三层交换机配置

知识点：三层交换机配置VLAN的缺点

VLAN隔离了二层广播域，也就严格地隔离了各个VLAN之间的任何流量，分属于不同VLAN的用户不能互相通信。VLAN100VLAN200Port1Port2VLAN间通信VLAN100VLAN200Port1Port2Port3VLAN100Port5VLAN200Ethernet1192.168.100.1Ethernet0192.168.200.1192.168.200.200192.168.100.100每个VLAN一个物理连接

在二层交换机上配置VLAN，每一个VLAN使用一条独占的物理连接连接到路由器的一个接口上。VLAN100VLAN300Ethernet2Ethernet0VLAN200Ethernet1使用VLANTrunking

二层交换机和路由器之间相连的接口配置VLANTrunking，使多个VLAN共享同一条物理链路连接到路由器VLAN100VLAN300VLAN200TrunkEthernet0.300Ethernet0.200Ethernet0.100交换和路由的集成

二层交换机和路由器在功能上的集成构成了三层交换机，三层交换机在功能上实现了VLAN的划分、VLAN内部的二层交换和VLAN间路由的功能。VLAN300VLAN100VLAN200VLAN100VLAN200VLAN300二层交换机三层交换机三层交换机功能模型10.110.0.113/24GW:10.110.0.25410.110.1.69/24GW:10.110.1.25410.110.1.88/24GW:10.110.1.25410.110.2.200/24GW:10.110.2.254VLAN10010.110.0.254/24VLAN20010.110.1.254/24VLAN30010.110.2.254/24单臂路由配置—交换机配置[SWA]vlan100[SWA-vlan100]portethernet0/1[SWA]vlan200[SWA-vlan200]portethernet0/2[SWA]interfaceethernet0/24[SWA-Ethernet0/24]portlink-typetrunk[SWA-Ethernet0/24]porttrunkallow-passvlanallEthernet0/1Port24TrunkSWARTA单臂路由配置—路由器配置[RTA]interfaceethernet0/1.1[RTA-Ethernet0/1.1]dot1qterminationvid100[RTA-Ethernet0/1.1]arpbroadcastenable[RTA-Ethernet0/1.1]ipaddress192.168.10.1255.255.255.0[RTA]interfaceethernet0/1.2[RTA-Ethernet0/1.2]dot1qterminationvid200[RTA-Ethernet0/1.2]arpbroadcastenable[RTA-Ethernet0/1.2]ipaddress192.168.20.1255.255.255.0Ethernet0/1Port24TrunkSWARTA单臂路由配置—检测连通性C:\>ping192.168.20.20Pinging192.168.20.20with32bytesofdata:Replyfrom192.168.20.20:bytes=32time=2msTTL=254Replyfrom192.168.20.20:bytes=32time=1msTTL=254Replyfrom192.168.20.20:bytes=32time=1msTTL=254Replyfrom192.168.20.20:bytes=32time=1msTTL=254Pingstatisticsfor192.168.20.20:Packets:Sent=4,Received=4,Lost=0(0%loss),Approximateroundtriptimesinmilli-seconds:Minimum=1ms,Maximum=2ms,Average=1msVLAN100里的主机192.168.10.10使用ping命令测试与VLAN200里的主机192.168.20.20的连通性三层交换机配置VLAN100VLAN200IP:192.168.20.20GW:192.168.20.1IP:192.168.10.10GW:192.168.10.1Port2Port1SWA三层交换机配置—交换机配置SWA[SWA]interfacevlanif100[SWA-Vlanif1]ipadd192.168.10.1255.255.255.0[SWA]interfacevlanif200[SWA-Vlanif200]ipadd192.168.20.1255.255.255.0创建VLAN三层接口三层交换机配置—检测连通性C:\>ping192.168.20.20Pinging192.168.20.20with32bytesofdata:Replyfrom192.168.20.20:bytes=32time=2msTTL=254Replyfrom192.168.20.20:bytes=32time=1msTTL=254Replyfrom192.168.20.20:bytes=32time=1msTTL=254Replyfrom192.168.20.20:bytes=32time=1msTTL=254Pingstatisticsfor192.168.20.20:Packets:Sent=4,Received=4,Lost=0(0%loss),Approximateroundtript