Two China three layer 2 switches, a switch network segment 10.1 7.0.x.x, a switch network segment 172.168 7.0.x.x, how to through the third layer 3 switches configuration of these two different communication devices in a local area network (LAN), require 10 172 network segment can access a network segment, 172 segments cannot access 10 segment, strives for the great god taught specific configuration process

CodePudding user response:

Will be one of them replace layer 3 switches and open route or a router, realize communication
Do the ACL implementation strategy control
On the second floor can't direct communication between different vlans

CodePudding user response:

The

reference 1/f, Chen - Xin reply:

to one of them replace layer 3 switches and open route or a router, realize communication
Do the ACL implementation strategy control
Layer cannot direct communication between different vlans

open route? What is the specific configuration, I need on the layer 3 switches divide vlan

CodePudding user response:

Need to delimit a VLAN, open the layer 3 switching routing functions

CodePudding user response:

To use two different network router

CodePudding user response:

In the third layer 3 switches on row three vlan, a management vlan, two common vlan,
Management vlan can is the default vlan1, configuration is as follows:
Vlan 1
IP address 192.168.1.1 255.255.255.0
Ordinary vlan
Vlan 20
IP address 172.168.0.1 255.255.0.0
Vlan 30
IP address 10.1.0.1 255.255.0.0
Made trunk and layer 3 switches two mouth mouth, each a layer 2 switch port do the trunk, and then wiring the switches on the second floor of the trunk opening to three layers of trunk,
After can be marked on the arbitrary two switches vlan communication,

There is another way,
Is make the two mouth of layer 3 switches into the route, each set of corresponding gateway address, and then two mouth respectively to the corresponding layer 2 switches, is ok,

CodePudding user response:

Best to introduce specific network topology and network equipment used in specific models

CodePudding user response:

Require 10 segment can access 172 segments, 172 segment cannot access network segment 10, three layer must be enabled routing table function, single set VLAN and trunk is just a set access, you need to access strategy by routing table Settings