VLAN综合实验（hcip）

要求：

1 PC1和pc3所在接口为access;属于vlan2;
PC2/4/5/6处于同一网段；其中pc2可以访问PC4/5/6;但pc4可以访问Pc5,不能访问PC6
2 Pc5不能访问PC6
3 PC1/3 PC2/4/5/6不在同一个网段
4所有pc通过DHCP获取IP地址，且PC1/3可以正常访问PC2/4/5/6
 

实验步骤：

1：划分vlan，按图示划分vlan，三台交换机配置相同，以SW1为例

[SW1]vlan batch 2 to 6

2：划分接口

SW1：

#
interface GigabitEthernet0/0/1
 port link-type access
 port default vlan 2
#
interface GigabitEthernet0/0/2
 port hybrid pvid vlan 3
 port hybrid untagged vlan 3 to 6
#
interface GigabitEthernet0/0/3
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
#
interface GigabitEthernet0/0/4
 port hybrid tagged vlan 2
 port hybrid untagged vlan 3 to 6
#
 

SW2：

#
interface GigabitEthernet0/0/1
 port link-type access
 port default vlan 2
#
interface GigabitEthernet0/0/2
 port hybrid pvid vlan 4
 port hybrid untagged vlan 3 to 5
#
interface GigabitEthernet0/0/3
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
#
interface GigabitEthernet0/0/4
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
#
 

SW3：

#
interface GigabitEthernet0/0/1
 port hybrid pvid vlan 5
 port hybrid untagged vlan 3 to 5
#
interface GigabitEthernet0/0/2
 port hybrid pvid vlan 6
 port hybrid untagged vlan 3 6
#
interface GigabitEthernet0/0/3
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
#
 

3：划分网段：

PC1/3 192.168.1.0 24
PC2/4/5/6 192.168.2.0 24

进入R1：

#
interface GigabitEthernet0/0/0
 ip address 192.168.2.1 255.255.255.0 
 dhcp select global
#
interface GigabitEthernet0/0/0.1
 dot1q termination vid 2
 ip address 192.168.1.1 255.255.255.0 
 arp broadcast enable
 dhcp select global
#
 

#
dhcp enable
#
ip pool vlan2
 gateway-list 192.168.1.1 
 network 192.168.1.0 mask 255.255.255.0 
 dns-list 8.8.8.8 
#
ip pool vlan3456
 gateway-list 192.168.2.1 
 network 192.168.2.0 mask 255.255.255.0 
 dns-list 8.8.8.8 

---对交换机的接口进行配置时的[SW1-GigabitEthernet0/0/2]port link-type hybrid   可省略，华为设备默认hybrid模式