二層交換機與路由器對接上網1、應用場景如圖所示，交換機Switch和路由器對接，使用戶PC1和PC2可以實現上網功能。交換機是二層交換機，僅能實現二層轉發。2、配置思路交換機基于接口劃分VLAN，實現二層轉發。路由器的配置有兩種情況(這里使用的是AR路由器)：一種是路由器的接口是二層口，通過配置VLANIF接口，實現和交換機的通信。一種是路由器的接口是三層口，通過配置子接口終結VLAN功能，實現和交換機的通信。二層交換機與路由器對接上網交換機的配置步驟（共2步）第一步：配置下行連接用戶的接口。<Switch>system-view[Switch]vlanbatch23[Switch]interfacegigabitethernet0/0/2[Switch-GigabitEthernet0/0/2]portlink-typeaccess[Switch-GigabitEthernet0/0/2]portdefaultvlan2[Switch-GigabitEthernet0/0/2]quit[Switch]interfacegigabitethernet0/0/3[Switch-GigabitEthernet0/0/3]portlink-typeaccess[Switch-GigabitEthernet0/0/3]portdefaultvlan3[Switch-GigabitEthernet0/0/3]quit第二步：配置上行連接路由器的接口。[Switch]interfacegigabitethernet0/0/1[Switch-GigabitEthernet0/0/1]portlink-typetrunk[Switch-GigabitEthernet0/0/1]porttrunkallow-passvlan23[Switch-GigabitEthernet0/0/1]quit二層交換機與路由器對接上網路由器的接口作為三層口，通過配置子接口終結VLAN進行通信的配置步驟（共4步）第一步：配置終結子接口。<Router>system-view[Router]vlanbatch23[Router]interfacegigabitethernet0/0/1.1[Router-GigabitEthernet0/0/1.1]dot1qterminationvid2

[Router-GigabitEthernet0/0/1.1]ipaddress192.168.1.124[Router-GigabitEthernet0/0/1.1]arpbroadcastenable[Router-GigabitEthernet0/0/1.1]quit[Router]interfacegigabitethernet0/0/1.2[Router-GigabitEthernet0/0/1.2]dot1qterminationvid3

[Router-GigabitEthernet0/0/1.2]ipaddress192.168.2.124[Router-GigabitEthernet0/0/1.2]arpbroadcastenable[Router-GigabitEthernet0/0/1.2]quit二層交換機與路由器對接上網路由器的接口作為三層口，通過配置子接口終結VLAN進行通信的配置步驟（共4步）第二步：配置DHCP和DNS功能，為內網用戶分配IP地址和指定DNS服務器地址。[Router]dhcpenable[Router]interfacegigabitethernet0/0/1.1[Router-GigabitEthernet0/0/1.1]dhcpselectinterface[Router-GigabitEthernet0/0/1.1]dhcpserverdns-list114.114.114.114223.5.5.5[Router-GigabitEthernet0/0/1.1]quit[Router]interfacegigabitethernet0/0/1.2

[Router-GigabitEthernet0/0/1.2]dhcpselectinterface[Router-GigabitEthernet0/0/1.2]dhcpserverdns-list114.114.114.114223.5.5.5[Router-GigabitEthernet0/0/1.2]quit二層交換機與路由器對接上網路由器的接口作為三層口，通過配置子接口終結VLAN進行通信的配置步驟（共4步）第三步：配置公網接口的IP地址和靜態路由。[Router]interfacegigabitethernet0/0/2

[Router-GigabitEthernet0/0/2]ipaddress200.0.0.2255.255.255.0[Router-GigabitEthernet0/0/2]quit[Router]iproute-static0.0.0.00.0.0.0200.0.0.1第四步：配置NAT功能，使內網用戶可以訪問外網。[Router]aclnumber2001[Router-acl-basic-2001]rule5permitsource192.168.0.00.0.255.255[Router-acl-basic-2001]quit[Router]interfacegigabitethernet0/0/2

[Router-GigabitEthernet0/0/2]natoutbound2001[Router-GigabitEthernet0/0/2]quit二層交換機與路由器對接上網路由器的接口作為二層口，通過VLANIF進行通信的配置步驟（共4步）第一步：配置VLANIF接口。<Router>system-view[Router]vlanbatch23[Router]interfacegigabitethernet0/0/1

[Router]portswitch

[Router-GigabitEthernet0/0/1]portlink-typetrunk[Router-GigabitEthernet0/0/1]porttrunkallow-passvlan23[Router-GigabitEthernet0/0/1]quit[Router]interfacevlanif2[Router-Vlanif2]ipaddress192.168.1.124[Router-Vlanif2]quit[Router]interfaceVlanif3[Router-Vlanif3]ipaddress192.168.2.124[Router-Vlanif3]quit二層交換機與路由器對接上網路由器的接口作為二層口，通過VLANIF進行通信的配置步驟（共4步）第二步：配置DHCP和DNS功能，為內網用戶分配IP地址和指定DNS服務器地址。[Router]dhcpenable[Router]interfacevlanif2

[Router-Vlanif2]dhcpselectinterface[Router-Vlanif2]dhcpserverdns-list114.114.114.114223.5.5.5[Router-Vlanif2]quit[Router]interfacevlanif3

[Router-Vlanif3]dhcpselectinterface[Router-Vlanif3]dhcpserverdns-list114.114.114.114223.5.5.5[Router-Vlanif3]quit二層交換機與路由器對接上網路由器的接口作為二層口，通過VLANIF進行通信的配置步驟（共4步）第三步：配置公網接口的IP地址和靜態路由。[Router]interfacegigabitethernet0/0/2

[Router-GigabitEthernet0/0/2]ipaddress200.0.0.2255.255.255.0[Router-GigabitEthernet0/0/2]quit[Router]iproute-static0.0.0.00.0.0.0200.0.0.1第四步：配置NAT功能，使內網用戶可以訪問外網。[Router]aclnumber2001[Router-acl-basic-2001]rule5permits