A-A+
用华为模拟器eNSP做的VLAN间路由的实验
实验原因:
听说华为的这个模拟器比思科的还要好,就在自己电脑上安装了一个。刚开始做实验测试总是ping不通,后来把自己电脑系统的防火墙关了,就可以了。先用单台S5700交换机做,配置了VLAN虚拟接口的管理IP和子网掩码,display ip route-table竟看不到路由表。用这个网络拓扑,就可以了。思科用switchport access vlan vlan-id来允许通过access接口的vlan,华为用port default vlan vlan-id。
网络拓扑图:
核心交换机S5700配置:
- <Huawei>sys
- Enter system view, return user view with Ctrl+Z.
- [Huawei]dis curr
- #
- sysname Huawei
- #
- super password level 3 cipher <N"6L[`HcQ'eKRQqbl+O=|W#
- #
- ip host s1 172.16.10.1
- #
- vlan batch 10 20
- #
- cluster enable
- ntdp enable
- ndp enable
- #
- drop illegal-mac alarm
- #
- diffserv domain default
- #
- drop-profile default
- #
- aaa
- authentication-scheme default
- authorization-scheme default
- accounting-scheme default
- domain default
- domain default_admin
- local-user admin password simple admin
- local-user admin service-type http
- #
- interface Vlanif1
- #
- interface Vlanif10
- ip address 172.16.10.1 255.255.255.0
- #
- interface Vlanif20
- ip address 172.16.20.1 255.255.255.0
- #
- interface MEth0/0/1
- #
- interface GigabitEthernet0/0/1
- port link-type trunk
- port trunk allow-pass vlan 2 to 4094
- #
- interface GigabitEthernet0/0/2
- port link-type access
- port default vlan 10
- #
- interface GigabitEthernet0/0/3
- port link-type access
- #
- interface GigabitEthernet0/0/4
- port link-type access
- #
- interface GigabitEthernet0/0/5
- #
- interface GigabitEthernet0/0/6
- #
- interface GigabitEthernet0/0/7
- #
- interface GigabitEthernet0/0/8
- #
- interface GigabitEthernet0/0/9
- #
- interface GigabitEthernet0/0/10
- #
- interface GigabitEthernet0/0/11
- #
- interface GigabitEthernet0/0/12
- #
- interface GigabitEthernet0/0/13
- #
- interface GigabitEthernet0/0/14
- #
- interface GigabitEthernet0/0/15
- #
- interface GigabitEthernet0/0/16
- #
- interface GigabitEthernet0/0/17
- #
- interface GigabitEthernet0/0/18
- #
- interface GigabitEthernet0/0/19
- #
- interface GigabitEthernet0/0/20
- #
- interface GigabitEthernet0/0/21
- #
- interface GigabitEthernet0/0/22
- #
- interface GigabitEthernet0/0/23
- #
- interface GigabitEthernet0/0/24
- #
- interface NULL0
- #
- user-interface con 0
- user-interface vty 0 4
- #
- port-group g0/0/1
- #
- return
接入层交换机S3700配置:
- The device is running!
- <Huawei>sys
- Enter system view, return user view with Ctrl+Z.
- [Huawei]dis curr
- #
- sysname Huawei
- #
- super password level 3 cipher cd]CS'n\=C9P4p;tsqP+.}N#
- #
- vlan batch 10 20
- #
- cluster enable
- ntdp enable
- ndp enable
- #
- drop illegal-mac alarm
- #
- diffserv domain default
- #
- drop-profile default
- #
- aaa
- authentication-scheme default
- authorization-scheme default
- accounting-scheme default
- domain default
- domain default_admin
- local-user admin password simple admin
- local-user admin service-type http
- #
- interface Vlanif1
- #
- interface MEth0/0/1
- #
- interface Ethernet0/0/1
- #
- interface Ethernet0/0/2
- port link-type access
- port default vlan 10
- #
- interface Ethernet0/0/3
- port link-type access
- port default vlan 20
- #
- interface Ethernet0/0/4
- #
- interface Ethernet0/0/5
- #
- interface Ethernet0/0/6
- #
- interface Ethernet0/0/7
- #
- interface Ethernet0/0/8
- #
- interface Ethernet0/0/9
- #
- interface Ethernet0/0/10
- #
- interface Ethernet0/0/11
- #
- interface Ethernet0/0/12
- #
- interface Ethernet0/0/13
- #
- interface Ethernet0/0/14
- #
- interface Ethernet0/0/15
- #
- interface Ethernet0/0/16
- #
- interface Ethernet0/0/17
- #
- interface Ethernet0/0/18
- #
- interface Ethernet0/0/19
- #
- interface Ethernet0/0/20
- #
- interface Ethernet0/0/21
- #
- interface Ethernet0/0/22
- #
- interface GigabitEthernet0/0/1
- port link-type trunk
- port trunk allow-pass vlan 2 to 4094
- #
- interface GigabitEthernet0/0/2
- #
- interface NULL0
- #
- user-interface con 0
- user-interface vty 0 4
- #
- port-group e0/0/2
- #
- port-group e0/0/3
- #
- return
网络互通性测试:
PC1 ping PC3,ping 网关,ping PC2截图(其它略)