华为super、sub等聚合vlan+dhcp局域网配置案例

最终实现效果：
sub各vlan 10、20之间的pc不能互通，但vlan内的pc可以互通，实现了同网段不通，二层广播隔离

pc都用dhcp获取地址，地址池在supber 主vlan上做

都能上公网ping通8.8.8.254

如果要让vlan间的pc都互相通就在super vlan下做arp代理:
inter vlan 100
arp-proxy inter-sub-valn-proxy enable
//注意一定要inter-sub-vlan-proxy如果是inner-sub-vlan-proxy就是一个vlan内通

sw1

vlan batch 10 20 80 100

dhcp enable

vlan 80
aggregate-vlan
access-vlan 10 20

interface Vlanif80
ip address 192.168.80.1 255.255.255.0
arp-proxy inter-sub-vlan-proxy enable //这条命令开启vlan间的arp代理
dhcp select interface

interface Vlanif100
ip address 192.168.100.2 255.255.255.0

interface GigabitEthernet0/0/1
port link-type access
port default vlan 100

interface GigabitEthernet0/0/2
port link-type access
port default vlan 10

interface GigabitEthernet0/0/3
port link-type access
port default vlan 10

interface GigabitEthernet0/0/4
port link-type access
port default vlan 20

ip route-static 0.0.0.0 0.0.0.0 192.168.100.1

R1

acl number 2000
rule 5 permit source 192.168.80.0 0.0.0.255

interface GigabitEthernet0/0/0
ip address 1.1.1.2 255.255.255.0
nat outbound 2000

interface GigabitEthernet0/0/1
ip address 192.168.100.1 255.255.255.0

ip route-static 0.0.0.0 0.0.0.0 1.1.1.1
ip route-static 192.168.80.0 255.255.255.0 192.168.100.2