华为交换机配置接口与VLAN

2025-1-24

配置接入层交换机

  1. 以接入交换机ACC1为例，创建ACC1的业务VLAN 10。 
    <HUAWEI> system-view 
[HUAWEI] sysname ACC1              //修改设备名称为ACC1
[ACC1] vlan batch 10                //批量创建VLAN
  2. 配置ACC1连接CORE的Eth-Trunk1，透传部门A的VLAN。 
    [ACC1] interface eth-trunk 1
[ACC1-Eth-Trunk1] port link-type trunk              //配置为trunk模式，用于透传VLAN。
[ACC1-Eth-Trunk1] port trunk allow-pass vlan 10     //配置Eth-Trunk1透传ACC1上的业务VLAN
[ACC1-Eth-Trunk1] mode lacp                        //配置Eth-Trunk1为LACP模式
[ACC1-Eth-Trunk1] quit
[ACC1] interface GigabitEthernet 0/0/1             //将成员接口加入Eth-Trunk1
[ACC1-GigabitEthernet0/0/1] eth-Trunk 1[ACC1-GigabitEthernet0/0/1] quit
[ACC1] interface GigabitEthernet 0/0/2
[ACC1-GigabitEthernet0/0/2] eth-Trunk 1
[ACC1-GigabitEthernet0/0/2] quit
  3. 配置ACC1连接用户的接口，使用户加入VLAN，并将接口配置成边缘端口。 
    [ACC1] interface Ethernet 0/0/2                //配置连接PC1的接口
[ACC1-Ethernet0/0/2] port link-type access
[ACC1-Ethernet0/0/2] port default vlan 10
[ACC1-Ethernet0/0/2] stp edged-port enable
[ACC1-Ethernet0/0/2] quit
[ACC1] interface Ethernet 0/0/3                //配置连接PC2的接口
[ACC1-Ethernet0/0/3] port link-type access
[ACC1-Ethernet0/0/3] port default vlan 10
[ACC1-Ethernet0/0/3] stp edged-port enable
[ACC1-Ethernet0/0/3] quit
[ACC1] interface Ethernet 0/0/4                //配置连接打印机的接口
[ACC1-Ethernet0/0/4] port link-type access
[ACC1-Ethernet0/0/4] port default vlan 10
[ACC1-Ethernet0/0/4] stp edged-port enable
[ACC1-Ethernet0/0/4] quit

    如果把ACC1下接入的用户都加入VLAN 10，为了配置简单，也可以ACC1上不配置VLAN，而是把CORE的Eth-Trunk1以access方式加入VLAN10，这样Eth-Trunk1接入的用户全部属于VLAN10。

  4. 配置BPDU保护功能，加强网络的稳定性。 
    [ACC1] stp bpdu-protection

配置核心层交换机

  1. 批量创建CORE与ACC1、ACC2以及园区出口路由器互通的VLAN。 
    <HUAWEI> system-view 
[HUAWEI] sysname CORE                            //修改设备名称为CORE
[CORE] vlan batch 10 20 100                      //批量创建VLAN
  2. 配置下行接口和VLANIF接口，VLANIF接口用于部门A与部门B之间互访。以CORE连接ACC1的Eth-Trunk1为例。 
    [CORE] interface eth-trunk 1 
[CORE-Eth-Trunk1] port link-type trunk          //配置为trunk模式，用于透传VLAN
[CORE-Eth-Trunk1] port trunk allow-pass vlan 10   //配置Eth-Trunk1透传ACC1上的业务VLAN
[CORE-Eth-Trunk1] mode lacp                    //配置为LACP模式
[CORE-Eth-Trunk1] quit
[CORE] interface GigabitEthernet 0/0/1         //将成员接口加入Eth-Trunk1
[CORE-GigabitEthernet0/0/1] eth-Trunk 1
[CORE-GigabitEthernet0/0/1] quit
[CORE] interface GigabitEthernet 0/0/2
[CORE-GigabitEthernet0/0/2] eth-Trunk 1
[CORE-GigabitEthernet0/0/2] quit
[CORE] interface Vlanif 10                    //配置VLANIF，使部门A与部门B之间三层互通
[CORE-Vlanif10] ip address 10.10.10.1 24
[CORE-Vlanif10] quit
[CORE] interface Vlanif 20                   //配置VLANIF，使部门B与部门A之间三层互通
[CORE-Vlanif20] ip address 10.10.20.1 24
[CORE-Vlanif20] quit
  3. 配置上行接口和VLANIF接口，使园区网络与Internet互通。 
    [CORE] interface GigabitEthernet 0/0/20
[CORE-GigabitEthernet0/0/20] port link-type access          //配置为access模式
[CORE-GigabitEthernet0/0/20] port default vlan 100  
[CORE-GigabitEthernet0/0/20] quit
[CORE] interface Vlanif 100            //配置VLANIF，使CORE与路由器之间三层互通
[CORE-Vlanif100] ip address 10.10.100.1 24
[CORE-Vlanif100] quit
  4. 完成接口和VLAN的配置后，可以通过以下命令查看配置结果，显示信息说明可选择对应设备版本查阅《命令参考》。
    执行display eth-trunk 命令检查ACC1上的Eth-Trunk接口配置结果。可以看到，ACC1上， 接口GE0/0/1和GE0/0/2 加入了Eth-Trunk 1。

    [ACC1] display eth-trunk 1
Eth-Trunk1's state information is:
Local:
LAG ID: 1                   WorkingMode: LACP
Preempt Delay: Disabled     Hash arithmetic: According to SA-XOR-DA
System Priority: 32768      System ID: 0200-0000-6704
Least Active-linknumber: 1  Max Active-linknumber: 8
Operate status: up          Number Of Up Port In Trunk: 1
--------------------------------------------------------------------------------
ActorPortName          Status   PortType PortPri PortNo PortKey PortState Weight
GigabitEthernet0/0/1   Selected 1000M     32768   2      289     10111100  1
GigabitEthernet0/0/2   Selected 1000M     32768   3      289     10100010  1

Partner:--------------------------------------------------------------------------------
ActorPortName          SysPri   SystemID        PortPri PortNo PortKey PortState
GigabitEthernet0/0/1   32768    0012-3321-2212  32768   2      289     10111100 
GigabitEthernet0/0/2   32768    0012-3321-2212  32768   3      289     10111100

    执行display vlan命令检查ACC1上的VLAN配置结果。可以看到，ACC1上，接口Eth0/0/2~Eth0/0/4以Untagged方式加入VLAN10，Eth-Trunk 1以Tagged方式加入VLAN10。

    [ACC1] display vlan
The total number of VLANs is : 1
--------------------------------------------------------------------------------
U: Up;         D: Down;         TG: Tagged;         UT: Untagged;
MP: Vlan-mapping;               ST: Vlan-stacking;
#: ProtocolTransparent-vlan;    *: Management-vlan;
--------------------------------------------------------------------------------
VID  Type    Ports
--------------------------------------------------------------------------------
10  common  UT:Eth0/0/2(U)      Eth0/0/3(U)      Eth0/0/4(U)
            TG:Eth-Trunk1(U) 
VID  Status  Property      MAC-LRN Statistics Description
--------------------------------------------------------------------------------
10   enable  default       enable  disable    VLAN 0010

    执行display eth-trunk命令检查CORE上Eth-Trunk接口配置结果。可以看到，CORE上， 接口GE0/0/1和GE0/0/2 加入了Eth-Trunk 1。

    [CORE] display eth-trunk 1
Eth-Trunk1's state information is:
Local:
LAG ID: 1                   WorkingMode: LACP
Preempt Delay: Disabled     Hash arithmetic: According to SA-XOR-DA
System Priority: 32768      System ID: 0200-0000-6703
Least Active-linknumber: 1  Max Active-linknumber: 8
Operate status: up          Number Of Up Port In Trunk: 1
--------------------------------------------------------------------------------
ActorPortName          Status   PortType PortPri PortNo PortKey PortState Weight
GigabitEthernet0/0/1   Selected 1000M     32768   2      289     10111100  1
GigabitEthernet0/0/2   Selected 1000M     32768   3      289     10100010  1

Partner:
--------------------------------------------------------------------------------
ActorPortName          SysPri   SystemID        PortPri PortNo PortKey PortState
GigabitEthernet0/0/1   32768    0012-3321-2211  32768   2      289     10111100 
GigabitEthernet0/0/2   32768    0012-3321-2211  32768   3      289     10111100

    执行display vlan命令检查CORE上VLAN配置结果。可以看到，CORE上，接口Eth-Trunk1、Eth-Trunk2分别以Tagged方式加入VLAN10和VLAN20；GE0/0/20以Tagged方式加入VLAN100。

    [CORE] display vlan
The total number of VLANs is : 3
--------------------------------------------------------------------------------
U: Up;         D: Down;         TG: Tagged;         UT: Untagged;
MP: Vlan-mapping;               ST: Vlan-stacking;
#: ProtocolTransparent-vlan;    *: Management-vlan;
-------------------------------------------------------------------------------
VID  Type    Ports
--------------------------------------------------------------------------------
10   common  TG:Eth-Trunk1(U)
20   common  TG:Eth-Trunk2(U)
100  common  TG:GE0/0/20(U)
VID  Status  Property      MAC-LRN Statistics Description
--------------------------------------------------------------------------------
10   enable  default       enable  disable    VLAN 0010
20   enable  default       enable  disable    VLAN 0020
100  enable  default       enable  disable    VLAN 0100
阅读剩余
版权声明：
作者：SE_YT
链接：https://www.cnesa.cn/3013.html
文章版权归作者所有，未经允许请勿转载。
THE END
华为交换机配置管理IP和Telnet
<<上一篇
华为交换机配置配置DHCP Snooping和IPSG
下一篇>>
相关推荐
锐捷交换机NFPP配置案例
RIP基本功能快速配置指南
锐捷S7910E 部分终端web重定向认证故障
静态路由快速配置指南
锐捷无法弹出portal认证界面排查SOP
锐捷交换机NFPP应用场景和功能介绍
【IDP】IDP Server启动异常，即MySQL版本错误，导致IDP Server无法启动
作为网络工程师应该掌握哪些专业知识？
OSPF快速配置指南
锐捷S2910H 交换机cpu利用率高
Copyright © 2025 CNESA CoreNext Powered by WordPress