单臂路由,又称为Router-on-a-Stick,是一种利用一个物理接口通过配置子接口和VLAN技术来实现在多个VLAN间路由的技术。它使用IEEE 802.1Q标准对帧进行封装,允许VLAN之间的通信,并且不必为每个VLAN配置一个物理接口。
原理是:单臂路由器只有一个物理接口与交换机相连。在这个物理接口上创建多个子接口,每个子接口负责一个VLAN的数据进出。交换机端口被划分为不同的VLAN,且与路由器相连的交换机端口被配置为Trunk模式(允许多个VLAN的流量通过)。当来自某个VLAN的数据达到路由器时,数据会根据802.1Q标签被送达到对应的子接口,然后路由器根据路由表进行处理,可以选择转发到其他VLAN的子接口。
以下是一个典型的单臂路由拓扑示意图:
# 配置路由器
<Huawei-Router> system-view
[Huawei-Router] sysname Router
[Router] interface GigabitEthernet0/0/1
[Router-GigabitEthernet0/0/1] undo sh
[Router-GigabitEthernet0/0/1] quit
# 创建子接口并分配到不同的VLAN
# VLAN 10的子接口
[Router] interface GigabitEthernet0/0/1.10
[Router-GigabitEthernet0/0/1.10] port link-type dot1q-tunnel
[Router-GigabitEthernet0/0/1.10] port default vlan 10
[Router-GigabitEthernet0/0/1.10] ip address 192.168.10.1 255.255.255.0
[Router-GigabitEthernet0/0/1.10] quit
# VLAN 20的子接口
[Router] interface GigabitEthernet0/0/1.20
[Router-GigabitEthernet0/0/1.20] port link-type dot1q-tunnel
[Router-GigabitEthernet0/0/1.20] port default vlan 20
[Router-GigabitEthernet0/0/1.20] ip address 192.168.20.1 255.255.255.0
[Router-GigabitEthernet0/0/1.20] quit
# 配置交换机
<Huawei-Switch> system-view
[Switch] sysname Switch
# 创建VLAN并分配端口
[Switch] vlan batch 10 20
[Switch] interface GigabitEthernet0/0/1
[Switch-GigabitEthernet0/0/1] port link-type trunk
[Switch-GigabitEthernet0/0/1] port trunk allow-pass vlan 10 20
[Switch-GigabitEthernet0/0/1] quit
# 配置PC1端口为VLAN 10的访问端口
[Switch] interface GigabitEthernet0/0/2
[Switch-GigabitEthernet0/0/2] undo portswitch
[Switch-GigabitEthernet0/0/2] port link-type access
[Switch-GigabitEthernet0/0/2] port default vlan 10
[Switch-GigabitEthernet0/0/2] quit
# 配置PC2端口为VLAN 20的访问端口
[Switch] interface GigabitEthernet0/0/3
[Switch-GigabitEthernet0/0/3] undo portswitch
[Switch-GigabitEthernet0/0/3] port link-type access
[Switch-GigabitEthernet0/0/3] port default vlan 20
[Switch-GigabitEthernet0/0/3] quit
# 配置PC3端口为VLAN 20的访问端口 (假设它连接到端口4)
[Switch] interface GigabitEthernet0/0/4
[Switch-GigabitEthernet0/0/4] undo portswitch
[Switch-GigabitEthernet0/0/4] port link-type access
[Switch-GigabitEthernet0/0/4] port default vlan 20
[Switch-GigabitEthernet0/0/4] quit
# 退出交换机系统视图
[Switch] quit