1.配置lsw1交换机(lsw2方法相同)[sw1]stp enable[sw1]stp mode mstp[sw1]stp region-configuration[sw1-mst-region]region-name aa[sw1-mst-region]instance 1 vlan 2[sw1-mst-region]instance 2 vlan 3[sw1-mst-region]active region-configuration[sw1-mst-region]q[sw1]stp instance 1 root primary[sw1]stp instance 2 root secondary[sw1]interface Vlanif 2[sw1-Vlanif2]ip address 172.16.0.1 26[sw1-Vlanif2]vrrp vrid 1 virtual-ip 172.16.0.62[sw1-Vlanif2]vrrp vrid 1 priority 120[sw1-Vlanif2]vrrp vrid 1 track interface GigabitEthernet 0/0/5 reduced 30[sw1-Vlanif2]q[sw1]interface Vlanif 3[sw1-Vlanif3]ip address 172.16.0.65 26[sw1-Vlanif3]vrrp vrid 2 virtual-ip 172.16.0.126[sw1-Vlanif3]q[sw1]dhcp enable[sw1]ip pool aa[sw1-ip-pool-aa]network 172.16.0.0 mask 26[sw1-ip-pool-aa]gateway-list 172.16.0.62[sw1-ip-pool-aa]dns-list 8.8.8.8[sw1-ip-pool-aa]q[sw1]ip pool bb[sw1-ip-pool-bb]network 172.16.0.64 mask 2[sw1-ip-pool-bb]gateway-list172.16.0.126[sw1-ip-pool-bb]dns-list 8.8.8.8[sw1-ip-pool-bb]q[sw1]interface Vlanif 2[sw1-Vlanif2]dhcp select global[sw1-Vlanif2]q[sw1]interface Vlanif 3[sw1-Vlanif3]dhcp select global[sw1-Vlanif3]q[sw1]interface Vlanif 10[sw1-Vlanif10]ip address 172.16.0.129 26[sw1-Vlanif10]q[sw1]ip route-static 0.0.0.0 0 172.16.0.1302.配置lsw3交换机(lsw4方法相同)[sw3]stp enable[sw3]stp mode mstp[sw3]stp region-configuration[sw3-mst-region] region-name aa[sw3-mst-region] instance 1 vlan 2[sw3-mst-region] instance 2 vlan 3[sw3-mst-region] active region-configuration[sw3-mst-region]q[sw3]port-group group-member GigabitEthernet 0/0/3 to GigabitEthernet 0/0/4[sw3-port-group]stp edged-port enable[sw3-GigabitEthernet0/0/3]stp edged-port enable[sw3-GigabitEthernet0/0/4]stp edged-port enable[sw3-port-group]q[sw3]stp bpdu-protection配置AR1路由器[ar1]interface GigabitEthernet 0/0/1[ar1-GigabitEthernet0/0/1]q[ar1]interface GigabitEthernet 0/0/0[ar1-GigabitEthernet0/0/0]ip address 172.16.0.130 26[ar1-GigabitEthernet0/0/0]q[ar1]interface GigabitEthernet 0/0/1[ar1-GigabitEthernet0/0/1]ip address 172.16.0.194 26[ar1-GigabitEthernet0/0/1]int g 0/0/2[ar1-GigabitEthernet0/0/2]ip address 12.0.0.1 24[ar1-GigabitEthernet0/0/2]q[ar1]ip route-static 172.16.0.0 26 172.16.0.129[ar1]ip route-static 172.16.0.0 26 172.16.0.19[ar1]ip route-static 172.16.0.64 26 172.16.0.129[ar1]ip route-static 172.16.0.64 26 172.16.0.193[ar1]ip route-static 0.0.0.0 0 12.0.0.2[ar1]acl 2000[ar1-acl-basic-2000]rule permit source 172.16.0.0 0.0.0.255[ar1-acl-basic-2000] q[ar1]interface GigabitEthernet 0/0/2[ar1-GigabitEthernet0/0/2]nat outbound 2000配置ISP[isp]interface GigabitEthernet 0/0/0[isp-GigabitEthernet0/0/0]ip address 12.0.0.2 24[isp-GigabitEthernet0/0/0]int l 10[isp-LoopBack10]ip address 2.2.2.2 24[isp-LoopBack10]q主机pc1pc2