华为企业网二层交换、三层交换、出口路由组网配置（静态路由）

1. 组网需求某企业内网PC1 与 PC2 分别属于 VLAN10 和 VLAN20用户网关均部署在三层核心交换机 上。接入层为二层交换机仅提供二层交换功能核心交换机与出口路由器通过 VLAN99 进行三层互联实现外网路由转发。2. 配置思路vlan trunk配置VLANIF网关配置物理接口IP配置静态路由配置终端网络测试3. 配置步骤步骤① vlan trunk配置1. 接入交换机VLAN trunk配置。[SW1] vlan batch 10 20 [SW1] interface GigabitEthernet 0/0/22 [SW1-GigabitEthernet0/0/22] port link-type trunk [SW1-GigabitEthernet0/0/22] port trunk allow-pass vlan 10 20 [SW1-GigabitEthernet0/0/22] quit [SW1] interface GigabitEthernet 0/0/1 [SW1-GigabitEthernet0/0/1] port link-type access [SW1-GigabitEthernet0/0/1] port default vlan 10 [SW1-GigabitEthernet0/0/1] quit [SW1] interface GigabitEthernet 0/0/2 [SW1-GigabitEthernet0/0/2] port link-type access [SW1-GigabitEthernet0/0/2] port default vlan 20 [SW1-GigabitEthernet0/0/2] quit2. 核心交换机VLAN trunk配置。[SW2] vlan batch 10 20 99 [SW2] interface GigabitEthernet 0/0/22 //连接SW2的接口 [SW2-GigabitEthernet0/0/22] port link-type trunk [SW2-GigabitEthernet0/0/22] port trunk allow-pass vlan 10 20 [SW2-GigabitEthernet0/0/22] quit [SW2] interface GigabitEthernet 0/0/24 //连接路由器的接口 [SW2-GigabitEthernet0/0/24] port link-type access [SW2-GigabitEthernet0/0/24] port default vlan 99 [SW2-GigabitEthernet0/0/24] quit步骤② VLANIF网关配置# 核心交换机VLANIF用户网关配置。[SW2] interface vlanif 10 [SW2-vlanif10] ip address 192.168.10.254 24 [SW2-vlanif10] quit [SW2] interface vlanif 20 [SW2-vlanif20] ip address 192.168.20.254 24 [SW2-vlanif20] quit步骤③ 物理接口IP配置1. 出口路由器接口IP地址配置。[Router] interface GigabitEthernet 0/0/1 [Router-GigabitEthernet0/0/1] ip address 12.1.1.2 30 [Router-GigabitEthernet0/0/1] quit [Router] interface GigabitEthernet 0/0/2 [Router-GigabitEthernet0/0/2] ip address 192.168.99.2 24 [Router-GigabitEthernet0/0/2] quit2. 核心交换机互联出口路由器地址配置。[SW2] interface vlanif 99 [SW2-vlanif99] ip address 192.168.99.1 24 [SW2-vlanif99] quit步骤④ 静态路由配置1.出口路由器配置缺省路由指向公网静态路由指向内网核心交换机vlan10及vlan20对应的网段。[Router] ip route-static 192.168.10.0 24 192.168.99.1 [Router] ip route-static 192.168.20.0 24 192.168.99.1 [Router] ip route-static 0.0.0.0 0 12.1.1.12. 核心交换机配置默认路由下一跳是出口路由器。[SW2] ip route-static 0.0.0.0 0.0.0.0 192.168.99.2步骤⑤ 终端网络测试# 电脑手动配置静态IP地址、子网掩码、网关等参数ping测试用户网关和出口路由器网络正常。