求4006--S3的配置文件，急！

handsen

各位大虾，现有一台4006--S3带4148模块，要在上面配四个VLAN(1-4)，怎样做vlan间路由及控制访问？（vlan1，vlan2可访问vlan3、vlan4、但vlan3、4不能访问1、2），请高手帮忙写出详细配置。在下是新手，show run出来的配置俺大多看不明白，请给出swithc（config）#状态下的配置步骤，谢谢！

zwei19

!  

version 12.0  

no service pad  

service timestamps debug uptime  

service timestamps log uptime  

no service password-encryption  

!  

hostname bang-rp  

!  

!  

ip subnet-zero  

!  

!  

!  

interface Port-channel1                    

!---  this interface is configured for dot1q routing with native vlan 1 to match supervisor configuration.  

no ip redirects  

no ip directed-broadcast  

hold-queue 300 in  

!  

interface Port-channel1.2  

encapsulation dot1Q 2  

ip address 2.2.2.2 255.255.255.0  

no ip redirects  

no ip directed-broadcast  

!  

interface Port-channel1.3  

encapsulation dot1Q 3  

ip address 1.1.1.2 255.255.255.0  

no ip redirects  

no ip directed-broadcast  

!  

interface FastEthernet1                  

!--- this is the out of band interface that you can use for management  

no ip address  

no ip directed-broadcast  

shutdown  

!  

interface GigabitEthernet1  

ip address 3.3.3.2 255.255.255.0  

no ip directed-broadcast  

!  

interface GigabitEthernet2  

no ip address  

no ip directed-broadcast  

shutdown  

!  

interface GigabitEthernet3  

no ip address  

no ip directed-broadcast  

no negotiation auto  

channel-group 1                        

!---  both port gig 3 and gig 4 are part of the channel-group 1  

!  

interface GigabitEthernet4  

no ip address  

no ip directed-broadcast  

no negotiation auto  

channel-group 1                          

!--- both port gig 3 and gig 4 are part of the channel group  1   

!  

router eigrp 1  

passive-interface FastEthernet1  

network 1.0.0.0  

network 2.0.0.0  

network 3.0.0.0  

!  

ip classless  

!  

arp 127.0.0.2 0050.732a.f300 ARPA  

!  

line con 0  

transport input none  

line aux 0  

line vty 0 4   

login  

!  

end  

bang-rp#sh cdp nei  

Capability Codes: R - Router, T - Trans Bridge, B - Source Route  Bridge  

                   S - Switch, H - Host, I - IGMP, r - Repeater  

Device ID        Local Intrfce      Holdtme    Capability

  Platform  Port ID  

liki              Gig 1               

160         T S      

WS-C3508G-Gig 0/1                           

Liki is connected to gig 1 on the router. We only see liki from the router, we do not see it from the supervisor.  

JAB02380AYG(bang)Port-channel1      148          T S       WS-C4003  3/2  

JAB02380AYG(bang)Port-channel1      147          T S       WS-C4003  3/1