf Office
\n router-id 10.13.3.2
\n!
\ninterface Vlan110
\n ipv6 router ospf area 2 tag 2
\n!
\ninterface Vlan120
\n ipv6 router ospf area 2 tag 2
\n!
\ninterface Vlan1015
\n ipv6 router ospf area 2 tag 2
\n!
\ninterface Loopback2
\n ipv6 router ospf area 2 tag 2
\n！
\nipv6 route ::\/0 :: Vlan1015 \/\/\u914d\u7f6eipv6\u9ed8\u8ba4\u8def\u7531<\/p>\n

FW2:<\/p>\n

router ospf
\n router-id 10.13.8.1
\n network 10.13.8.1\/32 area 2
\n network 10.13.255.44\/30 area 2
\n!
\nrouter ipv6 ospf 2
\n router-id 10.13.8.1
\n!
\n interface loopback2
\n ipv6 enable
\n ipv6 ospf 1 area 2
\n!
\nInterface Ethernet0\/1
\n ipv6 enable
\n ipv6 ospf 1 area 2
\n!
\nipv6 route 2001:10:13:3::2\/128 ethernet0\/1 \/\/ \u914d\u7f6e\u5230SW3\u6a21\u62df\u529e\u4e8b\u5904loopback2\u7684\u9759\u6001\u8def\u7531
\nipv6 route 2001:10:13:31::0\/64 ethernet0\/1 \/\/\u914d\u7f6e\u5230SW3\u4ea7\u54c1\u7684\u9759\u6001\u8def\u7531
\nipv6 route 2001:10:13:32::0\/64 ethernet0\/1 \/\/\u914d\u7f6e\u5230SW3\u8425\u9500\u7684\u9759\u6001\u8def\u7531
\n!<\/p>\n

router ospf 1
\nredistribute static \/\/FW2\u91cd\u53d1\u5e03\u9759\u6001\u8def\u7531<\/p>\n

(5)RT1 <\/span>\u3001<\/span>FW2 <\/span>\u4e4b\u95f4<\/span>OSPFv2 <\/span>\u548c<\/span>OSPFv3 <\/span>\u534f\u8bae，\u8fdb\u7a0b<\/span>2<\/span>，\u533a\u57df<\/span>2<\/span>； RT1 \u53d1\u5e03<\/span>loopback4 <\/span>\u8def\u7531，\u5411\u8be5\u533a\u57df\u901a\u544a<\/span>type1 <\/span>\u9ed8\u8ba4\u8def\u7531；<\/span>FW2 <\/span>\u53d1 \u5e03 loopback1 <\/span>\u8def\u7531，<\/span>FW2 <\/span>\u7981\u6b62\u5b66\u4e60\u5230\u96c6\u56e2\u548c\u5206\u516c\u53f8\u7684\u6240\u6709\u8def\u7531\u3002<\/span>RT1 \u7528 prefix-list <\/span>\u5339\u914d<\/span>FW2 loopback1 <\/span>\u8def\u7531\u3001<\/span>SW3 <\/span>\u6a21\u62df\u529e\u4e8b\u5904<\/span>loopback2 \u548c\u4ea7 \u54c1\u8def\u7531\u3001RT1 <\/span>\u4e0e<\/span>FW2 <\/span>\u76f4\u8fde<\/span>ipv4 <\/span>\u8def\u7531，\u5c06\u8fd9\u4e9b\u8def\u7531\u91cd\u53d1\u5e03\u5230\u533a\u57df<\/span>0<\/span>\u3002 <\/span><\/h4>\n

RT1:
\nrouter ospf 2
\n router-id 10.13.5.4
\n default-information originate metric-type 1 \/\/\u914d\u7f6etype1 \u9ed8\u8ba4\u8def\u7531
\n network 10.13.5.4 255.255.255.255 area 2
\n network 10.13.255.24 255.255.255.252 area 2
\n ！
\n ip prefix-list FW2-Loopback1 seq 5 permit 10.13.8.1\/32
\n route-map address prefix-list FW2-Loopback1 permit 10
\n match ip address prefix-list FW2-Loopback1
\n !
\nip prefix-list SW3-Loopback2 seq 10 permit 10.13.3.2\/32
\nroute-map address prefix-list SW3-Loopback2 permit 10
\n match ip address prefix-list SW3-Loopback2
\n!
\nip prefix-list SW3-CP seq 15 permit 10.13.110.0\/24
\nroute-map address prefix-list SW3-CP permit 10
\n match ip address prefix-list SW3-CP
\n!
\nip prefix-list RT1-FW2-IPv4 seq 20 permit 10.13.255.24\/30
\nroute-map address prefix-list RT1-FW2-IPv4 permit 10
\n match ip address prefix-list RT1-FW2-IPv4
\n!
\nrouter ospf 0
\nredistribute connect route-map FW2-Loopback1
\nredistribute connect route-map SW2-Loopback2
\nredistribute connect route-map SW2-CP
\nredistribute connect route-map RT1-FW2-IPv4<\/p>\n

FW2:
\n router ospf 2
\n router-id 10.13.8.1
\n network 10.13.8.1\/32 area 2
\n network 10.13.255.24\/30 area 2
\n！<\/p>\n

\u914d\u7f6eFW2 \u7981\u6b62\u5b66\u4e60\u5230\u96c6\u56e2\u548c\u5206\u516c\u53f8\u7684\u6240\u6709\u8def\u7531：<\/p>\n

ip prefix-list zx seq 5 permit 10.13.8.1\/32 <\/p>\n

ip prefix-list zx seq 10 permit 10.13.3.2\/32 <\/p>\n

ip prefix-list zx seq 15 permit 10.13.110.0\/24 <\/p>\n

ip prefix-list zx seq 20 permit 10.13.255.24\/30<\/p>\n

! <\/p>\n

route-map zx 10 permit <\/p>\n

match ip address zx<\/p>\n

!<\/p>\n

router ospf 1<\/p>\n

redistribute static route-map zx <\/p>\n

(6)<\/span>\u4fee\u6539<\/span>ospf cost <\/span>\u4e3a <\/span>100 <\/span>，\u5b9e\u73b0<\/span>SW1 <\/span>\u5206\u522b\u4e0e<\/span>RT2 <\/span>\u3001<\/span>FW2 <\/span>\u4e4b\u95f4<\/span>ipv4 \u548c ipv6 <\/span>\u4e92\u8bbf\u6d41\u91cf\u4f18\u5148\u901a\u8fc7<\/span>SW1_SW2_RT1 <\/span>\u94fe\u8def\u8f6c\u53d1，<\/span>SW2 \u8bbf\u95ee Internet ipv4 \u548c<\/span>ipv6 <\/span>\u6d41\u91cf\u4f18\u5148\u901a\u8fc7<\/span>SW2_SW1_FW1 <\/span>\u94fe\u8def\u8f6c\u53d1\u3002<\/span><\/h4>\n

RT1:
\ninterface GigaEthernet0\/1
\n ipv6 ospf cost 100 \/\/\u8bbe\u7f6eospf cost\u4e3a100<\/p>\n

FW2:
\ninterface ethernet0\/2
\n ip ospf cost 100 \/\/\u8bbe\u7f6eospf cost\u4e3a100
\n ipv6 ospf cost 100<\/p>\n

4<\/span>．<\/span>RT1 <\/span>\u4e32\u884c\u94fe\u8def\u3001<\/span>RT2 <\/span>\u4e32\u884c\u94fe\u8def\u3001<\/span>FW1<\/span>\u3001<\/span>AC1 <\/span>\u4e4b\u95f4\u5206\u522b\u8fd0\u884c<\/span>RIP \u548cRIPng <\/span>\u534f\u8bae，<\/span>FW1 <\/span>\u3001<\/span>RT1 <\/span>\u3001<\/span>RT2 <\/span>\u7684<\/span>RIP <\/span>\u548c<\/span>RIPng <\/span>\u53d1\u5e03<\/span>loopback2 <\/span>\u5730 \u5740\u8def\u7531，AC1 RIP <\/span>\u53d1\u5e03<\/span>loopback2 <\/span>\u5730\u5740\u8def\u7531，<\/span>AC1 RIPng <\/span>\u91c7\u7528<\/span>route-map \u5339\u914dprefix-list <\/span>\u91cd\u53d1\u5e03<\/span>loopback2 <\/span>\u5730\u5740\u8def\u7531\u3002<\/span>RT1 <\/span>\u914d\u7f6e<\/span>offset <\/span>\u503c\u4e3a<\/span>3 <\/span>\u7684 \u8def\u7531\u7b56\u7565，\u5b9e\u73b0RT1-S1\/0_RT2-S1\/1 <\/span>\u4e3a\u4e3b\u94fe\u8def，<\/span>RT1S1\/1_RT2-S1\/0 \u4e3a\u5907\u4efd\u94fe\u8def，ipv4 <\/span>\u7684<\/span>ACL <\/span>\u540d\u79f0\u4e3a<\/span>AclRIP<\/span>，<\/span>ipv6 <\/span>\u7684<\/span>ACL <\/span>\u540d\u79f0\u4e3a<\/span>AclRIPng<\/span>\u3002 RT1 \u7684<\/span>S1\/0 <\/span>\u4e0e<\/span>RT2 <\/span>\u7684<\/span>S1\/1 <\/span>\u4e4b\u95f4\u91c7\u7528<\/span>chap <\/span>\u53cc\u5411\u8ba4\u8bc1，\u7528\u6237\u540d\u4e3a\u5bf9\u7aef \u8bbe\u5907\u540d\u79f0，\u5bc6\u7801\u4e3aKey-1122<\/span>\u3002 <\/span><\/h3>\n

RT1：<\/p>\n

aaa authentication login default none
\naaa authentication enable default none \u53d6\u6d88\u767b\u5f55\u8ba4\u8bc1
\naaa authentication ppp default local PPP\u8ba4\u8bc1\u65b9\u5f0f\u672c\u5730
\n!
\nusername RT2 password 0 Key-1122 \/\/\u8bbe\u7f6e\u7528\u6237\u540d\u4e3a\u5bf9\u7aef\u8bbe\u5907\u540d\u79f0，\u5bc6\u7801\u4e3aKey-1122<\/p>\n

interface Serial1\/0
\n encapsulation ppp
\n ppp authentication chap
\n ppp chap hostname RT1
\n ppp chap password 0 Key-1122
\n ipv6 enable
\n!
\ninterface Serial1\/1
\n encapsulation ppp
\n ipv6 enable
\n!
\nip access-list standard AclRIP \/\/\u914d\u7f6e\u540d\u79f0\u4e3aAclRIP\u7684ipv4 ACL
\n permit any sequence 10
\n!
\n ipv6 unicast-routing \/\/\u5f00\u542fipv6\u5355\u64ad\u8def\u7531
\n!
\nipv6 access-list AclRIPng \/\/\u914d\u7f6e\u540d\u79f0\u4e3aAclRIPng\u7684ipv6 ACL
\n permit ipv6 any any sequence 10
\n!
\nrouter rip 1
\n offset Serial1\/0 in AclRIP 3 \/\/ \u914d\u7f6eoffset\u503c\u4e3a3
\n offset Serial1\/0 out AclRIP 3 \/\/ \u914d\u7f6eoffset\u503c\u4e3a3
\n!
\nrouter ripng 1
\n offset Serial1\/0 in AclRIPng 3 \/\/ \u914d\u7f6eoffset\u503c\u4e3a3
\n offset Serial1\/0 out AclRIPng 3 \/\/ \u914d\u7f6eoffset\u503c\u4e3a3
\n!
\ninterface Loopback2
\n ipv6 enable
\n ip rip 1 enable
\n ipv6 rip 1 enable
\n!
\ninterface GigaEthernet0\/2
\n ipv6 enable
\n ip rip 1 enable
\n ipv6 rip 1 enable
\n!
\ninterface Serial1\/0
\n ipv6 enable
\n ip rip 1 enable
\n ipv6 rip 1 enable
\n!
\ninterface Serial1\/1
\n ipv6 enable
\n ip rip 1 enable
\n ipv6 rip 1 enable <\/p>\n

RT2：<\/p>\n

aaa authentication login default none
\naaa authentication enable default none \u53d6\u6d88\u767b\u5f55\u8ba4\u8bc1
\naaa authentication ppp default local PPP\u8ba4\u8bc1\u65b9\u5f0f\u672c\u5730
\n!
\nusername RT1 password 0 Key-1122 \/\/\u8bbe\u7f6e\u7528\u6237\u540d\u4e3a\u5bf9\u7aef\u8bbe\u5907\u540d\u79f0，\u5bc6\u7801\u4e3aKey-1122<\/p>\n

interface Serial1\/0
\n encapsulation ppp
\n ppp authentication chap
\n ppp chap hostname RT2
\n ppp chap password 0 Key-1122
\n ipv6 enable
\n!
\ninterface Serial1\/1
\n encapsulation ppp
\n ipv6 enable
\n!
\nrouter rip 1
\n！
\nipv6 unicast-routing \/\/\u5f00\u542fipv6\u5355\u64ad\u8def\u7531
\n！
\nrouter ripng 1
\n！
\ninterface Loopback2
\n ipv6 enable
\n ip rip 1 enable
\n ipv6 rip 1 enable
\n!
\ninterface GigaEthernet0\/1
\n ipv6 enable
\n ip rip 1 enable
\n ipv6 rip 1 enable
\n!
\ninterface Serial1\/0
\n ipv6 enable
\n ip rip 1 enable
\n ipv6 rip 1 enable
\n!
\ninterface Serial1\/1
\n ipv6 enable
\n ip rip 1 enable
\n ipv6 rip 1 enable <\/p>\n

FW1:
\n router rip
\n network 10.13.7.2\/32
\n network 10.13.255.16\/30
\n!
\nipv6 router rip
\nnetwork ethernet 0\/2 \/\/ipv6 \u5ba3\u544a\u65f6\u7528\u63a5\u53e3\u540d\u79f0
\nnetwork Loopback2 <\/p>\n

AC1:
\nip prefix-list AC1-Loopback2 seq 5 permit 10.13.4.2\/32 \/\/\u521b\u5efa\u524d\u7f00\u5217\u8868
\n!
\nroute-map AC1-Loopback2 permit 10 \/\/\u521b\u5efaroute-map，\u8c03\u7528\u524d\u7f00\u5217\u8868
\n match ip address prefix-list AC1-Loopback2
\n!
\nrouter rip
\nnetwork 10.13.4.2\/32
\nnetwork 10.13.255.40\/30
\nredistribute connected route-map AC-Loopback2 \/\/\u8c03\u7528route-map\u91cd\u53d1\u5e03Loopback2
\n!
\nrouter ipv6 rip
\n! <\/p>\n

5<\/span>．<\/span>RT1 <\/span>\u4ee5\u592a\u94fe\u8def\u3001<\/span>RT2 <\/span>\u4ee5\u592a\u94fe\u8def\u4e4b\u95f4\u8fd0\u884c<\/span>ISIS <\/span>\u534f\u8bae，\u8fdb\u7a0b <\/span>1<\/span>，<\/span>\u5206\u522b\u5b9e\u73b0loopback3 \u4e4b\u95f4ipv4 \u4e92\u901a\u548cipv6 \u4e92\u901a\u3002RT1 \u3001RT2 \u7684NET\u5206\u522b\u4e3a 10.0000.0000.0001.00 \u300110.0000.0000.0002.00，\u8def\u7531\u5668\u7c7b\u578b\u662f<\/span> Level-2，\u63a5\u53e3\u7f51\u7edc\u7c7b\u578b\u4e3a\u70b9\u5230\u70b9\u3002\u914d\u7f6e\u57df<\/span>md5 <\/span>\u8ba4\u8bc1\u548c\u63a5\u53e3<\/span>md5 <\/span>\u8ba4\u8bc1,\u5bc6\u7801\u5747\u4e3aKey-1122<\/span>\u3002<\/span><\/h3>\n

RT1:
\nrouter isis 1
\n is-type level-2 \/\/\u914d\u7f6e\u8def\u7531\u5668\u7c7b\u578b\u4e3aLevel-2
\n authentication mode md5 \/\/\u914d\u7f6e\u57dfmd5 \u8ba4\u8bc1
\n authentication key 0 Key-1122 \/\/\u5bc6\u7801\u4e3aKey-1122
\n net 10.0000.0000.0001.00 \/\/\u914d\u7f6eNET\u4e3a10.0000.0000.0001.00
\n!
\ninterface Loopback3
\n ipv6 enable
\n ip router isis 1
\n ipv6 router isis 1
\n!
\ninterface GigaEthernet0\/0
\n ipv6 enable
\n ip router isis 1
\n ipv6 router isis 1
\n isis network point-to-point \/\/\u914d\u7f6e\u63a5\u53e3\u7f51\u7edc\u7c7b\u578b\u4e3a\u70b9\u5230\u70b9
\n isis circuit-type level-2 \/\/\u914d\u7f6e\u8def\u7531\u5668\u7c7b\u578b\u4e3aLevel-2
\n isis authentication mode md5 \/\/\u914d\u7f6e\u63a5\u53e3md5 \u8ba4\u8bc1
\n isis authentication key 0 Key-1122 \/\/\u5bc6\u7801\u4e3aKey-1122
\n!
\nRT2:
\nrouter isis 1
\n is-type level-2 \/\/\u914d\u7f6e\u8def\u7531\u5668\u7c7b\u578b\u4e3aLevel-2
\n authentication mode md5 \/\/\u914d\u7f6e\u57dfmd5 \u8ba4\u8bc1
\n authentication key 0 Key-1122 \/\/\u5bc6\u7801\u4e3aKey-1122
\n net 10.0000.0000.0002.00 \/\/\u914d\u7f6eNET\u4e3a10.0000.0000.0002.00
\n!
\ninterface Loopback3
\n ipv6 enable
\n ip router isis 1
\n ipv6 router isis 1
\n!
\ninterface GigaEthernet0\/0
\n ipv6 enable
\n ip router isis 1
\n ipv6 router isis 1
\n isis network point-to-point \/\/\u914d\u7f6e\u63a5\u53e3\u7f51\u7edc\u7c7b\u578b\u4e3a\u70b9\u5230\u70b9
\n isis circuit-type level-2 \/\/\u914d\u7f6e\u8def\u7531\u5668\u7c7b\u578b\u4e3aLevel-2
\n isis authentication mode md5 \/\/\u914d\u7f6e\u63a5\u53e3md5 \u8ba4\u8bc1
\n isis authentication key 0 Key-1122 \/\/\u5bc6\u7801\u4e3aKey-1122
\n! <\/p>\n

6<\/span>．<\/span>RT2 <\/span>\u914d\u7f6e<\/span>ipv4 nat<\/span>，\u5b9e\u73b0<\/span>AC1 ipv4 <\/span>\u4ea7\u54c1\u7528<\/span>RT2 <\/span>\u5916\u7f51\u63a5\u53e3<\/span>ipv4 \u5730\u5740\u8bbf\u95eeInternet<\/span>\u3002<\/span>RT2 <\/span>\u914d\u7f6e<\/span>nat64<\/span>，\u5b9e\u73b0<\/span>AC1 ipv6 <\/span>\u4ea7\u54c1\u7528<\/span>RT2 <\/span>\u5916\u7f51 \u63a5\u53e3ipv4 <\/span>\u5730\u5740\u8bbf\u95ee<\/span>Internet<\/span>，<\/span>ipv4 <\/span>\u5730\u5740\u8f6c<\/span>ipv6 <\/span>\u5730\u5740\u524d\u7f00\u4e3a<\/span>64:ff9b::\/96<\/span>\u3002 <\/span><\/h3>\n

RT2:
\ninterface GigaEthernet0\/1
\nip nat inside
\nipv6 nat
\n!
\ninterface GigaEthernet0\/2
\nip nat outside
\nipv6 nat
\n!
\nip access-list standard ACL-NAT
\n permit any sequence 10
\n!
\nipv6 access-list ACL-NAT64
\n permit ipv6 2001:10:13:140::\/64 any sequence 10
\n!
\nip nat inside source list ACL-NAT interface GigaEthernet0\/2
\n!
\nipv6 nat v6v4 source list ACL-NAT64 interface GigaEthernet0\/2
\nipv6 nat prefix 64:FF9B::\/96 v4-mapped ACL-NAT64 <\/p>\n

7<\/span>．<\/span>SW1 <\/span>\u3001<\/span>SW2 <\/span>\u3001<\/span>SW3 <\/span>\u3001<\/span>RT1 <\/span>\u3001<\/span>RT2 <\/span>\u4e4b\u95f4\u8fd0\u884c<\/span>BGP <\/span>\u534f\u8bae，<\/span>SW1<\/span>\u3001 SW2 \u3001<\/span>RT1 AS <\/span>\u53f7<\/span>65001 <\/span>\u3001<\/span>RT2 AS <\/span>\u53f7<\/span>65002 <\/span>\u3001<\/span>SW3 AS <\/span>\u53f7<\/span>65003<\/span>\u3002<\/span><\/h3>\n

(1)SW1 <\/span>\u3001<\/span>SW2 <\/span>\u3001<\/span>SW3 <\/span>\u3001<\/span>RT1 <\/span>\u3001<\/span>RT2 <\/span>\u4e4b\u95f4\u901a\u8fc7<\/span>loopback1 <\/span>\u5efa\u7acb<\/span>ipv4 \u548cipv6 BGP <\/span>\u90bb\u5c45\u3002<\/span>SW1 <\/span>\u548c<\/span>SW2 <\/span>\u4e4b\u95f4\u8d22\u52a1\u901a\u8fc7<\/span>loopback2 <\/span>\u5efa\u7acb<\/span>ipv4 BGP \u90bb\u5c45，SW1 <\/span>\u548c<\/span>SW2 <\/span>\u7684<\/span>loopback2 <\/span>\u4e92\u901a\u91c7\u7528\u9759\u6001\u8def\u7531\u3002 <\/span><\/h4>\n

(2)SW1 <\/span>\u3001<\/span>SW2 <\/span>\u3001<\/span>SW3<\/span>\u3001<\/span>RT2 <\/span>\u5206\u522b\u53ea\u53d1\u5e03\u8425\u9500\u3001\u6cd5\u52a1\u3001\u8d22\u52a1\u3001\u4eba\u529b \u7b49ipv4 <\/span>\u548c<\/span>ipv6 <\/span>\u8def\u7531；<\/span>RT1 <\/span>\u53d1\u5e03\u529e\u4e8b\u5904\u8425\u9500<\/span>ipv4 <\/span>\u548c<\/span>ipv6 <\/span>\u8def\u7531\u5230<\/span>BGP<\/span>\u3002 <\/span><\/h4>\n

SW1:
\nrouter bgp 65001
\n bgp router-id 10.13.1.1
\n network 10.13.12.0\/24
\n network 10.13.13.0\/24
\n network 10.13.15.0\/24
\n neighbor 10.13.2.1 remote-as 65001
\n neighbor 10.13.2.1 update-source Loopback1
\n neighbor 10.13.2.1 next-hop-self
\n neighbor 10.13.3.1 remote-as 65003
\n neighbor 10.13.3.1 ebgp-multihop 255
\n neighbor 10.13.3.1 update-source Loopback1
\n neighbor 2001:10:13:2::1 remote-as 65001
\n neighbor 2001:10:13:2::1 update-source Loopback1
\n no neighbor 2001:10:13:2::1 activate
\n neighbor 2001:10:13:3::1 remote-as 65003
\n neighbor 2001:10:13:3::1 ebgp-multihop 255
\n neighbor 2001:10:13:3::1 update-source Loopback1
\n no neighbor 2001:10:13:3::1 activate
\n address-family ipv6 unicast
\n network 2001:10:13:12::\/64
\n network 2001:10:13:13::\/64
\n network 2001:10:13:15::\/64
\n neighbor 2001:10:13:2::1 activate
\n neighbor 2001:10:13:3::1 activate
\n exit-address-family
\n address-family ipv4 vrf Finance
\n network 10.13.14.0\/24
\n neighbor 10.13.2.2 remote-as 65001
\n exit-address-family
\n!
\nip route vrf Finance 10.13.2.2\/32 10.13.255.2
\n!
\nrouter ipv6 ospf 2 vrf Finance
\n router-id 10.13.1.2
\n!
\ninterface Vlan1023
\n ip vrf forwarding Finance
\n ipv6 router ospf area 2 tag 2
\n!
\ninterface Loopback2
\n ip vrf forwarding Finance
\n ipv6 router ospf area 2 tag 2<\/p>\n

SW2:
\nrouter bgp 65001
\n bgp router-id 10.13.2.1
\n network 10.13.22.0\/24
\n network 10.13.23.0\/24
\n network 10.13.25.0\/24
\n neighbor 10.13.1.1 remote-as 65001
\n neighbor 10.13.1.1 update-source Loopback1
\n neighbor 10.13.1.1 next-hop-self
\n neighbor 10.13.3.1 remote-as 65003
\n neighbor 10.13.3.1 ebgp-multihop 255
\n neighbor 10.13.3.1 update-source Loopback1
\n neighbor 10.13.5.1 remote-as 65001
\n neighbor 10.13.5.1 update-source Loopback1
\n neighbor 10.13.5.1 next-hop-self
\n neighbor 2001:10:13:1::1 remote-as 65001
\n neighbor 2001:10:13:1::1 update-source Loopback1
\n no neighbor 2001:10:13:1::1 activate
\n neighbor 2001:10:13:3::1 remote-as 65003
\n neighbor 2001:10:13:3::1 ebgp-multihop 255
\n neighbor 2001:10:13:3::1 update-source Loopback1
\n no neighbor 2001:10:13:3::1 activate
\n neighbor 2001:10:13:5::1 remote-as 65001
\n neighbor 2001:10:13:5::1 update-source Loopback1
\n no neighbor 2001:10:13:5::1 activate
\n address-family ipv6 unicast
\n network 2001:10:13:22::\/64
\n network 2001:10:13:23::\/64
\n network 2001:10:13:25::\/64
\n neighbor 2001:10:13:1::1 activate
\n neighbor 2001:10:13:3::1 activate
\n neighbor 2001:10:13:5::1 activate
\n exit-address-family
\n!
\nip route vrf Finance 10.13.1.2\/32 10.13.255.1
\n!
\nrouter ipv6 ospf 2 vrf Finance
\n router-id 10.13.2.2
\n!
\ninterface Loopback2
\n ip vrf forwarding Finance
\n ipv6 router ospf area 2 tag 2
\n!
\ninterface Vlan1023
\n ip vrf forwarding Finance
\n ipv6 router ospf area 2 tag 2
\n! <\/p>\n

sw3:
\n!
\nrouter bgp 65003
\n bgp router-id 10.13.3.1
\n network 10.13.32.0\/24
\n network 10.13.33.0\/24
\n network 10.13.35.0\/24
\n neighbor 10.13.1.1 remote-as 65001
\n neighbor 10.13.1.1 ebgp-multihop 255
\n neighbor 10.13.1.1 update-source Loopback1
\n neighbor 10.13.2.1 remote-as 65001
\n neighbor 10.13.2.1 ebgp-multihop 255
\n neighbor 10.13.2.1 update-source Loopback1
\n neighbor 2001:10:13:1::1 remote-as 65001
\n neighbor 2001:10:13:1::1 ebgp-multihop 255
\n neighbor 2001:10:13:1::1 update-source Loopback1
\n no neighbor 2001:10:13:1::1 activate
\n neighbor 2001:10:13:2::1 remote-as 65001
\n neighbor 2001:10:13:2::1 ebgp-multihop 255
\n neighbor 2001:10:13:2::1 update-source Loopback1
\n no neighbor 2001:10:13:2::1 activate
\n address-family ipv6 unicast
\n network 2001:10:13:32::\/64
\n network 2001:10:13:33::\/64
\n network 2001:10:13:35::\/64
\n neighbor 2001:10:13:1::1 activate
\n neighbor 2001:10:13:2::1 activate
\n exit-address-family
\nRT1:
\n!
\nrouter bgp 65001
\n no synchronization \/\/\u8fd9\u4e2a\u662f\u8bbe\u5907\u9ed8\u8ba4\u7684，\u53ef\u4ee5\u4e0d\u7528\u6572
\n bgp router-id 10.13.5.1
\n bgp log-neighbor-changes \/\/\u8fd9\u4e2a\u662f\u8bbe\u5907\u9ed8\u8ba4\u7684，\u53ef\u4ee5\u4e0d\u7528\u6572
\n neighbor 10.13.2.1 remote-as 65001
\n neighbor 10.13.2.1 update-source Loopback1
\n neighbor 10.13.2.1 next-hop-self
\n neighbor 10.13.6.1 remote-as 65002
\n neighbor 10.13.6.1 ebgp-multihop 255
\n neighbor 10.13.6.1 update-source Loopback1
\n neighbor 2001:10:13:2::1 remote-as 65001
\n neighbor 2001:10:13:2::1 update-source Loopback1
\n no neighbor 2001:10:13:2::1 activate
\n neighbor 2001:10:13:6::1 remote-as 65002
\n neighbor 2001:10:13:6::1 ebgp-multihop 255
\n neighbor 2001:10:13:6::1 update-source Loopback1
\n no neighbor 2001:10:13:6::1 activate
\n !
\n address-family ipv6
\n no synchronization \/\/\u8fd9\u4e2a\u662f\u8bbe\u5907\u9ed8\u8ba4\u7684，\u53ef\u4ee5\u4e0d\u7528\u6572
\n neighbor 2001:10:13:2::1 activate
\n neighbor 2001:10:13:6::1 activate
\n exit-address-family <\/p>\n

RT2:
\nrouter bgp 65002
\n no synchronization \/\/\u8fd9\u4e2a\u662f\u8bbe\u5907\u9ed8\u8ba4\u7684，\u53ef\u4ee5\u4e0d\u7528\u6572
\n bgp router-id 10.13.6.1
\n bgp log-neighbor-changes \/\/\u8fd9\u4e2a\u662f\u8bbe\u5907\u9ed8\u8ba4\u7684，\u53ef\u4ee5\u4e0d\u7528\u6572
\n neighbor 10.13.5.1 remote-as 65001
\n neighbor 10.13.5.1 ebgp-multihop 255
\n neighbor 10.13.5.1 update-source Loopback1
\n neighbor 2001:10:13:5::1 remote-as 65001
\n neighbor 2001:10:13:5::1 ebgp-multihop 255
\n neighbor 2001:10:13:5::1 update-source Loopback1
\n no neighbor 2001:10:13:5::1 activate
\n !
\n address-family ipv6
\n no synchronization \/\/\u8fd9\u4e2a\u662f\u8bbe\u5907\u9ed8\u8ba4\u7684，\u53ef\u4ee5\u4e0d\u7528\u6572
\n neighbor 2001:10:13:5::1 activate
\n exit-address-family <\/p>\n

(3)SW3 <\/span>\u8425\u9500\u5206\u522b\u4e0e <\/span>SW1 <\/span>\u548c <\/span>SW2 <\/span>\u8425\u9500<\/span>ipv4 <\/span>\u548c<\/span>ipv6 <\/span>\u4e92\u8bbf\u4f18\u5148 \u5728 SW3_SW1 <\/span>\u94fe\u8def\u8f6c\u53d1；<\/span>SW3 <\/span>\u6cd5\u52a1\u53ca\u4eba\u529b\u5206\u522b\u4e0e<\/span>SW1 <\/span>\u548c<\/span>SW2 <\/span>\u6cd5\u52a1 \u53ca\u4eba \u529bipv4 <\/span>\u548c<\/span>ipv6 <\/span>\u4e92\u8bbf\u4f18\u5148\u5728<\/span>SW3_SW2 <\/span>\u94fe\u8def\u8f6c\u53d1，\u4e3b\u5907\u94fe\u8def\u76f8\u4e92\u5907 \u4efd； \u7528prefix-list<\/span>\u3001<\/span>route-map <\/span>\u548c<\/span>BGP <\/span>\u8def\u5f84\u5c5e\u6027\u8fdb\u884c\u9009\u8def，\u65b0\u589e<\/span>AS 65000<\/span>\u3002<\/span><\/h4>\n

SW3:
\n!
\nip prefix-list SW1-SW2-FWRL-IPv4 seq 5 permit 10.13.23.1\/24
\nip prefix-list SW1-SW2-FWRL-IPv4 seq 10 permit 10.13.13.1\/24
\nip prefix-list SW1-SW2-FWRL-IPv4 seq 15 permit 10.13.15.1\/24
\nip prefix-list SW1-SW2-FWRL-IPv4 seq 20 permit 10.13.25.1\/24
\nip prefix-list SW1-SW2-YX-IPv4 seq 5 permit 10.13.12.1\/24
\nip prefix-list SW1-SW2-YX-IPv4 seq 10 permit 10.13.22.1\/24
\nip prefix-list SW3-FWRL-IPv4 seq 5 permit 10.13.33.1\/24
\nip prefix-list SW3-FWRL-IPv4 seq 10 permit 10.13.35.1\/24
\nip prefix-list SW3-YX-IPv4 seq 5 permit 10.13.32.1\/24
\n!
\nipv6 prefix-list SW1-SW2-FWRL-IPv6 seq 10 permit 2001:10:13:13::1\/24
\nipv6 prefix-list SW1-SW2-FWRL-IPv6 seq 15 permit 2001:10:13:15::1\/64
\nipv6 prefix-list SW1-SW2-FWRL-IPv6 seq 20 permit 2001:10:13:25::1\/64
\nipv6 prefix-list SW1-SW2-YX-IPv6 seq 5 permit 2001:10:13:12::1\/64
\nipv6 prefix-list SW1-SW2-YX-IPv6 seq 10 permit 2001:10:13:22::1\/64
\nipv6 prefix-list SW3-FWRL-IPv6 seq 5 permit 2001:10:13:33::1\/64
\nipv6 prefix-list SW3-FWRL-IPv6 seq 10 permit 2001:10:13:35::1\/64
\nipv6 prefix-list SW3-YX-IPv6 seq 5 permit 2001:10:13:32::1\/64
\n!
\nroute-map SW1-SW2-YX-IPv4 permit 10
\n match ip address prefix-list SW1-SW2-YX-IPv4
\n set as-path prepend 65000
\n set ip next-hop 10.4.1.1
\n!
\nroute-map SW1-SW2-YX-IPv4 permit 20
\n!
\nroute-map SW1-SW2-FWRL-IPv4 permit 10
\n match ip address prefix-list SW1-SW2-FWRL-IPv4
\n set as-path prepend 65000
\n set ip next-hop 10.4.2.1
\n!
\nroute-map SW1-SW2-FWRL-IPv4 permit 20
\n!
\nroute-map SW3-FWRL-IPv4 permit 10
\n match ip address prefix-list SW3-FWRL-IPv4
\n set as-path prepend 65000
\n set ip next-hop 10.13.2.1
\n!
\nroute-map SW3-FWRL-IPv4 permit 20
\n!
\nroute-map SW3-YX-IPv4 permit 10
\n match ip address prefix-list SW3-YX-IPv4
\n set as-path prepend 65000
\n set ip next-hop 10.13.1.1
\n!
\nroute-map SW3-YX-IPv4 permit 20
\n!
\nroute-map SW1-SW2-YX-IPv6 permit 10
\n match ip address prefix-list SW1-SW2-YX-IPv6
\n set as-path prepend 65000
\n set ipv6 next-hop 2001:10:13:1::1
\n!
\nroute-map SW1-SW2-YX-IPv6 permit 20
\n!
\nroute-map SW1-SW2-FWRL-IPv6 permit 10
\n match ip address prefix-list SW1-SW2-FWRL
\n set as-path prepend 65000
\n set ipv6 next-hop 2001:10:2::1
\n!
\nroute-map SW1-SW2-FWRL-IPv6 permit 20
\n!
\nroute-map SW3-FWRL-IPv6 permit 10
\n match ip address prefix-list SW3-FWRL-IPv6
\n set as-path prepend 65000
\n set ipv6 next-hop 2001:10:13:2::1
\n!
\nroute-map SW3-FWRL-IPv6 permit 20
\n!
\nroute-map SW3-YX-IPv6 permit 10
\n match ip address prefix-list SW3-YX-IPv6
\n set as-path prepend 65000
\n set ipv6 next-hop 2001:10:1::1
\n!
\nroute-map SW3-YX-IPv6 permit 20
\n!
\nrouter bgp 65003
\n!
\nneighbor 10.13.1.1 route-map SW1-SW2-FWRL-IPv4 in
\nneighbor 10.13.1.1 route-map SW3-FWRL-IPv4 out
\n!
\nneighbor 10.13.2.1 route-map SW1-SW2-YX-IPv4 in
\nneighbor 10.13.2.1 route-map SW3-YX-IPv4 out
\n!
\naddress-family ipv6 unicast
\n!
\nneighbor 2001:10:13:1::1 route-map SW1-SW2-FWRL-IPv6 in
\nneighbor 2001:10:13:1::1 route-map SW3-FWRL-IPv6 out
\n!
\nneighbor 2001:10:13:2:1 route-map SW1-SW2-YX-IPv6 in
\nneighbor 2001:10:13:2:1 route-map SW3-YX-IPv6 out <\/p>\n

8<\/span>．\u5229\u7528<\/span>BGP MPLS VPN <\/span>\u6280\u672f，<\/span>RT1 <\/span>\u4e0e<\/span>RT2 <\/span>\u4ee5\u592a\u94fe\u8def\u95f4\u8fd0\u884c \u591a \u534f\u8bae\u6807\u7b7e\u4ea4\u6362\u3001\u6807\u7b7e\u5206\u53d1\u534f\u8bae\u3002RT1 <\/span>\u4e0e<\/span>RT2 <\/span>\u95f4\u521b\u5efa\u8d22\u52a1<\/span>VPN <\/span>\u5b9e \u4f8b， \u540d\u79f0\u4e3aFinance<\/span>，<\/span>RT1 <\/span>\u7684<\/span>RD <\/span>\u503c\u4e3a <\/span>1:1 <\/span>，<\/span>export rt <\/span>\u503c\u4e3a <\/span>1:2 <\/span>，<\/span>import rt \u503c \u4e3a<\/span>2:1<\/span>；<\/span>RT2 <\/span>\u7684<\/span>RD <\/span>\u503c\u4e3a<\/span>2:2<\/span>\u3002\u901a\u8fc7\u4e24\u7aef<\/span>loopback1 <\/span>\u5efa\u7acb<\/span>VPN <\/span>\u90bb\u5c45 ，\u5206 \u522b\u5b9e\u73b0\u4e24\u7aefloopback5 ipv4 <\/span>\u4e92\u901a\u548c<\/span>ipv6 <\/span>\u4e92\u901a\u3002<\/span><\/h3>\n

RT1:
\n!
\nipv6 unicast-routing
\nipv6 vrf Finance
\n rd 1:1
\n route-target import 1:2
\n route-target export 2:1
\n!
\nmpls ip
\nmpls ldp router-id 10.13.5.1
\n!
\nip vrf Finance
\n rd 1:1
\n route-target export 2:1
\n route-target import 1:2
\n!
\ninterface Loopback1
\n ipv6 enable
\n mpls ip encapsulate
\n!
\ninterface Loopback5
\n ip vrf forwarding Finance
\n ipv6 enable
\n ipv6 vrf forwarding Finance
\n mpls ip encapsulate
\n!
\ninterface GigaEthernet0\/0
\n mpls ip
\n mpls ip encapsulate
\n mpls ldp enable
\n!
\nrouter bgp 65001
\n no synchronization
\n bgp log-neighbor-changes <\/p>\n

address-family vpnv4
\n neighbor 10.13.6.1 activate
\n neighbor 10.13.6.1 send-community extended
\n exit-address-family <\/p>\n

address-family vpnv6
\n neighbor 2001:10:13:6::1 activate
\n neighbor 2001:10:13:6::1 send-community extended
\n exit-address-family <\/p>\n

address-family ipv4 vrf Finance
\n no synchronization
\n network 10.13.5.5\/32
\n exit-address-family <\/p>\n

address-family ipv6 vrf Finance
\n no synchronization
\n network 2001:10:13:5::5\/128
\n exit-address-family
\n! <\/p>\n

RT2:
\n!
\nipv6 unicast-routing
\nipv6 vrf Finance
\n rd 2:2
\n route-target import 1:2
\n route-target export 2:1
\n!
\nmpls ip
\nmpls ldp router-id 10.13.6.1
\n!
\nip vrf Finance
\n rd 2:2
\n route-target export 2:1
\n route-target import 1:2
\n!
\ninterface Loopback1
\n ipv6 enable
\n mpls ip encapsulate
\n!
\ninterface Loopback5
\n ip vrf forwarding Finance
\n ipv6 enable
\n ipv6 vrf forwarding Finance
\n mpls ip encapsulate
\n!
\ninterface GigaEthernet0\/0
\n ipv6 enable
\n mpls ip encapsulate
\n mpls ldp enable <\/p>\n

router bgp 65002
\nno synchronization
\nbgp log-neighbor-changes <\/p>\n

address-family vpnv4
\n neighbor 10.13.5.1 activate
\n neighbor 10.13.5.1 send-community extended
\n exit-address-family <\/p>\n

address-family vpnv6
\n neighbor 2001:10:13:5::1 activate
\n neighbor 2001:10:13:5::1 send-community extended
\n exit-address-family <\/p>\n

address-family ipv4 vrf Finance
\n no synchronization
\n network 10.13.6.5\/32
\n exit-address-family <\/p>\n

address-family ipv6 vrf Finance
\n no synchronization
\n network 2001:10:6::5\/128
\n exit-address-family
\n! <\/p>\n

\u56db\u3001\u65e0\u7ebf\u90e8\u7f72<\/span><\/h2>\n

1<\/span>．<\/span>AC1 loopback1 ipv4 <\/span>\u548c<\/span>ipv6 <\/span>\u5730\u5740\u5206\u522b\u4f5c\u4e3a<\/span>AC1 <\/span>\u7684<\/span>ipv4 <\/span>\u548cipv6\u7ba1\u7406\u5730\u5740\u3002AP <\/span>\u4e8c\u5c42\u81ea\u52a8\u6ce8\u518c，<\/span>AP <\/span>\u91c7\u7528<\/span>MAC <\/span>\u5730\u5740\u8ba4\u8bc1\u3002\u914d\u7f6e<\/span>2 <\/span>\u4e2a<\/span>ssid<\/span>， \u5206 \u522b\u4e3askills-2.4G <\/span>\u548c<\/span>skills-5G<\/span>\u3002<\/span>skills-2.4G <\/span>\u5bf9\u5e94<\/span>vlan140<\/span>，\u7528<\/span>network 140 <\/span>\u548c radio1（\u6a21\u5f0f\u4e3a <\/span>n-only-g<\/span>）<\/span>, <\/span>\u7528\u6237\u63a5\u5165\u65e0\u7ebf\u7f51\u7edc\u65f6\u9700\u8981\u91c7\u7528\u57fa\u4e8e WPA-personal \u52a0\u5bc6\u65b9\u5f0f，\u5bc6\u7801\u4e3a<\/span>Key-1122<\/span>\u3002<\/span>skills-5G <\/span>\u5bf9\u5e94<\/span>vlan150 <\/span>， \u7528network 150 <\/span>\u548c<\/span>radio2<\/span>（\u6a21\u5f0f\u4e3a<\/span>n-only-a <\/span>），<\/span>\u4e0d\u9700\u8981\u8ba4\u8bc1，\u9690\u85cf<\/span>ssid<\/span>， skills-5G \u7528\u5012\u6570\u7b2c\u4e00\u4e2a\u53ef\u7528<\/span>VAP <\/span>\u53d1\u9001<\/span>5G <\/span>\u4fe1\u53f7\u3002<\/span><\/h3>\n

AC1:<\/p>\n

wireless \/\/\u5728\u5168\u5c40\u6a21\u5f0f\u4e0b\u914d\u7f6e
\nenable \/\/\u542f\u7528\u65e0\u7ebf\u529f\u80fd
\n！
\nno auto-ip-assign \/\/\u5173\u95ed\u65e0\u7ebf\u7279\u6027\u81ea\u52a8\u6307\u5b9a IP \u5730\u5740\u529f\u80fd
\n！
\nstatic-ip 10.13.4.1 \/\/\u8bbe\u7f6eIPv4\u7ba1\u7406\u5730\u5740
\nstatic-ipv6 2001:10:13:4::1 \/\/\u8bbe\u7f6eIPv6\u7ba1\u7406\u5730\u5740
\n！
\nap authentication mac \/\/\u91c7\u7528MAC\u5730\u5740\u8ba4\u8bc1
\nap database 00-03-0f-d9-cd-c0 \/\/AP\u7684MAC\u5730\u5740
\n！
\ndiscovery vlan-list 130 \/\/\u914d\u7f6e\u4e8c\u5c42\u5e7f\u64ad\u53d1\u73b0
\n！
\nnetwork 140 \/\/\u8bbe\u7f6eSSID，\u91c7\u7528WPA-personal\u52a0\u5bc6\u65b9\u5f0f，\u5bf9\u5e94vlan140
\nsecurity mode wpa-personal
\nwpa key Key-1122 \/\/\u6ce8\u610f\u79d8\u94a5
\nssid skills-2.4G
\nvlan 140
\n！
\nnetwork 150
\nsecurity mode none \/\/\u65e0\u8ba4\u8bc1
\nssid skills-5G
\nhide-ssid \/\/\u9690\u85cfSSID
\nvlan 150
\n！
\nap profile 1
\nradio 1
\nmode n-only-g \/\/\u5728\u6a21\u677f\u5185\u914d\u7f6e2.4G\u4fe1\u53f7
\nvap 0
\nnetwork 140
\nenable
\n！
\nradio 2
\nmode n-only-a \/\/\u5728\u6a21\u677f\u5185\u914d\u7f6e5G\u4fe1\u53f7
\nvap 15
\nnetwork 150
\nenable<\/p>\n

2<\/span>．\u5f53<\/span>AP <\/span>\u4e0a\u7ebf，\u5982\u679c<\/span>AC <\/span>\u4e2d\u50a8\u5b58\u7684<\/span>Image<\/span>\u7248\u672c\u548c<\/span>AP <\/span>\u7684<\/span>Image<\/span>\u7248 \u672c\u53f7\u4e0d\u540c\u65f6，\u4f1a\u89e6\u53d1AP <\/span>\u81ea\u52a8\u5347\u7ea7\u3002<\/span>AP <\/span>\u5931\u8d25\u72b6\u6001\u8d85\u65f6\u65f6\u95f4\u53ca\u63a2\u6d4b \u5230 \u7684\u5ba2\u6237\u7aef\u72b6\u6001\u8d85\u65f6\u65f6\u95f4\u90fd\u4e3a2 <\/span>\u5c0f\u65f6\u3002 <\/span><\/h3>\n

AC1:
\nwireless
\nap auto-upgrade \/\/AP\u81ea\u52a8\u5347\u7ea7
\nagetime ap-failure 2 \/\/\u8bbe\u7f6eAP\u5931\u8d25\u72b6\u6001\u8d85\u65f6\u65f6\u95f42\u5c0f\u65f6
\nagetime detected-clients 2 \/\/\u63a2\u6d4b\u5230\u7684\u5ba2\u6237\u7aef\u72b6\u6001\u8d85\u65f6\u65f6\u95f4\u90fd\u4e3a2\u5c0f\u65f6 <\/p>\n

3<\/span>．<\/span>MAC <\/span>\u8ba4\u8bc1\u6a21\u5f0f\u4e3a\u9ed1\u540d\u5355，<\/span>MAC <\/span>\u5730\u5740\u4e3a<\/span>80-45-DD-77-CC-48 \u7684\u65e0\u7ebf\u7ec8\u7aef\u91c7\u7528\u5168\u5c40\u914d\u7f6eMAC <\/span>\u8ba4\u8bc1\u3002 <\/span><\/h3>\n

AC1:
\nwreless
\nmac-authentication-mode black-list \/\/ MAC\u8ba4\u8bc1\u6a21\u5f0f\u4e3a\u9ed1\u540d\u5355
\nknown-client 80-45-DD-77-CC-48 action global-action \/\/ MAC\u5730\u5740\u4e3a80-45-DD-77-CC-48\u7684\u65e0\u7ebf\u7ec8\u7aef\u91c7\u7528\u5168\u5c40\u914d\u7f6eMAC\u8ba4\u8bc1
\n!
\nnetwork 140
\nmac authentication local
\n!
\nnetwork 150
\nmac authentication local<\/p>\n

4<\/span>．\u9632\u6b62\u591a<\/span>AP <\/span>\u548c<\/span>AC <\/span>\u76f8\u8fde\u65f6\u8fc7\u591a\u7684\u5b89\u5168\u8ba4\u8bc1\u8fde\u63a5\u800c\u6d88\u8017<\/span>CPU <\/span>\u8d44 \u6e90，\u68c0\u6d4b\u5230AP <\/span>\u4e0e<\/span>AC 10 <\/span>\u5206\u949f\u5185\u5efa\u7acb\u8fde\u63a5<\/span>5 <\/span>\u6b21\u5c31\u4e0d\u518d\u5141\u8bb8\u7ee7\u7eed\u8fde\u63a5， 2 \u5c0f\u65f6\u540e\u6062\u590d\u6b63\u5e38\u3002 <\/span><\/h3>\n

AC1:
\nWireless
\nwireless ap anti-flood \/\/\u6253\u5f00AP FLOOD\u9632\u5236\u529f\u80fd
\nwireless ap anti-flood interval 10 \/\/\u8bbe\u7f6e AP FLOOD \u53cd\u5236\u529f\u80fd\u68c0\u6d4b\u65f6\u95f4
\nwireless ap anti-flood max-conn-count 5 \/\/\u8bbe\u7f6eAP FLOOD\u53cd\u5236\u529f\u80fd\u7684\u6700\u5927\u5141\u8bb8\u8fde\u63a5\u6570
\nwireless ap anti-flood agetime 120 \/\/2\u5c0f\u65f6\u540e\u6062\u590d\u6b63\u5e38<\/p>\n

5<\/span>．\u914d\u7f6e<\/span>vlan110 <\/span>\u65e0\u7ebf\u63a5\u5165\u7528\u6237\u76f8\u4e92\u9694\u79bb，\u5f00\u542f<\/span>ARP <\/span>\u6291\u5236\u529f\u80fd， \u9650\u5236\u6bcf\u5929\u65e9\u4e0a0 <\/span>\u70b9\u5230<\/span>4 <\/span>\u70b9\u7981\u6b62\u7ec8\u7aef\u63a5\u5165\u3002 <\/span><\/h3>\n

AC1:
\nWireless
\nnetwork 110
\narp-suppression \/\/\u5f00\u542fARP\u6291\u5236\u529f\u80fd
\ntime-limit from 00:00 to 04:00 weekday all \/\/\u9650\u5236\u6bcf\u5929\u65e9\u4e0a0\u70b9\u52304\u70b9\u7981\u6b62\u7ec8\u7aef\u63a5\u5165
\nstation-isolation \/\/\u542f\u52a8\u540c VAP \u5173\u8054\u7684\u65e0\u7ebf\u7528\u6237\u9694\u79bb\u529f\u80fd
\n!
\nap profile 1
\nstation-isolation allowed vlan 110 \/\/\u8bbe\u7f6eAP\u4e0b\u5c5e\u4e8eVLAN110\u7684VAP\u4e4b\u95f4\u7684\u9694\u79bb<\/p>\n

6<\/span>．\u914d\u7f6e<\/span>vlan110 <\/span>\u65e0\u7ebf\u63a5\u5165\u7528\u6237\u4e0a\u4e0b\u884c\u6700\u5927\u5e26\u5bbd\u4e3a<\/span>800Mbps <\/span>，<\/span>arp \u4e0a\u4e0b\u884c\u6700\u5927\u901f\u7387\u4e3a6packets\/s<\/span>\u3002 <\/span><\/h3>\n

AC1:
\nwireless
\nap client-qos \/\/\u542f\u7528client-qos\u529f\u80fd
\nnetwork 110
\nclient-qos enable \/\/\u542f\u52a8Network QoS \u529f\u80fd
\nclient-qos bandwidth-limit up 800000 \/\/\u914d\u7f6e\u4e0a\u884c\u6700\u5927\u5e26\u5bbd
\nclient-qos bandwidth-limit down 800000 \/\/\u914d\u7f6e\u4e0b\u884c\u6700\u5927\u5e26\u5bbd
\nclient-qos bandwidth-limit arp up 6 \/\/\u914d\u7f6eARP\u4e0a\u884c\u6700\u5927\u901f\u7387
\nclient-qos bandwidth-limit arp down 6 \/\/\u914d\u7f6eARP\u4e0b\u884c\u6700\u5927\u901f\u7387<\/p>\n

7<\/span>．\u914d\u7f6e<\/span>vlan110 <\/span>\u65e0\u7ebf\u63a5\u5165\u7528\u6237\u4e0a\u73ed\u65f6\u95f4（\u5de5\u4f5c\u65e5<\/span>09:00-17:00<\/span>）\u8bbf \u95ee Internet https <\/span>\u4e0a\u4e0b\u884c <\/span>CIR <\/span>\u4e3a <\/span>1Mbps<\/span>，<\/span>CBS <\/span>\u4e3a<\/span>20Mbps<\/span>，<\/span>PBS <\/span>\u4e3a 30Mbps，<\/span>exceed-action <\/span>\u548c<\/span>violate-action <\/span>\u5747\u4e3a<\/span>drop <\/span>\u3002\u65f6\u95f4\u8303\u56f4\u540d\u79f0\u3001\u63a7 \u5236\u5217\u8868\u540d\u79f0\u3001\u5206\u7c7b\u540d\u79f0\u3001\u7b56\u7565\u540d\u79f0\u5747\u4e3a Skills<\/span>\u3002 <\/span><\/h3>\n

AC1:
\ntime-range Skills
\nperiodic weekdays 09:00:00 to 17:00:00 \/\/\u8bbe\u7f6e\u65e0\u7ebf\u63a5\u5165\u7528\u6237\u4e0a\u73ed\u65f6\u95f4
\n!
\nip access-list extended Skills \/\/\u6309\u8981\u6c42\u914d\u7f6e\u8bbf\u95ee\u63a7\u5236\u5217\u8868\u7ea6\u675fvlan110
\npermit tcp 10.1.140.0 0.0.0.255 any-destination d-port 443 time-range Skills
\n!
\nclass-map Skills
\nmatch access-group Skills \/\/\u8bbe\u7f6e\u5206\u7c7b
\n!
\npolicy-map Skills \/\/\u8bbe\u7f6e\u7b56\u7565
\nclass Skills
\npolicy 1000 20000 30000 exceed-action drop violate-action drop
\n!
\nwireless
\nap client-qos \/\/\u542f\u7528client-qos\u529f\u80fd
\n!
\nnetwork 110
\nclient-qos enable \/\/\u542f\u52a8Network QoS \u529f\u80fd
\nclient-qos diffserv-policy up Skills \/\/\u8fd0\u7528\u7b56\u7565\u8bbe\u7f6e\u4e0a\u4e0b\u7684CIR，CBS，PBS
\nclient-qos diffserv-policy down Skills<\/p>\n

8<\/span>．<\/span>AP <\/span>\u53d1\u5c04\u529f\u7387\u4e3a<\/span>90%<\/span>\u3002<\/span><\/h3>\n

AC1:
\nWireless
\nap database 00-03-0f-c1-a8-b0 \/\/\u6ce8\u610f\u662fAP\u7684MAC\u5730\u5740
\n!
\nradio 1 power 90
\nradio 2 power 90
\n!
\nap profile 1
\nradio 1
\npower default 90
\n!
\nradio 2
\npower default 90 \/\/ AP\u53d1\u5c04\u529f\u7387\u4e3a90%<\/p>\n

\u4e94\u3001\u5b89\u5168\u7ef4\u62a4<\/span><\/h2>\n

\u8bf4\u660e：ip \u5730\u5740\u6309\u7167\u9898\u76ee\u7ed9\u5b9a\u7684\u987a\u5e8f\u7528\u201cip\/mask\u201d\u8868\u793a，ipv4 any \u5730\u5740\u75280.0.0.0\/0，ipv6 any \u5730\u5740\u7528::\/0 ，\u7981\u6b62\u7528\u5730\u5740\u6761\u76ee，\u5426\u5219\u6309\u96f6\u5206\u5904\u7406\u3002<\/span><\/h2>\n

1<\/span>．<\/span>FW1 <\/span>\u914d\u7f6e<\/span>ipv4 nat<\/span>，\u5b9e\u73b0\u96c6\u56e2\u4ea7\u54c1<\/span>1 <\/span>\u6bb5<\/span>ipv4 <\/span>\u8bbf\u95ee<\/span>Internet ipv4<\/span>，\u8f6c \u6362ip\/mask <\/span>\u4e3a<\/span>200.200.200.16\/28<\/span>，\u4fdd\u8bc1\u6bcf\u4e00\u4e2a\u6e90<\/span>ip <\/span>\u4ea7\u751f\u7684\u6240\u6709\u4f1a\u8bdd \u5c06 \u88ab\u6620\u5c04\u5230\u540c\u4e00\u4e2a\u56fa\u5b9a\u7684IP <\/span>\u5730\u5740；\u5f53\u6709\u6d41\u91cf\u5339\u914d\u672c\u5730\u5740\u8f6c\u6362\u89c4\u5219\u65f6 \u4ea7 \u751f\u65e5\u5fd7\u4fe1\u606f，\u5c06\u5339\u914d\u7684\u65e5\u5fd7\u53d1\u9001\u81f3 10.13.11.120 <\/span>\u7684 <\/span>UDP 514 <\/span>\u7aef\u53e3，\u8bb0 \u5f55\u4e3b\u673a\u540d，\u7528\u660e\u6587\u8f6e\u8be2\u65b9\u5f0f\u5206\u53d1\u65e5\u5fd7；\u5f00\u542f\u76f8\u5173\u7279\u6027，\u5b9e\u73b0\u6269\u5c55 nat \u8f6c\u6362\u540e\u7684\u7f51\u7edc\u5730\u5740\u7aef\u53e3\u8d44\u6e90\u3002 <\/span><\/h3>\n

\"\"<\/span><\/p>\n

\"\"\"\"\"\"\"\"<\/p>\n

2<\/span>．<\/span>FW1 <\/span>\u914d\u7f6e<\/span>nat64<\/span>，\u5b9e\u73b0\u96c6\u56e2\u4ea7\u54c1 <\/span>1 <\/span>\u6bb5<\/span>ipv6 <\/span>\u8bbf\u95ee<\/span>Internet ipv4<\/span>， \u8f6c\u6362\u4e3a\u51fa\u63a5\u53e3IP <\/span>，<\/span>ipv4 <\/span>\u8f6c<\/span>ipv6 <\/span>\u5730\u5740\u524d\u7f00\u4e3a<\/span>64:ff9b::\/96<\/span>\u3002 <\/span><\/h3>\n

\"\"<\/span><\/p>\n

3<\/span>．<\/span>FW1 <\/span>\u548c<\/span>FW2 <\/span>\u7b56\u7565\u9ed8\u8ba4\u52a8\u4f5c\u4e3a\u62d2\u7edd，<\/span>FW1 <\/span>\u5141\u8bb8\u96c6\u56e2\u4ea7\u54c1 <\/span>1 <\/span>\u6bb5 ipv4 \u548c<\/span>ipv6 <\/span>\u8bbf\u95ee<\/span>Internet <\/span>\u4efb\u610f\u670d\u52a1\u3002 <\/span><\/h3>\n

\"\"\"\"<\/span><\/p>\n

4<\/span>．<\/span>FW2 <\/span>\u5141\u8bb8\u529e\u4e8b\u5904\u4ea7\u54c1<\/span>ipv4 <\/span>\u8bbf\u95ee\u96c6\u56e2\u4ea7\u54c1 <\/span>1 <\/span>\u6bb5<\/span>https <\/span>\u670d\u52a1， \u5141 \u8bb8\u96c6\u56e2\u4ea7\u54c1 1 <\/span>\u6bb5\u8bbf\u95ee\u529e\u4e8b\u5904\u4ea7\u54c1<\/span>ipv4 <\/span>\u3001<\/span>FW2 loopback1 ipv4 <\/span>\u3001<\/span>SW3 \u6a21 \u62df\u529e\u4e8b\u5904loopback2 ipv4<\/span>\u3002 <\/span><\/h3>\n

\"\"\"\"<\/span><\/p>\n

5<\/span>．<\/span>FW1 <\/span>\u4e0e<\/span>RT2 <\/span>\u4e4b\u95f4\u7528<\/span>Internet<\/span>\u4e92\u8054\u5730\u5740\u5efa\u7acb<\/span>GRE Over IPSec VPN<\/span>， \u5b9e\u73b0loopback4 <\/span>\u4e4b\u95f4\u7684\u52a0\u5bc6\u8bbf\u95ee\u3002 <\/span><\/h3>\n

SW3:
\nip route vrf Internet 0.0.0.0\/0 200.200.200.6
\nip route vrf Internet 0.0.0.0\/0 200.200.200.2 \/\/\u8f6c\u53d1\u5b9e\u4f8b\u8fbe\u5230\u4e92\u8054\u4e92\u901a<\/p>\n

RT2：
\nip route default 200.200.200.5
\nip route 10.13.7.4 255.255.255.255 tunnel 4
\n\/\/\u8ba9Loopback4\u901a\u8fc7\u96a7\u9053\u52a0\u5bc6\u8bbf\u95ee
\n!
\nip access-list extended ACL-VPN
\npermit gre 200.200.200.6 255.255.255.252 200.200.200.2 255.255.255.252 sequence 10
\n\/\/\u914d\u7f6eACL-VPN\u4f7f\u7279\u5b9a\u6d41\u91cf\u901a\u8fc7
\n!
\ninterface Tunnel4
\n ip address 10.13.255.50 255.255.255.252
\n tunnel source 200.200.200.6
\n tunnel destination 200.200.200.2
\n\/\/\u914d\u7f6e\u96a7\u9053\u6e90\u7aef\u53e3ip\u548c\u76ee\u7684\u7aef\u53e3ip
\n!
\ncrypto isakmp key 0 Key-1122 address 200.200.200.2 255.255.255.252
\ncrypto isakmp policy 1
\n authentication pre-share
\n encryption 3des
\n hash md5
\n lifetime 4000
\n!
\ncrypto ipsec transform-set SET-1 esp-3des esp-md5-hmac
\n!
\ncrypto map MAP-1 10 ipsec-isakmp
\n match address ACL-VPN
\n set peer 200.200.200.2
\n set transform-set SET-1
\n\/\/\u521b\u5efa\u52a0\u5bc6\u56fe
\n!
\ninterface GigaEthernet0\/2
\n ipv6 enable
\n crypto map MAP-1
\n\/\/\u8c03\u7528\u52a0\u5bc6\u56fe<\/p>\n

FW1:
\nip vrouter "trust-vr"
\n ip route 0.0.0.0\/0 200.200.200.1 \/\/\u4f7f\u8def\u7531\u5668\u5230\u8fbeE1\/0\/17，\u8fbe\u5230FW2\u548cRT2\u4e4b\u95f4\u7684\u8bbf\u95ee
\n ip route 10.13.6.4\/32 10.4.255.50 \/\/\u8ba9Loopback4\u901a\u8fc7\u96a7\u9053\u52a0\u5bc6\u8bbf\u95ee
\n!
\ntunnel gre "GRE-1"
\n source 200.200.200.2
\n destination 200.200.200.6
\n interface ethernet0\/3
\n next-tunnel ipsec IPSEC-1
\nexit
\ninterface tunnel4
\n zone "VPNHub"
\n ip address 10.4.255.49 255.255.255.252
\n manage ping
\n tunnel gre "GRE-1" gw 10.4.255.50 \/\/\u8c03\u7528gre ，gw\u4e3a\u5bf9\u7aef\u96a7\u9053ip
\nexit<\/p>\n

\n

\"\"\"\"\"\"\"\"\"\"\"\"<\/span><\/p>\n

6<\/span>．<\/span>FW1 <\/span>\u8981\u6c42\u5185\u7f51\u6bcf\u4e2a<\/span>IP <\/span>\u9650\u5236\u4f1a\u8bdd\u6570\u91cf\u4e3a<\/span>300<\/span>\u3002 <\/span><\/h3>\n

\"\"<\/span><\/p>\n

7<\/span>．<\/span>FW1 <\/span>\u5f00\u542f\u5b89\u5168\u7f51\u5173\u7684<\/span>TCP SYN <\/span>\u5305\u68c0\u67e5\u529f\u80fd，\u53ea\u6709\u68c0\u67e5\u6536\u5230 \u7684\u5305\u4e3aTCP SYN <\/span>\u5305\u540e，\u624d\u5efa\u7acb\u8fde\u63a5，\u5426\u5219\u4e22\u5f03\u5305；\u914d\u7f6e\u5bf9<\/span>TCP <\/span>\u4e09\u6b21 \u63e1 \u624b\u5efa\u7acb\u7684\u65f6\u95f4\u8fdb\u884c\u68c0\u67e5，\u5982\u679c 1 <\/span>\u5206\u949f\u5185\u672a\u5b8c\u6210\u4e09\u6b21\u63e1\u624b，\u5219\u65ad\u6389\u8be5 \u8fde \u63a5；\u914d\u7f6e\u6240\u6709\u7684TCP <\/span>\u6570\u636e\u5305\u548c<\/span>TCP VPN <\/span>\u6570\u636e\u5305\u6bcf\u6b21\u80fd\u591f\u4f20\u8f93\u7684\u6700 \u5927\u6570\u636e\u5206\u6bb5\u4e3a 1460 <\/span>，\u5c3d\u529b\u51cf\u5c11\u7f51\u7edc\u5206\u7247\u3002<\/span><\/h3>\n

\"\"<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

\u6587\u7ae0\u6d4f\u89c8\u9605\u8bfb3.3k\u6b21\uff0c\u70b9\u8d5e72\u6b21\uff0c\u6536\u85cf58\u6b21\u30022023 \u5e74\u968f\u7740\u4f01\u4e1a\u6570\u5b57\u5316\u8f6c\u578b\u5de5\u4f5c\u8fdb\u4e00\u6b65\u63a8\u8fdb\uff0c\u4e3a\u6301\u7eed\u4f18\u5316\u8fd0\u8425 \u521b\u65b0\uff0c\u5145\u5206\u6fc0\u6d3b\u6570\u636e\u8981\u7d20\u6f5c\u80fd\uff0c\u4e3a\u793e\u4f1a\u521b\u9020\u66f4\u591a\u4ef7\u503c\uff0c\u96c6\u56e2\u51b3\u5b9a\u5728\u5317 \u4eac \u5efa\u7acb\u4e24\u4e2a\u6570\u636e\u4e2d\u5fc3\uff0c\u5728\u8d35\u5dde\u5efa\u7acb\u5f02\u5730\u707e\u5907\u6570\u636e\u4e2d\u5fc3\uff0c\u4ee5\u8fbe\u5230\u5feb\u901f\u3001 \u53ef \u9760\u4ea4\u6362\u6570\u636e\uff0c\u589e\u5f3a\u4e1a\u52a1\u90e8\u7f72\u5f39\u6027\u7684\u76ee\u7684\uff0c\u5b8c\u6210\u5411\u4e24\u5730\u4e09\u4e2d\u5fc3\u6574\u4f53\u6218 \u7565\u67b6\u6784\u6f14\u8fdb\uff0c\u66f4\u597d\u7684\u670d\u52a1\u4e8e\u516c\u53f8\u5ba2\u6237\u3002\uff0e\u8bf7\u6839\u636e\u5927\u8d5b\u6240\u63d0\u4f9b\u7684\u7ade\u8d5b\u73af\u5883\uff0c\u68c0\u67e5\u6240\u5217\u7684\u786c\u4ef6\u8bbe\u5907\u3001\u8f6f\u4ef6\u6e05 \u5355\u3001\u6750\u6599\u6e05\u5355\u662f\u5426\u9f50\u5168\uff0c\u8ba1\u7b97\u673a\u8bbe\u5907\u662f\u5426\u80fd\u6b63\u5e38\u4f7f\u7528\u3002\uff0e\u7ade\u8d5b\u5b8c\u6210\u540e\uff0c\u7ade\u8d5b\u8bbe\u5907\u3001\u8f6f\u4ef6\u548c\u8d5b\u9898\u8bf7\u4fdd\u7559\u5728\u5ea7\u4f4d\u4e0a\uff0c\u7981\u6b62\u5c06 \u7ade\u8d5b\u6240\u7528\u7684\u6240\u6709\u7269\u54c1\uff08\u5305\u62ec\u8bd5\u5377\u7b49\uff09\u5e26\u79bb\u8d5b\u573a\u3002_\u8fd0\u7ef4\u5168\u56fd\u6280\u80fd\u5927\u8d5b<\/p>\n","protected":false},"author":2,"featured_media":33753,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[2805,78,44],"topic":[],"class_list":["post-33773","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-server","tag-2805","tag-78","tag-44"],"yoast_head":"\n\u5168\u56fd\u804c\u4e1a\u9662\u6821\u6280\u80fd\u5927\u8d5b \u7f51\u7edc\u5efa\u8bbe\u4e0e\u8fd0\u7ef4\u6837\u9898\u89e3\u6790 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.wsisp.com\/helps\/33773.html\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u5168\u56fd\u804c\u4e1a\u9662\u6821\u6280\u80fd\u5927\u8d5b \u7f51\u7edc\u5efa\u8bbe\u4e0e\u8fd0\u7ef4\u6837\u9898\u89e3\u6790 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"og:description\" content=\"\u6587\u7ae0\u6d4f\u89c8\u9605\u8bfb3.3k\u6b21\uff0c\u70b9\u8d5e72\u6b21\uff0c\u6536\u85cf58\u6b21\u30022023 \u5e74\u968f\u7740\u4f01\u4e1a\u6570\u5b57\u5316\u8f6c\u578b\u5de5\u4f5c\u8fdb\u4e00\u6b65\u63a8\u8fdb\uff0c\u4e3a\u6301\u7eed\u4f18\u5316\u8fd0\u8425 \u521b\u65b0\uff0c\u5145\u5206\u6fc0\u6d3b\u6570\u636e\u8981\u7d20\u6f5c\u80fd\uff0c\u4e3a\u793e\u4f1a\u521b\u9020\u66f4\u591a\u4ef7\u503c\uff0c\u96c6\u56e2\u51b3\u5b9a\u5728\u5317 \u4eac \u5efa\u7acb\u4e24\u4e2a\u6570\u636e\u4e2d\u5fc3\uff0c\u5728\u8d35\u5dde\u5efa\u7acb\u5f02\u5730\u707e\u5907\u6570\u636e\u4e2d\u5fc3\uff0c\u4ee5\u8fbe\u5230\u5feb\u901f\u3001 \u53ef \u9760\u4ea4\u6362\u6570\u636e\uff0c\u589e\u5f3a\u4e1a\u52a1\u90e8\u7f72\u5f39\u6027\u7684\u76ee\u7684\uff0c\u5b8c\u6210\u5411\u4e24\u5730\u4e09\u4e2d\u5fc3\u6574\u4f53\u6218 \u7565\u67b6\u6784\u6f14\u8fdb\uff0c\u66f4\u597d\u7684\u670d\u52a1\u4e8e\u516c\u53f8\u5ba2\u6237\u3002\uff0e\u8bf7\u6839\u636e\u5927\u8d5b\u6240\u63d0\u4f9b\u7684\u7ade\u8d5b\u73af\u5883\uff0c\u68c0\u67e5\u6240\u5217\u7684\u786c\u4ef6\u8bbe\u5907\u3001\u8f6f\u4ef6\u6e05 \u5355\u3001\u6750\u6599\u6e05\u5355\u662f\u5426\u9f50\u5168\uff0c\u8ba1\u7b97\u673a\u8bbe\u5907\u662f\u5426\u80fd\u6b63\u5e38\u4f7f\u7528\u3002\uff0e\u7ade\u8d5b\u5b8c\u6210\u540e\uff0c\u7ade\u8d5b\u8bbe\u5907\u3001\u8f6f\u4ef6\u548c\u8d5b\u9898\u8bf7\u4fdd\u7559\u5728\u5ea7\u4f4d\u4e0a\uff0c\u7981\u6b62\u5c06 \u7ade\u8d5b\u6240\u7528\u7684\u6240\u6709\u7269\u54c1\uff08\u5305\u62ec\u8bd5\u5377\u7b49\uff09\u5e26\u79bb\u8d5b\u573a\u3002_\u8fd0\u7ef4\u5168\u56fd\u6280\u80fd\u5927\u8d5b\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.wsisp.com\/helps\/33773.html\" \/>\n<meta property=\"og:site_name\" content=\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"article:published_time\" content=\"2025-04-28T07:49:24+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2025\/04\/20250428074917-680f32fd53289.png\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"20 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/33773.html\",\"url\":\"https:\/\/www.wsisp.com\/helps\/33773.html\",\"name\":\"\u5168\u56fd\u804c\u4e1a\u9662\u6821\u6280\u80fd\u5927\u8d5b \u7f51\u7edc\u5efa\u8bbe\u4e0e\u8fd0\u7ef4\u6837\u9898\u89e3\u6790 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"isPartOf\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\"},\"datePublished\":\"2025-04-28T07:49:24+00:00\",\"dateModified\":\"2025-04-28T07:49:24+00:00\",\"author\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/33773.html#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.wsisp.com\/helps\/33773.html\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/33773.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.wsisp.com\/helps\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u5168\u56fd\u804c\u4e1a\u9662\u6821\u6280\u80fd\u5927\u8d5b \u7f51\u7edc\u5efa\u8bbe\u4e0e\u8fd0\u7ef4\u6837\u9898\u89e3\u6790\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\",\"url\":\"https:\/\/www.wsisp.com\/helps\/\",\"name\":\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"description\":\"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"contentUrl\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"caption\":\"admin\"},\"sameAs\":[\"http:\/\/wp.wsisp.com\"],\"url\":\"https:\/\/www.wsisp.com\/helps\/author\/admin\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"\u5168\u56fd\u804c\u4e1a\u9662\u6821\u6280\u80fd\u5927\u8d5b \u7f51\u7edc\u5efa\u8bbe\u4e0e\u8fd0\u7ef4\u6837\u9898\u89e3\u6790 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.wsisp.com\/helps\/33773.html","og_locale":"zh_CN","og_type":"article","og_title":"\u5168\u56fd\u804c\u4e1a\u9662\u6821\u6280\u80fd\u5927\u8d5b \u7f51\u7edc\u5efa\u8bbe\u4e0e\u8fd0\u7ef4\u6837\u9898\u89e3\u6790 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","og_description":"\u6587\u7ae0\u6d4f\u89c8\u9605\u8bfb3.3k\u6b21\uff0c\u70b9\u8d5e72\u6b21\uff0c\u6536\u85cf58\u6b21\u30022023 \u5e74\u968f\u7740\u4f01\u4e1a\u6570\u5b57\u5316\u8f6c\u578b\u5de5\u4f5c\u8fdb\u4e00\u6b65\u63a8\u8fdb\uff0c\u4e3a\u6301\u7eed\u4f18\u5316\u8fd0\u8425 \u521b\u65b0\uff0c\u5145\u5206\u6fc0\u6d3b\u6570\u636e\u8981\u7d20\u6f5c\u80fd\uff0c\u4e3a\u793e\u4f1a\u521b\u9020\u66f4\u591a\u4ef7\u503c\uff0c\u96c6\u56e2\u51b3\u5b9a\u5728\u5317 \u4eac \u5efa\u7acb\u4e24\u4e2a\u6570\u636e\u4e2d\u5fc3\uff0c\u5728\u8d35\u5dde\u5efa\u7acb\u5f02\u5730\u707e\u5907\u6570\u636e\u4e2d\u5fc3\uff0c\u4ee5\u8fbe\u5230\u5feb\u901f\u3001 \u53ef \u9760\u4ea4\u6362\u6570\u636e\uff0c\u589e\u5f3a\u4e1a\u52a1\u90e8\u7f72\u5f39\u6027\u7684\u76ee\u7684\uff0c\u5b8c\u6210\u5411\u4e24\u5730\u4e09\u4e2d\u5fc3\u6574\u4f53\u6218 \u7565\u67b6\u6784\u6f14\u8fdb\uff0c\u66f4\u597d\u7684\u670d\u52a1\u4e8e\u516c\u53f8\u5ba2\u6237\u3002\uff0e\u8bf7\u6839\u636e\u5927\u8d5b\u6240\u63d0\u4f9b\u7684\u7ade\u8d5b\u73af\u5883\uff0c\u68c0\u67e5\u6240\u5217\u7684\u786c\u4ef6\u8bbe\u5907\u3001\u8f6f\u4ef6\u6e05 \u5355\u3001\u6750\u6599\u6e05\u5355\u662f\u5426\u9f50\u5168\uff0c\u8ba1\u7b97\u673a\u8bbe\u5907\u662f\u5426\u80fd\u6b63\u5e38\u4f7f\u7528\u3002\uff0e\u7ade\u8d5b\u5b8c\u6210\u540e\uff0c\u7ade\u8d5b\u8bbe\u5907\u3001\u8f6f\u4ef6\u548c\u8d5b\u9898\u8bf7\u4fdd\u7559\u5728\u5ea7\u4f4d\u4e0a\uff0c\u7981\u6b62\u5c06 \u7ade\u8d5b\u6240\u7528\u7684\u6240\u6709\u7269\u54c1\uff08\u5305\u62ec\u8bd5\u5377\u7b49\uff09\u5e26\u79bb\u8d5b\u573a\u3002_\u8fd0\u7ef4\u5168\u56fd\u6280\u80fd\u5927\u8d5b","og_url":"https:\/\/www.wsisp.com\/helps\/33773.html","og_site_name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","article_published_time":"2025-04-28T07:49:24+00:00","og_image":[{"url":"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2025\/04\/20250428074917-680f32fd53289.png"}],"author":"admin","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"admin","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"20 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.wsisp.com\/helps\/33773.html","url":"https:\/\/www.wsisp.com\/helps\/33773.html","name":"\u5168\u56fd\u804c\u4e1a\u9662\u6821\u6280\u80fd\u5927\u8d5b \u7f51\u7edc\u5efa\u8bbe\u4e0e\u8fd0\u7ef4\u6837\u9898\u89e3\u6790 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","isPartOf":{"@id":"https:\/\/www.wsisp.com\/helps\/#website"},"datePublished":"2025-04-28T07:49:24+00:00","dateModified":"2025-04-28T07:49:24+00:00","author":{"@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41"},"breadcrumb":{"@id":"https:\/\/www.wsisp.com\/helps\/33773.html#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.wsisp.com\/helps\/33773.html"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.wsisp.com\/helps\/33773.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.wsisp.com\/helps"},{"@type":"ListItem","position":2,"name":"\u5168\u56fd\u804c\u4e1a\u9662\u6821\u6280\u80fd\u5927\u8d5b \u7f51\u7edc\u5efa\u8bbe\u4e0e\u8fd0\u7ef4\u6837\u9898\u89e3\u6790"}]},{"@type":"WebSite","@id":"https:\/\/www.wsisp.com\/helps\/#website","url":"https:\/\/www.wsisp.com\/helps\/","name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","description":"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41","name":"admin","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/","url":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","contentUrl":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","caption":"admin"},"sameAs":["http:\/\/wp.wsisp.com"],"url":"https:\/\/www.wsisp.com\/helps\/author\/admin"}]}},"_links":{"self":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/33773","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/comments?post=33773"}],"version-history":[{"count":0,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/33773\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/media\/33753"}],"wp:attachment":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/media?parent=33773"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/categories?post=33773"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/tags?post=33773"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/topic?post=33773"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}