三层交换机如何配置使用，如何配置? 华为三层交换机怎么配置？
\u4e09\u5c42\u4ea4\u6362\u673a\u914d\u7f6e\u6b65\u9aa4\u4e09\u5c42\u4ea4\u6362\u673a\u914d\u7f6e\u6b65\u9aa4\u5206\u4e3a5\u4e2a\u6b65\u9aa4\uff0c\u5982\u4e0b\uff1a
1\u3001\u4e3a\u4e09\u5c42\u4ea4\u6362\u673a\u5212\u5206\u7ba1\u7406VLAN\uff0c\u5e76\u63cf\u8ff0\uff0c\u5982\u56fe\uff0c\u5212\u5206\u4e86vlan 10\uff0c\u5e76\u63cf\u8ff0\u4e3a\u7ba1\u7406vlan\u3002
2\u3001\u5c06vlan 10\u7ba1\u7406vlan\u914d\u7f6e\u6210\u4ea4\u6362\u673a\u7684\u7ba1\u7406\u5730\u5740\u3002
3\u3001\u5f00\u542f\u8fdc\u7a0b\u767b\u5f55\u8fde\u63a5\u3002
4\u3001\u5212\u5206\u4e1a\u52a1vlan\uff0c\u5e76\u4e3a\u5176\u914d\u7f6e\u4e1a\u52a1\u7f51\u5173\u3002
5\u3001\u5728\u6307\u5b9a\u7aef\u53e3\u52a0\u5165\u6240\u521b\u5efa\u7684vlan\u3002
6\u3001\u4e3a\u4e09\u5c42\u4ea4\u6362\u673a\u914d\u7f6e\u9759\u6001\u8def\u7531\uff0c\u4e0e\u4e0a\u7ea7\u7f51\u7edc\u4e92\u901a\u3002
\u51c6\u5907\u5de5\u4f5c\uff1a1\u3001\u7535\u8111\uff08\u5e26\u4e32\u53e3\u6216\u8005\u6709USB\u8f6c9\u9488\u7684\u7ebf\uff09\uff0c\u7535\u8111\u4e0a\u5b89\u88c5\u597d\u8d85\u7ea7\u7ec8\u7aef\u8f6f\u4ef6\uff1b2\u3001console\u7ebf\uff1b
\u5f00\u59cb\uff1aconsole\u8fde\u63a5\u7535\u8111\uff089\u9488\u53e3\uff09\u4e0e\u4ea4\u6362\u673a\uff08console)\u53e3\uff1b\u8d85\u7ea7\u7ec8\u7aef\u8bbe\u7f6e\u597d\u53c2\u6570\uff089600\u30018\u3001\u65e0\u30011\u3001\u65e0);\u8fde\u63a5\u56de\u8f66\u8fdb\u5165\uff1b\u987a\u5e8f\u8f93\u5165\uff08\u6bcf\u4e2a\u547d\u4ee4\u5b8c\u6bd5\u56de\u8f66\uff09system-view\u3001sysname [\u4ea4\u6362\u673a\u540d]\u3001dhcp enable\uff08\u5f00\u542fDHCP\u670d\u52a1\uff09\u3001VLAN XX \uff08\u521b\u5efaVLAN XX)\u3001quit\u3001VLAN YY\uff08\u521b\u5efaVLAN YY\uff09\u3001quit\u3001interface Vlanif XX\uff08\u8fdb\u5165VLAN\u63a5\u53e3\uff09\u3001ip address X.X.X.X X.X.X.X\uff08\u8fd0\u8425\u5546\u7684\u516c\u7f51IP\u53ca\u63a9\u7801\uff09\u3001quit\u3001interface Vlanif YY\u3001ip address X.X.X.X X.X.X.X\uff08\u8bbe\u7f6e\u5185\u7f51IP\u53ca\u63a9\u7801\uff09\u3001dhcp select interface\uff08\u8bbe\u7f6eDHCP\u5e94\u7528\u4e8e\u63a5\u53e3\uff09\u3001quit\u3001dns server X.X.X.X\uff08\u8bbe\u7f6e\u8fd0\u8425\u5546DNS\uff09\u3001interface GigabitEthernet X/X/X(\u8fdb\u5165\u4f60\u7684\u4e0a\u884c\u63a5\u53e3\u5373\u8fde\u63a5\u8fd0\u8425\u5546\u8bbe\u5907\u7684\u63a5\u53e3\uff09\u3001port link-type access\uff08\u8bbe\u7f6e\u63a5\u53e3\u6a21\u5f0f\uff09\u3001port default vlan XX\uff08\u63a5\u53e3\u6240\u5728VLAN\u5373\u914d\u7f6e\u516c\u7f51IP\u7684\u90a3\u4e2aVLAN\uff09\u3001quit\u3001interface GigabitEthernet X/X/X(\u8fdb\u5165\u4f60\u7684\u4e0b\u884c\u63a5\u53e3\u5373\u8fde\u63a5\u5c40\u57df\u7f51\u8bbe\u5907\u7684\u63a5\u53e3\uff09\u3001port link-type access\uff08\u8bbe\u7f6e\u63a5\u53e3\u6a21\u5f0f\uff09\u3001port default vlan YY\uff08\u63a5\u53e3\u6240\u5728VLAN\u5373\u914d\u7f6e\u5185\u7f51IP\u7684\u90a3\u4e2aVLAN\uff09\uff0c\u6709\u51e0\u53f0\u5185\u7f51\u7ec8\u7aef\u5c31\u91cd\u590d\u51e0\u6b21\uff08\u6709\u6279\u91cf\u7684\u547d\u4ee4\u8fd9\u91cc\u5c31\u4e0d\u8bf4\u4e86\uff09\u3002
\u8fd9\u6837\u57fa\u672c\u5c31\u53ef\u4ee5\u7528\u4e86
Enable //进入私有模式
Configure terminal //进入全局模式
service password-encryption //对密码进行加密
hostname Cata lyst 3550-12T1 //给三层交换机定义名称
enable password 123456. //enable密码
Enable secret 654321 //enable的加密密码（应该是乱码而不是654321这样）
Ip subnet-zero //允许使用全0子网（默认都是打开的）
Ip name-server 172.16.8.1 172.16.8.2 //三层交换机名字Catalyst 3550-12T1对应的IP地址是172.16.8.1
Service dhcp //提供DHCP服务
ip routing //启用三层交换机上的路由模块
Exit
Vtp mode server //定义VTP工作模式为sever模式
Vtp domain centervtp //定义VTP域的名称为centervtp
Vlan 2 name vlan2 //定义vlan并给vlan取名（如果不取名的话，vlan2的名字应该是vlan002）
Vlan 3 name vlan3
Vlan 4 name vlan4
Vlan 5 name vlan5
Vlan 6 name vlan6
Vlan 7 name vlan7
Vlan 8 name vlan8
Vlan 9 name vlan9
Exit
interface Port-channel 1 //进入虚拟的以太通道组1
switchport trunk encapsulation dot1q //给这个接口的trunk封装为802.1Q的帧格式
switchport mode trunk //定义这个接口的工作模式为trunk
switchport trunk allowed vlan all //在这个trunk上允许所有的vlan通过
Interface gigabitethernet 0/1 //进入模块0上的吉比特以太口1
switchport trunk encapsulation dotlq //给这个接口的trunk封装为802.1Q的帧格式
switchport mode trunk //定义这个接口的工作模式为trunk
switchport trunk allowed vlan all //在这个trunk上允许所有的vlan通过
channel-group 1 mode on //把这个接口放到快速以太通道组1中
Interface gigabitethernet 0/2 //同上
switchport trunk encapsulation dotlq
switchport mode trunk
switchport trunk allowed vlan all
channel-group 1 mode on
port-channel load-balance src-dst-ip //定义快速以太通道组的负载均衡方式（依*源和目的IP的方式）
interface gigabitethernet 0/3 //进入模块0上的吉比特以太口3
switchport trunk encapsulation dotlq //给trunk封装为802.1Q
switchport mode trunk //定义这个接口的工作模式为trunk
switchport trunk allowed vlan all //允许所有vlan信息通过
interface gigabitethernet 0/4 //同上
switchport trunk encapsulation dotlq
switchport mode trunk
switchport trunk allowed vlan all
interface gigbitethernet 0/5 //同上
switchport trunk encapsulation dotlq
switchport mode trunk
switchport trunk allowed vlan all
interface gigbitethernet 0/6 //同上
switchport trunk encapsulation dotlq
switchport mode trunk
switchprot trunk allowed vlan all
interface gigbitethernet 0/7 //进入模块0上的吉比特以太口7
Switchport mode access //定义这个接口的工作模式为访问模式
switchport access vlan 9 //定义这个接口可以访问哪个vlan（实际就是分配这个接口到vlan）
no shutdown
spanning-tree vlan 6-9 cost 1000 //在生成树中，vlan6-9的开销定义为10000
interface range gigabitethernet 0/8 – 10 //进入模块0上的吉比特以太口8,9,10
switchport mode access //定义这些接口的工作模式为访问模式
switchport access vlan 8 //把这些接口都分配到vlan8中
no shutdown
spanning-tree portfast //在这些接口上使用portfast（使用portfast以后，在生成树的时候不参加运算，直接成为转发状态）
interface gigabitethernet 0/11 //进入模块0上的吉比特以太口11
switchport trunk encapsulation dotlq //给这个接口封装为802.1Q
switchport mode trunk //定义这个接口的工作模式为trunk
switchport trunk allowed vlan all //允许所有vlan信息通过
interface gigabitethernet 0/12 //同上
switchport trunk encapsulation dotlq
switchport mode trunk
switchport trunk allowed vlan all
interface vlan 1 //进入vlan1的逻辑接口（不是物理接口，用来给vlan做路由用）
ip address 172.16.1.7 255.255.255.0 //配置IP地址和子网掩码
no shutdown
standby 1 ip 172.16.1.9 //开启了冗余热备份（HSRP），冗余热备份组1，虚拟路由器的IP地址为172.16.1.9
standby 1 priority 110 preempt //定义这个三层交换机在冗余热备份组1中的优先级为110，preempt是用来开启抢占模式
interface vlan 2 //同上
ip address 172.16.2.252 255.255.255.0
no shutdown
standby 2 ip 172.16.2.254
standby 2 priority 110 preempt
ip access-group 101 in //在入方向上使用扩展的访问控制列表101
interface vlan 3 //同上
ip address 172.16.3.252 255.255.255.0
no shutdown
standby 3 ip 172.16.3.254
standby 3 priority 110 preempt
ip access-group 101 in
interface vlan 4 //同上
ip address 172.16.4.252 255.255.255.0
no shutdown
standby 4 ip 172.16.4.254
standby 4 priority 110 preempt
ip access-group 101 in
interface vlan 5
ip address 172.16.5.252 255.255.255.0
no shutdown
standby 5 ip 172.16.5.254
standby 5 priority 110 preempt
ip access-group 101 in
interface vlan 6
ip address 172.16.6.252 255.255.255.0
no shutdown
standby 6 ip 172.16.6.254
standby 6 priority 100 preempt
interface vlan 7
ip address 172.16.7.252 255.255.255.0
no shutdown
standby 7 ip 172.16.7.254
standby 7 priority 100 preempt
interface vlan 8
ip address 172.16.8.252 255.255.255.0
no shutdown
standby 8 ip 172.16.8.254
standby 8 priority 100 preempt
interface vlan 9
ip address 172.16.9.252 255.255.255.0
no shutdown
standby 9 ip 172.16.9.254
standby 9 priority 100 preempt
access-list 101 deny ip any 172.16.7.0 0.0.0.255 //扩展的访问控制列表101
access-list 101 permit ip any any
Interface vlan 1 //进入vlan1这个逻辑接口
Ip helper-address 172.16.8.1 //可以转发广播（helper－address的作用就是把广播转化为单播，然后发向172.16.8.1）
Interface vlan 2
Ip helper-address 172.16.8.1
Interface vlan 3
ip helper-address 172.16.8.1
interface vlan 4
ip helper-address 172.16.8.1
interface vlan 5
ip helper-address 172.16.8.1
interface vlan 6
ip helper-address 172.16.8.1
interface vlan 7
ip helper-address 172.16.8.1
interface vlan 9
ip helper-address 172.16.8.1
router rip //启用路由协议RIP
version 2 //使用的是RIPv2，如果没有这句，则是使用RIPv1
network 172.16.0.0 //宣告直连的网段
exit
ip route 0.0.0.0 0.0.0.0 172.16.9.250 //缺省路由，所有在路由表中没有办法匹配的数据包，都发向下一跳地址为172.16.9.250这个路由器
line con 0
line aux 0
line vty 0 15 //telnet线路（路由器只有5个，是0-4）
password 12345678 //login密码
login
end
copy running-config startup-config 保存配置
多了路由功能而已
绛旓細涓夊眰浜ゆ崲鏈绔彛閰嶇疆ip鍦板潃鍙婄粦瀹歁AC鍦板潃鐨勬柟娉 甯歌鐨勮法缃戞绠＄悊闂閫氬父鏈夊涓嬪嚑绉嶏細璺ㄧ綉娈甸檺鍒剁數鑴戠綉閫熴佽法缃戞鎺у埗鐢佃剳涓婄綉琛屼负(姣斿绂佹杩呴浄涓嬭浇銆佺姝㈠湪绾跨帺娓告垙銆侀檺鍒跺湪绾跨湅瑙嗛銆佺姝笂鐝倰鑲°佺姝㈠伐浣滄椂闂寸綉璐瓑)锛岃法缃戞缁戝畾鐢佃剳IP鍜孧AC鍦板潃锛岄槻姝㈢數鑴戜慨鏀笽P鍦板潃绛夎涓恒傞偅涔锛屽浣瀹炵幇涓婅堪璺ㄧ綉娈电洃鎺...
绛旓細1銆侀鍏堥渶瑕佹墦寮妯℃嫙鍣ㄨ繘鍏ラ厤缃幆澧冦2銆佹墦en杩涘叆鐗规潈妯″紡鐒跺悗鍐峜onf t杩涘叆鍏ㄥ眬閰嶇疆妯″紡銆3銆佽繘鍏ュ叏灞閰嶇疆妯″紡浠ュ悗int fa 0/0 缁欎笉鍚岀殑绔彛閰嶇疆IP 鍦板潃锛屽鏋滄槸鍦涓夊眰浜ゆ崲鏈洪厤缃ipaddre鐨勮瘽锛岄渶瑕佽繘鍏ョ鍙ｄ互鍚庢墠鑳藉閰嶇疆銆4銆侀厤缃甀P 鍦板潃浠ュ悗瑕佸紑鍚鍙ｏ紝鎵搉o shutdown灏卞彲浠ヤ簡 5銆佺劧鍚巈xit閫鍥炲叏灞閰嶇疆...
绛旓細1銆侀鍏堟煡鐪嬬鍙閰嶇疆鐨勫懡浠isplay this锛岃繖涓懡浠よ杩涘叆绔彛浣跨敤銆2銆佹竻闄ょ鍙ｉ厤缃殑鍛戒护clear configuration this銆3銆佹煡鐪媀LAN鐨勫懡浠isplay vlan锛屽彲浠ユ煡鐪嬫墍鏈塿lan鐨勪俊鎭4銆佹壒閲忓缓绔媣lan鐨勫懡浠 vlan batch 2 to 8锛屾壒閲忓缓绔2鑷8鐨剉lan銆5銆佸涓鍙ｅ悓鏃堕厤缃殑鍛戒护锛宲ort-group 3 /寤虹珛缇ょ粍3锛...
绛旓細涓锛屽鏋滀笉鐢ㄤ氦鎹㈡満鐨凞HCP鍔熻兘鑰屾槸鍒╃敤PC鐨凞HCP鍔熻兘锛1.鍦ㄤ氦鎹㈡満涓閰嶇疆DHCP鏈嶅姟鍣細ip dhcp-server 192.168.0.69 2.鍦ㄤ氦鎹㈡満涓负姣忎釜VLAN璁剧疆鍚屾牱鐨凞HCP鏈嶅姟鍣ㄧ殑IP鍦板潃锛歩nterface Vlan11 ip address 192.168.1.254 255.255.255.0 ip helper-address 192.168.0.69 DHCP Server IP interface ...
绛旓細1銆浜ゆ崲鏈洪厤缃锛氾紙1)鍦ㄤ氦鎹㈡満涓婂垎鍒垝鍒嗕笁涓猇LAN锛屽vlan 10锛寁lan 20锛寁lan 30銆傦紙2锛夎繘鍏ヤ氦鎹㈡満鐨勪笂鑱斿彛锛屽interface GigabitEthernet 0/0/1锛岃缃垚trunk妯″紡銆傦紙3锛変笂鑱斿彛鍔犲叆vlan 10锛寁lan 20锛寁lan 30銆2銆佽矾鐢卞櫒閰嶇疆锛氾紙1锛夎繘鍏ヨ矾鐢卞櫒杩炴帴浜ゆ崲鏈虹殑绔彛鐨勫瓙鎺ュ彛锛屽interface GigabitEthernet...
绛旓細4銆佸湪涓夊眰浜ゆ崲鏈涓婏紝鎶婂拰2灞傜浉杩炵殑绔彛璁剧疆涓簍ruck妯″紡銆傚悓鏍峰垱寤虹浉鍚岀殑vlan銆傚悓鏍风殑缁橵LAN璁剧疆铏氭帴鍙P銆傦紙灏辨槸璁剧疆缃戝叧锛.5銆佸叏灞閰嶇疆妯″紡锛歩nt vlan 10 锛宨p add 192.168.1.1 255.255.255.0 锛堣繖涓槸缃戝叧锛屽湴鍧鑷繁閰嶏級銆備笂闈㈣繖涓楠ゅ彲浠浣跨敤VTP銆備繚瀛橀鍑恒6銆佺幇鍦ㄧ綉鍏宠缃湪浜嗕笁灞備氦鎹㈡満...
绛旓細3.涓夊眰浜ゆ崲鏈DHCP閰嶇疆 寮鍚疍HCP鍔熻兘 [Core]dhcp enable VLAN2鐨勫湴鍧姹 [Core]dhcp server ip-pool vlan2 [Core-dhcp-pool-vlan2]network 192.168.2.0 24 [Core-dhcp-pool-vlan2]gateway-list 192.168.2.254 [Core-dhcp-pool-vlan2]dns-list 192.168.2.254 [Core-dhcp-pool-vlan2]domain...
绛旓細涓夊眰浜ゆ崲鏈洪厤缃——閰嶇疆VLAN configure terminal 杩涘叆閰嶇疆鐘舵 vlan vlan-id 杈撳叆涓涓猇LAN鍙, 鐒跺悗杩涘叆vlan閰嶆侊紝鍙互杈撳叆涓涓柊鐨刅LAN鍙锋垨鏃х殑鏉ヨ繘琛屼慨鏀 name vlan-name 鍙)杈撳叆涓涓猇LAN鍚嶏紝濡傛灉娌℃湁閰嶇疆VLAN鍚嶏紝缂虹渷鐨.鍚嶅瓧鏄疺LAN鍙峰墠闈㈢敤0濉弧鐨4浣嶆暟锛屽VLAN0004鏄疺LAN4鐨勭己鐪佸悕瀛...
绛旓細绗2绉,鍦ㄤ簩灞備氦鎹㈡満涓婂垝鍒嗕簡VLAN,閭ｄ箞,鍋囪鍥惧乏杈圭殑浜ゆ崲鏈轰负S1,鎺ュ彛VLAN ID涓10,鍙宠竟鐨勪氦鎹㈡満涓篠2,鎺ュ彛VLAN ID涓20,閭ｄ箞闇瑕佸皢2涓簩灞備氦鎹㈡満鐨勪笂琛屽彛閰嶇疆涓篢RUNK鏂瑰紡,骞跺湪涓夊眰浜ゆ崲鏈涓婇厤缃2涓猇LAN鐨勭綉鍏冲湴鍧銆傚悓鏃跺湪2鍙颁富鏈轰笂閰嶇疆鐩稿簲缃戞鐨処P浠ュ強缃戝叧鍦板潃銆傚叿浣撻厤缃涓:浜屽眰浜ゆ崲鏈篠1:S1#vlan database S1...
绛旓細涓夊眰浜ゆ崲鏈洪厤缃锛歴panning-tree portfast //鍦ㄨ繖浜涙帴鍙ｄ笂浣跨敤portfast(浣跨敤portfast浠ュ悗锛屽湪鐢熸垚鏍戠殑鏃跺欎笉鍙傚姞杩愮畻锛岀洿鎺ユ垚涓鸿浆鍙戠姸鎬)interface gigabitethernet 0/11 //杩涘叆妯″潡0涓婄殑鍚夋瘮鐗逛互澶彛11 switchport trunk encapsulation dotlq //缁欒繖涓帴鍙ｅ皝瑁呬负802.1Q switchport mode trunk //瀹氫箟杩欎釜鎺ュ彛鐨...
