网络拓扑图
ROS的配置
第一步：定义Ros的WAN口及LAN口
将ether1定义为WAN口，连接光猫
ether2定义为LAN口，连接三层交换机
第二步 ：在Ros上添加PPPOE Client，
在Interface接口视图下，选择" + " 添加一个PPPOE Client
在General窗口，修改name及Interface两项
name ：PPPOE的名称（可自定义）
Interface ：选择WAN口（WAN口）
在Dial Out窗口下，输入user 及 password
User：PPPOE账号
Password：PPPOE密码
默认勾选User peer DNS（DNS服务器） 及 Add Default Route（默认路由）），勾选后，无需手动添加DNS及静态路由，即可访问Internet。
在IP视图的Addresses窗口，单击 " + " 添加 ether2-LAN的接口地址：192.168.10.1/24
第三步： 伪装（NAT）
在IP接口视图下，打开Firewall窗口的NAT，选择” + “ 添加
分别需要为每个网段都设置一条NAT
为192.168.200.0/24网段添加一条伪装
masquerade 伪装
第四步 ： 添加回程路由
在IP-Routes视图下，
DST address(目标网段)：192.168.100.0/24
Gatway（LAN口及LAN口IP），相当于下一跳地址。：LAN
需要分别为每个网段添加回程路由（否则流量无法到达该VLAN，会导致出去的包回不来哦）
H3C三层交换机配置
交换机配置如下： # version5.20,Release2222P10 # sysnameH3C # irfmac-addresspersistenttimer irfauto-updateenable undoirflink-delay # domaindefaultenablesystem # webidle-timeout30 # password-recoveryenable # vlan1 # vlan10 # vlan100 # vlan200 # domainsystem access-limitdisable stateactive idle-cutdisable self-service-urldisable # dhcpserverip-pool10 network192.168.10.0mask255.255.255.0 gateway-list192.168.10.1 # user-groupsystem group-attributeallow-guest # local-userabc passwordcipher$c$3$3O3TRePwLP0yAqW37DGX1h4rfkdIGQ== authorization-attributelevel3 service-typeftp local-useradmin passwordcipher$c$3$Zn/sUTHSf0+ria4SnwGKiPjLfdwXUt7C authorization-attributelevel3 service-typeweb local-userroot passwordcipher$c$3$4eOQFNifn3uQrpYkYQovG6LThLqFT2Rcc0VD service-typetelnet service-typeweb # vlan-groupn1 # interfaceNULL0 # interfaceVlan-interface1 ipaddress172.16.1.1255.255.255.0 undodhcpselectserverglobal-pool # interfaceVlan-interface10 ipaddress192.168.10.2255.255.255.0 # interfaceVlan-interface100 ipaddress192.168.100.1255.255.255.0 # interfaceVlan-interface200 ipaddress192.168.200.1255.255.255.0 # interfaceGigabitEthernet1/0/1 # interfaceGigabitEthernet1/0/2 # interfaceGigabitEthernet1/0/3 # interfaceGigabitEthernet1/0/4 # interfaceGigabitEthernet1/0/5 # interfaceGigabitEthernet1/0/6 # interfaceGigabitEthernet1/0/7 # interfaceGigabitEthernet1/0/8 # interfaceGigabitEthernet1/0/9 # interfaceGigabitEthernet1/0/10 # interfaceGigabitEthernet1/0/11 portaccessvlan200 # interfaceGigabitEthernet1/0/12 portaccessvlan100 # interfaceGigabitEthernet1/0/13 # interfaceGigabitEthernet1/0/14 # interfaceGigabitEthernet1/0/15 # interfaceGigabitEthernet1/0/16 # interfaceGigabitEthernet1/0/17 # interfaceGigabitEthernet1/0/18 # interfaceGigabitEthernet1/0/19 # interfaceGigabitEthernet1/0/20 portaccessvlan10 # interfaceGigabitEthernet1/0/21 # interfaceGigabitEthernet1/0/22 # interfaceGigabitEthernet1/0/23 # interfaceGigabitEthernet1/0/24 portlink-typetrunk porttrunkpermitvlanall # interfaceGigabitEthernet1/0/25 shutdown # interfaceGigabitEthernet1/0/26 shutdown # interfaceGigabitEthernet1/0/27 shutdown # interfaceGigabitEthernet1/0/28 shutdown # rip1 network192.168.101.0 network192.168.102.0 network192.168.103.0 network10.0.0.0 # iproute-static0.0.0.00.0.0.010.0.8.1 iproute-static0.0.0.00.0.0.0192.168.10.1 # dhcpenable # ftpserverenable # loadxml-configuration # user-interfaceaux0 authentication-modepassword setauthenticationpasswordcipher$c$3$KcMReVoIeZfuRWS6GZQmpte0jZycfXExsQ== user-interfacevty015 # return
最终，测试每个网段互通的问题，全部互通。
审核编辑：刘清