单臂路由LSW1配置[LSW1]vlan batch 100 200[LSW1]interface GigabitEthernet 0/0/1[LSW1-GigabitEthernet0/0/1]port link-type access[LSW1-GigabitEthernet0/0/1]port default vlan 100[LSW1-GigabitEthernet0/0/2]port link-type access[LSW1-GigabitEthernet0/0/2]port default vlan 200LSW2配置[LSW2]vlan batch 100 200LSW2]interface GigabitEthernet 0/0/1[LSW2-GigabitEthernet0/0/1]port link-type access[LSW2-GigabitEthernet0/0/1]port default vlan 100[LSW2]interface GigabitEthernet 0/0/2[LSW2-GigabitEthernet0/0/2]port link-type access[LSW2-GigabitEthernet0/0/2]port default vlan 200配置trunk[LSW1]interface GigabitEthernet 0/0/3[LSW1-GigabitEthernet0/0/3]port link-type trunk[LSW1-GigabitEthernet0/0/3]port trunk allow-pass vlan 100 200[LSW2]interface GigabitEthernet 0/0/3[LSW2-GigabitEthernet0/0/3]port trunk allow-pass vlan 100 200配置子接口[AR1]interface GigabitEthernet 0/0/0.100[AR1-GigabitEthernet0/0/0.100]dot1q termination vid 100[AR1-GigabitEthernet0/0/0.100]ip address 192.168.100.1 24[AR1-GigabitEthernet0/0/0.100]arp broadcast enable[AR1]interface GigabitEthernet 0/0/0.200[AR1-GigabitEthernet0/0/0.200]dot1q termination vid 200[AR1-GigabitEthernet0/0/0.200]ip address 192.169.200.1 24[AR1-GigabitEthernet0/0/0.200]arp broadcast enable用DHCP# 配置VLAN100地址池ip pool 100gateway-list 192.168.100.1network 192.168.100.0 mask 255.255.255.0excluded-ip-address 192.168.100.1 # 排除网关地址dns-list 8.8.8.8 114.114.114.114lease day 3# 配置VLAN200地址池ip pool 200gateway-list 192.168.200.1network 192.168.200.0 mask 255.255.255.0excluded-ip-address 192.168.200.1dns-list 8.8.8.8 114.114.114.114lease day 3# 在子接口上应用DHCPinterface GigabitEthernet0/0/0.100dhcp select globalinterface GigabitEthernet0/0/0.200dhcp select global增加安全性配置Telent登录认证