实验要求：划分VLAN：目的两个：隔离广播域；增强安全性

配置三层交换机，配置DHCP，配置静态路由，配置nat使网段能上网，配置ospf

SW1

system-view

sysname SW1

vlan batch 2 to 5

interface g0/0/1

port link-type trunk

port trunk allow-pass vlan 2 to 3

interface g0/0/2

port link-type trunk

port trunk allow-pass vlan 2 to 3

display vlan

display port vlan

SW2

system-view

sysname SW2

vlan 2

interface e0/0/1

port link-type access

port default vlan 2

quit

vlan 3

interface e0/0/2

port link-type access

port default vlan 3

quit

interface g0/0/1

port link-type trunk

port trunk allow-pass vlan 2 to 3

display port vlan   #查看VLAN配置接口

SW3

system-view

sysname SW3

vlan 2

interface e0/0/1

port link-type access

port default vlan 2

quit

vlan 3

interface e0/0/2

port link-type access

port default vlan 3

quit

interface g0/0/2

port link-type trunk

port trunk allow-pass vlan 2 to 3

display port vlan#查看VLAN配置接口

服务器设置8.8.8.8地址用于pc机上网

pc1

pc2

pc3

pc4

实现同VLAN能互相访问，不同VLAN不能访问

SW1

三层vlan

interface Vlanif2

ip address 192.168.2.254 24

interface Vlanif3

ip address 192.168.3.254 24

配置DHCP

dhcp enable

ip pool vlan2

network 192.168.2.0 mask 24

gateway-list 192.168.2.254

dns-list 8.8.8.8

excluded-ip-address 192.168.2.200 192.168.2.253

quit

interface Vlanif 2

dhcp select global

ip pool vlan3

network 192.168.3.0 mask 24

gateway-list 192.168.3.254

dns-list 8.8.8.8

excluded-ip-address 192.168.3.200 192.168.3.253

quit

interface Vlanif 3

dhcp select global

三层交换机--路由器：配置ACCESS模式，要创建一个新的vlan

vlan 40

quit

interface g0/0/3

port link-type access

port default vlan 40

quit

interface Vlanif 40

ip address 192.168.40.254 24

三层交换机上网：默认路由

ip route-static 0.0.0.0 0.0.0.0 192.168.40.9

R1路由器配置 

system-view

sysname R1

interface g0/0/0

ip address 192.168.40.9 24

静态路由

[R1]ip route-static 192.168.2.0 24 192.168.40.254

[R1]ip route-static 192.168.3.0 24 192.168.40.254

#配置静态路由192.168.2.0/3.0为目的地址，下一条地址为192.168.40.254

配置NAT，使得PC能够上网

interface GigabitEthernet0/0/2

ip address 8.8.8.9 24

ip route-static 0.0.0.0 0.0.0.0 8.8.8.8

acl 2000   

rule permit

quit

interface g0/0/2

nat outbound 2000

把pc设置成DHCP

在命令行里查看DHCP自动分配的ip（ipconfig）

同样ping通同网段

测试pc能ping通8.8.8.8 上网

pc1

pc2

pc3

pc4

交换机--路由器配置ospf

ospf是动态路由：学习路由信息  维护路由信息 选最佳路径

路由器R1的配置

ospf 1

area 0

network 192.168.40.0 0.0.0.255

添加配置：默认路由下发

ospf 1

 default-route-advertise

交换机SW1的配置

ospf 1

area 0

network 192.168.40.0 0.0.0.255

network 192.168.0.0 0.0.255.255

ospf的七种状态

ospf的五种报文