中兴三层交换机设置vlan20和其他vlan不能互通 在三层交换机上设置vlan 10,vlan 20，如果想让这...
\u76f8\u8fde\u7684\u4e09\u5c42\u548c\u4e8c\u5c42\u4ea4\u6362\u673a\u4e0a\u5206\u522b\u8bbe\u7f6evlan10\u3001vlan20\uff0cvlan10\u6216\u8005vlan20\u662f\u5426\u662f\u540c\u4e00vlan\uff0c\u53ef\u5426\u901a\u4fe1\u5982\u679c\u4e24\u4e2a\u4ea4\u6362\u673a\u4e4b\u95f4\u662ftrunk\uff0c\u90a3\u5c31\u662f\u540c\u4e00vlan\u3002
\u53ef\u4ee5\u7684\uff0c\u4e09\u5c42\u4ea4\u6362\u673a\u7528\u7684\u662f\u4e09\u5c42IP\u534f\u8bae\uff0c\u4ed6\u53ea\u53ea\u662f\u4e3a\u6bcf\u4e2avlan\u914d\u7f6e\u4e00\u4e2a\u865a\u62df\u7684\u4e09\u5c42\u63a5\u53e3\uff0c\u5e76\u4e3a\u8fd9\u4e9b\u63a5\u53e3\u914d\u7f6eIP\u5730\u5740\uff0c\u7136\u540e\u76f4\u63a5\u5229\u7528\u4e09\u5c42\u4ea4\u6362\u673a\u7684\u8def\u7531\u529f\u80fd\u53bb\u5b9e\u73b0vlan\u95f4\u8def\u7531\u901a\u4fe1\u3002\u5982\u679c\u5728\u4e09\u5c42\u4ea4\u6362\u673a\u4e0a\u8bbe\u7f6evlan\uff0c\u4ed6\u662f\u53ef\u4ee5\u76f4\u63a5\u5728\u4e09\u5c42\u4ea4\u6362\u673a\u4e0a\u5229\u7528\u4e09\u5c42\u4ea4\u6362\u673a\u7684\u8def\u7531\u529f\u80fd\u901a\u4fe1\u7684 \u3002\u524d\u63d0\u662f\u4f60\u8981\u7ed9\u6bcf\u4e2avlan\u914d\u7f6e\u4e00\u4e2a\u865a\u62df\u7684iP\u5730\u5740\u63a5\u53e3\uff0c\u7136\u540e\u5c31\u53ef\u4ee5\u7684\u8def\u7531\u914d\u7f6e\uff0c\u5229\u7528\u8def\u7531\u529f\u80fd\u7684\u8bdd\uff0c\u4ed6\u770b\u4e0d\u5230\u5e95\u4e0b\u914d\u7f6e\u3002\u5229\u7528\u4e86vlan\u95f4\u8def\u7531\u529f\u80fd\u4e4b\u540e\uff0c\u5e76\u4e0d\u4ee3\u8868vlan1\u548cvlan2\uff0c\u5c31\u5728\u540c\u4e00\u4e2a\u5e7f\u64ad\u57df\u4e2d\uff0c\u8fd9\u4e24\u4e2avlan\u4ecd\u7136\u5904\u4e8e\u4e0d\u540c\u7684\u5c40\u57df\u7f51\u5f53\u4e2d
ip access-list extend novlan20deny ip 172.10.11.0 0.0.0.255 192.168.20.0 0.0.0.255
\\禁止vlan11 访问VLAN20
deny ip 192.168.20.0 0.0.0.255 172.10.11.0 0.0.0.255
\\禁止VLAN20访问VLAN11
....
\\其他自己配置
permit ip any any
int fa0/0
ip access-group novlan20 in
\\在入的trunk上，就进行限制。入的包，vlan11->vlan20 和 vlan20->vlan11的都不让进
绛旓細ip access-group novlan20 in \\鍦ㄥ叆鐨則runk涓婏紝灏辫繘琛岄檺鍒躲傚叆鐨勫寘锛寁lan11->vlan20 鍜 vlan20->vlan11鐨勯兘涓嶈杩
绛旓細涓夊眰鍜屼簩灞浜ゆ崲鏈浜掕仈鐨勭鍙ｉ渶瑕閰嶇疆trunk 銆4涓彛閮介渶瑕璁剧疆 switchport mode trunk 涔嬪悗鍦ㄤ笁灞備笂 vlan 10 vlan 20 int vlan 10 ip add 192.168.100.1 255.255.255.0 no shutdown int vlan 20 ip add 192.168.101.1 255.255.255.0 no shutdown 灏卞彲浠ヤ簡 2涓猵c灏卞彲浠ヤ簰閫氫簡 濡傛灉涓嶉 ...
绛旓細鍙互鐨勶紝涓夊眰浜ゆ崲鏈鐢ㄧ殑鏄笁灞侷P鍗忚锛屼粬鍙彧鏄负姣忎釜vlan閰嶇疆涓涓櫄鎷熺殑涓夊眰鎺ュ彛锛屽苟涓鸿繖浜涙帴鍙ｉ厤缃甀P鍦板潃锛岀劧鍚庣洿鎺ュ埄鐢ㄤ笁灞備氦鎹㈡満鐨勮矾鐢卞姛鑳藉幓瀹炵幇vlan闂磋矾鐢遍氫俊銆傚鏋滃湪涓夊眰浜ゆ崲鏈轰笂璁剧疆vlan锛屼粬鏄彲浠ョ洿鎺ュ湪涓夊眰浜ゆ崲鏈轰笂鍒╃敤涓夊眰浜ゆ崲鏈虹殑璺敱鍔熻兘閫氫俊鐨 銆傚墠鎻愭槸浣犺缁欐瘡涓獀lan閰嶇疆涓涓櫄鎷熺殑iP鍦板潃鎺...
绛旓細Switch(config-vlan)#name pc2 Switch(config-vlan)#exit Switch(config)#int vlan 10%LINK-5-CHANGED: Interface Vlan10, changed state to up Switch(config-if)#ip address 192.168.10.1 255.255.255.0 Switch(config-if)#no shut Switch(config-if)#int vlan 20%LINK-5-CHANGED: Interfa...
绛旓細[SwitchA-Vlan-interface20]ip address 20.1.1.1 255.255.255.0 鍥 閰嶇疆鍏抽敭鐐癸細1.浜ゆ崲鏈鐨刅LAN铏氭帴鍙ｆ壙杞藉湪鐗╃悊绔彛涔嬩笂锛屽嵆鏌怴LAN鎵鍖呭惈鐨勭墿鐞嗙鍙P涔嬪悗锛岃VLAN铏氭帴鍙ｆ墠浼歎P;2.瀵逛簬涓夊眰浜ゆ崲鏈锛屽彲浠ヤ负澶氫釜VLAN鎺ュ彛閰嶇疆IP鍦板潃锛岃屼笖榛樿鎯呭喌涓嬪悇涓猇LAN鎺ュ彛涔嬮棿鍙互璁块棶銆傚浜庝簩灞備氦鎹㈡満鏉ヨ锛屼负...
绛旓細閰嶇疆 鍏ㄨ繃绋嬪湪锛歋A锛1.vlan10 2.(閫夊拰P1鐩歌繛鐨勭殑绔彛濡俧0/1 )int f0/1 3.sw ac vlan 10 4 锛堥夊拰鏍稿績浜ゆ崲鏈鐩歌繛鐨勭鍙ｅf0/24锛 int f0/24 5.sw ac vlan 10 (鎴杝w mo trunk)SB锛1.vlan 20 2.(閫夊拰P2鐩歌繛鐨勭殑绔彛濡俧0/1 )int f0/1 3.sw ac vlan 20 4 锛堥夊拰鏍稿績浜ゆ崲鏈...
绛旓細涓夊眰浜ゆ崲鏈鐨閰嶇疆:Switchenable Switch#configure terminal Enter configuration commands, one per line. End with CNTL/Z. 鍒涘缓vlan 10 20 Switch(config)#vlan 10 Switch(config-vlan)#vlan 20 Switch(config-vlan)#exit 閰嶇疆SVI鎺ュ彛ip Switch(config)#interface vlan 10 %LINK-5-CHANGED: Interface Vlan10, ...
绛旓細1銆佷氦鎹㈡満0浜屽眰浜ゆ崲鏈 鍒掑垎vlan10銆vlan20锛屽苟鎸囧畾绔彛锛岀暀涓涓彛锛堝亣璁24鍙峰彛锛夛紝鍋歵ruck鍙ｏ紝骞惰瀹氬厑璁搁氳繃鐨剉lan;2銆佷氦鎹㈡満1涓夊眰浜ゆ崲鏈 鍒掑垎vlan10銆乿lan20銆乿lan100锛屾牴鎹渶瑕佽缃寚瀹氱鍙ｏ紝涔熷彲涓嶈銆傚垎鍒璁剧疆vlan IP鍦板潃锛堥殢渚夸綘鑷繁锛夛紝骞跺垝鍒1涓猼ruck鍙ｈ繛鎺ヤ簩灞備氦鎹㈡満锛屾牴鎹渶瑕佽缃厑璁搁氳繃...
绛旓細1.鍦涓夊眰浜ゆ崲鏈涓璁剧疆涓や釜vlan锛歷lan 10鍜vlan 20锛2.鍦ㄤ笁灞備氦鎹㈡満涓婂垱寤轰袱涓猄VI锛堜氦鎹㈣櫄鎷熸帴鍙ｏ級锛3.涓篠VI vlan 10鍜寁lan 20鍒嗛厤IP鍦板潃锛屼袱涓帴鍙ｇ殑IP搴旇灞炰簬鐙珛鐨勫瓙缃戯紱4.鍦ㄤ笁灞備氦鎹㈡満涓婂惎鐢╥p routing锛5.灏嗚繛鎺ョ數鑴戠殑绔彛鍒掑垎鍒扮浉搴旂殑VLAN涓紱6.涓嶅悓VLAN涓殑鐢佃剳IP鎵灞炵綉缁滐紝搴斿拰涓夊眰浜ゆ崲...
绛旓細1銆浜ゆ崲鏈洪厤缃锛氾紙1)鍦ㄤ氦鎹㈡満涓婂垎鍒垝鍒嗕笁涓猇LAN锛屽vlan 10锛vlan 20锛寁lan 30銆傦紙2锛夎繘鍏ヤ氦鎹㈡満鐨勪笂鑱斿彛锛屽interface GigabitEthernet 0/0/1锛岃缃垚trunk妯″紡銆傦紙3锛変笂鑱斿彛鍔犲叆vlan 10锛寁lan 20锛寁lan 30銆2銆佽矾鐢卞櫒閰嶇疆锛氾紙1锛夎繘鍏ヨ矾鐢卞櫒杩炴帴浜ゆ崲鏈虹殑绔彛鐨勫瓙鎺ュ彛锛屽interface GigabitEthernet...
