兩層交換機如何連接路由器(華為交換機配置教程4.二層交換機與路由器對接上網(wǎng))關于華為交換機配置教程搜集整理了一下，從基礎組網(wǎng)，對接防火墻、多種方式的設備登錄開始，一直到安全認證、故障處理，內(nèi)容比較全面細致。近期更新一下，更新完了之后做一個匯總。有需要的可以關注一下。這篇文章我們來了解一下，使用二層交換機與路由器對接上網(wǎng)時，交換機如何配置。1、應用場景如圖所示，交換機Switch和路由器對接，使用戶PC1和PC2可以實現(xiàn)上網(wǎng)功能。交換機是二層交換機，僅能實現(xiàn)二層轉(zhuǎn)發(fā)。2、配置思路交換機基于接口劃分VLAN，實現(xiàn)二層轉(zhuǎn)發(fā)。路由器的配置有兩種情況(這里使用的是AR路由器)：①一種是路由器的接口是二層口，通過配置VLANIF接口，實現(xiàn)和交換機的通信。②一種是路由器的接口是三層口，通過配置子接口終結(jié)VLAN功能，實現(xiàn)和交換機的通信。3、配置步驟交換機的配置步驟（共2步）第一步：配置下行連接用戶的接口。system-view[Switch]vlanbatch23[Switch]interfacegigabitethernet0/0/2[Switch-GigabitEthernet0/0/2]portlink-typeaccess[Switch-GigabitEthernet0/0/2]portdefaultvlan2[Switch-GigabitEthernet0/0/2]quit[Switch]interfacegigabitethernet0/0/3[Switch-GigabitEthernet0/0/3]portlink-typeaccess[Switch-GigabitEthernet0/0/3]portdefaultvlan3[Switch-GigabitEthernet0/0/3]quit*[Mt?第二步：配置上行連接路由器的接口。[Switch]interfacegigabitethernet0/0/1[Switch-GigabitEthernet0/0/1]portlink-typetrunk[Switch-GigabitEthernet0/0/1]porttrunkallow-passvlan23[Switch-GigabitEthernet0/0/1]quit路由器的接口作為三層口，通過配置子接口終結(jié)VLAN進行通信的配置步驟（共4步）第一步：配置終結(jié)子接口。system-view[Router]vlanbatch23[Router]interfacegigabitethernet0/0/1.1[Router-GigabitEthernet0/0/1.1]dot1qterminationvid2[Router-GigabitEthernet0/0/1.1]ipaddress192.168.1.124[Router-GigabitEthernet0/0/1.1]arpbroadcastenable[Router-GigabitEthernet0/0/1.1]quit[Router]interfacegigabitethernet0/0/1.2[Router-GigabitEthernet0/0/1.2]dot1qterminationvid3[Router-GigabitEthernet0/0/1.2]ipaddress192.168.2.124[Router-GigabitEthernet0/0/1.2]arpbroadcastenable[Router-GigabitEthernet0/0/1.2]quit第二步：配置DHCP和DNS功能，為內(nèi)網(wǎng)用戶分配IP地址和指定DNS服務器地址。[Router]dhcpenable[Router]interfacegigabitethernet0/0/1.1[Router-GigabitEthernet0/0/1.1]dhcpselectinterface[Router-GigabitEthernet0/0/1.1]dhcpserverdns-list114.114.114.114223.5.5.5[Router-GigabitEthernet0/0/1.1]quit[Router]interfacegigabitethernet0/0/1.2[Router-GigabitEthernet0/0/1.2]dhcpselectinterface[Router-GigabitEthernet0/0/1.2]dhcpserverdns-list114.114.114.114223.5.5.5[Router-GigabitEthernet0/0/1.2]quit第三步：配置公網(wǎng)接口的IP地址和靜態(tài)路由。[Router]interfacegigabitethernet0/0/2[Router-GigabitEthernet0/0/2]ipaddress200.0.0.2255.255.255.0[Router-GigabitEthernet0/0/2]quit[Router]iproute-static0.0.0.00.0.0.0200.0.0.1第四步：配置NAT功能，使內(nèi)網(wǎng)用戶可以訪問外網(wǎng)。[Router]aclnumber2001[Router-acl-basic-2001]rule5permitsource192.168.0.00.0.255.255[Router-acl-basic-2001]quit[Router]interfacegigabitethernet0/0/2[Router-GigabitEthernet0/0/2]natoutbound2001[Router-GigabitEthernet0/0/2]quit路由器的接口作為二層口，通過VLANIF進行通信的配置步驟（共4步）第一步：配置VLANIF接口。system-view[Router]vlanbatch23[Router]interfacegigabitethernet0/0/1[Router]portswitch[Router-GigabitEthernet0/0/1]portlink-typetrunk[Router-GigabitEthernet0/0/1]porttrunkallow-passvlan23[Router-GigabitEthernet0/0/1]quit[Router]interfacevlanif2[Router-Vlanif2]ipaddress192.168.1.124[Router-Vlanif2]quit[Router]interfaceVlanif3[Router-Vlanif3]ipaddress192.168.2.124[Router-Vlanif3]quit第二步：配置DHCP和DNS功能，為內(nèi)網(wǎng)用戶分配IP地址和指定DNS服務器地址。[Router]dhcpenable[Router]interfacevlanif2[Router-Vlanif2]dhcpselectinterface[Router-Vlanif2]dhcpserverdns-list114.114.114.114223.5.5.5[Router-Vlanif2]quit[Router]interfacevlanif3[Router-Vlanif3]dhcpselectinterface[Router-Vlanif3]dhcpserverdns-list114.114.114.114223.5.5.5[Router-Vlanif3]quit第三步：配置公網(wǎng)接口的IP地址和靜態(tài)路由。[Router]interfacegigabitethernet0/0/2[Router-GigabitEthernet0/0/2]ipaddress200.0.0.2255.255.255.0[Router-GigabitEthernet0/0/2]quit[Router]iproute-static0.0.0.00.0.0.0200.0.0.1第四步：配置NAT功能，使內(nèi)網(wǎng)用戶可以訪問外網(wǎng)。[Router]aclnumber2001[Router-acl-basic-2001]rule5permitsource192.168.0.00.0.255.255[Router-acl-basic-2001]quit[Router]interfacegigabitethernet0/0/2[Router-GigabitEthernet0/0/2]natoutbound2001[Router-GigabitEthernet0/0/2]quit這樣二層交換機與路由器對接上網(wǎng)時的交換機配置就完成了。備注：dhcpselectinterface作為dhcp服務器，使用接口IP地址池為客戶端分配IP地址。dhcpserverdns-list114.114.114.114223.5.5.5配置接口地址池下的DNS服務器地址。公共DNS，全國均可使用，不區(qū)分ISPnatoutbound2001此ACL用于限定NAT轉(zhuǎn)換的數(shù)據(jù)在路由器的上行接口，使能nat功能，進行公網(wǎng)和私網(wǎng)IP地址的轉(zhuǎn)換。[Router-acl-basic-2001]rule5permitsource192.168.0.00.0.255.255可以指定源IP地址。下一篇為大家介紹三層交換機與路由器對接上網(wǎng)的交換機配置，歡迎持續(xù)關注。更新完了之后會做一個匯總放在主頁欄目里面。上一篇：