华为三层交换机

华为三层交换机

没见过s570，如果是s5700的话
建好vlan，设好ip后用ACL应该就能实现
[LSW1] acl number 3001
rule 1 deny ip source 192.168.4.0 0.0.0.255 destination 192.168.1.0 0.0.0.255
[LSW1] acl number 3004
rule 1 deny ip source 192.168.1.0 0.0.0.255 detination 192.168.4.0 0.0.0.255
rule 2 deny ip source 192.168.2.0 0.0.0.255 detination 192.168.4.0 0.0.0.255
rule 3 deny ip source 192.168.3.0 0.0.0.255 detination 192.168.4.0 0.0.0.255
[LSW1] traffic-filter vlan 1 inbound acl 3001
traffic-filter vlan 2 inbound acl 3001
traffic-filter vlan 3 inbound acl 3001
traffic-filter vlan 4 inbound acl 3004

应该是这样的，具体的你可以找下ACL的设置追答太晚了，没注意该建3002 和3003 vlan2 3用，规则分别为4.x 禁止访问2.x 3.x

[Huawei]dis cu
#
sysname Huawei
#
vlan batch 2 to 6
#
interface Vlanif1
ip address 192.168.1.1 255.255.255.0
#
interface Vlanif2
ip address 192.168.2.1 255.255.255.0
#
interface Vlanif3
ip address 192.168.3.1 255.255.255.0
#
interface Vlanif4
ip address 192.168.4.1 255.255.255.0
#
interface Vlanif5
ip address 192.168.5.1 255.255.255.0
#
interface Vlanif6
description to route
ip address 192.168.10.2 255.255.255.0
#
interface MEth0/0/1
#
interface GigabitEthernet0/0/1
port link-type access
#
interface GigabitEthernet0/0/2
port link-type access
port default vlan 2
#
interface GigabitEthernet0/0/3
port link-type access
port default vlan 3
#
interface GigabitEthernet0/0/4
port link-type access
port default vlan 4
#
interface GigabitEthernet0/0/5
port link-type access
port default vlan 5
#
interface GigabitEthernet0/0/6
#
interface NULL0
#
user-interface con 0
user-interface vty 0 4
#
return
[Huawei]
更多问题可以百度 重庆网管博客 学习华为基础知识