1、配置连接用户的接口和VLANif的接口。<Huawei>system-view[Huawei]vlan batch 2 3 100[Huawei]interface g0/0/2[Huawei-GigabitEthernet0/0/2]port link-type access[Huawei-GigabitEthernet0/0/2]port default vlan 2[Huawei-GigabitEthernet0/0/2]quit[Huawei]interface g0/0/3[Huawei-GigabitEthernet0/0/3]port link-type access[Huawei-GigabitEthernet0/0/3]port default vlan 3[Huawei-GigabitEthernet0/0/3]quit[Huawei]interface vlanif 2[Huawei-Vlanif2]ip address 192.168.2.1 24[Huawei-Vlanif2]quit[Huawei]interface vlanif 3[Huawei-Vlanif3]ip address 192.168.3.1 24[Huawei-Vlanif3]quit
2、配置防火墙对应的接口[Huawei]interface g0/0/1[Huawei-Giga水瑞侮瑜bitEt茑霁酌绡hernet0/0/1]port link-type trunk[Huawei-GigabitEthernet0/0/1]port trunk allow-pass vlan 2 3 100[Huawei-GigabitEthernet0/0/1]quit
3、配置防火墙对应的VLanif接口。[Huawei]interface vlanif 100[Huawei-Vlanif100]ip address 192.168.100.2 24[Huawei-Vlanif100]quit
4、配置静态路由[Huawei]ip route-static 0.0.0.0 0.0.0.0 192.168.100.1