一文学会：企业内网架构+链路聚合+静态路由+动态路由等核心技术

千兆不够用？一根网线跑万兆的魔法！

步骤1：创建Eth-Trunk组

sysinterface eth-trunk 1  # 创建聚合组1

步骤2：绑定物理接口

interface gigabitethernet 0/0/1 eth-trunk 1      # 将接口加入聚合组interface gigabitethernet 0/0/2eth-trunk 1

步骤3：配置Trunk口属性

interface Eth-Trunk1description uT:HJ-SW-1-Eth-Trunk-2port link-type trunkundo port trunk allow-pass vlan 1port trunk allow-pass vlan 100 200

⚠️ 关键细节：
两端设备LACP模式必须一致（active/active或active/passive）
聚合组成员速率/双工模式需完全相同

方案1：静态路由+聚合（适合小型网络）

# 路由器配置ip route-static x.x.x.x x.x.x.x 100.1.1.1

优势：配置简单，资源消耗低
局限：链路故障需手动切换

方案2：OSPF动态路由+聚合（中大型网络首选）

# 核心交换机routerid2.2.2.2ospf 1area 0.0.0.0 network 12.1.1.0 0.0.0.255 # 宣告聚合链路网段

智能效果：

• 自动检测聚合链路状态

• 多条路径负载均衡（ECMP）

• 毫秒级故障收敛

某电子厂改造前后数据

以上图拓扑为例说明：

sysname Core-SW#undo info-centerenable#vlan batch 12 23 to 24#interface Vlanif12ip address 12.1.1.2 255.255.255.252ospfenable1 area 0.0.0.0#interface Vlanif23ip address 23.1.1.1 255.255.255.252#interface Vlanif24ip address 24.1.1.1 255.255.255.252ospfenable1 area 0.0.0.0#interface Eth-Trunk1description uT:R1-Eth-Trunk-1port link-type accessport default vlan 12#interface Eth-Trunk2description dT:HJ-SW-1-Eth-Trunk-1port link-type access          port default vlan 23#interface Eth-Trunk3description dT:HJ-SW-2-Eth-Trunk-1port link-type accessport default vlan 24#interface GigabitEthernet0/0/1description uT:R1-Gi0/0/0eth-trunk 1#interface GigabitEthernet0/0/2description uT:R1-Gi0/0/1eth-trunk 1#interface GigabitEthernet0/0/3description dT:HJ-SW-1-Gi0/0/1eth-trunk 2#interface GigabitEthernet0/0/4description dT:HJ-SW-1-Gi0/0/2eth-trunk 2#interface GigabitEthernet0/0/5      description dT:HJ-SW-2-Gi0/0/1eth-trunk 3#interface GigabitEthernet0/0/6description dT:HJ-SW-2-Gi0/0/2eth-trunk 3#ospf 1 router-id 2.2.2.2import-route staticarea 0.0.0.0               network 12.1.1.0 0.0.0.255#ip route-static 172.168.0.0 255.255.0.0 23.1.1.2#

sysname HJ_SW1#undo info-centerenable#vlan batch 23 100 200#acl number 3001rule 5 deny ipsource172.168.2.250 0 destination 172.168.1.250 0acl number 3002#仅允许192.168.1.250访问172.168.1.250，其余默认拒绝rule 5 permit ipsource192.168.1.250 0 destination 172.168.1.250 0rule 10 deny ip#                    interface Vlanif23ip address 23.1.1.2 255.255.255.252#interface Vlanif100ip address 172.168.1.254 255.255.255.0dhcpselectinterface#vlan100开启dhcp服务#interface Vlanif200ip address 172.168.2.254 255.255.255.0#interface Eth-Trunk1description uT:Core-SW-Eth-Trunk-2port link-type accessport default vlan 23#interface Eth-Trunk2description dT:JR-SW-Eth-Trunk-1port link-type trunkundo port trunk allow-pass vlan 1port trunk allow-pass vlan 100 200#interface GigabitEthernet0/0/1description uT:Core-SW-Gi0/0/3eth-trunk 1#interface GigabitEthernet0/0/2description uT:Core-SW-Gi0/0/4eth-trunk 1#interface GigabitEthernet0/0/3description dT:JR-SW-Gi0/0/1eth-trunk 2#                    interface GigabitEthernet0/0/4description dT:JR-SW-Gi0/0/2eth-trunk 2#ip route-static 192.168.0.0 255.255.0.0 23.1.1.1#                    traffic-filter vlan 200 inbound acl 3001#实现vlan200的访问控制策略traffic-filter vlan 100 inbound acl 3002#实现vlan100的访问控制策略#

sysname HJ_SW2#undo info-centerenable#vlan batch 24 300 400#interface Vlanif24ip address 24.1.1.2 255.255.255.252ospfenable1 area 0.0.0.0#interface Vlanif300ip address 192.168.1.254 255.255.255.0#interface Vlanif400ip address 192.168.2.254 255.255.255.0#interface MEth0/0/1#interface Eth-Trunk1description uT:Core-SW-Eth-Trunk-3port link-type accessport default vlan 24#interface Eth-Trunk2description dT:JR-SW-2-Eth-Trunk-1port link-type trunkundo port trunk allow-pass vlan 1    port trunk allow-pass vlan 300 400#interface GigabitEthernet0/0/1description uT:Core-SW-gi0/0/5eth-trunk 1#interface GigabitEthernet0/0/2description uT:Core-SW-Gi0/0/6eth-trunk 1#interface GigabitEthernet0/0/3description dT:JR-SW-2-Gi0/0/1eth-trunk 2#interface GigabitEthernet0/0/4description dT:JR-SW-2-Gi0/0/2eth-trunk 2#ospf 1area 0.0.0.0 network 192.168.0.0 0.0.255.255#

sysname JR_SW1#undo info-centerenable#vlan batch 100 200#interface Eth-Trunk1description uT:HJ-SW-1-Eth-Trunk-2port link-type trunkundo port trunk allow-pass vlan 1port trunk allow-pass vlan 100 200#interface GigabitEthernet0/0/1eth-trunk 1#interface GigabitEthernet0/0/2eth-trunk 1#interface GigabitEthernet0/0/3port link-type accessport default vlan 100#interface GigabitEthernet0/0/4port link-type accessport default vlan 200          #