单臂路由配置
拓扑图如下:
PC1:
PC2:
交换机配置:
[Huawei]vlan batch 10 20 #交换机创建两个主机各自的VLAN Info: This operation may take a few seconds. Please wait for a moment...done. [Huawei] [Huawei]int g0/0/1 [Huawei-GigabitEthernet0/0/1]port link-type access [Huawei-GigabitEthernet0/0/1]port default vlan 10 [Huawei-GigabitEthernet0/0/1]int g0/0/2 [Huawei-GigabitEthernet0/0/2]port link-type access [Huawei-GigabitEthernet0/0/2]port default vlan 20 [Huawei-GigabitEthernet0/0/2]q #配置交换机与路由器的接口类型为trunk,放行VLAN 10 和20 [Huawei]int g0/0/3 [Huawei-GigabitEthernet0/0/3]port link-type trunk [Huawei-GigabitEthernet0/0/3]port trunk allow-pass vlan 10 20 [Huawei-GigabitEthernet0/0/3]q [Huawei] User interface con0 is available
路由器配置:
[Huawei]int g0/0/0.1 [Huawei-GigabitEthernet0/0/0.1]ip add 192.168.1.254 24 #添加192.168.1.0网段的网关 #路由器不能处理带有VLAN标签的数据帧,此命令可以使进入此接口的数据帧摘掉VLAN10的标签,同时从此接口发出的数据帧也会打上VLAN10的标签 [Huawei-GigabitEthernet0/0/0.1]dot1q termination vid 10 [Huawei-GigabitEthernet0/0/0.1]q [Huawei]int g0/0/0.2 [Huawei-GigabitEthernet0/0/0.2]ip add 192.168.2.254 24 #添加192.168.2.0网段的网关 #此命令可以使进入此接口的数据帧摘掉VLAN20的标签,同时从此接口发出的数据帧也会打上VLAN20的标签 [Huawei-GigabitEthernet0/0/0.2]dot1q termination vid 20 [Huawei-GigabitEthernet0/0/0.2]q
经过以上配置,两台主机可以ping通路由器的网关,但不能互相ping通主机,还需以下配置:
开启ARP广播,如子接口未配置arp broadcast enable ,将导致路由器不能主动发送arp广播报文,即PC1 ping PC2时,PC1发送ARP报文至网关后,网关不能发送ARP报文至PC2,也就得不到PC2的MAC地址,也就ping不通。
[Huawei]int g0/0/0.1 [Huawei-GigabitEthernet0/0/0.1]arp broadcast enable [Huawei-GigabitEthernet0/0/0.1]q [Huawei]int g0/0/0.2 [Huawei-GigabitEthernet0/0/0.2]arp broadcast enable [Huawei-GigabitEthernet0/0/0.2]q [Huawei]