路由器VLAN间路由

泰克路由交换精英培训之VLAN间路由前言

部署了VLAN的传统交换机不能实现不同VLAN间的二层报文转发，因此必须引入路由技术来实现不同VLAN间的通信。VLAN路由可以通过二层交换机配合路由器来实现，也可以通过三层交换机来实现。学习目标

学完本课程后，您应该能：掌握VLAN路由的应用场景掌握VLAN路由的工作原理掌握VLAN路由的基本配置VLAN的局限性VLAN100SWAVLAN200VLAN在分割广播域的同时也限制了不同VLAN间的主机进行二层通信的能力。VLAN路由-每个VLAN一个物理连接SWARTA主机A主机BVLAN2VLAN3在二层交换机上配置VLAN，每一个VLAN使用一条独占的物理链路连接到路由器的一个接口上。VLAN路由-单臂路由主机ASWA主机BTrunkG0/0/1.1G0/0/1.2VLAN2VLAN3GW:192.168.2.254GW:192.168.3.254RTA将交换机和路由器之间的链路配置为Trunk链路，并且在路由器上创建子接口以支持VLAN路由。192.168.2.254192.168.3.254RTAVLAN路由-三层交换主机A主机D主机B主机CVLAN2VLAN3GW:192.168.2.254GW:192.168.3.254GW:192.168.2.254GW:192.168.3.254为每个VLAN创建一个VLANIF接口作为网关。VLANIF2:192.168.2.254/24VLANIF3:192.168.3.254/24SWA配置单臂路由主机ASWARTA主机BG0/0/1VLAN2VLAN3[SWA]vlanbatch23[SWA-GigabitEthernet0/0/1]portlink-typetrunk[SWA-GigabitEthernet0/0/1]porttrunkallow-passvlan23[SWA-GigabitEthernet0/0/2]portlink-typeaccess[SWA-GigabitEthernet0/0/2]portdefaultvlan2[SWA-GigabitEthernet0/0/3]portlink-typeaccess[SWA-GigabitEthernet0/0/3]portdefaultvlan3192.168.3.1/24192.168.2.1/24G0/0/2G0/0/3G0/0/1配置单臂路由G0/0/1.1G0/0/1.2[RTA]interfaceGigabitEthernet0/0/1.1[RTA-GigabitEthernet0/0/1.1]dot1qterminationvid2[RTA-GigabitEthernet0/0/1.1]ipaddress192.168.2.25424[RTA-GigabitEthernet0/0/1.1]arpbroadcastenable[RTA]interfaceGigabitEthernet0/0/1.2[RTA-GigabitEthernet0/0/1.2]dot1qterminationvid3[RTA-GigabitEthernet0/0/1.2]ipaddress192.168.3.25424[RTA-GigabitEthernet0/0/1.2]arpbroadcastenable192.168.2.254/24192.168.3.254/24主机ASWARTA主机BG0/0/1VLAN2VLAN3192.168.3.1/24192.168.2.1/24G0/0/2G0/0/3配置验证HostA>ping192.168.3.1Ping192.168.3.1:32databytes,PressCtrl_CtobreakFrom192.168.3.1:bytes=32seq=1ttl=127time=15msFrom192.168.3.1:bytes=32seq=2ttl=127time=15msFrom192.168.3.1:bytes=32seq=3ttl=127time=32msFrom192.168.3.1:bytes=32seq=4ttl=127time=16msFrom192.168.3.1:bytes=32seq=5ttl=127time=31ms---192.168.3.1pingstatistics---

5packet(s)transmitted

5packet(s)received

0.00%packetloss

round-tripmin/avg/max=15/21/32ms配置三层交换主机ASWA主机BVLAN2VLAN3192.168.2.2/24192.168.3.2/24G0/0/1G0/0/2[SWA]vlanbatch23[SWA-GigabitEthernet0/0/1]portlink-typeaccess[SWA-GigabitEthernet0/0/1]portdefaultvlan2[SWA-GigabitEthernet0/0/2]portlink-typeaccess[SWA-GigabitEthernet0/0/2]portdefaultvlan3VLANIF2:192.168.2.254/24VLANIF3:192.168.3.254/24配置三层交换主机ASWA主机BVLAN2VLAN3192.168.2.2/24192.168.3.2/24G0/0/1G0/0/2[SWA]interfacevlanif2[SWA-Vlanif2]ipaddress192.168.2.25424[SWA-Vlanif2]quit[SWA]interfacevlanif3[SWA-Vlanif3]ipaddress192.168.3.25424[SWA-Vlanif3]quitVLANIF2:192.168.2.254/24VLANIF3:192.168.3.254/24配置验证HostA>ping192.168.3.2Ping192.168.3.2:32databytes,PressCtrl_CtobreakFrom192.168.3.2:bytes=32seq=1ttl=127time=15msFrom192.168.3.2:bytes=32seq=2ttl=127time=15msFrom192.168.3.2:bytes=32seq=3ttl=127time=32msFrom192.168.3.2:bytes=32seq=4ttl=127time=16msFrom192.168.3.2:bytes=32seq=5ttl=1