That is, session -- Huawei router switch VLAN configuration

This article describes how to divide VLAN on a Huawei router and provides detailed operation commands. This article uses four PCs as an example to explain how to divide, I believe this article will help you.

VLAN configuration instance of a Huawei router switch

The principle is the same for the use of more than four pcpcs, so here I only use four PCs), Huawei router R2621), and switch S3026e), and build a VLAN, implements the connection between the virtual network and the physical network. Implement firewall policies and access control ACLs ).

Solution description:

The IP addresses and masks of the four PCs are listed as follows:

P1 192.168.1.1 255.255.255.0 the gateway IP address is 192.168.1.5

P2 192.168.1.2 255.255.255.0 the gateway IP address is 192.168.1.5

P3 192.168.1.3 255.255.255.0 the gateway IP address is 192.168.1.6

P4 192.168.1.4 255.255.255.0 the gateway IP address is 192.168.1.6

The IP address of Ethernet0 on the vro is 192.168.1.5.

The IP address of Ethernet1 is 192.168.1.6.

The default value of firewall is deny.
Implementation command list:

Vswitch settings, VLAN Division:

Sys

// Switch to System View

[Quidway] vlan enable

[Quidway] vlan 2

[Quidway-vlan2] port e0/1 to e0/8

[Quidway-vlan2] quit

// By default, all ports belong to VLAN1. Eight ports from e0/1 to e0/8 of the specified vswitch belong to VLAN2.

[Quidway] vlan 3

[Quidway-vlan3] port e0/9 to e0/16

[Quidway-vlan3] quit

// The e0/9 to e0/16 ports of the specified vswitch belong to VLAN3

[Quidway] dis vlan all

[Quidway] dis cu
Set on the vro to implement access control:

[Router] interface ethernet 0

[Router-Ethernet0] ip address 192.168.1.5 255.255.255.0

[Router-Ethernet0] quit

// Specify the ip address of ethernet 0

[Router] interface ethernet 1

[Router-Ethernet1] ip address 192.168.1.6 255.255.255.0

[Router-Ethernet1] quit

// Enable firewall and set it to deny by default

[Router] fire enable

[Router] fire default deny

// Allow 192.168.1.1 to access 192.168.1.3

// You can add a firewall policy as needed.

[Role] acl 101

[Router-acl-101] rule permit ip source 192.168.1.1 255.255.255.0 destination 192.168.1.3 255.255.255.0

[Router-acl-101] quit

// Enable 101 rules

[Router-Ethernet0] fire pa 101

[Router-Ethernet0] quit

[Router-Ethernet1] fire pa 101

[Router-Ethernet1] quit