资源描述：
《H3C路由多vlan上网经典配置》由会员上传分享，免费在线阅读，更多相关内容在工程资料-天天文库。
1、H3C路由多vlan上网经典配置Theh3crouteristypicallyconfiguredontheInternetThethreelayerswitchesareconfiguredasfollows:Intranet5VLVL10,VL20,VL30,VL40,VL50Youcanplan:192.168.10.0/24192.168.20.0/24192.168.30.0/24192.168.40.0/24192.168.50.0/24Thefivesegment.S3600ist
2、hegatewaydeviceforthefivenetworksegments,andconfiguresfiveVLANinterfaces:Intvian10to50intvlanIPadd192.168.10.124IPadd192.168.20.124IPadd192.168.30.124IPadd192.168.40.124IPadd192.168.50.124ConfigureoneinterconnectionVLANinterfacewithmsr20-20:Intvlan10
3、0IPadd192.168.100.2/24Andconfigurethedefaultroute:IProute0.0.0.0.0.0.0.0.0192.168.100.1(pointstotheinterconnectionIPaddressofmsr20-20)Fortherequirementsof10,30,50togotothepublicwebbutnottoeachother,theACLimplementationcanbedoneonS3600:Theaclnum3000Ru
4、ledenyIPsource192.168.10.0.0.255destination192.168.300.0.255RuledenyIPsource192.168.10.0.0.255destination192.168.50.0.0.255Theaclnum3001RuledenyIPsource192.168.300.0.255destination192.168.50.0.0.255AccesstoVL10,sport:Intel/0/10(forexample,thisportisc
5、onnectedtoVL10segment)IPpacket-filterstheinbound-group,3000EntertheportthatVL30belongsto:Intel/0/10(forexample,thisportconnectstoVL30)IPpacket-filterstheinbound-group,3001Thisway,VL10VL30VL50isavailableforInternetaccess,butnotformutualvisits・Msr20-20
6、configuration:publicIPIP60.2.3.2255.255.255.255.255.255.255.255.255.255.255.255.255.255.255・255.255.255.255.255.255.255.255.255.255.255.255.255.255.255.255.255.255.255.255.255.255.255.255.255.255.25Inte0/0IPadd60.2.3.2255.255.252Theroute-stac0.0.0.0.
7、0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0IntranetIPaddress:192.168.100.1/24whichisaninterconnectionportwithS3600,suchasel/0port:InteO/1IPadd192.168.100.124Configurereturnroutes:IProute一static192.168.10.0255.0.0192.168.100.2IProute一static192
8、.168.30.255.0.0192.168.100.2IProute一static192.168.50.0255.0.0192.168.100.2BecauseonlythesethreeVLcanbeconnectedtotheInternet,it'sgoingtobeforwardedbymsr20~20,sojustwritethesethreeVLreturnroutes・ConfigureNATtranslation:Theaclnum2000Rulepermitsource192
