Lokve博客 
介绍
单臂路由（router-on-a-stick）是指在路由器的一个接口上通过配置子接口（或“逻辑接口”，并不存在真正物理接口）的方式，实现原来相互隔离的不同VLAN（虚拟局域网）之间的互联互通。
路由器的物理接口可以被划分成多个逻辑接口，这些被划分后的逻辑接口被形象的称为子接口。
值得注意的是这些逻辑子接口不能被单独的开启或关闭，也就是说，当物理接口被开启或关闭时，所有的该接口的子接口也随之被开启或关闭。
实验拓扑
操作步骤
- 交换机端配置（VLAN划分与Trunk端口设置）
- 路由器子接口创建与封装协议（Dot1Q）
- IP地址分配与路由配置
代码实操
SW1配置 - VLAN放行
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]un in en
Info: Information center is disabled.
[Huawei]sysname SW1
[SW1]vlan batch 10 20
Info: This operation may take a few seconds. Please wait for a moment...done.
[SW1]int g0/0/1
[SW1-GigabitEthernet0/0/1]port link-type trunk
[SW1-GigabitEthernet0/0/1]port trunk allow-pass vlan all
[SW1-GigabitEthernet0/0/1]q
[SW1]int g0/0/2
[SW1-GigabitEthernet0/0/2]port link-type access
[SW1-GigabitEthernet0/0/2]port default vlan 10
[SW1-GigabitEthernet0/0/2]q
[SW1]int g0/0/3
[SW1-GigabitEthernet0/0/3]port link-type access
[SW1-GigabitEthernet0/0/3]port default vlan 20
[SW1-GigabitEthernet0/0/3]q
AR1配置 - 单臂路由配置
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname AR1
[AR1]un in en
Info: Information center is disabled.
[AR1]int g0/0/1.10
[AR1-GigabitEthernet0/0/1.10]dot1q termination vid 10 # 配置子接口对VLAN 10的802.1Q标签
[AR1-GigabitEthernet0/0/1.10]ip address 172.16.10.1 24
[AR1-GigabitEthernet0/0/1.10]arp broadcast enable 启用子接口的ARP广播功能
[AR1-GigabitEthernet0/0/1.10]q
[AR1]int g0/0/1.20
[AR1-GigabitEthernet0/0/1.20]dot1q termination vid 20 # 配置子接口对VLAN 20的802.1Q标签
[AR1-GigabitEthernet0/0/1.20]ip address 172.16.20.1 24
[AR1-GigabitEthernet0/0/1.20]arp broadcast enable 启用子接口的ARP广播功能
[AR1-GigabitEthernet0/0/1.20]q
AR1配置 - DHCP全局地址池
[AR1]dhcp enable
Info: The operation may take a few seconds. Please wait for a moment.done.
[AR1]ip pool vlan10
[AR1-ip-pool-vlan10]network 172.16.10.0 mask 24
[AR1-ip-pool-vlan10]gateway-list 172.16.10.1
[AR1-ip-pool-vlan10]static-bind ip-address 172.16.10.10 mac-address 5489-9854-3DF0 # 静态绑定
[AR1-ip-pool-vlan10]dis this
[V200R003C00]
#
ip pool vlan10
gateway-list 172.16.10.1
network 172.16.10.0 mask 255.255.255.0
static-bind ip-address 172.16.10.10 mac-address 5489-9854-3df0
#
return
[AR1-ip-pool-vlan10]q
[AR1]ip pool vlan20
[AR1-ip-pool-vlan20]network 172.16.20.0 mask 24
[AR1-ip-pool-vlan20]gateway-list 172.16.20.1
[AR1-ip-pool-vlan20]q
[AR1]int g0/0/1.10
[AR1-GigabitEthernet0/0/1.10]dhcp select global 配置子接口10使用全局DHCP地址池
[AR1-GigabitEthernet0/0/1.10]q
[AR1]int g0/0/1.20
[AR1-GigabitEthernet0/0/1.20]dhcp select global 配置子接口20使用全局DHCP地址池
[AR1-GigabitEthernet0/0/1.20]q
测试结果
DHCP获取IP是否正常
跨VLAN连通性测试
ensp AR单臂路由实验
