H3C交换机VLAN配置：隔离与互通设置

以下是H3C交换机的配置指令，用于实现以下功能：

• 创建VLAN 10，IP地址为'10.4.0.0'，允许被其他VLAN访问。
• 创建VLAN 20、30、40，IP地址分别为'10.5.0.0'、'10.6.0.0'、'10.7.0.0'，禁止相互访问。
• 所有VLAN可以访问外网。

1. 创建VLAN并设置IP地址:

vlan 10
description VLAN 10
ip address 10.4.0.1 255.255.255.0

vlan 20
description VLAN 20
ip address 10.5.0.1 255.255.255.0

vlan 30
description VLAN 30
ip address 10.6.0.1 255.255.255.0

vlan 40
description VLAN 40
ip address 10.7.0.1 255.255.255.0

2. 允许VLAN 10被其他VLAN访问:

vlan 10
description VLAN 10
ip address 10.4.0.1 255.255.255.0
vlan members 10 20 30 40
vlan permit 10

3. 禁止VLAN 20、30、40相互访问:

vlan 20
description VLAN 20
ip address 10.5.0.1 255.255.255.0
vlan members 20
vlan deny 30
vlan deny 40

vlan 30
description VLAN 30
ip address 10.6.0.1 255.255.255.0
vlan members 30
vlan deny 20
vlan deny 40

vlan 40
description VLAN 40
ip address 10.7.0.1 255.255.255.0
vlan members 40
vlan deny 20
vlan deny 30

4. 配置外网访问:

interface GigabitEthernet0/0/1
description WAN Interface
ip address dhcp
ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/0/1

以上配置指令仅供参考，具体配置应根据实际情况进行调整。