Question

我有一台5120交换机连接防火墙划分连个VLAN 让他们都可以访问外网怎么设置

Answer 1

越稀越电离,只要是电解质电离,稀释之后都会使平衡向电解方向移动.本来稀释之后I左右浓度都变为原来的二分之一,但是由于稀释促进电离,所以左边的一水合氨小于原来的二分之一,右边的铵根离子和氢氧根离子大于原来的二分之一

Answer 2

5120是个二层交换机啊，你划这么几个VLAN，在防火墙上做单臂路由

追问

怎么做

追答

sysname H3C
#
firewall packet-filter enable
firewall packet-filter default permit
#
undo insulate
#
firewall statistic system enable
DNS resolve
DNS server 202.103.44.150
DNS server 202.103.24.68
DNS-proxy enable
#
radius scheme system
server-type extended
#
domain system
#
local-user admin
password simple admin
service-type telnet
level 3
#
dhcp server ip-pool 10
network 192.168.10.0 mask 255.255.255.0
gateway-list 192.168.10.1
dns-list 202.103.44.150 202.103.24.68
#
dhcp server ip-pool 20
network 192.168.20.0 mask 255.255.255.0
gateway-list 192.168.20.1
dns-list 202.103.44.150 202.103.24.68
#
dhcp server ip-pool 30
network 192.168.30.0 mask 255.255.255.0
gateway-list 192.168.30.1
dns-list 202.103.44.150 202.103.24.68
#
dhcp server ip-pool 40
network 192.168.40.0 mask 255.255.255.0
gateway-list 192.168.40.1
dns-list 202.103.44.150 202.103.24.68
#
acl number 2000
rule 0 permit
#
interface Aux0
async mode flow
#
interface Ethernet0/0
ip address 192.168.1.1 255.255.255.0 //防火墙的IP
#
interface Ethernet0/0.1
ip address 192.168.10.1 255.255.255.0
vlan-type dot1q vid 2
#
interface Ethernet0/0.2
ip address 192.168.20.1 255.255.255.0
vlan-type dot1q vid 3
#
interface Ethernet0/0.3
ip address 192.168.30.1 255.255.255.0
vlan-type dot1q vid 4
#
interface Ethernet0/0.4
ip address 192.168.40.1 255.255.255.0
vlan-type dot1q vid 5
#
interface Ethernet1/0
ip address 外网IP
nat outbound 2000
firewall zone trust
add interface Ethernet0/0
add interface Ethernet0/0.1
add interface Ethernet0/0.2
add interface Ethernet0/0.3
add interface Ethernet0/0.4
set priority 85
ip route-static 0.0.0.0 0.0.0.0 外网网关 preference 60

Answer 3

5120不是TP的吗？

Answer 4

你的问题太模糊了

追问

有台防火墙下面连接一台5210交换机 交换机划分两个VLAN VLAN之间不能访问但可以访问外网怎么做配置