Ciso三层交换 上vlan间互通, 端口映射到vlan

路由器2911配置：

!
hostname router

interface GigabitEthernet0/0
ip address 10.0.0.2 255.0.0.0
ip nat outside
duplex auto
speed auto
!
interface GigabitEthernet0/1
ip address 192.168.40.1 255.255.255.0
ip nat inside
duplex auto
speed auto

interface Vlan1
no ip address
shutdown

ip nat inside source list 1 interface GigabitEthernet0/0 overload

ip nat inside source static tcp 192.168.30.3 23 10.0.0.2 23    /*这条映射内网192.168.30.3 的23端口*/

ip classless

ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/0    /*这条路由通往外网的*/
ip route 192.0.0.0 255.0.0.0 192.168.40.2     /*这条路由通往三层交换的*/
!
!
access-list 1 permit 192.168.0.0 0.0.255.255

end

 三层交换机3560：

hostname layer03

ip dhcp excluded-address 192.168.20.1
ip dhcp excluded-address 192.168.30.1
!
ip dhcp pool vlan2
network 192.168.20.0 255.255.255.0
default-router 192.168.20.1
ip dhcp pool vlan3
network 192.168.30.0 255.255.255.0
default-router 192.168.30.1
ip routing

interface FastEthernet0/1
switchport access vlan 4
switchport mode access

interface FastEthernet0/23
switchport access vlan 2
switchport mode access

interface FastEthernet0/24
switchport access vlan 3
switchport mode access

interface Vlan2
ip address 192.168.20.1 255.255.255.0
interface Vlan3
ip address 192.168.30.1 255.255.255.0
interface Vlan4
ip address 192.168.40.2 255.255.255.0

ip classless
ip route 0.0.0.0 0.0.0.0 192.168.40.1                    /*这条路由通往2911路由器的*/
ip route 192.168.0.0 255.255.0.0 192.168.30.3   /*这条路由通往客户端的*/

end

客户端2911配置：

client(config)#do sh run

!
hostname client

!
license udi pid CISCO2911/K9 sn FTX1524X1KS

!
interface GigabitEthernet0/0
ip address 192.168.30.3 255.255.255.0
duplex auto
speed auto

ip classless
ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/0   /*这条路由通往三层交换的*/
!
line con 0
!
line aux 0
!
line vty 0 4
password cisco
login
!
!
!
end