H3C三層交換機(jī)配置實(shí)例

1、H3C三層交換機(jī)配置實(shí)例1網(wǎng)絡(luò)拓?fù)鋱D12配置要求13劃分VLAN并描述2進(jìn)入系統(tǒng)視圖2創(chuàng)建VLAN并描述24給VLAN設(shè)置網(wǎng)關(guān)3VLANI的IP地址設(shè)置3VLANIOO的網(wǎng)關(guān)設(shè)置3VLANlOI的網(wǎng)關(guān)設(shè)置3VLANlO2的網(wǎng)關(guān)設(shè)置3VLANIO3的網(wǎng)關(guān)設(shè)置45給VLAN指定端口，設(shè)置端口類型4VLANIO0 指定端口4VLANlO2 指定端口4VLANI/101/103 指定端口56配置路由協(xié)議6默認(rèn)路由6配置流分類6定義行為6應(yīng)用QoS策略6接口配置QoS策略711網(wǎng)絡(luò)拓?fù)鋱D172.16.1.25332192.168.100.253/32三層交按機(jī)/172.16.100.254/32192.

2、168.100.254/32O¾"1172.16.1254/32/192.168.1.254/32、X、XX/ / ZrIl Il Il Il172.16.1.0/24192.16&1.0/24圖1-1網(wǎng)絡(luò)拓?fù)鋱D2配置要求用戶1網(wǎng)絡(luò)：/24至出口 1網(wǎng)絡(luò)：/24用戶2網(wǎng)絡(luò)：/24至出口 2網(wǎng)絡(luò)：/24實(shí)現(xiàn)功能：用戶1通過互聯(lián)網(wǎng)出口 1,用戶2通過互聯(lián)網(wǎng)出口 2。3劃分VLAN并描述進(jìn)入系統(tǒng)視圖<H3C>system-view /進(jìn)入系統(tǒng)視圖H3CsystemviewSyStcm Vie: return to USer VieW With Ctrl+Z H

3、3CJ圖3-1系統(tǒng)視圖創(chuàng)建VLAN并描述H3Cvlan 1 /本交換機(jī)使用LH3C-vlanlZdescription Manager /描述為 UManagern H3C-VIanlquitH3Cvlan 100 劃分 VIanIOOH3C-vlanl00Zdescription VLANH3C-vlanl00Z QUitH3Cvlan 101 劃分 VIanIOIH3C-vlanl01description VLANH3C-vlanl01Z quitH3Cvlan 102 劃分 VIanIO2H3C-vlanlO2description VLANLH3C-vlanlO2QUitH3Cvla

4、n 103 劃分 VIanIO3H3C-vlanlO3jdescription VLANH3C-vlanlO3JQUitH3C100101102103/描述為 “VLAN IOOm描述為“VLAN描述為“VLAN描述為“VLANH3Cvlan 1H3C-VlanlJdescriptiOn ManagerH3C-VlanlJquitH3Cvlan 100H3C-vla10descriptionH3C-vlanlOqitH3Cvlan 101H3C-YlanlOlJdescriptioDH3C-VlanlQljquitH3Clvlan 12H3C-vlanlG2descrption H3C-vla

5、lQ2qiJi tH3Cvlan 1G3H3C-VlanlO3desc riptionH3C-vlanlG3jqtH3CVLAN 100VLAN 101VLAN 102VLAN 13圖3-2劃分VLAN及描述10,102”103”4給VLAN設(shè)置網(wǎng)關(guān)VLANI的IP地址設(shè)置把VLANl的IP地址設(shè)置為，子網(wǎng)掩碼為，用于本地使用。H3CZ interface vlan-interface 1H3C-Vlan-interfaceL ip addressH3C-Vlan-interfacelJ quitH3CH3Cinterface VIanDteface 1H3C-Vlan-interfacell

6、ip address 192.168.0.254 255.255.255.0 H3C-Vlan-InterfacellquitH3C圖4-1 VLAN 1的IP設(shè)巻VLANIOO的網(wǎng)關(guān)設(shè)置把VLANIO0的網(wǎng)關(guān)設(shè)置為，子網(wǎng)掩碼為。H3CZ interface VIan-interface 100H3C-Vlan-interfacel00Z ip addressLH3C-Vlan-interfacel00Z QUitH3CIH3CJinterface Vlan-IntertaCe IOOH3C-Vlan-inter-facel00ip address 192.168.10.254 255.255

7、.255.0 H3C-Vlan-InterfacelOOquitH3C圖4-2 VLANIOO的網(wǎng)關(guān)設(shè)置VLANIOI的網(wǎng)關(guān)設(shè)置把VLANIO1的網(wǎng)關(guān)設(shè)置為，子網(wǎng)掩碼為。LH3CZ interface VIan-interface 101H3C-Vlan-interfacel01Z ip address H3C-Vlan-interfacel01Z QUitH3CH3Cinterface VIan-interface IOlH3C-Vlan-InterfacelOlJip address 192.168.1.254- 255.255.255.0 H3C-Vlan-InterfacelOlJqu

8、itH3C圖4-3 VLANIO1的網(wǎng)關(guān)設(shè)置VLANIO2的網(wǎng)關(guān)設(shè)置把VLANIO2的網(wǎng)關(guān)設(shè)置為，子網(wǎng)掩碼為。H3CZ interface VIan-interface 102LH3C-Vlan-interface102 ip addressH3C-Vlan-interfacelO2jQUitH3CLHJCJlnTerTaCe VLan-Inerace 丄02H3C-VIan-interfacelO2ip address 172.16.100.254 255.255.255.0 H3C Vlan-interfacel2quitH3C圖4-4 VLANIO2的網(wǎng)關(guān)設(shè)置VLANIO3的網(wǎng)關(guān)設(shè)置把V

9、LANIO3的網(wǎng)關(guān)設(shè)置為，子網(wǎng)掩碼為。LH3CZ interface vlan-interface 103H3C-Vlan-interfacelO3Z ip addressH3C-Vlan-interfacelO3QUitH3CH3Cinterface Vlan-interface 103H3C-VIan-InterfaCeI03IP address 172.16.1.254 255.255.255.©H3C-Vlan-interfacel3quitH3C圖4-5 VLANIO3的網(wǎng)關(guān)設(shè)置5給VLAN指定端口，設(shè)置端口類型VLANIOO指定端口將端l GigabitEthernet

10、1/0/1指定給VIanIO0,并配置端口模式。 LH3CZ interface GigabitEthernet 1/0/1H3C-GigabitEthernet1/0/LPOrt link-type access H3C-GigabitEthernet1/0/IZPOrt access VIan IOO H3C-GigabitEtheme11 /O/1Z SPeed IOOOH3C-GigabitEthernet1O1ZdupIeX fullLH3C-GigabitEthernet1/0/1ZqUitH3CH3Cint G 1/0/1IH3C-GigabitEthernet 1/0/1por

11、t link-type accessH3C-GigabitEthernetlZO/!port access VIan 100 H3C-GigabitEthernetlOlsed 1000H3C-GigabitEthernet1/0/1duplex full H3C-GigabitEthernet1/0/1quitH3C圖5-1 VLANIO0指定端口VLANIO2指定端口將端 GigabitEthernet 1/0/2指定給VIanIO2,并配置端口模式。 H3Cint G 1/0/2LH3C-GigabitEthernet1/0/2port link-type access LH3C-Gig

12、abitEthernet1/0/2port access VIan 102 LH3C-GigabitEthernet1/0/2SPeed 1000 H3CGigabitEthernet1/0/2dup1ex fullH3OG i gab i tEthernet 1/0/2IqUitH3C:H3Cint G 1/0/2；H3C-GigabitEthernetl/0/2port link-type access；H3C-GigabitEthernetl/0/2port access VIan 102；H3C-GigabitEthernetl02speed IoOO；H3C-GigabitEther

13、net1/0/2duplex full；H3C-GigabitEthernet1/0/2quit:H3C圖5-2 VLANIo2指定端口VLANI/101/103 指定端口將端 GigabitEthernet l01516 指定給 VIanI/101/101,并配置端口模式。 H3Cint G 1/0/15LH3C-GigabitEthernet1/0/15port link-type trunkH3C-GigabitEthernet1/0/15port trunk Permit VIan 1 101 103LH3C-GigabitEthernet1/0/15SPeed 1000H3C-Gig

14、abitEtherne11/0/15duplex fullH3C-GigabitEthernet1/0/15IqUitH3Cint G 1/0/16H3C-GigabitEthernetl016Zport link-type trunkH3C-GigabitEthernetl016port trunk Permit VIan 1 101 103LH3C-Gi gab i tEthernet1/0/16SPeed 1000H3C-GigabitEthernet1/0/16duplex fullH3OG i gab i tEthernet 1/0/16JqUitH3CH3Cint G 1/0/15

15、H3C-GigabitEthernet1/0/15Port link-type trunkH3C-GigabitEthernet 1/0/15Port trunk PernIit Vlan 1 11 103 PleaSe Wait DOneH3C-GigabLtEthernetl015jspeed 1H3C-GigabitEthernetl015dUPleX fullH3Cint G 1/0/16H3C-GigabItEthernet1/0/16POrt link-type trunk H3C-GigabitEthernet 1/0/16port trunk PenTlit Vlan 1 IO

16、l 13PIeaSe ait DOne H3C-GigabitEtheret1/0/16speed IOOOH3C-GigabItEthernet1/0/16duplex full圖 5-3 VLANl/101/103 指左端口6配置路由協(xié)議默認(rèn)路山建立默認(rèn)路由，將所有的數(shù)據(jù)包都丟往出口 2的下一節(jié)點(diǎn): H3Cip route-static配置流分類配置流分類1,對(duì)象為/24的數(shù)據(jù)：H3Cacl number 3001H3Cacl-adv-300LrUIe 0 Permit ip SOUrCeH3Cacl-adv-3001Z quitH3Ctraffic CIaSSifier 1H3C-cla

17、ssifier-lZ ifmatch acl 3001H3Cclassifier-ljquitH3CH3Cacl number 3001H3C-acl-adv-3001rule 0 Pennit ip SOUrCe 172.16.1.0 O.Q.O.255 H3C-acl-adv-3001quitH3Ctraffic classifier IH3C-CIaSSifier-Iif-match acl 3001HSC-Classifier-IjquitH3C圖6-1配宜流分類1定義行為配置剛才定義的流分類的行為，定義如果匹配就下一跳至出口 1即: H3Ctraffic behavior 1LH3C

18、-behavior-l.redirect next-hopH3C-behavior-lZ quitH3CH3Ctraffic behavior 1H3C-behaViOr-IJredirect next-hop 172.16.100.253 H3C-behavio r-lquitH3C圖6-2配置流分類行為應(yīng)用QOS策略將剛才設(shè)置的應(yīng)用至QoS策略中，定義PoliCy 1：H3Cqos P 1H3C-qo spoIiCy-IJCIaSSifier 1 behavior 1H3C-qospolicy-1J quitH3CH3Cqos P 1H3CqOSPoIiCyU classifier 1 behavior 1 H3C-qospolicy-lquit圖6-3 QOS策略接口配置QOS策略在接口上應(yīng)用定義的QoS策略PoIiCy 1：H3Cint G1/0/15H3C-GigabitEthernetl015qos apply POliCy 1 inbound LH3C-GigabitEthernetl015quitH3Cint Gl/0/16H3C-GigabitEthernet1/0/16IqOS apply POliCy 1 inbound H3C-GigabitEtherne