H3C设备组网详细配置步骤!.doc

设备清单: 设备名称 产品型号 数量 配置 单价 价格 核心路由器 H3C MSR 20-20 1 2 x 100M WAN接口 6000 6000 核心三层交换机 H3C S3600-28TP-SI 1 24 x 100M+2 x 10/100/100M 5000 5000 核心二层交换机 H3C S3100-26C-SI 1 24 x 10/100M 3000 3000 服务器 浪潮NF190D2 2 E5405(2.00G)/12M/2G DDR2/73G SAS/1000M*2/单电源 20030 40060 客户机 浪潮 日升S300 PRS2 E2200 2.2G/1M/1G/160G SATA/集成显卡/17"纯平 3700 7400 网络拓朴:配置步骤:1.端口设置及端口捆绑1.1在3L和2L上设置以下命令:（在三层交换机与二层交换机上配置）interface Ethernet 0/2 to Ethernet 0/3speed 100duplex fullport link-type trunkport trunk permit vlan all#link-aggregation Ethernet 0/2 to Ethernet 0/3 both2.GVRP配置2.1在3L上和2L上设置system-view#gvrp/设备开启gvrp功能#interface ethernet 0/2 to ethernet 0/3gvrp/在trunk端口上开启gvrp3.VLAN设置3.1在3L上设置Vlan 2市场部#Vlan 3工程部#Vlan 4服务器3.2在2L上设置interface Ethernet 0/8Port access vlan 3#interface Ethernet 0/9Port access vlan 2#interface ethernet 0/4 to ethernet 0/5/3L上设置端口加服务器vlanPort access vlan 44.三层交换实现Vlan互通4.1 在3L上设置interface vlan-interface 1/网管Vlanip address 192.168.1.1 255.255.255.0undo shutdown#interface vlan-interface 2/市场Vlanip address 192.168.2.1 255.255.255.0undo shutdown#interface vlan-interface 3/工程vlanip address 192.168.3.1 255.255.255.0undo shutdown#interface vlan-interface 4/服务器vlanip address 192.168.4.1 255.255.255.0undo shutdown5.三层交换机和路由器互通5.1在3L上设置Interface vlan-interface 100Ip address 192.168.0.2 255.255.255.0Undo shutdown#Ip route-static 0.0.0.0 0.0.0.0 192.168.0.1/指向路由器的默认路由5.2在路由器上设置Interface Ethernet 0/0Ip address 192.168.0.1 255.255.255.0Undo shutdown#Ip route-static 192.168.0.0 255.255.0.0 /超网路由,指向所有vlan的回程路由#Ip route-static 0.0.0.0 0.0.0.0 123.1.1.4/指向ISP的默认路由器6.ACL限制vlan2和vlan3互访6.1在三层交换机上设置acl number 3000rule 0 denyip source 192.168.3.0 0.0.0.255 destination 192.168.2.0 0.0.0.255rule 1 permitip6.2在vlan2的三层接口上设置Interface vlan-interface 2packet-filter inbound ip-group 30007.三层交换机做DHCP服务器7.1在3L上设置dhcp server ip-pool vlan2network 192