一、实验需求
1、PC1/3的接口均为access模式,且属于van2,在同一网段。
2、PC2/4/5/6的IP地址在同一网段,与PC1/3不在同一网段。
3、PC2可以访问4/5/6,PC4不能访问5/6,PC5不能访问PC6。
4、所有PC通过DHCP获取ip地址,PC1/3可以访问PC2/4/5/6
二、实验拓扑
三、实验步骤
1、创建vlan
[SW1]vlan batch 2 to 4
[SW2]vlan batch 2 to 4
2、接口划分vlan(access接口和trunk干道)
[SW1]int e0/0/1
[SW1-Ethernet0/0/1] port link-type access
[SW1-Ethernet0/0/1] port default vlan 2
[SW1]int e0/0/3
[SW1-Ethernet0/0/3] port link-type access
[SW1-Ethernet0/0/3] port default vlan 2
[SW1-Ethernet0/0/1] int e0/0/2
[SW1-Ethernet0/0/2] port hybrid pvid vlan 3
[SW1-Ethernet0/0/2] port hybrid untagged vlan 3 to 4
[SW1-Ethernet0/0/2]int e0/0/4
[SW1-Ethernet0/0/4] port hybrid pvid vlan 4
[SW1-Ethernet0/0/4] port hybrid tagged vlan 4
[SW1-Ethernet0/0/4] port hybrid untagged vlan 3
//trunk干道
[SW1-Ethernet0/0/4]int g0/0/2
[SW1-GigabitEthernet0/0/2] port link-type trunk
[SW1-GigabitEthernet0/0/2] port trunk allow-pass vlan
[SW2]int g0/0/2
[SW2-GigabitEthernet0/0/2] port hybrid tagged vlan 2 to 4
[SW2-GigabitEthernet0/0/2]int e0/0/5
[SW2-Ethernet0/0/5] port hybrid pvid vlan 4
[SW2-Ethernet0/0/5] port hybrid tagged vlan 4
[SW2-Ethernet0/0/5] port hybrid untagged vlan 3
[SW2-Ethernet0/0/5]int e0/0/6
[SW2-Ethernet0/0/6] port hybrid pvid vlan 4
[SW2-Ethernet0/0/6] port hybrid tagged vlan 4
[SW2-Ethernet0/0/6] port hybrid untagged vlan 3
[SW1-GigabitEthernet0/0/2]int g0/0/1
[SW1-GigabitEthernet0/0/1] port hybrid tagged vlan 2
[SW1-GigabitEthernet0/0/1] port hybrid untagged vlan 3 to 4
3、DHCP获取地址
[R1] int g0/0/1.1
[R1-GigabitEthernet0/0/1.1] dot1q termination vid 2
[R1-GigabitEthernet0/0/1.1] ip address 192.168.1.1 255.255.255.0
[R1-GigabitEthernet0/0/1.1] arp broadcast enable
[R1-GigabitEthernet0/0/1.1] dhcp select global
[R1-GigabitEthernet0/0/1.1] int g0/0/1
[R1-GigabitEthernet0/0/1] ip address 192.168.2.1 255.255.255.0
[R1-GigabitEthernet0/0/1] dhcp select global