FW1配置system-viewsysname FW1undo info-center enableinterface GigabitEthernet 0/0/0ip address 192.168.0.1 255.255.255.0quitinterface GigabitEthernet 1/0/0ip address 10.1.2.1 255.255.255.0quitinterface GigabitEthernet 1/0/1ip address 192.168.2.1 255.255.255.0quitinterface GigabitEthernet 1/0/2ip address 10.1.1.1 255.255.255.252quitfirewall zone trustadd interface GigabitEthernet 1/0/1quitfirewall zone untrustadd interface GigabitEthernet 1/0/0quitfirewall zone dmzadd interface GigabitEthernet 1/0/2quitinterface GigabitEthernet 1/0/1vrrp vrid 1 virtual-ip 192.168.2.254vrrp vrid 1 priority 120vrrp vrid 1 preempt-mode timer delay 20quithrp enablehrp interface GigabitEthernet 1/0/2 remote 10.1.1.2hrp mirror session enableip route-static 0.0.0.0 0.0.0.0 10.1.2.2ospf 1area 0network 10.1.2.0 0.0.0.255network 192.168.2.0 0.0.0.255quitquitsecurity-policyrule name trust_to_untrustsource-zone trustdestination-zone untrustsource-address 192.168.2.0 24action permitquitsecurity-policyrule name permit_hrpsource-zone dmzdestination-zone dmzaction permitquitsecurity-policyrule name permit_local_ospfsource-zone localdestination-zone untrustservice ospfaction permitquitsecurity-policyrule name permit_ospf_localsource-zone untrustdestination-zone localservice ospfaction permitquitFW2配置system-viewsysname FW2undo info-center enableinterface GigabitEthernet 0/0/0ip address 192.168.0.2 255.255.255.0quitinterface GigabitEthernet 1/0/0ip address 10.1.3.1 255.255.255.0quitinterface GigabitEthernet 1/0/1ip address 192.168.2.2 255.255.255.0quitinterface GigabitEthernet 1/0/2ip address 10.1.1.2 255.255.255.252quitfirewall zone trustadd interface GigabitEthernet 1/0/1quitfirewall zone untrustadd interface GigabitEthernet 1/0/0quitfirewall zone dmzadd interface GigabitEthernet 1/0/2quitinterface GigabitEthernet 1/0/1vrrp vrid 1 virtual-ip 192.168.2.254vrrp vrid 1 priority 100quithrp enablehrp interface GigabitEthernet 1/0/2 remote 10.1.1.1hrp mirror session enableip route-static 0.0.0.0 0.0.0.0 10.1.3.2ospf 1area 0network 10.1.3.0 0.0.0.255network 192.168.2.0 0.0.0.255quitsecurity-policyrule name trust_to_untrustsource-zone trustdestination-zone untrustsource-address 192.168.2.0 24action permitquitsecurity-policyrule name permit_hrpsource-zone dmzdestination-zone dmzaction permitquitsecurity-policyrule name permit_local_ospfsource-zone localdestination-zone untrustservice ospfaction permitquitsecurity-policyrule name permit_ospf_localsource-zone untrustdestination-zone localservice ospfaction permitquitAR1配置system-viewsysname AR1undo info-center enableinterface GigabitEthernet 0/0/0ip address 10.1.2.2 255.255.255.0quitinterface GigabitEthernet 0/0/2ip address 10.1.4.1 255.255.255.0quitinterface GigabitEthernet 0/0/1ip address 12.0.0.1 255.255.255.0quitospf 1area 0network 10.1.2.0 0.0.0.255network 10.1.4.0 0.0.0.255network 12.0.0.0 0.0.0.255quitip route-static 192.168.2.0 255.255.255.0 10.1.2.1AR2配置system-viewsysname AR2undo info-center enableinterface GigabitEthernet 0/0/0ip address 10.1.3.2 255.255.255.0quitinterface GigabitEthernet 0/0/1ip address 10.1.4.2 255.255.255.0quitinterface GigabitEthernet 0/0/2ip address 13.0.0.1 255.255.255.0quitospf 1area 0network 10.1.3.0 0.0.0.255network 10.1.4.0 0.0.0.255network 13.0.0.0 0.0.0.255quitip route-static 192.168.2.0 255.255.255.0 10.1.3.1ISP配置system-viewsysname ISPundo info-center enableinterface LoopBack 0ip address 100.1.1.1 255.255.255.0quitinterface GigabitEthernet 0/0/0ip address 12.0.0.2 255.255.255.0quitinterface GigabitEthernet 0/0/1ip address 13.0.0.2 255.255.255.0quitip route-static 192.168.2.0 255.255.255.0 12.0.0.1ip route-static 192.168.2.0 255.255.255.0 13.0.0.1LSW1配置:system-viewsysname LSW1undo info-center enablevlan batch 2interface GigabitEthernet 0/0/3port link-type accessport default vlan 2quitinterface GigabitEthernet 0/0/1port link-type accessport default vlan 2quitinterface GigabitEthernet 0/0/2port link-type trunkport trunk allow-pass vlan 2quitLSW2配置system-viewsysname LSW2undo info-center enablevlan batch 2interface GigabitEthernet 0/0/3port link-type accessport default vlan 2quitinterface GigabitEthernet 0/0/1port link-type accessport default vlan 2quitinterface GigabitEthernet 0/0/2port link-type trunkport trunk allow-pass vlan 2quit