3、中小企业网络架构-接入层交换机基本配置

网络拓扑：

配置思路：

添加vlan；划分端口；配置上联接口；

操作步骤

一、SW5接入交换机

属于财务或者高级管理层部门

1、添加vlan

system-view
[Huawei]sysname SW5
[SW5]vlan batch 2 4 10

2、PC端口划分vlan

[SW5]interface  Ethernet0/0/1
[SW5-Ethernet0/0/1]port link-type access
[SW5-Ethernet0/0/1]port default  vlan  2
[SW5-Ethernet0/0/1]description connect to PC1
[SW5-Ethernet0/0/1]quit

[SW5]interface  Ethernet0/0/2
[SW5-Ethernet0/0/2]port link-type access
[SW5-Ethernet0/0/2]port default vlan  2
[SW5-Ethernet0/0/2]description connect to PC3
[SW5-Ethernet0/0/2]quit

3、AP端口划分vlan

[SW5]interface  GigabitEthernet  0/0/2
[SW5-GigabitEthernet0/0/2]port link-type trunk
[SW5-GigabitEthernet0/0/2]port trunk  allow-pass vlan all
[SW5-GigabitEthernet0/0/2]port trunk  pvid vlan 4
[SW5-GigabitEthernet0/0/2]description connect to AP10
[SW5-GigabitEthernet0/0/2]port-isolate enable 
[SW5-GigabitEthernet0/0/2]quit

4、上联接口

[SW5]interface  GigabitEthernet  0/0/1
[SW5-GigabitEthernet0/0/1]port link-type trunk
[SW5-GigabitEthernet0/0/1]port trunk  allow-pass  vlan  all
[SW5-GigabitEthernet0/0/1]description connect to SW3
[SW5-GigabitEthernet0/0/1]quit

二、SW6接入交换机

属于普通员工和外来用户WIFI

1、添加vlan

system-view 
[Huawei]sysname SW6
[SW6]vlan batch 3 4 9

2、PC端口划分vlan

[SW6]interface  Ethernet0/0/1	
[SW6-Ethernet0/0/1]port link-type access
[SW6-Ethernet0/0/1]port default  vlan  3
[SW6-Ethernet0/0/1]description connect to PC2
[SW6-Ethernet0/0/1]quit

3、AP端口划分vlan

[SW6]interface  GigabitEthernet  0/0/2
[SW6-GigabitEthernet0/0/2]port link-type trunk
[SW6-GigabitEthernet0/0/2]port trunk allow-pass  vlan  all
[SW6-GigabitEthernet0/0/2]port trunk  pvid  vlan 4
[SW6-GigabitEthernet0/0/2]description  connect to AP9
[SW6-GigabitEthernet0/0/2]port-isolate enable
[SW6-GigabitEthernet0/0/2]quit

4、上联接口

[SW6]interface  GigabitEthernet  0/0/1
[SW6-GigabitEthernet0/0/1]port link-type trunk
[SW6-GigabitEthernet0/0/1]port trunk allow-pass vlan all
[SW6-GigabitEthernet0/0/1]description  connect to SW4
[SW6-GigabitEthernet0/0/1]quit