中小型企业网络架构搭建分支篇之底层互通vlan、三层交换机出口路由器配置

说明：这里有A、B2VLAN，A的流量通过，而接入用户的接口则为Access，加入到对应VLAN，连接AP的接口比较特殊，因为有管理VLAN与业务VLAN存在，所以可以是Hybrid端口，或者是Trunk。AVLAN[Branch-sw-A]vlan[Branch-sw-A]vlan[Branch-sw-A]int[Branch-sw-A-Ethernet0/4/6]portlink-typetrunk[Branch-sw-A-Ethernet0/4/6]porttrunkpermitvlan2toTrunkVLANVLAN2VLAN[Branch-sw-A]int[Branch-sw-A-Ethernet0/4/2]descriptionconnectiontoAP[Branch-sw-A-Ethernet0/4/2]portlink-typehybrid[Branch-sw-A-Ethernet0/4/2]porthybrid vlan3taggedHybrid，VLAN3Tag，VLAN3VLANVLAN1理VLAN存在。默认情况下VLAN1是不打Tag的。[Branch-sw-A]port-groupmanual[Branch-sw-A-port-group-manual-1]group-memberEthernet0/4/0toe0/4/1[Branch-sw-A-port-group-manual-1]group-memberEthernet0/4/3toe0/4/5[Branch-sw-A-port-group-manual-1]portaccessvlan2不跟一样为Hybrid接口。[Branch-sw-B]vlan[Branch-sw-B-vlan4]name[Branch-sw-B-vlan4]vlan5[Branch-sw-B]intEthernet[Branch-sw-B-Ethernet0/4/7]portlink-typetrunk[Branch-sw-B-Ethernet0/4/7]porttrunkpermitvlan4to[Branch-sw-B]port-groupmanual[Branch-sw-B-port-group-manual-1]group-memberEthernet0/4/0toEthernet0/4/4[Branch-sw-B-port-group-manual-2]portaccessvlan4[Branch-sw-B]port-groupmanual[Branch-sw-B-port-group-manual-2]group-memberEthernet0/4/5toe0/4/6[Branch-sw-B-port-group-manual-2]portaccessvlan5[Core-sw]vlan2to[Core-sw]int[Core-sw-Ethernet0/4/6]porttrunkpermitvlan2to[Core-sw]interface[Core-sw-Ethernet0/4/7]porttrunkpermitvlan4toIPDHCP5VLANAPDHCPOption43VLAN4VLAN，给它们分配地址。[Core-sw]dhcpenable[Core-sw]dhcpserverip-pool 192.168.1.0[Core-sw-dhcp-pool-vlan1]option43hex8007000001c0A801[Core-sw]dhcp [Core-sw]dhcpserverip-pool[Core-sw]dhcpserverip-pool[Core-sw]dhcpserverip-pool 的，所以这里AP必须有Option43，到总部的AC上面，后续通过 [Core-sw]dhcpserverforbidden-ip172.16.1.254[Core-sw]dhcpserverforbidden-ip[Core-sw]dhcpserverforbidden-ip172.16.3.254[Core-sw]dhcpserverforbidden-ip172.16.4.254[Core-sw]dhcpserverforbidden-ip172.16.5.254[Core-sw]intvlan[Core-sw-Vlan-interface1]ipaddress172.16.1.25424 [Core-sw]interfacevlan[Core-sw-Vlan-interface2]ipaddress172.16.2.25424 [Core-sw]interfacevlan select [Core-sw]interfaceVlan-interface[Core-sw-Vlan-interface4]ipaddress172.16.4.25424 [Core-sw]interfaceVlan-interface select [GW]interface[Core-sw]iproute-static0.0.0.00[GW]iproute-static172.16.2.024[GW]iproute-static172.16.3.024[GW]iproute-static172.16.4.024[GW]iproute-static172.16.5.024ISP[GW]interfaceDialer1[GW-Dialer1]dialer-group1[GW-Dialer1]dialerbundle[GW-Dialer1]ipaddressppp-[GW-Dialer1]ppppaplocal-userccieh3cpasswordsimple[GW-Dialer1]mtu1460[GW]intg0/0/0 部署默认路由指向ISP[GW]iproute-s