[R1]
sys
sysname R1
undo info-center enable
int g0/0/0
ip add 14.215.177.254 24
int s4/0/0
ip add 202.96.128.1 30
ppp authentication-mode pap domain xxgcx
int s4/0/1
ip add 202.96.128.5 30
quit
aaa
local-user admin password cipher hello
quit
ospf 1
area 0.0.0.0
network 202.96.128.0 0.0.0.3
network 202.96.128.4 0.0.0.3
quit
[R2]
sys
sysname R2
dhcp enable
rip 1
undo summary
default-route originate
ver 2
network 172.16.0.0
network 202.96.128.0
silent-interface GigabitEthernet0/0/2
quit
ip pool VLAN10
network 172.16.10.0 mask 255.255.255.0
gateway-list 172.16.10.254
excluded-ip-address 172.16.10.250 172.16.10.253
dns-list 8.8.8.8
quit
ip pool VLAN20
network 172.16.20.0 mask 255.255.255.0
gateway-list 172.16.20.254
excluded-ip-address 172.16.20.250 172.16.20.253
dns-list 8.8.8.8
quit
ip pool VLAN30
network 172.16.30.0 mask 255.255.255.0
gateway-list 172.16.30.254
excluded-ip-address 172.16.30.250 172.16.30.253
dns-list 8.8.8.8
quit
ip pool VLAN40
network 172.16.40.0 mask 255.255.255.0
gateway-list 172.16.40.254
excluded-ip-address 172.16.40.250 172.16.40.253
dns-list 8.8.8.8
quit
undo info-center enable
int s4/0/0
ip add 202.96.128.2 30
ppp pap local-user R2@jnjs password cipher hzti
nat outbound 2001
int g0/0/0
ip add 172.16.201.1 24
rip authentication-mode md5 usual hzti
dhcp select global
int g0/0/1
ip add 172.16.202.1 24
rip authentication-mode md5 usual hzti
dhcp select global
int g0/0/2
ip add 172.16.200.254 24
quit
aaa
local-user admin password cipher hello
local-user xxgcx password cipher hzti privileg level 3
local-user xxgcx service-type telnet
user-interface vty 0 1
authentication-mode aaa
quit
interface Tunnel0/0/0
ip address 202.96.128.9 255.255.255.252
tunnel-protocol gre
source 172.16.20.0
destination 172.16.60.0
quit
ospf 1
area 0.0.0.0
network 202.96.128.0 0.0.0.3
quit
[R3]
sys
sysname R3
dhcp enable
undo info-center enable
rip 1
undo summary
default-route originate
ver 2
network 172.16.0.0
network 202.96.128.0
silent-interface GigabitEthernet0/0/2
quit
int s4/0/0
ip add 202.96.128.6 30
nat server protocol tcp global 202.96.128.166 ftp inside 172.16.250.1 ftp
nat outbound 2001
int g0/0/0
ip add 172.16.203.1 24
rip authentication-mode md5 usual hzti
dhcp select global
int g0/0/1
ip add 172.16.204.1 24
rip authentication-mode md5 usual hzti
int g0/0/2
ip add 172.16.250.254 24
quit
aaa
local-user admin password cipher hello
quit
ip pool VLAN50
gateway-list 172.16.50.254
network 172.16.50.0 mask 255.255.255.0
excluded-ip-address 172.16.50.250 172.16.50.253
dns-list 8.8.8.8
quit
ip pool VLAN60
gateway-list 172.16.60.254
network 172.16.60.0 mask 255.255.255.0
excluded-ip-address 172.16.60.250 172.16.60.253
dns-list 8.8.8.8
quit
interface Tunnel0/0/0
ip address 202.96.128.10 255.255.255.252
tunnel-protocol gre
source 172.16.60.0
destination 172.16.40.0
quit
ospf 1
area 0.0.0.0
network 202.96.128.4 0.0.0.3
quit
[SW2-1]
sys
sysname SW2-1
undo info-center enable
vlan 10
quit
int vlan 10
ip add 172.16.10.251 24
quit
ip route-static 0.0.0.0 0.0.0.0 172.16.10.254
port-group vlan10
group-member e0/0/1 to e0/0/10
port link-type access
port default vlan 10
quit
port-group vlan20
group-member e0/0/11 to e0/0/20
port link-type access
port default vlan 20
quit
int e0/0/21
port link-type trunk
int e0/0/22
port link-type trunk
quit
stp region-configuration
region-name hzti
revision-level 1
instance 1 vlan 10
instance 1 vlan 20
instance 2 vlan 30
instance 2 vlan 40
active region-configuration
aaa
local-user admin password cipher hello
quit
[SW2-2]
sys
sysname SW2-2
undo info-center enable
vlan 30
quit
int vlan 30
ip add 172.16.30.251 24
quit
ip route-static 0.0.0.0 0.0.0.0 172.16.30.254
port-group vlan30
group-member e0/0/1 to e0/0/10
port link-type access
port default vlan 30
quit
port-group vlan40
group-member e0/0/11 to e0/0/20
port link-type access
port default vlan 40
quit
int e0/0/21
port link-type trunk
int e0/0/22
port link-type trunk
quit
stp region-configuration
region-name hzti
revision-level 1
instance 1 vlan 10
instance 1 vlan 20
instance 2 vlan 30
instance 2 vlan 40
active region-configuration
aaa
local-user admin password cipher hello
quit
[SW2-3]
sys
sysname SW2-3
undo info-center enable
vlan 50
quit
int vlan 50
ip add 172.16.50.251 24
quit
ip route-static 0.0.0.0 0.0.0.0 172.16.50.254
port-group vlan50
group-member e0/0/1 to e0/0/10
port link-type access
port default vlan 50
quit
port-group vlan60
group-member e0/0/11 to e0/0/20
port link-type access
port default vlan 60
quit
int e0/0/21
port link-type trunk
int e0/0/22
port link-type trunk
quit
stp region-configuration
region-name hzti
revision-level 1
instance 1 vlan 50
instance 2 vlan 60
active region-configuration
quit
aaa
local-user admin password cipher hello
quit
[SW3-1]
sys
sysname SW3-1
dhcp enable
undo info-center enable
rip 1
undo summary
ver 2
network 172.16.0.0
silent-interface GigabitEthernet0/0/1
silent-interface GigabitEthernet0/0/2
quit
vlan batch 201 10 20 30 40
int vlan 201
ip add 172.16.201.2 24
rip authentication-mode md5 usual hzti
int vlan 10
ip add 172.16.10.252 24
dhcp select relay
dhcp relay server-ip 172.16.201.1
vrrp vrid 1 virtual-ip 172.16.10.254
vrrp vrid 1 priority 120
int vlan 20
ip add 172.16.20.252 24
dhcp select relay
dhcp relay server-ip 172.16.201.1
vrrp vrid 2 virtual-ip 172.16.20.254
vrrp vrid 2 priority 120
int vlan 30
ip add 172.16.30.252 24
dhcp select relay
dhcp relay server-ip 172.16.201.1
vrrp vrid 3 virtual-ip 172.16.30.254
int vlan 40
ip add 172.16.40.252 24
dhcp select relay
dhcp relay server-ip 172.16.201.1
vrrp vrid 4 virtual-ip 172.16.40.254
quit
stp region-configuration
region-name hzti
revision-level 1
instance 1 vlan 10
instance 1 vlan 20
instance 2 vlan 30
instance 2 vlan 40
active region-configuration
quit
stp instance 1 root secondary
stp instance 2 root primary
aaa
local-user admin password cipher hello
quit
[SW3-2]
sys
sysname SW3-2
dhcp enable
undo info-center enable
rip 1
ver 2
network 172.16.0.0
silent-interface GigabitEthernet0/0/2
quit
vlan batch 202 10 20 30 40
int vlan 202
ip add 172.16.202.2 24
rip authentication-mode md5 usual hzti
int vlan 10
ip add 172.16.10.253 24
dhcp select relay
dhcp relay server-ip 172.16.202.1
vrrp vrid 1 virtual-ip 172.16.10.254
int vlan 20
ip add 172.16.20.253 24
dhcp select relay
dhcp relay server-ip 172.16.202.1
vrrp vrid 2 virtual-ip 172.16.20.254
int vlan 30
ip add 172.16.30.253 24
dhcp select relay
dhcp relay server-ip 172.16.202.1
vrrp vrid 3 virtual-ip 172.16.30.254
vrrp vrid 3 priority 120
int vlan 40
ip add 172.16.40.253 24
dhcp select relay
dhcp relay server-ip 172.16.202.1
vrrp vrid 4 virtual-ip 172.16.40.254
vrrp vrid 4 priority 120
quit
stp region-configuration
region-name hzti
revision-level 1
instance 1 vlan 10
instance 1 vlan 20
instance 2 vlan 30
instance 2 vlan 40
active region-configuration
quit
stp instance 2 root secondary
stp instance 1 root primary
aaa
local-user admin password cipher hello
quit
[SW3-3]
sys
sysname SW3-3
dhcp enable
undo info-center enable
rip 1
ver 2
network 172.16.0.0
silent-interface GigabitEthernet0/0/2
quit
vlan batch 203 50 60
int vlan 203
ip add 172.16.203.2 24
rip authentication-mode md5 usual hzti
int vlan 50
ip add 172.16.50.252 24
dhcp select relay
dhcp relay server-ip 172.16.203.1
vrrp vrid 1 virtual-ip 172.16.50.254
vrrp vrid 1 priority 120
int vlan 60
ip add 172.16.60.252 24
vrrp vrid 2 virtual-ip 172.16.60.254
dhcp select relay
dhcp relay server-ip 172.16.203.1
quit
stp region-configuration
region-name hzti
revision-level 1
instance 1 vlan 50
instance 2 vlan 60
active region-configuration
quit
stp instance 1 root secondary
stp instance 2 root primary
aaa
local-user admin password cipher hello
quit
[SW3-4]
sys
sysname SW3-4
dhcp enable
undo info-center enable
rip 1
ver 2
network 172.16.0.0
silent-interface GigabitEthernet0/0/2
quit
vlan batch 204 50 60
int vlan 204
ip add 172.16.204.2 24
rip authentication-mode md5 usual hzti
int vlan 50
ip add 172.16.50.253 24
dhcp select relay
dhcp relay server-ip 172.16.204.1
vrrp vrid 1 virtual-ip 172.16.50.254
int vlan 60
ip add 172.16.60.253 24
dhcp select relay
dhcp relay server-ip 172.16.204.1
vrrp vrid 2 virtual-ip 172.16.60.254
vrrp vrid 2 priority 120
quit
stp region-configuration
region-name hzti
revision-level 1
instance 1 vlan 50
instance 2 vlan 60
active region-configuration
quit
stp instance 2 root secondary
stp instance 1 root primary
aaa
local-user admin password cipher hello
quit
原文：https://www.cnblogs.com/zytlk/p/14789095.html