VLAN 本身是二层隔离的,想要互通必须三层路由,华为模拟器常用两种方案:
1.路由器单臂路由(新手入门、低成本):路由器 + 二层交换机
2.三层交换机 VLANIF(企业主流、速度更快):一台三层交换机直接完成转发
方案一:路由器单臂路由
拓扑

第一步:二层交换机配置(LSW1)
<Huawei>system-view # 进入系统视图
[Huawei]sysname LSW1 # 改名交换机
# 批量创建VLAN10、VLAN20
[LSW1]vlan batch 10 20
# 1. 连接PC1的端口G0/0/1:接入VLAN10
[LSW1]interface GigabitEthernet 0/0/1
[LSW1-GigabitEthernet0/0/1]port link-type access
[LSW1-GigabitEthernet0/0/1]port default vlan 10
[LSW1-GigabitEthernet0/0/1]quit
# 2. 连接PC2的端口G0/0/2:接入VLAN20
[LSW1]interface GigabitEthernet 0/0/2
[LSW1-GigabitEthernet0/0/2]port link-type access
[LSW1-GigabitEthernet0/0/2]port default vlan 20
[LSW1-GigabitEthernet0/0/2]quit
# 3. 连接路由器的端口G0/0/0:配置Trunk(允许带VLAN标签通行)
[LSW1]interface GigabitEthernet 0/0/0
[LSW1-GigabitEthernet0/0/0]port link-type trunk
[LSW1-GigabitEthernet0/0/0]port trunk allow-pass vlan 10 20
[LSW1-GigabitEthernet0/0/0]quit
第二步:路由器配置(AR1,核心)
<Huawei>system-view
[Huawei]sysname AR1
# 子接口0/0/0.10 对应VLAN10
[AR1]interface GigabitEthernet 0/0/0.10
[AR1-GigabitEthernet0/0/0.10]dot1q termination vid 10 # 封装802.1Q,识别VLAN10标签
[AR1-GigabitEthernet0/0/0.10]ip address 192.168.10.254 24 # VLAN10网关
[AR1-GigabitEthernet0/0/0.10]arp broadcast enable # 关键!开启ARP广播,不通大概率忘这条
[AR1-GigabitEthernet0/0/0.10]quit
# 子接口0/0/0.20 对应VLAN20
[AR1]interface GigabitEthernet 0/0/0.20
[AR1-GigabitEthernet0/0/0.20]dot1q termination vid 20
[AR1-GigabitEthernet0/0/0.20]ip address 192.168.20.254 24
[AR1-GigabitEthernet0/0/0.20]arp broadcast enable
[AR1-GigabitEthernet0/0/0.20]quit
测试:

方案二:三层交换机 VLANIF 接口(企业标准用法)
拓扑

<Huawei>system-view
[Huawei]sysname CORE
# 1. 创建VLAN
[CORE]vlan batch 10 20
# 2. 接入PC端口配置Access模式
# G0/0/1接PC1
[CORE]interface GigabitEthernet 0/0/1
[CORE-GigabitEthernet0/0/1]port link-type access
[CORE-GigabitEthernet0/0/1]port default vlan 10
[CORE-GigabitEthernet0/0/1]quit
# G0/0/2接PC2
[CORE]interface GigabitEthernet 0/0/2
[CORE-GigabitEthernet0/0/2]port link-type access
[CORE-GigabitEthernet0/0/2]port default vlan 20
[CORE-GigabitEthernet0/0/2]quit
# 3. 创建VLANIF三层接口(核心,不同网段网关)
[CORE]interface Vlanif 10
[CORE-Vlanif10]ip address 192.168.10.254 24
[CORE-Vlanif10]quit
[CORE]interface Vlanif 20
[CORE-Vlanif20]ip address 192.168.20.254 24
[CORE-Vlanif20]quit
测试:

琼ICP备2024037487号-2
琼公网安备46010002000723号
暂无评论
快来抢沙发吧~