求各位大佬看下华为3层交换机配置问题

z8996521

!Software Version V200R010C00SPC600
#
sysname legend
#
vlan batch 10 20 30 100
#
authentication-profile name default_authen_profile
authentication-profile name dot1x_authen_profile
authentication-profile name mac_authen_profile
authentication-profile name portal_authen_profile
authentication-profile name dot1xmac_authen_profile
authentication-profile name multi_authen_profile
#
telnet server enable
#
dhcp enable
#
radius-server template default
#
pki realm default
certificate-check none
#
free-rule-template name default_free_rule
#
portal-access-profile name portal_access_profile
#
ip pool 10
gateway-list 10.10.10.1
network 10.10.10.0 mask 255.255.255.0
dns-list 61.139.2.69 8.8.8.8
#
ip pool 20
gateway-list 10.10.20.1
network 10.10.20.0 mask 255.255.255.0
dns-list 61.139.2.69 8.8.8.8
#
ip pool 30
gateway-list 10.10.30.1
network 10.10.30.0 mask 255.255.255.0
dns-list 61.139.2.69 8.8.8.8
#
aaa
authentication-scheme default
authentication-scheme radius
  authentication-mode radius
authorization-scheme default
accounting-scheme default
local-aaa-user password policy administrator
  password expire 0                       
domain default
  authentication-scheme radius
  radius-server default
domain default_admin
  authentication-scheme default
local-user root password irreversible-cipher $1a$%{`E.G!];7$9t'>P<5Gd-UWs'~$tBkBvmZ97\RXWVRM_2M1]&o!$
local-user root privilege level 15
local-user root service-type telnet
local-user admin password irreversible-cipher $1a$<f1k$ThXc)$4nFW$t,c^Xx7Ta5kt8j~#Q&q(o(18Vhg~05/I4e5$
local-user admin privilege level 15
local-user admin service-type terminal http
#
interface Vlanif1
#
interface Vlanif10
ip address 10.10.10.1 255.255.255.0
dhcp select global
#
interface Vlanif20
ip address 10.10.20.1 255.255.255.0
dhcp select global
#
interface Vlanif30
ip address 10.10.30.1 255.255.255.0      
dhcp select global
#
interface Vlanif100
ip address 10.10.100.1 255.255.255.0
#
interface MEth0/0/1
#
interface GigabitEthernet0/0/1
port link-type access
port default vlan 10
#
interface GigabitEthernet0/0/2
port link-type access
port default vlan 10
#
interface GigabitEthernet0/0/3
port link-type access
port default vlan 10
#
interface GigabitEthernet0/0/4
port link-type access
port default vlan 10
#
interface GigabitEthernet0/0/5            
port link-type access
port default vlan 10
#
interface GigabitEthernet0/0/6
port link-type access
port default vlan 10
#
interface GigabitEthernet0/0/7
port link-type access
port default vlan 10
#
interface GigabitEthernet0/0/8
port link-type access
port default vlan 10
#
interface GigabitEthernet0/0/9
port link-type access
port default vlan 10
#
interface GigabitEthernet0/0/10
port link-type access
port default vlan 10
#
interface GigabitEthernet0/0/11           
port link-type access
port default vlan 20
#
interface GigabitEthernet0/0/12
port link-type access
port default vlan 20
#
interface GigabitEthernet0/0/13
port link-type access
port default vlan 20
#
interface GigabitEthernet0/0/14
port link-type access
port default vlan 20
#
interface GigabitEthernet0/0/15
port link-type access
port default vlan 20
#
interface GigabitEthernet0/0/16
port link-type access
port default vlan 20
#
interface GigabitEthernet0/0/17           
port link-type access
port default vlan 20
#
interface GigabitEthernet0/0/18
port link-type access
port default vlan 20
#
interface GigabitEthernet0/0/19
port link-type access
port default vlan 20
#
interface GigabitEthernet0/0/20
port link-type access
port default vlan 20
#
interface GigabitEthernet0/0/21
port link-type access
port default vlan 30
#
interface GigabitEthernet0/0/22
port link-type access
port default vlan 30
#
interface GigabitEthernet0/0/23           
port link-type access
port default vlan 30
#
interface GigabitEthernet0/0/24
port link-type access
port default vlan 30
#
interface GigabitEthernet0/0/25
port link-type access
port default vlan 30
#
interface GigabitEthernet0/0/26
port link-type access
port default vlan 30
#
interface GigabitEthernet0/0/27
port link-type access
port default vlan 30
#
interface GigabitEthernet0/0/28
port link-type access
port default vlan 30
#
interface GigabitEthernet0/0/29           
port link-type access
port default vlan 30
#
interface GigabitEthernet0/0/30
port link-type access
port default vlan 30
#
interface GigabitEthernet0/0/31
#
interface GigabitEthernet0/0/32
#
interface GigabitEthernet0/0/33
#
interface GigabitEthernet0/0/34
#
interface GigabitEthernet0/0/35
#
interface GigabitEthernet0/0/36
#
interface GigabitEthernet0/0/37
#
interface GigabitEthernet0/0/38
#
interface GigabitEthernet0/0/39           
#
interface GigabitEthernet0/0/40
#
interface GigabitEthernet0/0/41
#
interface GigabitEthernet0/0/42
#
interface GigabitEthernet0/0/43
#
interface GigabitEthernet0/0/44
#
interface GigabitEthernet0/0/45
#
interface GigabitEthernet0/0/46
#
interface GigabitEthernet0/0/47
#
interface GigabitEthernet0/0/48
port link-type access
port default vlan 100
#
interface GigabitEthernet0/0/49
#
interface GigabitEthernet0/0/50           
#
interface GigabitEthernet0/0/51
#
interface GigabitEthernet0/0/52
#
interface NULL0
#
ip route-static 0.0.0.0 0.0.0.0 10.10.100.2
#
user-interface con 0
authentication-mode aaa
user-interface vty 0 4
authentication-mode aaa
user privilege level 15
protocol inbound all
user-interface vty 16 20
#
port-group 1
group-member GigabitEthernet0/0/1
group-member GigabitEthernet0/0/2
group-member GigabitEthernet0/0/3
group-member GigabitEthernet0/0/4
group-member GigabitEthernet0/0/5
group-member GigabitEthernet0/0/6        
group-member GigabitEthernet0/0/7
group-member GigabitEthernet0/0/8
group-member GigabitEthernet0/0/9
group-member GigabitEthernet0/0/10
#
port-group 2
group-member GigabitEthernet0/0/11
group-member GigabitEthernet0/0/12
group-member GigabitEthernet0/0/13
group-member GigabitEthernet0/0/14
group-member GigabitEthernet0/0/15
group-member GigabitEthernet0/0/16
group-member GigabitEthernet0/0/17
group-member GigabitEthernet0/0/18
group-member GigabitEthernet0/0/19
group-member GigabitEthernet0/0/20
#
port-group 3
group-member GigabitEthernet0/0/21
group-member GigabitEthernet0/0/22
group-member GigabitEthernet0/0/23
group-member GigabitEthernet0/0/24
group-member GigabitEthernet0/0/25
group-member GigabitEthernet0/0/26      
group-member GigabitEthernet0/0/27
group-member GigabitEthernet0/0/28
group-member GigabitEthernet0/0/29
group-member GigabitEthernet0/0/30
#
dot1x-access-profile name dot1x_access_profile
#
mac-access-profile name mac_access_profile
#





为什么vlan间不能互访，而且不能上网？

Twofish

你应该port link-type trunk 允许多个Vlan 通过才行

rghen

jz_ta

vlan间互访应该可以实现的，共享上网实现不了的，三层交换机要有NAT模块才能实现上网的

lenovo2106

interface GigabitEthernet0/0/48
port link-type access
port default vlan 100



是不是用这个端口链接的路由器？
如果是的话你试一下
interface g0/0/48
port link-type trunk
port trunk allow-pass vlan all
或者试下
interface g0/0/48
port link-type hybrid
port hybrid pvid 100
port hybrid tagged vlan 100
port hybrid untagged vlan 10 20 30

还有路由器还需要配置回程的路由 \
ip route-static 10.10.0.0    255.255.0.0    10.10.100.1

liuhuan3113

thank you very very much

myp197727

谢谢！谢谢！谢谢！谢谢！谢谢！

yang604240221

vlan100,连的是路由器吗，如果是路由器，还得写回指路由。

Ethanfeng