三层交换机实现VLAN间路由通信

三层交换机实现VLAN间路由通信

实验拓扑

配置计算机IP参数

办公区域
VLAN 10
IP地址：192.168.1.1/24
Gateway：192.168.1.254

监控区域
VLAN 20
IP地址：192.168.2.1/24
Gateway：192.168.2.254

配置交换机

（1）在所有交换机上创建VLAN 10 和 VLAN 20 ，命令如下。
S1交换机配置命令

The device is running!
<Huawei>system-view 	//由用户视图进入系统视图
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname S1 		//将交换机名称更改为S1
[S1]vlan batch 10 20 	//连续创建多个vlan
Info: This operation may take a few seconds. Please wait for a moment...done.
[S1]undo info-center enable  //关闭系统提示消息
Info: Information center is disabled.

S2交换机配置命令

The device is running!
<Huawei>system-view 
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname S2
[S2]undo info-center enable 
Info: Information center is disabled.
[S2]vlan batch 10 20
Info: This operation may take a few seconds. Please wait for a moment...done.

S3交换机配置命令

The device is running!
<Huawei>system-view 
Enter system view, return user view with Ctrl+Z.
[Huawei]undo info-center enable 
Info: Information center is disabled.
[Huawei]sysname S3
[S3]vlan batch 10 20
Info: This operation may take a few seconds. Please wait for a moment...done.

（2）配置交换机端口
①配置交换机S1端口。S1交换机为三层交换机，其端口需要设置为Trunk类型，并允许VLAN 10、20的数据通过。命令如下。
常规操作：

[S1]interface GigabitEthernet 0/0/1
[S1-GigabitEthernet0/0/1]port link-type trunk 
[S1-GigabitEthernet0/0/1]port trunk allow-pass vlan 10 20 
[S1-GigabitEthernet0/0/1]display this 
#
interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 10 20
#
return
[S1-GigabitEthernet0/0/1]quit
[S1]interface GigabitEthernet 0/0/2
[S1-GigabitEthernet0/0/2]port link-type trunk 
[S1-GigabitEthernet0/0/2]port trunk allow-pass vlan 10 20 
[S1-GigabitEthernet0/0/2]display this 
#
interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk allow-pass vlan 10 20
#
return
[S1-GigabitEthernet0/0/2]quit
[S1]

便捷操作：

[S1]port-group 1
[S1-port-group-1]group-member GigabitEthernet 0/0/1 to GigabitEthernet 0/0/2
[S1-port-group-1]port link-type trunk 
[S1-GigabitEthernet0/0/1]port link-type trunk 
[S1-GigabitEthernet0/0/2]port link-type trunk 
[S1-port-group-1]port trunk allow-pass vlan 10 20
[S1-GigabitEthernet0/0/1]port trunk allow-pass vlan 10 20
[S1-GigabitEthernet0/0/2]port trunk allow-pass vlan 10 20
[S1-port-group-1]display this 
#
port-group 1
 group-member GigabitEthernet0/0/1
 group-member GigabitEthernet0/0/2
#
return
[S1-port-group-1]

②配置交换机S2端口，命令如下。

[S2]interface Ethernet0/0/1
[S2-Ethernet0/0/1]port link-type access 
[S2-Ethernet0/0/1]port default vlan 10
[S2-Ethernet0/0/1]display this 
#
interface Ethernet0/0/1
 port link-type access
 port default vlan 10
#
return
[S2-Ethernet0/0/1]quit
[S2]int	
[S2]interface GigabitEthernet 0/0/1
[S2-GigabitEthernet0/0/1]port link-type trunk 
[S2-GigabitEthernet0/0/1]port trunk allow-pass vlan 10 20
[S2-GigabitEthernet0/0/1]display this 
#
interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 10 20
#
return
[S2-GigabitEthernet0/0/1]

③配置交换机S3端口，命令如下。

[S3]interface Ethernet0/0/1
[S3-Ethernet0/0/1]port link-type access 
[S3-Ethernet0/0/1]port default vlan 20
[S3-Ethernet0/0/1]display this 
#
interface Ethernet0/0/1
 port link-type access
 port default vlan 20
#
return
[S3-Ethernet0/0/1]quit
[S3]interface GigabitEthernet 0/0/2
[S3-GigabitEthernet0/0/2]port link-type trunk 
[S3-GigabitEthernet0/0/2]port trunk allow-pass vlan 10 20
[S3-GigabitEthernet0/0/2]display  this 
#
interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk allow-pass vlan 10 20
#
return
[S3-GigabitEthernet0/0/2]quit
[S3]

④测试计算机间是否正常通信

在PC1上利用ping命令的测试结果无法通信。

（3）在S1（即三层交换机）上配置VLANIF接口
①配置VLANIF接口IP地址
主要是配置VLANIF接口的IP地址，此地址作为计算机默认网关地址。命令如下。

[S1]interface Vlanif 10		//进入VLAN 10接口视图下
[S1-Vlanif10]ip address 192.168.1.254 24
[S1-Vlanif10]display this 
#
interface Vlanif10
 ip address 192.168.1.254 255.255.255.0
#
return
[S1-Vlanif10]quit
[S1]interface Vlanif 20		//进入VLAN 20接口视图下
[S1-Vlanif20]ip address 192.168.2.254 24
[S1-Vlanif20]display this 
#
interface Vlanif20
 ip address 192.168.2.254 255.255.255.0
#
return
[S1-Vlanif20]quit
[S1]

②查看VLANIF信息

[S1]display current-configuration
······
#
interface Vlanif1
#
interface Vlanif10
 ip address 192.168.1.254 255.255.255.0
#
interface Vlanif20
 ip address 192.168.2.254 255.255.255.0
#
······

测试计算机之间是否能正常通信。