VLAN配置

网关不在一起，不同网段之间互通，需要写路由，最下层写缺省向上指，网关层向下写明细向下回

配置trunk透传VLAN,这个已经配置了，如果把这两条接到1-8的网络接拨掉，那是可以telnet的，但只要接上这两条网络线（一条是其它三层配置的VLAN出来的网线，一条是设置成这个VLAN下IP的PC），就不再可达，我的需要也不需要他们两个网段之间互达，只要１-８口当成普通的小交换机，８-２３加入某一个VLAN，２４口透传VLAN，可以管理到就行。

[s4320-JK]dis cu [s4320-JK]dis current-configuration # version 7.1.045, Release 3116 # sysname s4320-JK # telnet server enable # irf mac-address persistent timer irf auto-update enable undo irf link-delay irf member 1 priority 1 # lldp global enable # password-recovery enable # vlan 1 # vlan 20 # vlan 100 # stp global enable # interface NULL0 # interface Vlan-interface20 ip address 192.168.2.1 255.255.255.0 # interface GigabitEthernet1/0/1 # interface GigabitEthernet1/0/2 # interface GigabitEthernet1/0/3 # interface GigabitEthernet1/0/4 # interface GigabitEthernet1/0/5 # interface GigabitEthernet1/0/6 # interface GigabitEthernet1/0/7 # interface GigabitEthernet1/0/8 # interface GigabitEthernet1/0/9 port access vlan 20 # interface GigabitEthernet1/0/10 port access vlan 20 # interface GigabitEthernet1/0/11 port access vlan 20 # interface GigabitEthernet1/0/12 port access vlan 20 # interface GigabitEthernet1/0/13 port access vlan 20 # interface GigabitEthernet1/0/14 port access vlan 20 # interface GigabitEthernet1/0/15 port access vlan 20 # interface GigabitEthernet1/0/16 port access vlan 20 # interface GigabitEthernet1/0/17 port access vlan 20 # interface GigabitEthernet1/0/18 port access vlan 20 # interface GigabitEthernet1/0/19 port access vlan 20 # interface GigabitEthernet1/0/20 port access vlan 20 # interface GigabitEthernet1/0/21 port access vlan 20 # interface GigabitEthernet1/0/22 port access vlan 20 # interface GigabitEthernet1/0/23 port access vlan 20 # interface GigabitEthernet1/0/24 port link-type trunk port trunk permit vlan all # interface GigabitEthernet1/0/25 # interface GigabitEthernet1/0/26 # interface GigabitEthernet1/0/27 # interface GigabitEthernet1/0/28 # scheduler logfile size 16 # line class aux user-role network-admin # line class vty user-role network-operator # line aux 0 user-role network-admin # line vty 0 4 authentication-mode scheme user-role network-admin user-role network-operator # line vty 5 63 user-role network-operator # ip route-static 0.0.0.0 0 192.168.1.1 # radius scheme system user-name-format without-domain # domain system # domain default enable system # role name level-0 description Predefined level-0 role # role name level-1 description Predefined level-1 role # role name level-2 description Predefined level-2 role # role name level-3 description Predefined level-3 role # role name level-4 description Predefined level-4 role # role name level-5 description Predefined level-5 role # role name level-6 description Predefined level-6 role # role name level-7 description Predefined level-7 role # role name level-8 description Predefined level-8 role # role name level-9 description Predefined level-9 role # role name level-10 description Predefined level-10 role # role name level-11 description Predefined level-11 role # role name level-12 description Predefined level-12 role # role name level-13 description Predefined level-13 role # role name level-14 description Predefined level-14 role # user-group system # local-user admin class manage password hash $h$6$SRes4ibcQ+TIKpjH$6Am5/5g+Ua2SkjRSbbUIinWXMoAWgj2yDj0/05LlbbdxpmF3BVpIZ7O0RRSAMrfn0yzpIPPcNVjxGYAaf4yGtw== service-type telnet terminal authorization-attribute user-role network-admin authorization-attribute user-role network-operator # return