华为防火墙和交换机配置链路聚合

要配置华为防火墙和交换机的链路聚合，需要先在交换机上创建聚合组，并将需要聚合的物理接口加入到聚合组中。然后在防火墙上创建聚合接口，并将其与交换机上的聚合组进行绑定。最后，需要在交换机和防火墙之间配置相应的 VLAN 和路由信息。

具体步骤如下：

1. 在交换机上创建聚合组：

Switch] interface eth-trunk 1
[Switch-Eth-Trunk1] mode lacp
[Switch-Eth-Trunk1] trunkport GigabitEthernet 0/0/1 to GigabitEthernet 0/0/2

2. 在防火墙上创建聚合接口：

[FW] interface GigabitEthernet 0/0/0
[FW-GigabitEthernet0/0/0] port link-type trunk
[FW-GigabitEthernet0/0/0] port trunk allow-pass vlan 10 20
[FW-GigabitEthernet0/0/0] quit
[FW] interface Eth-Trunk 1
[FW-Eth-Trunk1] port link-type trunk
[FW-Eth-Trunk1] port trunk allow-pass vlan 10 20
[FW-Eth-Trunk1] quit

3. 将防火墙上的聚合接口与交换机上的聚合组进行绑定：

[FW] interface Eth-Trunk 1
[FW-Eth-Trunk1] port link-type trunk
[FW-Eth-Trunk1] port trunk allow-pass vlan 10 20
[FW-Eth-Trunk1] quit
[FW] interface GigabitEthernet 0/0/0
[FW-GigabitEthernet0/0/0] port link-type trunk
[FW-GigabitEthernet0/0/0] port trunk allow-pass vlan 10 20
[FW-GigabitEthernet0/0/0] quit
[FW] interface Eth-Trunk 1
[FW-Eth-Trunk1] port link-type trunk
[FW-Eth-Trunk1] port trunk allow-pass vlan 10 20
[FW-Eth-Trunk1] quit

4. 配置 VLAN 和路由信息：

[Switch] vlan batch 10 20
[Switch] interface Vlanif10
[Switch-Vlanif10] ip address 192.168.10.1 24
[Switch-Vlanif10] quit
[Switch] interface Vlanif20
[Switch-Vlanif20] ip address 192.168.20.1 24
[Switch-Vlanif20] quit
[FW] interface Vlanif10
[FW-Vlanif10] ip address 192.168.10.2 24
[FW-Vlanif10] quit
[FW] interface Vlanif20
[FW-Vlanif20] ip address 192.168.20.2 24
[FW-Vlanif20] quit