[Background description] The company has an internal DI-604LB + Broadband Router and a layer-3 switch. To prevent broadcast storms in the network, the Administrator has created three VLANs on the layer-3 switch. The company uses DI-604LB + Broadband Router Access to the Internet, in order to make the three VLAN clients can be connected to the network through the router, DI-604LB + Broadband Router and the use of DES-3326S layer-3 switch is essential.
[Tutorial topology] hosts in each VLAN are set to static addresses.
[Experimental device] One D-Link Broadband Router, one layer-3 Switch, several test PCs, several network cables. Experimental steps: divide three VLANs on the DES-3326S and add corresponding ports respectively.
To create a VLAN Virtual Interface, run the following command:
The router settings are as follows: configure the router to connect to the Internet.
Configure the NAT Access Control List:
Configure the static route to the destination network:
Note: The Next Hop address of the destination network is the virtual interface IP address of layer-3 V10, because the router is directly connected to V10.
Connect to a test PC in V10, and set the IP address as follows:
In this way, the clients in the three VLANs can access the Internet through the vro.
[Note] in the actual application of routers and layer-3 switches, the IP address information of the computer in the network is automatically obtained from the DHCP server of the router. If the computer in each VLAN obtains IP address information from the DHCP server, you must enable the DHCP-Relay function on the layer-3 switch.