二层交换机与路由器对接上网

二层交换机与路由器对接上网1、应用场景如图所示，交换机Switch和路由器对接，使用户PC1和PC2可以实现上网功能。交换机是二层交换机，仅能实现二层转发。2、配置思路交换机基于接口划分VLAN，实现二层转发。路由器的配置有两种情况(这里使用的是AR路由器)：一种是路由器的接口是二层口，通过配置VLANIF接口，实现和交换机的通信。一种是路由器的接口是三层口，通过配置子接口终结VLAN功能，实现和交换机的通信。二层交换机与路由器对接上网交换机的配置步骤（共2步）第一步：配置下行连接用户的接口。<Switch>system-view[Switch]vlanbatch23[Switch]interfacegigabitethernet0/0/2[Switch-GigabitEthernet0/0/2]portlink-typeaccess[Switch-GigabitEthernet0/0/2]portdefaultvlan2[Switch-GigabitEthernet0/0/2]quit[Switch]interfacegigabitethernet0/0/3[Switch-GigabitEthernet0/0/3]portlink-typeaccess[Switch-GigabitEthernet0/0/3]portdefaultvlan3[Switch-GigabitEthernet0/0/3]quit第二步：配置上行连接路由器的接口。[Switch]interfacegigabitethernet0/0/1[Switch-GigabitEthernet0/0/1]portlink-typetrunk[Switch-GigabitEthernet0/0/1]porttrunkallow-passvlan23[Switch-GigabitEthernet0/0/1]quit二层交换机与路由器对接上网路由器的接口作为三层口，通过配置子接口终结VLAN进行通信的配置步骤（共4步）第一步：配置终结子接口。<Router>system-view[Router]vlanbatch23[Router]interfacegigabitethernet0/0/1.1[Router-GigabitEthernet0/0/1.1]dot1qterminationvid2

[Router-GigabitEthernet0/0/1.1]ipaddress192.168.1.124[Router-GigabitEthernet0/0/1.1]arpbroadcastenable[Router-GigabitEthernet0/0/1.1]quit[Router]interfacegigabitethernet0/0/1.2[Router-GigabitEthernet0/0/1.2]dot1qterminationvid3

[Router-GigabitEthernet0/0/1.2]ipaddress192.168.2.124[Router-GigabitEthernet0/0/1.2]arpbroadcastenable[Router-GigabitEthernet0/0/1.2]quit二层交换机与路由器对接上网路由器的接口作为三层口，通过配置子接口终结VLAN进行通信的配置步骤（共4步）第二步：配置DHCP和DNS功能，为内网用户分配IP地址和指定DNS服务器地址。[Router]dhcpenable[Router]interfacegigabitethernet0/0/1.1[Router-GigabitEthernet0/0/1.1]dhcpselectinterface[Router-GigabitEthernet0/0/1.1]dhcpserverdns-list114.114.114.114223.5.5.5[Router-GigabitEthernet0/0/1.1]quit[Router]interfacegigabitethernet0/0/1.2

[Router-GigabitEthernet0/0/1.2]dhcpselectinterface[Router-GigabitEthernet0/0/1.2]dhcpserverdns-list114.114.114.114223.5.5.5[Router-GigabitEthernet0/0/1.2]quit二层交换机与路由器对接上网路由器的接口作为三层口，通过配置子接口终结VLAN进行通信的配置步骤（共4步）第三步：配置公网接口的IP地址和静态路由。[Router]interfacegigabitethernet0/0/2

[Router-GigabitEthernet0/0/2]ipaddress200.0.0.2255.255.255.0[Router-GigabitEthernet0/0/2]quit[Router]iproute-static0.0.0.00.0.0.0200.0.0.1第四步：配置NAT功能，使内网用户可以访问外网。[Router]aclnumber2001[Router-acl-basic-2001]rule5permitsource192.168.0.00.0.255.255[Router-acl-basic-2001]quit[Router]interfacegigabitethernet0/0/2

[Router-GigabitEthernet0/0/2]natoutbound2001[Router-GigabitEthernet0/0/2]quit二层交换机与路由器对接上网路由器的接口作为二层口，通过VLANIF进行通信的配置步骤（共4步）第一步：配置VLANIF接口。<Router>system-view[Router]vlanbatch23[Router]interfacegigabitethernet0/0/1

[Router]portswitch

[Router-GigabitEthernet0/0/1]portlink-typetrunk[Router-GigabitEthernet0/0/1]porttrunkallow-passvlan23[Router-GigabitEthernet0/0/1]quit[Router]interfacevlanif2[Router-Vlanif2]ipaddress192.168.1.124[Router-Vlanif2]quit[Router]interfaceVlanif3[Router-Vlanif3]ipaddress192.168.2.124[Router-Vlanif3]quit二层交换机与路由器对接上网路由器的接口作为二层口，通过VLANIF进行通信的配置步骤（共4步）第二步：配置DHCP和DNS功能，为内网用户分配IP地址和指定DNS服务器地址。[Router]dhcpenable[Router]interfacevlanif2

[Router-Vlanif2]dhcpselectinterface[Router-Vlanif2]dhcpserverdns-list114.114.114.114223.5.5.5[Router-Vlanif2]quit[Router]interfacevlanif3

[Router-Vlanif3]dhcpselectinterface[Router-Vlanif3]dhcpserverdns-list114.114.114.114223.5.5.5[Router-Vlanif3]quit二层交换机与路由器对接上网路由器的接口作为二层口，通过VLANIF进行通信的配置步骤（共4步）第三步：配置公网接口的IP地址和静态路由。[Router]interfacegigabitethernet0/0/2

[Router-GigabitEthernet0/0/2]ipaddress200.0.0.2255.255.255.0[Router-GigabitEthernet0/0/2]quit[Router]iproute-static0.0.0.00.0.0.0200.0.0.1第四步：配置NAT功能，使内网用户可以访问外网。[Router]aclnumber2001[Router-acl-basic-2001]rule5permits