基于HCL环境的跨vlan单臂路由实现

技术背景：解决由于vlan逻辑隔离的终端无法通信问题

构建拓扑图：

1. pc配置静态理由

PC3配置静态地址：192.168.1.1，网关：192.168.1.254

PC3配置静态地址：192.168.2.1，网关：192.168.2.254

 2. vlan划分

g1/0/2划分vlan10

g1/0/3划分vlan20

g1/0/1口配置为trunk口，否则默认的accsee口无法发出报文。

vlan划分指导：虚拟局域网（vlan）基于HCL环境的划分与验证

3. 交换机端口配置

若在vlan划分阶段已经配置则可以跳过。

SW1]int g1/0/1

[SW1-GigabitEthernet1/0/1]port link-type trunk 
//配置SW1-g1/0/1口为trunk 

[SW1-GigabitEthernet1/0/1]port trunk permit vlan 10 20
//放行vlan 10 20数据帧

4. 路由器配置路由直连

3.1 路由器配置子接口

路由器R1-g0/0口划分2个子接口：

[R1]int g0/0.1                
//进入子接口
                      
[R1-GigabitEthernet0/0.1]vlan-type dot1q vid 10
//开启802.1q协议，配置vid 10

[R1-GigabitEthernet0/0.1]ip address 192.1.254 24
//配置出口网关

[R1]int g0/0.2

[R1-GigabitEthernet0/0.2]vlan-type dot1q  vid 20

[R1-GigabitEthernet0/0.2]ip address 192.168.2.254 24

3.2 路由表验证

R1-GigabitEthernet0/0.2]display ip routing-table 

Destinations : 16	Routes : 16

Destination/Mask   Proto   Pre Cost        NextHop         Interface
0.0.0.0/32         Direct  0   0           127.0.0.1       InLoop0
127.0.0.0/8        Direct  0   0           127.0.0.1       InLoop0
127.0.0.1/32       Direct  0   0           127.0.0.1       InLoop0
127.255.255.255/32 Direct  0   0           127.0.0.1       InLoop0
192.168.1.0/24     Direct  0   0           192.168.1.254   GE0/0.1  //生成路由表

192.168.1.254/32   Direct  0   0           127.0.0.1       InLoop0
192.168.1.255/32   Direct  0   0           192.168.1.254   GE0/0.1

192.168.2.0/24     Direct  0   0           192.168.2.254   GE0/0.2   //路由表生成
192.168.2.254/32   Direct  0   0           127.0.0.1       InLoop0
192.168.2.255/32   Direct  0   0           192.168.2.254   GE0/0.2
192.168.56.0/24    Direct  0   0           192.168.56.2    GE0/1
192.168.56.2/32    Direct  0   0           127.0.0.1       InLoop0
192.168.56.255/32  Direct  0   0           192.168.56.2    GE0/1
224.0.0.0/4        Direct  0   0           0.0.0.0         NULL0
224.0.0.0/24       Direct  0   0           0.0.0.0         NULL0
255.255.255.255/32 Direct  0   0           127.0.0.1       InLoop0

5. 验证

vlan之间报文是否实现跨越

[H3C]ping 192.168.2.1
Ping 192.168.2.1 (192.168.2.1): 56 data bytes, press CTRL_C to break
56 bytes from 192.168.2.1: icmp_seq=0 ttl=254 time=2.000 ms
56 bytes from 192.168.2.1: icmp_seq=1 ttl=254 time=2.000 ms
56 bytes from 192.168.2.1: icmp_seq=2 ttl=254 time=3.000 ms
56 bytes from 192.168.2.1: icmp_seq=3 ttl=254 time=2.000 ms
56 bytes from 192.168.2.1: icmp_seq=4 ttl=254 time=2.000 ms

--- Ping statistics for 192.168.2.1 ---
5 packet(s) transmitted, 5 packet(s) received, 0.0% packet loss
round-trip min/avg/max/std-dev = 2.000/2.200/3.000/0.400 ms
[H3C]%Nov 12 00:48:29:902 2023 H3C PING/6/PING_STATISTICS: Ping statistics for 192.168.2.1: 5 packet(s) transmitted, 5 packet(s) received, 0.0% packet loss, round-trip min/avg/max/std-dev = 2.000/2.200/3.000/0.400 ms.