旁挂负载分担组网实验

sw3配置

vlan配置 [sw3]vlan batch 2 3 [sw3]interface g 0/0/3 [sw3-GigabitEthernet0/0/3]port link-type trunk [sw3-GigabitEthernet0/0/3]port trunk all vlan 2 3 [sw3]interface g 0/0/4 [sw3-GigabitEthernet0/0/4]port link-type trunk [sw3-GigabitEthernet0/0/4]port trunk all vlan 2 3 MSTP配置 [sw3]stp region-configuration [sw3-mst-region]region-name aa [sw3-mst-region]instance 1 vlan 2 [sw3-mst-region]instance 2 vlan 3 [sw3-mst-region]active region-configuration sw1作为vlan2的主网关 作为vlan3的备份网关，三点合一 ：主网关 主根桥 流量汇集地 [sw3]stp instance 1 root primary [sw3]stp instance 2 root secondary VRRP配置 [sw3]interface Vlanif 2 [sw3-Vlanif2]ip address 192.168.2.1 24 [sw3-Vlanif2]vrrp vrid 1 virtual-ip 192.168.2.254 [sw3-Vlanif2]vrrp vrid 1 priority 120 作为主网关我们需要优先级 [sw3-Vlanif2]vrrp vrid 1 preempt-mode timer delay 20 设置抢占延迟时间 如果两条两条链路均存在问题，主网关应该向sw4切换。主备网关切换存在两种形式： 1.主动放弃，降低优先级 2.设备自身故障 这里我们是第一种情况，那就应该开启上行链路监控（两个接口都存在问题），降低优先级 [sw3-Vlanif2]vrrp vrid 1 track interface GigabitEthernet 0/0/1 reduced 15 [sw3-Vlanif2]vrrp vrid 1 track interface GigabitEthernet 0/0/2 reduced 15 vlanif 3 作为备份网关 只需要配置IP [sw3-Vlanif3]ip address 192.168.3.1 24 [sw3-Vlanif3]vrrp vrid 1 virtual-ip 192.168.3.254 [sw4-Vlanif3]vrrp vrid 1 priority 120 抢占延时 [sw4-Vlanif3]vrrp vrid 1 preempt-mode timer delay 20 [sw3]display vrrp brief VRID State Interface Type Virtual IP ---------------------------------------------------------------- 1 Master Vlanif2 Normal 192.168.2.254 1 Backup Vlanif3 Normal 192.168.3.254 ---------------------------------------------------------------- Total:2 Master:1 Backup:1 Non-active:0

sw4配置

vlan配置 [sw4]vlan batch 2 3 [sw4]interface GigabitEthernet 0/0/3 [sw4-GigabitEthernet0/0/3]port link-type trunk [sw4-GigabitEthernet0/0/3]port trunk all vlan 2 3 [sw4]interface g 0/0/4 [sw4-GigabitEthernet0/0/4]port link-type trunk [sw4-GigabitEthernet0/0/4]port trunk all vlan 2 3 stp配置 [sw4]stp region-configuration [sw4-mst-region]region-name aa [sw4-mst-region]instance 1 vlan 2 [sw4-mst-region]instance 2 vlan 3 [sw4-mst-region]active region-configuration [sw4]stp instance 1 root secondary [sw4]stp instance 2 root primary VRRP配置 vlan2作为备份网关 [sw4]interface vlanif 2 [sw4-Vlanif2]ip address 192.168.2.2 24 [sw4-Vlanif2]vrrp vrid 1 virtual-ip 192.168.2.254 vlan3作为主网关 [sw4]interface vlanif 3 [sw4-Vlanif3]ip address 192.168.3.2 24 [sw4-Vlanif3]vrrp vrid 1 virtual-ip 192.168.3.254 上行链路监控 [sw4-Vlanif3]vrrp vrid 1 track interface GigabitEthernet 0/0/1 reduced 15 [sw4-Vlanif3]vrrp vrid 1 track interface GigabitEthernet 0/0/2 reduced 15 [sw4]display vrrp brief VRID State Interface Type Virtual IP ---------------------------------------------------------------- 1 Backup Vlanif2 Normal 192.168.2.254 1 Master Vlanif3 Normal 192.168.3.254 ---------------------------------------------------------------- Total:2 Master:1 Backup:1 Non-active:0

sw5配置

[sw5]vlan batch 2 3 [sw5]interface g 0/0/3 [sw5-GigabitEthernet0/0/3]port link-type access [sw5-GigabitEthernet0/0/3]port default vlan 2 [sw5]interface g 0/0/4 [sw5-GigabitEthernet0/0/4]port link-type access [sw5-GigabitEthernet0/0/4]port default vlan 3 [sw5]interface g 0/0/1 [sw5-GigabitEthernet0/0/1]port link-type trunk [sw5-GigabitEthernet0/0/1]port trunk all vlan 2 3 [sw5]interface g 0/0/2 [sw5-GigabitEthernet0/0/2]port link-type trunk [sw5-GigabitEthernet0/0/2]port trunk all vlan 2 3 stp配置 [sw5]stp region-configuration [sw5-mst-region]region-name aa [sw5-mst-region]instance 1 vlan 2 [sw5-mst-region]instance 2 vlan 3 [sw5-mst-region]active region-configuration [sw5]display STP brief MSTID Port Role STP State Protection 0 GigabitEthernet0/0/1 ALTE DISCARDING NONE 0 GigabitEthernet0/0/2 ROOT FORWARDING NONE 0 GigabitEthernet0/0/3 DESI FORWARDING NONE 0 GigabitEthernet0/0/4 DESI FORWARDING NONE 1 GigabitEthernet0/0/1 ROOT FORWARDING NONE 1 GigabitEthernet0/0/2 ALTE DISCARDING NONE 1 GigabitEthernet0/0/3 DESI FORWARDING NONE 2 GigabitEthernet0/0/1 ALTE DISCARDING NONE 2 GigabitEthernet0/0/2 ROOT FORWARDING NONE 2 GigabitEthernet0/0/4 DESI FORWARDING NONE

SW1-SW2：VLAN 102 — 10.10.2.0/24 SW1-SW3：VLAN 103 — 10.10.3.0/24 SW1-SW4：VLAN 104 — 10.10.4.0/24 SW2-SW3：VLAN 203 — 10.20.3.0/24 SW2-SW4：VLAN 204 — 10.20.4.0/24

SW3

配置vlan [sw3]int GigabitEthernet 0/0/1 [sw3-GigabitEthernet0/0/1]port link-type access [sw3-GigabitEthernet0/0/1]port default vlan 103 [sw3-GigabitEthernet0/0/1]undo stp enable [sw3-GigabitEthernet0/0/1]int g0/0/2 [sw3-GigabitEthernet0/0/2]port link-type access [sw3-GigabitEthernet0/0/2]port default vlan 203 [sw3-GigabitEthernet0/0/2]undo stp enable 配置VRRP [sw3]interface Vlanif 103 [sw3-Vlanif103]ip add 10.10.3.3 24 [sw3]int Vlanif 203 [sw3-Vlanif203]ip add 10.20.3.3 24 配置OSPF [sw3]ospf 1 router-id 3.3.3.3 [sw3-ospf-1]area 0 [sw3-ospf-1-area-0.0.0.0]network 10.10.3.3 0.0.0.0 [sw3-ospf-1-area-0.0.0.0]network 10.20.3.3 0.0.0.0

SW4

配置VLAN [sw4]vlan batch 104 204 [sw4]interface GigabitEthernet 0/0/1 [sw4-GigabitEthernet0/0/1]port link-type access [sw4-GigabitEthernet0/0/1]port default vlan 204 [sw4-GigabitEthernet0/0/1]undo stp enable [sw4]int g0/0/2 [sw4-GigabitEthernet0/0/2]port link-type access [sw4-GigabitEthernet0/0/2]port default vlan 104 [sw4-GigabitEthernet0/0/2]undo stp enable 配置VRRP [sw4]interface Vlanif 104 [sw4-Vlanif104]ip address 10.10.4.4 24 [sw4]interface Vlanif 204 [sw4-Vlanif204]ip address 10.20.4.4 24 配置OSPF [sw4]ospf 1 router-id 4.4.4.4 [sw4-ospf-1-area-0.0.0.0]network 10.10.4.4 0.0.0.0 [sw4-ospf-1-area-0.0.0.0]network 10.20.4.4 0.0.0.0

sw1

配置VRF [sw1]ip vpn-instance vrf [sw1-vpn-instance-vrf]route-distinguisher 100:1 [sw1-vpn-instance-vrf-af-ipv4]vpn-target 100:1 both 配置vlan [sw1]vlan batch 102 103 104 [sw1]int g0/0/5 [sw1-GigabitEthernet0/0/5]port link-type access [sw1-GigabitEthernet0/0/5]port default vlan 103 [sw1-GigabitEthernet0/0/4]int g0/0/6 [sw1-GigabitEthernet0/0/6]port link-type access [sw1-GigabitEthernet0/0/6]port default vlan 104 [sw1]int g0/0/4 [sw1-GigabitEthernet0/0/4]port link-type trunk [sw1-GigabitEthernet0/0/4]port trunk allow-pass vlan 102 [sw1-GigabitEthernet0/0/4]undo port trunk allow-pass vlan 1 配置VRRP [sw1]interface Vlanif 102 [sw1-Vlanif102]ip binding vpn-instance vrf [sw1-Vlanif102]ip address 10.10.2.1 24 [sw1]int Vlanif 103 [sw1-Vlanif103]ip binding vpn-instance vrf [sw1-Vlanif103]ip address 10.10.3.1 24 [sw1]interface Vlanif 104 [sw1-Vlanif104]ip binding vpn-instance vrf [sw1-Vlanif104]ip address 10.10.4.1 24 配置OSPF [sw1]ospf 1 router-id 1.1.1.1 vpn-instance vrf [sw1-ospf-1]a 0 [sw1-ospf-1-area-0.0.0.0]net 10.10.2.1 0.0.0.0 [sw1-ospf-1-area-0.0.0.0]net 10.10.3.1 0.0.0.0 [sw1-ospf-1-area-0.0.0.0]net 10.10.4.1 0.0.0.0 [sw1]int g0/0/4 [sw1-GigabitEthernet0/0/4]undo stp enable [sw1-GigabitEthernet0/0/4]int g0/0/5 [sw1-GigabitEthernet0/0/5]undo stp enable [sw1-GigabitEthernet0/0/5]int g0/0/6 [sw1-GigabitEthernet0/0/6]undo stp enable

sw2

配置vlan [sw2]vlan batch 102 203 204 [sw2]int g0/0/4 [sw2-GigabitEthernet0/0/4]port link-type trunk [sw2-GigabitEthernet0/0/4]port trunk allow-pass vlan 102 [sw2-GigabitEthernet0/0/4]undo port trunk allow-pass vlan 1 [sw2-GigabitEthernet0/0/4]int g0/0/5 [sw2-GigabitEthernet0/0/5]port link-type access [sw2-GigabitEthernet0/0/5]port default vlan 204 [sw2-GigabitEthernet0/0/6]port link-type access [sw2-GigabitEthernet0/0/6]port default vlan 203 配置VRRP [sw2]int Vlanif 102 [sw2-Vlanif102]ip binding vpn-instance vrf [sw2-Vlanif102]ip address 10.10.2.2 24 [sw2]interface Vlanif 203 [sw2-Vlanif203]ip binding vpn-instance vrf [sw2-Vlanif203]ip address 10.20.3.2 24 [sw2-Vlanif203]int v 204 [sw2-Vlanif204]ip binding vpn-instance vrf [sw2-Vlanif204]ip address 10.20.4.2 24 配置OSPF [sw2]ospf 1 router-id 2.2.2.2 vpn-instance vrf [sw2-ospf-1-area-0.0.0.0]network 10.10.2.2 0.0.0.0 [sw2-ospf-1-area-0.0.0.0]network 10.20.3.2 0.0.0.0 [sw2-ospf-1-area-0.0.0.0]network 10.20.4.2 0.0.0.0 [sw2]int g0/0/4 [sw2-GigabitEthernet0/0/4]undo stp enable [sw2-GigabitEthernet0/0/4]int g0/0/5 [sw2-GigabitEthernet0/0/5]undo stp enable [sw2-GigabitEthernet0/0/5]int g0/0/6 [sw2-GigabitEthernet0/0/6]undo stp enable

sw3

[sw3]ip ip-prefix aa permit 192.168.2.0 24 [sw3]ip ip-prefix bb permit 192.168.3.0 24 [sw3]route-policy aa permit node 10 [sw3-route-policy]if-match ip-prefix bb [sw3-route-policy]apply cost 5 [sw3]route-policy aa permit node 20 [sw3-route-policy]if-match ip-prefix aa [sw3]ospf 1 [sw3-ospf-1]import-route direct route-policy aa [sw3]int Vlanif 203 [sw3-Vlanif203]ospf cost 5

sw4

[sw4]ip ip-prefix aa permit 192.168.2.0 24 [sw4]ip ip-prefix bb permit 192.168.3.0 24 [sw4]route-policy aa permit node 10 [sw4-route-policy]if-match ip-prefix aa [sw4-route-policy]apply cost 5 [sw4]route-policy aa permit node 20 [sw4-route-policy]if-match ip-prefix bb [sw4]ospf 1 [sw4-ospf-1]import-route direct route-policy aa [sw4]interface Vlanif 104 [sw4-Vlanif104]ospf cost 5

RRP备份组1 — VRRP备份组5 VRRP备份组2 — VRRP备份组6 VRRP备份组3 — VRRP备份组7 VRRP备份组4 — VRRP备份组8 VRRP备份组1：VRF使用，SW1为主，SW2为备 VLAN 401 — 10.40.1.0/24 SW1：10.40.1.1/24 SW2：10.40.1.2/24 虚拟IP：10.40.1.100 VRRP备份组5：FW使用，FW1为主，FW2为备 VLAN 401 — 10.40.1.0/24 FW1:10.40.1.10/24 FW2:10.40.1.20/24 虚拟IP：10.40.1.200

sw1

[sw1]vlan batch 401 402 [sw1]int g 0/0/32 [sw1]int g 0/0/3 [sw1-GigabitEthernet0/0/3]port link-type trunk [sw1-GigabitEthernet0/0/3]port trunk allow-pass vlan 401 402 [sw1-GigabitEthernet0/0/4]port trunk allow-pass vlan 401 402 [sw1]int v 401 [sw1-Vlanif401]ip binding vpn-instance VRF [sw1-Vlanif401]ip address 10.40.1.1 24 [sw1-Vlanif401]vrrp vrid 1 virtual-ip 10.40.1.100 [sw1-Vlanif401]vrrp vrid 1 priority 120 [sw1-Vlanif401]vrrp vrid 1 preempt-mode timer delay 60 [sw1-Vlanif401]vrrp vrid 1 track interface GigabitEthernet 0/0/3 reduced 30 [sw1]int v 402 [sw1-Vlanif402]ip binding vpn-instance VRF [sw1-Vlanif402]ip address 10.40.2.1 24 [sw1-Vlanif402]vrrp vrid 2 virtual-ip 10.40.2.100

sw2

[sw2]vlan batch 401 402 [sw2-GigabitEthernet0/0/3]port link-type trunk [sw2-GigabitEthernet0/0/3]port trunk allow-pass vlan 401 402 [sw2-GigabitEthernet0/0/4]port trunk allow-pass vlan 401 402 [sw2-Vlanif401]ip binding vpn-instance VRF [sw2-Vlanif401]ip address 10.40.1.2 24 [sw2-Vlanif401]vrrp vrid 1 virtual-ip 10.40.1.100 [sw2-Vlanif402]ip binding vpn-instance VRF [sw2-Vlanif402]ip address 10.40.2.2 24 [sw2-Vlanif402]vrrp vrid 2 virtual-ip 10.40.2.100 [sw2-Vlanif402]vrrp vrid 2 priority 120 [sw2-Vlanif402]vrrp vrid 2 preempt-mode [sw2-Vlanif402]vrrp vrid 2 preempt-mode timer delay 60 [sw2-Vlanif402]vrrp vrid 2 track interface GigabitEthernet 0/0/3 reduced 30

fw1

[FW1-GigabitEthernet1/0/3.404]vlan-type dot1q 404 [FW1]firewall zone trust [FW1-zone-trust]add int g 1/0/2.401 [FW1-zone-trust]add int g 1/0/2.402 [FW1]firewall zone untrust [FW1-zone-untrust]add int g 1/0/3.403 [FW1-zone-untrust]add int g 1/0/3.404 [FW1]firewall zone dmz [FW1-zone-dmz]add int g 1/0/0 [FW1]int g 1/0/2.401 [FW1-GigabitEthernet1/0/2.401]vrrp vrid 5 virtual-ip 10.40.1.200 active [FW1]int g 1/0/2.402 [FW1-GigabitEthernet1/0/2.402]vrrp vrid 6 virtual-ip 10.40.2.200 standby [FW1]int g 1/0/3.403 [FW1-GigabitEthernet1/0/3.403]vrrp vrid 7 virtual-ip 10.40.3.200 active [FW1]int g 1/0/3.404 [FW1-GigabitEthernet1/0/3.404]vrrp vrid 8 virtual-ip 10.40.4.200 standby [FW1]hrp interface GigabitEthernet 1/0/0 remote 10.10.10.2 [FW1]hrp enable [FW1]ip route-static 192.168.0.0 16 10.40.1.100 [FW1]ip route-static 192.168.0.0 16 10.40.2.100 preference 70 [FW1]ip route-static 0.0.0.0 0 10.40.3.100 [FW1]ip route-static 0.0.0.0 0 10.40.4.100 preference 70 HRP_M[FW1]hrp mirror session enable HRP_M[FW1]security-policy HRP_M[FW1-policy-security]rule name t_to_u HRP_M[FW1-policy-security-rule-t_to_u]source-zone trust HRP_M[FW1-policy-security-rule-t_to_u]destination-zone untrust HRP_M[FW1-policy-security-rule-t_to_u]source-address 192.168.0.0 16 HRP_M[FW1-policy-security-rule-t_to_u]action permit

fw2

[FW2-GigabitEthernet1/0/2.401]vlan-type dot1q 401 [FW2-GigabitEthernet1/0/2.402]ip address 10.40.2.20 24 [FW2-GigabitEthernet1/0/2.402]vlan-type dot1q 402 [FW2-GigabitEthernet1/0/3.403]ip address 10.40.3.20 24 [FW2-GigabitEthernet1/0/3.403]vlan-type dot1q 403 [FW2-GigabitEthernet1/0/3.404]ip address 10.40.4.20 24 [FW2-GigabitEthernet1/0/3.404]vlan-type dot1q 404 [FW2-zone-trust]add int g 1/0/2.401 [FW2-zone-trust]add int g 1/0/2.402 [FW2-zone-untrust]add int g 1/0/3.403 [FW2-zone-untrust]add int g 1/0/3.404 [FW2-zone-dmz]add int g 1/0/0 [FW2-GigabitEthernet1/0/2.401]vrrp vrid 5 virtual-ip 10.40.1.200 standby [FW2-GigabitEthernet1/0/2.402]vrrp vrid 6 virtual-ip 10.40.2.200 active [FW2-GigabitEthernet1/0/3.403]vrrp vrid 7 virtual-ip 10.40.3.200 standby [FW2-GigabitEthernet1/0/3.404]vrrp vrid 8 virtual-ip 10.40.4.200 active [FW2]hrp interface GigabitEthernet 1/0/0 remote 10.10.10.1 [FW2]hrp enable HRP_S[FW2]ip route-static 0.0.0.0 0 10.40.4.100 HRP_S[FW2]ip route-static 0.0.0.0 0 10.40.3.100 preference 70 HRP_S[FW2]ip route-static 192.168.0.0 255.255.0.0 10.40.2.100 HRP_S[FW2]ip route-static 192.168.0.0 255.255.0.0 10.40.1.100 preference 70

sw1

[sw1]vlan batch 403 404 [sw1]int GigabitEthernet 0/0/1 [sw1-GigabitEthernet0/0/1]port link-type trunk [sw1-GigabitEthernet0/0/1]port trunk allow-pass vlan 403 404 [sw1]int GigabitEthernet 0/0/2 [sw1-GigabitEthernet0/0/2]port link-type trunk [sw1-GigabitEthernet0/0/2]port trunk allow-pass vlan 403 404 [sw1]int Vlanif403 [sw1-Vlanif403]ip address 10.40.3.1 255.255.255.0 [sw1-Vlanif403]vrrp vrid 3 virtual-ip 10.40.3.100 [sw1-Vlanif403]vrrp vrid 3 priority 120 [sw1-Vlanif403]vrrp vrid 3 preempt-mode timer delay 20 [sw1-Vlanif403]vrrp vrid 3 track interface GigabitEthernet 0/0/1 reduced 30 [sw1]int Vlanif404 [sw1-Vlanif404]ip address 10.40.4.1 255.255.255.0 [sw1-Vlanif404]vrrp vrid 4 virtual-ip 10.40.4.100 [sw1]ip route-static vpn-instance VRF 0.0.0.0 0 10.40.1.200 [sw1]ip route-static vpn-instance VRF 0.0.0.0 0 10.40.2.200 preference 70 [sw1]ip route-static 192.168.0.0 16 10.40.3.200 [sw1]ip route-static 192.168.0.0 16 10.40.4.200 preference 70

sw2

[sw2]vlan batch 403 404 [sw2-GigabitEthernet0/0/1]port link-type trunk [sw2-GigabitEthernet0/0/1]port trunk allow-pass vlan 403 404 [sw2-GigabitEthernet0/0/2]port link-type trunk [sw2-GigabitEthernet0/0/2]port trunk allow-pass vlan 403 404 [sw2-Vlanif403]ip address 10.40.3.2 24 [sw2-Vlanif403]vrrp vrid 3 virtual-ip 10.40.3.100 [sw2-Vlanif404]ip address 10.40.4.2 24 [sw2-Vlanif404]vrrp vrid 4 virtual-ip 10.40.4.100 [sw2-Vlanif404]vrrp vrid 4 priority 120 [sw2-Vlanif404]vrrp vrid 4 preempt-mode timer delay 20 [sw2-Vlanif404]vrrp vrid 4 track interface GigabitEthernet 0/0/1 reduced 30 [sw2]ip route-static vpn-instance VRF 0.0.0.0 0 10.40.2.200 [sw2]ip route-static vpn-instance VRF 0.0.0.0 0 10.40.1.200 preference 70 [sw2]ip route-static 192.168.0.0 16 10.40.3.200 preference 70 [sw2]ip route-static 192.168.0.0 16 10.40.4.200

fw1

HRP_M[FW1]int g 1/0/2 (+B) HRP_M[FW1-GigabitEthernet1/0/2]ip add 1.1.1.1 24 HRP_M[FW1-GigabitEthernet1/0/2]undo ip address HRP_M[FW1]int g 1/0/3 HRP_M[FW1-GigabitEthernet1/0/3]ip address 1.1.1.1 24 HRP_M[FW1-GigabitEthernet1/0/3]undo ip address

fw2

HRP_S[FW2]int g 1/0/2 HRP_S[FW2-GigabitEthernet1/0/2]ip add 1.1.1.1 24 HRP_S[FW2-GigabitEthernet1/0/2]undo ip address HRP_S[FW2-GigabitEthernet1/0/2]int g 1/0/3 HRP_S[FW2-GigabitEthernet1/0/3]ip add 1.1.1.1 24. HRP_S[FW2-GigabitEthernet1/0/3]undo ip add

VLAN规划 SW1-SW2: VLAN 201 — 10.20.1.0/24 SW1-R5:VLAN 105 — 10.10.5.0/24 SW2-R6:VLAN 206 — 10.20.6.0/24 R5-R6: 10.56.0.0/24

sw1

[sw1]vlan batch 201 105 [sw1-GigabitEthernet0/0/7]port link-type access [sw1-GigabitEthernet0/0/7]port default vlan 105 [sw1-GigabitEthernet0/0/7]undo stp enable [sw1-GigabitEthernet0/0/2]port trunk allow-pass vlan 201 [sw1-Vlanif105]ip address 10.10.5.1 255.255.255.0 [sw1-Vlanif201]ip address 10.20.1.1 255.255.255.0 [sw1]ospf 2 router-id 1.1.1.1 [sw1-ospf-2-area-0.0.0.0]network 10.10.5.1 0.0.0.0 [sw1-ospf-2-area-0.0.0.0]network 10.20.1.1 0.0.0.0

sw2

[sw2]vlan batch 201 206 [sw2-GigabitEthernet0/0/7]port default vlan 206 [sw2-GigabitEthernet0/0/7]undo stp enable [sw2-GigabitEthernet0/0/2]port trunk allow-pass vlan 201 [sw2-Vlanif201]ip address 10.20.1.2 255.255.255.0 [sw2-Vlanif206]ip address 10.20.6.2 255.255.255.0 [sw2]ospf 2 router-id 2.2.2.2 [sw2-ospf-2-area-0.0.0.0]network 10.20.6.2 0.0.0.0 [sw2-ospf-2-area-0.0.0.0]network 10.20.1.2 0.0.0.0

r5

[r5]int g 0/0/0 [r5-GigabitEthernet0/0/0]ip add 10.10.5.5 24 [r5-GigabitEthernet0/0/0]int g 0/0/1 [r5-GigabitEthernet0/0/1]ip add 10.56.0.5 24 [r5]ospf 2 router-id 5.5.5.5 [r5-ospf-2]a 0 [r5-ospf-2-area-0.0.0.0]network 10.56.0.5 0.0.0.0 [r5-ospf-2-area-0.0.0.0]network 10.10.5.5 0.0.0.0 [r5]int g 0/0/2 [r5-GigabitEthernet0/0/2]ip add 12.0.0.5 24 [r5-GigabitEthernet0/0/2]q [r5]ip route-static 0.0.0.0 0 12.0.0.100 [r5]ospf 2 [r5-ospf-2]default-route-advertise [r5]acl 2000 [r5-acl-basic-2000]rule permit source 192.168.0.0 0.0.255.255 [r5]int g 0/0/2 [r5-GigabitEthernet0/0/2]nat outbound 2000

r6

[r6]int g 0/0/0 [r6-GigabitEthernet0/0/0]ip add 10.20.6.6 24 [r6-GigabitEthernet0/0/0]int g 0/0/1 [r6-GigabitEthernet0/0/1]ip add 10.56.0.6 24 [r6]ospf 2 router-id 6.6.6.6 [r6-ospf-2]a 0 [r6-ospf-2-area-0.0.0.0]network 10.20.6.6 0.0.0.0 [r6-ospf-2-area-0.0.0.0]network 10.56.0.6 0.0.0.0 [r6]int g 0/0/2 [r6-GigabitEthernet0/0/2]ip add 13.0.0.6 24 [r6]ip route-static 0.0.0.0 0 13.0.0.100 [r6]ospf 2 [r6-ospf-2]default-route-advertise [r6]acl 2000 [r6-acl-basic-2000]rule permit source 192.168.0.0 0.0.255.255 [r6]int g 0/0/2 [r6-GigabitEthernet0/0/2]nat outbound 2000

isp

[ISP]int g 0/0/0 [ISP-GigabitEthernet0/0/0]ip add 12.0.0.100 24 [ISP-GigabitEthernet0/0/0]int g 0/0/1 [ISP-GigabitEthernet0/0/1]ip add 13.0.0.100 24 [ISP]interface LoopBack 0 [ISP-LoopBack0]ip address 100.1.1.1 24

sw1

[sw2]ospf 1 [sw2-ospf-1]de [sw2-ospf-1]default-route-advertise [sw2]ospf 2 [sw2-ospf-2]import-route static

sw2

[sw2]ospf 1 [sw2-ospf-1]de [sw2-ospf-1]default-route-advertise [sw2]ospf 2 [sw2-ospf-2]import-route static

]default-route-advertise
[r6]acl 2000
[r6-acl-basic-2000]rule permit source 192.168.0.0 0.0.255.255
[r6]int g 0/0/2
[r6-GigabitEthernet0/0/2]nat outbound 2000

isp

[ISP]int g 0/0/0
[ISP-GigabitEthernet0/0/0]ip add 12.0.0.100 24
[ISP-GigabitEthernet0/0/0]int g 0/0/1
[ISP-GigabitEthernet0/0/1]ip add 13.0.0.100 24
[ISP]interface LoopBack 0
[ISP-LoopBack0]ip address 100.1.1.1 24

sw1

[sw2]ospf 1
[sw2-ospf-1]de
[sw2-ospf-1]default-route-advertise
[sw2]ospf 2
[sw2-ospf-2]import-route static

sw2

[sw2]ospf 1
[sw2-ospf-1]de
[sw2-ospf-1]default-route-advertise
[sw2]ospf 2
[sw2-ospf-2]import-route static