ENSP实验-实现不同VLAN间互访的两种方式

实现不同VLAN间互访的两种方式

实验所选设备
路由器：Router

交换机：S5700

终端：PC

一、单臂路由
实验拓扑

R1配置
为接口eth0/0/0配置IP（可以不配置）

[Huawei]int Eth 0/0/0
[Huawei-Ethernet0/0/0]ip add 1.1.1.1 24

为子接口eth0/0/0.1配置IP，启用dot1q协议，绑定vlan 10

[Huawei]int Eth 0/0/0.1
[Huawei-Ethernet0/0/0.1]ip add 192.168.1.254 24
[Huawei-Ethernet0/0/0.1]vlan-type dot1q 10（或dot1q termination vid 10）

如果不通，开启子接口arp广播

[Huawei-Ethernet0/0/0.1]arp broadcast enable

为子接口eth0/0/0.2配置IP，启用dot1q协议，绑定vlan 20

[Huawei]int Eth 0/0/0.2
[Huawei-Ethernet0/0/0.2]ip add 192.168.2.254 24
[Huawei-Ethernet0/0/0.2]vlan-type dot1q 20（或dot1q termination vid 20）

如果不通，开启子接口arp广播

[Huawei-Ethernet0/0/0.2]arp broadcast enable

SW配置
创建vlan 10和vlan 20

[Huawei]vlan 10
[Huawei-vlan10]vlan 20

将ge0/0/2和ge0/0/3配置为access模式，加入vlan 10

[Huawei]int GigabitEthernet 0/0/2
[Huawei-GigabitEthernet0/0/2]port link-type access
[Huawei-GigabitEthernet0/0/2]port default vlan 10
[Huawei]int GigabitEthernet 0/0/3
[Huawei-GigabitEthernet0/0/3]port link-type access
[Huawei-GigabitEthernet0/0/3]port default vlan 10

将ge0/0/4配置为access模式，加入vlan 20

[Huawei]int GigabitEthernet 0/0/4
[Huawei-GigabitEthernet0/0/4]port link-type access
[Huawei-GigabitEthernet0/0/4]port default vlan 20

将ge0/0/1设置为trunk模式，允许所有vlan 10 20

[Huawei]int GigabitEthernet 0/0/1
[Huawei-GigabitEthernet0/0/1]port link-type trunk
[Huawei-GigabitEthernet0/0/1]port trunk allow-pass vlan 10 20

PC配置
PC1：

IP 192.168.1.1
NETMASK 255.255.255.0
GATEWAY 192.168.1.254

PC2：

IP 192.168.1.2
NETMASK 255.255.255.0
GATEWAY 192.168.1.254

PC3：

IP 192.168.2.1
NETMASK 255.255.255.0
GATEWAY 192.168.2.254

测试
192.168.1.1 ping 192.168.2.1

二、三层访问
实验拓扑

SW配置
创建vlan 10 20

[Huawei]vlan 10
[Huawei-vlan10]vlan 20
[Huawei-vlan10]q

给vlan配置IP

[Huawei]int vlan 10
[Huawei-Vlanif10]ip add 192.168.1.254 24
[Huawei-Vlanif10]q
[Huawei]int vlan 20
[Huawei-Vlanif20]ip add 192.168.2.254 24
[Huawei-Vlanif20]q

将ge0/0/1和ge0/0/2加入vlan 10

[Huawei]int GigabitEthernet 0/0/1
Huawei-GigabitEthernet0/0/1]port link-type access
[Huawei-GigabitEthernet0/0/1]port default vlan 10
[Huawei-GigabitEthernet0/0/1]q
[Huawei]int GigabitEthernet 0/0/2
Huawei-GigabitEthernet0/0/2]port link-type access
[Huawei-GigabitEthernet0/0/2]port default vlan 10

将ge0/0/3加入vlan 20

[Huawei]int GigabitEthernet 0/0/3
Huawei-GigabitEthernet0/0/3]port link-type access
[Huawei-GigabitEthernet0/0/3]port default vlan 20

PC配置
PC1：

IP 192.168.1.1
NETMASK 255.255.255.0
GATEWAY 192.168.1.254

PC2：

IP 192.168.1.2
NETMASK 255.255.255.0
GATEWAY 192.168.1.254

PC3：

IP 192.168.2.1
NETMASK 255.255.255.0
GATEWAY 192.168.2.254

测试
192.168.1.1 ping 192.168.2.1