实验AR1200+S5700+S3700网络组网

admin

AR1200+S5700+S3700访问外网的例子,其实也是我们公司实际的网络拓扑网,只是公司的还没有进行配置,AR2220做为路由访问外网,一台S5700是核心交换机,两台S3700做为接入层交换机使用,为每台S3700划分一个vlan,在本例中,一个是vlan 2,一个是vlan 4,只要这两个会了,再增加交换机也就没有问题了,希望对初学者有些帮助.网络拓扑图如下:
& X& x4 y0 s9 |3 K

---

画图水平不行, 凑活着看就行,下面配置主路由器AR1200,'号后面是备注信息,配置如下:

---

[Huawei]acl number 2000               
[Huawei-acl-basic-2000]rule 5 permit source 192.168.0.0 0.0.255.255   '做个acl,可以根据自己需要配置IP,
[Huawei-acl-basic-2000]q
8 S0 z- ?5 c7 G! S5 |[Huawei]vlan 100
[Huawei-vlan100]q
0 a- Y. b2 Q: A* B# I. a[Huawei]interface giga 0/0/0
[Huawei-GigabitEthernet0/0/0]ip address 192.168.1.3 24  '配置外网IP地址,也就是联通呀,移动等运营商提供给你的IP址,24是掩码         
[Huawei-GigabitEthernet0/0/0]q
& J+ q6 O  E, Q* \2 r. s  _- h4 n. @[Huawei]interface giga 0/0/1
3 w) i1 ]/ g2 ]/ g' V1 V9 A[Huawei-GigabitEthernet0/0/1]ip address 1.1.1.1 24   
[Huawei-GigabitEthernet0/0/1]q
# n; G. L3 n; u* h5 F: c% q8 ]" R9 \8 |[Huawei]ip route-static 0.0.0.0 0.0.0.0 192.168.1.1       '静态路由,使内网的所有外部访问都指向外网网关,网关是运营商提供的.
* O: G, Y$ S; M) i  ~9 ~  E[Huawei]ip route-static 192.168.2.0 255.255.255.0 1.1.1.3  '静态路由,所有访问192.168.2.X的请求指向1.1.1.3
; K! @$ W" f! l; K[Huawei]ip route-static 192.168.4.0 255.255.255.0 1.1.1.4  '静态路由,所有访问192.168.4.X的请求指向1.1.1.4
2 S7 Z6 u  s' N, }0 c0 M: I1 p  ]1 ^[Huawei]                                                                        '可以根据需要自己再增加
# p  I6 A# V) d0 `% |9 A! M<Huawei>
刚开始搞不明白为什么路由器上的接口可以设置IP地址,交换机上的就不行,输入命令时经常搞错,所以遇到路由器就在接口上设置IP,交换机就在Vlanif接口上设置IP就行,也不知我的想法对不.

( c, U; f) C: e# q. E

接下来配置S5700核心交换机,配置如下:

---

[Huawei]undo info-center enable
Info: Information center is disabled.
[Huawei]vlan 100
[Huawei-vlan100]q
8 ^) K) {8 h; m[Huawei]interface vlanif 100
( V! s2 ^" ?. t; F+ O/ Z- Y2 p. H[Huawei-Vlanif100]ip address 1.1.1.2 24
[Huawei-Vlanif100]q
[Huawei]interface giga 0/0/22
[Huawei-GigabitEthernet0/0/22]port link-type trunk                      '交换机和交换机之间连接用trunk接口

[Huawei-GigabitEthernet0/0/22]port trunk allow-pass vlan 100 2     '允许通过vlan100和vlan2
[Huawei-GigabitEthernet0/0/22]q
$ h# ]8 }: ^: v% X3 O) N[Huawei]ip route-static 0.0.0.0 0.0.0.0 1.1.1.1
8 c: |6 u& ?% B& i5 x[Huawei]interface giga 0/0/24

7 z1 i4 ]  ~" W( R" X& @, L[Huawei-GigabitEthernet0/0/24]port link-type access
[Huawei-GigabitEthernet0/0/24]port default vlan 100
[Huawei-GigabitEthernet0/0/24]q
7 d3 [$ `8 j1 m8 b. ^1 d[Huawei]interface giga 0/0/23
[Huawei-GigabitEthernet0/0/23]port link-type trunk                     '同上面22接口
# n0 B" W0 E5 }5 D[Huawei-GigabitEthernet0/0/23]port trunk allow-pass vlan 100 4    '允许通过vlan100和vlan4
[Huawei-GigabitEthernet0/0/23]q
% j, M) _$ G& |, J# T7 f9 s) Y* D


( D, b" N$ T% X4 P) t' d+ I) \下面配置S3700交换机,属于vlan2

---

[Huawei]undo info-center enable
Info: Information center is disabled.
[Huawei]vlan 100
4 X) W: d% m: |, |[Huawei-vlan100]q
  V0 @1 s0 F# l/ s6 k[Huawei]interface eth 0/0/22
+ r( g6 d; z, R: p) Z( a[Huawei-Ethernet0/0/22]ip address 1.1.1.3 24  '在这个地方出错了,不允许在接口上设置IP
                          ^
3 b. _$ n* `: CError: Unrecognized command found at '^' position.
+ Z2 ?9 F* m! k) {5 X4 ?3 f[Huawei-Ethernet0/0/22]port link-type trunk
/ C$ A- h! s! X) ^[Huawei-Ethernet0/0/22]port trunk allow-pass vlan 100 2
[Huawei-Ethernet0/0/22]q
; v7 ~# l' L5 V; ~5 v8 a3 M$ f[Huawei]interface vlanif 100
[Huawei-Vlanif100]ip address 1.1.1.3 24
, t' R# M4 y$ g2 w0 R( H) Y+ f[Huawei-Vlanif100]q
[Huawei]vlan 2
1 h, i6 D' E- R9 ~. f4 k[Huawei-vlan2]q
: c7 `. q. e0 V) g7 Y3 d2 V[Huawei]interface vlanif 2
. x! k" q( t, @( v& b[Huawei-Vlanif2]ip address 192.168.2.1 24
[Huawei-Vlanif2]q
2 C% I: E* W$ A7 s$ t[Huawei]ip route-static 0.0.0.0 0.0.0.0 1.1.1.1
[Huawei]interface eth 0/0/1
  a  y) X9 V. j& O9 u; E0 i' E[Huawei-Ethernet0/0/1]port hybrid untagged vlan 2
* D, Y) ?: t4 A

[Huawei-Ethernet0/0/1]port hybrid pvid vlan 2
0 S% q% A2 b8 o  Z+ E

[Huawei-Ethernet0/0/1]port hybrid untagged vlan 100 2
[Huawei-Ethernet0/0/1]dis this         ' 查看一下接口信息
#
  V% Q0 K' D$ S( ~. cinterface Ethernet0/0/1
  d  W5 @2 I: x3 v port hybrid pvid vlan 2
! v$ C$ J2 c/ g$ q. Z' F$ C port hybrid untagged vlan 2 100
" E' R6 x/ E2 D" p7 o#
return
6 P% y, j+ H( z( T

下面配置S3700-2交换机,属于vlan4

---

[Huawei]undo info-center enable
1 o+ p& J1 |& [+ C: wInfo: Information center is disabled.
" E* y  t9 [' i6 }+ T* {[Huawei]vlan 100
[Huawei-vlan100]q
6 D  n1 M- X9 v& l4 E5 ~1 L7 G[Huawei]interface vlanif 100
[Huawei-Vlanif100]ip address 1.1.1.4 24
[Huawei-Vlanif100]q
, b3 Y! G% |3 Z7 r" `: Z3 c6 K: a[Huawei]interface eth 0/0/22
[Huawei-Ethernet0/0/22]port link-type trunk
[Huawei-Ethernet0/0/22]port trunk allow-pass vlan 100 4
+ y* V8 b) y. x- D* m[Huawei-Ethernet0/0/22]dis this
#
/ ^. c2 N$ K& _3 \0 d4 j9 Rinterface Ethernet0/0/22
$ B( @1 }( |! `( e# p! o4 | port link-type trunk
port trunk allow-pass vlan 4 100
#
$ T' k# K& }- w0 k. Yreturn
# T, y) a) i  J& K5 G4 W[Huawei-Ethernet0/0/22]q
[Huawei]vlan 4
& x& Z& l8 k! S3 {2 w1 X/ S) A[Huawei-vlan4]q

[Huawei]interface vlanif 4
# f$ k9 N4 [$ g4 E$ K3 ?/ `[Huawei-Vlanif4]ip address 192.168.4.1 24
[Huawei-Vlanif4]q
1 X, Y6 g( Z! j% t- Z& u" R[Huawei]ip route-static 0.0.0.0 0.0.0.0 1.1.1.1
[Huawei]ping 192.168.4.1
9 H- M2 y% h& l) Z& q6 L  PING 192.168.4.1: 56  data bytes, press CTRL_C to break
# d) F: T7 Z1 Z7 w4 T    Reply from 192.168.4.1: bytes=56 Sequence=1 ttl=255 time=20 ms
    Reply from 192.168.4.1: bytes=56 Sequence=2 ttl=255 time=10 ms
    Reply from 192.168.4.1: bytes=56 Sequence=3 ttl=255 time=1 ms
- X0 J; A2 e$ ]    Reply from 192.168.4.1: bytes=56 Sequence=4 ttl=255 time=30 ms
% A) D+ J4 Z" X' W4 @    Reply from 192.168.4.1: bytes=56 Sequence=5 ttl=255 time=1 ms
  --- 192.168.4.1 ping statistics ---
    5 packet(s) transmitted
    5 packet(s) received
    0.00% packet loss
    round-trip min/avg/max = 1/12/30 ms
[Huawei]interface eth 0/0/1
5 t6 E% ~( `; D( d" n5 _  W# {

[Huawei-Ethernet0/0/1]port hybrid untagged vlan 100 4
+ N  z, e+ a5 B: O* x[Huawei-Ethernet0/0/1]port hybrid pvid vlan 4

[Huawei-Ethernet0/0/1]q
" U6 P/ ^% w5 R0 ]
0 }# E" v/ g" k

---

好了,交换机和路由器的设置就完成了,把两个PC客户端配置好IP地址就可以试试效果了,但由于是模拟器的原因,在长间没有使用时,有时候会有ping不通的情况,在我这里两个都能ping通外网,vlan2和vlan4之间也能互通.在真实的设备上我们可以启用web界面和telnet,然后通过1.1.1.1,1.1.1.2,1.1.1.3这些地址来访问和管理路由器和交换机了,端口隔离,mac黑洞之类的配置可以在web界面上操作,谁让咱会的太少了.下面是前两个例子的地址,从简到稍难

admin

首先配置AR2220,设置GE0接口IP为固定外网地址,设置GE1接口IP为1.1.1.1,然后做两条静态路由,创建vlan 100,红色文本是需要特别多看几眼的,代码如下:

---

[Huawei]vlan 100

[Huawei-vlan100]q

[Huawei]acl number 2000

[Huawei-acl-basic-2000]rule 5 permit source 192.168.0.0 0.0.255.255

[Huawei-acl-basic-2000]q

, K% C6 Z+ y! g. U9 A) k3 a  B: L* l

[Huawei]interface giga 0/0/0

[Huawei-GigabitEthernet0/0/0]ip address 192.168.1.3 255.255.255.0

[Huawei-GigabitEthernet0/0/0]

Mar 13 2014 07:34:12-05:13 Huawei %IFNET/4/LINK_STATE(l)[1]:The line protocol

IP on the interface GigabitEthernet0/0/0 has entered the UP state.

[Huawei-GigabitEthernet0/0/0]q

* Y  m* B) ]1 `

[Huawei]interface giga 0/0/1

[Huawei-GigabitEthernet0/0/1]ip address 1.1.1.1 255.255.255.0

[Huawei-GigabitEthernet0/0/1]q

[Huawei]ip route-static 0.0.0.0 0.0.0.0 192.168.1.1

( T) @' n' f, m0 t! n2 N

[Huawei]ip route-static 192.168.0.0 255.255.0.0 1.1.1.2

[Huawei]q

  W: w# I- [: ~

save

  The current configuration will be written to the device.

% ?+ X: b  }3 _8 f

  Are you sure to continue? (y/n)[n]:y

  It will take several minutes to save configuration file, please wait..........

9 W3 G/ L! o$ z8 ?

  Configuration file had been saved successfully

  Note: The configuration file will take effect after being activated

( A- X4 w" B; A2 \
) ^( D' _8 W; ^4 q* c! S

Mar 13 2014 07:37:25-05:13 Huawei ARP/4/ARP_IPCONFLICT_TRAP:OID 16777216.50331648

2 O3 E* y7 @1 d; l+ c

.100663296.16777216.67108864.16777216.3674669056.83886080.419430400.2063597568.33

554432.100663296 ARP detects IP conflict. (IP address=201.1.168.192, Local interf

' y2 O- K+ f7 X! l

ace=GigabitEthernet0/0/0, Local MAC=4437-e68c-b212, Local vlan=0, Local CE vlan=0

! U0 ~( Y; n* f; v* ^

, Receive interface=GigabitEthernet0/0/0, Receive MAC=1c1a-c00f-253f, Receive vla

n=0, Receive CE vlan=0, IP conflict type=Remote IP conflict).

* ~! ]: N8 E7 E/ l2 `
7 ]$ R5 e  u; L

---

接下来配置S5700交换机,GE1接口IP为1.1.1.2,属于vlan100,GE2接口属于vlan1,GE3接口属于vlan2,代码如下

---

[Huawei]vlan batch 2 4 6 8 100

Info: This operation may take a few seconds. Please wait for a moment...done.

5 y: C, J8 D' I% S% W* @: T  C% f

[Huawei]

' P0 I+ |+ d! k/ t. Q

Mar 13 2014 10:38:34-08:00 Huawei DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.

25.191.3.1 configurations have been changed. The current change number is 4, the

change loop count is 0, and the maximum number of records is 4095.

[Huawei]interface vlanif 100

[Huawei-Vlanif100]ip address 1.1.1.2 255.255.255.0

4 E. ^+ {! |# l" s

[Huawei-Vlanif100]

; H! H. I- d& j7 P! W' N

Mar 13 2014 10:40:14-08:00 Huawei DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.

9 @; E/ s3 }! ]7 v( ~5 Y3 D: W

25.191.3.1 configurations have been changed. The current change number is 6, the

change loop count is 0, and the maximum number of records is 4095.

[Huawei-Vlanif100]q

[Huawei]interface giga 0/0/1

[Huawei-GigabitEthernet0/0/1]port link-type access

/ N. {/ ?; M2 F$ ~( l# d: m5 I6 g

[Huawei-GigabitEthernet0/0/1]port default vlan 100

7 }$ j+ l6 F4 E* A/ Q5 l9 P

[Huawei-GigabitEthernet0/0/1]q

! q% b& ^" d7 k" ]! ?

[Huawei]ip route-static 0.0.0.0 0.0.0.0 1.1.1.1

[Huawei]

Mar 13 2014 10:43:24-08:00 Huawei DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.

25.191.3.1 configurations have been changed. The current change number is 9, the

change loop count is 0, and the maximum number of records is 4095.

' k) F# G* C# l/ d2 n* p) N! }, f

[Huawei]interface vlanif 1

/ i" |7 S5 K9 `/ r1 [

[Huawei-Vlanif1]ip address 192.168.0.1 255.255.255.0

# |, E/ i" X9 D% ]7 E

[Huawei-Vlanif1]q

/ o& U* h1 ?& c' V

[Huawei]interface vlanif 2

4 W% s: _% K3 m' r/ q. m. |* a0 V

[Huawei-Vlanif2]ip address 192.168.2.1 255.255.255.0

3 o( V: U' k' R8 v" r& K

[Huawei-Vlanif2]q

[Huawei]interface giga 0/0/3

8 n- R* b5 l/ ]$ D. W5 v+ [

[Huawei-GigabitEthernet0/0/3]port link-type access

[Huawei-GigabitEthernet0/0/3]port default vlan 2

[Huawei-GigabitEthernet0/0/3]

[Huawei]q

' t- G' m! _+ u& Z3 O! Y7 a$ i

save

8 B% L5 p8 @) Z! d. K2 t

The current configuration will be written to the device.

Are you sure to continue?[Y/N]y

( |& @$ w" m4 R. P$ d

Now saving the current configuration to the slot 0.

Mar 13 2014 11:02:44-08:00 Huawei %CFM/4/SAVE(l)[11]:The user chose Y when dec

( ]& Y' H1 ~8 N0 R% M' |  y

iding whether to save the configuration to the device.

Save the configuration successfully.

, A2 W1 \1 k2 H  h8 |; H
; `8 L4 s; W/ c; D( g5 z8 L

---

然后设置PC1和PC2的IP地址,先ping 1.1.1.1,如果没有问题再ping 192.168.1.3,192.168.1.111,202.99.192.66,一路ping下来是不是感觉有点小成就感,如果PC2无法ping通,那么就像昨天一样,在自己的真实路由器上做个静态路由指向192.168.2.0便可以了.需要的可以下载附件导出配置文件看.

. u% `! F* M0 l5 G' w
$ V  Z) D- s7 }% K. G% D9 m