H3C S3600划分3个vlan,双网接入,要求如下:

发布网友 发布时间：2022-04-26 13:33

我来回答

共2个回答

热心网友 时间：2022-06-28 16:00

假定vlan1的网段是192.168.0.0/24,vlan2所用网段是192.168.1.0/24，vlan3所用的网段是192.168.2.0/24,出口所用端口是g1/0，vlan是10，点对点地址是172.16.1.0/30.指令如下：
sys
vlan1
int vlan 1
ip address 192.168.0.1 255.255.255.0
port ethernet0/1 to ethernet0/16
port access vlan 1
vlan2
int vlan 2
ip address 192.168.1.1 255.255.255.0
port ethernet0/17 to ethernet0/32
port access vlan 2
vlan1
int vlan 3
ip address 192.168.2.1 255.255.255.0
port ethernet0/33 to ethernet0/48
port access vlan 3
vlan 10
int vlan 10
ip address 172.16.1.2 255.255.255.252
int g1/0
port access vlan 10
acl number 3000
rule 5 permit ip source 192.168.2.0 0.0.0.255 destination 10.0.0.0 0.255.255.255
rule 10 deny ip soure 192.168.1.0 0.0.0.255 destination any
rule 15 deny ip soure 192.168.2.0 0.0.0.255 destination any
rule 100 permit ip soure any destination any
acl number 3001
rule 5 deny ip soure 192.168.0.0 0.0.0.255 destination any
rule 10 deny ip soure 192.168.1.0 0.0.0.255 destination any
rule 100 permit ip soure any destination any
acl number 3002
rule 5 deny ip soure 192.168.0.0 0.0.0.255 destination any
rule 100 permit ip soure any destination any
int vlan 1
acl 3000 outbound
int vlan 3
acl 3001 outbound
int vlan 10
acl 3002 outbound
ip route-static 10.0.0.0 255.0.0.0 192.168.0.1
ip route-static 0.0.0.0 0.0.0.0 172.16.1.2

热心网友 时间：2022-06-28 16:01

交换机下链和下链各为什么设备，网关要设置在本交换机上还是上链设备上，这个都要弄清除了，对于本设备Vlan的配置是简单的
vlan 1
port e1/0/1 to e1/0/16
vlan 2
port e1/0/17 to e1/0/32
vlan 3
port e1/0/33 to e1/0/48

其他的配置要看的你上下链设备和你个需求才能做配置