企业网必备三件套：链路聚合+VLAN划分+跨VLAN互通，H3C保姆级配置手册
兄弟们，今天不讲虚的，直接上一个企业网最常见的组网需求：四台PC，两个业务网段，既要链路冗余跑满带宽，又要不同VLAN之间能互通。
一、先看拓扑，搞懂我们要做什么
2台交换机之间做链路聚合，捆绑成一个逻辑口，每台交换机划分两个业务网段（vlan10和vlan20）。最终目标是：相同VLAN能互访，不同VLAN间也能互访，而且聚合链路断一条线业务不中断。
二、第一步：配置链路聚合（划重点）
把2台交换机之间的链路聚合做成动态LACP聚合，推荐用这个模式：
SW1配置如下：
<H3C>system-view
System View: return to User View with Ctrl+Z.
[H3C]sysname SW1
[SW1]interface Bridge-Aggregation 1 //创建链路聚合组
[SW1-Bridge-Aggregation1]link-aggregation mode dynamic //配置聚合组做成动态模式
[SW1-Bridge-Aggregation1]quit
[SW1]interface range g1/0/3 g1/0/4 //接口批量配置
[SW1-if-range]port link-aggregation group 1 //将接口添加到聚合组中
[SW1-if-range]quit
SW2配置如下：
<H3C>system-view
System View: return to User View with Ctrl+Z.
[H3C]sysname SW2
[SW2]interface Bridge-Aggregation 1 //创建链路聚合组
[SW2-Bridge-Aggregation1]link-aggregation mode dynamic //配置聚合组做成动态模式
[SW2-Bridge-Aggregation1]quit
[SW2]interface range g1/0/1 g1/0/2 //接口批量配置
[SW2-if-range]port link-agg
[SW2-if-range]port link-aggregation group 1 //将接口添加到聚合组中
[SW2-if-range]quit
验证聚合口是否创建成功
[SW2]display link-aggregation verbose
Loadsharing Type: Shar -- Loadsharing, NonS -- Non-Loadsharing
Port Status: S -- Selected, U -- Unselected, I -- Individual
Port: A -- Auto port, M -- Management port, R -- Reference port
Flags: A -- LACP_Activity, B -- LACP_Timeout, C -- Aggregation,
D -- Synchronization, E -- Collecting, F -- Distributing,
G -- Defaulted, H -- Expired
Aggregate Interface: Bridge-Aggregation1
Creation Mode: Manual
Aggregation Mode: Dynamic
Loadsharing Type: Shar
Management VLANs: None
System ID: 0x8000, 3cab-2908-0200
Local:
Port Status Priority Index Oper-Key Flag
GE1/0/1 S 32768 1 1 {ACDEF}
GE1/0/2 S 32768 2 1 {ACDEF}
Remote:
Actor Priority Index Oper-Key SystemID Flag
GE1/0/1(R) 32768 1 1 0x8000, 3cab-1f16-0100 {ACDEF}
GE1/0/2 32768 2 1 0x8000, 3cab-1f16-0100 {ACDEF}
接口状态均为S状态，说明聚合组接口才算协商成功。到这里相同vlan可以通信了
第三步：VLAN间互通（三层虚接口配置）
想让VLAN 10和VLAN 20互相ping通？
关键就在这一步：引入vlan-interface概念，vlan-interface接口IP就是网关地址
SW1创建vlan并划分端口
[SW1] vlan 10 20 //创建vlan 10 和20
#配置聚合组接口类型为trunk类型，并且让vlan10和20通行
[SW1]interface Bridge-Aggregation 1
[SW1-Bridge-Aggregation1]port link-type trunk
Configuring GigabitEthernet1/0/3 done.
Configuring GigabitEthernet1/0/4 done.
[SW1-Bridge-Aggregation1]port trunk permit vlan 10 20
Configuring GigabitEthernet1/0/3 done.
Configuring GigabitEthernet1/0/4 done.
[SW1-Bridge-Aggregation1]quit
#配置连接PC3和PC4的接口
[SW1]interface g1/0/1 //连接PC3接口g1/0/1
[SW1-GigabitEthernet1/0/1]port link-type access //接口类型为access
[SW1-GigabitEthernet1/0/1]port access vlan 10 //允许vlan10 通行
[SW1-GigabitEthernet1/0/1]quit
[SW1]interface g1/0/2 //连接PC4接口g1/0/2
[SW1-GigabitEthernet1/0/2]port link-type access //接口类型为access
[SW1-GigabitEthernet1/0/2]port access vlan 20 //允许vlan20通行
[SW1-GigabitEthernet1/0/2]quit
SW2创建vlan并划分端口
[SW2]vlan 10 20 //创建vlan 10 和20
#配置聚合组接口类型为trunk类型，并且让vlan10和20通行
[SW2]interface Bridge-Aggregation 1
[SW2-Bridge-Aggregation1]port link-type trunk
Configuring GigabitEthernet1/0/1 done.
Configuring GigabitEthernet1/0/2 done.
[SW2-Bridge-Aggregation1]port trunk permit vlan 10 20
Configuring GigabitEthernet1/0/1 done.
Configuring GigabitEthernet1/0/2 done.
[SW2-Bridge-Aggregation1]quit
#配置连接PC5和PC6的接口
[SW2]interface g1/0/3 //连接PC5接口g1/0/1
[SW2-GigabitEthernet1/0/3]port link-type access //接口类型为access
[SW2-GigabitEthernet1/0/3]port access vlan 10 //允许vlan10通行
[SW2-GigabitEthernet1/0/3]quit
[SW2]interface g1/0/4 //连接PC6接口g1/0/1
[SW2-GigabitEthernet1/0/4]port link-type access //接口类型为access
[SW2-GigabitEthernet1/0/4]port access vlan 20 //允许vlan20通行
[SW2-GigabitEthernet1/0/4]quit
注意：交换机接口类型分为trunk、access、hybrid等三个类型，trunk允许一个或多个vlan通行，access只允许一个vlan通行，hybrid为混杂接口（不常用）到这里不同vlan之间也能互访了
最后总结一句： 链路聚合解决的是带宽和冗余，VLAN解决的是广播域隔离，VLANIF解决的是跨网段通信。这三件套配齐了，才叫一个完整的企业网络方案。
