基于vlan接口的策略路由

多次交换机2

Switch>enable

Switch#config t

Switch(config)#ip routing

Switch(config)#int f0/23

Switch(config-if)#no switchport

Switch(config-if)#ip add 10.10.10.1 255.255.255.0

Switch(config-if)#no shut

Switch(config-if)#exit

Switch(config)#int f0/24

Switch(config-if)#no switchport

Switch(config-if)#ip add 10.10.20.1 255.255.255.0

Switch(config-if)#no shut

Switch#vla database

Switch(vlan)#vlan 10

VLAN 10 added:

Name: VLAN0010

Switch(vlan)#vlan 20

VLAN 20 added:

Name: VLAN0020

Switch(vlan)#exit

Switch(config)#int vlan 10

Switch(config-if)#ip add 200.200.200.1 255.255.255.0

Switch(config-if)#no shutdown

Switch(config-if)#exit

Switch(config)#int vlan 20

Switch(config-if)#ip add 176.16.10.1 255.255.255.0

Switch(config-if)#no shutdown

Switch(config-if)#exit

Switch(config)#int rang f0/1-2

Switch(config-if-range)#switchport trunk encapsulation dot1q

Switch(config-if-range)#switchport mode trunk

Switch(config-if-range)#no shut

Switch(config)#router ospf 100

Switch(config-router)#network 10.10.10.0 255.255.255.0 area 0

Switch(config-router)#network 10.10.20.0 255.255.255.0 area 0

Switch(config-router)#network 200.200.200.0 255.255.255.0 area 0

Switch(config-router)#network 176.16.10.0 255.255.255.0 area 0

Switch(config)#access-list 1 permit 200.200.200.0 0.0.0.255

Switch(config)#access-list 1 deny any

Switch(config)#access-list 2 permit 176.16.10.0 0.0.0.255

Switch(config)#access-list 2 deny any

Switch(config)#int f 0/23

Switch(config-if)#ip access-group 1 out

Switch(config-if)#exit

Switch(config)#int f 0/24

Switch(config-if)#ip access-group 2 out

Switch(config-if)#exit

路由器0

Router>en

Router#conf t

Router(config)#int f0/0

Router(config-if)#ip add 10.10.10.2 255.255.255.0

Router(config-if)#no shut

Router(config)#router ospf 100

Router(config-router)#network 10.10.10.0 255.255.255.0 area 0

路由器1

Router>en

Router#conf t

Router(config)#int f0/0

Router(config-if)#ip add 10.10.20.2 255.255.255.0

Router(config-if)#no shut

Router(config)#router ospf 100

Router(config-router)#network 10.10.20.0 255.255.255.0 area 0

交换机0/1

Switch>en

Switch#config t

Switch(config)#int f0/24

Switch(config-if)#switchport mode trunk

Switch(config-if)#no shutdown

Switch(config-if)#exit

Switch#vla database

Switch(vlan)#vlan 10

VLAN 10 added:

Name: VLAN0010

Switch(vlan)#vlan 20

VLAN 20 added:

Name: VLAN0020

Switch(vlan)#exit

Switch(config)#int f 0/10

Switch(config-if)#switchport mode access

Switch(config-if)#switchport access vlan 10

Switch(config-if)#no shutdown

Switch(config-if)#exit

Switch(config)#int f 0/20

Switch(config-if)#switchport mode access

Switch(config-if)#switchport access vlan 20

Switch(config-if)#no shutdown

验证:pc0(pc0 ip 200.200.200.2)

pc1(ip 176.16.10.2)