华为三层交换机与路由器对接上网配置示例-
2024-09-16编辑:本站
~
三层交换机与路由器对接上网配置示例
三层交换机具有路由功能,工作在OSI模型第三层网络层,作为用户网关,部署于接入层或汇聚层。配置示例如下:
1. **配置思路**:
- **作为网关**:交换机通过VLANIF接口实现跨网段用户互访。
- **DHCP服务器**:配置交换机作为DHCP服务器,为用户提供IP地址。
- **NAT转换**:路由器通过NAT转换,使用户访问外部网络。
2. **配置步骤**:
**交换机配置**:
- 配置连接用户的接口和VLANIF接口:
bash
[Switch] sysname Switch
[Switch] vlan batch 2 3
[Switch] interface gigabitethernet 0/0/2
[Switch-GigabitEthernet0/0/2] port link-type access
[Switch-GigabitEthernet0/0/2] port default vlan 2
[Switch-GigabitEthernet0/0/2] quit
[Switch] interface gigabitethernet 0/0/3
[Switch-GigabitEthernet0/0/3] port link-type access
[Switch-GigabitEthernet0/0/3] port default vlan 3
[Switch-GigabitEthernet0/0/3] quit
[Switch] interface vlanif 2
[Switch-Vlanif2] ip address 192.168.1.1 24
[Switch-Vlanif2] quit
[Switch] interface vlanif 3
[Switch-Vlanif3] ip address 192.168.2.1 24
[Switch-Vlanif3] quit
- 配置缺省路由和DHCP服务器:
bash
[Switch] dhcp enable
[Switch] interface vlanif 2
[Switch-Vlanif2] dhcp select interface
[Switch-Vlanif2] dhcp server dns-list 114.114.114.114 223.5.5.5
[Switch-Vlanif2] quit
[Switch] interface vlanif 3
[Switch-Vlanif3] dhcp select interface
[Switch-Vlanif3] dhcp server dns-list 114.114.114.114 223.5.5.5
[Switch-Vlanif3] quit
**路由器配置**:
- 配置连接交换机的接口和NAT功能:
bash
[Router] sysname Router
[Router] interface gigabitethernet 0/0/1
[Router-GigabitEthernet0/0/1] ip address 192.168.100.1 255.255.255.0
[Router-GigabitEthernet0/0/1] quit
[Router] interface gigabitethernet 0/0/2
[Router-GigabitEthernet0/0/2] ip address 200.0.0.2 255.255.255.0
[Router-GigabitEthernet0/0/2] nat outbound 2001
[Router-GigabitEthernet0/0/2] quit
- 配置缺省路由和回程路由:
bash
[Router] ip route-static 0.0.0.0 0.0.0.0 200.0.0.1
[Router] ip route-static 192.168.0.0 255.255.0.0 192.168.100.2
3. **检查配置结果**:
确保PC1和PC2能Ping通外网IP 200.0.0.1/24,并访问Internet。
配置完成,实现三层交换机与路由器对接,满足用户访问外部网络需求。
三层交换机具有路由功能,工作在OSI模型第三层网络层,作为用户网关,部署于接入层或汇聚层。配置示例如下:
1. **配置思路**:
- **作为网关**:交换机通过VLANIF接口实现跨网段用户互访。
- **DHCP服务器**:配置交换机作为DHCP服务器,为用户提供IP地址。
- **NAT转换**:路由器通过NAT转换,使用户访问外部网络。
2. **配置步骤**:
**交换机配置**:
- 配置连接用户的接口和VLANIF接口:
bash
[Switch] sysname Switch
[Switch] vlan batch 2 3
[Switch] interface gigabitethernet 0/0/2
[Switch-GigabitEthernet0/0/2] port link-type access
[Switch-GigabitEthernet0/0/2] port default vlan 2
[Switch-GigabitEthernet0/0/2] quit
[Switch] interface gigabitethernet 0/0/3
[Switch-GigabitEthernet0/0/3] port link-type access
[Switch-GigabitEthernet0/0/3] port default vlan 3
[Switch-GigabitEthernet0/0/3] quit
[Switch] interface vlanif 2
[Switch-Vlanif2] ip address 192.168.1.1 24
[Switch-Vlanif2] quit
[Switch] interface vlanif 3
[Switch-Vlanif3] ip address 192.168.2.1 24
[Switch-Vlanif3] quit
- 配置缺省路由和DHCP服务器:
bash
[Switch] dhcp enable
[Switch] interface vlanif 2
[Switch-Vlanif2] dhcp select interface
[Switch-Vlanif2] dhcp server dns-list 114.114.114.114 223.5.5.5
[Switch-Vlanif2] quit
[Switch] interface vlanif 3
[Switch-Vlanif3] dhcp select interface
[Switch-Vlanif3] dhcp server dns-list 114.114.114.114 223.5.5.5
[Switch-Vlanif3] quit
**路由器配置**:
- 配置连接交换机的接口和NAT功能:
bash
[Router] sysname Router
[Router] interface gigabitethernet 0/0/1
[Router-GigabitEthernet0/0/1] ip address 192.168.100.1 255.255.255.0
[Router-GigabitEthernet0/0/1] quit
[Router] interface gigabitethernet 0/0/2
[Router-GigabitEthernet0/0/2] ip address 200.0.0.2 255.255.255.0
[Router-GigabitEthernet0/0/2] nat outbound 2001
[Router-GigabitEthernet0/0/2] quit
- 配置缺省路由和回程路由:
bash
[Router] ip route-static 0.0.0.0 0.0.0.0 200.0.0.1
[Router] ip route-static 192.168.0.0 255.255.0.0 192.168.100.2
3. **检查配置结果**:
确保PC1和PC2能Ping通外网IP 200.0.0.1/24,并访问Internet。
配置完成,实现三层交换机与路由器对接,满足用户访问外部网络需求。