二層交換機(jī)與路由器對接上網(wǎng)1、應(yīng)用場景如圖所示，交換機(jī)Switch和路由器對接，使用戶PC1和PC2可以實(shí)現(xiàn)上網(wǎng)功能。交換機(jī)是二層交換機(jī)，僅能實(shí)現(xiàn)二層轉(zhuǎn)發(fā)。2、配置思路交換機(jī)基于接口劃分VLAN，實(shí)現(xiàn)二層轉(zhuǎn)發(fā)。路由器的配置有兩種情況(這里使用的是AR路由器)：一種是路由器的接口是二層口，通過配置VLANIF接口，實(shí)現(xiàn)和交換機(jī)的通信。一種是路由器的接口是三層口，通過配置子接口終結(jié)VLAN功能，實(shí)現(xiàn)和交換機(jī)的通信。二層交換機(jī)與路由器對接上網(wǎng)交換機(jī)的配置步驟（共2步）第一步：配置下行連接用戶的接口。<Switch>system-view[Switch]vlanbatch23[Switch]interfacegigabitethernet0/0/2[Switch-GigabitEthernet0/0/2]portlink-typeaccess[Switch-GigabitEthernet0/0/2]portdefaultvlan2[Switch-GigabitEthernet0/0/2]quit[Switch]interfacegigabitethernet0/0/3[Switch-GigabitEthernet0/0/3]portlink-typeaccess[Switch-GigabitEthernet0/0/3]portdefaultvlan3[Switch-GigabitEthernet0/0/3]quit第二步：配置上行連接路由器的接口。[Switch]interfacegigabitethernet0/0/1[Switch-GigabitEthernet0/0/1]portlink-typetrunk[Switch-GigabitEthernet0/0/1]porttrunkallow-passvlan23[Switch-GigabitEthernet0/0/1]quit二層交換機(jī)與路由器對接上網(wǎng)路由器的接口作為三層口，通過配置子接口終結(jié)VLAN進(jìn)行通信的配置步驟（共4步）第一步：配置終結(jié)子接口。<Router>system-view[Router]vlanbatch23[Router]interfacegigabitethernet0/0/1.1[Router-GigabitEthernet0/0/1.1]dot1qterminationvid2

[Router-GigabitEthernet0/0/1.1]ipaddress192.168.1.124[Router-GigabitEthernet0/0/1.1]arpbroadcastenable[Router-GigabitEthernet0/0/1.1]quit[Router]interfacegigabitethernet0/0/1.2[Router-GigabitEthernet0/0/1.2]dot1qterminationvid3

[Router-GigabitEthernet0/0/1.2]ipaddress192.168.2.124[Router-GigabitEthernet0/0/1.2]arpbroadcastenable[Router-GigabitEthernet0/0/1.2]quit二層交換機(jī)與路由器對接上網(wǎng)路由器的接口作為三層口，通過配置子接口終結(jié)VLAN進(jìn)行通信的配置步驟（共4步）第二步：配置DHCP和DNS功能，為內(nèi)網(wǎng)用戶分配IP地址和指定DNS服務(wù)器地址。[Router]dhcpenable[Router]interfacegigabitethernet0/0/1.1[Router-GigabitEthernet0/0/1.1]dhcpselectinterface[Router-GigabitEthernet0/0/1.1]dhcpserverdns-list114.114.114.114223.5.5.5[Router-GigabitEthernet0/0/1.1]quit[Router]interfacegigabitethernet0/0/1.2

[Router-GigabitEthernet0/0/1.2]dhcpselectinterface[Router-GigabitEthernet0/0/1.2]dhcpserverdns-list114.114.114.114223.5.5.5[Router-GigabitEthernet0/0/1.2]quit二層交換機(jī)與路由器對接上網(wǎng)路由器的接口作為三層口，通過配置子接口終結(jié)VLAN進(jìn)行通信的配置步驟（共4步）第三步：配置公網(wǎng)接口的IP地址和靜態(tài)路由。[Router]interfacegigabitethernet0/0/2

[Router-GigabitEthernet0/0/2]ipaddress200.0.0.2255.255.255.0[Router-GigabitEthernet0/0/2]quit[Router]iproute-static0.0.0.00.0.0.0200.0.0.1第四步：配置NAT功能，使內(nèi)網(wǎng)用戶可以訪問外網(wǎng)。[Router]aclnumber2001[Router-acl-basic-2001]rule5permitsource192.168.0.00.0.255.255[Router-acl-basic-2001]quit[Router]interfacegigabitethernet0/0/2

[Router-GigabitEthernet0/0/2]natoutbound2001[Router-GigabitEthernet0/0/2]quit二層交換機(jī)與路由器對接上網(wǎng)路由器的接口作為二層口，通過VLANIF進(jìn)行通信的配置步驟（共4步）第一步：配置VLANIF接口。<Router>system-view[Router]vlanbatch23[Router]interfacegigabitethernet0/0/1

[Router]portswitch

[Router-GigabitEthernet0/0/1]portlink-typetrunk[Router-GigabitEthernet0/0/1]porttrunkallow-passvlan23[Router-GigabitEthernet0/0/1]quit[Router]interfacevlanif2[Router-Vlanif2]ipaddress192.168.1.124[Router-Vlanif2]quit[Router]interfaceVlanif3[Router-Vlanif3]ipaddress192.168.2.124[Router-Vlanif3]quit二層交換機(jī)與路由器對接上網(wǎng)路由器的接口作為二層口，通過VLANIF進(jìn)行通信的配置步驟（共4步）第二步：配置DHCP和DNS功能，為內(nèi)網(wǎng)用戶分配IP地址和指定DNS服務(wù)器地址。[Router]dhcpenable[Router]interfacevlanif2

[Router-Vlanif2]dhcpselectinterface[Router-Vlanif2]dhcpserverdns-list114.114.114.114223.5.5.5[Router-Vlanif2]quit[Router]interfacevlanif3

[Router-Vlanif3]dhcpselectinterface[Router-Vlanif3]dhcpserverdns-list114.114.114.114223.5.5.5[Router-Vlanif3]quit二層交換機(jī)與路由器對接上網(wǎng)路由器的接口作為二層口，通過VLANIF進(jìn)行通信的配置步驟（共4步）第三步：配置公網(wǎng)接口的IP地址和靜態(tài)路由。[Router]interfacegigabitethernet0/0/2

[Router-GigabitEthernet0/0/2]ipaddress200.0.0.2255.255.255.0[Router-GigabitEthernet0/0/2]quit[Router]iproute-static0.0.0.00.0.0.0200.0.0.1第四步：配置NAT功能，使內(nèi)網(wǎng)用戶可以訪問外網(wǎng)。[Router]aclnumber2001[Router-acl-basic-2001]rule5permits