vlan配置

PC1和PC3所在接口为access;pvlan vlan2
PC2/4/5/6处于同一网段，其中PC2可以访问PC4/5/6；但PC4可以访问PC5，不能访问PC6
PC5不能访问PC6
PC1/3与PC2/4/6不在一个网段
所有PC通过DHCP获取IP地址，且PC1/3可以正常访问PC2/4/5/6

创建VLAN，VLAN 2/3/4/5/6
划分VLAN，pc1/3在vlan2，pc2 vlan3,pc4 vlan4,pc5 vlan5,pc6 vlan6
改类型，pc1和pc3是access因为是同一局域网，交换机之间是trunk

 

命令

[sw1]vlan batch 2 to 5    
[sw1-GigabitEthernet0/0/2]port link-type access     
[sw1-GigabitEthernet0/0/2]port default vlan 02

[sw1-GigabitEthernet0/0/2]int g0/0/3    
[sw1-GigabitEthernet0/0/3]port hybrid pvid vlan 3    
[sw1-GigabitEthernet0/0/3]port hybrid untagged vlan 3 to 5

[sw1-GigabitEthernet0/0/3]int g0/0/4    
[sw1-GigabitEthernet0/0/4]port link-type trunk 
[sw1-GigabitEthernet0/0/4]port trunk allow-pass vlan 2 to 4094

[sw2]vlan batch 2 to 5
[sw2-GigabitEthernet0/0/2]port link-type access     
[sw2-GigabitEthernet0/0/2]port default vlan 2

[sw2-GigabitEthernet0/0/2]int g0/0/3    
[sw2-GigabitEthernet0/0/3]port hybrid pvid vlan 4    
[sw2-GigabitEthernet0/0/3]port hybrid untagged vlan 3 to 4

[sw2-GigabitEthernet0/0/3]int g0/0/4    
[sw2-GigabitEthernet0/0/4]port link-type trunk 
[sw2-GigabitEthernet0/0/4]port trunk allow-pass vlan 2 to 4094

[sw2]int g0/0/1    
[sw2-GigabitEthernet0/0/1]port link-type trunk     
[sw2-GigabitEthernet0/0/1]port trunk allow-pass vlan 2 to 4094

[sw3]vlan batch 2 to 5
[sw3-GigabitEthernet0/0/2]port hybrid pvid vlan 4    
[sw3-GigabitEthernet0/0/2]port hybrid untagged vlan 3 to 4

[sw3-GigabitEthernet0/0/2]int g0/0/3
[sw3-GigabitEthernet0/0/3]port hybrid pvid vlan 5    
[sw3-GigabitEthernet0/0/3]port hybrid untagged vlan 3 5

[sw3]int g0/0/1    
[sw3-GigabitEthernet0/0/1]port link-type trunk 
[sw3-GigabitEthernet0/0/1]port trunk allow-pass vlan 3 to 4094

[sw1]int g0/0/1        
[sw1-GigabitEthernet0/0/1]port hybrid tagged vlan 2
[sw1-GigabitEthernet0/0/1]port hybrid untagged vlan 3 to 5

路由器开启dhcp

[r1]dhcp enable 

[r1]ip pool v1
Info: It's successful to create an IP address pool.
[r1-ip-pool-v1]gateway-list 192.168.1.1
[r1-ip-pool-v1]network 192.168.1.0 mask 255.255.255.0
[r1-ip-pool-v1]dns-list 8.8.8.8
[r1]
[r1]ip pool v2
Info: It's successful to create an IP address pool.
[r1-ip-pool-v2]gateway-list 192.168.2.1    
[r1-ip-pool-v2]network 192.168.2.0 mask 255.255.255.0
[r1-ip-pool-v2]dns-list 8.8.8.8
[r1]
[r1]int g0/0/0
[r1-GigabitEthernet0/0/0]ip add 192.168.1.1 255.255.255.0
[r1-GigabitEthernet0/0/0]dhcp select global 
[r1]
[r1]int g0/0/0.1    
[r1-GigabitEthernet0/0/0.1]dot1q termination vid 2          划分vlan2
[r1-GigabitEthernet0/0/0.1]ip add 192.168.2.1 255.255.255.0    
[r1-GigabitEthernet0/0/0.1]arp broadcast enable     arp广播开启
[r1-GigabitEthernet0/0/0.1]dhcp select global 

实验结果

dhcp获取（部分展示）

pc1pingpc3

 

5不能到6

 

4可以到5不能到6

 

2到6