H3C实验单臂路由

交换机的配置

<H3C>system-view
[SW]vlan 60
[SW-vlan10]quit
[SW]int GigabitEthernet 1/0/1
[SW-GigabitEthernet1/0/1]port link-type access
[SW-GigabitEthernet1/0/1]port access vlan 10
[SW]vlan 61
[SW-vlan20]quit
[SW]int GigabitEthernet 1/0/2
[SW-GigabitEthernet1/0/2]port link-type access
[SW-GigabitEthernet1/0/2]port access vlan 20
[SW]int GigabitEthernet 1/0/3
[SW-GigabitEthernet1/0/3]port link-type trunk
[SW-GigabitEthernet1/0/3]port trunk permit vlan all

R1的配置

<H3C>system-view
[R1]int GigabitEthernet 0/1.1
[R1-GigabitEthernet0/0.1]ip address 10.0.60.1 24    #配置子接口IP地址
[R1-GigabitEthernet0/0.1]vlan-type dot1q vid 10      #子接口封装为dot1q协议并分配给VLAN 60
[R1-GigabitEthernet0/0.1]int GigabitEthernet 0/1.2
[R1-GigabitEthernet0/0.2]ip address 10.0.61.1 24
[R1-GigabitEthernet0/0.2]vlan-type dot1q vid 61
[R1]int GigabitEthernet 0/0
[R1-GigabitEthernet0/0.1]ip address 201.0.1.1 24 
[R1]ip route-static 10.0.60.0 24 201.0.0.1
[R1]ip route-static 10.0.61.0 24 201.0.0.1

在路由器上创建两个DHCP地址池，网关配置成两个子接口的地址，作为内网两个网段的DHCP服务器。

[R1]dhcp enable
[R1]dhcp server ip-pool vlan 60
[R1-dhcp-pool-vlan60]net 10.0.60.0 24
[R1-dhcp-pool-vlan60]gateway-list 10.0.60.254
[R1-dhcp-pool-vlan60]qu
[R1]dhcp server ip-pool vlan 61
[R1-dhcp-pool-vlan60]net 10.0.61.0 24
[R1-dhcp-pool-vlan60]gateway-list 10.0.61.254
[R1-dhcp-pool-vlan60]qu
[R1]acl basic 2000
[R1-acl-ipv4-basic-2000]rule 1 permit source 10.10.10.0 0.0.0.255
[R1-acl-ipv4-basic-2000]qu
[R1]int g0/0
[R1-GigabitEtherner0/0]nat outbound 2000

[R2]int loop q
[R2-LoopBack0]int loop 0
[R2-LoopBack0]ip add 114.114.114.144 32
[R2-LoopBack0]quit
[R2]int g0/1
[R2-GigabitEthernet0/0]ip add 201.0.0.1 24
[R2-GigabitEthernet0/0]qu

用pc机ping公网路由器