华为模拟器三层交换机VALN兼路由
实验需求：
1.创建VLAN并且能正确地划分Hybrid VLAN
2.Hybrid端口配置正确
3.Tag标签能正确标记，去除
4.利用三层交换机实现全网互通
5.设置DHCP，PC可以自动获取IP地址
以下是拓扑图及详细步骤：
一．创建VLAN并且划分hybrid VLAN正确
以下是详细步骤：
LSW2
sys
Enter system view, return user view with Ctrl+Z.
[Huawei]
[Huawei]vlan 10
[Huawei-vlan10]vlan 20
[Huawei-vlan20]
Oct 21 2013 16:07:38-08:00 Huawei DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.
25.191.3.1 configurations have been changed. The current change number is 5, the
change loop count is 0, and the maximum number of records is 4095.
[Huawei-vlan20]int e0/0/1
[Huawei-Ethernet0/0/1]port hybrid pvid vlan 10
Oct 21 2013 16:08:08-08:00 Huawei DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.
25.191.3.1 configurations have been changed. The current change number is 6, the
change loop count is 0, and the maximum number of records is 4095.
[Huawei-Ethernet0/0/1]port hybrid untagged vlan 10 20
[Huawei-Ethernet0/0/1]int e0/0/2
Oct 21 2013 16:08:28-08:00 Huawei DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.
25.191.3.1 configurations have been changed. The current change number is 7, the
change loop count is 0, and the maximum number of records is 4095. h
[Huawei-Ethernet0/0/2]port hybrid pvid vlan 20
[Huawei-Ethernet0/0/2]port hybrid untagged vlan 10 20
[Huawei-Ethernet0/0/2]
Oct 21 2013 16:08:48-08:00 Huawei DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.
25.191.3.1 configurations have been changed. The current change number is 9, the
change loop count is 0, and the maximum number of records is 4095.
LSW2：
sys
Enter system view, return user view with Ctrl+Z.
[Huawei]vlan 30
[Huawei-vlan30]int e
Oct 21 2013 16:18:58-08:00 Huawei DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.
25.191.3.1 configurations have been changed. The current change number is 4, the
change loop count is 0, and the maximum number of records is 4095.
[Huawei-vlan30]int e0/0/1
[Huawei-Ethernet0/0/1]port hybrid pvid vlan 30
[Huawei-Ethernet0/0/1]port hybrid untagged vlan 30
[Huawei-Ethernet0/0/1]
Oct 21 2013 16:19:28-08:00 Huawei DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.
25.191.3.1 configurations have been changed. The current change number is 6, the
change loop count is 0, and the maximum number of records is 4095.
二．创建Hybrid的端口
以下是详细步骤：
LSW2：
[Huawei]interface GigabitEthernet 0/0/1
[Huawei-GigabitEthernet0/0/1]
[Huawei-GigabitEthernet0/0/1]port hybrid tagged vlan 10 20
[Huawei-GigabitEthernet0/0/1]
Oct 21 2013 16:26:48-08:00 Huawei DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.
25.191.3.1 configurations have been changed. The current change number is 10, the
change loop count is 0, and the maximum number of records is 4095.
LSW3：
[Huawei]interface GigabitEthernet 0/0/1
[Huawei-GigabitEthernet0/0/1]port hybrid tagged vlan 30
[Huawei-GigabitEthernet0/0/1]
Oct 21 2013 16:28:48-08:00 Huawei DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.
25.191.3.1 configurations have been changed. The current change number is 7, the
change loop count is 0, and the maximum number of records is 4095.
用display vlan查看配置是否正确
如图所示：
三．在确保无误之后进行三层交换机创建VLAN，配置网关的工作
以下是详细步骤：
sys
Enter system view, return user view with Ctrl+Z.
[Huawei]vlan 10
Oct 21 2013 16:34:38-08:00 Huawei DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.
25.191.3.1 configurations have been changed. The current change number is 4, the
change loop count is 0, and the maximum number of records is 4095.
[Huawei-vlan10]vlan 20
[Huawei-vlan20]vlan 30
[Huawei-vlan30]
Oct 21 2013 16:34:48-08:00 Huawei DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.
25.191.3.1 configurations have been changed. The current change number is 6, the
change loop count is 0, and the maximum number of records is 4095.
[Huawei-vlan30]int vlan 10
[Huawei-Vlanif10]ip add 192.168.10.1 24
[Huawei-Vlanif10]int vlan 20
Oct 21 2013 16:35:08-08:00 Huawei DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.
25.191.3.1 configurations have been changed. The current change number is 7, the
change loop count is 0, and the maximum number of records is 4095.
[Huawei-Vlanif20]ip add 192.168.20.1 24
Oct 21 2013 16:35:28-08:00 Huawei DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.
25.191.3.1 configurations have been changed. The current change number is 8, the
change loop count is 0, and the maximum number of records is 4095.
[Huawei-vlan30]int vlan 30
[Huawei-Vlanif30]ip add 192.168.30.1 24
[Huawei-Vlanif30]
Oct 21 2013 16:35:48-08:00 Huawei DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.
25.191.3.1 configurations have been changed. The current change number is 9, the
change loop count is 0, and the maximum number of records is 4095.
四．进入VLAN创建DHCP，在此之前先开启DHCP功能
以下是详细步骤：
[Huawei]dhcp enable
Info: The operation may take a few seconds. Please wait for a moment.done.
[Huawei]interface vlan 10
[Huawei-Vlanif10]
Oct 21 2013 16:42:29-08:00 Huawei DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.
25.191.3.1 configurations have been changed. The current change number is 10, the
change loop count is 0, and the maximum number of records is 4095.
[Huawei-Vlanif10]dhcp select interface
[Huawei-Vlanif10]
Oct 21 2013 16:42:49-08:00 Huawei DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.
25.191.3.1 configurations have been changed. The current change number is 11, the
change loop count is 0, and the maximum number of records is 4095.
[Huawei-Vlanif10]int vlan 20
[Huawei-Vlanif20]dhcp select interface
[Huawei-Vlanif20]int vlan 30
Oct 21 2013 16:43:09-08:00 Huawei DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.
25.191.3.1 configurations have been changed. The current change number is 12, the
change loop count is 0, and the maximum number of records is 4095.
[Huawei-Vlanif30]dhcp select interface
[Huawei-Vlanif30]
Oct 21 2013 16:43:19-08:00 Huawei DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.
25.191.3.1 configurations have been changed. The current change number is 13, the
还要将三层交换机下的两个二层接口改为Hybrid端口，并标记TAG标签
[Huawei]interface GigabitEthernet 0/0/1
[Huawei-GigabitEthernet0/0/1]port hybrid tagged vlan 10 20
[Huawei-GigabitEthernet0/0/1]
Oct 21 2013 16:46:46-08:00 Huawei %%01IFNET/4/IF_STATE(l)[0]:Interface Vlanif10 h
as turned into UP state.
Oct 21 2013 16:46:46-08:00 Huawei %%01IFNET/4/LINK_STATE(l)[1]:The line protocol
IP on the interface Vlanif10 has entered the UP state.
Oct 21 2013 16:46:46-08:00 Huawei %%01IFNET/4/IF_STATE(l)[2]:Interface Vlanif20 h
as turned into UP state.
Oct 21 2013 16:46:46-08:00 Huawei %%01IFNET/4/LINK_STATE(l)[3]:The line protocol
IP on the interface Vlanif20 has entered the UP state.
Oct 21 2013 16:46:49-08:00 Huawei DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.
25.191.3.1 configurations have been changed. The current change number is 14, the
change loop count is 0, and the maximum number of records is 4095.nt
[Huawei-GigabitEthernet0/0/1]int g0/0/2
[Huawei-GigabitEthernet0/0/2]port hybrid tagged vlan 30
[Huawei-GigabitEthernet0/0/2]
Oct 21 2013 16:47:14-08:00 Huawei %%01IFNET/4/IF_STATE(l)[4]:Interface Vlanif30 h
as turned into UP state.
Oct 21 2013 16:47:14-08:00 Huawei %%01IFNET/4/LINK_STATE(l)[5]:The line protocol
IP on the interface Vlanif30 has entered the UP state.
Oct 21 2013 16:47:19-08:00 Huawei DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.
25.191.3.1 configurations have been changed. The current change number is 15, the
change loop count is 0, and the maximum number of records is 4095.
验证一下如果PC能自动获得IP地址且三台PC能够互通则前期工作完成
如图所示：
Ping 192.168.20.254: 32 data bytes, Press Ctrl_C to break
From 192.168.20.254: bytes=32 seq=1 ttl=127 time=94 ms
From 192.168.20.254: bytes=32 seq=2 ttl=127 time=47 ms
From 192.168.20.254: bytes=32 seq=3 ttl=127 time=78 ms
From 192.168.20.254: bytes=32 seq=4 ttl=127 time=62 ms
From 192.168.20.254: bytes=32 seq=5 ttl=127 time=63 ms
--- 192.168.20.254 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 47/68/94 ms
PC>ping 192.168.30.254
Ping 192.168.30.254: 32 data bytes, Press Ctrl_C to break
From 192.168.30.254: bytes=32 seq=1 ttl=127 time=78 ms
From 192.168.30.254: bytes=32 seq=2 ttl=127 time=47 ms
From 192.168.30.254: bytes=32 seq=3 ttl=127 time=78 ms
From 192.168.30.254: bytes=32 seq=4 ttl=127 time=78 ms
From 192.168.30.254: bytes=32 seq=5 ttl=127 time=94 ms
--- 192.168.30.254 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 47/75/94 ms
五，在三层交换机上创建一个新的VLAN，用于访问路由器的端口
详细步骤如下：
[Huawei]
[Huawei]vlan 6
[Huawei-vlan6]
Oct 21 2013 16:58:39-08:00 Huawei DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.
25.191.3.1 configurations have been changed. The current change number is 16, the
change loop count is 0, and the maximum number of records is 4095.
[Huawei-vlan6]int vlan 6
[Huawei-Vlanif6]ip add 1.1.1.1 24
[Huawei-Vlanif6]
Oct 21 2013 17:01:19-08:00 Huawei DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.
25.191.3.1 configurations have been changed. The current change number is 17, the
change loop count is 0, and the maximum number of records is 4095.
[Huawei-Vlanif6]int g0/0/3
[Huawei-GigabitEthernet0/0/3]port hybrid untagged vlan ａｌｌ(这里要将TAG标签脱去，不然，路由器接收到的报文将无法识别)
[Huawei-GigabitEthernet0/0/3]
Oct 21 2013 17:02:58-08:00 Huawei %%01IFNET/4/IF_STATE(l)[6]:Interface Vlanif6 ha
s turned into UP state.
Oct 21 2013 17:02:58-08:00 Huawei %%01IFNET/4/LINK_STATE(l)[7]:The line protocol
IP on the interface Vlanif6 has entered the UP state.
Oct 21 2013 17:02:59-08:00 Huawei DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.
25.191.3.1 configurations have been changed. The current change number is 18, the
change loop count is 0, and the maximum number of records is 4095.
六．在AR１路由器中将内网端口配置网关及子网掩码
详细步骤如下：
sys
Enter system view, return user view with Ctrl+Z.
[Huawei]
[Huawei]interface GigabitEthernet 0/0/0
[Huawei-GigabitEthernet0/0/0]ip add 1.1.1.2 24
O
[Huawei-cGigat 21 2013 14:23:20-05:13 HuaweibitEthernet0/ %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP on the interface GigabitEthernet0/0/0 has entered the UP state.
[Huawei-GigabitEthernet0/0/0]0/0]
接下来陆续将后面两台路由器的接口配置完毕，并实现三台路由器互通
以下是详细步骤：
AR１：
[Huawei]interface GigabitEthernet 0/0/1
[Huawei-GigabitEthernet0/0/1]ip add 202.106.1.1 24
Oct 21 2013 14:29:35-05:
[Huawei-GigabitEther13 Huawei %%01neIFNET/4/t0/0/1LINK_STATE(]l)[0]:The line protocol IP on the interface GigabitEthernet0/0/1 has entered the UP state.
[Huawei-GigabitEthernet0/0/1]
AR２：
sys
Enter system view, return user view with Ctrl+Z.
[Huawei]interface GigabitEthernet 0/0/0
[Huawei-GigabitEthernet0/0/0]ip add 202.106.1.2 24
Oct 21 2013 1
[Huawei-Gi4:31:30-05:13 Huawei %%01IFNgabitEthernet0/0/0]ET/4/LINK_STATE(l)[0]:The line protocol IP on the interface GigabitEthernet0/0/0 has entered the UP state.
[Huawei-GigabitEthernet0/0/0]int g0/0/1
[Huawei-GigabitEthernet0/0/1]ip add 202.106.2.1 24
Oct 21 2013
[Huawei-Gigabi 1tEtherne4:31:51-05:13 Huawei %%01IFNt0/0/1]ET/4/LINK_STATE(l)[1]:The line protocol IP on the interface GigabitEthernet0/0/1 has entered the UP state.
[Huawei-GigabitEthernet0/0/1]
AR３：
sys
Enter system view, return user view with Ctrl+Z.
[Huawei]interface GigabitEthernet 0/0/0
[Huawei-GigabitEthernet0/0/0]ip add 202.106.2.2 24
Oct 21 2013 14:34:47-05:13 Huawei %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP on the interface GigabitEthernet0/0/0 has entered t
[Huawei-Gigahe UP state. b
[Huawei-GigabitEthernet0/0/0]itEthernet0/0/0]
以上是配置IP地址，接下来是做静态路由
AR１
[Huawei]ip route-static 202.106.2.0 24 202.106.1.2
AR３
[Huawei]ip route-static 202.106.1.0 24 202.106.2.1
来验证一下三台路由器是否互通了
如图所示：
七．在三层交换机上做默认路由并在AR１上做到达内网的静态路由
以下是详细步骤：
LSW：
[Huawei]ip route-static 0.0.0.0 0.0.0.0 1.1.1.2
AR１：
[Huawei]ip route-static 192.168.10.0 24 1.1.1.1
[Huawei]ip route-static 192.168.20.0 24 1.1.1.1
[Huawei]ip route-static 192.168.30.0 24 1.1.1.1
做到这一步要来个小检查，查看自己的PC能否Ｐｉｎｇ通三层交换机中所创建的VLAN的网关和AR１内网口的网关
如图所示：
八．最后一步，在AR１上做PAT即可实现全网互通
以下是详细步骤：
sys
Enter system view, return user view with Ctrl+Z.
[Huawei]
[Huawei]acl 2000
[Huawei-acl-basic-2000]rule 5 permit source any
[Huawei-acl-basic-2000]qu
[Huawei]interface GigabitEthernet 0/0/1
[Huawei-GigabitEthernet0/0/1]nat outbound 2000
[Huawei-GigabitEthernet0/0/1]
最后验证：
如图：
就此完成！

SW1：
vlan batch 2 3 #同时新建两个VLAN：VLAN2和VLAN3
int g0/0/1
port link-type access #将GigabitEthernet0/0/1端口设置为access类型
vlan 2
port g0/0/1 #将GigabitEthernet0/0/1端口加入VLAN2
q
int g0/0/2
port link-typr access #将GigabitEthernet0/0/2端口设置为access类型
vlan 3
port g0/0/2 #将GigabitEthernet0/0/2端口加入VLAN3
q
int g0/0/3
port link-type trunk #将GigabitEthernet0/0/3端口设置为trunk类型
port trunk allow-pass vlan all #GigabitEthernet0/0/3端口允许所有VLAN通过
q #GigabitEthernet0/0/3端口属于默认VLAN：VLAN1
int vlanif 1
ip add 192.168.3.1 24 #设置VLAN1的虚端口IP和掩码
int vlanif 2
ip add 192.168.1.1 24 #设置VLAN2的虚端口IP和掩码
int vlanif 3
ip add 192.168.2.1 24 #设置VLAN3的虚端口IP和掩码
q
ip route-static 0.0.0.0 0 192.168.3.2 #加一条默认路由，下一跳是路由器R1的Ethernet0/0/0端口

eNSP华为模拟器 基于三层交换机的单臂路由配置
 一、实验概述
 二、二层交换机的配置
 三、三层交换机的配置
 四、实验结果

 一、实验概述
实验要求：完成单臂路由的设计与配置

实验内容：

一、按照以下的拓扑连接，自行设计VLAN和IP地址等网络参数，实现PC3到PC4的IP通信。
  拓扑图如下



实验设备：




实验设备
数量




三层交换机S5700
1台


二层交换机S3700
1台


PC机
2台


 二、二层交换机的配置
配置PC3 IP: 192.168.3.100 /24，Gateway:192.168.3.1；
配置PC4 IP: 192.168.4.100 /24，Gateway:192.168.4.1。

第一步：在S1上划分VALN。将e0/0/1口分给为VLAN3并设置接口模式为access，e0/0/2口分给为VLAN4并设置接口模式为access。在S1上建立连接路由器R1的Trunk。确定e0/0/3接口为Trunk，并允许vlan 2和vlan3通过。
二层交换机的上的配置命令如下
<Huawei>sys
[Huawei]sysname S1
[S1]undo info-center enable 

[S1]vlan batch 3 4
[S1]int e0/0/1
[S1-Ethernet0/0/1]port link-type access 
[S1-Ethernet0/0/1]port default vlan 3
[S1-Ethernet0/0/1]int e0/0/2
[S1-Ethernet0/0/2]port link-type access
[S1-Ethernet0/0/2]port default vlan 4

[S1-Ethernet0/0/2]int e0/0/3
[S1-Ethernet0/0/3]port link-type trunk 
[S1-Ethernet0/0/3]port trunk allow-pass vlan all

 三、三层交换机的配置
第二步：配置三层交换机LS1。进入LS1的系统视图模式，确定g0/0/1为连接二层交换机S1的Trunk接口。设置VLAN2和VLAN3的路由网关地址，激活VLAN接口。

三层交换机LS1的配置命令如下
<Huawei>sys
[Huawei]sysname LS1

[LS1]int g0/0/1
[LS1-GigabitEthernet0/0/1]port link-type trunk 
[LS1-GigabitEthernet0/0/1]port trunk allow-pass vlan all

[LS1]vlan batch 3 4
[LS1]int vlanif 3
[LS1-Vlanif3]ip address 192.168.3.1 24
[LS1-Vlanif3]int vlanif 4
[LS1-Vlanif4]ip address 192.168.4.1 24

 四、实验结果
从PC3 ping到PC4，成功，证明单臂路由配置完成。

VLAN与三层交换机
1、打开ensp，建立如下拓扑图



框选所有设备，点击启动



2、配置VLAN

进入LSW2，改名为SW1，创建VLAN 10 20



划分接口vlan



这边就可以简写了



这里，把g0/0/1口也要配置trunk，因为三层交换机是二层交换机加路由器



退出接口，用dis vlan 看一下，三个接口都配置完成



再进入LSW3：

创建vlan10和vlan20



划分vlan





3、配置Trunk

进入LSW2，配置g0/0/1口的trunk



在SW2上的g0/0/2口也要配置trunk



进入LSW3，配置g0/0/1口的trunk （这里就简写了）



4、配置三层交换机

进人LSW1:

先配置VLAN



进入g0/0/1口，配置trunk



配置三层交换机：



5、配置PC的IP 地址、子网掩码、网关

这里，网关是一定要配置的，因为跨网段通信，数据是要通过网关的









6、下面来用主机ping一下同一网段和不同网段的主机，再通过抓包看一下数据的传输

先Ping一下相同广播域内的主机：



在trunk口处进行抓包，此时ping同一vlan是不用经过三层交换机的



请求和回复都是成对的：



下面，我们再来ping一下不同vlan的主机之间是否能够进行通信：

在三层交换机接口处进行抓包实验：





可以看到request和reply都是成对的



至此，VLAN划分与三层交换机实验完活！