1、组网要求如上图,路由器是MSR3610,交换机是S5000系列,求路由器交换机配置具体命令。
2、SW2是不是也作为二层交换机?
(0)
您好,请知:
1、根据您的概述,建议网关都放置在SW1上,以下是SW1配置要点:
vlan 10
quit
vlan 20
quit
vlan 30
quit
int vlan 10
ip address 192.168.2.1 24
quit
int vlan 20
ip address 192.168.3.1 24
quit
int vlan 30
ip address 192.168.4.1 24
quit
2、SW2、SW3、SW4、SW5可以作为二层交换机,同时与SW1使用trunk互联。
SW1配置如下:
int range gi 1/0/1 to gi 1/0/3
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 10 20 30
quit
SW2配置如下:
vlan 10
quit
vlan 30
quit
int gi 1/0/1 (与SW1互联)
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 10 30
quit
int gi 1/0/2 (与部门A互联)
port link-type access
port access vlan 10
quit
int gi 1/0/3(与SW5互联)
port link-type trunk
port trunk permit vlan 1
port trunk permit vlan 30
quit
SW5配置:
vlan 30
quit
int gi 1/0/1(与SW2互联)
port link-type trunk
port trunk permit vlan 1
port trunk permit vlan 30
quit
int gi 1/0/2 (与部门B互联)
port link-type access
port access vlan 30
quit
SW3:
vlan 20
quit
vlan 30
quit
int gi 1/0/1 (与SW1互联)
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 20 30
quit
int gi 1/0/2 (与部门C互联)
port link-type access
port access vlan 20
quit
int gi 1/0/3 (与部门B互联)
port link-type access
port access vlan 30
quit
SW4:
vlan 10
quit
int gi 1/0/1 (与SW1互联)
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 10
quit
int gi 1/0/2 (与部门A互联)
port link-type access
port access vlan 10
quit
3、建议SW1与路由器走三层路由转发,具体配置如下:
SW1:
int gi 1/0/24
port link-mode route
ip address 10.0.0.1 30
quit
ospf 1 router-id 10.0.0.1
area 0.0.0.0
network 10.0.0.1 0.0.0.0
network 192.168.2.0 0.0.0.255
network 192.168.3.0 0.0.0.255
network 192.168.4.0 0.0.0.255
quit
路由器:
int gi 0/0
ip address 10.0.0.2 30
quit
ospf 1 router-id 10.0.0.2
area 0.0.0.0
network 10.0.0.2 0.0.0.0
quit
4、要实现部门B不能访问外网,在路由器的出口做限制即可。
acl basic 2000
rule 0 deny source 192.168.3.0 0.0.0.255
rule 1 permit source any
quit
int gi 0/1
ip address 202.1.100.2 30
nat outbound 2000
quit
ip route-static 0.0.0.0 0.0.0.0 202.1.100.1
ospf 1
import-route static
import-route direct
quit
以上是配置过程,仅供参考,具体以实际的IP规划为准,请悉知!
(2)
请问为与SW1互联的交换机都不能允许默认的vlan1通过
网关都在sw1上吗
(1)
是的
是的
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
网关在SW1上