Quidway S3328TP-EI交换机vlan划分
华为
quidway3328
三层交换机
vlan
配置
客户要求；
vlan11
（
shichang
），
vlan12
（
shengchan
）
.
，
vlan13
（
xiaoshou
）间不能互相通信但都可以访问
vlan10
（
caiwu
）。
通过
vlan14
的接口
e0/0/24
接入路由器至
Internet
。
vlan 10 caiwu 192.168.10.254/24
port e0/0/0 to 0/0/4
|
Vlan10
|
|
Vlan13
|
|
Vlan11
|
|
Vlan12
|
|
Vlan14
|
|
router
|
|
internet
|
port e0/0/5 to 0/0/12
vlan 12 shengchan 192.168.12.254/24
port e0/0/13 to 0/0/16
vlan 13 xiaoshou 192.168.13.254/24
port e0/0/17 to 0/0/20
vlan 14 link-wan 192.168.14.254/24
port e0/0/24
路由器
lan
接口
ip
；
192.168.14.253/24
外网
ip xx.xx.xx.xx
Gw xx.xx.xx.xx
acl 3000 vlan11 ---->vlan12
vlan13 ---->vlan12
acl 3001 vlan11 ---->vlan13
vlan12 ---->vlan13
acl 3002 vlan12 ---->vlan11
vlan13 ---->vlan11
***** 交换机配置 ****
***** 交换机配置 ****
dis cu
#
sysname Quidway
#
vlan batch 1 10 to 14
#
cluster enable
ntdp enable
ntdp hop 16
ndp enable
#
voice-vlan mac-address 0001-e300-0000 mask ffff-ff00-0000 description Simens phone
voice-vlan mac-address 0003-6b00-0000 mask ffff-ff00-0000 description Cisco phone
voice-vlan mac-address 0004-0d00-0000 mask ffff-ff00-0000 description Avaya phone
voice-vlan mac-address 0060-b900-0000 mask ffff-ff00-0000 description Philips/NEC phone
voice-vlan mac-address 00d0-1e00-0000 mask ffff-ff00-0000 description Pingtel phone
voice-vlan mac-address 00e0-7500-0000 mask ffff-ff00-0000 description Polycom phone
voice-vlan mac-address 00e0-bb00-0000 mask ffff-ff00-0000 description 3com phone
#
vlan 10
description caiwu
vlan 11
description shichang
traffic-policy shichang inbound
vlan 12
description shengchan
traffic-policy shengchan inbound
vlan 13
description xiaoshou
traffic-policy xiaoshou inbound
vlan 14
description link-wan
#
acl number 3000
rule 5 permit ip source 192.168.11.0 0.0.0 .255 destination 192.168.12.0 0.0.0.255
rule 10 permit ip source 192.168.13.0 0.0.0 .255 destination 192.168.12.0 0.0.0.255
#
acl number 3001
rule 5 permit ip source 192.168.11.0 0.0.0 .255 destination 192.168.13.0 0.0.0.255
rule 10 permit ip source 192.168.12.0 0.0.0 .255 destination 192.168.13.0 0.0.0.255
#
acl number 3002
rule 5 permit ip source 192.168.12.0 0.0.0 .255 destination 192.168.11.0 0.0.0.255
rule 10 permit ip source 192.168.13.0 0.0.0 .255 destination 192.168.11.0 0.0.0.255
#
traffic classifier shengchan
if-match acl 3000
traffic classifier xiaoshou
if-match acl 3001
traffic classifier shichang
if-match acl 3002
#
traffic behavior deny
deny
#
traffic policy shengchan
classifier shichang behavior deny
classifier xiaoshou behavior deny
classifier shengchan behavior deny
traffic policy xiaoshou
classifier shichang behavior deny
classifier shengchan behavior deny
classifier xiaoshou behavior deny
traffic policy shichang
classifier shengchan behavior deny
classifier xiaoshou behavior deny
classifier shichang behavior deny
#
interface Vlanif1
ip address dhcp-alloc
#
interface Vlanif10
ip address 192.168.10.254 255.255.255.0
#
interface Vlanif11
ip address 192.168.11.254 255.255.255.0
#
interface Vlanif12
ip address 192.168.12.254 255.255.255.0
#
interface Vlanif13
ip address 192.168.13.254 255.255.255.0
#
interface Vlanif14
ip address 192.168.14.254 255.255.255.0
#
interface Ethernet0/0/1
port default vlan 10
bpdu enable
ntdp enable
ndp enable
#
interface Ethernet0/0/2
port default vlan 10
bpdu enable
ntdp enable
ndp enable
#
interface Ethernet0/0/3
port default vlan 10
bpdu enable
ntdp enable
ndp enable
#
interface Ethernet0/0/4
port default vlan 10
bpdu enable
ntdp enable
ndp enable
#
interface Ethernet0/0/5
port default vlan 11
bpdu enable
ntdp enable
ndp enable
#
interface Ethernet0/0/6
port default vlan 11
bpdu enable
ntdp enable
ndp enable
#
interface Ethernet0/0/7
port default vlan 11
bpdu enable
ntdp enable
ndp enable
#
interface Ethernet0/0/8
port default vlan 11
bpdu enable
ntdp enable
ndp enable
#
interface Ethernet0/0/9
port default vlan 11
bpdu enable
ntdp enable
ndp enable42D#
interface Ethernet0/0/10
port default vlan 11
bpdu enable
ntdp enable
ndp enable
#
interface Ethernet0/0/11
port default vlan 11
bpdu enable
ntdp enable
ndp enable
#
interface Ethernet0/0/12
port default vlan 11
bpdu enable
ntdp enable
ndp enable
#
interface Ethernet0/0/13
port default vlan 12
bpdu enable
ntdp enable
42D ndp enable
#
interface Ethernet0/0/14
port default vlan 12
bpdu enable
ntdp enable
ndp enable
#
interface Ethernet0/0/15
port default vlan 12
bpdu enable
ntdp enable
ndp enable
#
interface Ethernet0/0/16
port default vlan 12
bpdu enable
ntdp enable
ndp enable
#
interface Ethernet0/0/17
port default vlan 13
bpdu enable
42D ntdp enable
ndp enable
#
interface Ethernet0/0/18
port default vlan 13
bpdu enable
ntdp enable
ndp enable
#
interface Ethernet0/0/19
port default vlan 13
bpdu enable
ntdp enable
ndp enable
#
interface Ethernet0/0/20
port default vlan 13
bpdu enable
ntdp enable
ndp enable
#
interface Ethernet0/0/21
port default vlan 1
42D bpdu enable
ntdp enable
ndp enable
#
interface Ethernet0/0/22
port default vlan 1
bpdu enable
ntdp enable
ndp enable
#
interface Ethernet0/0/23
port default vlan 1
bpdu enable
ntdp enable
ndp enable
#
interface Ethernet0/0/24
port default vlan 14
bpdu enable
ntdp enable
ndp enable
#
interface GigabitEthernet0/0/1
port default vlan 1
bpdu enable
ntdp enable
ndp enable
#
interface GigabitEthernet0/0/2
port default vlan 1
bpdu enable
ntdp enable
ndp enable
#
interface GigabitEthernet0/0/3
port default vlan 1
bpdu enable
ntdp enable
ndp enable
#
interface GigabitEthernet0/0/4
port default vlan 1
bpdu enable
ntdp enable
ndp enable
#
interface NULL0
#
aaa
authentication-scheme default
#
authorization-scheme default
#
accounting-scheme default
#
domain default
#
#
qos map-table dscp-dscp
#
qos map-table dscp-dot1p
#
qos map-table dscp-dp
#
ip route-static 0.0.0 .0 0.0.0.0 192.168.14.253
#
user-interface con 0
user-interface vty 0 4
#
return
<Quidway>