一、实验要求
二、实验拓扑
三、实验配置
1.配置sw1
由图可知pc1,pc3在vlan2且接口模式为access接口
将sw1上的0/0/2接口划分到vlan2
[sw1]vlan batch 2
[sw1]int e 0/0/2
[sw1-Ethernet0/0/2]port link-type access
[sw1-Ethernet0/0/2]port default vlan 2
因为pc2/4/5/6在同一网段,且pc2能访问456,4和5不能访问6,0/0/3接口划分到vlan3,允许vlan3/4/5进入
[sw1] vlan batch 3 to 5
[sw1-Ethernet0/0/4]int e 0/0/3
[sw1-Ethernet0/0/3]port hybrid pvid vlan 3
[sw1-Ethernet0/0/3]port hybrid untagged vlan 3 to 5
因为pc1/3与2/4/5/6不在同一网段,且所有pc设备都要通过dhcp获取ip,所以0/0/4接口给vlan2带上标签,vlan3/4/5不带标签
[sw1]int e 0/0/4
[sw1-Ethernet0/0/4]port hybrid tagged vlan 2
[sw1-Ethernet0/0/4]port hybrid untagged vlan 3 to 5
e0/0/5接口为trunk栈道
[sw1-Ethernet0/0/3]int e 0/0/5
[sw1-Ethernet0/0/5]port link-type trunk
[sw1-Ethernet0/0/5]port trunk allow-pass vlan 2 to 5
2.配置sw2
e0/0/1为trhunk栈道,使用混杂模式
[sw2]vlan batch 3 to 5
[sw2]int e 0/0/1
[sw2-Ethernet0/0/1]port hybrid tagged vlan 2 to 5
e0/0/3接口为access接口划分到vlan2,因为pc2能访问pc456,所以允许vlan3/4/5进入
[sw2]vlan 2
[sw2-vlan2]int e 0/0/3
[sw2-Ethernet0/0/3]port link-type access
[sw2]vlan batch 3 to 5
e0/0/4划分到vlan4,因为pc4和pc5不能访问6,所以pc4和pc5划分到vlan4,且允许vlan3/4进入,不允许vlan5进入
[sw2-Ethernet0/0/1]int e 0/0/4
[sw2-Ethernet0/0/4]port hybrid pvid vlan 4
[sw2-Ethernet0/0/4]port hybrid untagged vlan 3 to 4
e0/0/2为trunk栈道
[sw2-Ethernet0/0/4]int e 0/0/2
[sw2-Ethernet0/0/2]port link-type trunk
[sw2-Ethernet0/0/2]port trunk allow-pass vlan 2 to 5
3.配置sw3
e0/0/1为混杂模式,trunk栈道
[sw3] vlan batch 2 to 5
[sw3]int e 0/0/1
[sw3-Ethernet0/0/1]port hybrid tagged vlan 2 to 5
e0/0/2划分到vlan4,允许vlan3/4进入,不允许vlan5进入
[sw3-Ethernet0/0/1]int e 0/0/2
[sw3-Ethernet0/0/2]port hybrid pvid vlan 4
[sw3-Ethernet0/0/2]port hybrid untagged vlan 3 to 4
因为pc4pc5不能访问pc6,所以e0/0/3划分到vlan5,允许vlan3/5进入
[sw3-Ethernet0/0/2]int e 0/0/3
[sw3-Ethernet0/0/3]port hybrid pvid vlan 5
[sw3-Ethernet0/0/3]port hybrid untagged vlan 3 5
4.配置路由器
因为vlan3/4/5没有带标签,所以把vlan3/4/5划入g0/0/0物理接口,把vlan2划入g0/0/0.1子接口
配置g0/0/0接口ip
[Huawei]int g 0/0/0
[Huawei-GigabitEthernet0/0/0]ip add 192.168.1.254 24
划入子接口
[Huawei]int g 0/0/0.1
[Huawei-GigabitEthernet0/0/0.1]dot1q termination vid 2
[Huawei-GigabitEthernet0/0/0.1]arp broadcast enable
开启dhcp服务划分dhcpIP池塘
vlan2
[Huawei]dhcp enable
[Huawei]ip pool vlan2
[Huawei-ip-pool-vlan2]network 192.168.1.0 mas
[Huawei-ip-pool-vlan2]network 192.168.1.0 mask 24
[Huawei-ip-pool-vlan2]gateway-list 192.168.1.254
[Huawei-ip-pool-vlan2]dns-list 114.114.114.114
vlan345
[Huawei]ip pool vlan345
[Huawei-ip-pool-vlan345]network 192.168.2.0 mask 24
[Huawei-ip-pool-vlan345]gateway-list 192.168.2.254
[Huawei-ip-pool-vlan345]dns-list 114.114.114.114
将vlan2dhcp池塘应用在g0/0/0.1接口
[Huawei-GigabitEthernet0/0/0]int g 0/0/0.1
[Huawei-GigabitEthernet0/0/0.1]dhcp select global
将vlan345应用在g0/0/0接口
[Huawei-ip-pool-vlan345]int g 0/0/0
[Huawei-GigabitEthernet0/0/0]dhcp select global
在pc1上查看ip获取情况
获取成功
pc2
获取成功