VLAN实验

VLAN实验

1.实验要求
1.pc1和pc3所在接口为access；pvlan vlan2。
2.pc2、4、5、6处在同一网段，其中pc2可以访问pc4、5、6；pc4可以访问pc5，不能访问pc6；pc5不能访问pc6。
3.pc1、3和pc2、4、5、6不在同一网段，且pc1、3可以正常访问pc2、4、5、6。
4.所有pc通过DHCP获取ip地址。
2.实验拓扑

3.配置命令
lsw1上

[lsw1]vlan batch 2 to 5
[lsw1]interface e0/0/1
[lsw1-Ethernet0/0/1]port link-type access
[lsw1-Ethernet0/0/1]port default vlan 2

[lsw1]interface e0/0/2
[lsw1-Ethernet0/0/2]port link-type hybrid
[lsw1-Ethernet0/0/2]port hybrid untagged vlan 3 to 5
[lsw1-Ethernet0/0/2]port hybrid pvid vlan 3

[lsw1]interface g0/0/2
[lsw1-GigabitEthernet0/0/2]port link-type trunk
[lsw1-GigabitEthernet0/0/2]port trunk allow-pass vlan 2 to 5

lsw2上

[lsw2]vlan batch 2 to 5
[lsw2]interface g0/0/1
[lsw2-GigabitEthernet0/0/1]port hybrid tagged vlan 2 to 5

[lsw2]interface e0/0/1
[lsw2-Ethernet0/0/1]port link-type access
[lsw2-Ethernet0/0/1]port default vlan 2

[lsw2]interface e0/0/2
[lsw2-Ethernet0/0/2]port hybrid untagged vlan 3 to 4
[lsw2-Ethernet0/0/2]port hybrid pvid vlan 4

[lsw2]interface g0/0/2
[lsw2-GigabitEthernet0/0/2]port hybrid tagged vlan 2 to 5

lsw3上

[lsw3]vlan batch 2 to 5
[lsw3]interface g0/0/1
[lsw3-GigabitEthernet0/0/1]port hybrid tagged vlan 2 to 5

[lsw3]interface e0/0/1
[lsw3-Ethernet0/0/1]port hybrid untagged vlan 3 to 4
[lsw3-Ethernet0/0/1]port hybrid pvid vlan 4

[lsw3]interface e0/0/2
[lsw3-Ethernet0/0/2]port hybrid untagged vlan 3 5
[lsw3-Ethernet0/0/2]port hybrid pvid vlan 5
lsw1向上接口配置
[lsw1]interface g0/0/1
[lsw1-GigabitEthernet0/0/1]port hybrid untagged vlan 3 to 5
[lsw1-GigabitEthernet0/0/1]port hybrid tagged vlan 2

r1路由器上配置

[r1]interface g0/0/0
[r1-GigabitEthernet0/0/0]ip address 192.168.1.1 24
[r1-GigabitEthernet0/0/0]int g0/0/0.1
[r1-GigabitEthernet0/0/0.1]dot1q termination vid 2
[r1-GigabitEthernet0/0/0.1]ip address 192.168.2.1 24
[r1-GigabitEthernet0/0/0.1]arp broadcast enable
[r1-GigabitEthernet0/0/0.1]q
[r1]dhcp enable
[r1]ip pool 1
[r1-ip-pool-1]network 192.168.1.0 mask 255.255.255.0
[r1-ip-pool-1]gateway-list 192.168.1.1
[r1-ip-pool-1]dns-list 8.8.8.8 114.114.114.114
[r1-ip-pool-1]q
[r1]ip pool 2
[r1-ip-pool-2]network 192.168.2.0 mask 255.255.255.0
[r1-ip-pool-2]gateway-list 192.168.2.1
[r1-ip-pool-2]dns-list 8.8.8.8 114.114.114.114
[r1-ip-pool-2]q
[r1]interface g0/0/0
[r1-GigabitEthernet0/0/0]dhcp select global
[r1-GigabitEthernet0/0/0]q
[r1]interface GigabitEthernet 0/0/0.1
[r1-GigabitEthernet0/0/0.1]dhcp select global

pc机获取地址




按照实验要求使用ping命令测试