天天看点

华为设备三层交换机与路由器对接上网

华为设备三层交换机与路由器对接上网

1.配置lsw1

(1)配置连接用户的接口和对应的vlanif接口

[lsw1]vlan batch 10 20

[lsw1-gigabitethernet0/0/1]port link-type access

[lsw1-gigabitethernet0/0/1]port default vlan 10

[lsw1-gigabitethernet0/0/2]port link-type access

[lsw1-gigabitethernet0/0/2]port default vlan 20

[lsw1]int vlanif 10

[lsw1-vlanif10]ip add 10.1.10.2 24

[lsw1-vlanif10]int vlanif 20

[lsw1-vlanif20]ip add 10.1.20.2 24

(2)配置连接路由器的接口和对应的vlanif接口

[lsw1]vlan batch 100

[lsw1-gigabitethernet0/0/3]port link-type access

[lsw1-gigabitethernet0/0/3]port default vlan 100

[lsw1]int vlanif 100

[lsw1-vlanif100]ip add 10.1.100.2 24

(3)配置缺省路由

[lsw1]ip route-static 0.0.0.0 0.0.0.0 10.1.100.1

(4)配置dhcp服务器

[lsw1]dhcp enable

[lsw1-vlanif10]dhcp select interface

[lsw1-vlanif10]dhcp server dns-list 114.114.114.114

[lsw1-vlanif20]dhcp select interface

[lsw1-vlanif20]dhcp server dns-list 114.114.114.114

2.配置ar1

(1)配置连接交换机的接口对应的ip地址

[ar1-gigabitethernet0/0/1]ip add 10.1.100.1 24

(2)配置连接公网的接口对应的ip地址

[ar1-gigabitethernet0/0/0]ip add 20.1.1.1 24

(3)配置缺省路由和回程路由

[ar1]ip route-static 0.0.0.0 0.0.0.0 20.1.1.2

[ar1]ip route-static 10.1.0.0 255.255.0.0 10.1.100.2

(4)配置nat功能,使内网用户可以访问外网

[ar1]acl 2000

[ar1-acl-basic-2000]rule permit source 10.1.0.0 0.0.255.255

[ar1-gigabitethernet0/0/0]nat outbound 2000

3.配置ar2

[ar2-gigabitethernet0/0/0]ip add 20.1.1.2 24

4.配置pc

华为设备三层交换机与路由器对接上网
华为设备三层交换机与路由器对接上网

5.检查配置结果

华为设备三层交换机与路由器对接上网