實驗要求：
1、 掌握匯聚層終結vlan
2、 掌握三層交換機怎樣配置IP
3、 掌握三層交換機虛擬接口怎樣配IP
實驗拓撲：
實驗步驟：
1、 劃分vlan
---------------------二層交換機-----------------SW2----------------
[SW2]vlan 10
[SW2-vlan10]vlan 20
[SW2-vlan20]int e0/0/1
[SW2-Ethernet0/0/1]port link-type access
[SW2-Ethernet0/0/1]port default vlan 10
[SW2-Ethernet0/0/1]int e0/0/2
[SW2-Ethernet0/0/2]port link-type access
[SW2-Ethernet0/0/2] port default vlan 20
-----------------------SW4-----------------------
[SW4]vlan 10
[SW4-vlan10]vlan 20
[SW4-vlan20]int e0/0/1
[SW4-Ethernet0/0/1]port link-type access
[SW4-Ethernet0/0/1]port default vlan 10
[SW4-Ethernet0/0/1]int e0/0/2
[SW4-Ethernet0/0/2]port link-type access
[SW4-Ethernet0/0/2]port default vlan 20
-------------------------------------三層交換機-----------SW1--------------------------
[SW1]vlan 10
[SW1-vlan10]vlan 20
2、 開中繼口
----------------二層交換機--------SW2--------------
[Huawei-Ethernet0/0/2]int g0/0/1
[Huawei-GigabitEthernet0/0/1]port link-type trunk
[Huawei-GigabitEthernet0/0/1]port trunk allow-pass vlan 10 20
-------------------SW4---------------------------
[Huawei-Ethernet0/0/2]int g0/0/2
[Huawei-GigabitEthernet0/0/2]port link-type trun
[Huawei-GigabitEthernet0/0/2]port trunk allow-pass
vlan 10 20
---------------三層交換機--------SW1---------------
[Huawei-vlan20]int g0/0/1
[Huawei-GigabitEthernet0/0/1]port link-type trunk
[Huawei-GigabitEthernet0/0/1]port trunk allow-pass vlan 10 20
[Huawei-GigabitEthernet0/0/1]int g0/0/2
[Huawei-GigabitEthernet0/0/2]port link-type trunk
[Huawei-GigabitEthernet0/0/2]port trunk allow-pass vlan 10 20
用查看命令查看當前配置display ip interface brief
3、DHCP、vlan間路由
[SW1]dhcp enable
[SW1]int vlan 10
[SW1-Vlanif10]ip add 192.168.10.1 24
[SW1-Vlanif10]dhcp select interface
[SW1-Vlanif10]dhcp server dns-list 8.8.8.8
[SW1]int vlan 20
[SW1-Vlanif20] ip add 192.168.20.1 24
[SW1-Vlanif20]dhcp select interface
[SW1-Vlanif20]dhcp server dns-list 9.9.9.9
4、dhcp獲得地址
PC1用ping命令檢測
5、華爲三層交換機沒有三層接口，爲了使三層交換機與上行口路由互通，必須在交換機上加一個他們同屬的vlan
[SW1]vlan 100
[SW1-Vlanif100]int g0/0/24
[SW1-GigabitEthernet0/0/24]port link-type access
[SW1-GigabitEthernet0/0/24]port default vlan 100
[SW1]int vlan 100
[SW1-Vlanif100]ip add 192.168.1.1 24
[SW1-Vlanif100]undo shut
Display ip interface brief
6、路由配置IP地址
---------------------------------------------AR1---------------------------------------------
[AR1]int g0/0/0
[AR1-GigabitEthernet0/0/0]ip add 192.168.1.2 24
[AR1-GigabitEthernet0/0/0]undo shut
[AR1-GigabitEthernet0/0/0]int g0/0/1
[AR1-GigabitEthernet0/0/1]ip add 202.106.1.1 30
[AR1-GigabitEthernet0/0/1]undo shut
--------------------AR2--------------------------
[AR2]int g0/0/1
[AR2-GigabitEthernet0/0/1]ip add 202.106.1.2 30
[AR2-GigabitEthernet0/0/1]undo shut
7、爲了實現業務網段上網，必須在出口路由器上做PAT
[AR1]acl 2000
[AR1-acl-basic-2000]rule 5 permit source 192.168.10.0 0.0.0.255
[AR1-acl-basic-2000]rule 10 permit source 192.168.20.0 0.0.0.255
[AR1-acl-basic-2000]int g0/0/1
[AR1-GigabitEthernet0/0/1]nat outbound 2000
8、由於AR1不知道向192.168.10.0、192.168.20.0網段怎麼回包，所以在此處向下加靜態
[AR1]ip route-static 192.168.10.0 255.255.255.0 192.168.1.1
[AR1]ip route-static 192.168.20.0 255.255.255.0 192.168.1.1
9、由於SW1對外上網不知道怎麼傳輸數據，所以在此處加默認路由
[SW1]ip route-static 0.0.0.0 0.0.0.0 192.168.1.2
用ping命令檢測全網是否互通
End