华为交换机如何开启三层路由功能

路由器上设置，实现访问控制：

[Router]interface ethernet 0

[Router-Ethernet0]ip address 192.168.1.5 255.255.255.0

[Router-Ethernet0]quit，指定ethernet 0的ip

[Router]interface ethernet 1

[Router-Ethernet1]ip address 192.168.1.6 255.255.255.0

[Router-Ethernet1]quit

接着开启firewall并把默认设置为deny：[Router]fire enable，[Router]fire default deny。

允许192.168.1.1访问192.168.1.3，firewall策略可根据需要再添加：[Router]acl 101

[Router-acl-101]rule permit ip source 192.168.1.1 255.255.255.0 destination 192.168.1.3 255.255.255.0

[Router-acl-101]quit

启用101规则：[Router-Ethernet0]fire pa 101

[Router-Ethernet0]quit

[Router-Ethernet1]fire pa 101

[Router-Ethernet1]quit