在網絡架構中，三層交換機和路由器都扮演著非常重要的角色。三層交換機主要用于在局域網內部進行數據包轉發和過濾，而路由器則用于連接不同的網絡并進行路由選擇和跨網絡通信。正確配置三層交換機和路由器可以提高網絡的性能和安全性，從而確保網絡的正常運行。然而，由于網絡配置的復雜性和多樣性，不同的網絡架構可能需要不同的配置方法。在本篇文章中，我整理了一份通用的三層交換機和路由器配置方法，以幫助有需要的友友們更好地了解相關技能。希望友友們可以從中獲得一些有用的信息。

實驗內容及目標：

1、不同vlan 下的客戶端能夠訪問外網【2.2.2.1】

2、了解路由器和三層交換機之間的連接及配置

3、了解三層交換機和接入交換機之間的連接及配置

實驗拓撲圖：

實驗設備及版本：

本實驗所用到的設備為：

1、交換機：華為 Quidway S5700-28C-HI VRP (R) software, Version 5.110

2、路由器：華為 AR1200 VRP (R) software, Version 5.130

3、PC主機：

實驗過程：

一、建立物理連接

按照拓撲圖進行組網

二、接入交換機配置

這里以紅框內的第一個交換機為例

<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]
[Huawei]sysname	
[Huawei]sysname switch1
Apr  9 2023 19:11:09-08:00 switch1 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.
5.25.191.3.1 configurations have been changed. The current change number is 4, t
he change loop count is 0, and the maximum number of records is 4095.
[switch1]undo info-center enable 
Info: Information center is disabled.
[switch1]

#創建vlan
[switch1]
[switch1]vlan bat	
[switch1]vlan batch 1 to 3
Info: This operation may take a few seconds. Please wait for a moment...done.
[switch1]
#將接口加入到vlan 中
[switch1]interface GigabitEthe.NET 0/0/2
[switch1-GigabitEthernet0/0/2]port link-type access 
[switch1-GigabitEthernet0/0/2]port default vlan 1
[switch1-GigabitEthernet0/0/2]q
[switch1]
[switch1]interface GigabitEthernet 0/0/3
[switch1-GigabitEthernet0/0/3]port link-type access 
[switch1-GigabitEthernet0/0/3]port default vlan 1
[switch1-GigabitEthernet0/0/3]q
[switch1]
[switch1]
#設置與三層核心交換機相連的接口為trunk，并設置運行通過vlan 1，vlan2，vlan3
[switch1]interface GigabitEthernet 0/0/1
[switch1-GigabitEthernet0/0/1]dis this
#
interface GigabitEthernet0/0/1
#
return
[switch1-GigabitEthernet0/0/1]port link-type trunk 
[switch1-GigabitEthernet0/0/1]
[switch1-GigabitEthernet0/0/1]port trunk allow-pass vlan 1 to 3
[switch1-GigabitEthernet0/0/1]
[switch1-GigabitEthernet0/0/1]q
[switch1]

其他的幾個接入交換機配置過程相同，配置時，注意接口。

三、三層交換機配置

#創建VLAN接口并配置IP地址：
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]undo in	
[Huawei]undo info-center en	
[Huawei]undo info-center enable 
Info: Information center is disabled.
[Huawei]
[Huawei]interface Vlanif 1
[Huawei-Vlanif1]ip address 192.168.1.1 24
[Huawei-Vlanif1]
[Huawei-Vlanif1]q
[Huawei]int	
[Huawei]interface vlan	
[Huawei]interface Vlanif 2
Error: The VLAN does not exist.
[Huawei]vlan batch 2 to 3
Info: This operation may take a few seconds. Please wait for a moment...done.
[Huawei]
[Huawei]interface Vlanif 2
[Huawei-Vlanif3]
[Huawei-Vlanif3]ip ad	
[Huawei-Vlanif3]ip address 192.168.2.1 24
[Huawei-Vlanif3]
[Huawei-Vlanif3]q
[Huawei]int	
[Huawei]interface vla	
[Huawei]interface Vlanif 3
[Huawei-Vlanif3]
[Huawei-Vlanif3]
[Huawei-Vlanif3]ip add	
[Huawei-Vlanif3]ip address 192.168.3.1 24
[Huawei-Vlanif3]
[Huawei-Vlanif3]
[Huawei-Vlanif3]q
[Huawei]
[Huawei]
[Huawei]sysna	
[Huawei]sysname Switch-Hexin
[Switch-Hexin]
[Switch-Hexin]
#配置三層交換機上連接到接入交換機的接口為Trunk模式，并允許相應VLAN通過：
[Switch-Hexin]interface GigabitEthernet 0/0/2
[Switch-Hexin-GigabitEthernet0/0/2]port link-type trunk 
[Switch-Hexin-GigabitEthernet0/0/2]port trunk allow-pass vlan 1 to 3
[Switch-Hexin-GigabitEthernet0/0/2]q

# 配置與路由器相連的接口
[Switch-Hexin]
[Switch-Hexin]vlan batch 10
Info: This operation may take a few seconds. Please wait for a moment...done.
[Switch-Hexin]
[Switch-Hexin]interface GigabitEthernet 0/0/1
[Switch-Hexin-GigabitEthernet0/0/1]	
[Switch-Hexin-GigabitEthernet0/0/1]port link-type access 
[Switch-Hexin-GigabitEthernet0/0/1]port default vlan 10
[Switch-Hexin-GigabitEthernet0/0/1]q	
[Switch-Hexin]interface Vlanif 10
[Switch-Hexin-Vlanif10]ip address 192.168.10.2 24
[Switch-Hexin-Vlanif10]
[Switch-Hexin-Vlanif10]q
[Switch-Hexin]
#配置靜態路由
[Switch-Hexin]
[Switch-Hexin]ip route-static 0.0.0.0 0.0.0.0 192.168.10.1
[Switch-Hexin]

四、路由器配置

[Router]interface GigabitEthernet 0/0/1
[Router-GigabitEthernet0/0/1]ip address 192.168.10.1 255.255.255.0
[Router-GigabitEthernet0/0/1]q
[Router]interface GigabitEthernet 0/0/0
[Router-GigabitEthernet0/0/0]ip address 2.2.2.2 24
[Router-GigabitEthernet0/0/0]
[Router-GigabitEthernet0/0/0]q
[Router]ip route-static 0.0.0.0 0.0.0.0 2.2.2.1
[Router]
[Router]ip route-static 192.168.0.0 255.255.0.0 192.168.10.2
[Router]

#配置NAT 轉換
[Router]acl number 2001	
[Router-acl-basic-2001]rule 5 permit source 192.168.0.0 0.0.255.255
[Router-acl-basic-2001]q
[Router]interface GigabitEthernet 0/0/0
[Router-GigabitEthernet0/0/0]nat outbound 2001
[Router-GigabitEthernet0/0/0]qu
[Router]

五、測試：