- 拓扑
Untitled.png
- 实验要求
- 防火墙划分三个子接口
- 子接口都属于trust域
- 交换机端口划入特定vlan
- trunk链路上启用dot1q
- R1、R2、R3互通
- 实验配置
-
防火墙配置
防火墙配置 interface GigabitEthernet1/0/3.10 vlan-type dot1q 10 ip address 10.3.10.1 255.255.255.0 interface GigabitEthernet1/0/3.20 vlan-type dot1q 20 ip address 10.3.20.1 255.255.255.0 interface GigabitEthernet1/0/3.30 vlan-type dot1q 30 ip address 10.3.30.1 255.255.255.0 -
交换机配置
交换机配置 interface Ethernet0/0 switchport trunk encapsulation dot1q switchport trunk allowed vlan 10,20,30 switchport mode trunk Switch(config)#int e0/1 Switch(config-if)#switchport mode access Switch(config-if)#switchport access vlan 10 Switch(config)#int e0/2 Switch(config-if)#switchport mo access Switch(config-if)#switchport access vlan 20 Switch(config)#int e0/3 Switch(config-if)#switchport mo access Switch(config-if)#switchport access vlan 30 -
R1、R2、R3配置
R1、R2、R3配置 R1(config)#interface ethernet 0/0 R1(config-if)#ip address 10.3.10.100 255.255.255.0 R1(config)#no ip routing R1(config)#ip default-gateway 10.3.10.1 R2(config)#interface ethernet 0/0 R2(config-if)#ip address 10.3.20.100 255.255.255.0 R2(config)#ip route 0.0.0.0 0.0.0.0 10.3.20.1 R3(config)#interface ethernet 0/0 R3(config-if)#ip address 10.3.30.100 255.255.255.0 R3(config)#ip route 0.0.0.0 0.0.0.0 10.3.30.1
-
