三層交換機與路由器組網(wǎng)如何正確配置

小編：小丟更新時間：2023-04-16 15:04

在網(wǎng)絡(luò)架構(gòu)中，三層交換機和路由器都扮演著非常重要的角色。三層交換機主要用于在局域網(wǎng)內(nèi)部進行數(shù)據(jù)包轉(zhuǎn)發(fā)和過濾，而路由器則用于連接不同的網(wǎng)絡(luò)并進行路由選擇和跨網(wǎng)絡(luò)通信。正確配置三層交換機和路由器可以提高網(wǎng)絡(luò)的性能和安全性，從而確保網(wǎng)絡(luò)的正常運行。由于網(wǎng)絡(luò)配置的復(fù)雜性和多樣性，不同的網(wǎng)絡(luò)架構(gòu)可能需要不同的配置方法。在本篇文章中，我整理了一份通用的三層交換機和路由器配置方法，以幫助有需要的友友們更好地了解相關(guān)技能。希望友友們可以從中獲得一些有用的信息。

實驗內(nèi)容及目標：

1、不同vlan 下的客戶端能夠訪問外網(wǎng)【2.2.2.1】

2、了解路由器和三層交換機之間的連接及配置

3、了解三層交換機和接入交換機之間的連接及配置

實驗拓撲圖：

實驗設(shè)備及版本：

本實驗所用到的設(shè)備為：

1、交換機：華為 Quidway S5700-28C-HI VRP (R) software, Version 5.110

2、路由器：華為 AR1200 VRP (R) software, Version 5.130

3、PC主機：

實驗過程：

一、建立物理連接

按照拓撲圖進行組網(wǎng)

二、接入交換機配置

三層交換機與路由器組網(wǎng)如何正確配置

這里以紅框內(nèi)的第一個交換機為例

sys Enter system view, return user view with Ctrl+Z. [Huawei] [Huawei]sysname [Huawei]sysname switch1 Apr 9 2023 19:11:09-08:00 switch1 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011. 5.25.191.3.1 configurations have been changed. The current change number is 4, t he change loop count is 0, and the maximum number of records is 4095. [switch1]undo info-center enable Info: Information center is disabled. [switch1] #創(chuàng)建vlan [switch1] [switch1]vlan bat [switch1]vlan batch 1 to 3 Info: This operation may take a few seconds. Please wait for a moment...done. [switch1] #將接口加入到vlan 中 [switch1]interface GigabitEthernet 0/0/2 [switch1-GigabitEthernet0/0/2]port link-type access [switch1-GigabitEthernet0/0/2]port default vlan 1 [switch1-GigabitEthernet0/0/2]q [switch1] [switch1]interface GigabitEthernet 0/0/3 [switch1-GigabitEthernet0/0/3]port link-type access [switch1-GigabitEthernet0/0/3]port default vlan 1 [switch1-GigabitEthernet0/0/3]q [switch1] [switch1] #設(shè)置與三層核心交換機相連的接口為trunk，并設(shè)置運行通過vlan 1，vlan2，vlan3 [switch1]interface GigabitEthernet 0/0/1 [switch1-GigabitEthernet0/0/1]dis this # interface GigabitEthernet0/0/1 # return [switch1-GigabitEthernet0/0/1]port link-type trunk [switch1-GigabitEthernet0/0/1] [switch1-GigabitEthernet0/0/1]port trunk allow-pass vlan 1 to 3 [switch1-GigabitEthernet0/0/1] [switch1-GigabitEthernet0/0/1]q [switch1]

其他的幾個接入交換機配置過程相同，配置時，注意接口。

三、三層交換機配置

三層交換機與路由器組網(wǎng)如何正確配置

#創(chuàng)建VLAN接口并配置IP地址： sys Enter system view, return user view with Ctrl+Z. [Huawei]undo in [Huawei]undo info-center en [Huawei]undo info-center enable Info: Information center is disabled. [Huawei] [Huawei]interface Vlanif 1 [Huawei-Vlanif1]ip address 192.168.1.1 24 [Huawei-Vlanif1] [Huawei-Vlanif1]q [Huawei]int [Huawei]interface vlan [Huawei]interface Vlanif 2 Error: The VLAN does not exist. [Huawei]vlan batch 2 to 3 Info: This operation may take a few seconds. Please wait for a moment...done. [Huawei] [Huawei]interface Vlanif 2 [Huawei-Vlanif3] [Huawei-Vlanif3]ip ad [Huawei-Vlanif3]ip address 192.168.2.1 24 [Huawei-Vlanif3] [Huawei-Vlanif3]q [Huawei]int [Huawei]interface vla [Huawei]interface Vlanif 3 [Huawei-Vlanif3] [Huawei-Vlanif3] [Huawei-Vlanif3]ip add [Huawei-Vlanif3]ip address 192.168.3.1 24 [Huawei-Vlanif3] [Huawei-Vlanif3] [Huawei-Vlanif3]q [Huawei] [Huawei] [Huawei]sysna [Huawei]sysname Switch-Hexin [Switch-Hexin] [Switch-Hexin] #配置三層交換機上連接到接入交換機的接口為Trunk模式，并允許相應(yīng)VLAN通過： [Switch-Hexin]interface GigabitEthernet 0/0/2 [Switch-Hexin-GigabitEthernet0/0/2]port link-type trunk [Switch-Hexin-GigabitEthernet0/0/2]port trunk allow-pass vlan 1 to 3 [Switch-Hexin-GigabitEthernet0/0/2]q # 配置與路由器相連的接口 [Switch-Hexin] [Switch-Hexin]vlan batch 10 Info: This operation may take a few seconds. Please wait for a moment...done. [Switch-Hexin] [Switch-Hexin]interface GigabitEthernet 0/0/1 [Switch-Hexin-GigabitEthernet0/0/1] [Switch-Hexin-GigabitEthernet0/0/1]port link-type access [Switch-Hexin-GigabitEthernet0/0/1]port default vlan 10 [Switch-Hexin-GigabitEthernet0/0/1]q [Switch-Hexin]interface Vlanif 10 [Switch-Hexin-Vlanif10]ip address 192.168.10.2 24 [Switch-Hexin-Vlanif10] [Switch-Hexin-Vlanif10]q [Switch-Hexin] #配置靜態(tài)路由 [Switch-Hexin] [Switch-Hexin]ip route-static 0.0.0.0 0.0.0.0 192.168.10.1 [Switch-Hexin]

四、路由器配置

[Router]interface GigabitEthernet 0/0/1 [Router-GigabitEthernet0/0/1]ip address 192.168.10.1 255.255.255.0 [Router-GigabitEthernet0/0/1]q [Router]interface GigabitEthernet 0/0/0 [Router-GigabitEthernet0/0/0]ip address 2.2.2.2 24 [Router-GigabitEthernet0/0/0] [Router-GigabitEthernet0/0/0]q [Router]ip route-static 0.0.0.0 0.0.0.0 2.2.2.1 [Router] [Router]ip route-static 192.168.0.0 255.255.0.0 192.168.10.2 [Router] #配置NAT 轉(zhuǎn)換 [Router]acl number 2001 [Router-acl-basic-2001]rule 5 permit source 192.168.0.0 0.0.255.255 [Router-acl-basic-2001]q [Router]interface GigabitEthernet 0/0/0 [Router-GigabitEthernet0/0/0]nat outbound 2001 [Router-GigabitEthernet0/0/0]qu [Router]

五、測試：

三層交換機與路由器組網(wǎng)如何正確配置