Routeros5.20与华为S5120-52C-EI交换机组网
的有关信息介绍如下:配置思路: 交换机当三层交换使用。Routeros5.20接到vlan500下面。交换机划分vlan101-107,500,其中vlan101-106接到接入层交换机上,网段为172网段,vlan107为10网段,分给服务器,vlan500接路由器,网关为192.168.2.200。vlan101-106网关172.18.1.1-172.18.16.1。vlan107网关10.1.1.1。vlan500网关192.168.2.200接路由器,路由器IP:192.168.2.1。
一、 华三交换机配置:
交换机分别做svi接口配置,vlan配置,DHCP服务配置,默认路由配置。
1、 SecureCRT连接交换机并上电。如下图:
2、 VLAN配置。创建vlan101-107, 500。并把相应的端口加入vlan。
3、 分别给每个Vlan配 SVI接口,如下图:
4、分别增加DHCP服务器,并指定到相应的svi接口中,如下图:
5、将要把路由器接到vlan500下面,增加默认路由,如下图:
最后保存退出:save-->quit。
命令详情如下:
System View: return to User View with Ctrl+Z.
[H3C]dis cu
#
version 5.20, Release 2221P15
#
sysname H3C
#
irf mac-address persistent timer
irf auto-update enable
undo irf link-delay
#
domain default enable system
#
password-recovery enable
#
vlan 1
#
vlan 101 to 107
#
vlan 500
#
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
dhcp server ip-pool vlan101/1/2
network 172.18.1.0 mask 255.255.255.0
gateway-list 172.18.1.1
dns-list 222.172.200.68 61.166.150.101
#
dhcp server ip-pool vlan102/3/4
network 172.18.2.0 mask 255.255.255.0
gateway-list 172.18.2.1
dns-list 222.172.200.68 61.166.150.101
#
dhcp server ip-pool vlan103/5/6
network 172.18.3.0 mask 255.255.255.0
gateway-list 172.18.3.1
dns-list 222.172.200.68 61.166.150.101
#
dhcp server ip-pool vlan104/7/8
network 172.18.4.0 mask 255.255.255.0
gateway-list 172.18.4.1
dns-list 222.172.200.68 61.166.150.101
#
dhcp server ip-pool vlan105/9/10
network 172.18.5.0 mask 255.255.255.0
gateway-list 172.18.5.1
dns-list 222.172.200.68 61.166.150.101
#
dhcp server ip-pool vlan106/11/12
network 172.18.6.0 mask 255.255.255.0
gateway-list 172.18.6.1
dns-list 222.172.200.68 61.166.150.101
#
dhcp server ip-pool vlan107/45/46
network 10.1.1.0 mask 255.255.255.0
gateway-list 10.1.1.1
dns-list 222.172.200.68 61.166.150.101
#
user-group system
group-attribute allow-guest
#
interface NULL0
#
interface Vlan-interface101
ip address 172.18.1.1 255.255.255.0
#
interface Vlan-interface102
ip address 172.18.2.1 255.255.255.0
#
interface Vlan-interface103
ip address 172.18.3.1 255.255.255.0
#
interface Vlan-interface104
ip address 172.18.4.1 255.255.255.0
#
interface Vlan-interface105
ip address 172.18.5.1 255.255.255.0
#
interface Vlan-interface106
ip address 172.18.6.1 255.255.255.0
#
interface Vlan-interface107
ip address 10.1.1.1 255.255.255.0
#
interface Vlan-interface500
ip address 192.168.2.200 255.255.255.0
#
interface GigabitEthernet1/0/1
port access vlan 101
#
interface GigabitEthernet1/0/2
port access vlan 101
#
interface GigabitEthernet1/0/3
port access vlan 102
#
interface GigabitEthernet1/0/4
port access vlan 102
#
interface GigabitEthernet1/0/5
port access vlan 103
#
interface GigabitEthernet1/0/6
port access vlan 103
#
interface GigabitEthernet1/0/7
port access vlan 104
#
interface GigabitEthernet1/0/8
port access vlan 104
#
interface GigabitEthernet1/0/9
port access vlan 105
#
interface GigabitEthernet1/0/10
port access vlan 105
#
interface GigabitEthernet1/0/11
port access vlan 106
#
interface GigabitEthernet1/0/12
port access vlan 106
#
interface GigabitEthernet1/0/13
port access vlan 102
#
interface GigabitEthernet1/0/14
port access vlan 102
#
interface GigabitEthernet1/0/15
port access vlan 103
#
interface GigabitEthernet1/0/16
port access vlan 103
#
interface GigabitEthernet1/0/17
port access vlan 104
#
interface GigabitEthernet1/0/18
port access vlan 104
#
interface GigabitEthernet1/0/19
port access vlan 105
#
interface GigabitEthernet1/0/20
port access vlan 105
#
interface GigabitEthernet1/0/21
port access vlan 106
#
interface GigabitEthernet1/0/22
port access vlan 106
#
interface GigabitEthernet1/0/23
port access vlan 102
#
interface GigabitEthernet1/0/24
port access vlan 102
#
interface GigabitEthernet1/0/25
port access vlan 103
#
interface GigabitEthernet1/0/26
port access vlan 103
#
interface GigabitEthernet1/0/27
port access vlan 104
#
interface GigabitEthernet1/0/28
port access vlan 104
#
interface GigabitEthernet1/0/29
port access vlan 105
#
interface GigabitEthernet1/0/30
port access vlan 105
#
interface GigabitEthernet1/0/31
port access vlan 106
#
interface GigabitEthernet1/0/32
port access vlan 106
#
interface GigabitEthernet1/0/33
#
interface GigabitEthernet1/0/34
#
interface GigabitEthernet1/0/35
#
interface GigabitEthernet1/0/36
#
interface GigabitEthernet1/0/37
#
interface GigabitEthernet1/0/38
#
interface GigabitEthernet1/0/39
#
interface GigabitEthernet1/0/40
#
interface GigabitEthernet1/0/41
#
interface GigabitEthernet1/0/42
#
interface GigabitEthernet1/0/43
#
interface GigabitEthernet1/0/44
#
interface GigabitEthernet1/0/45
port access vlan 107
#
interface GigabitEthernet1/0/46
port access vlan 107
#
interface GigabitEthernet1/0/47
port access vlan 500
#
interface GigabitEthernet1/0/48
port access vlan 500
#
interface GigabitEthernet1/0/49
shutdown
#
interface GigabitEthernet1/0/50
shutdown
#
interface GigabitEthernet1/0/51
shutdown
#
interface GigabitEthernet1/0/52
shutdown
#
dhcp-snooping
#
ip route-static 0.0.0.0 0.0.0.0 192.168.2.1
#
dhcp enable
#
load xml-configuration
#
user-interface aux 0
user-interface vty 0 15
#
return
[H3C]
二、 路由器配置(我这里采用静态IP上网)
1、 设置Routeros能正常上网,如下图:
1.1、新建两个桥bridge1_lan和bridge2_wan:
1.2、把相应的物理端口添加到bridge中。如下图:
1.3、分别添加内网IP和外网IP并指到相应的桥,如下图:
1.4、添加DNS,如下:
1.5、添加DHCP服务器,然后就一直点下一步,详情如下:
1.6、添加nat地址转换:
1.7添加默认路由:
2、配置回程路由指到交换机Vlan500的SVI接口
以上的设置routeros可以正常上网了,下面增加一条回程路由指到三层交换机,保证用户能连到交换机上网。如下图:
至此,Routeros与S5120-52C-EI的配置全部完成。