首页 > 代码库 > 基于子网的vlan划分配置要点及实例
基于子网的vlan划分配置要点及实例
说明: 1.IP划分vlan只能在hybrid端口上划分
2.IP划分vlan仅对untagged报文生效3.接口默认没有开启IP划分vlan功能
配置要点:
第一步:建立vlan
第二步:(vlan模式)设置IP子网vlan地址
ip-subnet-vlan ip X.X.X.X 掩码位数
第三步:进入指定接口视图设置接口为hybrid类型 port link-type hybrid
port link-type hybrid
第四步:设置接口允许通过指定的子网vlan报文
第五步:开启接口的ip子网划分vlan功能
ip-subnet-vlan enable
实验环境:H3C ENSP
交换机1配置:
[Huawei]display current-configuration
#
sysname Huawei
#
vlan batch 100 200
#
cluster enable
ntdp enable
ndp enable
#
drop illegal-mac alarm
#
diffserv domain default
#
drop-profile default
#
vlan 100
ip-subnet-vlan 1 ip 192.168.1.0 255.255.255.0
vlan 200
ip-subnet-vlan 1 ip 192.168.2.0 255.255.255.0
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password simple admin
local-user admin service-type http
#
interface Vlanif1
#
interface MEth0/0/1
#
interface Ethernet0/0/1
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
interface Ethernet0/0/2
port hybrid untagged vlan 2 to 4094
ip-subnet-vlan enable
#
interface Ethernet0/0/3
port hybrid untagged vlan 2 to 4094
ip-subnet-vlan enable
#
interface Ethernet0/0/4
#
interface Ethernet0/0/5
#
interface Ethernet0/0/6
#
interface Ethernet0/0/7
#
interface Ethernet0/0/8
#
interface Ethernet0/0/9
#
interface Ethernet0/0/10
#
interface Ethernet0/0/11
#
interface Ethernet0/0/12
#
interface Ethernet0/0/13
#
interface Ethernet0/0/14
#
interface Ethernet0/0/15
#
interface Ethernet0/0/16
#
interface Ethernet0/0/17
#
interface Ethernet0/0/18
#
interface Ethernet0/0/19
#
interface Ethernet0/0/20
#
interface Ethernet0/0/21
#
interface Ethernet0/0/22
#
interface GigabitEthernet0/0/1
#
interface GigabitEthernet0/0/2
#
interface NULL0
#
user-interface con 0
user-interface vty 0 4
#
return
交换机2配置:
[Huawei]display current-configuration
#
sysname Huawei
#
vlan batch 100 200
#
cluster enable
ntdp enable
ndp enable
#
drop illegal-mac alarm
#
diffserv domain default
#
drop-profile default
#
vlan 100
ip-subnet-vlan 1 ip 192.168.1.0 255.255.255.0
vlan 200
ip-subnet-vlan 1 ip 192.168.2.0 255.255.255.0
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password simple admin
local-user admin service-type http
#
interface Vlanif1
#
interface MEth0/0/1
#
interface Ethernet0/0/1
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
interface Ethernet0/0/2
port hybrid untagged vlan 2 to 4094
ip-subnet-vlan enable
#
interface Ethernet0/0/3
port hybrid untagged vlan 2 to 4094
ip-subnet-vlan enable
#
interface Ethernet0/0/4
#
interface Ethernet0/0/5
#
interface Ethernet0/0/6
#
interface Ethernet0/0/7
#
interface Ethernet0/0/8
#
interface Ethernet0/0/9
#
interface Ethernet0/0/10
#
interface Ethernet0/0/11
#
interface Ethernet0/0/12
#
interface Ethernet0/0/13
#
interface Ethernet0/0/14
#
interface Ethernet0/0/15
#
interface Ethernet0/0/16
#
interface Ethernet0/0/17
#
interface Ethernet0/0/18
#
interface Ethernet0/0/19
#
interface Ethernet0/0/20
#
interface Ethernet0/0/21
#
interface Ethernet0/0/22
#
interface GigabitEthernet0/0/1
#
interface GigabitEthernet0/0/2
#
interface NULL0
#
user-interface con 0
user-interface vty 0 4
#
return
[Huawei]
PC4测试图:
PC3测试图:
基于子网的vlan划分配置要点及实例