实验AR1200+S5700+S3700网络组网

admin

AR1200+S5700+S3700访问外网的例子,其实也是我们公司实际的网络拓扑网,只是公司的还没有进行配置,AR2220做为路由访问外网,一台S5700是核心交换机,两台S3700做为接入层交换机使用,为每台S3700划分一个vlan,在本例中,一个是vlan 2,一个是vlan 4,只要这两个会了,再增加交换机也就没有问题了,希望对初学者有些帮助.网络拓扑图如下:
  B. d# x% ?( k6 k1 b2 J

---

                               
登录/注册后可看大图

画图水平不行, 凑活着看就行,下面配置主路由器AR1200,'号后面是备注信息,配置如下:

---

[Huawei]acl number 2000               
[Huawei-acl-basic-2000]rule 5 permit source 192.168.0.0 0.0.255.255   '做个acl,可以根据自己需要配置IP,
[Huawei-acl-basic-2000]q
  g) L/ V+ e. W3 a[Huawei]vlan 100
4 l$ y% R1 l1 e  A. m[Huawei-vlan100]q
[Huawei]interface giga 0/0/0
. P( e4 ]# m9 `' t# t" z) ~[Huawei-GigabitEthernet0/0/0]ip address 192.168.1.3 24  '配置外网IP地址,也就是联通呀,移动等运营商提供给你的IP址,24是掩码         
: G! k6 y' Q& W) G4 X. M[Huawei-GigabitEthernet0/0/0]q
& u+ L, r9 n. u: G[Huawei]interface giga 0/0/1
! _. T5 c6 q; _! f) B! Q) k8 L+ y' I[Huawei-GigabitEthernet0/0/1]ip address 1.1.1.1 24   
* L: O, S1 m4 ]" V& J% X6 ]* H[Huawei-GigabitEthernet0/0/1]q
[Huawei]ip route-static 0.0.0.0 0.0.0.0 192.168.1.1       '静态路由,使内网的所有外部访问都指向外网网关,网关是运营商提供的.
8 w* m% `: o4 j! O3 Y[Huawei]ip route-static 192.168.2.0 255.255.255.0 1.1.1.3  '静态路由,所有访问192.168.2.X的请求指向1.1.1.3
[Huawei]ip route-static 192.168.4.0 255.255.255.0 1.1.1.4  '静态路由,所有访问192.168.4.X的请求指向1.1.1.4
[Huawei]                                                                        '可以根据需要自己再增加
" ?  K# j* Z' l) O8 I: [# Q<Huawei>
' L# {7 Z2 j1 p: x! o2 {' C! A刚开始搞不明白为什么路由器上的接口可以设置IP地址,交换机上的就不行,输入命令时经常搞错,所以遇到路由器就在接口上设置IP,交换机就在Vlanif接口上设置IP就行,也不知我的想法对不.
4 ~( C9 e; u" i8 v. T, P; n
' R/ J/ H1 t- a, U& }

接下来配置S5700核心交换机,配置如下:

---

[Huawei]undo info-center enable
Info: Information center is disabled.
[Huawei]vlan 100
, e) b8 s0 U) M7 f[Huawei-vlan100]q
[Huawei]interface vlanif 100
[Huawei-Vlanif100]ip address 1.1.1.2 24
[Huawei-Vlanif100]q
; m4 S3 H8 J  M6 z. q7 M! [* T5 R[Huawei]interface giga 0/0/22
" s% z$ e4 f' i# a8 j1 j! d[Huawei-GigabitEthernet0/0/22]port link-type trunk                      '交换机和交换机之间连接用trunk接口
5 c% h4 C( n$ Y4 R
[Huawei-GigabitEthernet0/0/22]port trunk allow-pass vlan 100 2     '允许通过vlan100和vlan2
[Huawei-GigabitEthernet0/0/22]q
[Huawei]ip route-static 0.0.0.0 0.0.0.0 1.1.1.1
[Huawei]interface giga 0/0/24

, \5 F: W- g. d1 @6 x[Huawei-GigabitEthernet0/0/24]port link-type access
[Huawei-GigabitEthernet0/0/24]port default vlan 100
: U# }! C& o  a4 l[Huawei-GigabitEthernet0/0/24]q
[Huawei]interface giga 0/0/23
7 K/ [* I; H& B[Huawei-GigabitEthernet0/0/23]port link-type trunk                     '同上面22接口
/ [5 |( V  j' N, x" @[Huawei-GigabitEthernet0/0/23]port trunk allow-pass vlan 100 4    '允许通过vlan100和vlan4
0 i9 j/ k0 L2 U* I, S! f[Huawei-GigabitEthernet0/0/23]q
1 {# h, N6 O& u3 _2 T% q) c. T0 i
. [4 q* m3 V' g7 W& h& L  b

% b+ Y* `& g- Z/ y  C下面配置S3700交换机,属于vlan2

---

[Huawei]undo info-center enable
8 U4 V( Q* K( j5 P/ vInfo: Information center is disabled.
[Huawei]vlan 100
+ z) F& J) L7 m7 v; d. B% H[Huawei-vlan100]q
! ?# R  b- e: w1 x[Huawei]interface eth 0/0/22
[Huawei-Ethernet0/0/22]ip address 1.1.1.3 24  '在这个地方出错了,不允许在接口上设置IP
                          ^
Error: Unrecognized command found at '^' position.
& N* T+ L0 k' h$ c& t[Huawei-Ethernet0/0/22]port link-type trunk
[Huawei-Ethernet0/0/22]port trunk allow-pass vlan 100 2
, Y, q. L& u' i/ z[Huawei-Ethernet0/0/22]q
[Huawei]interface vlanif 100
# f9 P7 L8 o6 n" ~. T7 E[Huawei-Vlanif100]ip address 1.1.1.3 24
' j1 I; y6 `5 ?' t[Huawei-Vlanif100]q
& S, Q0 {  x' k, _5 _% }[Huawei]vlan 2
[Huawei-vlan2]q
[Huawei]interface vlanif 2
[Huawei-Vlanif2]ip address 192.168.2.1 24
[Huawei-Vlanif2]q
1 D  K$ S2 I0 J[Huawei]ip route-static 0.0.0.0 0.0.0.0 1.1.1.1
[Huawei]interface eth 0/0/1
[Huawei-Ethernet0/0/1]port hybrid untagged vlan 2

[Huawei-Ethernet0/0/1]port hybrid pvid vlan 2
) D/ L2 o) v) y" `- s1 W

[Huawei-Ethernet0/0/1]port hybrid untagged vlan 100 2
& |6 j, W& x; ?2 O; J$ z- s7 t[Huawei-Ethernet0/0/1]dis this         ' 查看一下接口信息
, U% x4 S2 N! W9 d#
" m7 d2 {8 U% Y  P. N- k& S1 `! W8 t% binterface Ethernet0/0/1
port hybrid pvid vlan 2
% p7 j1 }2 q4 S# i port hybrid untagged vlan 2 100
& y% G4 U4 p) A: n#
return
, n- Z" Q) }! A9 g5 y" d: q! R

  p$ r* B, B  q" @1 J/ j; h

下面配置S3700-2交换机,属于vlan4

---

[Huawei]undo info-center enable
Info: Information center is disabled.
. R( n2 w  t5 c0 H" s$ _) n[Huawei]vlan 100
[Huawei-vlan100]q
8 `6 a- {7 l) F: `4 y5 y[Huawei]interface vlanif 100
. p5 ~! F$ x1 p5 S! ]9 ~  m- ~[Huawei-Vlanif100]ip address 1.1.1.4 24
+ P( y' I+ X' w: v8 c, S& T[Huawei-Vlanif100]q
2 Y# M/ Y. N  Q[Huawei]interface eth 0/0/22
0 h: F' a( t, o+ o/ o& y* l; q[Huawei-Ethernet0/0/22]port link-type trunk
[Huawei-Ethernet0/0/22]port trunk allow-pass vlan 100 4
[Huawei-Ethernet0/0/22]dis this
# x1 D  {& O) Q2 V) k#
: g; H+ Q: \' z1 k+ e& @  q$ Qinterface Ethernet0/0/22
* `6 D9 P+ _+ Z3 g0 `+ H7 h, H& s port link-type trunk
9 C/ P6 y* I, l" E port trunk allow-pass vlan 4 100
- v. E" k1 T& A% B#
return
[Huawei-Ethernet0/0/22]q
[Huawei]vlan 4
' J# f' c; @3 W: Q0 d[Huawei-vlan4]q
$ d' x3 j- L0 U% l" q

[Huawei]interface vlanif 4
: H" \9 T) b( y) e, S* V5 j1 Z4 c[Huawei-Vlanif4]ip address 192.168.4.1 24
[Huawei-Vlanif4]q
[Huawei]ip route-static 0.0.0.0 0.0.0.0 1.1.1.1
[Huawei]ping 192.168.4.1
# c: @9 \' l* A5 j0 U* H  PING 192.168.4.1: 56  data bytes, press CTRL_C to break
    Reply from 192.168.4.1: bytes=56 Sequence=1 ttl=255 time=20 ms
: x1 k" u4 G0 T7 h! R, h) l: R    Reply from 192.168.4.1: bytes=56 Sequence=2 ttl=255 time=10 ms
% e2 l( S2 g* G1 t' u    Reply from 192.168.4.1: bytes=56 Sequence=3 ttl=255 time=1 ms
' [: u0 F5 }, Z. k    Reply from 192.168.4.1: bytes=56 Sequence=4 ttl=255 time=30 ms
# s6 m$ C5 q5 V3 ^    Reply from 192.168.4.1: bytes=56 Sequence=5 ttl=255 time=1 ms
  --- 192.168.4.1 ping statistics ---
& ^: S. q& `; J# u6 B9 Q: r% g    5 packet(s) transmitted
9 L3 I5 M1 X' B- G6 V& T    5 packet(s) received
    0.00% packet loss
    round-trip min/avg/max = 1/12/30 ms
  ~4 a: F- [" M+ m" A  [[Huawei]interface eth 0/0/1
2 F+ O! l( x2 P7 }8 ]+ a* V1 P* s* \% n

[Huawei-Ethernet0/0/1]port hybrid untagged vlan 100 4
2 ?/ r# z4 i! L3 @5 j. ^( s8 D) X[Huawei-Ethernet0/0/1]port hybrid pvid vlan 4

[Huawei-Ethernet0/0/1]q
1 F- J* e3 }$ x$ p
& Z4 q8 s: a) p* j% J

---

好了,交换机和路由器的设置就完成了,把两个PC客户端配置好IP地址就可以试试效果了,但由于是模拟器的原因,在长间没有使用时,有时候会有ping不通的情况,在我这里两个都能ping通外网,vlan2和vlan4之间也能互通.在真实的设备上我们可以启用web界面和telnet,然后通过1.1.1.1,1.1.1.2,1.1.1.3这些地址来访问和管理路由器和交换机了,端口隔离,mac黑洞之类的配置可以在web界面上操作,谁让咱会的太少了.下面是前两个例子的地址,从简到稍难

admin

首先配置AR2220,设置GE0接口IP为固定外网地址,设置GE1接口IP为1.1.1.1,然后做两条静态路由,创建vlan 100,红色文本是需要特别多看几眼的,代码如下:

---

[Huawei]vlan 100

( T. U3 ^; L7 g4 w% U

[Huawei-vlan100]q

[Huawei]acl number 2000

( a# Y2 j8 x3 V5 Q

[Huawei-acl-basic-2000]rule 5 permit source 192.168.0.0 0.0.255.255

7 q" G3 M* Z2 q. J* L9 A! B5 q

[Huawei-acl-basic-2000]q

[Huawei]interface giga 0/0/0

( ~/ h- Z. d3 O) O) i/ b8 _

[Huawei-GigabitEthernet0/0/0]ip address 192.168.1.3 255.255.255.0

[Huawei-GigabitEthernet0/0/0]

  e* E) H* O' r/ b

Mar 13 2014 07:34:12-05:13 Huawei %IFNET/4/LINK_STATE(l)[1]:The line protocol

: H$ a1 p) M. e. A3 ]

IP on the interface GigabitEthernet0/0/0 has entered the UP state.

6 l1 w, ]! L' u5 e! ~% h8 R/ o6 _

[Huawei-GigabitEthernet0/0/0]q

[Huawei]interface giga 0/0/1

[Huawei-GigabitEthernet0/0/1]ip address 1.1.1.1 255.255.255.0

! \. m0 K3 I4 ?. `8 @/ F9 H1 L9 Q

[Huawei-GigabitEthernet0/0/1]q

[Huawei]ip route-static 0.0.0.0 0.0.0.0 192.168.1.1

  R  z, ^9 N+ y! P7 j$ X+ X( S

[Huawei]ip route-static 192.168.0.0 255.255.0.0 1.1.1.2

2 ^  b5 W- \" u4 E) G

[Huawei]q

/ t3 p" V1 b6 O! d3 v1 T, k

save

  The current configuration will be written to the device.

2 M/ u! Z4 ~# x5 }6 @; w  W' R

  Are you sure to continue? (y/n)[n]:y

2 Z* y2 H, V; T: T

  It will take several minutes to save configuration file, please wait..........

6 z# i- Q. I0 h$ T& m' g3 ~

3 O4 K7 c, w4 ~3 q6 a

  Configuration file had been saved successfully

  Note: The configuration file will take effect after being activated

: L: t. C5 w; s. [' U
9 K: x. Y, J& s' Z, p  Z

Mar 13 2014 07:37:25-05:13 Huawei ARP/4/ARP_IPCONFLICT_TRAP:OID 16777216.50331648

1 q$ j) \5 n# x& E: P  x

.100663296.16777216.67108864.16777216.3674669056.83886080.419430400.2063597568.33

554432.100663296 ARP detects IP conflict. (IP address=201.1.168.192, Local interf

ace=GigabitEthernet0/0/0, Local MAC=4437-e68c-b212, Local vlan=0, Local CE vlan=0

, Receive interface=GigabitEthernet0/0/0, Receive MAC=1c1a-c00f-253f, Receive vla

n=0, Receive CE vlan=0, IP conflict type=Remote IP conflict).

. p7 n6 z. ]2 i7 I+ Z' l
8 i; M3 a) M) e- u; K# D8 |

---

接下来配置S5700交换机,GE1接口IP为1.1.1.2,属于vlan100,GE2接口属于vlan1,GE3接口属于vlan2,代码如下

---

[Huawei]vlan batch 2 4 6 8 100

Info: This operation may take a few seconds. Please wait for a moment...done.

[Huawei]

2 j# f  I$ e1 X: g3 B

Mar 13 2014 10:38:34-08:00 Huawei DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.

25.191.3.1 configurations have been changed. The current change number is 4, the

change loop count is 0, and the maximum number of records is 4095.

[Huawei]interface vlanif 100

: W3 U! U# z/ N2 U& ^* L

[Huawei-Vlanif100]ip address 1.1.1.2 255.255.255.0

9 A% p; a4 A; R3 A$ q2 n+ }9 o- r

[Huawei-Vlanif100]

Mar 13 2014 10:40:14-08:00 Huawei DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.

% y$ H$ Z3 s) v% O( H# T

25.191.3.1 configurations have been changed. The current change number is 6, the

change loop count is 0, and the maximum number of records is 4095.

[Huawei-Vlanif100]q

[Huawei]interface giga 0/0/1

$ _; L1 I5 G  {% w4 G  ]

[Huawei-GigabitEthernet0/0/1]port link-type access

/ F7 x# s0 c7 g) N

[Huawei-GigabitEthernet0/0/1]port default vlan 100

3 ^4 M7 t7 I; Q$ q) R4 b0 E

[Huawei-GigabitEthernet0/0/1]q

[Huawei]ip route-static 0.0.0.0 0.0.0.0 1.1.1.1

  x3 w+ v0 p' o# E

[Huawei]

Mar 13 2014 10:43:24-08:00 Huawei DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.

25.191.3.1 configurations have been changed. The current change number is 9, the

7 @, |* X  M/ }+ c; F5 j

change loop count is 0, and the maximum number of records is 4095.

[Huawei]interface vlanif 1

  w1 b6 {  \% b; Y1 Z# ~: r% }! {5 P

[Huawei-Vlanif1]ip address 192.168.0.1 255.255.255.0

* y( s+ L; A/ v" O

[Huawei-Vlanif1]q

[Huawei]interface vlanif 2

[Huawei-Vlanif2]ip address 192.168.2.1 255.255.255.0

: s" j0 j+ l0 S% w

[Huawei-Vlanif2]q

[Huawei]interface giga 0/0/3

: f; G& A$ T' O+ y8 J( T

[Huawei-GigabitEthernet0/0/3]port link-type access

[Huawei-GigabitEthernet0/0/3]port default vlan 2

[Huawei-GigabitEthernet0/0/3]

[Huawei]q

4 {$ I" f- g/ L/ {" F1 u- x

save

6 f  j7 R; v+ h/ M3 V

The current configuration will be written to the device.

Are you sure to continue?[Y/N]y

Now saving the current configuration to the slot 0.

$ Y6 z5 P- G7 l

Mar 13 2014 11:02:44-08:00 Huawei %CFM/4/SAVE(l)[11]:The user chose Y when dec

, d  Z. Q4 _5 W5 W6 r

iding whether to save the configuration to the device.

4 ^& b8 m1 K  @/ i  h, [4 r& Y3 R

Save the configuration successfully.

9 a" G- \) p7 Q6 ?  c: b
+ p' A. H# u: W4 u% M' Y2 h$ |

---

然后设置PC1和PC2的IP地址,先ping 1.1.1.1,如果没有问题再ping 192.168.1.3,192.168.1.111,202.99.192.66,一路ping下来是不是感觉有点小成就感,如果PC2无法ping通,那么就像昨天一样,在自己的真实路由器上做个静态路由指向192.168.2.0便可以了.需要的可以下载附件导出配置文件看.

) b' ~" n" Z/ ?, U; [" V