\u62d3\u6251\u4ecb\u7ecd<\/b><\/strong><\/h2>\n![\"\"](\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\")
<\/div><\/a><\/p>\n\u62d3\u6251\u8bf4\u660e<\/b><\/strong><\/h2>\n\u8fde\u7ebf\u8bf4\u660e\uff1a<\/p>\n
<\/div><\/a><\/p>\nvlan\u8bf4\u660e\uff1a<\/p>\n
1.vlan5 \u8bbe\u5907\u95f4\u901a\u4fe1\u5730\u5740 192.168.5.0\/24<\/p>\n
2.vlan30 \u8bbe\u5907lldp\u7ba1\u7406\u5730\u574030.1.1.0\/24<\/p>\n
3.vlan35 ap lldp\u7ba1\u7406\u5730\u574033.1.1.0\/24<\/p>\n
4.vlan100 \u6709\u7ebf\u7f51\u7edc10.10.100.0\/24<\/p>\n
5.vlan200 \u65e0\u7ebf\u7f51\u7edc10.10.200.0\/24<\/p>\n
\u4e92\u8054\u5730\u5740\u8bf4\u660e\uff1a<\/p>\n
1.\u534e\u4e3aax3int0\/4 ip10.10.20.1\/24<\/p>\n
2.pfsense int0\/0 ip10.10.20.2\/24<\/p>\n
3.pfsense int0\/1 ip 192.168.10.0\/24<\/p>\n
lldp\u7ba1\u7406\u5730\u5740\u8bf4\u660e\uff1a<\/p>\n
1.pfsense lldp 33.1.1.1\/24<\/p>\n
2.cisco 3560 lldp 30.1.1.1\/24<\/p>\n
3.\u534e\u4e3aac6005-8 lldp30.1.1.2\/24<\/p>\n
4.\u534e\u4e3aap5760-51 lldp 35.1.1.3\/24<\/p>\n
\u6ce8\u610f\uff1a\u62d3\u6251\u56fe\u4e0a\u6240\u6709\u63a5\u53e3\u5e76\u6ca1\u6709IP\u5730\u5740\uff0c\u6240\u6709IP\u5730\u5740\u662f\u7531vlan\u7ba1\u7406ip\u627f\u62c5\u8d1f\u8d23\u8def\u7531\u6536\u53d1\u3002<\/p>\n
C<\/b><\/strong>onsole\u53e3\u7ebf\u7f06\u914d\u7f6e<\/b><\/strong><\/h1>\n\u9700\u8981\u4f7f\u7528\u4e00\u6839console\u7ebf\u7f06\u4e0e\u4ea4\u6362\u673a\u5bf9\u63a5\u4f7f\u7528cl\u547d\u4ee4\u884c\u6765\u521d\u59cb\u5316\u4ea4\u6362\u673a\uff0c\u628aconsole\u7ebf\u7f06\u7684USB\u63a5\u53e3\u63d2\u5165\u5230\u4efb\u610f\u7535\u8111\u4e2d\uff0c\u4f7f\u7528ssh\u8f6f\u4ef6\u8fde\u63a5\u4ea4\u6362\u673a\u3002<\/p>\n
<\/div><\/a><\/p>\n <\/p>\n
Windows\u7cfb\u7edf\u2014\u2014\u53f3\u952e\u6b64\u7535\u8111\u2014\u2014\u7ba1\u7406\u2014\u2014\u8ba1\u7b97\u673a\u7ba1\u7406\u4e2d\u5de6\u4fa7\u627e\u5230\u8bbe\u5907\u7ba1\u7406\u5668\u2014\u2014\u53f3\u8fb9\u627e\u5230\u7aef\u53e3\u2014\u2014\u67e5\u770b\u662f\u5426\u6709USBSerial\u00a0Port\uff08COM5\uff09<\/p>\n
\u6ce8\u610f\uff1a\u8bb0\u4f4fCOM5\u6211\u4eec\u4f7f\u7528ssh\u8f6f\u4ef6\u8981\u8fde\u63a5\u8fd9\u4e2acom5<\/p>\n
<\/div><\/a><\/p>\n\u9e21\u54e5\u4f7f\u7528securecrt\u8f6f\u4ef6\u8fdb\u884c\u8fde\u63a5\uff0c\u70b9\u51fb01\u5feb\u901f\u8fde\u63a5\uff0c02\u534f\u8bae\u9009\u62e9serial\uff0c03\u9009\u62e9com5usb\uff0c04\u9009\u62e99600,05\u70b9\u51fb\u8fde\u63a5\u3002<\/p>\n
<\/div><\/a><\/p>\n\u70b9\u51fb\u56de\u8f66\u5c31\u53ef\u4ee5\u8fdb\u5165\u4ea4\u6362\u673a\u7684\u547d\u4ee4\u884c\u754c\u9762\u4e86\u3002<\/p>\n
<\/div><\/a><\/p>\n\u521d\u59cb\u5316\u8bbe\u5907<\/b><\/strong><\/h1>\nPfsense<\/b><\/strong>\u9632\u706b\u5899\u8bbe\u7f6e<\/b><\/strong><\/h2>\nPfsens\u9632\u706b\u5899\u8bbe\u7f6ewan\u53e3\u548clan\u53e3<\/h3>\n
\u8bf4\u660e\uff1awan\u53e3\u8d1f\u8d23\u901a\u5411\u5916\u7f51\u5c31\u662f\u4e92\u8054\u7f51\uff0clan\u53e3\u662f\u901a\u5411\u5c40\u57df\u7f51\uff0c\u8fd9\u4e24\u4e2a\u63a5\u53e3\u901a\u4e86\u540e\u624d\u80fd\u4e0a\u7f51\u3002<\/p>\n
\u521d\u59cb\u5316pfsense<\/b><\/strong><\/h4>\n\u9e21\u54e5\u7684pfsense\u8f6f\u8def\u7531ETH0\u63a5\u53e3\u9ed8\u8ba4\u4e3aWAN\u53e3\uff0cETH1\u63a5\u53e3\u9ed8\u8ba4\u4e3aLan\u53e3\uff0c\u6240\u4ee5\u6211\u4eec\u627e\u4e00\u53f0\u4efb\u610f\u7535\u8111\uff0c\u627e\u4e00\u6839\u7f51\u7ebf\u8fde\u63a5\u6211\u4eec\u7684ETH1\u63a5\u53e3\uff0c\u8fde\u63a5\u4e0a\u7f51\u7ebfDHCP\u81ea\u52a8\u83b7\u53d6\u4e00\u4e2aIP\uff0cETH1\u63a5\u53e3\u9ed8\u8ba4\u7ba1\u7406\u5730\u5740\u4e3a192.168.10.1(\u4ec5\u9650\u4e8e\u5b9a\u5236\u7248\u672c)\u3002<\/p>\n
<\/div><\/a><\/p>\n\u4f7f\u7528\u4efb\u610f\u6d4f\u89c8\u5668\u6253\u5f00lan\u7684\u7ba1\u7406\u5730\u5740192.168.10.1\u5730\u5740\u8fdb\u884c\u8c03\u8bd5\u3002<\/p>\n
\u8f93\u5165\u9ed8\u8ba4\u8d26\u6237admin\/pfsense\u8fdb\u884c\u767b\u9646\u3002<\/p>\n
<\/div><\/a><\/p>\n\u9ed8\u8ba4\u4e0b\u4e00\u6b65<\/p>\n
<\/div><\/a><\/p>\nDNS\u6539\u6210\u4f60\u7684\u4e0a\u7ea7\u8def\u7531\u5730\u5740\u3001ISP\u63d0\u4f9b\u7684DNS\u6216\u5176\u4ed6\u516c\u5171DNS\uff0c\u672c\u793a\u4f8b\u4f7f\u7528\u4e0a\u7ea7\u8def\u7531\u5668\u5730\u574010.10.20.1\u3002<\/p>\n
<\/div><\/a><\/p>\n\u65f6\u95f4\u670d\u52a1\u5668\u4f7f\u7528\u9ed8\u8ba4\u5373\u53ef\u3002<\/p>\n
<\/div><\/a><\/p>\n\u7b2c4\u6b65\u4e2ddhcp\u6307\u7684\u662fwan\u53e3\u83b7\u53d6\u4e0a\u7ea7\u8def\u7531\u7684ip\u5730\u5740\u3002\u672c\u793a\u4f8b\u4f7f\u7528dhcp\u83b7\u53d6\uff0c\u8fd9\u91cc\u53ef\u4ee5\u6839\u636e\u81ea\u5df1\u7684\u7f51\u7edc\u60c5\u51b5\u8fdb\u884c\u914d\u7f6e\u3002<\/div><\/a><\/p>\n\u56e0\u4e3a\u662f\u4e8c\u7ea7\u8def\u7531\uff0cRFC1918\u7f51\u7edc\u548c\u963b\u6b62bogom\u7f51\u7edc\u524d\u9762\u7684\u52fe\u53d6\u6d88\u6389\uff0c\u70b9\u51fb\u4e0b\u4e00\u6b65\u3002<\/p>\n
<\/div><\/a><\/p>\nLAN\u63a5\u53e3\u4f7f\u7528\u9ed8\u8ba4\u503c\u3002<\/p>\n
<\/div><\/a><\/p>\n\u66f4\u6539admin\u7ba1\u7406\u5458\u7684\u9ed8\u8ba4\u5bc6\u7801\u3002<\/p>\n
<\/div><\/a><\/p>\n\u70b9\u51fb\u4e0b\u4e00\u6b65\u3002<\/p>\n
<\/div><\/a><\/p>\n\u70b9\u51fb\u5b8c\u6210\u3002<\/p>\n
<\/div><\/a><\/p>\n\u8f6c\u5230\u4eea\u8868\u5927\u5385\uff0c\u53ef\u4ee5\u770b\u5230wan\u548clan\u63a5\u53e3\u5df2\u7ecf\u521d\u59cb\u5316\u3002<\/p>\n
<\/div><\/a><\/p>\n\u672c\u5730\u865a\u62df\u73af\u56deIP\u8bbe\u7f6e<\/b><\/strong><\/h4>\n\u8bf4\u660e\uff1a\u672c\u5730\u865a\u62dfip\u4e5f\u5c31\u662f\u672c\u5730\u73af\u56deIP\uff0c\u4f5c\u7528\u662f\u6d4b\u8bd5\u3001\u767b\u9646\u8bbe\u5907\u4f7f\u7528\u3002<\/p>\n
\u70b9\u51fb\u83dc\u5355\u680f\u2014\u2014\u865a\u62df\u5730\u5740\u3002<\/p>\n
<\/div><\/a><\/p>\n\u70b9\u51fb\u6dfb\u52a0\u3002<\/p>\n
<\/div><\/a><\/p>\nLocalhost\u4ee3\u8868\u672c\u5730\u73af\u56de\u63a5\u53e3\uff0c\u5730\u5740\u4e3a31.1.1.1\/32\u4f4d\u4fdd\u5b58\uff0c\u4e4b\u540e\u4f7f\u752831.1.1.1\u5730\u5740\u767b\u9646pfsense\u9632\u706b\u5899\u7cfb\u7edf\u3002<\/p>\n
<\/div><\/a><\/p>\n\u5e94\u7528\u66f4\u6539\u3002<\/p>\n
<\/div><\/a><\/p>\n\u4f7f\u7528\u865a\u62df\u73af\u56deIP\u767b\u9646\u3002<\/p>\n
<\/div><\/a><\/p>\n\u601d\u79d13<\/b><\/strong>560<\/b><\/strong>\u4ea4\u6362\u673a\u914d\u7f6e<\/b><\/strong><\/h2>\n\u8bf4\u660e\uff1a\u4ea4\u6362\u673a\u4e92\u8054\u662f\u4e09\u5c42\uff0c\u4f46\u4e0d\u662f\u5728\u63a5\u53e3\u4e0a\u914d\u7f6eIP\uff0c\u6211\u4eec\u901a\u8fc7\u63a5\u53e3Trunk\u6a21\u5f0f\uff0c\u5212\u5206vlan\u540e\u7ed9vlan\u7ba1\u7406IP\uff0c\u901a\u8fc7vlan\u4e92\u8054\u8bbe\u5907\u3002<\/p>\n
\u521d\u59cb\u5316\u8bbe\u5907<\/h3>\n
\u4f7f\u7528console\u7ebf\u7f06\u4e0e\u4ea4\u6362\u673a\u4e92\u8054\u5728\u6b64\u4e0d\u518d\u4ecb\u7ecd\u3002<\/p>\n
\u4fee\u6539\u4ea4\u6362\u673a\u540d\u79f0<\/b><\/strong><\/h4>\nSwitch>en \u00a0\u00a0\u00a0\u00a0\u00a0#\u8fdb\u5165\u7279\u6743\u6a21\u5f0f<\/p>\n
Switch#config \u00a0\u00a0\u00a0\u8fdb\u5165\u5168\u5c40\u547d\u4ee4\u6a21\u5f0f<\/p>\n
Switch(config)#hostname sw1-cisco3560 \u00a0\u00a0#\u4fee\u6539\u4ea4\u6362\u673a\u540d\u79f0<\/p>\n
sw1-cisco3560(config)#end \u00a0\u00a0#\u9000\u51fa\u5230\u7279\u6743\u6a21\u5f0f<\/p>\n
\u534e\u4e3aac<\/b><\/strong>6005-8<\/b><\/strong>\u4ea4\u6362\u673a\u914d\u7f6e<\/b><\/strong><\/h2>\n\u8bf4\u660e\uff1a\u4ea4\u6362\u673a\u4e92\u8054\u662f\u4e09\u5c42\uff0c\u4f46\u4e0d\u662f\u5728\u63a5\u53e3\u4e0a\u914d\u7f6eIP\uff0c\u6211\u4eec\u901a\u8fc7\u63a5\u53e3Trunk\u6a21\u5f0f\uff0c\u5212\u5206vlan\u540e\u7ed9vlan\u7ba1\u7406IP\uff0c\u901a\u8fc7vlan\u4e92\u8054\u8bbe\u5907\u3002<\/p>\n
\u521d\u59cb\u5316\u8bbe\u5907<\/h3>\n
AC6005>sys \u00a0#\u8fdb\u5165\u7cfb\u7edf\u89c6\u56fe<\/p>\n
[AC6005]sysname ac6005-8 \u00a0#\u4fee\u6539\u540d\u79f0<\/p>\n
[ac6005-8]<\/p>\n
\u94fe\u8def\u805a\u5408\u914d\u7f6e<\/b><\/strong><\/h1>\n\u6ce8\u610f\uff1a\u6f14\u793a\u4e0d\u540c\u8bbe\u5907\u5982\u4f55\u521b\u5efa\u94fe\u8def\u805a\u5408\u7684\uff0c\u5728\u672c\u793a\u4f8b\u4e2d\u6211\u4eec\u7528\u5230\u7684\u662flacp\u6a21\u5f0f\u8d1f\u8f7d\u4e3asrc-mac\u65b9\u5f0f\uff0c\u5728\u4e0b\u6587\u5c06\u4e0d\u5728\u6982\u8ff0\u3002<\/p>\n
pfsense\u9632\u706b\u5899\u94fe\u8def\u805a\u5408<\/b><\/strong><\/h2>\nLan\u53e3\uff08\u94fe\u8def\u805a\u5408\uff09<\/h3>\n
\u5728\u672c\u6b21\u6559\u5b66\u4e2d\u6211\u4eec\u4f7f\u7528\u94fe\u8def\u805a\u5408\u65b9\u5f0f\u8fdb\u884c\u8bbe\u7f6e\u63a5\u53e3\u3002<\/p>\n
\u94fe\u8def\u805a\u5408\uff1a\u591a\u4e2a\u7269\u7406\u63a5\u53e3\u7ed1\u5b9a\u5728\u4e00\u6761\u865a\u62df\u94fe\u8def\u4e2d\uff0c\u505a\u9ad8\u53ef\u7528\u589e\u52a0\u5e26\u5bbd\u4ee5\u53ca\u9ad8\u53ef\u7528\u3002\u4f8b\u5982\uff1a\u6211\u4eec\u8def\u7531\u5668\u4e0e\u7535\u8111\u8fde\u63a5\u4e86\u4e00\u6839\u7f51\u7ebf\uff0c\u7f51\u7ebf\u574f\u6389\u6216\u8005\u62d4\u6389\u662f\u4e0d\u662f\u65e0\u6cd5\u4e0a\u7f51\uff0c\u8fd9\u65f6\u5019\u6211\u4eec\u5728\u63d2\u4e00\u6761\u7f51\u7ebf\uff0c\u8fd9\u6837\u5c31\u4e0d\u4f1a\u5f71\u54cd\u4e0a\u7f51\uff0c\u5b66\u540d\u53eb\u4e0d\u95f4\u65ad\u63d0\u4f9b\u4e1a\u52a1\u3002<\/p>\n
\u5355\u51fbLAGGs\u3002<\/p>\n
<\/div><\/a><\/p>\n\u9009\u62e9\u6dfb\u52a0\u3002<\/p>\n
<\/div><\/a><\/p>\n\u4f7f\u7528\u952e\u76d8ctrl\u6309\u952e+\u9f20\u6807\u5de6\u952e\u9009\u4e2d\u6211\u4eec\u8981\u94fe\u8def\u805a\u5408\u7684\u63a5\u53e3\u5373\u53ef\uff0cLAGG\u534f\u8bae\u9009\u62e9LACP\u6a21\u5f0f\uff0c\u5176\u4ed6\u9009\u9879\u4fdd\u6301\u9ed8\u8ba4\u5373\u53ef\u3002<\/p>\n
<\/div><\/a><\/p>\n\u70b9\u51fb\u4fdd\u5b58\u3002<\/p>\n
<\/div><\/a><\/p>\n\u601d\u79d13<\/b><\/strong>560<\/b><\/strong>\u94fe\u8def\u805a\u5408<\/b><\/strong><\/h2>\n\u521b\u5efa\u94fe\u8def\u805a\u5408<\/h3>\n
sw1-cisco3560#enable \u00a0\u00a0#\u8fdb\u5165\u7279\u6743\u6a21\u5f0f<\/p>\n
sw1-cisco3560#config \u00a0\u00a0#\u8fdb\u5165\u5168\u5c40\u547d\u4ee4\u6a21\u5f0f<\/p>\n
sw1-cisco3560(config)#interface port-channel 1 \u00a0\u00a0#\u521b\u5efa\u94fe\u8def\u805a\u54081\u7ec4<\/p>\n
sw1-cisco3560(config-if)#exit \u00a0\u00a0#\u9000\u51fa<\/p>\n
sw1-cisco3560(config)#port-channel load-balance src-mac \u00a0#\u8d1f\u8f7d\u5747\u8861\u6e90MAC<\/p>\n
sw1-cisco3560(config)#interface range gigabitEthernet 0\/49-50 \u00a0#\u8fdb\u51650\/49-50\u63a5\u53e3<\/p>\n
sw1-cisco3560(config-if-range)#shutdown \u00a0\u00a0#\u5173\u95ed\u63a5\u53e3<\/p>\n
sw1-cisco3560(config-if-range)#channel-group 1 mode active #lacp\u4e3b\u52a8\u6a21\u5f0f<\/p>\n
sw1-cisco3560(config-if-range)#switchport trunk encapsulation dot1q # #\u534f\u8baedot1q<\/p>\n
sw1-cisco3560(config-if-range)#switchport mode trunk \u00a0\u00a0#\u6a21\u5f0ftrunk<\/p>\n
sw1-cisco3560(config-if-range)#switchport trunk allowed vlan all #\u5141\u8bb8\u6240\u6709vlan\u901a\u8fc7<\/p>\n
sw1-cisco3560(config-if-range)#no shutdown \u00a0\u00a0\u00a0\u00a0#\u5f00\u542f\u63a5\u53e3<\/p>\n
sw1-cisco3560(config-if-range)#end\u00a0\u00a0#\u9000\u51fa\u5230\u7279\u6743\u6a21\u5f0f<\/p>\n
sw1-cisco3560# sw1-cisco3560#show ip interface brief #\u67e5\u770b\u63a5\u53e3\u662f\u5426\u5df2\u7ecf\u542f\u52a8\uff08up\u72b6\u6001\uff09\u67e5\u770b0\/49-50\u63a5\u53e3\u548cport-channel1\u63a5\u53e3\u662f\u5426up\u5373\u53ef<\/p>\n
<\/div><\/a><\/p>\n\u534e\u4e3aac<\/b><\/strong>6005-8<\/b><\/strong>\u94fe\u8def\u805a\u5408<\/b><\/strong><\/h2>\n\u521b\u5efa\u94fe\u8def\u805a\u5408<\/h3>\n
[ac6005-8]interface Eth-Trunk 1 \u00a0\u00a0#\u521b\u5efa\u94fe\u8def\u805a\u54081\u7ec4<\/p>\n
[ac6005-8-Eth-Trunk1]mode lacp-static \u00a0#\u6a21\u5f0f\u4e3alacp<\/p>\n
[ac6005-8-Eth-Trunk1]load-balance src-mac \u00a0#\u8d1f\u8f7d\u6a21\u5f0fsrc-mac<\/p>\n
[ac6005-8-Eth-Trunk1]trunkport GigabitEthernet 0\/0\/7 to 0\/0\/8 #07-08\u63a5\u53e3\u52a0\u5165<\/p>\n
[ac6005-8-Eth-Trunk1]port link-type trunk \u00a0#\u63a5\u53e3\u66f4\u6539\u4e3atrunk<\/p>\n
[ac6005-8-Eth-Trunk1]port trunk allow-pass vlan all \u00a0#\u6240\u6709vlan\u901a\u8fc7<\/p>\n
[ac6005-8-Eth-Trunk1]quit \u00a0#\u9000\u51fa\u5230\u7cfb\u7edf\u89c6\u56fe<\/p>\n
\u914d\u7f6evlan<\/b><\/strong><\/h1>\n\u901a\u5e38\u6211\u4eec\u90fd\u662f\u5728\u6838\u5fc3\u4ea4\u6362\u673a\u6216\u8005\u6c47\u805a\u5c42\u505avlan\u8bbe\u7f6e\uff0c\u6211\u4eec\u5728\u601d\u79d13560\u6838\u5fc3\u4ea4\u6362\u673a\u505avlan\uff0c\u4f46\u662f\u5176\u4ed6\u8bbe\u5907\u4e0a\u8981\u540c\u6b65vlan\u7684ID<\/p>\n
\u601d\u79d13<\/b><\/strong>560<\/b><\/strong>\u4ea4\u6362\u673a<\/b><\/strong>\u914d\u7f6evlan<\/b><\/strong><\/h2>\nsw1#config<\/p>\n
sw1(config)#vlan 5,30,35,100,200 \u00a0#\u6279\u91cf\u521b\u5efavlan<\/p>\n
<\/p>\n
vlan5\u914d\u7f6e\u00a0#\u8bbe\u5907\u901a\u4fe1vlan<\/p>\n
sw1(config)#interface vlan 5 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\u8fdb\u5165vlan5<\/p>\n
sw1(config-if)#ip address 192.168.5.2 255.255.255.0 \u00a0#\u914d\u7f6e\u7f51\u5173<\/p>\n
sw1(config-if)#exit<\/p>\n
<\/p>\n
vlan30\u914d\u7f6e\u00a0#\u4ea4\u6362\u673a\u8def\u7531\u5668\u7ba1\u7406vlan<\/p>\n
sw1(config)#interface vlan 30 \u00a0\u00a0\u00a0#\u8fdb\u5165vlan30<\/p>\n
sw1(config-if)#ip address 30.1.1.254 255.255.255.0 \u00a0#\u914d\u7f6e\u7f51\u5173<\/p>\n
sw1(config-if)#exit<\/p>\n
<\/p>\n
vlan35\u914d\u7f6e\u00a0#ap\u7ba1\u7406vlan<\/p>\n
sw1(config)#interface vlan 35 \u8fdb\u5165vlan35<\/p>\n
sw1(config-if)#ip address 35.1.1.1 255.255.255.0 \u00a0#\u914d\u7f6e\u7f51\u5173<\/p>\n
sw1(config-if)#exit<\/p>\n
<\/p>\n
vlan100\u914d\u7f6e#\u6709\u7ebf\u7f51\u7edc<\/p>\n
sw1(config)#interface vlan 100 \u8fdb\u5165vlan100<\/p>\n
sw1(config-if)#ip address 10.10.100.254 255.255.255.0 \u00a0#\u914d\u7f6e\u7f51\u5173<\/p>\n
sw1(config-if)#exit<\/p>\n
<\/p>\n
vlan200\u914d\u7f6e#\u6709\u7ebf\u7f51\u7edc<\/p>\n
sw1(config)#interface vlan 200 \u8fdb\u5165vlan200<\/p>\n
sw1(config-if)#ip address 10.10.200.254 255.255.255.0 \u00a0#\u914d\u7f6e\u7f51\u5173<\/p>\n
sw1(config-if)#exit<\/p>\n
\u534e\u4e3aac<\/b><\/strong>6005<\/b><\/strong>\u914d\u7f6evlan<\/b><\/strong><\/h2>\n<AC6005>sys<\/p>\n
[AC6005]vlan batch 5 30 35 100 200 \u00a0#\u6279\u91cf\u521b\u5efavlan<\/p>\n
Vlan5\u914d\u7f6e #\u8bbe\u5907\u901a\u4fe1<\/p>\n
[AC6005]interface Vlanif 5<\/p>\n
[AC6005-Vlanif5]ip address 192.168.5.3 255.255.255.0<\/p>\n
<\/p>\n
Vlan30\u914d\u7f6e #\u8bbe\u5907\u901a\u4fe1<\/p>\n
[AC6005]interface Vlanif 30<\/p>\n
[AC6005-Vlanif5]ip address 30.1.1.1 255.255.255.0<\/p>\n
<\/p>\n
Vlan35 100 200 #\u4e0d\u9700\u8981\u914d\u7f6e\u53ea\u9700\u8981\u521b\u5efaID\u540e\u540c\u6b65\u601d\u79d13560<\/p>\n
\u914d\u7f6eDHCP<\/b><\/strong><\/h1>\n\u6211\u4eec\u5728\u601d\u79d13560\u6838\u5fc3\u4ea4\u6362\u673a\u914d\u7f6eDHCP\u5373\u53ef<\/p>\n
\u601d\u79d13<\/b><\/strong>560<\/b><\/strong>\u914d\u7f6eDHCP<\/b><\/strong><\/h2>\n\u914d\u7f6evlan30\u00a0#DHCP<\/p>\n
sw1#config<\/p>\n
sw1(config)#ip dhcp pool vlan30<\/p>\n
sw1(dhcp-config)#network 30.1.1.0 255.255.255.0<\/p>\n
sw1(dhcp-config)#default-router 30.1.1.254<\/p>\n
sw1(dhcp-config)#dns-server 10.10.20.1<\/p>\n
sw1(config)#exit<\/p>\n
<\/p>\n
\u914d\u7f6evlan35\u00a0#DHCP<\/p>\n
sw1(config)#ip dhcp pool vlan35<\/p>\n
sw1(dhcp-config)#network 35.1.1.0 255.255.255.0<\/p>\n
sw1(dhcp-config)#default-router 35.1.1.254<\/p>\n
sw1(dhcp-config)#dns-server 10.10.20.1<\/p>\n
sw1(dhcp-config)#option 43 ip 30.1.1.1 \u00a0#\u8fd9\u4e2a\u662fac\u7ba1\u7406\u5730\u5740<\/p>\n
sw1(dhcp-config)#exit<\/p>\n
<\/p>\n
\u914d\u7f6evlan100\u00a0#DHCP<\/p>\n
sw1(config)#ip dhcp pool vlan100<\/p>\n
sw1(dhcp-config)#network 10.10.100.0 255.255.255.0<\/p>\n
sw1(dhcp-config)#default-router 10.10.100.254<\/p>\n
sw1(dhcp-config)#dns-server 10.10.20.1<\/p>\n
sw1(dhcp-config)#exit<\/p>\n
<\/p>\n
\u914d\u7f6evlan200\u00a0#DHCP<\/p>\n
sw1(config)#ip dhcp pool vlan200<\/p>\n
sw1(dhcp-config)#network 10.10.200.0 255.255.255.0<\/p>\n
sw1(dhcp-config)#default-router 10.10.200.254<\/p>\n
sw1(dhcp-config)#dns-server 10.10.20.1<\/p>\n
sw1(dhcp-config)#exit<\/p>\n
<\/p>\n
\u534e\u4e3aac<\/b><\/strong>6005<\/b><\/strong>\u914d\u7f6eDHCP<\/b><\/strong><\/h2>\n<AC6005>sys<\/p>\n
[AC6005]undo dhcp enable \u00a0\u00a0#\u5173\u95edDHCp<\/p>\n
Warning: All DHCP functions will be disabled. Continue? [Y\/N]y \u00a0#\u70b9\u51fbY<\/p>\n
[AC6005]<\/p>\n
\u914d\u7f6e\u9759\u6001\u8def\u7531<\/b><\/strong><\/h1>\nP<\/b><\/strong>fsense\u914d\u7f6e\u9759\u6001\u8def\u7531<\/b><\/strong><\/h2>\n\u767b\u9646pfsense\uff0c\u8f6c\u5230\u7cfb\u7edf\u2014\u8def\u7531\u7ba1\u7406\u3002<\/p>\n
<\/div><\/a><\/p>\n\u70b9\u51fb\u6dfb\u52a0\u3002<\/p>\n
<\/div><\/a><\/p>\n\u63a5\u53e3\u9009\u62e9\u8fde\u63a5\u601d\u79d13560\u4ea4\u6362\u673a\u90a3\u4e2a\u53e3\uff0c\u7f51\u5173\u586b\u5199\u601d\u79d13560\u4ea4\u6362\u673a\u7684vlan5\u7684\u7f51\u5173\uff0c\u70b9\u51fb\u4fdd\u5b58\u3002<\/p>\n
<\/div><\/a><\/p>\n\u5355\u51fb\u9759\u6001\u8def\u7531\uff0c\u70b9\u51fb\u6dfb\u52a0\u3002<\/p>\n
<\/div><\/a><\/p>\n\u76ee\u6807\u7f51\u7edc\u662f\u4ea4\u6362\u673a\u5185\u90e8\u7684vlan\u7684\u7f51\u7edc\uff0c\u5305\u542b\u4e86vlan5,30,35,100,200\u7684\u7f51\u7edc\uff0c\u8fd9\u91cc\u586b\u5199\u7684\u662f8\u4f4d\u6c47\u603b\u7f51\u7edc\uff0c\u6216\u8005\u5199\u660e\u8be6\u7ec6\u8def\u7531\u90fd\u53ef\u4ee5\u3002<\/p>\n
<\/div><\/a><\/p>\n\u6dfb\u52a0\u4ee5\u4e0b\u6c47\u603b\u7f51\u7edc\uff0c\u5747\u90fd\u662f\u601d\u79d13560\u4ea4\u6362\u673a\u5185\u90e8\u7f51\u7edc\u3002<\/p>\n
<\/div><\/a><\/p>\n\u601d\u79d13<\/b><\/strong>560<\/b><\/strong>\u4ea4\u6362\u673a\u914d\u7f6e\u9759\u6001\u8def\u7531<\/b><\/strong><\/h2>\nsw1#config<\/p>\n
sw1(config)#ip routing \u00a0#\u5f00\u542f\u4e09\u5c42\u8def\u7531\u529f\u80fd<\/p>\n
sw1(config)#ip route 0.0.0.0 0.0.0.0 192.168.5.1 \u00a0#\u6240\u6709\u8def\u7531\u6307\u5411\u51fa\u53e3192.168.5.1<\/p>\n
\u534e\u4e3aac<\/b><\/strong>6005<\/b><\/strong>\u914d\u7f6e\u9759\u6001\u8def\u7531<\/b><\/strong><\/h2>\n<AC6005>sys<\/p>\n
[AC6005]ip route-static 0.0.0.0 0.0.0.0 192.168.5.1 #\u6240\u6709\u8def\u7531\u6307\u5411\u51fa\u53e3192.168.5.1<\/p>\n
W<\/b><\/strong>lan\u65e0\u7ebf\u8bbe\u7f6e<\/b><\/strong><\/h1>\n\u534e\u4e3aac<\/b><\/strong>6005<\/b><\/strong>\u914d\u7f6e<\/b><\/strong><\/h2>\nA<\/b><\/strong>c<\/b><\/strong>6005<\/b><\/strong>\u00a0\u8bbe\u7f6evlan<\/b><\/strong><\/h2>\n\u8fde\u63a5ap\u7684\u4e1a\u52a1\u53e3\u5206\u914dvlan35\uff0cvlan35\u662f\u7ba1\u7406ap\u7684\u3002<\/p>\n
[AC6005]interface GigabitEthernet 0\/0\/1 \u00a0\u00a0#\u8fdb\u51651\u63a5\u53e3\uff0cAP\u8fde\u63a5\u7684\u53e3<\/p>\n
[AC6005-GigabitEthernet0\/0\/1]port link-type access \u00a0#\u66f4\u6539\u4e3aaccess<\/p>\n
[AC6005-GigabitEthernet0\/0\/1]port default vlan 35 \u00a0#\u66f4\u6539\u4e3avlan35\uff0cap\u7ba1\u7406vlan<\/p>\n
[AC6005-GigabitEthernet0\/0\/1]quit<\/p>\n
AC<\/b><\/strong>6005<\/b><\/strong>\u914d\u7f6eAC\u5e76\u6dfb\u52a0\u6e90IP<\/b><\/strong><\/h2>\n\u4f7f\u7528\u6d4f\u89c8\u5668\u767b\u9646\u534e\u4e3aac6005\uff0c\u5bc6\u7801\u5c31\u662f\u4f60\u66f4\u6539\u7684\u5bc6\u7801\uff0c\u9ed8\u8ba4\u8d26\u6237\/\u5bc6\u7801:admin\/admin@huawei.com<\/p>\n
<\/div><\/a><\/p>\n\u9ed8\u8ba4\u5373\u53ef\u3002<\/p>\n
<\/div><\/a><\/p>\n\u9ed8\u8ba4\u5373\u53ef\u3002<\/p>\n
<\/div><\/a><\/p>\n\u9ed8\u8ba4\u5373\u53ef\u3002<\/p>\n
<\/div><\/a><\/p>\n\u70b9\u51fb\u4e0b\u4e00\u6b65\u3002<\/p>\n
<\/div><\/a><\/p>\n\u6dfb\u52a0\u6e90IP\uff0c\u70b9\u51fb\u4e0b\u4e00\u6b65<\/p>\n
<\/div><\/a><\/p>\n\u70b9\u51fb\u5b8c\u6210\u3002<\/p>\n
![\"\"](\"https:\/\/pfchina.org\/wp-content\/uploads\/2023\/01\/wps_doc_0.png\")
<\/div><\/a><\/p>\n\u62d3\u6251\u8bf4\u660e<\/b><\/strong><\/h2>\n\u8fde\u7ebf\u8bf4\u660e\uff1a<\/p>\n
<\/div><\/a><\/p>\nvlan\u8bf4\u660e\uff1a<\/p>\n
1.vlan5 \u8bbe\u5907\u95f4\u901a\u4fe1\u5730\u5740 192.168.5.0\/24<\/p>\n
2.vlan30 \u8bbe\u5907lldp\u7ba1\u7406\u5730\u574030.1.1.0\/24<\/p>\n
3.vlan35 ap lldp\u7ba1\u7406\u5730\u574033.1.1.0\/24<\/p>\n
4.vlan100 \u6709\u7ebf\u7f51\u7edc10.10.100.0\/24<\/p>\n
5.vlan200 \u65e0\u7ebf\u7f51\u7edc10.10.200.0\/24<\/p>\n
\u4e92\u8054\u5730\u5740\u8bf4\u660e\uff1a<\/p>\n
1.\u534e\u4e3aax3int0\/4 ip10.10.20.1\/24<\/p>\n
2.pfsense int0\/0 ip10.10.20.2\/24<\/p>\n
3.pfsense int0\/1 ip 192.168.10.0\/24<\/p>\n
lldp\u7ba1\u7406\u5730\u5740\u8bf4\u660e\uff1a<\/p>\n
1.pfsense lldp 33.1.1.1\/24<\/p>\n
2.cisco 3560 lldp 30.1.1.1\/24<\/p>\n
3.\u534e\u4e3aac6005-8 lldp30.1.1.2\/24<\/p>\n
4.\u534e\u4e3aap5760-51 lldp 35.1.1.3\/24<\/p>\n
\u6ce8\u610f\uff1a\u62d3\u6251\u56fe\u4e0a\u6240\u6709\u63a5\u53e3\u5e76\u6ca1\u6709IP\u5730\u5740\uff0c\u6240\u6709IP\u5730\u5740\u662f\u7531vlan\u7ba1\u7406ip\u627f\u62c5\u8d1f\u8d23\u8def\u7531\u6536\u53d1\u3002<\/p>\n
C<\/b><\/strong>onsole\u53e3\u7ebf\u7f06\u914d\u7f6e<\/b><\/strong><\/h1>\n\u9700\u8981\u4f7f\u7528\u4e00\u6839console\u7ebf\u7f06\u4e0e\u4ea4\u6362\u673a\u5bf9\u63a5\u4f7f\u7528cl\u547d\u4ee4\u884c\u6765\u521d\u59cb\u5316\u4ea4\u6362\u673a\uff0c\u628aconsole\u7ebf\u7f06\u7684USB\u63a5\u53e3\u63d2\u5165\u5230\u4efb\u610f\u7535\u8111\u4e2d\uff0c\u4f7f\u7528ssh\u8f6f\u4ef6\u8fde\u63a5\u4ea4\u6362\u673a\u3002<\/p>\n
<\/div><\/a><\/p>\n <\/p>\n
Windows\u7cfb\u7edf\u2014\u2014\u53f3\u952e\u6b64\u7535\u8111\u2014\u2014\u7ba1\u7406\u2014\u2014\u8ba1\u7b97\u673a\u7ba1\u7406\u4e2d\u5de6\u4fa7\u627e\u5230\u8bbe\u5907\u7ba1\u7406\u5668\u2014\u2014\u53f3\u8fb9\u627e\u5230\u7aef\u53e3\u2014\u2014\u67e5\u770b\u662f\u5426\u6709USBSerial\u00a0Port\uff08COM5\uff09<\/p>\n
\u6ce8\u610f\uff1a\u8bb0\u4f4fCOM5\u6211\u4eec\u4f7f\u7528ssh\u8f6f\u4ef6\u8981\u8fde\u63a5\u8fd9\u4e2acom5<\/p>\n
<\/div><\/a><\/p>\n\u9e21\u54e5\u4f7f\u7528securecrt\u8f6f\u4ef6\u8fdb\u884c\u8fde\u63a5\uff0c\u70b9\u51fb01\u5feb\u901f\u8fde\u63a5\uff0c02\u534f\u8bae\u9009\u62e9serial\uff0c03\u9009\u62e9com5usb\uff0c04\u9009\u62e99600,05\u70b9\u51fb\u8fde\u63a5\u3002<\/p>\n
<\/div><\/a><\/p>\n\u70b9\u51fb\u56de\u8f66\u5c31\u53ef\u4ee5\u8fdb\u5165\u4ea4\u6362\u673a\u7684\u547d\u4ee4\u884c\u754c\u9762\u4e86\u3002<\/p>\n
<\/div><\/a><\/p>\n\u521d\u59cb\u5316\u8bbe\u5907<\/b><\/strong><\/h1>\nPfsense<\/b><\/strong>\u9632\u706b\u5899\u8bbe\u7f6e<\/b><\/strong><\/h2>\nPfsens\u9632\u706b\u5899\u8bbe\u7f6ewan\u53e3\u548clan\u53e3<\/h3>\n
\u8bf4\u660e\uff1awan\u53e3\u8d1f\u8d23\u901a\u5411\u5916\u7f51\u5c31\u662f\u4e92\u8054\u7f51\uff0clan\u53e3\u662f\u901a\u5411\u5c40\u57df\u7f51\uff0c\u8fd9\u4e24\u4e2a\u63a5\u53e3\u901a\u4e86\u540e\u624d\u80fd\u4e0a\u7f51\u3002<\/p>\n
\u521d\u59cb\u5316pfsense<\/b><\/strong><\/h4>\n\u9e21\u54e5\u7684pfsense\u8f6f\u8def\u7531ETH0\u63a5\u53e3\u9ed8\u8ba4\u4e3aWAN\u53e3\uff0cETH1\u63a5\u53e3\u9ed8\u8ba4\u4e3aLan\u53e3\uff0c\u6240\u4ee5\u6211\u4eec\u627e\u4e00\u53f0\u4efb\u610f\u7535\u8111\uff0c\u627e\u4e00\u6839\u7f51\u7ebf\u8fde\u63a5\u6211\u4eec\u7684ETH1\u63a5\u53e3\uff0c\u8fde\u63a5\u4e0a\u7f51\u7ebfDHCP\u81ea\u52a8\u83b7\u53d6\u4e00\u4e2aIP\uff0cETH1\u63a5\u53e3\u9ed8\u8ba4\u7ba1\u7406\u5730\u5740\u4e3a192.168.10.1(\u4ec5\u9650\u4e8e\u5b9a\u5236\u7248\u672c)\u3002<\/p>\n
<\/div><\/a><\/p>\n\u4f7f\u7528\u4efb\u610f\u6d4f\u89c8\u5668\u6253\u5f00lan\u7684\u7ba1\u7406\u5730\u5740192.168.10.1\u5730\u5740\u8fdb\u884c\u8c03\u8bd5\u3002<\/p>\n
\u8f93\u5165\u9ed8\u8ba4\u8d26\u6237admin\/pfsense\u8fdb\u884c\u767b\u9646\u3002<\/p>\n
<\/div><\/a><\/p>\n\u9ed8\u8ba4\u4e0b\u4e00\u6b65<\/p>\n
<\/div><\/a><\/p>\nDNS\u6539\u6210\u4f60\u7684\u4e0a\u7ea7\u8def\u7531\u5730\u5740\u3001ISP\u63d0\u4f9b\u7684DNS\u6216\u5176\u4ed6\u516c\u5171DNS\uff0c\u672c\u793a\u4f8b\u4f7f\u7528\u4e0a\u7ea7\u8def\u7531\u5668\u5730\u574010.10.20.1\u3002<\/p>\n
<\/div><\/a><\/p>\n\u65f6\u95f4\u670d\u52a1\u5668\u4f7f\u7528\u9ed8\u8ba4\u5373\u53ef\u3002<\/p>\n
<\/div><\/a><\/p>\n\u7b2c4\u6b65\u4e2ddhcp\u6307\u7684\u662fwan\u53e3\u83b7\u53d6\u4e0a\u7ea7\u8def\u7531\u7684ip\u5730\u5740\u3002\u672c\u793a\u4f8b\u4f7f\u7528dhcp\u83b7\u53d6\uff0c\u8fd9\u91cc\u53ef\u4ee5\u6839\u636e\u81ea\u5df1\u7684\u7f51\u7edc\u60c5\u51b5\u8fdb\u884c\u914d\u7f6e\u3002<\/div><\/a><\/p>\n\u56e0\u4e3a\u662f\u4e8c\u7ea7\u8def\u7531\uff0cRFC1918\u7f51\u7edc\u548c\u963b\u6b62bogom\u7f51\u7edc\u524d\u9762\u7684\u52fe\u53d6\u6d88\u6389\uff0c\u70b9\u51fb\u4e0b\u4e00\u6b65\u3002<\/p>\n
<\/div><\/a><\/p>\nLAN\u63a5\u53e3\u4f7f\u7528\u9ed8\u8ba4\u503c\u3002<\/p>\n
<\/div><\/a><\/p>\n\u66f4\u6539admin\u7ba1\u7406\u5458\u7684\u9ed8\u8ba4\u5bc6\u7801\u3002<\/p>\n
<\/div><\/a><\/p>\n\u70b9\u51fb\u4e0b\u4e00\u6b65\u3002<\/p>\n
<\/div><\/a><\/p>\n\u70b9\u51fb\u5b8c\u6210\u3002<\/p>\n
<\/div><\/a><\/p>\n\u8f6c\u5230\u4eea\u8868\u5927\u5385\uff0c\u53ef\u4ee5\u770b\u5230wan\u548clan\u63a5\u53e3\u5df2\u7ecf\u521d\u59cb\u5316\u3002<\/p>\n
<\/div><\/a><\/p>\n\u672c\u5730\u865a\u62df\u73af\u56deIP\u8bbe\u7f6e<\/b><\/strong><\/h4>\n\u8bf4\u660e\uff1a\u672c\u5730\u865a\u62dfip\u4e5f\u5c31\u662f\u672c\u5730\u73af\u56deIP\uff0c\u4f5c\u7528\u662f\u6d4b\u8bd5\u3001\u767b\u9646\u8bbe\u5907\u4f7f\u7528\u3002<\/p>\n
\u70b9\u51fb\u83dc\u5355\u680f\u2014\u2014\u865a\u62df\u5730\u5740\u3002<\/p>\n
<\/div><\/a><\/p>\n\u70b9\u51fb\u6dfb\u52a0\u3002<\/p>\n
<\/div><\/a><\/p>\nLocalhost\u4ee3\u8868\u672c\u5730\u73af\u56de\u63a5\u53e3\uff0c\u5730\u5740\u4e3a31.1.1.1\/32\u4f4d\u4fdd\u5b58\uff0c\u4e4b\u540e\u4f7f\u752831.1.1.1\u5730\u5740\u767b\u9646pfsense\u9632\u706b\u5899\u7cfb\u7edf\u3002<\/p>\n
<\/div><\/a><\/p>\n\u5e94\u7528\u66f4\u6539\u3002<\/p>\n
<\/div><\/a><\/p>\n\u4f7f\u7528\u865a\u62df\u73af\u56deIP\u767b\u9646\u3002<\/p>\n
<\/div><\/a><\/p>\n\u601d\u79d13<\/b><\/strong>560<\/b><\/strong>\u4ea4\u6362\u673a\u914d\u7f6e<\/b><\/strong><\/h2>\n\u8bf4\u660e\uff1a\u4ea4\u6362\u673a\u4e92\u8054\u662f\u4e09\u5c42\uff0c\u4f46\u4e0d\u662f\u5728\u63a5\u53e3\u4e0a\u914d\u7f6eIP\uff0c\u6211\u4eec\u901a\u8fc7\u63a5\u53e3Trunk\u6a21\u5f0f\uff0c\u5212\u5206vlan\u540e\u7ed9vlan\u7ba1\u7406IP\uff0c\u901a\u8fc7vlan\u4e92\u8054\u8bbe\u5907\u3002<\/p>\n
\u521d\u59cb\u5316\u8bbe\u5907<\/h3>\n
\u4f7f\u7528console\u7ebf\u7f06\u4e0e\u4ea4\u6362\u673a\u4e92\u8054\u5728\u6b64\u4e0d\u518d\u4ecb\u7ecd\u3002<\/p>\n
\u4fee\u6539\u4ea4\u6362\u673a\u540d\u79f0<\/b><\/strong><\/h4>\nSwitch>en \u00a0\u00a0\u00a0\u00a0\u00a0#\u8fdb\u5165\u7279\u6743\u6a21\u5f0f<\/p>\n
Switch#config \u00a0\u00a0\u00a0\u8fdb\u5165\u5168\u5c40\u547d\u4ee4\u6a21\u5f0f<\/p>\n
Switch(config)#hostname sw1-cisco3560 \u00a0\u00a0#\u4fee\u6539\u4ea4\u6362\u673a\u540d\u79f0<\/p>\n
sw1-cisco3560(config)#end \u00a0\u00a0#\u9000\u51fa\u5230\u7279\u6743\u6a21\u5f0f<\/p>\n
\u534e\u4e3aac<\/b><\/strong>6005-8<\/b><\/strong>\u4ea4\u6362\u673a\u914d\u7f6e<\/b><\/strong><\/h2>\n\u8bf4\u660e\uff1a\u4ea4\u6362\u673a\u4e92\u8054\u662f\u4e09\u5c42\uff0c\u4f46\u4e0d\u662f\u5728\u63a5\u53e3\u4e0a\u914d\u7f6eIP\uff0c\u6211\u4eec\u901a\u8fc7\u63a5\u53e3Trunk\u6a21\u5f0f\uff0c\u5212\u5206vlan\u540e\u7ed9vlan\u7ba1\u7406IP\uff0c\u901a\u8fc7vlan\u4e92\u8054\u8bbe\u5907\u3002<\/p>\n
\u521d\u59cb\u5316\u8bbe\u5907<\/h3>\n
AC6005>sys \u00a0#\u8fdb\u5165\u7cfb\u7edf\u89c6\u56fe<\/p>\n
[AC6005]sysname ac6005-8 \u00a0#\u4fee\u6539\u540d\u79f0<\/p>\n
[ac6005-8]<\/p>\n
\u94fe\u8def\u805a\u5408\u914d\u7f6e<\/b><\/strong><\/h1>\n\u6ce8\u610f\uff1a\u6f14\u793a\u4e0d\u540c\u8bbe\u5907\u5982\u4f55\u521b\u5efa\u94fe\u8def\u805a\u5408\u7684\uff0c\u5728\u672c\u793a\u4f8b\u4e2d\u6211\u4eec\u7528\u5230\u7684\u662flacp\u6a21\u5f0f\u8d1f\u8f7d\u4e3asrc-mac\u65b9\u5f0f\uff0c\u5728\u4e0b\u6587\u5c06\u4e0d\u5728\u6982\u8ff0\u3002<\/p>\n
pfsense\u9632\u706b\u5899\u94fe\u8def\u805a\u5408<\/b><\/strong><\/h2>\nLan\u53e3\uff08\u94fe\u8def\u805a\u5408\uff09<\/h3>\n
\u5728\u672c\u6b21\u6559\u5b66\u4e2d\u6211\u4eec\u4f7f\u7528\u94fe\u8def\u805a\u5408\u65b9\u5f0f\u8fdb\u884c\u8bbe\u7f6e\u63a5\u53e3\u3002<\/p>\n
\u94fe\u8def\u805a\u5408\uff1a\u591a\u4e2a\u7269\u7406\u63a5\u53e3\u7ed1\u5b9a\u5728\u4e00\u6761\u865a\u62df\u94fe\u8def\u4e2d\uff0c\u505a\u9ad8\u53ef\u7528\u589e\u52a0\u5e26\u5bbd\u4ee5\u53ca\u9ad8\u53ef\u7528\u3002\u4f8b\u5982\uff1a\u6211\u4eec\u8def\u7531\u5668\u4e0e\u7535\u8111\u8fde\u63a5\u4e86\u4e00\u6839\u7f51\u7ebf\uff0c\u7f51\u7ebf\u574f\u6389\u6216\u8005\u62d4\u6389\u662f\u4e0d\u662f\u65e0\u6cd5\u4e0a\u7f51\uff0c\u8fd9\u65f6\u5019\u6211\u4eec\u5728\u63d2\u4e00\u6761\u7f51\u7ebf\uff0c\u8fd9\u6837\u5c31\u4e0d\u4f1a\u5f71\u54cd\u4e0a\u7f51\uff0c\u5b66\u540d\u53eb\u4e0d\u95f4\u65ad\u63d0\u4f9b\u4e1a\u52a1\u3002<\/p>\n
\u5355\u51fbLAGGs\u3002<\/p>\n
<\/div><\/a><\/p>\n\u9009\u62e9\u6dfb\u52a0\u3002<\/p>\n
<\/div><\/a><\/p>\n\u4f7f\u7528\u952e\u76d8ctrl\u6309\u952e+\u9f20\u6807\u5de6\u952e\u9009\u4e2d\u6211\u4eec\u8981\u94fe\u8def\u805a\u5408\u7684\u63a5\u53e3\u5373\u53ef\uff0cLAGG\u534f\u8bae\u9009\u62e9LACP\u6a21\u5f0f\uff0c\u5176\u4ed6\u9009\u9879\u4fdd\u6301\u9ed8\u8ba4\u5373\u53ef\u3002<\/p>\n
<\/div><\/a><\/p>\n\u70b9\u51fb\u4fdd\u5b58\u3002<\/p>\n
<\/div><\/a><\/p>\n\u601d\u79d13<\/b><\/strong>560<\/b><\/strong>\u94fe\u8def\u805a\u5408<\/b><\/strong><\/h2>\n\u521b\u5efa\u94fe\u8def\u805a\u5408<\/h3>\n
sw1-cisco3560#enable \u00a0\u00a0#\u8fdb\u5165\u7279\u6743\u6a21\u5f0f<\/p>\n
sw1-cisco3560#config \u00a0\u00a0#\u8fdb\u5165\u5168\u5c40\u547d\u4ee4\u6a21\u5f0f<\/p>\n
sw1-cisco3560(config)#interface port-channel 1 \u00a0\u00a0#\u521b\u5efa\u94fe\u8def\u805a\u54081\u7ec4<\/p>\n
sw1-cisco3560(config-if)#exit \u00a0\u00a0#\u9000\u51fa<\/p>\n
sw1-cisco3560(config)#port-channel load-balance src-mac \u00a0#\u8d1f\u8f7d\u5747\u8861\u6e90MAC<\/p>\n
sw1-cisco3560(config)#interface range gigabitEthernet 0\/49-50 \u00a0#\u8fdb\u51650\/49-50\u63a5\u53e3<\/p>\n
sw1-cisco3560(config-if-range)#shutdown \u00a0\u00a0#\u5173\u95ed\u63a5\u53e3<\/p>\n
sw1-cisco3560(config-if-range)#channel-group 1 mode active #lacp\u4e3b\u52a8\u6a21\u5f0f<\/p>\n
sw1-cisco3560(config-if-range)#switchport trunk encapsulation dot1q # #\u534f\u8baedot1q<\/p>\n
sw1-cisco3560(config-if-range)#switchport mode trunk \u00a0\u00a0#\u6a21\u5f0ftrunk<\/p>\n
sw1-cisco3560(config-if-range)#switchport trunk allowed vlan all #\u5141\u8bb8\u6240\u6709vlan\u901a\u8fc7<\/p>\n
sw1-cisco3560(config-if-range)#no shutdown \u00a0\u00a0\u00a0\u00a0#\u5f00\u542f\u63a5\u53e3<\/p>\n
sw1-cisco3560(config-if-range)#end\u00a0\u00a0#\u9000\u51fa\u5230\u7279\u6743\u6a21\u5f0f<\/p>\n
sw1-cisco3560# sw1-cisco3560#show ip interface brief #\u67e5\u770b\u63a5\u53e3\u662f\u5426\u5df2\u7ecf\u542f\u52a8\uff08up\u72b6\u6001\uff09\u67e5\u770b0\/49-50\u63a5\u53e3\u548cport-channel1\u63a5\u53e3\u662f\u5426up\u5373\u53ef<\/p>\n
<\/div><\/a><\/p>\n\u534e\u4e3aac<\/b><\/strong>6005-8<\/b><\/strong>\u94fe\u8def\u805a\u5408<\/b><\/strong><\/h2>\n\u521b\u5efa\u94fe\u8def\u805a\u5408<\/h3>\n
[ac6005-8]interface Eth-Trunk 1 \u00a0\u00a0#\u521b\u5efa\u94fe\u8def\u805a\u54081\u7ec4<\/p>\n
[ac6005-8-Eth-Trunk1]mode lacp-static \u00a0#\u6a21\u5f0f\u4e3alacp<\/p>\n
[ac6005-8-Eth-Trunk1]load-balance src-mac \u00a0#\u8d1f\u8f7d\u6a21\u5f0fsrc-mac<\/p>\n
[ac6005-8-Eth-Trunk1]trunkport GigabitEthernet 0\/0\/7 to 0\/0\/8 #07-08\u63a5\u53e3\u52a0\u5165<\/p>\n
[ac6005-8-Eth-Trunk1]port link-type trunk \u00a0#\u63a5\u53e3\u66f4\u6539\u4e3atrunk<\/p>\n
[ac6005-8-Eth-Trunk1]port trunk allow-pass vlan all \u00a0#\u6240\u6709vlan\u901a\u8fc7<\/p>\n
[ac6005-8-Eth-Trunk1]quit \u00a0#\u9000\u51fa\u5230\u7cfb\u7edf\u89c6\u56fe<\/p>\n
\u914d\u7f6evlan<\/b><\/strong><\/h1>\n\u901a\u5e38\u6211\u4eec\u90fd\u662f\u5728\u6838\u5fc3\u4ea4\u6362\u673a\u6216\u8005\u6c47\u805a\u5c42\u505avlan\u8bbe\u7f6e\uff0c\u6211\u4eec\u5728\u601d\u79d13560\u6838\u5fc3\u4ea4\u6362\u673a\u505avlan\uff0c\u4f46\u662f\u5176\u4ed6\u8bbe\u5907\u4e0a\u8981\u540c\u6b65vlan\u7684ID<\/p>\n
\u601d\u79d13<\/b><\/strong>560<\/b><\/strong>\u4ea4\u6362\u673a<\/b><\/strong>\u914d\u7f6evlan<\/b><\/strong><\/h2>\nsw1#config<\/p>\n
sw1(config)#vlan 5,30,35,100,200 \u00a0#\u6279\u91cf\u521b\u5efavlan<\/p>\n
<\/p>\n
vlan5\u914d\u7f6e\u00a0#\u8bbe\u5907\u901a\u4fe1vlan<\/p>\n
sw1(config)#interface vlan 5 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\u8fdb\u5165vlan5<\/p>\n
sw1(config-if)#ip address 192.168.5.2 255.255.255.0 \u00a0#\u914d\u7f6e\u7f51\u5173<\/p>\n
sw1(config-if)#exit<\/p>\n
<\/p>\n
vlan30\u914d\u7f6e\u00a0#\u4ea4\u6362\u673a\u8def\u7531\u5668\u7ba1\u7406vlan<\/p>\n
sw1(config)#interface vlan 30 \u00a0\u00a0\u00a0#\u8fdb\u5165vlan30<\/p>\n
sw1(config-if)#ip address 30.1.1.254 255.255.255.0 \u00a0#\u914d\u7f6e\u7f51\u5173<\/p>\n
sw1(config-if)#exit<\/p>\n
<\/p>\n
vlan35\u914d\u7f6e\u00a0#ap\u7ba1\u7406vlan<\/p>\n
sw1(config)#interface vlan 35 \u8fdb\u5165vlan35<\/p>\n
sw1(config-if)#ip address 35.1.1.1 255.255.255.0 \u00a0#\u914d\u7f6e\u7f51\u5173<\/p>\n
sw1(config-if)#exit<\/p>\n
<\/p>\n
vlan100\u914d\u7f6e#\u6709\u7ebf\u7f51\u7edc<\/p>\n
sw1(config)#interface vlan 100 \u8fdb\u5165vlan100<\/p>\n
sw1(config-if)#ip address 10.10.100.254 255.255.255.0 \u00a0#\u914d\u7f6e\u7f51\u5173<\/p>\n
sw1(config-if)#exit<\/p>\n
<\/p>\n
vlan200\u914d\u7f6e#\u6709\u7ebf\u7f51\u7edc<\/p>\n
sw1(config)#interface vlan 200 \u8fdb\u5165vlan200<\/p>\n
sw1(config-if)#ip address 10.10.200.254 255.255.255.0 \u00a0#\u914d\u7f6e\u7f51\u5173<\/p>\n
sw1(config-if)#exit<\/p>\n
\u534e\u4e3aac<\/b><\/strong>6005<\/b><\/strong>\u914d\u7f6evlan<\/b><\/strong><\/h2>\n<AC6005>sys<\/p>\n
[AC6005]vlan batch 5 30 35 100 200 \u00a0#\u6279\u91cf\u521b\u5efavlan<\/p>\n
Vlan5\u914d\u7f6e #\u8bbe\u5907\u901a\u4fe1<\/p>\n
[AC6005]interface Vlanif 5<\/p>\n
[AC6005-Vlanif5]ip address 192.168.5.3 255.255.255.0<\/p>\n
<\/p>\n
Vlan30\u914d\u7f6e #\u8bbe\u5907\u901a\u4fe1<\/p>\n
[AC6005]interface Vlanif 30<\/p>\n
[AC6005-Vlanif5]ip address 30.1.1.1 255.255.255.0<\/p>\n
<\/p>\n
Vlan35 100 200 #\u4e0d\u9700\u8981\u914d\u7f6e\u53ea\u9700\u8981\u521b\u5efaID\u540e\u540c\u6b65\u601d\u79d13560<\/p>\n
\u914d\u7f6eDHCP<\/b><\/strong><\/h1>\n\u6211\u4eec\u5728\u601d\u79d13560\u6838\u5fc3\u4ea4\u6362\u673a\u914d\u7f6eDHCP\u5373\u53ef<\/p>\n
\u601d\u79d13<\/b><\/strong>560<\/b><\/strong>\u914d\u7f6eDHCP<\/b><\/strong><\/h2>\n\u914d\u7f6evlan30\u00a0#DHCP<\/p>\n
sw1#config<\/p>\n
sw1(config)#ip dhcp pool vlan30<\/p>\n
sw1(dhcp-config)#network 30.1.1.0 255.255.255.0<\/p>\n
sw1(dhcp-config)#default-router 30.1.1.254<\/p>\n
sw1(dhcp-config)#dns-server 10.10.20.1<\/p>\n
sw1(config)#exit<\/p>\n
<\/p>\n
\u914d\u7f6evlan35\u00a0#DHCP<\/p>\n
sw1(config)#ip dhcp pool vlan35<\/p>\n
sw1(dhcp-config)#network 35.1.1.0 255.255.255.0<\/p>\n
sw1(dhcp-config)#default-router 35.1.1.254<\/p>\n
sw1(dhcp-config)#dns-server 10.10.20.1<\/p>\n
sw1(dhcp-config)#option 43 ip 30.1.1.1 \u00a0#\u8fd9\u4e2a\u662fac\u7ba1\u7406\u5730\u5740<\/p>\n
sw1(dhcp-config)#exit<\/p>\n
<\/p>\n
\u914d\u7f6evlan100\u00a0#DHCP<\/p>\n
sw1(config)#ip dhcp pool vlan100<\/p>\n
sw1(dhcp-config)#network 10.10.100.0 255.255.255.0<\/p>\n
sw1(dhcp-config)#default-router 10.10.100.254<\/p>\n
sw1(dhcp-config)#dns-server 10.10.20.1<\/p>\n
sw1(dhcp-config)#exit<\/p>\n
<\/p>\n
\u914d\u7f6evlan200\u00a0#DHCP<\/p>\n
sw1(config)#ip dhcp pool vlan200<\/p>\n
sw1(dhcp-config)#network 10.10.200.0 255.255.255.0<\/p>\n
sw1(dhcp-config)#default-router 10.10.200.254<\/p>\n
sw1(dhcp-config)#dns-server 10.10.20.1<\/p>\n
sw1(dhcp-config)#exit<\/p>\n
<\/p>\n
\u534e\u4e3aac<\/b><\/strong>6005<\/b><\/strong>\u914d\u7f6eDHCP<\/b><\/strong><\/h2>\n<AC6005>sys<\/p>\n
[AC6005]undo dhcp enable \u00a0\u00a0#\u5173\u95edDHCp<\/p>\n
Warning: All DHCP functions will be disabled. Continue? [Y\/N]y \u00a0#\u70b9\u51fbY<\/p>\n
[AC6005]<\/p>\n
\u914d\u7f6e\u9759\u6001\u8def\u7531<\/b><\/strong><\/h1>\nP<\/b><\/strong>fsense\u914d\u7f6e\u9759\u6001\u8def\u7531<\/b><\/strong><\/h2>\n\u767b\u9646pfsense\uff0c\u8f6c\u5230\u7cfb\u7edf\u2014\u8def\u7531\u7ba1\u7406\u3002<\/p>\n
<\/div><\/a><\/p>\n\u70b9\u51fb\u6dfb\u52a0\u3002<\/p>\n
<\/div><\/a><\/p>\n\u63a5\u53e3\u9009\u62e9\u8fde\u63a5\u601d\u79d13560\u4ea4\u6362\u673a\u90a3\u4e2a\u53e3\uff0c\u7f51\u5173\u586b\u5199\u601d\u79d13560\u4ea4\u6362\u673a\u7684vlan5\u7684\u7f51\u5173\uff0c\u70b9\u51fb\u4fdd\u5b58\u3002<\/p>\n
<\/div><\/a><\/p>\n\u5355\u51fb\u9759\u6001\u8def\u7531\uff0c\u70b9\u51fb\u6dfb\u52a0\u3002<\/p>\n
<\/div><\/a><\/p>\n\u76ee\u6807\u7f51\u7edc\u662f\u4ea4\u6362\u673a\u5185\u90e8\u7684vlan\u7684\u7f51\u7edc\uff0c\u5305\u542b\u4e86vlan5,30,35,100,200\u7684\u7f51\u7edc\uff0c\u8fd9\u91cc\u586b\u5199\u7684\u662f8\u4f4d\u6c47\u603b\u7f51\u7edc\uff0c\u6216\u8005\u5199\u660e\u8be6\u7ec6\u8def\u7531\u90fd\u53ef\u4ee5\u3002<\/p>\n
<\/div><\/a><\/p>\n\u6dfb\u52a0\u4ee5\u4e0b\u6c47\u603b\u7f51\u7edc\uff0c\u5747\u90fd\u662f\u601d\u79d13560\u4ea4\u6362\u673a\u5185\u90e8\u7f51\u7edc\u3002<\/p>\n
<\/div><\/a><\/p>\n\u601d\u79d13<\/b><\/strong>560<\/b><\/strong>\u4ea4\u6362\u673a\u914d\u7f6e\u9759\u6001\u8def\u7531<\/b><\/strong><\/h2>\nsw1#config<\/p>\n
sw1(config)#ip routing \u00a0#\u5f00\u542f\u4e09\u5c42\u8def\u7531\u529f\u80fd<\/p>\n
sw1(config)#ip route 0.0.0.0 0.0.0.0 192.168.5.1 \u00a0#\u6240\u6709\u8def\u7531\u6307\u5411\u51fa\u53e3192.168.5.1<\/p>\n
\u534e\u4e3aac<\/b><\/strong>6005<\/b><\/strong>\u914d\u7f6e\u9759\u6001\u8def\u7531<\/b><\/strong><\/h2>\n<AC6005>sys<\/p>\n
[AC6005]ip route-static 0.0.0.0 0.0.0.0 192.168.5.1 #\u6240\u6709\u8def\u7531\u6307\u5411\u51fa\u53e3192.168.5.1<\/p>\n
W<\/b><\/strong>lan\u65e0\u7ebf\u8bbe\u7f6e<\/b><\/strong><\/h1>\n\u534e\u4e3aac<\/b><\/strong>6005<\/b><\/strong>\u914d\u7f6e<\/b><\/strong><\/h2>\nA<\/b><\/strong>c<\/b><\/strong>6005<\/b><\/strong>\u00a0\u8bbe\u7f6evlan<\/b><\/strong><\/h2>\n\u8fde\u63a5ap\u7684\u4e1a\u52a1\u53e3\u5206\u914dvlan35\uff0cvlan35\u662f\u7ba1\u7406ap\u7684\u3002<\/p>\n
[AC6005]interface GigabitEthernet 0\/0\/1 \u00a0\u00a0#\u8fdb\u51651\u63a5\u53e3\uff0cAP\u8fde\u63a5\u7684\u53e3<\/p>\n
[AC6005-GigabitEthernet0\/0\/1]port link-type access \u00a0#\u66f4\u6539\u4e3aaccess<\/p>\n
[AC6005-GigabitEthernet0\/0\/1]port default vlan 35 \u00a0#\u66f4\u6539\u4e3avlan35\uff0cap\u7ba1\u7406vlan<\/p>\n
[AC6005-GigabitEthernet0\/0\/1]quit<\/p>\n
AC<\/b><\/strong>6005<\/b><\/strong>\u914d\u7f6eAC\u5e76\u6dfb\u52a0\u6e90IP<\/b><\/strong><\/h2>\n\u4f7f\u7528\u6d4f\u89c8\u5668\u767b\u9646\u534e\u4e3aac6005\uff0c\u5bc6\u7801\u5c31\u662f\u4f60\u66f4\u6539\u7684\u5bc6\u7801\uff0c\u9ed8\u8ba4\u8d26\u6237\/\u5bc6\u7801:admin\/admin@huawei.com<\/p>\n
<\/div><\/a><\/p>\n\u9ed8\u8ba4\u5373\u53ef\u3002<\/p>\n
<\/div><\/a><\/p>\n\u9ed8\u8ba4\u5373\u53ef\u3002<\/p>\n
<\/div><\/a><\/p>\n\u9ed8\u8ba4\u5373\u53ef\u3002<\/p>\n
<\/div><\/a><\/p>\n\u70b9\u51fb\u4e0b\u4e00\u6b65\u3002<\/p>\n
<\/div><\/a><\/p>\n\u6dfb\u52a0\u6e90IP\uff0c\u70b9\u51fb\u4e0b\u4e00\u6b65<\/p>\n
<\/div><\/a><\/p>\n\u70b9\u51fb\u5b8c\u6210\u3002<\/p>\n
<\/div><\/a><\/p>\nvlan\u8bf4\u660e\uff1a<\/p>\n
1.vlan5 \u8bbe\u5907\u95f4\u901a\u4fe1\u5730\u5740 192.168.5.0\/24<\/p>\n
2.vlan30 \u8bbe\u5907lldp\u7ba1\u7406\u5730\u574030.1.1.0\/24<\/p>\n
3.vlan35 ap lldp\u7ba1\u7406\u5730\u574033.1.1.0\/24<\/p>\n
4.vlan100 \u6709\u7ebf\u7f51\u7edc10.10.100.0\/24<\/p>\n
5.vlan200 \u65e0\u7ebf\u7f51\u7edc10.10.200.0\/24<\/p>\n
\u4e92\u8054\u5730\u5740\u8bf4\u660e\uff1a<\/p>\n
1.\u534e\u4e3aax3int0\/4 ip10.10.20.1\/24<\/p>\n
2.pfsense int0\/0 ip10.10.20.2\/24<\/p>\n
3.pfsense int0\/1 ip 192.168.10.0\/24<\/p>\n
lldp\u7ba1\u7406\u5730\u5740\u8bf4\u660e\uff1a<\/p>\n
1.pfsense lldp 33.1.1.1\/24<\/p>\n
2.cisco 3560 lldp 30.1.1.1\/24<\/p>\n
3.\u534e\u4e3aac6005-8 lldp30.1.1.2\/24<\/p>\n
4.\u534e\u4e3aap5760-51 lldp 35.1.1.3\/24<\/p>\n
\u6ce8\u610f\uff1a\u62d3\u6251\u56fe\u4e0a\u6240\u6709\u63a5\u53e3\u5e76\u6ca1\u6709IP\u5730\u5740\uff0c\u6240\u6709IP\u5730\u5740\u662f\u7531vlan\u7ba1\u7406ip\u627f\u62c5\u8d1f\u8d23\u8def\u7531\u6536\u53d1\u3002<\/p>\n
C<\/b><\/strong>onsole\u53e3\u7ebf\u7f06\u914d\u7f6e<\/b><\/strong><\/h1>\n\u9700\u8981\u4f7f\u7528\u4e00\u6839console\u7ebf\u7f06\u4e0e\u4ea4\u6362\u673a\u5bf9\u63a5\u4f7f\u7528cl\u547d\u4ee4\u884c\u6765\u521d\u59cb\u5316\u4ea4\u6362\u673a\uff0c\u628aconsole\u7ebf\u7f06\u7684USB\u63a5\u53e3\u63d2\u5165\u5230\u4efb\u610f\u7535\u8111\u4e2d\uff0c\u4f7f\u7528ssh\u8f6f\u4ef6\u8fde\u63a5\u4ea4\u6362\u673a\u3002<\/p>\n
<\/div><\/a><\/p>\n <\/p>\n
Windows\u7cfb\u7edf\u2014\u2014\u53f3\u952e\u6b64\u7535\u8111\u2014\u2014\u7ba1\u7406\u2014\u2014\u8ba1\u7b97\u673a\u7ba1\u7406\u4e2d\u5de6\u4fa7\u627e\u5230\u8bbe\u5907\u7ba1\u7406\u5668\u2014\u2014\u53f3\u8fb9\u627e\u5230\u7aef\u53e3\u2014\u2014\u67e5\u770b\u662f\u5426\u6709USBSerial\u00a0Port\uff08COM5\uff09<\/p>\n
\u6ce8\u610f\uff1a\u8bb0\u4f4fCOM5\u6211\u4eec\u4f7f\u7528ssh\u8f6f\u4ef6\u8981\u8fde\u63a5\u8fd9\u4e2acom5<\/p>\n
<\/div><\/a><\/p>\n\u9e21\u54e5\u4f7f\u7528securecrt\u8f6f\u4ef6\u8fdb\u884c\u8fde\u63a5\uff0c\u70b9\u51fb01\u5feb\u901f\u8fde\u63a5\uff0c02\u534f\u8bae\u9009\u62e9serial\uff0c03\u9009\u62e9com5usb\uff0c04\u9009\u62e99600,05\u70b9\u51fb\u8fde\u63a5\u3002<\/p>\n
<\/div><\/a><\/p>\n\u70b9\u51fb\u56de\u8f66\u5c31\u53ef\u4ee5\u8fdb\u5165\u4ea4\u6362\u673a\u7684\u547d\u4ee4\u884c\u754c\u9762\u4e86\u3002<\/p>\n
<\/div><\/a><\/p>\n\u521d\u59cb\u5316\u8bbe\u5907<\/b><\/strong><\/h1>\nPfsense<\/b><\/strong>\u9632\u706b\u5899\u8bbe\u7f6e<\/b><\/strong><\/h2>\nPfsens\u9632\u706b\u5899\u8bbe\u7f6ewan\u53e3\u548clan\u53e3<\/h3>\n
\u8bf4\u660e\uff1awan\u53e3\u8d1f\u8d23\u901a\u5411\u5916\u7f51\u5c31\u662f\u4e92\u8054\u7f51\uff0clan\u53e3\u662f\u901a\u5411\u5c40\u57df\u7f51\uff0c\u8fd9\u4e24\u4e2a\u63a5\u53e3\u901a\u4e86\u540e\u624d\u80fd\u4e0a\u7f51\u3002<\/p>\n
\u521d\u59cb\u5316pfsense<\/b><\/strong><\/h4>\n\u9e21\u54e5\u7684pfsense\u8f6f\u8def\u7531ETH0\u63a5\u53e3\u9ed8\u8ba4\u4e3aWAN\u53e3\uff0cETH1\u63a5\u53e3\u9ed8\u8ba4\u4e3aLan\u53e3\uff0c\u6240\u4ee5\u6211\u4eec\u627e\u4e00\u53f0\u4efb\u610f\u7535\u8111\uff0c\u627e\u4e00\u6839\u7f51\u7ebf\u8fde\u63a5\u6211\u4eec\u7684ETH1\u63a5\u53e3\uff0c\u8fde\u63a5\u4e0a\u7f51\u7ebfDHCP\u81ea\u52a8\u83b7\u53d6\u4e00\u4e2aIP\uff0cETH1\u63a5\u53e3\u9ed8\u8ba4\u7ba1\u7406\u5730\u5740\u4e3a192.168.10.1(\u4ec5\u9650\u4e8e\u5b9a\u5236\u7248\u672c)\u3002<\/p>\n
<\/div><\/a><\/p>\n\u4f7f\u7528\u4efb\u610f\u6d4f\u89c8\u5668\u6253\u5f00lan\u7684\u7ba1\u7406\u5730\u5740192.168.10.1\u5730\u5740\u8fdb\u884c\u8c03\u8bd5\u3002<\/p>\n
\u8f93\u5165\u9ed8\u8ba4\u8d26\u6237admin\/pfsense\u8fdb\u884c\u767b\u9646\u3002<\/p>\n
<\/div><\/a><\/p>\n\u9ed8\u8ba4\u4e0b\u4e00\u6b65<\/p>\n
<\/div><\/a><\/p>\nDNS\u6539\u6210\u4f60\u7684\u4e0a\u7ea7\u8def\u7531\u5730\u5740\u3001ISP\u63d0\u4f9b\u7684DNS\u6216\u5176\u4ed6\u516c\u5171DNS\uff0c\u672c\u793a\u4f8b\u4f7f\u7528\u4e0a\u7ea7\u8def\u7531\u5668\u5730\u574010.10.20.1\u3002<\/p>\n
<\/div><\/a><\/p>\n\u65f6\u95f4\u670d\u52a1\u5668\u4f7f\u7528\u9ed8\u8ba4\u5373\u53ef\u3002<\/p>\n
<\/div><\/a><\/p>\n\u7b2c4\u6b65\u4e2ddhcp\u6307\u7684\u662fwan\u53e3\u83b7\u53d6\u4e0a\u7ea7\u8def\u7531\u7684ip\u5730\u5740\u3002\u672c\u793a\u4f8b\u4f7f\u7528dhcp\u83b7\u53d6\uff0c\u8fd9\u91cc\u53ef\u4ee5\u6839\u636e\u81ea\u5df1\u7684\u7f51\u7edc\u60c5\u51b5\u8fdb\u884c\u914d\u7f6e\u3002<\/div><\/a><\/p>\n\u56e0\u4e3a\u662f\u4e8c\u7ea7\u8def\u7531\uff0cRFC1918\u7f51\u7edc\u548c\u963b\u6b62bogom\u7f51\u7edc\u524d\u9762\u7684\u52fe\u53d6\u6d88\u6389\uff0c\u70b9\u51fb\u4e0b\u4e00\u6b65\u3002<\/p>\n
<\/div><\/a><\/p>\nLAN\u63a5\u53e3\u4f7f\u7528\u9ed8\u8ba4\u503c\u3002<\/p>\n
<\/div><\/a><\/p>\n\u66f4\u6539admin\u7ba1\u7406\u5458\u7684\u9ed8\u8ba4\u5bc6\u7801\u3002<\/p>\n
<\/div><\/a><\/p>\n\u70b9\u51fb\u4e0b\u4e00\u6b65\u3002<\/p>\n
<\/div><\/a><\/p>\n\u70b9\u51fb\u5b8c\u6210\u3002<\/p>\n
<\/div><\/a><\/p>\n\u8f6c\u5230\u4eea\u8868\u5927\u5385\uff0c\u53ef\u4ee5\u770b\u5230wan\u548clan\u63a5\u53e3\u5df2\u7ecf\u521d\u59cb\u5316\u3002<\/p>\n
<\/div><\/a><\/p>\n\u672c\u5730\u865a\u62df\u73af\u56deIP\u8bbe\u7f6e<\/b><\/strong><\/h4>\n\u8bf4\u660e\uff1a\u672c\u5730\u865a\u62dfip\u4e5f\u5c31\u662f\u672c\u5730\u73af\u56deIP\uff0c\u4f5c\u7528\u662f\u6d4b\u8bd5\u3001\u767b\u9646\u8bbe\u5907\u4f7f\u7528\u3002<\/p>\n
\u70b9\u51fb\u83dc\u5355\u680f\u2014\u2014\u865a\u62df\u5730\u5740\u3002<\/p>\n
<\/div><\/a><\/p>\n\u70b9\u51fb\u6dfb\u52a0\u3002<\/p>\n
<\/div><\/a><\/p>\nLocalhost\u4ee3\u8868\u672c\u5730\u73af\u56de\u63a5\u53e3\uff0c\u5730\u5740\u4e3a31.1.1.1\/32\u4f4d\u4fdd\u5b58\uff0c\u4e4b\u540e\u4f7f\u752831.1.1.1\u5730\u5740\u767b\u9646pfsense\u9632\u706b\u5899\u7cfb\u7edf\u3002<\/p>\n
<\/div><\/a><\/p>\n\u5e94\u7528\u66f4\u6539\u3002<\/p>\n
<\/div><\/a><\/p>\n\u4f7f\u7528\u865a\u62df\u73af\u56deIP\u767b\u9646\u3002<\/p>\n
<\/div><\/a><\/p>\n\u601d\u79d13<\/b><\/strong>560<\/b><\/strong>\u4ea4\u6362\u673a\u914d\u7f6e<\/b><\/strong><\/h2>\n\u8bf4\u660e\uff1a\u4ea4\u6362\u673a\u4e92\u8054\u662f\u4e09\u5c42\uff0c\u4f46\u4e0d\u662f\u5728\u63a5\u53e3\u4e0a\u914d\u7f6eIP\uff0c\u6211\u4eec\u901a\u8fc7\u63a5\u53e3Trunk\u6a21\u5f0f\uff0c\u5212\u5206vlan\u540e\u7ed9vlan\u7ba1\u7406IP\uff0c\u901a\u8fc7vlan\u4e92\u8054\u8bbe\u5907\u3002<\/p>\n
\u521d\u59cb\u5316\u8bbe\u5907<\/h3>\n
\u4f7f\u7528console\u7ebf\u7f06\u4e0e\u4ea4\u6362\u673a\u4e92\u8054\u5728\u6b64\u4e0d\u518d\u4ecb\u7ecd\u3002<\/p>\n
\u4fee\u6539\u4ea4\u6362\u673a\u540d\u79f0<\/b><\/strong><\/h4>\nSwitch>en \u00a0\u00a0\u00a0\u00a0\u00a0#\u8fdb\u5165\u7279\u6743\u6a21\u5f0f<\/p>\n
Switch#config \u00a0\u00a0\u00a0\u8fdb\u5165\u5168\u5c40\u547d\u4ee4\u6a21\u5f0f<\/p>\n
Switch(config)#hostname sw1-cisco3560 \u00a0\u00a0#\u4fee\u6539\u4ea4\u6362\u673a\u540d\u79f0<\/p>\n
sw1-cisco3560(config)#end \u00a0\u00a0#\u9000\u51fa\u5230\u7279\u6743\u6a21\u5f0f<\/p>\n
\u534e\u4e3aac<\/b><\/strong>6005-8<\/b><\/strong>\u4ea4\u6362\u673a\u914d\u7f6e<\/b><\/strong><\/h2>\n\u8bf4\u660e\uff1a\u4ea4\u6362\u673a\u4e92\u8054\u662f\u4e09\u5c42\uff0c\u4f46\u4e0d\u662f\u5728\u63a5\u53e3\u4e0a\u914d\u7f6eIP\uff0c\u6211\u4eec\u901a\u8fc7\u63a5\u53e3Trunk\u6a21\u5f0f\uff0c\u5212\u5206vlan\u540e\u7ed9vlan\u7ba1\u7406IP\uff0c\u901a\u8fc7vlan\u4e92\u8054\u8bbe\u5907\u3002<\/p>\n
\u521d\u59cb\u5316\u8bbe\u5907<\/h3>\n
AC6005>sys \u00a0#\u8fdb\u5165\u7cfb\u7edf\u89c6\u56fe<\/p>\n
[AC6005]sysname ac6005-8 \u00a0#\u4fee\u6539\u540d\u79f0<\/p>\n
[ac6005-8]<\/p>\n
\u94fe\u8def\u805a\u5408\u914d\u7f6e<\/b><\/strong><\/h1>\n\u6ce8\u610f\uff1a\u6f14\u793a\u4e0d\u540c\u8bbe\u5907\u5982\u4f55\u521b\u5efa\u94fe\u8def\u805a\u5408\u7684\uff0c\u5728\u672c\u793a\u4f8b\u4e2d\u6211\u4eec\u7528\u5230\u7684\u662flacp\u6a21\u5f0f\u8d1f\u8f7d\u4e3asrc-mac\u65b9\u5f0f\uff0c\u5728\u4e0b\u6587\u5c06\u4e0d\u5728\u6982\u8ff0\u3002<\/p>\n
pfsense\u9632\u706b\u5899\u94fe\u8def\u805a\u5408<\/b><\/strong><\/h2>\nLan\u53e3\uff08\u94fe\u8def\u805a\u5408\uff09<\/h3>\n
\u5728\u672c\u6b21\u6559\u5b66\u4e2d\u6211\u4eec\u4f7f\u7528\u94fe\u8def\u805a\u5408\u65b9\u5f0f\u8fdb\u884c\u8bbe\u7f6e\u63a5\u53e3\u3002<\/p>\n
\u94fe\u8def\u805a\u5408\uff1a\u591a\u4e2a\u7269\u7406\u63a5\u53e3\u7ed1\u5b9a\u5728\u4e00\u6761\u865a\u62df\u94fe\u8def\u4e2d\uff0c\u505a\u9ad8\u53ef\u7528\u589e\u52a0\u5e26\u5bbd\u4ee5\u53ca\u9ad8\u53ef\u7528\u3002\u4f8b\u5982\uff1a\u6211\u4eec\u8def\u7531\u5668\u4e0e\u7535\u8111\u8fde\u63a5\u4e86\u4e00\u6839\u7f51\u7ebf\uff0c\u7f51\u7ebf\u574f\u6389\u6216\u8005\u62d4\u6389\u662f\u4e0d\u662f\u65e0\u6cd5\u4e0a\u7f51\uff0c\u8fd9\u65f6\u5019\u6211\u4eec\u5728\u63d2\u4e00\u6761\u7f51\u7ebf\uff0c\u8fd9\u6837\u5c31\u4e0d\u4f1a\u5f71\u54cd\u4e0a\u7f51\uff0c\u5b66\u540d\u53eb\u4e0d\u95f4\u65ad\u63d0\u4f9b\u4e1a\u52a1\u3002<\/p>\n
\u5355\u51fbLAGGs\u3002<\/p>\n
<\/div><\/a><\/p>\n\u9009\u62e9\u6dfb\u52a0\u3002<\/p>\n
<\/div><\/a><\/p>\n\u4f7f\u7528\u952e\u76d8ctrl\u6309\u952e+\u9f20\u6807\u5de6\u952e\u9009\u4e2d\u6211\u4eec\u8981\u94fe\u8def\u805a\u5408\u7684\u63a5\u53e3\u5373\u53ef\uff0cLAGG\u534f\u8bae\u9009\u62e9LACP\u6a21\u5f0f\uff0c\u5176\u4ed6\u9009\u9879\u4fdd\u6301\u9ed8\u8ba4\u5373\u53ef\u3002<\/p>\n
<\/div><\/a><\/p>\n\u70b9\u51fb\u4fdd\u5b58\u3002<\/p>\n
<\/div><\/a><\/p>\n\u601d\u79d13<\/b><\/strong>560<\/b><\/strong>\u94fe\u8def\u805a\u5408<\/b><\/strong><\/h2>\n\u521b\u5efa\u94fe\u8def\u805a\u5408<\/h3>\n
sw1-cisco3560#enable \u00a0\u00a0#\u8fdb\u5165\u7279\u6743\u6a21\u5f0f<\/p>\n
sw1-cisco3560#config \u00a0\u00a0#\u8fdb\u5165\u5168\u5c40\u547d\u4ee4\u6a21\u5f0f<\/p>\n
sw1-cisco3560(config)#interface port-channel 1 \u00a0\u00a0#\u521b\u5efa\u94fe\u8def\u805a\u54081\u7ec4<\/p>\n
sw1-cisco3560(config-if)#exit \u00a0\u00a0#\u9000\u51fa<\/p>\n
sw1-cisco3560(config)#port-channel load-balance src-mac \u00a0#\u8d1f\u8f7d\u5747\u8861\u6e90MAC<\/p>\n
sw1-cisco3560(config)#interface range gigabitEthernet 0\/49-50 \u00a0#\u8fdb\u51650\/49-50\u63a5\u53e3<\/p>\n
sw1-cisco3560(config-if-range)#shutdown \u00a0\u00a0#\u5173\u95ed\u63a5\u53e3<\/p>\n
sw1-cisco3560(config-if-range)#channel-group 1 mode active #lacp\u4e3b\u52a8\u6a21\u5f0f<\/p>\n
sw1-cisco3560(config-if-range)#switchport trunk encapsulation dot1q # #\u534f\u8baedot1q<\/p>\n
sw1-cisco3560(config-if-range)#switchport mode trunk \u00a0\u00a0#\u6a21\u5f0ftrunk<\/p>\n
sw1-cisco3560(config-if-range)#switchport trunk allowed vlan all #\u5141\u8bb8\u6240\u6709vlan\u901a\u8fc7<\/p>\n
sw1-cisco3560(config-if-range)#no shutdown \u00a0\u00a0\u00a0\u00a0#\u5f00\u542f\u63a5\u53e3<\/p>\n
sw1-cisco3560(config-if-range)#end\u00a0\u00a0#\u9000\u51fa\u5230\u7279\u6743\u6a21\u5f0f<\/p>\n
sw1-cisco3560# sw1-cisco3560#show ip interface brief #\u67e5\u770b\u63a5\u53e3\u662f\u5426\u5df2\u7ecf\u542f\u52a8\uff08up\u72b6\u6001\uff09\u67e5\u770b0\/49-50\u63a5\u53e3\u548cport-channel1\u63a5\u53e3\u662f\u5426up\u5373\u53ef<\/p>\n
<\/div><\/a><\/p>\n\u534e\u4e3aac<\/b><\/strong>6005-8<\/b><\/strong>\u94fe\u8def\u805a\u5408<\/b><\/strong><\/h2>\n\u521b\u5efa\u94fe\u8def\u805a\u5408<\/h3>\n
[ac6005-8]interface Eth-Trunk 1 \u00a0\u00a0#\u521b\u5efa\u94fe\u8def\u805a\u54081\u7ec4<\/p>\n
[ac6005-8-Eth-Trunk1]mode lacp-static \u00a0#\u6a21\u5f0f\u4e3alacp<\/p>\n
[ac6005-8-Eth-Trunk1]load-balance src-mac \u00a0#\u8d1f\u8f7d\u6a21\u5f0fsrc-mac<\/p>\n
[ac6005-8-Eth-Trunk1]trunkport GigabitEthernet 0\/0\/7 to 0\/0\/8 #07-08\u63a5\u53e3\u52a0\u5165<\/p>\n
[ac6005-8-Eth-Trunk1]port link-type trunk \u00a0#\u63a5\u53e3\u66f4\u6539\u4e3atrunk<\/p>\n
[ac6005-8-Eth-Trunk1]port trunk allow-pass vlan all \u00a0#\u6240\u6709vlan\u901a\u8fc7<\/p>\n
[ac6005-8-Eth-Trunk1]quit \u00a0#\u9000\u51fa\u5230\u7cfb\u7edf\u89c6\u56fe<\/p>\n
\u914d\u7f6evlan<\/b><\/strong><\/h1>\n\u901a\u5e38\u6211\u4eec\u90fd\u662f\u5728\u6838\u5fc3\u4ea4\u6362\u673a\u6216\u8005\u6c47\u805a\u5c42\u505avlan\u8bbe\u7f6e\uff0c\u6211\u4eec\u5728\u601d\u79d13560\u6838\u5fc3\u4ea4\u6362\u673a\u505avlan\uff0c\u4f46\u662f\u5176\u4ed6\u8bbe\u5907\u4e0a\u8981\u540c\u6b65vlan\u7684ID<\/p>\n
\u601d\u79d13<\/b><\/strong>560<\/b><\/strong>\u4ea4\u6362\u673a<\/b><\/strong>\u914d\u7f6evlan<\/b><\/strong><\/h2>\nsw1#config<\/p>\n
sw1(config)#vlan 5,30,35,100,200 \u00a0#\u6279\u91cf\u521b\u5efavlan<\/p>\n
<\/p>\n
vlan5\u914d\u7f6e\u00a0#\u8bbe\u5907\u901a\u4fe1vlan<\/p>\n
sw1(config)#interface vlan 5 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\u8fdb\u5165vlan5<\/p>\n
sw1(config-if)#ip address 192.168.5.2 255.255.255.0 \u00a0#\u914d\u7f6e\u7f51\u5173<\/p>\n
sw1(config-if)#exit<\/p>\n
<\/p>\n
vlan30\u914d\u7f6e\u00a0#\u4ea4\u6362\u673a\u8def\u7531\u5668\u7ba1\u7406vlan<\/p>\n
sw1(config)#interface vlan 30 \u00a0\u00a0\u00a0#\u8fdb\u5165vlan30<\/p>\n
sw1(config-if)#ip address 30.1.1.254 255.255.255.0 \u00a0#\u914d\u7f6e\u7f51\u5173<\/p>\n
sw1(config-if)#exit<\/p>\n
<\/p>\n
vlan35\u914d\u7f6e\u00a0#ap\u7ba1\u7406vlan<\/p>\n
sw1(config)#interface vlan 35 \u8fdb\u5165vlan35<\/p>\n
sw1(config-if)#ip address 35.1.1.1 255.255.255.0 \u00a0#\u914d\u7f6e\u7f51\u5173<\/p>\n
sw1(config-if)#exit<\/p>\n
<\/p>\n
vlan100\u914d\u7f6e#\u6709\u7ebf\u7f51\u7edc<\/p>\n
sw1(config)#interface vlan 100 \u8fdb\u5165vlan100<\/p>\n
sw1(config-if)#ip address 10.10.100.254 255.255.255.0 \u00a0#\u914d\u7f6e\u7f51\u5173<\/p>\n
sw1(config-if)#exit<\/p>\n
<\/p>\n
vlan200\u914d\u7f6e#\u6709\u7ebf\u7f51\u7edc<\/p>\n
sw1(config)#interface vlan 200 \u8fdb\u5165vlan200<\/p>\n
sw1(config-if)#ip address 10.10.200.254 255.255.255.0 \u00a0#\u914d\u7f6e\u7f51\u5173<\/p>\n
sw1(config-if)#exit<\/p>\n
\u534e\u4e3aac<\/b><\/strong>6005<\/b><\/strong>\u914d\u7f6evlan<\/b><\/strong><\/h2>\n<AC6005>sys<\/p>\n
[AC6005]vlan batch 5 30 35 100 200 \u00a0#\u6279\u91cf\u521b\u5efavlan<\/p>\n
Vlan5\u914d\u7f6e #\u8bbe\u5907\u901a\u4fe1<\/p>\n
[AC6005]interface Vlanif 5<\/p>\n
[AC6005-Vlanif5]ip address 192.168.5.3 255.255.255.0<\/p>\n
<\/p>\n
Vlan30\u914d\u7f6e #\u8bbe\u5907\u901a\u4fe1<\/p>\n
[AC6005]interface Vlanif 30<\/p>\n
[AC6005-Vlanif5]ip address 30.1.1.1 255.255.255.0<\/p>\n
<\/p>\n
Vlan35 100 200 #\u4e0d\u9700\u8981\u914d\u7f6e\u53ea\u9700\u8981\u521b\u5efaID\u540e\u540c\u6b65\u601d\u79d13560<\/p>\n
\u914d\u7f6eDHCP<\/b><\/strong><\/h1>\n\u6211\u4eec\u5728\u601d\u79d13560\u6838\u5fc3\u4ea4\u6362\u673a\u914d\u7f6eDHCP\u5373\u53ef<\/p>\n
\u601d\u79d13<\/b><\/strong>560<\/b><\/strong>\u914d\u7f6eDHCP<\/b><\/strong><\/h2>\n\u914d\u7f6evlan30\u00a0#DHCP<\/p>\n
sw1#config<\/p>\n
sw1(config)#ip dhcp pool vlan30<\/p>\n
sw1(dhcp-config)#network 30.1.1.0 255.255.255.0<\/p>\n
sw1(dhcp-config)#default-router 30.1.1.254<\/p>\n
sw1(dhcp-config)#dns-server 10.10.20.1<\/p>\n
sw1(config)#exit<\/p>\n
<\/p>\n
\u914d\u7f6evlan35\u00a0#DHCP<\/p>\n
sw1(config)#ip dhcp pool vlan35<\/p>\n
sw1(dhcp-config)#network 35.1.1.0 255.255.255.0<\/p>\n
sw1(dhcp-config)#default-router 35.1.1.254<\/p>\n
sw1(dhcp-config)#dns-server 10.10.20.1<\/p>\n
sw1(dhcp-config)#option 43 ip 30.1.1.1 \u00a0#\u8fd9\u4e2a\u662fac\u7ba1\u7406\u5730\u5740<\/p>\n
sw1(dhcp-config)#exit<\/p>\n
<\/p>\n
\u914d\u7f6evlan100\u00a0#DHCP<\/p>\n
sw1(config)#ip dhcp pool vlan100<\/p>\n
sw1(dhcp-config)#network 10.10.100.0 255.255.255.0<\/p>\n
sw1(dhcp-config)#default-router 10.10.100.254<\/p>\n
sw1(dhcp-config)#dns-server 10.10.20.1<\/p>\n
sw1(dhcp-config)#exit<\/p>\n
<\/p>\n
\u914d\u7f6evlan200\u00a0#DHCP<\/p>\n
sw1(config)#ip dhcp pool vlan200<\/p>\n
sw1(dhcp-config)#network 10.10.200.0 255.255.255.0<\/p>\n
sw1(dhcp-config)#default-router 10.10.200.254<\/p>\n
sw1(dhcp-config)#dns-server 10.10.20.1<\/p>\n
sw1(dhcp-config)#exit<\/p>\n
<\/p>\n
\u534e\u4e3aac<\/b><\/strong>6005<\/b><\/strong>\u914d\u7f6eDHCP<\/b><\/strong><\/h2>\n<AC6005>sys<\/p>\n
[AC6005]undo dhcp enable \u00a0\u00a0#\u5173\u95edDHCp<\/p>\n
Warning: All DHCP functions will be disabled. Continue? [Y\/N]y \u00a0#\u70b9\u51fbY<\/p>\n
[AC6005]<\/p>\n
\u914d\u7f6e\u9759\u6001\u8def\u7531<\/b><\/strong><\/h1>\nP<\/b><\/strong>fsense\u914d\u7f6e\u9759\u6001\u8def\u7531<\/b><\/strong><\/h2>\n\u767b\u9646pfsense\uff0c\u8f6c\u5230\u7cfb\u7edf\u2014\u8def\u7531\u7ba1\u7406\u3002<\/p>\n
<\/div><\/a><\/p>\n\u70b9\u51fb\u6dfb\u52a0\u3002<\/p>\n
<\/div><\/a><\/p>\n\u63a5\u53e3\u9009\u62e9\u8fde\u63a5\u601d\u79d13560\u4ea4\u6362\u673a\u90a3\u4e2a\u53e3\uff0c\u7f51\u5173\u586b\u5199\u601d\u79d13560\u4ea4\u6362\u673a\u7684vlan5\u7684\u7f51\u5173\uff0c\u70b9\u51fb\u4fdd\u5b58\u3002<\/p>\n
<\/div><\/a><\/p>\n\u5355\u51fb\u9759\u6001\u8def\u7531\uff0c\u70b9\u51fb\u6dfb\u52a0\u3002<\/p>\n
<\/div><\/a><\/p>\n\u76ee\u6807\u7f51\u7edc\u662f\u4ea4\u6362\u673a\u5185\u90e8\u7684vlan\u7684\u7f51\u7edc\uff0c\u5305\u542b\u4e86vlan5,30,35,100,200\u7684\u7f51\u7edc\uff0c\u8fd9\u91cc\u586b\u5199\u7684\u662f8\u4f4d\u6c47\u603b\u7f51\u7edc\uff0c\u6216\u8005\u5199\u660e\u8be6\u7ec6\u8def\u7531\u90fd\u53ef\u4ee5\u3002<\/p>\n
<\/div><\/a><\/p>\n\u6dfb\u52a0\u4ee5\u4e0b\u6c47\u603b\u7f51\u7edc\uff0c\u5747\u90fd\u662f\u601d\u79d13560\u4ea4\u6362\u673a\u5185\u90e8\u7f51\u7edc\u3002<\/p>\n
<\/div><\/a><\/p>\n\u601d\u79d13<\/b><\/strong>560<\/b><\/strong>\u4ea4\u6362\u673a\u914d\u7f6e\u9759\u6001\u8def\u7531<\/b><\/strong><\/h2>\nsw1#config<\/p>\n
sw1(config)#ip routing \u00a0#\u5f00\u542f\u4e09\u5c42\u8def\u7531\u529f\u80fd<\/p>\n
sw1(config)#ip route 0.0.0.0 0.0.0.0 192.168.5.1 \u00a0#\u6240\u6709\u8def\u7531\u6307\u5411\u51fa\u53e3192.168.5.1<\/p>\n
\u534e\u4e3aac<\/b><\/strong>6005<\/b><\/strong>\u914d\u7f6e\u9759\u6001\u8def\u7531<\/b><\/strong><\/h2>\n<AC6005>sys<\/p>\n
[AC6005]ip route-static 0.0.0.0 0.0.0.0 192.168.5.1 #\u6240\u6709\u8def\u7531\u6307\u5411\u51fa\u53e3192.168.5.1<\/p>\n
W<\/b><\/strong>lan\u65e0\u7ebf\u8bbe\u7f6e<\/b><\/strong><\/h1>\n\u534e\u4e3aac<\/b><\/strong>6005<\/b><\/strong>\u914d\u7f6e<\/b><\/strong><\/h2>\nA<\/b><\/strong>c<\/b><\/strong>6005<\/b><\/strong>\u00a0\u8bbe\u7f6evlan<\/b><\/strong><\/h2>\n\u8fde\u63a5ap\u7684\u4e1a\u52a1\u53e3\u5206\u914dvlan35\uff0cvlan35\u662f\u7ba1\u7406ap\u7684\u3002<\/p>\n
[AC6005]interface GigabitEthernet 0\/0\/1 \u00a0\u00a0#\u8fdb\u51651\u63a5\u53e3\uff0cAP\u8fde\u63a5\u7684\u53e3<\/p>\n
[AC6005-GigabitEthernet0\/0\/1]port link-type access \u00a0#\u66f4\u6539\u4e3aaccess<\/p>\n
[AC6005-GigabitEthernet0\/0\/1]port default vlan 35 \u00a0#\u66f4\u6539\u4e3avlan35\uff0cap\u7ba1\u7406vlan<\/p>\n
[AC6005-GigabitEthernet0\/0\/1]quit<\/p>\n
AC<\/b><\/strong>6005<\/b><\/strong>\u914d\u7f6eAC\u5e76\u6dfb\u52a0\u6e90IP<\/b><\/strong><\/h2>\n\u4f7f\u7528\u6d4f\u89c8\u5668\u767b\u9646\u534e\u4e3aac6005\uff0c\u5bc6\u7801\u5c31\u662f\u4f60\u66f4\u6539\u7684\u5bc6\u7801\uff0c\u9ed8\u8ba4\u8d26\u6237\/\u5bc6\u7801:admin\/admin@huawei.com<\/p>\n
<\/div><\/a><\/p>\n\u9ed8\u8ba4\u5373\u53ef\u3002<\/p>\n
<\/div><\/a><\/p>\n\u9ed8\u8ba4\u5373\u53ef\u3002<\/p>\n
<\/div><\/a><\/p>\n\u9ed8\u8ba4\u5373\u53ef\u3002<\/p>\n
<\/div><\/a><\/p>\n\u70b9\u51fb\u4e0b\u4e00\u6b65\u3002<\/p>\n
<\/div><\/a><\/p>\n\u6dfb\u52a0\u6e90IP\uff0c\u70b9\u51fb\u4e0b\u4e00\u6b65<\/p>\n
<\/div><\/a><\/p>\n\u70b9\u51fb\u5b8c\u6210\u3002<\/p>\n
<\/div><\/a><\/p>\n<\/p>\n
Windows\u7cfb\u7edf\u2014\u2014\u53f3\u952e\u6b64\u7535\u8111\u2014\u2014\u7ba1\u7406\u2014\u2014\u8ba1\u7b97\u673a\u7ba1\u7406\u4e2d\u5de6\u4fa7\u627e\u5230\u8bbe\u5907\u7ba1\u7406\u5668\u2014\u2014\u53f3\u8fb9\u627e\u5230\u7aef\u53e3\u2014\u2014\u67e5\u770b\u662f\u5426\u6709USBSerial\u00a0Port\uff08COM5\uff09<\/p>\n
\u6ce8\u610f\uff1a\u8bb0\u4f4fCOM5\u6211\u4eec\u4f7f\u7528ssh\u8f6f\u4ef6\u8981\u8fde\u63a5\u8fd9\u4e2acom5<\/p>\n
\u9e21\u54e5\u4f7f\u7528securecrt\u8f6f\u4ef6\u8fdb\u884c\u8fde\u63a5\uff0c\u70b9\u51fb01\u5feb\u901f\u8fde\u63a5\uff0c02\u534f\u8bae\u9009\u62e9serial\uff0c03\u9009\u62e9com5usb\uff0c04\u9009\u62e99600,05\u70b9\u51fb\u8fde\u63a5\u3002<\/p>\n \u70b9\u51fb\u56de\u8f66\u5c31\u53ef\u4ee5\u8fdb\u5165\u4ea4\u6362\u673a\u7684\u547d\u4ee4\u884c\u754c\u9762\u4e86\u3002<\/p>\n \u8bf4\u660e\uff1awan\u53e3\u8d1f\u8d23\u901a\u5411\u5916\u7f51\u5c31\u662f\u4e92\u8054\u7f51\uff0clan\u53e3\u662f\u901a\u5411\u5c40\u57df\u7f51\uff0c\u8fd9\u4e24\u4e2a\u63a5\u53e3\u901a\u4e86\u540e\u624d\u80fd\u4e0a\u7f51\u3002<\/p>\n \u9e21\u54e5\u7684pfsense\u8f6f\u8def\u7531ETH0\u63a5\u53e3\u9ed8\u8ba4\u4e3aWAN\u53e3\uff0cETH1\u63a5\u53e3\u9ed8\u8ba4\u4e3aLan\u53e3\uff0c\u6240\u4ee5\u6211\u4eec\u627e\u4e00\u53f0\u4efb\u610f\u7535\u8111\uff0c\u627e\u4e00\u6839\u7f51\u7ebf\u8fde\u63a5\u6211\u4eec\u7684ETH1\u63a5\u53e3\uff0c\u8fde\u63a5\u4e0a\u7f51\u7ebfDHCP\u81ea\u52a8\u83b7\u53d6\u4e00\u4e2aIP\uff0cETH1\u63a5\u53e3\u9ed8\u8ba4\u7ba1\u7406\u5730\u5740\u4e3a192.168.10.1(\u4ec5\u9650\u4e8e\u5b9a\u5236\u7248\u672c)\u3002<\/p>\n \u4f7f\u7528\u4efb\u610f\u6d4f\u89c8\u5668\u6253\u5f00lan\u7684\u7ba1\u7406\u5730\u5740192.168.10.1\u5730\u5740\u8fdb\u884c\u8c03\u8bd5\u3002<\/p>\n \u8f93\u5165\u9ed8\u8ba4\u8d26\u6237admin\/pfsense\u8fdb\u884c\u767b\u9646\u3002<\/p>\n \u9ed8\u8ba4\u4e0b\u4e00\u6b65<\/p>\n DNS\u6539\u6210\u4f60\u7684\u4e0a\u7ea7\u8def\u7531\u5730\u5740\u3001ISP\u63d0\u4f9b\u7684DNS\u6216\u5176\u4ed6\u516c\u5171DNS\uff0c\u672c\u793a\u4f8b\u4f7f\u7528\u4e0a\u7ea7\u8def\u7531\u5668\u5730\u574010.10.20.1\u3002<\/p>\n \u65f6\u95f4\u670d\u52a1\u5668\u4f7f\u7528\u9ed8\u8ba4\u5373\u53ef\u3002<\/p>\n \u7b2c4\u6b65\u4e2ddhcp\u6307\u7684\u662fwan\u53e3\u83b7\u53d6\u4e0a\u7ea7\u8def\u7531\u7684ip\u5730\u5740\u3002\u672c\u793a\u4f8b\u4f7f\u7528dhcp\u83b7\u53d6\uff0c\u8fd9\u91cc\u53ef\u4ee5\u6839\u636e\u81ea\u5df1\u7684\u7f51\u7edc\u60c5\u51b5\u8fdb\u884c\u914d\u7f6e\u3002 \u56e0\u4e3a\u662f\u4e8c\u7ea7\u8def\u7531\uff0cRFC1918\u7f51\u7edc\u548c\u963b\u6b62bogom\u7f51\u7edc\u524d\u9762\u7684\u52fe\u53d6\u6d88\u6389\uff0c\u70b9\u51fb\u4e0b\u4e00\u6b65\u3002<\/p>\n LAN\u63a5\u53e3\u4f7f\u7528\u9ed8\u8ba4\u503c\u3002<\/p>\n \u66f4\u6539admin\u7ba1\u7406\u5458\u7684\u9ed8\u8ba4\u5bc6\u7801\u3002<\/p>\n \u70b9\u51fb\u4e0b\u4e00\u6b65\u3002<\/p>\n \u70b9\u51fb\u5b8c\u6210\u3002<\/p>\n \u8f6c\u5230\u4eea\u8868\u5927\u5385\uff0c\u53ef\u4ee5\u770b\u5230wan\u548clan\u63a5\u53e3\u5df2\u7ecf\u521d\u59cb\u5316\u3002<\/p>\n \u8bf4\u660e\uff1a\u672c\u5730\u865a\u62dfip\u4e5f\u5c31\u662f\u672c\u5730\u73af\u56deIP\uff0c\u4f5c\u7528\u662f\u6d4b\u8bd5\u3001\u767b\u9646\u8bbe\u5907\u4f7f\u7528\u3002<\/p>\n \u70b9\u51fb\u83dc\u5355\u680f\u2014\u2014\u865a\u62df\u5730\u5740\u3002<\/p>\n \u70b9\u51fb\u6dfb\u52a0\u3002<\/p>\n Localhost\u4ee3\u8868\u672c\u5730\u73af\u56de\u63a5\u53e3\uff0c\u5730\u5740\u4e3a31.1.1.1\/32\u4f4d\u4fdd\u5b58\uff0c\u4e4b\u540e\u4f7f\u752831.1.1.1\u5730\u5740\u767b\u9646pfsense\u9632\u706b\u5899\u7cfb\u7edf\u3002<\/p>\n \u5e94\u7528\u66f4\u6539\u3002<\/p>\n \u4f7f\u7528\u865a\u62df\u73af\u56deIP\u767b\u9646\u3002<\/p>\n \u8bf4\u660e\uff1a\u4ea4\u6362\u673a\u4e92\u8054\u662f\u4e09\u5c42\uff0c\u4f46\u4e0d\u662f\u5728\u63a5\u53e3\u4e0a\u914d\u7f6eIP\uff0c\u6211\u4eec\u901a\u8fc7\u63a5\u53e3Trunk\u6a21\u5f0f\uff0c\u5212\u5206vlan\u540e\u7ed9vlan\u7ba1\u7406IP\uff0c\u901a\u8fc7vlan\u4e92\u8054\u8bbe\u5907\u3002<\/p>\n \u4f7f\u7528console\u7ebf\u7f06\u4e0e\u4ea4\u6362\u673a\u4e92\u8054\u5728\u6b64\u4e0d\u518d\u4ecb\u7ecd\u3002<\/p>\n Switch>en \u00a0\u00a0\u00a0\u00a0\u00a0#\u8fdb\u5165\u7279\u6743\u6a21\u5f0f<\/p>\n Switch#config \u00a0\u00a0\u00a0\u8fdb\u5165\u5168\u5c40\u547d\u4ee4\u6a21\u5f0f<\/p>\n Switch(config)#hostname sw1-cisco3560 \u00a0\u00a0#\u4fee\u6539\u4ea4\u6362\u673a\u540d\u79f0<\/p>\n sw1-cisco3560(config)#end \u00a0\u00a0#\u9000\u51fa\u5230\u7279\u6743\u6a21\u5f0f<\/p>\n \u8bf4\u660e\uff1a\u4ea4\u6362\u673a\u4e92\u8054\u662f\u4e09\u5c42\uff0c\u4f46\u4e0d\u662f\u5728\u63a5\u53e3\u4e0a\u914d\u7f6eIP\uff0c\u6211\u4eec\u901a\u8fc7\u63a5\u53e3Trunk\u6a21\u5f0f\uff0c\u5212\u5206vlan\u540e\u7ed9vlan\u7ba1\u7406IP\uff0c\u901a\u8fc7vlan\u4e92\u8054\u8bbe\u5907\u3002<\/p>\n AC6005>sys \u00a0#\u8fdb\u5165\u7cfb\u7edf\u89c6\u56fe<\/p>\n [AC6005]sysname ac6005-8 \u00a0#\u4fee\u6539\u540d\u79f0<\/p>\n [ac6005-8]<\/p>\n \u6ce8\u610f\uff1a\u6f14\u793a\u4e0d\u540c\u8bbe\u5907\u5982\u4f55\u521b\u5efa\u94fe\u8def\u805a\u5408\u7684\uff0c\u5728\u672c\u793a\u4f8b\u4e2d\u6211\u4eec\u7528\u5230\u7684\u662flacp\u6a21\u5f0f\u8d1f\u8f7d\u4e3asrc-mac\u65b9\u5f0f\uff0c\u5728\u4e0b\u6587\u5c06\u4e0d\u5728\u6982\u8ff0\u3002<\/p>\n \u5728\u672c\u6b21\u6559\u5b66\u4e2d\u6211\u4eec\u4f7f\u7528\u94fe\u8def\u805a\u5408\u65b9\u5f0f\u8fdb\u884c\u8bbe\u7f6e\u63a5\u53e3\u3002<\/p>\n \u94fe\u8def\u805a\u5408\uff1a\u591a\u4e2a\u7269\u7406\u63a5\u53e3\u7ed1\u5b9a\u5728\u4e00\u6761\u865a\u62df\u94fe\u8def\u4e2d\uff0c\u505a\u9ad8\u53ef\u7528\u589e\u52a0\u5e26\u5bbd\u4ee5\u53ca\u9ad8\u53ef\u7528\u3002\u4f8b\u5982\uff1a\u6211\u4eec\u8def\u7531\u5668\u4e0e\u7535\u8111\u8fde\u63a5\u4e86\u4e00\u6839\u7f51\u7ebf\uff0c\u7f51\u7ebf\u574f\u6389\u6216\u8005\u62d4\u6389\u662f\u4e0d\u662f\u65e0\u6cd5\u4e0a\u7f51\uff0c\u8fd9\u65f6\u5019\u6211\u4eec\u5728\u63d2\u4e00\u6761\u7f51\u7ebf\uff0c\u8fd9\u6837\u5c31\u4e0d\u4f1a\u5f71\u54cd\u4e0a\u7f51\uff0c\u5b66\u540d\u53eb\u4e0d\u95f4\u65ad\u63d0\u4f9b\u4e1a\u52a1\u3002<\/p>\n \u5355\u51fbLAGGs\u3002<\/p>\n \u9009\u62e9\u6dfb\u52a0\u3002<\/p>\n \u4f7f\u7528\u952e\u76d8ctrl\u6309\u952e+\u9f20\u6807\u5de6\u952e\u9009\u4e2d\u6211\u4eec\u8981\u94fe\u8def\u805a\u5408\u7684\u63a5\u53e3\u5373\u53ef\uff0cLAGG\u534f\u8bae\u9009\u62e9LACP\u6a21\u5f0f\uff0c\u5176\u4ed6\u9009\u9879\u4fdd\u6301\u9ed8\u8ba4\u5373\u53ef\u3002<\/p>\n \u70b9\u51fb\u4fdd\u5b58\u3002<\/p>\n sw1-cisco3560#enable \u00a0\u00a0#\u8fdb\u5165\u7279\u6743\u6a21\u5f0f<\/p>\n sw1-cisco3560#config \u00a0\u00a0#\u8fdb\u5165\u5168\u5c40\u547d\u4ee4\u6a21\u5f0f<\/p>\n sw1-cisco3560(config)#interface port-channel 1 \u00a0\u00a0#\u521b\u5efa\u94fe\u8def\u805a\u54081\u7ec4<\/p>\n sw1-cisco3560(config-if)#exit \u00a0\u00a0#\u9000\u51fa<\/p>\n sw1-cisco3560(config)#port-channel load-balance src-mac \u00a0#\u8d1f\u8f7d\u5747\u8861\u6e90MAC<\/p>\n sw1-cisco3560(config)#interface range gigabitEthernet 0\/49-50 \u00a0#\u8fdb\u51650\/49-50\u63a5\u53e3<\/p>\n sw1-cisco3560(config-if-range)#shutdown \u00a0\u00a0#\u5173\u95ed\u63a5\u53e3<\/p>\n sw1-cisco3560(config-if-range)#channel-group 1 mode active #lacp\u4e3b\u52a8\u6a21\u5f0f<\/p>\n sw1-cisco3560(config-if-range)#switchport trunk encapsulation dot1q # #\u534f\u8baedot1q<\/p>\n sw1-cisco3560(config-if-range)#switchport mode trunk \u00a0\u00a0#\u6a21\u5f0ftrunk<\/p>\n sw1-cisco3560(config-if-range)#switchport trunk allowed vlan all #\u5141\u8bb8\u6240\u6709vlan\u901a\u8fc7<\/p>\n sw1-cisco3560(config-if-range)#no shutdown \u00a0\u00a0\u00a0\u00a0#\u5f00\u542f\u63a5\u53e3<\/p>\n sw1-cisco3560(config-if-range)#end\u00a0\u00a0#\u9000\u51fa\u5230\u7279\u6743\u6a21\u5f0f<\/p>\n sw1-cisco3560# sw1-cisco3560#show ip interface brief #\u67e5\u770b\u63a5\u53e3\u662f\u5426\u5df2\u7ecf\u542f\u52a8\uff08up\u72b6\u6001\uff09\u67e5\u770b0\/49-50\u63a5\u53e3\u548cport-channel1\u63a5\u53e3\u662f\u5426up\u5373\u53ef<\/p>\n [ac6005-8]interface Eth-Trunk 1 \u00a0\u00a0#\u521b\u5efa\u94fe\u8def\u805a\u54081\u7ec4<\/p>\n [ac6005-8-Eth-Trunk1]mode lacp-static \u00a0#\u6a21\u5f0f\u4e3alacp<\/p>\n [ac6005-8-Eth-Trunk1]load-balance src-mac \u00a0#\u8d1f\u8f7d\u6a21\u5f0fsrc-mac<\/p>\n [ac6005-8-Eth-Trunk1]trunkport GigabitEthernet 0\/0\/7 to 0\/0\/8 #07-08\u63a5\u53e3\u52a0\u5165<\/p>\n [ac6005-8-Eth-Trunk1]port link-type trunk \u00a0#\u63a5\u53e3\u66f4\u6539\u4e3atrunk<\/p>\n [ac6005-8-Eth-Trunk1]port trunk allow-pass vlan all \u00a0#\u6240\u6709vlan\u901a\u8fc7<\/p>\n [ac6005-8-Eth-Trunk1]quit \u00a0#\u9000\u51fa\u5230\u7cfb\u7edf\u89c6\u56fe<\/p>\n \u901a\u5e38\u6211\u4eec\u90fd\u662f\u5728\u6838\u5fc3\u4ea4\u6362\u673a\u6216\u8005\u6c47\u805a\u5c42\u505avlan\u8bbe\u7f6e\uff0c\u6211\u4eec\u5728\u601d\u79d13560\u6838\u5fc3\u4ea4\u6362\u673a\u505avlan\uff0c\u4f46\u662f\u5176\u4ed6\u8bbe\u5907\u4e0a\u8981\u540c\u6b65vlan\u7684ID<\/p>\n sw1#config<\/p>\n sw1(config)#vlan 5,30,35,100,200 \u00a0#\u6279\u91cf\u521b\u5efavlan<\/p>\n <\/p>\n vlan5\u914d\u7f6e\u00a0#\u8bbe\u5907\u901a\u4fe1vlan<\/p>\n sw1(config)#interface vlan 5 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\u8fdb\u5165vlan5<\/p>\n sw1(config-if)#ip address 192.168.5.2 255.255.255.0 \u00a0#\u914d\u7f6e\u7f51\u5173<\/p>\n sw1(config-if)#exit<\/p>\n <\/p>\n vlan30\u914d\u7f6e\u00a0#\u4ea4\u6362\u673a\u8def\u7531\u5668\u7ba1\u7406vlan<\/p>\n sw1(config)#interface vlan 30 \u00a0\u00a0\u00a0#\u8fdb\u5165vlan30<\/p>\n sw1(config-if)#ip address 30.1.1.254 255.255.255.0 \u00a0#\u914d\u7f6e\u7f51\u5173<\/p>\n sw1(config-if)#exit<\/p>\n <\/p>\n vlan35\u914d\u7f6e\u00a0#ap\u7ba1\u7406vlan<\/p>\n sw1(config)#interface vlan 35 \u8fdb\u5165vlan35<\/p>\n sw1(config-if)#ip address 35.1.1.1 255.255.255.0 \u00a0#\u914d\u7f6e\u7f51\u5173<\/p>\n sw1(config-if)#exit<\/p>\n <\/p>\n vlan100\u914d\u7f6e#\u6709\u7ebf\u7f51\u7edc<\/p>\n sw1(config)#interface vlan 100 \u8fdb\u5165vlan100<\/p>\n sw1(config-if)#ip address 10.10.100.254 255.255.255.0 \u00a0#\u914d\u7f6e\u7f51\u5173<\/p>\n sw1(config-if)#exit<\/p>\n <\/p>\n vlan200\u914d\u7f6e#\u6709\u7ebf\u7f51\u7edc<\/p>\n sw1(config)#interface vlan 200 \u8fdb\u5165vlan200<\/p>\n sw1(config-if)#ip address 10.10.200.254 255.255.255.0 \u00a0#\u914d\u7f6e\u7f51\u5173<\/p>\n sw1(config-if)#exit<\/p>\n <AC6005>sys<\/p>\n [AC6005]vlan batch 5 30 35 100 200 \u00a0#\u6279\u91cf\u521b\u5efavlan<\/p>\n Vlan5\u914d\u7f6e #\u8bbe\u5907\u901a\u4fe1<\/p>\n [AC6005]interface Vlanif 5<\/p>\n [AC6005-Vlanif5]ip address 192.168.5.3 255.255.255.0<\/p>\n <\/p>\n Vlan30\u914d\u7f6e #\u8bbe\u5907\u901a\u4fe1<\/p>\n [AC6005]interface Vlanif 30<\/p>\n [AC6005-Vlanif5]ip address 30.1.1.1 255.255.255.0<\/p>\n <\/p>\n Vlan35 100 200 #\u4e0d\u9700\u8981\u914d\u7f6e\u53ea\u9700\u8981\u521b\u5efaID\u540e\u540c\u6b65\u601d\u79d13560<\/p>\n \u6211\u4eec\u5728\u601d\u79d13560\u6838\u5fc3\u4ea4\u6362\u673a\u914d\u7f6eDHCP\u5373\u53ef<\/p>\n \u914d\u7f6evlan30\u00a0#DHCP<\/p>\n sw1#config<\/p>\n sw1(config)#ip dhcp pool vlan30<\/p>\n sw1(dhcp-config)#network 30.1.1.0 255.255.255.0<\/p>\n sw1(dhcp-config)#default-router 30.1.1.254<\/p>\n sw1(dhcp-config)#dns-server 10.10.20.1<\/p>\n sw1(config)#exit<\/p>\n <\/p>\n \u914d\u7f6evlan35\u00a0#DHCP<\/p>\n sw1(config)#ip dhcp pool vlan35<\/p>\n sw1(dhcp-config)#network 35.1.1.0 255.255.255.0<\/p>\n sw1(dhcp-config)#default-router 35.1.1.254<\/p>\n sw1(dhcp-config)#dns-server 10.10.20.1<\/p>\n sw1(dhcp-config)#option 43 ip 30.1.1.1 \u00a0#\u8fd9\u4e2a\u662fac\u7ba1\u7406\u5730\u5740<\/p>\n sw1(dhcp-config)#exit<\/p>\n <\/p>\n \u914d\u7f6evlan100\u00a0#DHCP<\/p>\n sw1(config)#ip dhcp pool vlan100<\/p>\n sw1(dhcp-config)#network 10.10.100.0 255.255.255.0<\/p>\n sw1(dhcp-config)#default-router 10.10.100.254<\/p>\n sw1(dhcp-config)#dns-server 10.10.20.1<\/p>\n sw1(dhcp-config)#exit<\/p>\n <\/p>\n \u914d\u7f6evlan200\u00a0#DHCP<\/p>\n sw1(config)#ip dhcp pool vlan200<\/p>\n sw1(dhcp-config)#network 10.10.200.0 255.255.255.0<\/p>\n sw1(dhcp-config)#default-router 10.10.200.254<\/p>\n sw1(dhcp-config)#dns-server 10.10.20.1<\/p>\n sw1(dhcp-config)#exit<\/p>\n <\/p>\n <AC6005>sys<\/p>\n [AC6005]undo dhcp enable \u00a0\u00a0#\u5173\u95edDHCp<\/p>\n Warning: All DHCP functions will be disabled. Continue? [Y\/N]y \u00a0#\u70b9\u51fbY<\/p>\n [AC6005]<\/p>\n \u767b\u9646pfsense\uff0c\u8f6c\u5230\u7cfb\u7edf\u2014\u8def\u7531\u7ba1\u7406\u3002<\/p>\n \u70b9\u51fb\u6dfb\u52a0\u3002<\/p>\n \u63a5\u53e3\u9009\u62e9\u8fde\u63a5\u601d\u79d13560\u4ea4\u6362\u673a\u90a3\u4e2a\u53e3\uff0c\u7f51\u5173\u586b\u5199\u601d\u79d13560\u4ea4\u6362\u673a\u7684vlan5\u7684\u7f51\u5173\uff0c\u70b9\u51fb\u4fdd\u5b58\u3002<\/p>\n \u5355\u51fb\u9759\u6001\u8def\u7531\uff0c\u70b9\u51fb\u6dfb\u52a0\u3002<\/p>\n \u76ee\u6807\u7f51\u7edc\u662f\u4ea4\u6362\u673a\u5185\u90e8\u7684vlan\u7684\u7f51\u7edc\uff0c\u5305\u542b\u4e86vlan5,30,35,100,200\u7684\u7f51\u7edc\uff0c\u8fd9\u91cc\u586b\u5199\u7684\u662f8\u4f4d\u6c47\u603b\u7f51\u7edc\uff0c\u6216\u8005\u5199\u660e\u8be6\u7ec6\u8def\u7531\u90fd\u53ef\u4ee5\u3002<\/p>\n \u6dfb\u52a0\u4ee5\u4e0b\u6c47\u603b\u7f51\u7edc\uff0c\u5747\u90fd\u662f\u601d\u79d13560\u4ea4\u6362\u673a\u5185\u90e8\u7f51\u7edc\u3002<\/p>\n sw1#config<\/p>\n sw1(config)#ip routing \u00a0#\u5f00\u542f\u4e09\u5c42\u8def\u7531\u529f\u80fd<\/p>\n sw1(config)#ip route 0.0.0.0 0.0.0.0 192.168.5.1 \u00a0#\u6240\u6709\u8def\u7531\u6307\u5411\u51fa\u53e3192.168.5.1<\/p>\n <AC6005>sys<\/p>\n [AC6005]ip route-static 0.0.0.0 0.0.0.0 192.168.5.1 #\u6240\u6709\u8def\u7531\u6307\u5411\u51fa\u53e3192.168.5.1<\/p>\n \u8fde\u63a5ap\u7684\u4e1a\u52a1\u53e3\u5206\u914dvlan35\uff0cvlan35\u662f\u7ba1\u7406ap\u7684\u3002<\/p>\n [AC6005]interface GigabitEthernet 0\/0\/1 \u00a0\u00a0#\u8fdb\u51651\u63a5\u53e3\uff0cAP\u8fde\u63a5\u7684\u53e3<\/p>\n [AC6005-GigabitEthernet0\/0\/1]port link-type access \u00a0#\u66f4\u6539\u4e3aaccess<\/p>\n [AC6005-GigabitEthernet0\/0\/1]port default vlan 35 \u00a0#\u66f4\u6539\u4e3avlan35\uff0cap\u7ba1\u7406vlan<\/p>\n [AC6005-GigabitEthernet0\/0\/1]quit<\/p>\n \u4f7f\u7528\u6d4f\u89c8\u5668\u767b\u9646\u534e\u4e3aac6005\uff0c\u5bc6\u7801\u5c31\u662f\u4f60\u66f4\u6539\u7684\u5bc6\u7801\uff0c\u9ed8\u8ba4\u8d26\u6237\/\u5bc6\u7801:admin\/admin@huawei.com<\/p>\n \u9ed8\u8ba4\u5373\u53ef\u3002<\/p>\n \u9ed8\u8ba4\u5373\u53ef\u3002<\/p>\n \u9ed8\u8ba4\u5373\u53ef\u3002<\/p>\n \u70b9\u51fb\u4e0b\u4e00\u6b65\u3002<\/p>\n \u6dfb\u52a0\u6e90IP\uff0c\u70b9\u51fb\u4e0b\u4e00\u6b65<\/p>\n \u70b9\u51fb\u5b8c\u6210\u3002<\/p>\n<\/div><\/a><\/p>\n<\/div><\/a><\/p>\n<\/div><\/a><\/p>\n\u521d\u59cb\u5316\u8bbe\u5907<\/b><\/strong><\/h1>\n
Pfsense<\/b><\/strong>\u9632\u706b\u5899\u8bbe\u7f6e<\/b><\/strong><\/h2>\n
Pfsens\u9632\u706b\u5899\u8bbe\u7f6ewan\u53e3\u548clan\u53e3<\/h3>\n
\u521d\u59cb\u5316pfsense<\/b><\/strong><\/h4>\n
<\/div><\/a><\/p>\n<\/div><\/a><\/p>\n<\/div><\/a><\/p>\n<\/div><\/a><\/p>\n<\/div><\/a><\/p>\n<\/div><\/a><\/p>\n<\/div><\/a><\/p>\n<\/div><\/a><\/p>\n<\/div><\/a><\/p>\n<\/div><\/a><\/p>\n<\/div><\/a><\/p>\n<\/div><\/a><\/p>\n\u672c\u5730\u865a\u62df\u73af\u56deIP\u8bbe\u7f6e<\/b><\/strong><\/h4>\n
<\/div><\/a><\/p>\n<\/div><\/a><\/p>\n<\/div><\/a><\/p>\n<\/div><\/a><\/p>\n<\/div><\/a><\/p>\n\u601d\u79d13<\/b><\/strong>560<\/b><\/strong>\u4ea4\u6362\u673a\u914d\u7f6e<\/b><\/strong><\/h2>\n
\u521d\u59cb\u5316\u8bbe\u5907<\/h3>\n
\u4fee\u6539\u4ea4\u6362\u673a\u540d\u79f0<\/b><\/strong><\/h4>\n
\u534e\u4e3aac<\/b><\/strong>6005-8<\/b><\/strong>\u4ea4\u6362\u673a\u914d\u7f6e<\/b><\/strong><\/h2>\n
\u521d\u59cb\u5316\u8bbe\u5907<\/h3>\n
\u94fe\u8def\u805a\u5408\u914d\u7f6e<\/b><\/strong><\/h1>\n
pfsense\u9632\u706b\u5899\u94fe\u8def\u805a\u5408<\/b><\/strong><\/h2>\n
Lan\u53e3\uff08\u94fe\u8def\u805a\u5408\uff09<\/h3>\n
<\/div><\/a><\/p>\n<\/div><\/a><\/p>\n<\/div><\/a><\/p>\n<\/div><\/a><\/p>\n\u601d\u79d13<\/b><\/strong>560<\/b><\/strong>\u94fe\u8def\u805a\u5408<\/b><\/strong><\/h2>\n
\u521b\u5efa\u94fe\u8def\u805a\u5408<\/h3>\n
<\/div><\/a><\/p>\n\u534e\u4e3aac<\/b><\/strong>6005-8<\/b><\/strong>\u94fe\u8def\u805a\u5408<\/b><\/strong><\/h2>\n
\u521b\u5efa\u94fe\u8def\u805a\u5408<\/h3>\n
\u914d\u7f6evlan<\/b><\/strong><\/h1>\n
\u601d\u79d13<\/b><\/strong>560<\/b><\/strong>\u4ea4\u6362\u673a<\/b><\/strong>\u914d\u7f6evlan<\/b><\/strong><\/h2>\n
\u534e\u4e3aac<\/b><\/strong>6005<\/b><\/strong>\u914d\u7f6evlan<\/b><\/strong><\/h2>\n
\u914d\u7f6eDHCP<\/b><\/strong><\/h1>\n
\u601d\u79d13<\/b><\/strong>560<\/b><\/strong>\u914d\u7f6eDHCP<\/b><\/strong><\/h2>\n
\u534e\u4e3aac<\/b><\/strong>6005<\/b><\/strong>\u914d\u7f6eDHCP<\/b><\/strong><\/h2>\n
\u914d\u7f6e\u9759\u6001\u8def\u7531<\/b><\/strong><\/h1>\n
P<\/b><\/strong>fsense\u914d\u7f6e\u9759\u6001\u8def\u7531<\/b><\/strong><\/h2>\n
<\/div><\/a><\/p>\n<\/div><\/a><\/p>\n<\/div><\/a><\/p>\n<\/div><\/a><\/p>\n<\/div><\/a><\/p>\n<\/div><\/a><\/p>\n\u601d\u79d13<\/b><\/strong>560<\/b><\/strong>\u4ea4\u6362\u673a\u914d\u7f6e\u9759\u6001\u8def\u7531<\/b><\/strong><\/h2>\n
\u534e\u4e3aac<\/b><\/strong>6005<\/b><\/strong>\u914d\u7f6e\u9759\u6001\u8def\u7531<\/b><\/strong><\/h2>\n
W<\/b><\/strong>lan\u65e0\u7ebf\u8bbe\u7f6e<\/b><\/strong><\/h1>\n
\u534e\u4e3aac<\/b><\/strong>6005<\/b><\/strong>\u914d\u7f6e<\/b><\/strong><\/h2>\n
A<\/b><\/strong>c<\/b><\/strong>6005<\/b><\/strong>\u00a0\u8bbe\u7f6evlan<\/b><\/strong><\/h2>\n
AC<\/b><\/strong>6005<\/b><\/strong>\u914d\u7f6eAC\u5e76\u6dfb\u52a0\u6e90IP<\/b><\/strong><\/h2>\n
<\/div><\/a><\/p>\n<\/div><\/a><\/p>\n<\/div><\/a><\/p>\n<\/div><\/a><\/p>\n<\/div><\/a><\/p>\n<\/div><\/a><\/p>\n
![](\"https:\/\/pfchina.org\/wp-content\/uploads\/2023\/01\/wps_doc_41.png\"){kind=link}