一:实验要求
1、pc1和pc3所在接口为access;属于vlan 2;
pc2/pc4/pc5/pc6处于同一网段;其中pc2可以访问pc4/pc5/pc6;
pc4 可以访问pc6:pc5不能访问pc6:
2、pc1/pc3与pc2/pc4/pc5/pc6不在同一网段;
3、所有pc通过DHCP获取Ip地址,且pc1/pc3可以正常访问pc2/pc4/pc5/pc6;
二:实验步骤
一:创建vlan,设置接口类型
[LSW1]vlan batch 2 to 6
[LSW1]int g0/0/1
[LSW1-GigabitEthernet0/0/1]port link-type access
[LSW1-GigabitEthernet0/0/1]port default vlan 2
[LSW1-GigabitEthernet0/0/1]int g0/0/2
[LSW1-GigabitEthernet0/0/2]port hybrid pvid vlan 3
[LSW1-GigabitEthernet0/0/2]port hybrid untagged vlan 3 to 6
[LSW1-GigabitEthernet0/0/2]int g0/0/3
[LSW1-GigabitEthernet0/0/3]port link-type trunk
[LSW1-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 to 6
dis port vlan active
[LSW2]vlan batch 2 to 6
[LSW2]int g0/0/1
[LSW2-GigabitEthernet0/0/1]port link-type access
[LSW2-GigabitEthernet0/0/1]port default vlan 2
[LSW2-GigabitEthernet0/0/1]int g0/0/2
[LSW2-GigabitEthernet0/0/2]port hybrid pvid vlan 4
[LSW2-GigabitEthernet0/0/2]port hybrid untagged vlan 3 to 6
[LSW2-GigabitEthernet0/0/2]int g0/0/3
[LSW2-GigabitEthernet0/0/3]port link-type trunk
[LSW2-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 to 6
[LSW2-GigabitEthernet0/0/3]int g0/0/4
[LSW2-GigabitEthernet0/0/4]port link-type trunk
[LSW2-GigabitEthernet0/0/4]port trunk allow-pass vlan 1 to 6
[LSW3]int g0/0/1
[LSW3-GigabitEthernet0/0/1]port hybrid pvid vlan 5
[LSW3-GigabitEthernet0/0/1]port hybrid untagged vlan 3 4 5
[LSW3-GigabitEthernet0/0/1]int g0/0/2
[LSW3-GigabitEthernet0/0/2]port hybrid pvid vlan 6
[LSW3-GigabitEthernet0/0/2]port hybrid untagged vlan 3 4 6
[LSW3-GigabitEthernet0/0/2]int g0/0/3
[LSW3-GigabitEthernet0/0/3]port link-type trunk
[LSW3-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 to 6
三、vlan间路由器(单臂路由——子接口——交换机连接路由器的交换机LSW1接口0/0/4设置hybird模式,允许vlan2携带标签转发,vlan3/4/5/6剥离标签转发)
[LSW1-GigabitEthernet0/0/3]int g0/0/4
[LSW1-GigabitEthernet0/0/4]port hybrid untagged vlan 3 4 5 6
[LSW1-GigabitEthernet0/0/4]port trunk tagged vlan 2
[r1]int g0/0/0
[r1-GigabitEthernet0/0/0]ip ad 192.168.1.1 24
[r1-GigabitEthernet0/0/0]
[r1-GigabitEthernet0/0/0]int g0/0/0.1 创建子接口
[r1-GigabitEthernet0/0/0.1]ip ad 192.168.2.1 24
[r1-GigabitEthernet0/0/0.1]dotlq termination vid 2 封装802.1q格式
[r1-GigabitEthernet0/0/0.1]arp broadcast enable 开启arp广播
[r1-GigabitEthernet0/0/0.1]dhcp enable
Info: The operation may take a few seconds. Please wait for a moment.done.
[r1]ip pool aa
Info: It's successful to create an IP address pool.
[r1-ip-pool-a]network 192.168.1.0 mask 24
[r1-ip-pool-a]gateway-list 192.168.1.1
[r1-ip-pool-a]dns-list 8.8.8.8
[r1]int g0/0/0
[r1-GigabitEthernet0/0/0]dncp select global
[r1-ip-pool-a]q
[r1]ip pool bb
Info: It's successful to create an IP address pool.
[r1-ip-pool-b]network 192.168.2.0 mask 24
[r1-ip-pool-b]gateway-list 192.168.2.1
[r1-ip-pool-b]dns-list 8.8.8.8
[r1-ip-pool-b]q
[r1]int g0/0/0.1
[r1-GigabitEthernet0/0/0]dncp select global
然后PC2pingPC6等。。
dis mac-address