S5560-54S-EI vlanif问题

 

现在需要使用ipv6 与路由器互联，不能影响原ipv4，核心这边需要怎么做

进vlanif100配置一个ipv6的地址吗？

不知道vlanif能不能配置多个IP哦

 

 

S5560-54S-EI 两台堆叠作为核心交换机，核心这么与路由器互联的：

 

1、创建vlan100：

vlan 100

 description TO_RT

 

2、配置管理vlan的vlanif

 

interface vlan-interface100

 ip address 192.168.100.2 255.255.255.0

 

3、创建链路聚合组

interface Bridge-Aggregation999

 port access vlan 100

 link-aggregation mode dynamic

 

1、两个47端口加入vlan100、加入链路聚合组20

interface GigabitEthernet1/0/47

 port link-mode bridge

 port access vlan 100

 port link-aggregation group 20        

 

interface GigabitEthernet2/0/47

 port link-mode bridge

 port access vlan 100

 port link-aggregation group 20

 

路由表：

Destination/Mask   Proto   Pre Cost        NextHop         Interface

0.0.0.0/0          Static  60  0           192.168.100.1   Vlan100

... ... 

 

现在需要使用ipv6 与路由器互联，不能影响原ipv4，核心这边需要怎么做呢？进vlanif100配置一个ipv6的地址吗？不知道vlanif能不能配置多个IP哦

 

核心交换机上已存在的ipv6地址池：

 

 

 ipv6 dhcp pool 1

 network fc00:1003:1005::/64

 dns-server 

 gateway-list  fc00:1003:1005::1

 

 interface Vlan-interface25

 ipv6 dhcp select server

 ipv6 address fc00:1003:1005::1/64

 ipv6 nd autoconfig managed-address-flag

 ipv6 nd autoconfig other-flag

 undo ipv6 nd ra halt

 

有一台胖ap，接在了核心的vlan24，ap的配置是：

[WA4620i-ACN]display current-configuration  

#

 version 5.20, Release 1508P03

#

 sysname WA4620i-ACN

#

 domain default enable system

#

 ipv6

#

 telnet server enable

#

 undo wlan-client-isolation enable

#

 port-security enable

#

 password-recovery enable

#

 undo attack-defense tcp fragment enable

#

vlan 1

#

vlan 24

#

domain system   

 access-limit disable

 state active

 idle-cut disable

 self-service-url disable

#

dhcp server ip-pool ipv6pool

#

user-group system

 group-attribute allow-guest

#

local-user admin

 password cipher $c$3$T/chYu8DJsOyL/UmqAmYUwYBLBZR7dkqduuS2vI=

 authorization-attribute level 3

 service-type telnet

 service-type web

#

wlan rrm

 dot11a mandatory-rate 6 12 24

 dot11a supported-rate 9 18 36 48 54

 dot11b mandatory-sate 1 2

 dot11b supported-rate 5.5 11

 dot11g mandatory-rate 1 2 5.5 11

 dot11g supported-rate 6 9 12 18 24 36 48 54

#               

wlan service-template 1 clear

 ssid service1

#

wlan service-template 2 crypto

 ssid h3c-ipv6

 cipher-suite tkip

 cipher-suite ccmp

 security-ie rsn

 security-ie wpa

 gtk-rekey client-offline enable

 fast-association enable

 service-template enable

#

interface NULL0

#

interface Vlan-interface1

 ip address 192.168.0.50 255.255.255.0

#

interface Vlan-interface24

 undo ipv6 nd ra halt

 ipv6 address dhcp-alloc

#

interface GigabitEthernet1/0/1

 port link-type trunk

 port trunk permit vlan all

#

interface GigabitEthernet1/0/2

 description ith

 port link-type trunk

 port trunk permit vlan all

#

interface WLAN-BSS1

 port access vlan 24

#

interface WLAN-BSS32

 port link-type hybrid

 port hybrid vlan 1 untagged

 port hybrid pvid vlan 24

 qos trust dot11e

#

interface WLAN-BSS33

 port link-type hybrid

 port hybrid vlan 1 untagged

 port hybrid pvid vlan 24

 qos trust dot11e

#               

interface WLAN-BSS34

 port link-type hybrid

 port hybrid vlan 1 24 untagged

 port hybrid pvid vlan 24

 port-security port-mode psk

 port-security tx-key-type 11key

 port-security preshared-key pass-phrase cipher $c$3$U9akTY5hNJaFoniK8X+VWsmnSYdq5NpG1RshgA==

#

interface WLAN-BSS35

 port link-type hybrid

 port hybrid vlan 1 24 untagged

 port hybrid pvid vlan 24

 port-security port-mode psk

 port-security tx-key-type 11key

 port-security preshared-key pass-phrase cipher $c$3$U9akTY5hNJaFoniK8X+VWsmnSYdq5NpG1RshgA==

#

interface WLAN-Radio1/0/1

 service-template 2 interface wlan-bss 34

#

interface WLAN-Radio1/0/2

 radio-type dot11g

 channel 6

 service-template 1 interface wlan-bss 33

 service-template 2 interface wlan-bss 35

#

 undo info-center enable

#

 dhcp enable

#

 arp-snooping enable

#

 load xml-configuration

#

user-interface con 0

user-interface vty 0 4

 authentication-mode scheme

#

return

[WA4620i-ACN] 

[WA4620i-ACN]

[WA4620i-ACN]sa fo

[WA4620i-ACN]sa force .......

 Configuration is saved to device successfully.

[WA4620i-ACN]dis cu

[WA4620i-ACN]dis current-configuration 

#

 version 5.20, Release 1508P03

#

 sysname WA4620i-ACN

#

 domain default enable system

#

 ipv6

#

 telnet server enable

#

 undo wlan-client-isolation enable

#

 port-security enable

#

 password-recovery enable

#

 undo attack-defense tcp fragment enable

#

vlan 1

#

vlan 24

#

domain system   

 access-limit disable

 state active

 idle-cut disable

 self-service-url disable

#

dhcp server ip-pool ipv6pool

#

user-group system

 group-attribute allow-guest

#

local-user admin

 password cipher $c$3$T/chYu8DJsOyL/UmqAmYUwYBLBZR7dkqduuS2vI=

 authorization-attribute level 3

 service-type telnet

 service-type web

#

wlan rrm

 dot11a mandatory-rate 6 12 24

 dot11a supported-rate 9 18 36 48 54

 dot11b mandatory-rate 1 2

 dot11b supported-rate 5.5 11

 dot11g mandatory-rate 1 2 5.5 11

 dot11g supported-rate 6 9 12 18 24 36 48 54

#

wlan service-template 1 clear

 ssid service1

#

wlan service-template 2 crypto

 ssid h3c-ipv6

 cipher-suite tkip

 cipher-suite ccmp

 security-ie rsn

 security-ie wpa

 gtk-rekey client-offline enable

 fast-association enable

 service-template enable

#

interface NULL0

#

interface Vlan-interface1

 ip address 192.168.0.50 255.255.255.0

#

interface Vlan-interface24

 undo ipv6 nd ra halt

 ipv6 address dhcp-alloc

#               

interface GigabitEthernet1/0/1

 port link-type trunk

 port trunk permit vlan all

#

interface GigabitEthernet1/0/2

 description ith

 port link-type trunk

 port trunk permit vlan all

#

interface WLAN-BSS1

 port access vlan 24

#

interface WLAN-BSS32

 port link-type hybrid

 port hybrid vlan 1 untagged

 port hybrid pvid vlan 24

 qos trust dot11e

#

interface WLAN-BSS33

 port link-type hybrid

 port hybrid vlan 1 untagged

 port hybrid pvid vlan 24

 qos trust dot11e

#

interface WLAN-BSS34

 port link-type hybrid

 port hybrid vlan 1 24 untagged

 port hybrid pvid vlan 24

 port-security port-mode psk

 port-security tx-key-type 11key

 port-security preshared-key pass-phrase cipher 

#

interface WLAN-BSS35

 port link-type hybrid

 port hybrid vlan 1 24 untagged

 port hybrid pvid vlqn 24

 port-security port-moee psk

 port-security tx-key-type 11key

 port-security preshared-key pass-phrase cipher 

#

interface WLAN-Radio1/0/1

 service-template 2 interface wlan-bss 34

#

interface WLAN-Radio1/0/2

 radio-type dot11g

 channel 6      

 service-template 1 interface wlan-bss 33

 service-template 2 interface wlan-bss 35

#

 undo info-center enable

#

 dhcp enable

#

 arp-snooping enable

#

 load xml-configuration

#

user-interface con 0

user-interface vty 0 4

 authentication-mode scheme

#

return

[WA4620i-ACN]                                     qu

[WA4620i-ACN]quit 

 

 

胖ap就是做二层使用的，手机与胖ap可以得到来自核心的地址