华为单臂路由配置 华为单臂路由配置实例
\u534e\u4e3a\u8def\u7531\u5668\u5355\u81c2\u8def\u7531\u914d\u7f6e\u8be5\u600e\u4e48\u505a\u65b9\u6cd5/\u6b65\u9aa4
\u9996\u5148\u5229\u7528\u534e\u4e3a\u6a21\u62df\u5668eNSP\u6765\u8bbe\u8ba1\u903b\u8f91\u7f51\u7edc\u62d3\u6734\u56fe\uff0c\u6709\u4e00\u53f0\u8def\u7531\u5668AR1220\uff0c\u4e00\u53f0\u4e8c\u5c42\u4ea4\u6362\u673aS3700\uff0c\u4e8c\u53f0PC\u4e3b\u673a\u3002\u5176\u4e4b\u95f4\u7528\u7ebf\u7f06\u8fde\u63a5\u5e76\u4f5c\u597d\u6807\u6ce8\u3002
\u5728\u534e\u4e3a\u6a21\u62df\u5668eNSP\u4e2d\u6253\u5f00\u7ec8\u7aef\u914d\u7f6e\u4ea4\u6362\u673aS3700,\u914d\u7f6e\u5185\u5bb9\u622a\u56fe\u5982\u4e0b
system-view
sysname SW1 //\u8bbe\u7f6e\u4ea4\u6362\u673a\u540d\u5b57\u4e3aSW1
vlan batch 2 3 //\u8fde\u7eed\u521b\u5efavlan 2 3
interface Ethernet 0/0/1
port link-type access //\u8bbe\u7f6e\u7aef\u53e3\u7c7b\u578b\u4e3aaccess
port default vlan 2 //\u5c06\u63a5\u53e3\u5212\u5206\u5230vlan 2
quit
interface Ethernet 0/0/2
port link-type access
port default vlan 3
quit
interface Ethernet 0/0/3
port link-type trunk //\u8bbe\u7f6e\u7aef\u53e3\u7c7b\u578b\u4e3atrunk
port trunk allow-pass vlan 2 3 //\u534e\u4e3a\u4ea4\u6362\u673a\u9ed8\u8ba4\u4e0d\u652f\u6301\u5176\u4ed6vlan\u901a\u8fc7\uff0c\u9664\u53bbvlan 1,\u5141\u8bb8trunk\u7aef\u53e3\u901a\u8fc7vlan 2 3
[SW1-Ethernet0/0/3] //\u6309CTRL+Z\u8fd4\u56de\u7528\u6237\u89c6\u56fe
system-view
display vlan //\u663e\u793avlan
display interface brief //\u663e\u793a\u63a5\u53e3\u6982
save
\u5728\u6253\u5f00\u7ec8\u7aef\u914d\u7f6e\u8def\u7531\u5668AR1220\uff0c\u914d\u7f6e\u5185\u5bb9\u622a\u56fe\u5982\u4e0b
system-view
sysname R1 //\u8bbe\u7f6e\u8def\u7531\u5668\u540d\u5b57R1
display interface brief //\u663e\u793a\u63a5\u53e3\u6982\u8981
interface GigabitEthernet 0/0/0.1
dot1q termination vid 2 //\u5c01\u88c5dot1q\u534f\u8bae,\u8be5\u5b50\u63a5\u53e3\u5bf9\u5e94vlan 2
ip address 192.168.2.254 24 //\u8bbe\u7f6e\u5b50\u63a5\u53e3IP\u5730\u5740\u548c\u5b50\u7f51\u63a9\u7801
arp broadcast enable //\u5f00\u542f\u5b50\u63a5\u53e3\u7684ARP\u5e7f\u64ad
quit
interface GigabitEthernet 0/0/0.2
dot1q termination vid 3
ip address 192.168.3.254 24
arp broadcast enable
quit
display ip interface brief //\u663e\u793a\u63a5\u53e3IP\u7684\u7b80\u8981\u72b6\u6001\u4fe1\u606f
ping 192.168.2.2
ping 192.168.3.3
quit
save
4
\u5206\u522b\u5728PC1\u548cPC2\u7528ping\u547d\u4ee4\u6d4b\u8bd5\u8fde\u901a\u6027\uff0c\u5bf9\u65b9\u6536\u5230\u62a5\u6587\u540e\u4f1a\u53cd\u9988\u65f6\u95f4\u7b49\u4fe1\u606f\uff0c\u5982\u56fe
\u90e8\u7f72\u4e86VLAN\u7684\u4ea4\u6362\u673a\u53ef\u4ee5\u5b9e\u73b0\u5728\u540c\u4e00\u5e7f\u64ad\u57df\u5185\u4e0d\u540c\u4e3b\u673a\u4e4b\u95f4\u7684\u901a\u4fe1\uff0c\u4f46\u662f\u8981\u60f3\u5b9e\u73b0\u4e0d\u540cVLAN\u95f4\u4e3b\u673a\u901a\u4fe1\uff0c\u5c31\u8981\u5f15\u5165\u8def\u7531\u6280\u672f\uff0c\u53ef\u4ee5\u901a\u8fc7\u4e8c\u5c42\u4ea4\u6362\u673a\u914d\u5408\u8def\u7531\u5668\u6765\u5b9e\u73b0\u8def\u7531\u8f6c\u53d1\u3002
\u5de5\u5177/\u539f\u6599
\u7535\u8111 \u534e\u4e3a\u6a21\u62df\u5668eNSP
\u65b9\u6cd5/\u6b65\u9aa4
1/5 \u5206\u6b65\u9605\u8bfb
\u9996\u5148\u5229\u7528\u534e\u4e3a\u6a21\u62df\u5668eNSP\u6765\u8bbe\u8ba1\u903b\u8f91\u7f51\u7edc\u62d3\u6734\u56fe\uff0c\u6709\u4e00\u53f0\u8def\u7531\u5668AR1220\uff0c\u4e00\u53f0\u4e8c\u5c42\u4ea4\u6362\u673aS3700\uff0c\u4e8c\u53f0PC\u4e3b\u673a\u3002\u5176\u4e4b\u95f4\u7528\u7ebf\u7f06\u8fde\u63a5\u5e76\u4f5c\u597d\u6807\u6ce8\u3002
2/5
\u5728\u534e\u4e3a\u6a21\u62df\u5668eNSP\u4e2d\u6253\u5f00\u7ec8\u7aef\u914d\u7f6e\u4ea4\u6362\u673aS3700,\u914d\u7f6e\u5185\u5bb9\u622a\u56fe\u5982\u4e0b
system-view
sysname SW1 //\u8bbe\u7f6e\u4ea4\u6362\u673a\u540d\u5b57\u4e3aSW1
vlan batch 2 3 //\u8fde\u7eed\u521b\u5efavlan 2 3
interface Ethernet 0/0/1
port link-type access //\u8bbe\u7f6e\u7aef\u53e3\u7c7b\u578b\u4e3aaccess
port default vlan 2 //\u5c06\u63a5\u53e3\u5212\u5206\u5230vlan 2
quit
interface Ethernet 0/0/2
port link-type access
port default vlan 3
quit
interface Ethernet 0/0/3
port link-type trunk //\u8bbe\u7f6e\u7aef\u53e3\u7c7b\u578b\u4e3atrunk
port trunk allow-pass vlan 2 3 //\u534e\u4e3a\u4ea4\u6362\u673a\u9ed8\u8ba4\u4e0d\u652f\u6301\u5176\u4ed6vlan\u901a\u8fc7\uff0c\u9664\u53bbvlan 1,\u5141\u8bb8trunk\u7aef\u53e3\u901a\u8fc7vlan 2 3
[SW1-Ethernet0/0/3] //\u6309CTRL+Z\u8fd4\u56de\u7528\u6237\u89c6\u56fe
system-view
display vlan //\u663e\u793avlan
display interface brief //\u663e\u793a\u63a5\u53e3\u6982
save
\u5fae\u8f6f\u5b98\u65b9\u5546\u57ce \u5b66\u751f\u53ca\u6559\u804c\u5de5\u4eab\u4e13\u5c5e\u4f18\u60e09\u6298\u8d77
\u5e7f\u544a
3/5
\u5728\u6253\u5f00\u7ec8\u7aef\u914d\u7f6e\u8def\u7531\u5668AR1220\uff0c\u914d\u7f6e\u5185\u5bb9\u622a\u56fe\u5982\u4e0b
system-view
sysname R1 //\u8bbe\u7f6e\u8def\u7531\u5668\u540d\u5b57R1
display interface brief //\u663e\u793a\u63a5\u53e3\u6982\u8981
interface GigabitEthernet 0/0/0.1
dot1q termination vid 2 //\u5c01\u88c5dot1q\u534f\u8bae,\u8be5\u5b50\u63a5\u53e3\u5bf9\u5e94vlan 2
ip address 192.168.2.254 24 //\u8bbe\u7f6e\u5b50\u63a5\u53e3IP\u5730\u5740\u548c\u5b50\u7f51\u63a9\u7801
arp broadcast enable //\u5f00\u542f\u5b50\u63a5\u53e3\u7684ARP\u5e7f\u64ad
quit
interface GigabitEthernet 0/0/0.2
dot1q termination vid 3
ip address 192.168.3.254 24
arp broadcast enable
quit
display ip interface brief //\u663e\u793a\u63a5\u53e3IP\u7684\u7b80\u8981\u72b6\u6001\u4fe1\u606f
ping 192.168.2.2
ping 192.168.3.3
quit
save
\u534e\u4e3ac5\u5e73\u677f-\u8d85\u503c\u7279\u60e0\uff0c\u54c1\u8d28\u4e4b\u9009\uff0c\u8f7b\u677e\u8d2d\u7269\u4e0a\u5929\u732b!
\u5e7f\u544a
4/5
\u5206\u522b\u5728PC1\u548cPC2\u7528ping\u547d\u4ee4\u6d4b\u8bd5\u8fde\u901a\u6027\uff0c\u5bf9\u65b9\u6536\u5230\u62a5\u6587\u540e\u4f1a\u53cd\u9988\u65f6\u95f4\u7b49\u4fe1\u606f\uff0c\u5982\u56fe
\u8fc5\u9976bacnet \u8def\u7531\u2014\u2014WEB\u914d\u7f6e\uff0c\u5feb\u901f\u626b\u63cfMSTP\u8bbe\u5907\u70b9\u4f4d
\u5e7f\u544a
5/5
\u672c\u5b9e\u9a8c\u901a\u8fc7\u7ed3\u5408AR1220\u8def\u7531\u5668\u548cS3700\u4ea4\u6362\u673a\u5b8c\u6210\u4e86\u5355\u81c2\u8def\u7531\u914d\u7f6e\uff0c\u5b9e\u73b0\u5c40\u57df\u7f51\u5185\u4e0d\u540cvlan\u4e3b\u673a\u4e4b\u95f4\u901a\u4fe1\u3002
\u7f16\u8f91
首先利用华为模拟器eNSP来设计逻辑网络拓朴图，有一台路由器AR1220，一台二层交换机S3700，二台PC主机。其之间用线缆连接并作好标注。
华为设备单臂路由配置
在华为模拟器eNSP中打开终端配置交换机S3700,配置内容截图如下
system-view
sysname SW1 //设置交换机名字为SW1
vlan batch 2 3 //连续创建vlan 2 3
interface Ethernet 0/0/1
port link-type access //设置端口类型为access
port default vlan 2 //将接口划分到vlan 2
quit
interface Ethernet 0/0/2
port link-type access
port default vlan 3
quit
interface Ethernet 0/0/3
port link-type trunk //设置端口类型为trunk
port trunk allow-pass vlan 2 3 //华为交换机默认不支持其他vlan通过，除去vlan 1,允许trunk端口通过vlan 2 3
[SW1-Ethernet0/0/3] //按CTRL+Z返回用户视图
system-view
display vlan //显示vlan
display interface brief //显示接口概
save
华为设备单臂路由配置
在打开终端配置路由器AR1220，配置内容截图如下
system-view
sysname R1 //设置路由器名字R1
display interface brief //显示接口概要
interface GigabitEthernet 0/0/0.1
dot1q termination vid 2 //封装dot1q协议,该子接口对应vlan 2
ip address 192.168.2.254 24 //设置子接口IP地址和子网掩码
arp broadcast enable //开启子接口的ARP广播
quit
interface GigabitEthernet 0/0/0.2
dot1q termination vid 3
ip address 192.168.3.254 24
arp broadcast enable
quit
display ip interface brief //显示接口IP的简要状态信息
ping 192.168.2.2
ping 192.168.3.3
quit
save
华为设备单臂路由配置
分别在PC1和PC2用ping命令测试连通性，对方收到报文后会反馈时间等信息，如图
华为设备单臂路由配置
5
本实验通过结合AR1220路由器和S3700交换机完成了单臂路由配置，实现局域网内不同vlan主机之间通信。
通过交换机上配置VLAN可以减少主机通信广播域的范围，当VLAN之间有部分主机需要通信，但交换机不支持三层交换时，可以采用一台 支持802.1Q的路由器实现
华为路由器单臂路由配置
绛旓細1銆佽澶囩粍缃戯細2鍙扮數鑴戝垎鍒睘浜嶸LAN10鍜孷LAN20锛屼竴鍙鍗庝负AR2220璺敱鍣鍜屼竴鍙癝5700浜ゆ崲鏈恒2銆閰嶇疆涓ゅ彴PC鐨処P鍦板潃銆侾C1涓轰笅鍥俱2銆丳C2涓轰笅鍥俱3銆佸湪浜ゆ崲鏈轰腑杩涜濡備笅閰嶇疆锛1).杩炴帴涓ゅ彴PC鏈虹殑绔彛閰嶇疆涓篴ccess妯″紡锛屼笖鍒嗗埆灞炰簬瀵瑰簲鐨刅LAN锛2).杩炴帴璺敱鍣ㄧ殑绔彛閰嶇疆涓簍runk妯″紡锛屼笖鍏佽PC鏈虹殑VLAN閫氳繃銆...
绛旓細鍗庝负妯℃嫙鍗曡噦璺敱缁勫浘锛氬崟鑷傝矾鐢 涓绘満A灞炰簬vlan2锛孖P鍦板潃192.168.2.1锛岀綉鍏192.168.2.254锛涗富鏈築灞炰簬vlan3锛孖P鍦板潃192.168.3.1锛岀綉鍏192.168.3.254锛涘皢浜ゆ崲鏈哄拰璺敱鍣ㄤ箣闂寸殑閾捐矾閰嶇疆涓篢runk閾捐矾锛屽苟涓斿湪璺敱鍣ㄤ笂鍒涘缓瀛愭帴鍙ｄ互鏀寔VLAN璺敱銆1.RTA閰嶇疆锛2銆佷氦鎹㈡満閰嶇疆锛
绛旓細棣栧厛鍒╃敤鍗庝负妯℃嫙鍣╡NSP鏉ヨ璁￠昏緫缃戠粶鎷撴湸鍥撅紝鏈変竴鍙璺敱鍣AR1220锛屼竴鍙颁簩灞備氦鎹㈡満S3700锛屼簩鍙癙C涓绘満銆傚叾涔嬮棿鐢ㄧ嚎缂嗚繛鎺ュ苟浣滃ソ鏍囨敞銆傚湪鍗庝负妯℃嫙鍣╡NSP涓墦寮缁堢閰嶇疆浜ゆ崲鏈篠3700,閰嶇疆鍐呭鎴浘濡備笅 system-view sysname SW1 //璁剧疆浜ゆ崲鏈哄悕瀛椾负SW1 vlan batch 2 3 //杩炵画鍒涘缓vlan 2 3 inter...
绛旓細Router(config-if)#no shuntdown(杩涘叆SERIAL2/0绔彛锛閰嶇疆IP鍦板潃骞跺紑鍚)Router(config)#interface fastEthernet 0/0 Router(config-if)#ip address 192.168.40.1 255.255.255.0 Router(config-if)#no shuntdown(杩涘叆fastEthernet 0/0绔彛锛岄厤缃甀P鍦板潃骞跺紑鍚)鍒嗗埆閰嶇疆绗竴涓拰绗簩涓璺敱鍣鐨勮〃鎬...
绛旓細ip address 30.0.0.1 255.255.255.0 閰嶇疆鍏抽敭鐐癸細1) 浜ゆ崲鏈洪儴鍒嗛厤缃紝鍙互鍙傝冧氦鎹㈡満鐨勬搷浣滄墜鍐岋紱2) 鍦ㄥ悇涓猇LAN涓殑涓绘満蹇呴』鎸囧畾缃戝叧,鍏跺湴鍧涓璺敱鍣鐩稿簲瀛愭帴鍙ｇ殑IP锛岄厤缃畬姣曞悗涓猇LAN闂寸殑涓绘満鍙互鐩镐簰ping閫氾紱3锛夊鏋滄兂瀵逛釜VLAN闂撮儴鍒嗕富鏈鸿闂仛鎺у埗锛屽彲浠ラ氳繃鍦ㄨ矾鐢卞櫒涓婂仛ACL杩涜璁块棶鎺у埗銆
绛旓細鍗曡噦璺敱涓鑸敤鍦ㄥ疄鐜颁簩灞備氦鎹㈡満VLAN闂翠簰璁匡紝闇瑕佷竴鍙拌矾鐢卞櫒鏀寔锛氬亣璁炬垜浠渶瑕佸疄鐜癡LAN100鍜孷LAN200闂翠簰璁夸竴銆佸崟鑷傝矾鐢辨嫇鎵 sw1 g0/0/1 ---g0/0/0 R1閰嶇疆锛歋W1锛歩nterface g0/0/1 port link-type trunk port trunk allow-pass vlan 100 200R1: interface G 0/0/0.1 //璺敱...
绛旓細Cisco鍗曡噦璺敱閰嶇疆 鍗曡噦璺敱锛屽嵆鍦ㄨ矾鐢卞櫒涓婅缃涓昏緫瀛愭帴鍙ｏ紝姣忎釜瀛愭帴鍙ｅ搴斾竴涓獀lan銆傚湪姣忎釜瀛愭帴鍙ｇ殑鏁版嵁鍦ㄧ墿鐞嗛摼璺笂浼犻掗兘瑕佹爣璁板皝瑁呫侰isco璁惧鏀寔ISL鍜802.1q锛坉ot1Q锛夊崗璁鍗庝负鍙敮鎸802.1q銆侱OT1Q鍜孖SL鐨勫尯鍒細DOT1Q鏄悇绫讳骇鍝佺殑VLAN閫氱敤鍗忚妯″紡锛孌ot1q鏄竴绉嶆櫘閬嶄娇鐢ㄧ殑鏍囧噯锛岄傜敤鎵鏈...
绛旓細瀹炴柦锛氶噰鐢鍗曡噦璺敱锛屽嵆鍦ㄨ矾鐢卞櫒涓婅缃涓昏緫瀛愭帴鍙ｏ紝姣忎釜瀛愭帴鍙ｅ搴斾簬涓涓猇LAN銆傜敱浜庣墿鐞嗚矾鐢辨帴鍙ｅ彧鏈変竴涓紝鍚勫瓙鎺ュ彛鐨勬暟鎹湪鐗╃悊閾捐矾涓婁紶閫掕杩涜鏍囪灏佽銆侰isco璁惧鏀寔ISL鍜802.1q鍗忚銆鍗庝负璁惧鍙敮鎸802.1q銆傚崟鑷傝矾鐢辩殑閰嶇疆瀹炰緥 2600 IOS闇姹傦細IP Plus (c2600-ik8s-mz-122.15.T.bin)Current ...
绛旓細瀹為獙璁惧锛氫竴鍙癈ISCO璺敱鍣锛圧1锛夛紝涓鍙颁笁灞備氦鎹㈡満锛圫1锛夛紝涓ゅ彴PC鏈猴紙 pc2鍜宲c3锛塒C鐨閰嶇疆濡備笅锛歱c2鐨処P锛192.168.2.10 缃戝叧锛192.168.2.1pc3鐨処P锛192.168.3.10 缃戝叧锛192.168.3.1浜ゆ崲鏈篠1鐨勯厤缃涓嬶細Switch>enableSwitch#vlan databaseSwitch(vlan)#vlan 2 name test01VLAN 2 added:...
绛旓細浣犺矾鐢卞櫒鍋氱殑鍗曡噦璺敱锛屾兂瑕佷袱涓綉娈典笉鑳戒簰鐩歌闂彲浠ョ敤ACL鏉ラ檺鍒躲俛ccess-list 100 deny ip 192.168.10.0 0.0.0.255 192.168.20.0 0.0.0.255 access-list 100 deny ip 192.168.20.0 0.0.0.255 192.168.10.0 0.0.0.255 access-list100 per ip any any int f0/0.1 ip acc...
