VLAN 技术

• 实验拓扑图

• 实验思路

配置条件

1、pc1和pc3所在接口为access;属于vlan2;

pc2/pc4/pc5/pc6处于同一网段:其中pc2可以访问pc4/pc5/pc6;

pc4可以访问pc6;pc5不能访问pc6;

2、pc1/pc3与pc2/pc4/pc5/pc6不在同一网段;

3、所有pc通过DHcP获职IP地址，且pc1/pc3可以正常访问pc2/pc4/pc5/pc6;

1.Vlan 配置网段vlan 3/4/5/6 为192.168.1.0/24

vlan 2 为192.168.2.0/24

        2.pc1和pc3所在接口为access;属于vlan2，pc2,pc4,pc5,pc6为所在接口为hybrid，交换机间接口的为trunk

        3.在R1与交换机之间配置单臂路由，因为物理接口不能接受封装有标号的数据段，同时开启dhcp，建立地址池，进入端口下选择全局配置

• 实验配置

创建vlan

SW1

[SW1]vlan batch 2 to 6

SW2

[SW2]vlan batch 2 to 6

SW3

[SW3]vlan batch 2 to 6

线路口类型建立

SW1

[SW1]int g0/0/1

[SW1-GigabitEthernet0/0/1]port link-type access

[SW1-GigabitEthernet0/0/1]port default vlan 2

[SW1-GigabitEthernet0/0/1]int g0/0/2

[SW1-GigabitEthernet0/0/2]port hybrid pvid vlan 3

[SW1-GigabitEthernet0/0/2]port hybrid untagged vlan 3 4 5 6

[SW1-GigabitEthernet0/0/2]int g0/0/3

[SW1-GigabitEthernet0/0/3]port link-type trunk

[SW1-GigabitEthernet0/0/4]port hybrid untagged vlan 3 4 5 6

[SW1-GigabitEthernet0/0/4]port hybrid tagged vlan 2

[SW1]dis port vlan activ

SW2

[SW2]int g0/0/1

[SW2-GigabitEthernet0/0/1]port link-type access

[SW2-GigabitEthernet0/0/1]port default vlan 2

[SW2-GigabitEthernet0/0/1]int g0/0/2

[SW2-GigabitEthernet0/0/2]port hybrid pvid vlan 4

[SW2-GigabitEthernet0/0/2]port hybrid untagged vlan 3 4 5 6

[SW2]int g0/0/3

[SW2-GigabitEthernet0/0/3]port link-type trunk

[SW2-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 to 6

[SW2-GigabitEthernet0/0/2]int g0/0/4

[SW2-GigabitEthernet0/0/4]port link-type trunk

[SW2-GigabitEthernet0/0/4]port trunk allow-pass vlan 2 to 6

[SW2]dis port vlan active

SW3

[SW3]int g0/0/1

[SW3-GigabitEthernet0/0/1]port hybrid pvid vlan 5

[SW3-GigabitEthernet0/0/1]port hybrid untagged vlan 3 4 5

[SW3-GigabitEthernet0/0/1]int g0/0/2

[SW3-GigabitEthernet0/0/2]port hybrid pvid vlan 6

[SW3-GigabitEthernet0/0/2]port hybrid untagged vlan 3 4 6

[SW3-GigabitEthernet0/0/2]int g0/0/3

[SW3-GigabitEthernet0/0/3]port link-type trunk

[SW1-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 to 6

[SW3]dis port vlan active

R1

[R1]int g0/0/0

[R1-GigabitEthernet0/0/0]ip ad 192.168.1.1 24

[R1-GigabitEthernet0/0/0]int g0/0/0.1

[R1-GigabitEthernet0/0/0.1]ip ad 192.168.2.1 24

[R1-GigabitEthernet0/0/0.1]dot1q termination vid 2封装802.1q格式

[R1-GigabitEthernet0/0/0.1]arp broadcast enable  开启arp广播

[R1]dhcp enable

[R1]ip pool aa

Info: It's successful to create an IP address pool.

[R1-ip-pool-aa]network 192.168.1.0 mask 24

[R1-ip-pool-aa]gateway-list 192.168.1.1

[R1-ip-pool-aa]dns-list 8.8.8.8

[R1-ip-pool-aa]int g0/0/0

[R1-GigabitEthernet0/0/0]dhcp select global

[R1-GigabitEthernet0/0/0]q

[R1]ip pool aa2

Info: It's successful to create an IP address pool.

[R1-ip-pool-aa2]network 192.168.2.0 mask 24

[R1-ip-pool-aa2]gateway-list 192.168.2.1

[R1-ip-pool-aa2]dns-list 8.8.8.8

[R1-ip-pool-aa2]int g0/0/0.1

[R1-GigabitEthernet0/0/0.1]dhcp select global

实验结果

PC1

PC2

PC5

PC6