Routeros5.20与华为S5120-52C-EI交换机组网
1、一、 华三交换机配置：
交换机分别做svi接口配置，vlan配置，DHCP服务配置，默认路由配置。
1、 SecureCRT连接交换机并上电。如下图：
2、 VLAN配置。创建vlan101-107, 500。并把相应的端口加入vlan。
3、 分别给每个Vlan配 SVI接口，如下图：
4、分别增加DHCP服务器，并指定到相应的svi接口中，如下图：
5、将要把路由器接到vlan500下面，增加默认路由，如下图：
6、最后保存退出:save-->quit。
命令详情如下：
<H3C>sys
System View: return to User View with Ctrl+Z.
[H3C]dis cu
#
version 5.20, Release 2221P15
#
sysname H3C
#
irf mac-address persistent timer
irf auto-update enable
undo irf link-delay
#
domain default enable system
#
password-recovery enable
#
vlan 1
#
vlan 101 to 107
#
vlan 500
#
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
dhcp server ip-pool vlan101/1/2
network 172.18.1.0 mask 255.255.255.0
gateway-list 172.18.1.1
dns-list 222.172.200.68 61.166.150.101
#
dhcp server ip-pool vlan102/3/4
network 172.18.2.0 mask 255.255.255.0
gateway-list 172.18.2.1
dns-list 222.172.200.68 61.166.150.101
#
dhcp server ip-pool vlan103/5/6
network 172.18.3.0 mask 255.255.255.0
gateway-list 172.18.3.1
dns-list 222.172.200.68 61.166.150.101
#
dhcp server ip-pool vlan104/7/8
network 172.18.4.0 mask 255.255.255.0
gateway-list 172.18.4.1
dns-list 222.172.200.68 61.166.150.101
#
dhcp server ip-pool vlan105/9/10
network 172.18.5.0 mask 255.255.255.0
gateway-list 172.18.5.1
dns-list 222.172.200.68 61.166.150.101
#
dhcp server ip-pool vlan106/11/12
network 172.18.6.0 mask 255.255.255.0
gateway-list 172.18.6.1
dns-list 222.172.200.68 61.166.150.101
#
dhcp server ip-pool vlan107/45/46
network 10.1.1.0 mask 255.255.255.0
gateway-list 10.1.1.1
dns-list 222.172.200.68 61.166.150.101
#
user-group system
group-attribute allow-guest
#
interface NULL0
#
interface Vlan-interface101
ip address 172.18.1.1 255.255.255.0
#
interface Vlan-interface102
ip address 172.18.2.1 255.255.255.0
#
interface Vlan-interface103
ip address 172.18.3.1 255.255.255.0
#
interface Vlan-interface104
ip address 172.18.4.1 255.255.255.0
#
interface Vlan-interface105
ip address 172.18.5.1 255.255.255.0
#
interface Vlan-interface106
ip address 172.18.6.1 255.255.255.0
#
interface Vlan-interface107
ip address 10.1.1.1 255.255.255.0
#
interface Vlan-interface500
ip address 192.168.2.200 255.255.255.0
#
interface GigabitEthernet1/0/1
port access vlan 101
#
interface GigabitEthernet1/0/2
port access vlan 101
#
interface GigabitEthernet1/0/3
port access vlan 102
#
interface GigabitEthernet1/0/4
port access vlan 102
#
interface GigabitEthernet1/0/5
port access vlan 103
#
interface GigabitEthernet1/0/6
port access vlan 103
#
interface GigabitEthernet1/0/7
port access vlan 104
#
interface GigabitEthernet1/0/8
port access vlan 104
#
interface GigabitEthernet1/0/9
port access vlan 105
#
interface GigabitEthernet1/0/10
port access vlan 105
#
interface GigabitEthernet1/0/11
port access vlan 106
#
interface GigabitEthernet1/0/12
port access vlan 106
#
interface GigabitEthernet1/0/13
port access vlan 102
#
interface GigabitEthernet1/0/14
port access vlan 102
#
interface GigabitEthernet1/0/15
port access vlan 103
#
interface GigabitEthernet1/0/16
port access vlan 103
#
interface GigabitEthernet1/0/17
port access vlan 104
#
interface GigabitEthernet1/0/18
port access vlan 104
#
interface GigabitEthernet1/0/19
port access vlan 105
#
interface GigabitEthernet1/0/20
port access vlan 105
#
interface GigabitEthernet1/0/21
port access vlan 106
#
interface GigabitEthernet1/0/22
port access vlan 106
#
interface GigabitEthernet1/0/23
port access vlan 102
#
interface GigabitEthernet1/0/24
port access vlan 102
#
interface GigabitEthernet1/0/25
port access vlan 103
#
interface GigabitEthernet1/0/26
port access vlan 103
#
interface GigabitEthernet1/0/27
port access vlan 104
#
interface GigabitEthernet1/0/28
port access vlan 104
#
interface GigabitEthernet1/0/29
port access vlan 105
#
interface GigabitEthernet1/0/30
port access vlan 105
#
interface GigabitEthernet1/0/31
port access vlan 106
#
interface GigabitEthernet1/0/32
port access vlan 106
#
interface GigabitEthernet1/0/33
#
interface GigabitEthernet1/0/34
#
interface GigabitEthernet1/0/35
#
interface GigabitEthernet1/0/36
#
interface GigabitEthernet1/0/37
#
interface GigabitEthernet1/0/38
#
interface GigabitEthernet1/0/39
#
interface GigabitEthernet1/0/40
#
interface GigabitEthernet1/0/41
#
interface GigabitEthernet1/0/42
#
interface GigabitEthernet1/0/43
#
interface GigabitEthernet1/0/44
#
interface GigabitEthernet1/0/45
port access vlan 107
#
interface GigabitEthernet1/0/46
port access vlan 107
#
interface GigabitEthernet1/0/47
port access vlan 500
#
interface GigabitEthernet1/0/48
port access vlan 500
#
interface GigabitEthernet1/0/49
shutdown
#
interface GigabitEthernet1/0/50
shutdown
#
interface GigabitEthernet1/0/51
shutdown
#
interface GigabitEthernet1/0/52
shutdown
#
dhcp-snooping
#
ip route-static 0.0.0.0 0.0.0.0 192.168.2.1
#
dhcp enable
#
load xml-configuration
#
user-interface aux 0
user-interface vty 0 15
#
return
[H3C]
7、二、 路由器配置（我这里采用静态IP上网）
1、 设置Routeros能正常上网，如下图：
1.1、新建两个桥bridge1_lan和bridge2_wan：
8、 1.2、把相应的物理端口添加到bridge中。如下图：
9、3、分别添加内网IP和外网IP并指到相应的桥，如下图：
10、4、添加DNS，如下：
11、5、添加DHCP服务器，然后就一直点下一步，详情如下：
12、6、添加nat地址转换：
13、7添加默认路由：
14、配置回程路由指到交换机Vlan500的SVI接口
以上的设置routeros可以正常上网了，下面增加一条回程路由指到三层交换机，保证用户能连到交换机上网。如下图：
15、至此，Routeros与S5120-52C-EI的配置全部完成。