【亲测】企业三层交换网络(VLAN)+RouterOS解决方案

hx99

hx99 发表于 2012-2-28 12:51

                               
登录/注册后可看大图

默认的vlan1和路由同网段  VLAN1默认已经存在  把IP改成192.168.1.1/24就行了  和ROS内网同段

其它V ...

试试就知道了  Ros LAN 100.254

******************************************************************************
* Copyright (c) 2004-2009 Hangzhou H3C Tech. Co., Ltd. All rights reserved.  *
* Without the owner's prior written consent,                                 *
* no decompiling or reverse-engineering shall be allowed.                    *
******************************************************************************


<H3C>dis cur
#
version 5.20, Release 2202P11
#
sysname H3C
#
dhcp relay server-group 1 ip 172.16.100.254
dhcp relay server-group 2 ip 172.16.100.253
#
domain default enable system
#
telnet server enable
#
undo ip ttl-expires
#
vlan 1
#
vlan 2 to 7
#
vlan 10
#
vlan 100
#
radius scheme system
server-type extended
primary authentication 127.0.0.1 1645
primary accounting 127.0.0.1 1646
user-name-format without-domain
#
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
user-group system
#
local-user admin
password cipher 0F&%VVGXE./a!1$H@GYA!!
authorization-attribute level 3
service-type telnet
#
interface NULL0
#
interface Vlan-interface1
ip address 172.16.1.1 255.255.254.0
dhcp select relay
dhcp relay server-select 2
#
interface Vlan-interface2
ip address 172.16.2.1 255.255.255.0
dhcp select relay
dhcp relay server-select 2
#
interface Vlan-interface3
ip address 172.16.3.1 255.255.255.0
dhcp select relay
dhcp relay server-select 2
#
interface Vlan-interface4
ip address 172.16.4.1 255.255.255.0
dhcp select relay
dhcp relay server-select 2
#
interface Vlan-interface5
ip address 172.16.5.1 255.255.255.0
dhcp select relay
dhcp relay server-select 2
#
interface Vlan-interface6
ip address 172.16.6.1 255.255.255.0
dhcp select relay
dhcp relay server-select 2
#
interface Vlan-interface7
ip address 172.16.7.1 255.255.255.0
dhcp select relay
dhcp relay server-select 2
#
interface Vlan-interface10
ip address 172.16.10.1 255.255.255.0
dhcp select relay
dhcp relay server-select 2
#
interface Vlan-interface100
ip address 172.16.100.1 255.255.255.0
dhcp select relay
dhcp relay server-select 2
#
interface GigabitEthernet1/0/1
#
interface GigabitEthernet1/0/2
port access vlan 2
#
interface GigabitEthernet1/0/3
port access vlan 3
#
interface GigabitEthernet1/0/4
port access vlan 4
#
interface GigabitEthernet1/0/5
port access vlan 5
#
interface GigabitEthernet1/0/6
port access vlan 6
#
interface GigabitEthernet1/0/7
port access vlan 7
#
interface GigabitEthernet1/0/8
#
interface GigabitEthernet1/0/9
#
interface GigabitEthernet1/0/10
port access vlan 10
#
interface GigabitEthernet1/0/11
port access vlan 100
#
interface GigabitEthernet1/0/12
port access vlan 100
#



#
ip route-static 0.0.0.0 0.0.0.0 172.16.100.254
#
snmp-agent
snmp-agent local-engineid 800063A203002389B6A492
snmp-agent community read huaxi
snmp-agent sys-info version all
snmp-agent target-host trap address udp-domain 124.115.213.90 udp-port 5000 par
ams securityname huaxi
snmp-agent target-host trap address udp-domain 172.16.100.2 udp-port 5000 param
s securityname huaxi
snmp-agent target-host trap address udp-domain 172.16.100.253 udp-port 5000 par
ams securityname huaxi
#
dhcp enable
#
user-interface aux 0
user-interface vty 0 4
authentication-mode scheme
#
return

qinfei

看来我这里要做很多子接口才行，哎

xiasha11

这个方案是简单的二级路由原理