1.根据题目要求配置IP地址,修改设备名

2.L2W的vlan10绑定端口G1/0/1,vlan20绑定端口G1/0/1

3.交换机相连接口只放行vlan10 20，其余均不放行。

4.交换机与pc相连链路配置access模式。

5.Ce1 ce2 L2w之间配置stp，ce1 为vlan10的主根，ce2为vlan20的主根，域名为H3C

并在合适端口配置根保护，边缘端口，bpdu保护

6.CE1为vlan10主，CE2为vlan20。主Vrrp主根优先级为150，备用优先级为110，配置上行链路监视，当端口故障降低优先级50    

7.Ce1 ce2 与pe1连接的端口使用三层连接，

8.Pe1 pe2 pe3配置ospf 进程号1 lo0 地址为router-id 区域0，发布网段要求精确匹配

9.Ce1 ce2 配置ospf 进程号1 router-id为lo 0 地址 区域0 不允许协议报文发布到业务网段

10.Pe1 pe2 pe3 之间配置bgp 100，通过lo 0 建立ibgp， ce3 ce4配置bgp为300 通过直连端口建立ebgp

11.Ce5与pe2之间配置静态路由， pe3 与防火墙之间配置静态路由，internet与防火墙之间配置静态路由，防火墙配置区域 pe3为信任区域， internet为非信任区域

12.在防火墙配置nat，使server1可以访问internet

13.Pe1 pe2 pe3 配置mpls mpls-id为lo 0

14.Pc1 pc2 为server1 vpn1 ，pc3 server2 为vpn2

15. Ce1 ce2配置ipv6地址，配置ospfv3建立邻居，router-id是环回口地址

L2W：
sysname L2W
#
vlan 10
#
vlan 20
#
stp region-configuration
 region-name H3C
 instance 1 vlan 10    
 instance 2 vlan 20
 active region-configuration
#
 stp bpdu-protection
 stp global enable
#
interface NULL0
#
interface GigabitEthernet1/0/1
 port link-mode bridge
 port access vlan 10
 combo enable fiber
 stp edged-port
#
interface GigabitEthernet1/0/5
 port link-mode bridge
 port access vlan 20
 combo enable fiber
 stp edged-port
#
interface GigabitEthernet1/0/23
 port link-mode bridge    
 port link-type trunk
 undo port trunk permit vlan 1
 port trunk permit vlan 10 20
 combo enable fiber
 stp root-protection
#
interface GigabitEthernet1/0/24
 port link-mode bridge
 port link-type trunk
 undo port trunk permit vlan 1
 port trunk permit vlan 10 20
 combo enable fiber


CE1：
sysname CE1
#
track 1 interface GigabitEthernet1/0/1
#
ospf 1 router-id 9.9.9.101
 silent-interface Vlan-interface10
 silent-interface Vlan-interface20
 area 0.0.0.0
  network 10.0.0.0 0.0.0.3
  network 172.0.10.0 0.0.0.255    
  network 172.0.20.0 0.0.0.255
#
ospfv3 1
 router-id 9.9.9.101
 area 0.0.0.0
#
 lldp global enable
#
 system-working-mode standard
 xbar load-single
 password-recovery enable
 lpu-type f-series
#
vlan 1
#
vlan 10
#
vlan 20
#
stp region-configuration
 region-name H3C
 instance 1 vlan 10    
 instance 2 vlan 20
 active region-configuration
#
 stp instance 1 root primary
 stp instance 2 root secondary
 stp global enable
#
interface NULL0
#
interface LoopBack0
 ip address 9.9.9.101 255.255.255.255
#
interface Vlan-interface10
 ip address 172.0.10.252 255.255.255.0
 vrrp vrid 10 virtual-ip 172.0.10.254
 vrrp vrid 10 priority 150
 vrrp vrid 10 track 1 priority reduced 50
#
interface Vlan-interface20
 ip address 172.0.20.252 255.255.255.0
 vrrp vrid 20 virtual-ip 172.0.20.254
 vrrp vrid 20 priority 110    

CE2：
sysname CE2
#
 irf mac-address persistent timer
 irf auto-update enable
 undo irf link-delay
 irf member 1 priority 1
#
track 1 interface GigabitEthernet1/0/1
#
ospf 1 router-id 9.9.9.102
 silent-interface Vlan-interface10
 silent-interface Vlan-interface20
 area 0.0.0.0
  network 10.0.0.4 0.0.0.3
  network 172.0.10.0 0.0.0.255
  network 172.0.20.0 0.0.0.255
#
ospfv3 1
 router-id 9.9.9.102
 area 0.0.0.0
 area 0.0.0.9
#    
 lldp global enable
#
 system-working-mode standard
 xbar load-single
 password-recovery enable
 lpu-type f-series
#
vlan 1
#
vlan 10
#
vlan 20
#
stp region-configuration
 region-name H3C
 instance 1 vlan 10
 instance 2 vlan 20
 active region-configuration
#
 stp instance 1 root secondary
 stp instance 2 root primary
 stp global enable    
#
interface NULL0
#
interface LoopBack0
 ip address 9.9.9.102 255.255.255.255
#
interface Vlan-interface10
 ip address 172.0.10.253 255.255.255.0
 vrrp vrid 10 virtual-ip 172.0.10.254
 vrrp vrid 10 priority 110
#
interface Vlan-interface20
 ip address 172.0.20.253 255.255.255.0
 vrrp vrid 20 virtual-ip 172.0.20.254
 vrrp vrid 20 priority 150
 vrrp vrid 20 track 1 priority reduced 50
#
interface FortyGigE1/0/53
 port link-mode bridge
#
interface FortyGigE1/0/54
 port link-mode bridge    
#
interface GigabitEthernet1/0/1
 port link-mode route
 combo enable fiber
 ip address 10.0.0.6 255.255.255.252
#
interface GigabitEthernet1/0/6
 port link-mode route
 combo enable fiber
 ospfv3 1 area 0.0.0.0
 ipv6 address 2000::2/64
#
interface GigabitEthernet1/0/2
 port link-mode bridge
 port link-type trunk
 undo port trunk permit vlan 1
 port trunk permit vlan 10 20
 combo enable fiber
#
interface GigabitEthernet1/0/3
 port link-mode bridge
 port link-type trunk    
 undo port trunk permit vlan 1
 port trunk permit vlan 10 20
 combo enable fiber


PE2：
sysname PE2
#
ip vpn-instance VPN2
 route-distinguisher 2:2
 vpn-target 2:2 import-extcommunity
 vpn-target 2:2 export-extcommunity
#
ospf 1 router-id 9.9.9.2
 area 0.0.0.0
  network 9.9.9.2 0.0.0.0
  network 100.0.0.0 0.0.0.3
  network 100.0.0.4 0.0.0.3
#
 mpls lsr-id 9.9.9.2
#
 system-working-mode standard
 xbar load-single
 password-recovery enable
 lpu-type f-series    
#
vlan 1
#
mpls ldp
#
interface LoopBack0
 ip address 9.9.9.2 255.255.255.255
#
interface GigabitEthernet0/0
 port link-mode route
 combo enable copper
 ip address 100.0.0.2 255.255.255.252
 mpls enable
 mpls ldp enable
#
interface GigabitEthernet0/1
 port link-mode route
 combo enable copper
 ip address 100.0.0.5 255.255.255.252
 mpls enable
 mpls ldp enable
#    
interface GigabitEthernet0/2
 port link-mode route
 combo enable copper
 ip binding vpn-instance VPN2
 ip address 10.0.0.9 255.255.255.252
#
bgp 100
 router-id 9.9.9.2
 peer 9.9.9.1 as-number 100
 peer 9.9.9.1 connect-interface LoopBack0
 peer 9.9.9.3 as-number 100
 peer 9.9.9.3 connect-interface LoopBack0
 #
 address-family vpnv4
  peer 9.9.9.1 enable
  peer 9.9.9.3 enable
 #
 ip vpn-instance VPN2
  #
  address-family ipv4 unicast
   import-route static
#    
 scheduler logfile size 16
#
line class aux
 user-role network-operator
#
line class console
 user-role network-admin
#
line class tty
 user-role network-operator
#
line class vty
 user-role network-operator
#
line aux 0
 user-role network-operator
#
line con 0
 user-role network-admin
#
line vty 0 63
 user-role network-operator    
#
 ip route-static vpn-instance VPN2 192.0.10.0 24 10.0.0.10
           

PE3：
sysname H3C
#
ip vpn-instance VPN1
 route-distinguisher 1:1
 vpn-target 1:1 import-extcommunity
 vpn-target 1:1 export-extcommunity
#
ip vpn-instance VPN2
 route-distinguisher 2:2
 vpn-target 2:2 import-extcommunity
 vpn-target 2:2 export-extcommunity
#
ospf 1 router-id 9.9.9.3
 area 0.0.0.0
  network 9.9.9.3 0.0.0.0
  network 100.0.0.4 0.0.0.3
#
 mpls lsr-id 9.9.9.3
#    
 sysid PE3
#
 system-working-mode standard
 xbar load-single
 password-recovery enable
 lpu-type f-series
#
vlan 1
#
mpls ldp
#
interface Serial1/0
#
interface Serial2/0
#
interface Serial3/0
#
interface Serial4/0
#
interface NULL0
#
interface LoopBack0    
 ip address 9.9.9.3 255.255.255.255
#
interface GigabitEthernet0/0
 port link-mode route
 combo enable copper
 ip address 100.0.0.6 255.255.255.252
 mpls enable
 mpls ldp enable
#
interface GigabitEthernet0/1
 port link-mode route
 combo enable copper
 ip binding vpn-instance VPN1
 ip address 10.0.0.13 255.255.255.252
#
interface GigabitEthernet0/2
 port link-mode route
 combo enable copper
 ip binding vpn-instance VPN2
 ip address 10.0.0.17 255.255.255.252
#
interface GigabitEthernet5/0    
 port link-mode route
 combo enable copper
#
interface GigabitEthernet5/1
 port link-mode route
 combo enable copper
#
interface GigabitEthernet6/0
 port link-mode route
 combo enable copper
#
interface GigabitEthernet6/1
 port link-mode route
 combo enable copper
#
bgp 100
 router-id 9.9.9.3
 peer 9.9.9.1 as-number 100
 peer 9.9.9.1 connect-interface LoopBack0
 peer 9.9.9.2 as-number 100
 peer 9.9.9.2 connect-interface LoopBack0
 #    
 address-family vpnv4
  peer 9.9.9.1 enable
  peer 9.9.9.2 enable
 #
 ip vpn-instance VPN1
  peer 10.0.0.14 as-number 300
  #
  address-family ipv4 unicast
   peer 10.0.0.14 enable
 #
 ip vpn-instance VPN2
  peer 10.0.0.18 as-number 300
  #
  address-family ipv4 unicast
   peer 10.0.0.18 enable


CE3：
sysname CE3
#
 irf mac-address persistent timer
 irf auto-update enable
 undo irf link-delay
 irf member 1 priority 1
#    
 lldp global enable
#
 system-working-mode standard
 xbar load-single
 password-recovery enable
 lpu-type f-series
#
vlan 1
#
 stp global enable
#
interface NULL0
#
interface LoopBack0
 ip address 9.9.9.103 255.255.255.255
#
interface FortyGigE1/0/53
 port link-mode bridge
#
interface FortyGigE1/0/54
 port link-mode bridge
#    
interface GigabitEthernet1/0/1
 port link-mode route
 combo enable fiber
 ip address 10.0.0.14 255.255.255.252
#
interface GigabitEthernet1/0/2
 port link-mode route
 combo enable fiber
 ip address 172.0.0.254 255.255.255.0
#
bgp 300
 router-id 9.9.9.103
 peer 10.0.0.13 as-number 100
 #
 address-family ipv4 unicast
  network 172.0.0.0 255.255.255.0
  peer 10.0.0.13 enable
#


CE4：
sysname CE4
#
 irf mac-address persistent timer
 irf auto-update enable    
 undo irf link-delay
 irf member 1 priority 1
#
 lldp global enable
#
 system-working-mode standard
 xbar load-single
 password-recovery enable
 lpu-type f-series
#
vlan 1
#
 stp global enable
#
interface NULL0
#
interface LoopBack0
 ip address 9.9.9.104 255.255.255.255
#
interface FortyGigE1/0/53
 port link-mode bridge
#    
interface FortyGigE1/0/54
 port link-mode bridge
#
interface GigabitEthernet1/0/1
 port link-mode route
 combo enable fiber
 ip address 10.0.0.18 255.255.255.252
#
interface GigabitEthernet1/0/2
 port link-mode route
 combo enable fiber
 ip address 192.0.0.254 255.255.255.0
#
bgp 300
 router-id 9.9.9.104
 peer 10.0.0.17 as-number 100
 #
 address-family ipv4 unicast
  network 192.0.0.0 255.255.255.0
  peer 10.0.0.17 enable


CE5：
sysname CE5
#    
 system-working-mode standard
 xbar load-single
 password-recovery enable
 lpu-type f-series
#
vlan 1
#
interface LoopBack0
 ip address 9.9.9.105 255.255.255.255
#
interface GigabitEthernet0/0
 port link-mode route
 combo enable copper
 ip address 10.0.0.10 255.255.255.252
#
interface GigabitEthernet0/1
 port link-mode route
 combo enable copper
 ip address 192.0.10.254 255.255.255.0
#
ip route-static 0.0.0.0 0 10.0.0.9
#