华为实验2

大家好 今天的实验是配置 primary VLAN 和 secondary VLAN

 

主附 vlan 一般用于一个网络段的情况，主 vlan 和子 vlan 间可以访问，

而子 vlan 之间是不能访问的。就比如说 总经理所在的 vlan 可以访问任何部门的 vlan 而部门之间却不能互相访问。

具体实验步骤如下：

SW1 ： <Quidway>sys

Enter system view, return to user view with Ctrl+Z.

[Quidway]sysname dongli

[dongli]super password dongli

[dongli]user int vty 0 4

[dongli-ui-vty0-4]authentication-mode password

[dongli-ui-vty0-4]set authentication-mode password sim 222

[dongli-ui-vty0-4]user privilege 3

[dongli-ui-vty0-4]quit

[dongli]vlan 2

[dongli-vlan2]port e0/3

[dongli-vlan2]vlan 3

[dongli-vlan3]port e0/6

[dongli-vlan3]vlan 4

[dongli-vlan4]port e0/8

[dongli-vlan4]quit

[dongli]vlan 4

[dongli-vlan4]vlan 2

[dongli-vlan2]isolate-user-vlan enable ―――――――设为主 vlan

[dongli-vlan2]

[dongli-vlan2]quit

[dongli]isolate-user-vlan 2 secondary 3,4 ――――――――――设 vlan3 ， 4 为辅 vlan

[dongli]int e0/1

[dongli-Ethernet0/1]port link-type trunk

[dongli-Ethernet0/1]port trunk permit vlan all

[dongli-Ethernet0/1]quit

[dongli]

 

SW2 ：

<Quidway>sys

Enter system view, return to user view with Ctrl+Z.

[Quidway]vlan 2

[Quidway-vlan2]port e0/3

[Quidway-vlan2]vlan 3

[Quidway-vlan3]port e0/6

[Quidway-vlan3]vlan 4

[Quidway-vlan4]port e0/8

[Quidway-vlan4]quit

[Quidway]vlan 2

[Quidway-vlan2]isolate-user-vlan enable

[Quidway-vlan2]quit

[Quidway]isolate-user-vlan 2 secondary 3,4

[Quidway]quit

<Quidway>sys

Enter system view, return to user view with Ctrl+Z.

[Quidway]int e0/1

[Quidway-Ethernet0/1]port link-type trunk

[Quidway-Ethernet0/1]port trunk permit vlan all

[Quidway-Ethernet0/1]quit

[Quidway]

PC1 192.168.1.1     PC2 192.168.1.2        PC3 192.168.1.3       PC4 192.168.1.4  PC5 192.168.1.5      PC6 192.168.1.6

 

实验结果： PC1 ： root@PCA root]# ifconfig eth0 192.168.1.1 netmask 255.255.255.0

[root@PCA root]# ping 192.168.1.2

64 bytes from 192.168.1.1: icmp_seq=1 ttl=128 time=0.207 ms

64 bytes from 192.168.1.1: icmp_seq=1 ttl=128 time=0.100 ms

64 bytes from 192.168.1.1: icmp_seq=1 ttl=128 time=0.96 ms

64 bytes from 192.168.1.1: icmp_seq=1 ttl=128 time=0.96 ms

 

4packets transmitted, 4 received, 0% loss, time 2000ms

 

PC2 ： root@PCB root]# ifconfig eth0 192.168.1.2 netmask 255.255.255.0

[root@PCB root]# ping 192.168.1.1

64 bytes from 192.168.1.2: icmp_seq=1 ttl=128 time=0.207 ms

64 bytes from 192.168.1.2: icmp_seq=1 ttl=128 time=0.100 ms

64 bytes from 192.168.1.2: icmp_seq=1 ttl=128 time=0.96 ms

64 bytes from 192.168.1.2: icmp_seq=1 ttl=128 time=0.96 ms

 

4packets transmitted, 4 received, 0% loss, time 2000ms

 

[root@PCB root]# ping 192.168.1.3

From 192.168.1.2 icmp_seq=1 Destination Host Unreachable

From 192.168.1.2 icmp_seq=1 Destination Host Unreachable

From 192.168.1.2 icmp_seq=1 Destination Host Unreachable

From 192.168.1.2 icmp_seq=1 Destination Host Unreachable

 

4packets transmitted, 0 received, 100% loss, time 2000ms

 

[root@PCB root]#

 

实验成功

今天就讲到着 有不明白的请加 768865545 飘云 支持华为 ！！！！！！！！！！！！！！！！！！！！！！！

本文出自 “nfs_dongli的博客” 博客，请务必保留此出处http://hackerdl.blog.51cto.com/867412/236155

转载于:https://my.oschina.net/u/2391603/blog/464023