基于HCL环境的三层交换机实现路由转发的配置与验证

案例背景：常规的跨vlan路由转发由于是在路由器上配置了单个端口的子接口划分实现的，在较大规模的网络环境中极意因为单点端口故障而导致的通信终端，所以将路由转发合并到了二层交换机上，由此形成了在转发mac地址的功能上增加了转发IP地址表的三层交换机，提高了可靠性。

构建拓扑图：

方法一：

1. 配置pc静态地址

PC2：192.168.1.1  网关地址：192.168.1.254

PC3：192.168.2.1  网关地址：192.168.2.254

2. 配置交换机虚拟端口

[SW1]interface Vlan-interface 10
//配置虚拟三层接口

[SW1-Vlan-interface10]ip address 192.168.1.254 24
//为虚拟三层接口配置ip

[SW1]interface Vlan-interface 20
//配置虚拟三层接口

[SW1-Vlan-interface10]ip address 192.168.2.254 24
//为虚拟三层接口配置ip

3. 验证

三层交换机路由表：

[SW1]display ip routing-table 

Destinations : 20	Routes : 20

Destination/Mask   Proto   Pre Cost        NextHop         Interface
0.0.0.0/32         Direct  0   0           127.0.0.1       InLoop0
127.0.0.0/8        Direct  0   0           127.0.0.1       InLoop0
127.0.0.0/32       Direct  0   0           127.0.0.1       InLoop0
127.0.0.1/32       Direct  0   0           127.0.0.1       InLoop0
127.255.255.255/32 Direct  0   0           127.0.0.1       InLoop0
192.168.1.0/24     Direct  0   0           192.168.1.254   Vlan10
192.168.1.0/32     Direct  0   0           192.168.1.254   Vlan10
192.168.1.254/32   Direct  0   0           127.0.0.1       InLoop0
192.168.1.255/32   Direct  0   0           192.168.1.254   Vlan10
192.168.2.0/24     Direct  0   0           192.168.2.254   Vlan20
192.168.2.0/32     Direct  0   0           192.168.2.254   Vlan20
192.168.2.254/32   Direct  0   0           127.0.0.1       InLoop0
192.168.2.255/32   Direct  0   0           192.168.2.254   Vlan20
192.168.56.0/24    Direct  0   0           192.168.56.2    MGE0/0/0
192.168.56.0/32    Direct  0   0           192.168.56.2    MGE0/0/0
192.168.56.2/32    Direct  0   0           127.0.0.1       InLoop0
192.168.56.255/32  Direct  0   0           192.168.56.2    MGE0/0/0
224.0.0.0/4        Direct  0   0           0.0.0.0         NULL0
224.0.0.0/24       Direct  0   0           0.0.0.0         NULL0

pc通信验证：

<H3C>ping 192.168.1.1
Ping 192.168.1.1 (192.168.1.1): 56 data bytes, press CTRL_C to break
56 bytes from 192.168.1.1: icmp_seq=0 ttl=254 time=2.000 ms
56 bytes from 192.168.1.1: icmp_seq=1 ttl=254 time=1.000 ms
56 bytes from 192.168.1.1: icmp_seq=2 ttl=254 time=1.000 ms
56 bytes from 192.168.1.1: icmp_seq=3 ttl=254 time=1.000 ms
56 bytes from 192.168.1.1: icmp_seq=4 ttl=254 time=0.000 ms

--- Ping statistics for 192.168.1.1 ---
5 packet(s) transmitted, 5 packet(s) received, 0.0% packet loss
round-trip min/avg/max/std-dev = 0.000/1.000/2.000/0.632 ms
<H3C>%Nov 12 18:31:24:063 2023 H3C PING/6/PING_STATISTICS: Ping statistics for 192.168.1.1: 5 packet(s) transmitted, 5 packet(s) received, 0.0% packet loss, round-trip min/avg/max/std-dev = 0.000/1.000/2.000/0.632 ms.

 

方法二：

1. 配置pc静态地址

PC2：192.168.1.1  网关地址：192.168.1.254

PC3：192.168.2.1  网关地址：192.168.2.254

2. 配置交换机接口

[SW1]int g1/0/2

[SW1-GigabitEthernet1/0/2]port link-mode route 
//链路接口从bridge更改为route

 

[SW1]int g1/0/3

[SW1-GigabitEthernet1/0/3]port link-mode route 
//链路接口从bridge更改为route

3. 配置网关接口

必须经过步骤2才可以配置给端口配置IP

[SW1]int g1/0/3

[SW1-GigabitEthernet1/0/3]ip address 192.168.2.254 24
//g1/0/3网关配置

[SW1]int g1/0/2

[SW1-GigabitEthernet1/0/3]ip address 192.168.1.254 24

4. 状态查询

交换机端口状态查询：

[SW1]display interface brief 
Brief information on interfaces in route mode:
Link: ADM - administratively down; Stby - standby
Protocol: (s) - spoofing
Interface            Link Protocol Primary IP      Description                
GE1/0/2              DOWN DOWN     192.168.1.254   
GE1/0/3              DOWN DOWN     192.168.2.254     
InLoop0              UP   UP(s)    --              
MGE0/0/0             UP   UP       192.168.56.2    
NULL0                UP   UP(s)    --              
REG0                 UP   --       --              

交换机路由表查询：

[SW1]display ip routing-table 

Destinations : 20	Routes : 20

Destination/Mask   Proto   Pre Cost        NextHop         Interface
0.0.0.0/32         Direct  0   0           127.0.0.1       InLoop0
127.0.0.0/8        Direct  0   0           127.0.0.1       InLoop0
127.0.0.0/32       Direct  0   0           127.0.0.1       InLoop0
127.0.0.1/32       Direct  0   0           127.0.0.1       InLoop0
127.255.255.255/32 Direct  0   0           127.0.0.1       InLoop0
192.168.1.0/24     Direct  0   0           192.168.1.254   GE1/0/2     //目标路由
192.168.1.0/32     Direct  0   0           192.168.1.254   GE1/0/2
192.168.1.254/32   Direct  0   0           127.0.0.1       InLoop0
192.168.1.255/32   Direct  0   0           192.168.1.254   GE1/0/2
192.168.2.0/24     Direct  0   0           192.168.2.254   GE1/0/3     //目标路由
192.168.2.0/32     Direct  0   0           192.168.2.254   GE1/0/3
192.168.2.254/32   Direct  0   0           127.0.0.1       InLoop0
192.168.2.255/32   Direct  0   0           192.168.2.254   GE1/0/3
192.168.56.0/24    Direct  0   0           192.168.56.2    MGE0/0/0
192.168.56.0/32    Direct  0   0           192.168.56.2    MGE0/0/0
192.168.56.2/32    Direct  0   0           127.0.0.1       InLoop0
192.168.56.255/32  Direct  0   0           192.168.56.2    MGE0/0/0
224.0.0.0/4        Direct  0   0           0.0.0.0         NULL0
224.0.0.0/24       Direct  0   0           0.0.0.0         NULL0
---- More ----

pc通信验证：

<H3C>ping 192.168.1.1
Ping 192.168.1.1 (192.168.1.1): 56 data bytes, press CTRL_C to break
56 bytes from 192.168.1.1: icmp_seq=0 ttl=254 time=1.000 ms
56 bytes from 192.168.1.1: icmp_seq=1 ttl=254 time=1.000 ms
56 bytes from 192.168.1.1: icmp_seq=2 ttl=254 time=1.000 ms
56 bytes from 192.168.1.1: icmp_seq=3 ttl=254 time=1.000 ms
56 bytes from 192.168.1.1: icmp_seq=4 ttl=254 time=1.000 ms

--- Ping statistics for 192.168.1.1 ---
5 packet(s) transmitted, 5 packet(s) received, 0.0% packet loss
round-trip min/avg/max/std-dev = 1.000/1.000/1.000/0.000 ms
<H3C>%Nov 12 18:15:11:061 2023 H3C PING/6/PING_STATISTICS: Ping statistics for 192.168.1.1: 5 packet(s) transmitted, 5 packet(s) received, 0.0% packet loss, round-trip min/avg/max/std-dev = 1.000/1.000/1.000/0.000 ms.