两种常见的Vlan间通信的方式

目录

一：三层交换机方式

二：单臂路由方式

---

一：三层交换机方式

如图，PC1和PC2是企业内网的主机，属于不同的部门，故属于不同的VLAN。在交换机上配置vlan 10和vlan 20，并且配上主机的网关。交换机与路由器相邻的接口配置上Vlan30，配置上和路由器接口同一网段的ip。在交换机上配置默认路由指向路由器。AR1是边界路由器，AR1上配置静态路由去往192.168.10.0网段和192.168.20.0网段。AR1还配了默认路由指向AR2。AR1与AR2通过OSPF路由。主机通过NAT方式以边界路由公网地址访问外网，故在边界路由AR1上配置PAT(端口多路复用)。以下是各设备的配置。

PC1

PC1>ipconfig

IPv4 address......................: 192.168.10.10
Subnet mask.......................: 255.255.255.0
Gateway...........................: 192.168.10.254
Physical address..................: 54-89-98-20-70-11
Vlan..............................: 10

PC2

PC2>ipconfig

IPv4 address......................: 192.168.20.10
Subnet mask.......................: 255.255.255.0
Gateway...........................: 192.168.20.254
Physical address..................: 54-89-98-0C-28-2D
Vlan..............................: 20

LSW1

[SW1]display current-configuration
#
vlan batch 10 20 30
#
interface Vlanif10
 ip address 192.168.10.254 255.255.255.0
#
interface Vlanif20
 ip address 192.168.20.254 255.255.255.0
#
interface Vlanif30
 ip address 192.168.30.1 255.255.255.0
#
interface GigabitEthernet0/0/1
 port link-type access
 port default vlan 10
#
interface GigabitEthernet0/0/2
 port link-type access
 port default vlan 20
#
interface GigabitEthernet0/0/3
 port link-type access
 port default vlan 30
#
#
ip route-static 0.0.0.0 0.0.0.0 192.168.30.2
#  

AR1

[AR1]display current-configuration
#
acl number 2000
 rule 5 permit source 192.168.10.0 0.0.0.255
 rule 10 permit source 192.168.20.0 0.0.0.255
#
interface GigabitEthernet0/0/0
 ip address 192.168.30.2 255.255.255.0
#
interface GigabitEthernet0/0/1
 ip address 12.1.1.1 255.255.255.0
 nat outbound 2000
#
ospf 100 router-id 11.1.1.1
 area 0.0.0.0
  network 12.1.1.1 0.0.0.0
  network 192.168.30.2 0.0.0.0
#
ip route-static 192.168.10.0 255.255.255.0 192.168.30.1
ip route-static 192.168.20.0 255.255.255.0 192.168.30.1
#    

AR2

[AR2]display current-configuration
#
interface GigabitEthernet0/0/0
 ip address 12.1.1.2 255.255.255.0
#
interface LoopBack0
 ip address 22.2.2.2 255.255.255.255
#
ospf 100 router-id 22.2.2.2
 area 0.0.0.0
  network 12.1.1.2 0.0.0.0
  network 22.2.2.2 0.0.0.0
#        

二：单臂路由方式

如图，PC1和PC2是企业内网的主机，属于不同的部门，故属于不同的VLAN。他们之间通过路由器AR1单臂路由通信。他们通过路由器AR1的g0/0/1口以PAT(端口多路复用)方式与外界通信。AR1和AR2之间运行OSPF协议，AR1配置了指向AR2的默认路由。以下是各设备的配置

PC1

PC1>ipconfig

IPv4 address......................: 192.168.10.10
Subnet mask.......................: 255.255.255.0
Gateway...........................: 192.168.10.254
Physical address..................: 54-89-98-20-70-11
Vlan..............................: 10

PC2

PC2>ipconfig

IPv4 address......................: 192.168.20.10
Subnet mask.......................: 255.255.255.0
Gateway...........................: 192.168.20.254
Physical address..................: 54-89-98-0C-28-2D
Vlan..............................: 20

SW1

[SW1]display current-configuration
#
vlan batch 10 20
#
#
interface GigabitEthernet0/0/1
 port link-type access
 port default vlan 10
#
interface GigabitEthernet0/0/2
 port link-type access
 port default vlan 20
#
interface GigabitEthernet0/0/3
 port link-type trunk
 port trunk allow-pass vlan 10 20
# 

AR1

 [AR1]display current-configuration
#
acl number 2000
 rule 5 permit source 192.168.10.0 0.0.0.255
 rule 10 permit source 192.168.20.0 0.0.0.255
#
interface GigabitEthernet0/0/0.10
 dot1q termination vid 10
 ip address 192.168.10.254 255.255.255.0
 arp broadcast enable
#
interface GigabitEthernet0/0/0.20
 dot1q termination vid 20
 ip address 192.168.20.254 255.255.255.0
 arp broadcast enable
#
interface GigabitEthernet0/0/1
 ip address 12.1.1.1 255.255.255.0
 nat outbound 2000
#
ospf 100 router-id 11.1.1.1
 area 0.0.0.0
  network 12.1.1.1 0.0.0.0
#

AR2

[AR2]display current-configuration
#
interface GigabitEthernet0/0/0
 ip address 12.1.1.2 255.255.255.0
#
interface LoopBack0
 ip address 22.2.2.2 255.255.255.255
#
ospf 100 router-id 22.2.2.2
 area 0.0.0.0
  network 12.1.1.2 0.0.0.0
  network 22.2.2.2 0.0.0.0
#