实现同一个子网网段下,VLAN2和VLAN3二层隔离、三层互通(通过super-vlan的地址作为网关实现三层互通(ARP proxy))。
拓扑图如下:
1.配置vlan,并把接口加入相应的sub-vlan
[Huawei]vlan batch 2 3 23
[Huawei]int g0/0/1
[Huawei-GigabitEthernet0/0/1]port link-type ac
[Huawei-GigabitEthernet0/0/1]port de vl 2
[Huawei-GigabitEthernet0/0/1]int g0/0/02
[Huawei-GigabitEthernet0/0/1]port link-type ac
[Huawei-GigabitEthernet0/0/2]port def vlan 3
2.配置super-vlan,将sub-vlan聚合为super-vlan
[Huawei]vlan 23
[Huawei-vlan23]aggregate-vlan #配置端口为连接主机模式
[Huawei-vlan23]access-vlan 2 3 #配置vlan 2 3为聚合super-vlan
3.配置vlanif
[Huawei]int vlan 23
[Huawei-Vlanif23]ip add 23.0.0.1 24
此时pc2 pc3 分别ping通网关,还需配置arp 代理
4.配置arp代理
[Huawei-vlan23]int vlan 23
[Huawei-Vlanif23]arp-proxy inter-sub-vlan-proxy enable