vlan实验

一、实验要求

二、实验拓扑

三、实验配置

1.配置sw1

由图可知pc1，pc3在vlan2且接口模式为access接口

将sw1上的0/0/2接口划分到vlan2

[sw1]vlan batch 2
[sw1]int e 0/0/2	
[sw1-Ethernet0/0/2]port link-type access 
[sw1-Ethernet0/0/2]port default vlan 2

因为pc2/4/5/6在同一网段，且pc2能访问456，4和5不能访问6，0/0/3接口划分到vlan3，允许vlan3/4/5进入

[sw1] vlan batch 3 to 5
[sw1-Ethernet0/0/4]int e 0/0/3		
[sw1-Ethernet0/0/3]port hybrid pvid vlan 3
[sw1-Ethernet0/0/3]port hybrid untagged vlan 3 to 5

因为pc1/3与2/4/5/6不在同一网段，且所有pc设备都要通过dhcp获取ip，所以0/0/4接口给vlan2带上标签，vlan3/4/5不带标签

[sw1]int e 0/0/4
[sw1-Ethernet0/0/4]port hybrid tagged vlan 2
[sw1-Ethernet0/0/4]port hybrid untagged vlan 3 to 5

e0/0/5接口为trunk栈道

[sw1-Ethernet0/0/3]int e 0/0/5
[sw1-Ethernet0/0/5]port link-type trunk 
[sw1-Ethernet0/0/5]port trunk allow-pass vlan 2 to 5

2.配置sw2

e0/0/1为trhunk栈道，使用混杂模式

[sw2]vlan batch 3 to 5
[sw2]int e 0/0/1
[sw2-Ethernet0/0/1]port hybrid tagged vlan 2 to 5

e0/0/3接口为access接口划分到vlan2，因为pc2能访问pc456，所以允许vlan3/4/5进入

[sw2]vlan 2	
[sw2-vlan2]int e 0/0/3
[sw2-Ethernet0/0/3]port link-type access 
[sw2]vlan batch 3 to 5

e0/0/4划分到vlan4，因为pc4和pc5不能访问6，所以pc4和pc5划分到vlan4，且允许vlan3/4进入，不允许vlan5进入

[sw2-Ethernet0/0/1]int e 0/0/4	
[sw2-Ethernet0/0/4]port hybrid pvid vlan 4
[sw2-Ethernet0/0/4]port hybrid untagged vlan 3 to 4

e0/0/2为trunk栈道

[sw2-Ethernet0/0/4]int e 0/0/2
[sw2-Ethernet0/0/2]port link-type trunk 	
[sw2-Ethernet0/0/2]port trunk allow-pass vlan 2 to 5

3.配置sw3

e0/0/1为混杂模式，trunk栈道

[sw3] vlan batch 2 to 5
[sw3]int e 0/0/1
[sw3-Ethernet0/0/1]port hybrid tagged vlan 2 to 5

e0/0/2划分到vlan4，允许vlan3/4进入，不允许vlan5进入

[sw3-Ethernet0/0/1]int e 0/0/2
[sw3-Ethernet0/0/2]port hybrid pvid vlan 4
[sw3-Ethernet0/0/2]port hybrid untagged  vlan 3 to 4

因为pc4pc5不能访问pc6，所以e0/0/3划分到vlan5，允许vlan3/5进入

[sw3-Ethernet0/0/2]int e 0/0/3	
[sw3-Ethernet0/0/3]port hybrid pvid vlan 5	
[sw3-Ethernet0/0/3]port hybrid untagged vlan 3 5

4.配置路由器

因为vlan3/4/5没有带标签，所以把vlan3/4/5划入g0/0/0物理接口，把vlan2划入g0/0/0.1子接口

配置g0/0/0接口ip

[Huawei]int g 0/0/0
[Huawei-GigabitEthernet0/0/0]ip add 192.168.1.254 24

划入子接口

[Huawei]int g 0/0/0.1
[Huawei-GigabitEthernet0/0/0.1]dot1q termination vid 2
[Huawei-GigabitEthernet0/0/0.1]arp broadcast enable 

开启dhcp服务划分dhcpIP池塘

vlan2

[Huawei]dhcp enable 
[Huawei]ip pool vlan2
[Huawei-ip-pool-vlan2]network 192.168.1.0 mas	
[Huawei-ip-pool-vlan2]network 192.168.1.0 mask 24
[Huawei-ip-pool-vlan2]gateway-list 192.168.1.254 
[Huawei-ip-pool-vlan2]dns-list 114.114.114.114

vlan345

[Huawei]ip pool vlan345	
[Huawei-ip-pool-vlan345]network 192.168.2.0 mask 24
[Huawei-ip-pool-vlan345]gateway-list 192.168.2.254 
[Huawei-ip-pool-vlan345]dns-list 114.114.114.114

将vlan2dhcp池塘应用在g0/0/0.1接口

[Huawei-GigabitEthernet0/0/0]int g 0/0/0.1	
[Huawei-GigabitEthernet0/0/0.1]dhcp select global

将vlan345应用在g0/0/0接口

[Huawei-ip-pool-vlan345]int g 0/0/0
[Huawei-GigabitEthernet0/0/0]dhcp select global 

在pc1上查看ip获取情况

获取成功

pc2 

 获取成功