目录
[■DHCP NAT BFD 策略路由](#■DHCP NAT BFD 策略路由)
■DHCP NAT BFD 策略路由
▲掩码与反掩码总结
- 使用掩码的场景：IP地址强相关
场景一：IP地址配置
ip address 192.168.1.1 255.255.255.0 或ip address 192.168.1.1 24
场景二：DHCP配置
network 192.168.1.0 mask 255.255.255.0 或network 192.168.1.0 mask 24
- 使用反掩码的场景
场景一： ACL
rule 10 permit source 192.168.1.1 0 或rule 10 permit source 192.168.1.1 0.0.0.0
rule 10 permit source 192.168.1.0 0.0.0.255
场景二：OSPF路由宣告
network 192.168.1.0 0.0.0.255 //宣告192.168.1.0网段
- ++++RIP++++ 路由宣告不需要掩码或反掩码，宣告主类网络（ABC类主类IP地址掩码分别为/8/16/24）：
network 10.0.0.0
network 172.16.0.0
network 192.168.1.0
▲综合实验
- 接入 交换机ACSW配置
<Huawei>system-view
Huawei\]****sysname**** Acsw
\[Acsw\]****vlan batch**** 10 20
\[Acsw\]****interface**** GigabitEthernet 0/0/1
\[Acsw-GigabitEthernet0/0/1\]****port link-type**** ****access****
\[Acsw-GigabitEthernet0/0/1\]****port default vlan 10****
\[Acsw-GigabitEthernet0/0/1\]****quit****
\[Acsw\]****interface**** GigabitEthernet 0/0/2
\[Acsw-GigabitEthernet0/0/2\]port link-type access
\[Acsw-GigabitEthernet0/0/2\]port default vlan 20
\[Acsw-GigabitEthernet0/0/2\]quit
\[Acsw\]****interface**** GigabitEthernet 0/0/3
\[Acsw-GigabitEthernet0/0/3\]port link-type ****trunk****
\[Acsw-GigabitEthernet0/0/3\]****port trunk allow-pass vlan all****
* ****核心交换机的配置****
下行接口以及网关
\[Coresw\]****vlan batch**** 10 20 30
\[Coresw\]****interface**** Vlanif 10
\[Coresw-Vlanif10\]****ip address**** 192.168.10.254 24
\[Coresw-Vlanif10\]quit
\[Coresw\]****interface**** Vlanif 20
\[Coresw-Vlanif20\]****ip address**** 192.168.20.254 24
\[Coresw-Vlanif20\]quit
\[Coresw\]****interface**** GigabitEthernet 0/0/3
\[Coresw-GigabitEthernet0/0/3\]port link-type ****trunk****
\[Coresw-GigabitEthernet0/0/3\]****port trunk allow-pass vlan all****
配置DHCP
vlanif10 全局模式
\[Coresw\]****dhcp enable****
\[Coresw\]****ip pool**** 10
\[Coresw-ip-pool-10\]****network**** 192.168.10.0 mask 24
\[Coresw-ip-pool-10\]****gateway-list**** 192.168.10.254
\[Coresw-ip-pool-10\]****dns-list**** 8.8.8.8
\[Coresw-ip-pool-10\]****lease**** day 5
\[Coresw-ip-pool-10\]****excluded-ip-address**** 192.168.10.2 192.168.10.253
\[Coresw-ip-pool-10\]quit
\[Coresw\]interface Vlanif 10
\[Coresw-Vlanif10\]****dhcp select global****
vlanif20 接口模式
\[Coresw-Vlanif20\]dhcp select interface
\[Coresw-Vlanif20\]dhcp server excluded-ip-address 192.168.20.2 192.168.20.253
\[Coresw-Vlanif20\]dhcp server dns-list 114.114.114.114
\[Coresw-Vlanif20\]dhcp server lease day 4 hour 4 minute 4
* **核心交换机上层接口**
\[Coresw\]interface GigabitEthernet 0/0/1
\[Coresw-GigabitEthernet0/0/1\]port link-type ****access****
\[Coresw-GigabitEthernet0/0/1\]port default vlan 30
\[Coresw-GigabitEthernet0/0/1\]quit
\[Coresw\]interface Vlanif 30
\[Coresw-Vlanif30\]ip address 192.168.30.254 24
指定核心交换机的默认路由 出口路由器无法nat设置完之后
\[Coresw\]ip route-static 0.0.0.0 0 192.168.30.3
* ****出口路由器配置（下行口）****
\