dsh-ensp 0.5.1 → 0.6.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -0,0 +1,1163 @@
1
+ {
2
+ "version": 1,
3
+ "levels": {
4
+ "HCIA": [
5
+ {
6
+ "level": "HCIA",
7
+ "title": "华为网络设备基本操作",
8
+ "page": 9,
9
+ "scenarios": [
10
+ "vlan-access",
11
+ "trunk-interconnect"
12
+ ],
13
+ "goals": [
14
+ "理解命令行视图的含义,以及进入、离开命令行视图的方法",
15
+ "掌握一些常见的命令",
16
+ "掌握使用命令行在线帮助的方法",
17
+ "掌握如何撤销命令",
18
+ "掌握如何使用命令行快捷键",
19
+ "配置文件保存成功!"
20
+ ],
21
+ "verify": [
22
+ "display current-configuration",
23
+ "display version",
24
+ "display startup"
25
+ ]
26
+ },
27
+ {
28
+ "level": "HCIA",
29
+ "title": "VLAN 配置实验",
30
+ "page": 21,
31
+ "scenarios": [
32
+ "vlan-access",
33
+ "trunk-interconnect",
34
+ "vlanif-routing",
35
+ "super-vlan"
36
+ ],
37
+ "goals": [
38
+ "掌握VLAN 的创建方法",
39
+ "掌握Access、Trunk 和Hybrid 类型接口的配置方法",
40
+ "掌握基于接口划分VLAN 的配置方法",
41
+ "掌握基于MAC 地址划分VLAN 的配置方法",
42
+ "掌握MAC 地址表及VLAN 信息的查看方式",
43
+ "配置交换机基于接口划分VLAN"
44
+ ],
45
+ "verify": [
46
+ "ping 192.168.1.3",
47
+ "display vlan",
48
+ "display mac-vlan vlan 3",
49
+ "display arp",
50
+ "display mac-address",
51
+ "ping 192.168.1.4",
52
+ "ping 192.168.1.251"
53
+ ]
54
+ },
55
+ {
56
+ "level": "HCIA",
57
+ "title": "生成树配置实验",
58
+ "page": 41,
59
+ "scenarios": [
60
+ "stp-rstp",
61
+ "mstp-load-balance"
62
+ ],
63
+ "goals": [
64
+ "掌握启用和禁用STP/RSTP 的方法",
65
+ "掌握修改交换机STP 模式的方法",
66
+ "掌握修改桥优先级,控制根桥选举的方法",
67
+ "掌握修改端口优先级,控制根端口和指定端口选举的方法",
68
+ "掌握修改端口开销,控制根端口和指定端口选举的方法",
69
+ "掌握边缘端口的配置方法"
70
+ ],
71
+ "verify": [
72
+ "display stp",
73
+ "display stp brief"
74
+ ]
75
+ },
76
+ {
77
+ "level": "HCIA",
78
+ "title": "以太网链路聚合实验",
79
+ "page": 54,
80
+ "scenarios": [
81
+ "link-aggregation"
82
+ ],
83
+ "goals": [
84
+ "掌握使用手动模式配置链路聚合的方法",
85
+ "掌握使用静态LACP 模式配置链路聚合的方法",
86
+ "掌握控制静态LACP 模式下控制活动链路的方法",
87
+ "掌握静态LACP 的部分特性的配置",
88
+ "配置手工模式链路聚合",
89
+ "配置LACP 模式链路聚合"
90
+ ],
91
+ "verify": [
92
+ "display eth-trunk 1"
93
+ ]
94
+ },
95
+ {
96
+ "level": "HCIA",
97
+ "title": "直连路由实验",
98
+ "page": 65,
99
+ "scenarios": [
100
+ "vlanif-routing"
101
+ ],
102
+ "goals": [
103
+ "配置Dot1q 终结功能和IP 地址后,设备也会添加相应的MAC 表项并置位三层转发标志",
104
+ "掌握通过配置Dot1q 终结子接口方法实现VLAN 间互访",
105
+ "掌握通过配置VLANIF 接口方法实现VLAN 间互访",
106
+ "配置Dot1q 终结子接口实现VLAN 间互访",
107
+ "配置VLANIF 接口实现VLAN 间互访",
108
+ "配置默认路由,相当于给设备配置了网关。"
109
+ ],
110
+ "verify": [
111
+ "ping 192.168.3.1",
112
+ "tracert 192.168.3.1"
113
+ ]
114
+ },
115
+ {
116
+ "level": "HCIA",
117
+ "title": "静态路由实验",
118
+ "page": 72,
119
+ "scenarios": [
120
+ "static-route"
121
+ ],
122
+ "goals": [
123
+ "掌握接口IPv4 地址的配置方法",
124
+ "理解LoopBack 接口的作用与含义",
125
+ "理解直连路由的产生原则",
126
+ "掌握静态路由的配置方法并理解其生效的条件",
127
+ "掌握通过Ping 工具测试网络层连通性",
128
+ "掌握并理解特殊静态路由的配置方法与应用场景"
129
+ ],
130
+ "verify": [
131
+ "display ip interface brief",
132
+ "display ip routing-table",
133
+ "ping 10.0.12.1",
134
+ "ping 10.0.23.3",
135
+ "ping -a 10.0.2.2 10.0.1.1",
136
+ "tracert -a 10.0.2.2 10.0.1.1"
137
+ ]
138
+ },
139
+ {
140
+ "level": "HCIA",
141
+ "title": "IP 地址自动配置实验",
142
+ "page": 88,
143
+ "scenarios": [
144
+ "dhcp",
145
+ "dhcp-snooping"
146
+ ],
147
+ "goals": [
148
+ "配置IP 地址,通过DHCP 方式静态分配机制避免人工配置发生错误,方便管理员统一维",
149
+ "掌握DHCP 全局地址池的配置方法",
150
+ "掌握通过DHCP 分配静态IP 地址的方法",
151
+ "配置DHCP 服务器",
152
+ "配置DHCP 客户端",
153
+ "配置DHCP Relay"
154
+ ],
155
+ "verify": [
156
+ "display interface GE 1/0/1",
157
+ "display ip interface GE 0/0/2",
158
+ "display dhcp client interface GE 0/0/2",
159
+ "display ip routing-table",
160
+ "display ip pool name for_r1 used",
161
+ "display ip interface GE 1/0/1",
162
+ "display ip pool name for_s1 used",
163
+ "ping 10.0.12.254"
164
+ ]
165
+ },
166
+ {
167
+ "level": "HCIA",
168
+ "title": "OSPF 配置实验",
169
+ "page": 101,
170
+ "scenarios": [
171
+ "ospf-single"
172
+ ],
173
+ "goals": [
174
+ "掌握OSPF 的基本配置命令",
175
+ "掌握如何查看OSPF 的运行状态",
176
+ "掌握如何通过Cost 控制OSPF 选路",
177
+ "掌握OSPF 发布默认路由的方法",
178
+ "掌握OSPF 认证配置方法",
179
+ "配置OSPF 认证"
180
+ ],
181
+ "verify": [
182
+ "display ospf peer",
183
+ "display ip routing-table protocol ospf",
184
+ "display ospf peer brief",
185
+ "display this",
186
+ "display ip routing-table",
187
+ "ping 10.0.12.1",
188
+ "ping 10.0.23.3",
189
+ "ping -a 10.0.2.2 10.0.1.1",
190
+ "tracert -a 10.0.2.2 10.0.3.3"
191
+ ]
192
+ },
193
+ {
194
+ "level": "HCIA",
195
+ "title": "IPv6 地址配置实验",
196
+ "page": 118,
197
+ "scenarios": [
198
+ "ipv6",
199
+ "ospfv3-ipv6"
200
+ ],
201
+ "goals": [
202
+ "掌握静态IPv6 地址的配置方法",
203
+ "掌握IPv6 无状态地址配置方法",
204
+ "掌握IPv6 静态路由的配置方法",
205
+ "掌握IPv6 相关信息查看方法",
206
+ "配置静态IPv6 地址",
207
+ "配置IPv6 无状态地址分配"
208
+ ],
209
+ "verify": [
210
+ "display ipv6 interface GE 1/0/1",
211
+ "display ipv6 interface GE 0/0/1",
212
+ "display ipv6 interface GE 0/0/2",
213
+ "display ipv6 neighbors GE 0/0/2",
214
+ "display ipv6 routing-table",
215
+ "ping ipv6 FE80::B2C7:87FF:FE33:D660 -i GE 1/0/1",
216
+ "ping ipv6 2000:23::2",
217
+ "ping ipv6 2000::2"
218
+ ]
219
+ },
220
+ {
221
+ "level": "HCIA",
222
+ "title": "ACL 配置实验",
223
+ "page": 129,
224
+ "scenarios": [
225
+ "acl-filter",
226
+ "nat"
227
+ ],
228
+ "goals": [
229
+ "掌握ACL 的配置方法",
230
+ "掌握ACL 在接口下的应用方法",
231
+ "掌握流量过滤的基本方式",
232
+ "配置设备IP 地址",
233
+ "配置OSPF,使得网络路由可达",
234
+ "配置ACL,匹配特定流量"
235
+ ],
236
+ "verify": [
237
+ "ping -a 10.0.1.1 10.0.23.3",
238
+ "ping -a 10.1.1.1 10.0.23.3"
239
+ ]
240
+ },
241
+ {
242
+ "level": "HCIA",
243
+ "title": "文件管理实验",
244
+ "page": 136,
245
+ "scenarios": [
246
+ "aaa-local",
247
+ "network-management"
248
+ ],
249
+ "goals": [
250
+ "理解建立FTP 连接的过程",
251
+ "掌握FTP 服务器参数的配置",
252
+ "掌握与FTP 服务器传输文件的方法",
253
+ "配置FTP 服务器功能及参数",
254
+ "配置本地FTP 用户",
255
+ "配置FTP 用户的级别。"
256
+ ],
257
+ "verify": []
258
+ },
259
+ {
260
+ "level": "HCIA",
261
+ "title": "远程登录实验",
262
+ "page": 144,
263
+ "scenarios": [
264
+ "aaa-local",
265
+ "network-management"
266
+ ],
267
+ "goals": [
268
+ "掌握本地AAA 认证授权方案的配置方法",
269
+ "掌握创建域的方法",
270
+ "掌握本地用户的创建方法",
271
+ "理解基于域的用户管理的原理",
272
+ "配置AAA 方案",
273
+ "配置本地用户"
274
+ ],
275
+ "verify": [
276
+ "display users",
277
+ "display aaa configuration",
278
+ "display vty ip-block all",
279
+ "display ssh server ip-block all",
280
+ "display local-user username hcia@datacom"
281
+ ]
282
+ },
283
+ {
284
+ "level": "HCIA",
285
+ "title": "NAT 配置实验",
286
+ "page": 156,
287
+ "scenarios": [
288
+ "nat",
289
+ "acl-filter"
290
+ ],
291
+ "goals": [
292
+ "掌握NAPT 的配置方法",
293
+ "掌握Easy IP 的配置方法",
294
+ "掌握NAT Server 的配置方法",
295
+ "配置NAPT",
296
+ "配置Easy IP",
297
+ "配置NAT Server"
298
+ ],
299
+ "verify": [
300
+ "display session all verbose",
301
+ "ping -c 1000 100.0.23.3"
302
+ ]
303
+ },
304
+ {
305
+ "level": "HCIA",
306
+ "title": "WAC+FIT AP 组网实验",
307
+ "page": 164,
308
+ "scenarios": [
309
+ "wlan-basic",
310
+ "wlan-roaming"
311
+ ],
312
+ "goals": [
313
+ "掌握FIT AP 上线的配置方法",
314
+ "掌握各种无线模板配置命令",
315
+ "掌握WLAN 配置的基本流程",
316
+ "配置参数",
317
+ "配置有线网络侧互通",
318
+ "配置AP1 上线:"
319
+ ],
320
+ "verify": [
321
+ "display ap all",
322
+ "display vap all",
323
+ "display station all",
324
+ "display lldp neighbor interface GE 1/0/4",
325
+ "display ip pool interface Vlanif101 used"
326
+ ]
327
+ },
328
+ {
329
+ "level": "HCIA",
330
+ "title": "网络编程自动化实验(可选)",
331
+ "page": 179,
332
+ "scenarios": [
333
+ "network-management"
334
+ ],
335
+ "goals": [
336
+ "掌握Python 基本语法",
337
+ "掌握paramiko 基本方法"
338
+ ],
339
+ "verify": []
340
+ },
341
+ {
342
+ "level": "HCIA",
343
+ "title": "网络故障排除实验",
344
+ "page": 188,
345
+ "scenarios": [
346
+ "ospf-troubleshooting",
347
+ "bgp-troubleshooting"
348
+ ],
349
+ "goals": [
350
+ "掌握园区网络故障处理基本流程",
351
+ "掌握园区网络故障排查命令",
352
+ "配置参数"
353
+ ],
354
+ "verify": [
355
+ "display ip interface Vlanif 101",
356
+ "display interface brief | include up",
357
+ "display vlan",
358
+ "display this",
359
+ "display ip pool interface Vlanif101",
360
+ "display interface Vlanif 101",
361
+ "display ip interface brief",
362
+ "display ip routing-table",
363
+ "display ap all",
364
+ "display ap online-fail-record all"
365
+ ]
366
+ },
367
+ {
368
+ "level": "HCIA",
369
+ "title": "园区网络综合实验",
370
+ "page": 220,
371
+ "scenarios": [
372
+ "campus-network",
373
+ "vlanif-routing",
374
+ "static-route"
375
+ ],
376
+ "goals": [
377
+ "掌握园区二层网络的配置方法",
378
+ "掌握园区三层网络的配置方法",
379
+ "掌握园区无线网络的配置方法",
380
+ "掌握园区网络安全与服务的配置方法",
381
+ "配置交换机、WAC 和路由器的接口和VLAN,配置三层接口地址、路由,使得网络互通",
382
+ "配置核心交换机的DHCP 功能,使交换机作为DHCP 服务器为AP 和无线/有线用户分配"
383
+ ],
384
+ "verify": [
385
+ "display lldp neighbor brief",
386
+ "display vlan",
387
+ "display stp brief",
388
+ "display lldp neighbor interface GE 1/0/4",
389
+ "display ip interface Vlanif 101",
390
+ "display ip pool interface Vlanif3 used",
391
+ "display ip pool interface Vlanif101 used",
392
+ "display ospf peer brief",
393
+ "display ip routing-table",
394
+ "display ap all"
395
+ ]
396
+ }
397
+ ],
398
+ "HCIP": [
399
+ {
400
+ "level": "HCIP",
401
+ "title": "IGP 高级特性实验",
402
+ "page": 6,
403
+ "scenarios": [
404
+ "ospf-troubleshooting",
405
+ "bfd-fast-convergence",
406
+ "isis-multi-level"
407
+ ],
408
+ "goals": [
409
+ "实现部署FRR、BFD 加快OSPF 收敛速度",
410
+ "实现对OSPF 出方向的LSA 进行过滤的配置",
411
+ "实现部署区域间路由过滤,减小OSPF LSDB 大小"
412
+ ],
413
+ "verify": [
414
+ "display ospf peer brief",
415
+ "display ospf routing",
416
+ "display isis peer",
417
+ "display isis route",
418
+ "display ospf routing 10.0.4.4 24",
419
+ "display ospf routing 10.0.4.4 32",
420
+ "display ospf bfd session all",
421
+ "display interface GigabitEthernet 0/0/1",
422
+ "display ospf bfd session GigabitEthernet 0/0/1",
423
+ "display ospf peer last-nbr-down"
424
+ ]
425
+ },
426
+ {
427
+ "level": "HCIP",
428
+ "title": "OSPF 基础实验",
429
+ "page": 7,
430
+ "scenarios": [
431
+ "ospf-single",
432
+ "ospf-multi-area",
433
+ "ospf-lsa-types",
434
+ "ospf-stub-nssa",
435
+ "ospf-virtual-link"
436
+ ],
437
+ "goals": [
438
+ "实现单区域OSPF 的配置",
439
+ "实现OSPF 区域认证的配置",
440
+ "描述OSPF 在多路访问网络中邻居关系建立的过程",
441
+ "实现对OSPF 接口代价值进行修改",
442
+ "阐明OSPF 中Silent-interface 的配置方法",
443
+ "实现通过display 命令查看OSPF 各种状态"
444
+ ],
445
+ "verify": [
446
+ "display ospf peer",
447
+ "display ospf routing",
448
+ "display ospf lsdb",
449
+ "display ospf lsdb router self-originate",
450
+ "display ospf lsdb network self-originate",
451
+ "display ospf routing 10.0.2.2",
452
+ "display ospf routing 10.0.3.3",
453
+ "display ospf lsdb router 10.0.2.2",
454
+ "display ospf routing 10.0.1.1",
455
+ "display ospf interface GigabitEthernet 0/0/3"
456
+ ]
457
+ },
458
+ {
459
+ "level": "HCIP",
460
+ "title": "网络准入控制实验",
461
+ "page": 11,
462
+ "scenarios": [
463
+ "port-security",
464
+ "aaa-local",
465
+ "dhcp-snooping"
466
+ ],
467
+ "goals": [
468
+ "配置802.1X 认证",
469
+ "配置MAC 认证",
470
+ "配置混合认证",
471
+ "配置source 地址为67.0.0.2,该地址为和RADIUS 服务器进行通信的源IP 地址,默认为报文",
472
+ "配置完成后,在当前页面可看到创建的用户信息。",
473
+ "配置为“Site2_MAC”,配置参数如下:"
474
+ ],
475
+ "verify": [
476
+ "display access-user username dot1x detail",
477
+ "display access-user",
478
+ "display access-user username 286e-d48a-1345 detail",
479
+ "display current-configuration"
480
+ ]
481
+ },
482
+ {
483
+ "level": "HCIP",
484
+ "title": "BGP 高级特性实验",
485
+ "page": 27,
486
+ "scenarios": [
487
+ "bgp-troubleshooting",
488
+ "bgp-attributes",
489
+ "bgp-aggregation"
490
+ ],
491
+ "goals": [
492
+ "实现基于Peer-Group 的BGP 对等体建立",
493
+ "实现BGP 路由策略配置",
494
+ "实现BGP 安全特性配置"
495
+ ],
496
+ "verify": [
497
+ "display bgp peer",
498
+ "display bgp group IBGP",
499
+ "display bgp routing-table",
500
+ "display bgp routing-table 10.0.3.1",
501
+ "display ospf peer brief",
502
+ "display ospf routing",
503
+ "display ip routing-table",
504
+ "ping -c 1 10.0.11.1",
505
+ "ping -c 1 10.0.12.2",
506
+ "ping -c 1 10.0.23.2"
507
+ ]
508
+ },
509
+ {
510
+ "level": "HCIP",
511
+ "title": "VXLAN 与EVPN 实验",
512
+ "page": 38,
513
+ "scenarios": [
514
+ "spine-leaf-vxlan",
515
+ "mpls-basic"
516
+ ],
517
+ "goals": [
518
+ "配置静态VXLAN 隧道",
519
+ "实现配置VXLAN 集中式网关实现跨三层互通",
520
+ "配置AGG1 与CORE1、CORE1 与AGG2 之间的静态VXLAN 隧道",
521
+ "配置VXLAN 分布式网关实现跨三层互通",
522
+ "配置EVPN 实例、IP VPN 实例,并分别绑定到BD、VBDIF 接口中",
523
+ "理解IPsec VPN 基本原理"
524
+ ],
525
+ "verify": [
526
+ "display interface Vbdif 10",
527
+ "display interface Vbdif 20",
528
+ "display current-configuration interface GigabitEthernet0/0/1",
529
+ "display current-configuration interface vlanif100",
530
+ "display current-configuration interface vlanif200",
531
+ "display acl 3100",
532
+ "display bgp evpn peer",
533
+ "display bgp evpn all routing-table inclusive-route",
534
+ "display bgp evpn all routing-table mac-route",
535
+ "display bgp evpn all routing-table mac-route 0:48:286e-d489-eb64:32:172.16.1.2"
536
+ ]
537
+ },
538
+ {
539
+ "level": "HCIP",
540
+ "title": "IPv6 实验",
541
+ "page": 52,
542
+ "scenarios": [
543
+ "ipv6",
544
+ "ospfv3-ipv6"
545
+ ],
546
+ "goals": [
547
+ "实现MP-BGP 配置",
548
+ "实现IS-IS 双栈配置",
549
+ "实现OSPF 双栈配置"
550
+ ],
551
+ "verify": [
552
+ "display ospfv3 peer",
553
+ "display ospfv3 routing",
554
+ "display ipv6 routing-table protocol ospfv3",
555
+ "display BGP IPV6 peer",
556
+ "display bgp ipv6 peer",
557
+ "display ipv6 routing-table protocol bgp",
558
+ "ping ipv6 2001:0db8:11::1",
559
+ "ping ipv6 2001:0db8:12::2",
560
+ "ping ipv6 2001:0db8:23::2",
561
+ "ping ipv6 2001:0db8:34::4"
562
+ ]
563
+ },
564
+ {
565
+ "level": "HCIP",
566
+ "title": "IS-IS 基础实验",
567
+ "page": 75,
568
+ "scenarios": [
569
+ "isis-multi-level"
570
+ ],
571
+ "goals": [
572
+ "实现IS-IS 协议基本配置",
573
+ "实现IS-IS 协议DIS 优先级修改",
574
+ "实现IS-IS 协议网络类型修改",
575
+ "实现IS-IS 协议外部路由引入",
576
+ "实现IS-IS 接口cost 修改",
577
+ "实现IS-IS 路由渗透配置"
578
+ ],
579
+ "verify": [
580
+ "display isis peer",
581
+ "display isis route",
582
+ "display isis interface",
583
+ "display isis route 192.168.1.1",
584
+ "display isis route 10.0.1.1",
585
+ "display isis route 10.0.1.1 32",
586
+ "display ip routing-table 10.0.5.5",
587
+ "ping -c 1 10.0.123.2",
588
+ "ping -c 1 10.0.123.3",
589
+ "ping -c 1 10.0.24.2"
590
+ ]
591
+ },
592
+ {
593
+ "level": "HCIP",
594
+ "title": "VLAN 高级技术实验",
595
+ "page": 79,
596
+ "scenarios": [
597
+ "super-vlan",
598
+ "port-isolation"
599
+ ],
600
+ "goals": [
601
+ "实现VLAN 聚合的基本配置",
602
+ "实现MUX VLAN 的基本配置",
603
+ "实现配置ARP 代理完成Sub-VLAN 之间的通信",
604
+ "描述ARP 代理实现Sub-VLAN 间通信的过程"
605
+ ],
606
+ "verify": [
607
+ "display mux-vlan",
608
+ "display arp all",
609
+ "ping -c 1 172.16.1.10",
610
+ "ping -c 1 172.16.1.20",
611
+ "ping -c 1 172.16.200.4",
612
+ "ping -c 1 172.16.200.3"
613
+ ]
614
+ },
615
+ {
616
+ "level": "HCIP",
617
+ "title": "BGP 实验",
618
+ "page": 89,
619
+ "scenarios": [
620
+ "bgp-ebgp-ibgp",
621
+ "bgp-route-reflector",
622
+ "bgp-aggregation"
623
+ ],
624
+ "goals": [
625
+ "实现IBGP 的配置",
626
+ "实现EBGP 的配置",
627
+ "实现BGP 更新源的配置",
628
+ "实现EBGP 多跳的配置",
629
+ "配置AS 64512 内的OSPF。",
630
+ "配置AS 64512 内的全互联IBGP 对等体关系。"
631
+ ],
632
+ "verify": [
633
+ "display bgp routing-table 10.2.2.0 24",
634
+ "display bgp routing-table 10.1.1.0 24",
635
+ "display bgp routing-table",
636
+ "display bgp peer 10.0.24.4 verbose",
637
+ "display bgp peer 10.0.24.4 verbose | in Update",
638
+ "display bgp peer",
639
+ "display bgp routing-table 172.16.0.0",
640
+ "display bgp routing-table 172.17.0.0 22",
641
+ "display bgp routing-table 172.16.1.0 24",
642
+ "display bgp routing-table 172.16.2.0 24"
643
+ ]
644
+ },
645
+ {
646
+ "level": "HCIP",
647
+ "title": "以太网交换安全实验",
648
+ "page": 91,
649
+ "scenarios": [
650
+ "port-security",
651
+ "arp-security",
652
+ "dhcp-snooping"
653
+ ],
654
+ "goals": [
655
+ "实现DHCP Snooping 的基本配置",
656
+ "实现配置IPSG 禁止用户私自修改终端IP 地址",
657
+ "实现配置端口安全限制终端的接入数量",
658
+ "实现配置端口隔离限制同网段用户的二层互通"
659
+ ],
660
+ "verify": [
661
+ "display interface GigabitEthernet 0/0/3 | in Hardware",
662
+ "display interface GigabitEthernet 0/0/4 | in Hardware",
663
+ "display ip interface brief | in GigabitEthernet0/0/3",
664
+ "display ip interface brief | in GigabitEthernet0/0/4",
665
+ "display dhcp snooping user-bind all",
666
+ "display logbuffer",
667
+ "display dhcp static user-bind all",
668
+ "display mac-addresssticky",
669
+ "display arp all",
670
+ "ping -c 1 172.16.10.254"
671
+ ]
672
+ },
673
+ {
674
+ "level": "HCIP",
675
+ "title": "BGP/MPLS IP VPN 实验",
676
+ "page": 105,
677
+ "scenarios": [
678
+ "mpls-basic",
679
+ "mpls-l3vpn"
680
+ ],
681
+ "goals": [
682
+ "实现MPLS 配置",
683
+ "实现MPLS LDP 配置",
684
+ "实现MPLS VPN 配置"
685
+ ],
686
+ "verify": [
687
+ "display bgp vpnv4 all peer",
688
+ "display isis peer",
689
+ "display isis interface",
690
+ "display isis route",
691
+ "display current-configuration section vpn-instance",
692
+ "display ip vpn-instance interface",
693
+ "display mpls ldp peer",
694
+ "display mpls lsp",
695
+ "display ip routing-table",
696
+ "ping -a 10.0.1.1 10.0.1.2"
697
+ ]
698
+ },
699
+ {
700
+ "level": "HCIP",
701
+ "title": "路由策略与路由控制实验",
702
+ "page": 154,
703
+ "scenarios": [
704
+ "route-policy-pbr",
705
+ "bgp-attributes"
706
+ ],
707
+ "goals": [
708
+ "实现在引入路由时调用Route-Policy 进行路由过滤",
709
+ "实现使用Route-Policy 设置路由标记以及过滤带标记的路由",
710
+ "实现使用Filter-Policy 对OSPF 接收的路由进行过滤"
711
+ ],
712
+ "verify": [
713
+ "display ospf peer brief",
714
+ "display isis peer",
715
+ "display ospf lsdb",
716
+ "display ospf lsdb ase 172.16.1.0",
717
+ "display ospf lsdb ase 172.16.2.0",
718
+ "display ip routing-table protocol ospf",
719
+ "display isis route",
720
+ "ping -c 1 10.0.12.1",
721
+ "ping -c 1 10.0.23.3",
722
+ "ping -c 1 10.0.34.3"
723
+ ]
724
+ },
725
+ {
726
+ "level": "HCIP",
727
+ "title": "RSTP 与MSTP 实验",
728
+ "page": 167,
729
+ "scenarios": [
730
+ "stp-rstp",
731
+ "mstp-load-balance",
732
+ "vrrp-basics"
733
+ ],
734
+ "goals": [
735
+ "实现手动修改桥优先级影响根桥选举",
736
+ "实现手动修改端口开销值控制根端口选举",
737
+ "实现手动修改端口优先级控制根端口选举",
738
+ "实现配置MSTP 以达到不同VLAN 间流量负载均衡",
739
+ "配置S1 为主根桥、S2 为备份根桥"
740
+ ],
741
+ "verify": [
742
+ "display stp instance 0 brief",
743
+ "display stp brief",
744
+ "display stp",
745
+ "display stp interface GigabitEthernet 0/0/2",
746
+ "display stp region-configuration",
747
+ "display stp instance 1 brief",
748
+ "display stp instance 2 brief",
749
+ "display lldp neighbor brief"
750
+ ]
751
+ },
752
+ {
753
+ "level": "HCIP",
754
+ "title": "组播实验",
755
+ "page": 179,
756
+ "scenarios": [
757
+ "multicast-pim-sm"
758
+ ],
759
+ "goals": [
760
+ "实现开启路由的组播路由功能以转发组播流量",
761
+ "实现在交换机上开启IGMP Snooping 并手动配置静态路由器端口、成员端口",
762
+ "实现通过PIM-DM 转发组播流量",
763
+ "实现修改IGP cost 值影响断言机制的选举结果",
764
+ "配置R1、R2、R3、R4 之间的OSPF,在互联接口、Loopback0 接口上激活OSPF。",
765
+ "实现通过PIM-SM 协议转发组播流量"
766
+ ],
767
+ "verify": [
768
+ "display pim neighbor",
769
+ "display igmp interface GigabitEthernet 0/0/5",
770
+ "display pim routing-table",
771
+ "display l2-multicast forwarding-table vlan 1",
772
+ "display pim bsr-info",
773
+ "display pim rp-info",
774
+ "ping multicast -c 10 239.0.0.12",
775
+ "display ospf peer brief",
776
+ "display ospf routing",
777
+ "display ip routing-table 10.0.1.1"
778
+ ]
779
+ },
780
+ {
781
+ "level": "HCIP",
782
+ "title": "防火墙技术实验",
783
+ "page": 208,
784
+ "scenarios": [
785
+ "firewall-zones",
786
+ "nat"
787
+ ],
788
+ "goals": [
789
+ "实现通过命令行配置防火墙安全策略",
790
+ "实现观察Server-map 理解NAT ALG 工作原理",
791
+ "配置源NAT、NAT Server。",
792
+ "配置安全策略,限制Untrust、DMZ 区域之间的访问。",
793
+ "配置用于访问Internet 的默认路由。",
794
+ "配置NAPT 用于私网用户(R1)访问Internet,配置NAT Server 将R1 的FTP 服务映射到公"
795
+ ],
796
+ "verify": [
797
+ "display firewall session table verbose destination global 10.0.12.2",
798
+ "display firewall session table verbose protocol tcp destination-port global 21",
799
+ "display firewall session table",
800
+ "display firewall server-map",
801
+ "ping -c 1 10.0.11.11",
802
+ "ping -c 1 10.0.12.2",
803
+ "ping -c 100 10.0.12.2"
804
+ ]
805
+ },
806
+ {
807
+ "level": "HCIP",
808
+ "title": "VRRP 实验",
809
+ "page": 219,
810
+ "scenarios": [
811
+ "vrrp-basics"
812
+ ],
813
+ "goals": [
814
+ "实现VRRP 的部署",
815
+ "实现VRRP 与MSTP 的协同工作",
816
+ "实现BFD 与VRRP 的联动配置",
817
+ "配置VLAN10 的VRRP 优先级为120,VLAN20 保持默认的100。",
818
+ "配置VLAN20 的VRRP 优先级为120,VLAN10 保持默认的100。"
819
+ ],
820
+ "verify": [
821
+ "display vrrp brief",
822
+ "display vrrp",
823
+ "display stp region-configuration",
824
+ "display stp instance 1 brief",
825
+ "display stp instance 2 brief",
826
+ "display bfd session all"
827
+ ]
828
+ },
829
+ {
830
+ "level": "HCIP",
831
+ "title": "DHCP 实验",
832
+ "page": 230,
833
+ "scenarios": [
834
+ "dhcp",
835
+ "dhcp-snooping"
836
+ ],
837
+ "goals": [
838
+ "实现部署DHCP Relay 让终端动态获取IP 地址",
839
+ "实现DHCP 静态地址绑定配置",
840
+ "配置DHCP Server,创建地址池为终端分配地址,同时创建静态分配地址。",
841
+ "配置DHCP Relay 设备,在接口下配置DHCP Relay 所代理的DHCP Server IP 地址。"
842
+ ],
843
+ "verify": [
844
+ "display dhcp relay all",
845
+ "display interface Vlanif 30",
846
+ "display ip pool name vlan10",
847
+ "display ip pool name vlan20",
848
+ "display ip pool name vlan30",
849
+ "display interface Vlanif 10",
850
+ "display interface Vlanif 20",
851
+ "ping -c 1 10.0.40.3",
852
+ "ping -c 1 10.0.10.3",
853
+ "ping -c 1 10.0.20.3"
854
+ ]
855
+ },
856
+ {
857
+ "level": "HCIP",
858
+ "title": "WLAN 实验",
859
+ "page": 242,
860
+ "scenarios": [
861
+ "wlan-basic",
862
+ "wlan-roaming"
863
+ ],
864
+ "goals": [
865
+ "实现通过配置漫游组实现AC 间三层漫游",
866
+ "阐明各种AP 上线的配置方法",
867
+ "阐明WLAN 配置的基本流程",
868
+ "配置参数",
869
+ "配置有线侧相关功能:S3 作为AP 管理流量、无线终端业务流量的网关,AC1、AC2 使用",
870
+ "配置AC1 上的WLAN 业务,让AP1 上线。"
871
+ ],
872
+ "verify": [
873
+ "display ap all",
874
+ "display station all",
875
+ "display ac protect",
876
+ "display station ssid roam",
877
+ "display station roam-track sta-mac 5489-986f-73ad",
878
+ "display mobility-group name mobility"
879
+ ]
880
+ }
881
+ ],
882
+ "HCIE": [
883
+ {
884
+ "level": "HCIE",
885
+ "title": "IPv4 路由技术",
886
+ "page": 10,
887
+ "scenarios": [
888
+ "ospf-troubleshooting",
889
+ "isis-multi-level",
890
+ "bgp-troubleshooting",
891
+ "bfd-fast-convergence"
892
+ ],
893
+ "goals": [
894
+ "实现部署FRR、BFD 加快OSPF 收敛速度",
895
+ "实现通过路由策略调整OSPF 路由的开销值",
896
+ "实现部署区域间路由过滤,减小OSPF LSDB 大小",
897
+ "配置OSPF",
898
+ "配置IS-IS",
899
+ "配置OSPF 与BFD 联动"
900
+ ],
901
+ "verify": [
902
+ "display ospf peer brief",
903
+ "display ospf routing",
904
+ "display isis peer",
905
+ "display isis route 10.0.4.4",
906
+ "display ospf routing 10.0.5.5 32",
907
+ "display ospf bfd session all",
908
+ "display ospf bfd session GigabitEthernet 0/5/0",
909
+ "display interface brief | include 0/5/0",
910
+ "display ospf lsdb",
911
+ "display ospf routing 10.3.3.0"
912
+ ]
913
+ },
914
+ {
915
+ "level": "HCIE",
916
+ "title": "MPLS VPN",
917
+ "page": 52,
918
+ "scenarios": [
919
+ "mpls-basic",
920
+ "mpls-l3vpn",
921
+ "ipsec-gre-tunnel"
922
+ ],
923
+ "goals": [
924
+ "实现MPLS 配置",
925
+ "实现MPLS LDP 配置",
926
+ "实现MPLS VPN 配置",
927
+ "实现采用不同的方式完成CE-PE 间的路由交换",
928
+ "实现通过RT 值控制CE 间的路由学习",
929
+ "配置AS 65100 域内的IS-IS,在互联接口、Loopback0 接口上开启IS-IS,实现域内IGP"
930
+ ],
931
+ "verify": [
932
+ "display mpls ldp adjacency all",
933
+ "display bgp vpnv4 vpn-instance vpna peer",
934
+ "display bgp vpnv4 vpn-instance vpna_in routing-table",
935
+ "display bgp vpnv4 vpn-instance vpna_out routing-table",
936
+ "display isis peer",
937
+ "display isis route",
938
+ "display bgp vpnv4 all peer",
939
+ "display bgp peer",
940
+ "display ospf peer brief",
941
+ "display bgp vpnv4 all routing-table"
942
+ ]
943
+ },
944
+ {
945
+ "level": "HCIE",
946
+ "title": "EVPN",
947
+ "page": 71,
948
+ "scenarios": [
949
+ "mpls-basic",
950
+ "spine-leaf-vxlan"
951
+ ],
952
+ "goals": [
953
+ "实现MPLS 配置",
954
+ "实现MPLS LDP 配置",
955
+ "实现EVPN 承载L3VPNv4",
956
+ "配置AS 65100 域内的IS-IS,在互联接口、Loopback0 接口上开启IS-IS,实现域内IGP",
957
+ "配置AS 65100 域内的MPLS,全局使能MPLS,配置MPLS LSR ID,在互联接口使能",
958
+ "配置IS-IS"
959
+ ],
960
+ "verify": [
961
+ "display bgp evpn peer",
962
+ "display bgp peer",
963
+ "display bgp vpnv4 vpn-instance vpna peer",
964
+ "display bgp evpn all routing-table",
965
+ "display bgp vpnv4 vpn-instance vpna_in routing-table",
966
+ "display bgp vpnv4 vpn-instance vpna_out routing-table",
967
+ "display bgp vpnv4 vpn-instance vpna routing-table",
968
+ "display bgp routing-table",
969
+ "display isis peer",
970
+ "display isis route"
971
+ ]
972
+ },
973
+ {
974
+ "level": "HCIE",
975
+ "title": "IPv6 路由技术",
976
+ "page": 91,
977
+ "scenarios": [
978
+ "ospfv3-ipv6",
979
+ "ipv6"
980
+ ],
981
+ "goals": [
982
+ "实现IS-IS For IPv6 配置",
983
+ "实现OSPFv3 配置",
984
+ "实现MP-BGP 配置",
985
+ "配置IS-IS 与OSPFv3 的双向引入",
986
+ "配置PE1、PE3 为RR 客户端。"
987
+ ],
988
+ "verify": [
989
+ "display ospfv3 peer",
990
+ "display ospfv3 routing",
991
+ "display bgp ipv6 peer",
992
+ "display bgp ipv6 routing-table",
993
+ "display isis route ipv6 2001::1:5:5",
994
+ "ping ipv6 -c 1 2001::9",
995
+ "ping ipv6 -c 1 2001::16",
996
+ "ping ipv6 -c 1 2001::d",
997
+ "ping ipv6 -c 1 2001::2",
998
+ "ping ipv6 -c 1 2001::1a"
999
+ ]
1000
+ },
1001
+ {
1002
+ "level": "HCIE",
1003
+ "title": "VXLAN 实验",
1004
+ "page": 111,
1005
+ "scenarios": [
1006
+ "spine-leaf-vxlan"
1007
+ ],
1008
+ "goals": [
1009
+ "配置静态VXLAN 隧道",
1010
+ "实现配置VXLAN 集中式网关完成跨三层互通",
1011
+ "配置Border 与Edge_1、Border 与Edge_2 之间的静态VXLAN 隧道",
1012
+ "配置VXLAN 分布式网关",
1013
+ "配置EVPN 实例、IP VPN 实例,并分别绑定到BD、VBDIF 接口中。",
1014
+ "配置EVPN 实例、IP VPN 实例,并分别绑定到BD、VBDIF 接口中"
1015
+ ],
1016
+ "verify": [
1017
+ "display mac-address bridge-domain 10",
1018
+ "display mac-address",
1019
+ "display ip routing-table 192.168.200.2",
1020
+ "ping 192.168.100.254",
1021
+ "display vxlan tunnel",
1022
+ "display vxlan peer",
1023
+ "display ospf peer",
1024
+ "display ospf routing",
1025
+ "display arp | include 192.168.200.2",
1026
+ "display bgp evpn peer"
1027
+ ]
1028
+ },
1029
+ {
1030
+ "level": "HCIE",
1031
+ "title": "VXLAN 虚拟化园区部署",
1032
+ "page": 153,
1033
+ "scenarios": [
1034
+ "spine-leaf-vxlan",
1035
+ "wlan-roaming"
1036
+ ],
1037
+ "goals": [
1038
+ "掌握站点创建及设备上线流程",
1039
+ "掌握Fabric 网络创建、资源部署、Underlay 网络自动化部署流程",
1040
+ "掌握Overlay 网络部署流程",
1041
+ "掌握业务随行及准入控制部署流程",
1042
+ "掌握WLAN 业务部署流程",
1043
+ "配置策略模板:包括RADIUS 服务器、Portal 服务器、认证模板(Portal、802.1X)。"
1044
+ ],
1045
+ "verify": [
1046
+ "display ap all",
1047
+ "display access-user",
1048
+ "display access-user username rd detail",
1049
+ "display access-user username sales detail"
1050
+ ]
1051
+ },
1052
+ {
1053
+ "level": "HCIE",
1054
+ "title": "广域互联网络部署",
1055
+ "page": 257,
1056
+ "scenarios": [
1057
+ "dual-homed-isp",
1058
+ "ipsec-gre-tunnel"
1059
+ ],
1060
+ "goals": [
1061
+ "实现网络模板配置",
1062
+ "实现站点设计配置",
1063
+ "实现DHCP 开局",
1064
+ "实现流量策略配置",
1065
+ "实现安全策略配置",
1066
+ "实现设备纳管。"
1067
+ ],
1068
+ "verify": [
1069
+ "display ospf peer brief",
1070
+ "display ospf routing",
1071
+ "display current-configuration interface vlanif150",
1072
+ "ping -c 1 10.0.0.6",
1073
+ "ping -c 1 10.0.0.2",
1074
+ "ping -c 1 10.0.0.9",
1075
+ "ping -c 1 10.0.0.13",
1076
+ "ping -c 1 10.0.0.17",
1077
+ "ping -c 1 10.0.0.26",
1078
+ "ping -c 1 65.0.0.1"
1079
+ ]
1080
+ },
1081
+ {
1082
+ "level": "HCIE",
1083
+ "title": "SR-MPLS 实验",
1084
+ "page": 336,
1085
+ "scenarios": [
1086
+ "mpls-basic",
1087
+ "mpls-l3vpn"
1088
+ ],
1089
+ "goals": [
1090
+ "实现通过IS-IS 完成PE 之间的路由可达",
1091
+ "实现通过配置SR-MPLS 建立SR LSP",
1092
+ "实现CE 之间互访使用的L3VPN 隧道迭代到SR-MPLS BE 隧道",
1093
+ "配置SR 域内的IS-IS,在互联接口、Loopback0 接口上开启IS-IS,实现SR 域内互通。",
1094
+ "配置MPLS,使能设备MPLS 功能,配置MPLS LSR ID。",
1095
+ "配置PE1、PE4 与P1、P2 之间的MP-IBGP 对等体关系,其中P1、P2 作为RR,反射来"
1096
+ ],
1097
+ "verify": [
1098
+ "display segment-routing prefix mpls forwarding",
1099
+ "display ip routing-table vpn-instance vpna",
1100
+ "display ip routing-table vpn-instance vpna 10.1.4.4 verbose",
1101
+ "display ip routing-table vpn-instance vpna 10.1.4.4 verbose | include TunnelID",
1102
+ "ping -vpn-instance vpna -a 10.1.1.1 10.1.4.4",
1103
+ "display isis peer",
1104
+ "display isis route",
1105
+ "display tunnel-info all",
1106
+ "display bgp vpnv4 all peer",
1107
+ "display bgp vpnv4 all routing-table | include 10.1.4.4"
1108
+ ]
1109
+ },
1110
+ {
1111
+ "level": "HCIE",
1112
+ "title": "SRv6 实验",
1113
+ "page": 399,
1114
+ "scenarios": [
1115
+ "ipv6",
1116
+ "ospfv3-ipv6",
1117
+ "mpls-l3vpn"
1118
+ ],
1119
+ "goals": [
1120
+ "实现通过配置SRv6 Locator 为本地私网路由自动分配SID",
1121
+ "实现CE 之间互访使用的L3VPN 隧道迭代到SRv6 BE 隧道",
1122
+ "配置SR 域内的IS-IS,在互联接口、Loopback0 接口上开启IS-IS,实现SR 域内互通。",
1123
+ "配置L3VPN",
1124
+ "配置RR 时注意关闭对VPNv4 路由的RT 值检查。",
1125
+ "配置SRv6 BE"
1126
+ ],
1127
+ "verify": [
1128
+ "display isis peer",
1129
+ "display isis route",
1130
+ "display bgp vpnv4 all routing-table",
1131
+ "display isis route ipv6",
1132
+ "display segment-routing ipv6 local-sid end-dt4 forwarding",
1133
+ "display bgp vpnv4 all routing-table 10.1.2.2",
1134
+ "display ip routing-table vpn-instance vpna",
1135
+ "display bgp evpn peer",
1136
+ "display segment-routing ipv6 local-sid end forwarding",
1137
+ "display bgp evpn all routing-table prefix-route 0:10.1.1.1:32 | include Prefix"
1138
+ ]
1139
+ },
1140
+ {
1141
+ "level": "HCIE",
1142
+ "title": "网络开放可编程",
1143
+ "page": 441,
1144
+ "scenarios": [
1145
+ "network-management"
1146
+ ],
1147
+ "goals": [
1148
+ "实现使用paramiko 模块SSH 登录设备",
1149
+ "实现使用paramiko 登录设备查看相关配置以及传输文件",
1150
+ "配置ACC_1 VLANIF2 接口的IP 地址。",
1151
+ "配置ACC_1 的互联IP 地址。",
1152
+ "实现通过ncclient 下发配置",
1153
+ "实现通过OPS 完成设备的配置自动创建、删除"
1154
+ ],
1155
+ "verify": [
1156
+ "display current-configuration interface GigabitEthernet 0/0/1",
1157
+ "display this",
1158
+ "ping 192.168.2.1"
1159
+ ]
1160
+ }
1161
+ ]
1162
+ }
1163
+ }