switch three-layer switch and two-layer switch joint configuration _ switch

1, now learn to sell, learn to use the

2. Environment description

1 Core Switch S5700 

2) access to switch S3700 

3. Request

1 different VLANs can not be accessed from each other, each VLAN can only belong to one department

2 The Department 12 terminals are configured as follows

Terminal 1:192.168.162.2/24 Gateway is: 192.168.162.254

Terminal 2:192.168.162.3/24 Gateway is: 192.168.162.254

3 The Department 22 terminals are configured as follows

Terminal 1:192.168.163.2/24 Gateway is: 192.168.163.254

Terminal 2:192.168.163.3/24 Gateway is: 192.168.163.254

4, the basic configuration of the core switches are as follows:

di display cur] display current-configuration # sysname] The VLAN batch 1602 to 1603 # CL  Uster enable NTDP enable NDP Enable # drop ILLEGAL-MAC Alarm # DiffServ domain Default # ACL number 3089 Rule 0 Permit IP  Destination 255.255.255.255 0 Rule 1 Permit IP source 192.168.162.0 0.0.0.255 destination 192.168.162.0.0.0.0 Rule 2 Deny IP ACL number 3090 Rule 0 Permit ip destination 255.255.255.255 0 Rule 1 Permit IP source 192.168.163.0 0.0.0.25  5 destination 192.168.163.0 0.0.0 255 rule 2 deny IP # traffic classifier 1602 operator and if-match ACL 3089 # traffic Behavior 1602 Permit # Traffic Policy 1602 classifier 1602 Behavior 1602 # drop-profile default # VLAN 1602 Traffic-po Licy 1602 Inbound # AAA Authentication-scheme default authorization-scheme default accounting-scheme Default Domain de Fault domain default_admin local-user admin password simple admin local-user admin service-type http # interface vlanif # 1 # Interface Vlanif21 #
Interface Vlanif1602 IP address 192.168.162.254 255.255.255.0 # interface Vlanif1603 IP address 192.168.163.254 255.255
.255.0 # Interface METH0/0/1 # interface GIGABITETHERNET0/0/1 Port Link-type trunk port Trunk allow-pass VLAN 2 to 4094 # interface GIGABITETHERNET0/0/2 # interface GIGABITETHERNET0/0/3 # interface GIGABITETHERNET0/0/4 # interface Gigabiteth  ERNET0/0/5 # interface GIGABITETHERNET0/0/6 # interface GIGABITETHERNET0/0/7 # interface GIGABITETHERNET0/0/8 # interface GIGABITETHERNET0/0/9 # interface GIGABITETHERNET0/0/10 # interface GIGABITETHERNET0/0/11 # interface gigabitethernet0/0 /12 # interface GIGABITETHERNET0/0/13 # interface GIGABITETHERNET0/0/14 # interface GIGABITETHERNET0/0/15 # interface Giga
BITETHERNET0/0/16 # interface Gigabitethernet0/0/17 # interface GIGABITETHERNET0/0/18 # interface GIGABITETHERNET0/0/19 # interface Gigabitethernet0/0/20 # interface GIGABITETHERNET0/0/21 # interface GIGABITETHERNET0/0/22 # interface Gigabit ETHERNET0/0/23 # interface GigaBITETHERNET0/0/24 # interface NULL0 # user-interface con 0 user-interface vty 0 4 # return 

5, the basic configuration of the access switch

display c display cur display current-configuration # sysname # VLAN batch 1602 to 1603 # Cluster enable NTDP enable NDP Enable # drop ILLEGAL-MAC Alarm # DiffServ domain Default # drop-profile default # AAA A Uthentication-scheme default authorization-scheme default accounting-scheme Default domain Default domain DEFAULT_ADMI
N Local-user Admin Password simple admin local-user admin service-type http # interface VLANIF1 # interface METH0/0/1 # Interface ETHERNET0/0/1 Port Link-type access port default VLAN 1602 # interface ETHERNET0/0/2 Port Link-type access p
 ORT default VLAN 1602 # interface ETHERNET0/0/3 Port Link-type access port default VLAN 1603 # interface ETHERNET0/0/4 Port Link-type Access port default VLAN 1603 # interface ETHERNET0/0/5 # interface ETHERNET0/0/6 # interface ethernet0/0/ 7 # Interface ETHERNET0/0/8 # interface ETHERNET0/0/9 # interface ETHERNET0/0/10 # interface ETHERNET0/0/11 # interface Et HERNET0/0/12 # interface ETHERNET0/0/13 # interface ETHERNET0/0/14 # interface ETHERNET0/0/15 # interface ETHERNET0/0/16 # interface ETHERNET0/0/1 7 # Interface Ethernet0/0/18 # interface Ethernet0/0/19 # interface ETHERNET0/0/20 # interface ETHERNET0/0/21 # interface ETHERNET0/0/22 # interface GIGABITETHERNET0/0/1 Port Link-type trunk port Trunk allow-pass VLAN 2 to 4094 # interface Gi GABITETHERNET0/0/2 # interface NULL0 # user-interface con 0 user-interface vty 0 4 # return

6. Experiment Diagram

7. Experimental results: