VLAN实验

题目及ip、vlan划分如下图

创建VLAN及划分vlan端口

SW1

创建vlan

SW1

[sw1]port-group group-member Ethernet 0/0/1 Ethernet 0/0/3
[sw1-port-group]port link-type access 
[sw1-Ethernet0/0/1]port link-type access 
[sw1-Ethernet0/0/3]port link-type access 
[sw1-port-group]port default vlan 2
[sw1-Ethernet0/0/1]port default vlan 2
[sw1-Ethernet0/0/3]port default vlan 2

查看

更改E0/0/2的PVID和允许列表

[sw1]int E0/0/2
[sw1-Ethernet0/0/2]port hybrid pvid vlan 3
[sw1-Ethernet0/0/2]port hybrid untagged vlan 3 to 6

更改E0/0/4的PVID和允许列表

SW1

[sw1]int E0/0/4
[sw1-Ethernet0/0/4]port hybrid pvid vlan 4	
[sw1-Ethernet0/0/4]port hybrid untagged vlan 3 to 4

SW2

创建vlan

SW2

[sw2]vlan batch 2 to 6

更改E0/0/1的PVID和允许列表

SW2

[sw2]int E0/0/1
[sw2-Ethernet0/0/1]port hybrid pvid vlan 5
[sw2-Ethernet0/0/1]port hybrid untagged vlan 3 5

更改E0/0/2的PVID和允许列表

SW2

[sw2]int E0/0/2
[sw2-Ethernet0/0/2]port hybrid pvid vlan 6
[sw2-Ethernet0/0/2]port hybrid untagged vlan 3 6

SW1和SW2之间的Trunk干道

SW1

[sw1]int E0/0/5
[sw1-Ethernet0/0/5]port link-type trunk 
[sw1-Ethernet0/0/5]port trunk allow-pass vlan 2 to 6

查看列表

SW2

[sw2]int E0/0/3
[sw2-Ethernet0/0/3]port hybrid tagged vlan 2 to 6

查看

R1和SW1之间的Trunk干道

SW1

[sw1]int E0/0/6
[sw1-Ethernet0/0/6]port hybrid tagged vlan 2
[sw1-Ethernet0/0/6]port hybrid untagged vlan 3 to 6

查看

路由器R1的配置

配置网关

R1

[R1]int G0/0/0
[R1-GigabitEthernet0/0/0]ip add 192.168.1.1 24

Trunk干道和DHCP服务

[R1]int G0/0/0.1
[R1-GigabitEthernet0/0/0.1]dot1q termination vid 2
[R1-GigabitEthernet0/0/0.1]ip address 192.168.2.1 24
[R1-GigabitEthernet0/0/0.1]q
[R1]dhcp enable 
[R1]ip pool v2
[R1-ip-pool-v2]network 192.168.2.0 mask 24
[R1-ip-pool-v2]gateway-list 192.168.2.1
[R1]ip pool v3-v6
Info: It's successful to create an IP address pool.
[R1-ip-pool-v3-v6]network 192.168.1.0 mask 24
[R1-ip-pool-v3-v6]gateway-list 192.168.1.1
[R1-ip-pool-v3-v6]q
[R1]int G0/0/0
[R1-GigabitEthernet0/0/0]dhcp select global 
[R1-GigabitEthernet0/0/0]q
[R1]int G0/0/0.1
[R1-GigabitEthernet0/0/0.1]dhcp select global 
[R1-GigabitEthernet0/0/0.1]arp broadcast enable  	

测试

各个PC通过DHCP获取的IP地址

PC1

PC2

PC3

PC4

PC5

PC6

各个PC之间的通与不通

PC2可以访问4/5/6

PC4不能访问5/6

PC5不能访问PC6

PC1/3可以访问PC2/4/5/6
PC1

PC3