乳环狗链里番:CISCO 3750G VLAN配置实例

CISCO 3750G VLAN配置实例 收藏
网络环境：防火墙->3750G->VLAN->PC配置目的：3750G上按端口划分VLAN，各VLAN间可互访、可上外网，各VLAN的PC由Windows 2003 Server的DHCP分配。为测试只设了三个VLAN，多个VLAN也同样划分即可。参数：3750G上，VLAN1 IP：123.123.0.11, VLAN2 IP：192.168.0.254, VLAN3 IP：192.168.2.2542003 Server 位于VLAN1  IP：123.123.0.4、网关：123.123.0.11防火墙内网卡IP：123.123.0.2543750G中端口VLAN划分、IP地址指定、VLAN路由、默认网关、静态路由等大多数参数都可以用CISCO Network Assistant管理工具来设置，但启用DHCP功能，DHCP中继、指定DHCP服务器地址、VLAN的ip helper-address地址(红色部分)需进入终端管理中设置。DHCP服务器中，在DHCP中增加123.123.0.0、192.168.0.0、192.168.2.0三个作用域，并分别设置好分配给PC的路由为各VLAN IP，DNS为外网的DNS。注意：DHCP的网关必须是所在VLAN的IP地址；防火墙中增加123.123.0.0  0.0.0.0、192.168.0.0  0.0.0.0的回指路由，增加123.123.0.0、192.168.0.0的上网NAT设置等让该网段可上网，
 
 
 具体配置如下:show runBuilding configuration... Current configuration : 3334 bytes!version 12.2service configno service padservice timestamps debug uptimeservice timestamps log uptimeno service password-encryption!hostname Switch3750G!enable secret 5 $1$Imhn$8cgG7/eYcVQhnSzDFt1x10!no aaa new-modelswitch 1 provision ws-c3750g-24ts-1usystem mtu routing 1500ip subnet-zeroip routing                                                         ；启用IP路由功能，使VLAN间能互访ip dhcp relay information trust-all     ；启用DHCP转发功能，配置时需在终端中执行Service DHCP打开DHCP功能!ip dhcp-server 123.123.0.4                        ；指定外部DHCP服务器地址!!no file verify autospanning-tree mode pvstspanning-tree extend system-id!vlan internal allocation policy ascending!interface GigabitEthernet1/0/1 switchport access vlan 2 switchport mode access switchport port-security switchport port-security aging time 2 switchport port-security violation restrict switchport port-security aging type inactivity macro description cisco-desktop spanning-tree portfast spanning-tree bpduguard enable!interface GigabitEthernet1/0/2 switchport mode access spanning-tree portfast!switchport mode access spanning-tree portfast!interface GigabitEthernet1/0/4 switchport mode access spanning-tree portfast!interface GigabitEthernet1/0/5 switchport mode access spanning-tree portfast!interface GigabitEthernet1/0/6 switchport mode access spanning-tree portfast!interface GigabitEthernet1/0/7 switchport mode access spanning-tree portfast!interface GigabitEthernet1/0/8 switchport mode access spanning-tree portfastinterface GigabitEthernet1/0/9 switchport mode access spanning-tree portfast!interface GigabitEthernet1/0/10 switchport mode access spanning-tree portfast!interface GigabitEthernet1/0/11 switchport mode access spanning-tree portfast!interface GigabitEthernet1/0/12 switchport mode access spanning-tree portfast!interface GigabitEthernet1/0/13 switchport mode access spanning-tree portfast!interface GigabitEthernet1/0/14 switchport mode access!interface GigabitEthernet1/0/15 switchport mode access spanning-tree portfast!interface GigabitEthernet1/0/16 switchport mode access spanning-tree portfast!interface GigabitEthernet1/0/17 switchport mode access spanning-tree portfast!interface GigabitEthernet1/0/18 switchport mode access spanning-tree portfast!interface GigabitEthernet1/0/19 switchport mode access spanning-tree portfast!interface GigabitEthernet1/0/20spanning-tree portfast!interface GigabitEthernet1/0/21 switchport mode access spanning-tree portfast!interface GigabitEthernet1/0/22 switchport mode access spanning-tree portfast!interface GigabitEthernet1/0/23 switchport access vlan 3 switchport mode access spanning-tree portfast!interface GigabitEthernet1/0/24 switchport mode access spanning-tree portfast!interface GigabitEthernet1/0/25!interface GigabitEthernet1/0/26interface GigabitEthernet1/0/27!interface GigabitEthernet1/0/28!interface Vlan1                                     ；VLAN1定义 ip address 123.123.0.11 255.255.255.0!interface Vlan2                                     ；VLAN1定义 ip address 192.168.0.254 255.255.255.0 ip helper-address 123.123.0.4!interface Vlan3                                     ；VLAN1定义 ip address 192.168.2.254 255.255.255.0 ip helper-address 123.123.0.4!router rip!ip default-gateway 123.123.0.254           ；网络网关地址，外网路由器的内网卡地址ip classlessip route 0.0.0.0 0.0.0.0 123.123.0.254   ；上外网的静态路由ip http server!!!!line con 0line vty 0 4 password login length 0line vty 5 15 password login length 0!end Switch3750G# 本文来自CSDN博客，转载请标明出处：http://blog.csdn.net/azhi11111111/archive/2009/12/29/5099549.aspx