单臂路由下的VLAN划分
单臂路由是指在路由器的一个接口上通过配置子接口的方式,子接口不是真正物理接口,实现原来相互隔离的不同VLAN之间的互联互通。
实验设备环境:华为设备、ENSP
实验拓扑:
详细配置
AR1
配置两个子接口1.10 1.20,IP地址分别为192.168.10.254/24、192.168.20.254/24分别对应VLAN10 20,为两个端口标识终结子接口,终结类型为dot1q,
<Huawei>system-view
Enter system view, return user view with Ctrl+Z.
[Huawei]int g 0/0/1.10
[Huawei-GigabitEthernet0/0/1.20]ip address 192.168.10.254 24
[Huawei-GigabitEthernet0/0/1.10]dot1q termination vid 10
//标识终结子接口,处理VLAN ID为10 的报文,即来自VLAN10 的报文
[Huawei-GigabitEthernet0/0/1.10]arp broadcast enable
//接口可以处理广播报文
[Huawei-GigabitEthernet0/0/1.10]q
[Huawei]int g 0/0/1.20
[Huawei-GigabitEthernet0/0/1.20]ip address 192.168.20.254 24
[Huawei-GigabitEthernet0/0/1.20]dot1q termination vid 20
[Huawei-GigabitEthernet0/0/1.20]arp broadcast enable
[Huawei-GigabitEthernet0/0/1.20]q
LSW1
配置端口模式:G0/0/1 为trunk模式,trunk模式可以传输多个VLAN的报文,E0/0/11、E0/0/22均为access模式,将E0/0/11划分到VLAN10 ,E0/0/22划分到VLAN20。
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]undo info enable
Info: Information center is disabled.
[Huawei]vlan batch 10 20
Info: This operation may take a few seconds. Please wait for a moment...done.
[Huawei]int g 0/0/1
[Huawei-GigabitEthernet0/0/1]port link-type trunk
[Huawei-GigabitEthernet0/0/1]port trunk allow-pass vlan 10 20
[Huawei-GigabitEthernet0/0/1]q
[Huawei]int e0/0/11
[Huawei-Ethernet0/0/11]port link-type access
[Huawei-Ethernet0/0/11]port default vlan 10
[Huawei-Ethernet0/0/11]q
[Huawei]int e0/0/22
[Huawei-Ethernet0/0/22]port link-type access
[Huawei-Ethernet0/0/22]port default vlan 20
[Huawei-Ethernet0/0/22]q
配置完成之后,PC1与PC2可以相互ping通。