加了三四天班.终于把三层交换机搞定了.之前一直碰的是傻瓜式的.(华为的技术支持态度不太好),

配置环境与配置文件如下:

环境, 双wan口路由接入ADSL ,下接华为S3928p-SI 做核心交换机.交换机下接普通PC 和 傻瓜式的TP-Link交换机,  现用可核心交换机e 1/0/24口(ip:192.168.10.80)直接连接路由器.
划分5个vlan 并隔离 e 1/0/11 to e 1/0/14端口.

<Quidway>dis cur
#
 sysname Quidway
#
 dhcp-server 1 ip  192.168.1.2
#
radius scheme system
#
domain system
#
vlan 1
#
vlan 2
 description comman
#
vlan 3
 description finance
#
vlan 4
 description ap
#
vlan 5
 description server
#
vlan 6
 description route
#
interface Vlan-interface2
 ip address 192.168.1.1 255.255.255.0
#
interface Vlan-interface3
 ip address 192.168.3.1 255.255.255.0
#
interface Vlan-interface4
 ip address 192.168.6.1 255.255.255.0
 dhcp-server 1
#
interface Vlan-interface5
 ip address 192.168.100.1 255.255.255.0
#
interface Vlan-interface6
 ip address 192.168.10.80 255.255.255.0
#
interface Aux1/0/0
#
interface Ethernet1/0/1
 port access vlan 2
 #
interface Ethernet1/0/2
 port access vlan 2
#
interface Ethernet1/0/3
 port access vlan 2
#
interface Ethernet1/0/4
 port access vlan 2
#
interface Ethernet1/0/5
 port access vlan 2
#
interface Ethernet1/0/6
 port access vlan 2
#
interface Ethernet1/0/7
 port access vlan 2
#
interface Ethernet1/0/8
 port access vlan 2
#
interface Ethernet1/0/9
 port access vlan 2
#
interface Ethernet1/0/10
 port access vlan 2
#
interface Ethernet1/0/11
 port access vlan 3
 port isolate
#
interface Ethernet1/0/12
 port access vlan 3
 port isolate
#
interface Ethernet1/0/13
 port access vlan 4
 port isolate
#
interface Ethernet1/0/14
 port access vlan 4
 port isolate
#
interface Ethernet1/0/15
 port access vlan 5
#
interface Ethernet1/0/16
 port access vlan 5
#
interface Ethernet1/0/17
 port access vlan 5
#
interface Ethernet1/0/18
 port access vlan 5
#
interface Ethernet1/0/19
 port access vlan 5
#
interface Ethernet1/0/20
 port access vlan 5
#
interface Ethernet1/0/21
#
interface Ethernet1/0/22
#
interface Ethernet1/0/23
#
interface Ethernet1/0/24
 port access vlan 6
#
interface GigabitEthernet1/1/1
#
interface GigabitEthernet1/1/2
#
interface GigabitEthernet1/1/3
#
interface GigabitEthernet1/1/4
#
 undo irf-fabric authentication-mode
#
interface NULL0
#
 voice vlan mac-address 0001-e300-0000 mask ffff-ff00-0000
#
 ip route-static 0.0.0.0 0.0.0.0 192.168.10.1 preference 60
#
user-interface aux 0 7
user-interface vty 0 4
#
return

 

另需要路由器上添加回路,对应该交换机的路由规则 .

192.168.0.0 255.255.0.0 192.168.10.80

 

侠诺路由器支持多子网段,还需添加 192.168.0.0 255.255.0.0 的子网段.