Current location - Education and Training Encyclopedia - Resume - How to configure IP binding for Ruijie Layer 3 switch?
How to configure IP binding for Ruijie Layer 3 switch?
The switch itself does not support this setting! In fact, adding VLANs is rarely used. Routes need loops to communicate with each other. The loops in different segments of each VLAN can distinguish the direction of VLAN. If the target is a server, filter out other VLANs directly on the trunk link! \x0d\ Configuration of Layer 1 and Layer 3 switches \ x0d \ Ruijie & gt enabled-> Enter privileged mode \ x0d \ Ruijie # configterminal-> Enter global configuration mode \ x0d \ SDK _1(config) # hostnamecd12371-> The name of the configuration switch is SDK _1\ x0d \ SDK. Enter VLAN1\ x0d \ SDK _1(config-if) # ipaddress192.168.1.245 255.255.0->; Set the management IP \ x0d \ SDK _1(config-if) # exit to VLAN1->; Return to global mode \ x0d \ SDK _1(config) # linevty04-> enter telnet password configuration mode \ x0d \ SDK _1(config-line) # login->; Telnet needs a password to succeed \ x0d \ SDK _1(config-line) # passwordlhyj @)! $ CD 1237 1->; Set the telnet password to123 \ x0d \ SDK _1(config-line) # exit-> to return to the global configuration mode \ x0d \ SDK _1(config) # enablesecretlhyj @)! $ CD 1237 1->; The password configured to enter privileged mode is123 \ x0d \ SDK _1(config) # enableservice web-server-> global web function \ x0d \ \ SDK _ 1(config)# VLAN 10 name yun Wei-> \ x0d \ SDK _ 1(config)# VLAN 20 name yanfa-& gt; Establish VLAN \ x0d \ SDK _1(config) # VLAN 30namefuwu-> \ x0d \ x0d \ SDK _1(config) # interface VLAN10->; Enter VLAN10 \ x0d \ SDK _1(config-if-VLAN10) # IP address172.10.254 255.25. Configure the address of each vlan \ x0d \ SDK _1(config-if-VLAN10) # exit \ x0d \ SDK _1(config) # interfacevlan20->; Enter vlan20 \ x0d \ SDK _1(config-if-vlan20) # ipaddress192.168.20.254 255.255.0 \ x0d \ SDK _/kloc-0. Enter VLAN 30 \ x0d \ SDK _1(config-if-VLAN 30) # ipaddress192.168.30.254 255.255.0 \ x0d \ SDK _/kloc-0. Turn on the dhcp server function \ x0d \ SDK _1(config) # IP DHCP ping packet1\ x0d \-> When the DHCP server allocates IP, it will first check whether the IP address to be allocated has been used. If it is not used, it will be distributed. If used, it will be assigned to the next IP \ x0d \ SDK _ 1(config)# IP DHCP excluded-address 192. 168. 10. 192. 168. 10. 100 \ x0d \ SDK _ 1 (If the ip address192.168.10.1is set to192.1. Sdk_ 1 (configuration) #ip dhcp exclusion-address192.168.20.168.20.100 \ x0d \ SDK Set the ip address192.168.20.101to192.168.20.160 for distribution to clients. SDK _ 1 (config) # ipdhcp excluded-address192.168.30 Change the ip address168.60.10/kloc-. 92. 168. 120 to be assigned to the client \ x0d \ x0d \ SDK _ 60. Create a file named guanli \ x0d \ SDK _1(DHCP-config) # lease0 12-> and set the rental time to12 hours \ x0d \ SDK _1(DHCP-config) # network192.168.10.0 255.255.0-Address segment assigned to the client \ nsdk _1(config) # IP. x0d \ SDK _ 1(DHCP-config)# lease 0 12 \ x0d \ SDK _ 1(DHCP-config)# network 192. 168.20 . 0 255 . 255 . 0 \ X0d \ SDK _1(ports 25 and 26 \ x0d \ SDK _1(config-if-range) # switchport mode trunk-> are encapsulated in trunk mode \ x0d \ SDK _ 1(config-if-range)# exit \ x0d \ SDK _ 1(config)# interface range FastEthernet 0/ 13-22-->; Enter the port of the switch13-24 \ x0d \ SDK _1(config-if-range) # switchport access VLAN1->; Add to VLAN1\ x0d \ SDK _1(config-if-range) # exit \ x0d \ x0d \ SDK _1(config) # InterfaceFastEthernet 0/1->; Enter the port of the switch1\ x0d \ SDK _1(config-if-fastEthernet 0/1) # noswitch port->; Open the routing mode \ x0d \ SDK _1(config-if-fastethernet0/1) # ipaddress192.168.2.2 255.255.0->; Configuration address \ x0d \ SDK _1(config-if-fastethernet0/1) # Not closed-> Open interface \ x0d \ SDK _1(config-if-fastethernet0/1) # SDK _ 1(config)# IP access list 100 Deny IP 192. 166 Prohibit anyone except operation and maintenance from accessing the server \ x0d \ The last sentence of SDK _1(config) # ipaccess-list100permit IP any-> ACL is deny ip any any default, so a permit ip any any \ x0d \ must be configured to ensure that other data can pass. Sdk_ 1 (Configuration) #ip Access List 10 1 Deny IP192.168.20 0.0.255192./kloc-0. Access to the server \ x0d \ SDK _1(config) # ipaccess-list1kloc-0/permit IP Anyany \ x0d \ SDK _1(config) # IP DHCP poolYafan \ Sdk _1(DHCP-config) # lease012 \ x0d \ SDK _1(DHCP-config) # network654438 enters ports 25 and 26 \ x0d \ SDK _1(config-if-range) # switchport mode trunk-> encapsulated in trunk mode \ x0d \ SDK _1(config-if-range) # exit \ x0d \ SDK _ 1(config)# interface range FastEthernet 0/ 13-22-->; Enter the port of the switch13-24 \ x0d \ SDK _1(config-if-range) # switchport access VLAN1->; Add to VLAN1\ x0d \ SDK _1(config-if-range) # exit \ x0d \ x0d \ SDK _1(config) # InterfaceFastEthernet 0/1->; Enter the port of the switch1\ x0d \ SDK _1(config-if-fastEthernet 0/1) # noswitch port->; Open the routing mode \ x0d \ SDK _1(config-if-fastethernet0/1) # ipaddress192.168.2.2 255.255.0->; Configuration address \ x0d \ SDK _1(config-if-fastethernet0/1) # Not closed-> Open interface \ x0d \ SDK _1(config-if-fastethernet0/1) # SDK _ 1(config)# IP access list 100 Deny IP 192. 166 Prohibit anyone except operation and maintenance from accessing the server \ x0d \ The last sentence of SDK _1(config) # ipaccess-list100permit IP any-> ACL is deny ip any any default, so a permit ip any any \ x0d \ must be configured to ensure that other data can pass. Sdk_ 1 (Configuration) #ip Access List 10 1 Deny IP192.168.20 0.0.255192./kloc-0. Access to the server \ x0d \ SDK _1(config) # ipaccess-list1kloc-0/permit IP Anyany \ x0d \ SDK _1(config) # IP DHCP poolYafan \ Sdk _1(DHCP-config) # lease012 \ x0d \ SDK _1(DHCP-config) # network654438 enters ports 25 and 26 \ x0d \ SDK _1(config-if-range) # switchport mode trunk-> encapsulated in trunk mode \ x0d \ SDK _1(config-if-range) # exit \ x0d \ SDK _ 1(config)# interface range FastEthernet 0/ 13-22-->; Enter the port of the switch13-24 \ x0d \ SDK _1(config-if-range) # switchport access VLAN1->; Add to VLAN1\ x0d \ SDK _1(config-if-range) # exit \ x0d \ x0d \ SDK _1(config) # InterfaceFastEthernet 0/1->; Enter the port of the switch1\ x0d \ SDK _1(config-if-fastEthernet 0/1) # noswitch port->; Open the routing mode \ x0d \ SDK _1(config-if-fastethernet0/1) # ipaddress192.168.2.2 255.255.0->; Configuration address \ x0d \ SDK _1(config-if-fastethernet0/1) # Not closed-> Open interface \ x0d \ SDK _1(config-if-fastethernet0/1) # SDK _ 1(config)# IP access list 100 Deny IP 192. 166 Prohibit anyone except operation and maintenance from accessing the server \ x0d \ The last sentence of SDK _1(config) # ipaccess-list100permit IP any-> ACL is deny ip any any default, so a permit ip any any \ x0d \ must be configured to ensure that other data can pass. Sdk_ 1 (Configuration) #ip Access List 10 1 Deny IP192.168.20 0.0.255192./kloc-0. Prohibit anyone except R&D from accessing the server \ x0d \ SDK _1(config) # ipaccess-list101permit IP any.