中小型企業(yè)網(wǎng)絡(luò)架構(gòu)搭建分支篇之底層互通vlan、三層交換機(jī)出口路由器配置

說明：這里有A、B2VLAN，A的流量通過，而接入用戶的接口則為Access，加入到對應(yīng)VLAN，連接AP的接口比較特殊，因?yàn)橛泄芾鞻LAN與業(yè)務(wù)VLAN存在，所以可以是Hybrid端口，或者是Trunk。AVLAN[Branch-sw-A]vlan[Branch-sw-A]vlan[Branch-sw-A]int[Branch-sw-A-Ethernet0/4/6]portlink-typetrunk[Branch-sw-A-Ethernet0/4/6]porttrunkpermitvlan2toTrunkVLANVLAN2VLAN[Branch-sw-A]int[Branch-sw-A-Ethernet0/4/2]descriptionconnectiontoAP[Branch-sw-A-Ethernet0/4/2]portlink-typehybrid[Branch-sw-A-Ethernet0/4/2]porthybrid vlan3taggedHybrid，VLAN3Tag，VLAN3VLANVLAN1理VLAN存在。默認(rèn)情況下VLAN1是不打Tag的。[Branch-sw-A]port-groupmanual[Branch-sw-A-port-group-manual-1]group-memberEthernet0/4/0toe0/4/1[Branch-sw-A-port-group-manual-1]group-memberEthernet0/4/3toe0/4/5[Branch-sw-A-port-group-manual-1]portaccessvlan2不跟一樣為Hybrid接口。[Branch-sw-B]vlan[Branch-sw-B-vlan4]name[Branch-sw-B-vlan4]vlan5[Branch-sw-B]intEthernet[Branch-sw-B-Ethernet0/4/7]portlink-typetrunk[Branch-sw-B-Ethernet0/4/7]porttrunkpermitvlan4to[Branch-sw-B]port-groupmanual[Branch-sw-B-port-group-manual-1]group-memberEthernet0/4/0toEthernet0/4/4[Branch-sw-B-port-group-manual-2]portaccessvlan4[Branch-sw-B]port-groupmanual[Branch-sw-B-port-group-manual-2]group-memberEthernet0/4/5toe0/4/6[Branch-sw-B-port-group-manual-2]portaccessvlan5[Core-sw]vlan2to[Core-sw]int[Core-sw-Ethernet0/4/6]porttrunkpermitvlan2to[Core-sw]interface[Core-sw-Ethernet0/4/7]porttrunkpermitvlan4toIPDHCP5VLANAPDHCPOption43VLAN4VLAN，給它們分配地址。[Core-sw]dhcpenable[Core-sw]dhcpserverip-pool 192.168.1.0[Core-sw-dhcp-pool-vlan1]option43hex8007000001c0A801[Core-sw]dhcp [Core-sw]dhcpserverip-pool[Core-sw]dhcpserverip-pool[Core-sw]dhcpserverip-pool 的，所以這里AP必須有Option43，到總部的AC上面，后續(xù)通過 [Core-sw]dhcpserverforbidden-ip172.16.1.254[Core-sw]dhcpserverforbidden-ip[Core-sw]dhcpserverforbidden-ip172.16.3.254[Core-sw]dhcpserverforbidden-ip172.16.4.254[Core-sw]dhcpserverforbidden-ip172.16.5.254[Core-sw]intvlan[Core-sw-Vlan-interface1]ipaddress172.16.1.25424 [Core-sw]interfacevlan[Core-sw-Vlan-interface2]ipaddress172.16.2.25424 [Core-sw]interfacevlan select [Core-sw]interfaceVlan-interface[Core-sw-Vlan-interface4]ipaddress172.16.4.25424 [Core-sw]interfaceVlan-interface select [GW]interface[Core-sw]iproute-static0.0.0.00[GW]iproute-static172.16.2.024[GW]iproute-static172.16.3.024[GW]iproute-static172.16.4.024[GW]iproute-static172.16.5.024ISP[GW]interfaceDialer1[GW-Dialer1]dialer-group1[GW-Dialer1]dialerbundle[GW-Dialer1]ipaddressppp-[GW-Dialer1]ppppaplocal-userccieh3cpasswordsimple[GW-Dialer1]mtu1460[GW]intg0/0/0 部署默認(rèn)路由指向ISP[GW]iproute-s