你的位置：
首页
>
业界
>
ENSP：三层交换机+路由器+Cloud实现上网
ENSP组网图如下：
Cloud配置
（建立回环地址和地址共享省略）
SW配置
//配置交换机的telnet服务
telnet sever enable
user-interface vty 0 4
user privilege level 15
authentication mode password
set authentication password cipher 123
//配置连接AR端口
dhcp enable
vlan batch 20 30 100
interface vlanif 100
description TO-[AR]
ip address 172.18.100.2 255.255.255.0
interface gi 0/0/1
port link-type access
port default vlan 100
//配置连接PC2的端口
interface gi 0/0/2
port link-type access
port default vlan 100
//配置连接PC3的端口
interface gi 0/0/3
port link-type access
port default vlan 30
interface vlanif 30
description TO-[PC3]
ip address 10.1.30.1 255.255.255.0
dhcp select interface
dhcp server dns-list 211.137,.191.26
配置缺省路由
ip route-static 0.0.0.0 0.0.0.0 172.18.100.1
AR配置
//配置路由器telnet服务
telnet server enable
user-interface vty 0 4
user privilege level 15
authentication mode password 1
//配置NAT，使内网用户可以访问外网
acl 2000
rule 5 permit source 172.18.0.0 0.0.255.255
rule 10 permit source 10.1.0.0 0.0.255.255
interface gi 0/0/0
ip address 192.168.137.2 255.255.255.0
nat outbound 2000
interface gi 0/0/1
ip address 172.18.100.1 255.255.255.0
配置缺省路由和回程路由
ip route-static 0.0.0.0 0.0.0.0 192.168.137.1
ip route-static 10.1.0.0 255.255.0.0 172.18.100.2 ！！！！！
测试
PC3配置
ping测试
ENSP组网图如下：
Cloud配置
（建立回环地址和地址共享省略）
SW配置
//配置交换机的telnet服务
telnet sever enable
user-interface vty 0 4
user privilege level 15
authentication mode password
set authentication password cipher 123
//配置连接AR端口
dhcp enable
vlan batch 20 30 100
interface vlanif 100
description TO-[AR]
ip address 172.18.100.2 255.255.255.0
interface gi 0/0/1
port link-type access
port default vlan 100
//配置连接PC2的端口
interface gi 0/0/2
port link-type access
port default vlan 100
//配置连接PC3的端口
interface gi 0/0/3
port link-type access
port default vlan 30
interface vlanif 30
description TO-[PC3]
ip address 10.1.30.1 255.255.255.0
dhcp select interface
dhcp server dns-list 211.137,.191.26
配置缺省路由
ip route-static 0.0.0.0 0.0.0.0 172.18.100.1
AR配置
//配置路由器telnet服务
telnet server enable
user-interface vty 0 4
user privilege level 15
authentication mode password 1
//配置NAT，使内网用户可以访问外网
acl 2000
rule 5 permit source 172.18.0.0 0.0.255.255
rule 10 permit source 10.1.0.0 0.0.255.255
interface gi 0/0/0
ip address 192.168.137.2 255.255.255.0
nat outbound 2000
interface gi 0/0/1
ip address 172.18.100.1 255.255.255.0
配置缺省路由和回程路由
ip route-static 0.0.0.0 0.0.0.0 192.168.137.1
ip route-static 10.1.0.0 255.255.0.0 172.18.100.2 ！！！！！
测试
PC3配置
ping测试