本文共 2119 字,大约阅读时间需要 7 分钟。
ISA2004+三层交换机实现多VLAN通信 使用设备:
ISA2004服务器一台 华为三层交换机一台 服务器多 台电脑多台 IP设置: 规划将原来四个厂区网络合并更改后为: VLAN1:192.168.1.0/24 VLAN2:192.168.2.0/24 VLAN3:192.168.3.0/24 VLAN4:192.168.4.0/24要求使用同一个域服务器,文件服务器,实现资源工享.通过同一个出口上网,而且可以管控所有网段的电脑上网.
ISA:
内:192.168.100.250 外:30.1.1.1(用于ADSL拔号) IA2004内网卡设置. 交换机配置(设备为华为3600EI版): <S3600>sys System View: return to User View with Ctrl+Z. [S3600]undo vlan all This may delete all static VLAN except the VLAN kept by protocol, the voice VLAN , the default VLAN, the management VLAN and the remote probe VLAN. Are you sure?[Y/N]:y Please wait... Done. [S3600]vlan 11 [S3600-vlan11]description VLAN1 [S3600-vlan11]port ethernet 1/0/1 ethernet 1/0/2 [S3600-vlan11]vlan 12 [S3600-vlan12]port ethernet 1/0/3 [S3600-vlan12]vlan 13 [S3600-vlan13]port ethernet 1/0/4 [S3600-vlan13]vlan 14 [S3600-vlan14]port [S3600-vlan14]vlan 11 [S3600-vlan11]inte vlan 11 [S3600-Vlan-interface11] %Apr 2 02:43:21:968 2000 S3600 L2INF/5/VLANIF LINK STATUS CHANGE:- 1 - Vlan-interface11: is UP [S3600-Vlan-interface11]ip addr 192.168.1.254 255.255.255.0 [S3600-Vlan-interface11] %Apr 2 02:44:22:098 2000 S3600 IFNET/5/UPDOWN:- 1 -Line protocol on the interfa ce Vlan-interface11 is UP [S3600-Vlan-interface11]vlan 12 [S3600-vlan12]inte vlan 12 [S3600-Vlan-interface12]ip addr 192.168.2.254 255.255.255.0 [S3600-Vlan-interface12]vlan 13 [S3600-vlan13]inte vlan 13 [S3600-Vlan-interface13]ip addr 192.168.3.254 255.255.255.0 [S3600-Vlan-interface13]vlan 14 [S3600-vlan14]inte vlan 14 [S3600-Vlan-interface14]ip addr 192.168.4.254 255.255.255.0 [S3600-Vlan-interface14]vlan 100 [S3600-vlan100]inte vlan 100 [S3600-Vlan-interface100]ip addr 192.168.100.254 255.255.255.0 [S3600-Vlan-interface100]ip route-static 0.0.0.0 0.0.0.0 192.168.0.250 [S3600]save
在ISA上的反向路由可以用,route -p add 命令加进去
例如 route -p add 192.168.1.0 mask 255.255.255.0 192.168.1.254
route -p add 192.168.2.0 mask 255.255.255.0 192.168.2.254
修正,应该是
route -p add 192.168.1.0 mask 255.255.255.0 192.168.0.254
route -p add 192.168.2.0 mask 255.255.255.0 192.168.0.254
多谢,博友@huqiliu指出问题.
(要指向那个网段的网关).
本文转自 tao61 博客,原文链接: http://blog.51cto.com/tao61/147108 如需转载请自行联系原作者