单臂路由(router-on-a-stick)是指在路由器的一个接口上通过配置子接口(或“逻辑接口”,并不存在真正物理接口)的方式,实现原来相互隔离的不同VLAN(虚拟局域网)之间的互联互通。
交换机连接主机的端口为access链路 交换机连接路由器的端口为trunk链接
路由器的物理接口可以被划分为多个逻辑接口 每个子接口对应一个VLAN网段的网关
2022.4.26
通过在R1路由器上设置单臂路由与三层交换机相连最终实现PC0、PC1、PC2、PC3相连
windows 10 ➕ ensp ➕ cisco
提示:PC0、PC1规划为vlan 2 🔰PC2、PC3规划为vlan 3
switch0(左)
Switch#config t
//划分vlan
Switch(config)#vlan 2
Switch(config-vlan)#vlan 3
Switch(config-vlan)#exit
//端口划分到vlan
Switch(config)#interface FastEthernet0/1
Switch(config-if)#switchport access vlan 2
Switch(config-if)#exit
Switch(config)#interface FastEthernet0/2
Switch(config-if)#switchport access vlan 2
Switch(config)#interface FastEthernet0/3
Switch(config-if)#switchport access vlan 2
Switch(config-if)#shutdown
switch1(右)
Switch#config t
//划分vlan
Switch(config)#vlan 2
Switch(config-vlan)#vlan 3
Switch(config-vlan)#exit
//端口划分到vlan
Switch(config)#interface FastEthernet0/1
Switch(config-if)#switchport access vlan 3
Switch(config-if)#exit
Switch(config)#interface FastEthernet0/2
Switch(config-if)#switchport access vlan 3
Switch(config)#interface FastEthernet0/3
Switch(config-if)#switchport access vlan 3
Switch(config-if)#shutdown
switch2(中)
Switch#config t
//划分vlan
Switch(config)#vlan 2
Switch(config-vlan)#vlan 3
Switch(config-vlan)#exit
//端口划分到vlan
Switch(config)#interface FastEthernet0/1
Switch(config-if)#switchport model trunk //交换机连路由器的端口为trunk链接
Switch(config)#interface FastEthernet0/3
Switch(config-if)#switchport access vlan 2
Switch(config)#interface FastEthernet0/4
Switch(config-if)#switchport access vlan 3
Switch(config-if)#shutdown
router(路由器配置)
>Router(config)#int g0/0
Router(config)#no shut
Router(config-if)#int g0/0.1
Router(config-subif)#encapsulation dot1Q 2 //vlan2
Router(config-subif)#ip add 192.168.10.1 255.255.255.0
Router(config-subif)#exit
Router(config-subif)#int g0/0.2
Router(config-subif)#encapsulation dot1Q 3 //vlan3
Router(config-subif)#ip add 192.168.20.1 255.255.255.0
Router(config-subif)#exit
LSW1
<Huawei>sys
[Huawei]undo info-center enable
[Huawei]vlan 2
[Huawei-vlan2]vlan 3
[Huawei-vlan3]q
[Huawei]int e0/0/1
[Huawei-Ethernet0/0/1]port link-type access
[Huawei-Ethernet0/0/1]port def vlan 2
[Huawei-Ethernet0/0/1]
[Huawei-Ethernet0/0/1]int e0/0/2
[Huawei-Ethernet0/0/2]port link-type access
[Huawei-Ethernet0/0/2]port default vlan 2
[Huawei-Ethernet0/0/2]int e0/0/3
[Huawei-Ethernet0/0/3]port link-type access
[Huawei-Ethernet0/0/3]port default vlan 2
[Huawei-Ethernet0/0/3]q
LSW3
<Huawei>sys
[Huawei]undo info-center enable
[Huawei]vlan 2
[Huawei-vlan2]vlan 3
[Huawei-vlan3]q
[Huawei]int e0/0/1
[Huawei-Ethernet0/0/1]port link-type access
[Huawei-Ethernet0/0/1]port def vlan 3
[Huawei-Ethernet0/0/1]int e0/0/2
[Huawei-Ethernet0/0/2]port link-type access
[Huawei-Ethernet0/0/2]port default vlan 3
[Huawei-Ethernet0/0/2]int e0/0/4
[Huawei-Ethernet0/0/3]port link-type access
[Huawei-Ethernet0/0/3]port default vlan 3
[Huawei-Ethernet0/0/3]q
LSW2
[Huawei]vlan 2
[Huawei-vlan2]vlan 3
[Huawei-vlan3]q
[Huawei]int e0/0/3
[Huawei-Ethernet0/0/3]port link-type access
[Huawei-Ethernet0/0/3]port default vlan 2
[Huawei-Ethernet0/0/3]int e0/0/4
[Huawei-Ethernet0/0/4]port link-type access
[Huawei-Ethernet0/0/4]port default vlan 3
[Huawei-Ethernet0/0/4]int e0/0/1
[Huawei-Ethernet0/0/1]port link-type trunk
[Huawei-Ethernet0/0/1]port trunk allow-pass vlan all
[Huawei>sys
[Huawei]
[Huawei]int g0/0/0.1
[Huawei-GigabitEthernet0/0/0.1]dot1q termination vid 2 //封装
[Huawei-GigabitEthernet0/0/0.1]arp broadcast enable //开启arp
[Huawei-GigabitEthernet0/0/0.1]ip add 192.168.10.1 24 //配置IP
[Huawei-GigabitEthernet0/0/0.1]
[Huawei-GigabitEthernet0/0/0.1]int g0/0/0.2
[Huawei-GigabitEthernet0/0/0.2]dot1q termination vid 3
[Huawei-GigabitEthernet0/0/0.2]arp broadcast enable
[Huawei-GigabitEthernet0/0/0.2]ip address 192.168.20.1 24
[Huawei-GigabitEthernet0/0/0.2]q
某小型企业有 4 个部门,分布在两层办公楼中,每个部门主机机量不超过 20 台,其中一层有A,B,C三个部门,二楼有 B,C,D三个部门,企业内部设有 WEB,DNS 和服务器,要求每个部门不能相互问,但每个部门都能访问企业内部服务器。请画出拓扑图,并使用模拟器配置。
// 草稿
Router>
Router>en
Router#config t
Router(config)#interface e0/0/0
Router(config-if)#no shut
Router(config-if)#int e0/0/0.1
Router(config-subif)#encapsulation dot1Q 2
Router(config-subif)#ip add
Router(config-subif)#ip address 192.168.10.1 255.255.255.0
Router(config-subif)#exit
Router(config-subif)#int e0/0/0.2
Router(config-subif)#encapsulation dot1Q 3
Router(config-subif)#ip address 192.168.20.1 255.255.255.0
Router(config-subif)#exit
Router(config-subif)#int ethernet 0/0/0.3
Router(config-subif)#encapsulation dot1Q 4
Router(config-subif)#ip address 192.168.30.1 255.255.255.0
Router(config-subif)#exit
Router(config-subif)#int e0/0/0.4
Router(config-subif)#encapsulation dot1Q 5
Router(config-subif)#ip address 192.168.40.1 255.255.255.0
Router(config-subif)#exit
配置IP时一定要配网关