HCIP-DAY12-交换

实验要求：
1 pc1和pc3所在的接口为access；pvlan vlan2；
2 pc2/4/5/6处于同一个网段；其中PC2可以访问PC4/5/6;但PC4可以访问PC5，不能访问PC6.
3 pc5不能访问PC6、
4 PC1/3与pc2/4/5/6不在一个网段
5 所有PC通过DHCP获取IP地址，且PC1/3可以正常访问PC2/4/5/6。

根据要求:
划分6个VLAN：vlan2（pc1 pc3）；vlan3(PC2);van4 pc4 ;vlan5 pc5;vlan6 pc6
划分两个网段：192.168.1.0/24（pc1 pc3）；192.168.2.0/24（pc2/4/5/6）


根据要求:
pc2可以访问PC4/5/6，pc4和访问pc5，pc4和pc5不能访问pc6

华为混杂模式
PC2 pvid 3  u 23456
pc4 pvid 4  u 2345
pc5 pvid 5  u 2345
pc6 pvid 6  u 236

配置vlan

[sw1]vlan batch 2 to 3
[sw1]int g0/0/3
[sw1-GigabitEthernet0/0/3]port link-type access 
[sw1-GigabitEthernet0/0/3]port default vlan 2
[sw1-GigabitEthernet0/0/3]



[sw2]vlan batch 2 to 3
[sw2]int g0/0/3
[sw2-GigabitEthernet0/0/3]port link-type access 
[sw2-GigabitEthernet0/0/3]port default vlan 2
[sw2-GigabitEthernet0/0/3]

配置trunk

[sw1]int g0/0/1
[sw1-GigabitEthernet0/0/2]port link-type trunk 
[sw1-GigabitEthernet0/0/2]port trunk allow-pass vlan  2 to 3
[sw1-GigabitEthernet0/0/2]

[sw2]int g0/0/1
[sw2-GigabitEthernet0/0/1]port link-type trunk 
[sw2-GigabitEthernet0/0/1]port trunk allow-pass vlan all 
[sw2-GigabitEthernet0/0/1]int g0/0/2
[sw2-GigabitEthernet0/0/2]port link-type trunk 	
[sw2-GigabitEthernet0/0/2]port trunk allow-pass vlan 2 to 3
[sw2-GigabitEthernet0/0/2]

[sw3]int g0/0/1
[sw3-GigabitEthernet0/0/1]port link-type trunk 
[sw3-GigabitEthernet0/0/1]port trunk allow-pass vlan a
[sw3-GigabitEthernet0/0/1]

配置DHCP

[R1]int g0/0/0.1
[R1-GigabitEthernet0/0/0.1]dot1q termination vid 2 
[R1-GigabitEthernet0/0/0.1]ip addr 192.168.1.1 24
[R1-GigabitEthernet0/0/0.1]arp broadcast enable 
[R1-GigabitEthernet0/0/0.1]int g0/0/0
[R1-GigabitEthernet0/0/0]ip addr 192.168.2.1 24


[R1]dhcp enable 
[R1]int g0/0/0.1
[R1-GigabitEthernet0/0/0.1]dhcp select global 
[R1-GigabitEthernet0/0/0.1]int g0/0/0
[R1-GigabitEthernet0/0/0]dhcp select global 

[R1]ip pool vlan2 
[R1-ip-pool-vlan2]gateway-list 192.168.1.1
[R1-ip-pool-vlan2]network 192.168.1.0 mask 255.255.255.
[R1-ip-pool-vlan2]dns-list 114.114.114.114

[R1]ip pool vlan3
[R1-ip-pool-vlan3]gateway-list 192.168.2.1
[R1-ip-pool-vlan3]network 192.168.2.0 mask 255.255.255.0
[R1-ip-pool-vlan3]dns-list 114.114.114.114
[R1-ip-pool-vlan3]


[sw1]int g0/0/1
 port hybrid tagged vlan 2
 port hybrid untagged vlan 3 to 6

验证DHCP 

[r1]dis cu 
[V200R003C00]
#
 sysname r1
#
dhcp enable
#
ip pool vlan2
 gateway-list 192.168.1.1 
 network 192.168.1.0 mask 255.255.255.0 
 dns-list 114.114.114.114 
#
ip pool vlan3
 gateway-list 192.168.2.1 
 network 192.168.2.0 mask 255.255.255.0 
 dns-list 114.114.114.114 
#
interface GigabitEthernet0/0/0
 ip address 192.168.2.1 255.255.255.0 
 dhcp select global
#
interface GigabitEthernet0/0/0.1
 dot1q termination vid 2
 ip address 192.168.1.1 255.255.255.0 
 arp broadcast enable
 dhcp select global
[r1] 

[sw1]dis cu 
#
sysname sw1
#
vlan batch 2 to 6
#
interface GigabitEthernet0/0/1
 port hybrid tagged vlan 2
 port hybrid untagged vlan 3 to 6
#
interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
#
interface GigabitEthernet0/0/3
 port hybrid pvid vlan 2
 port hybrid untagged vlan 2
#
interface GigabitEthernet0/0/4
 port hybrid pvid vlan 3
 port hybrid untagged vlan 3 to 6
#
user-interface con 0
 idle-timeout 0 0
user-interface vty 0 4
#
return
[sw1]

[sw2]dis cu 
#
sysname sw2
#
vlan batch 2 to 6
#
interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 2 to 6
#
interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk pvid vlan 2
 port trunk allow-pass vlan 2 to 6
#
interface GigabitEthernet0/0/3
 port link-type access
 port default vlan 2
#
interface GigabitEthernet0/0/4
 port hybrid pvid vlan 4
 port hybrid untagged vlan 3 to 5
#
user-interface con 0
 idle-timeout 0 0
user-interface vty 0 4
#
port-group link-type
#
return
[sw2]

[sw3]dis cu 
#
sysname sw3
#
vlan batch 2 to 6
#
interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk pvid vlan 2
 port trunk allow-pass vlan 2 to 6
#
interface GigabitEthernet0/0/2
#
interface GigabitEthernet0/0/3
 port hybrid pvid vlan 5
 port hybrid untagged vlan 3 to 5
#
interface GigabitEthernet0/0/4
 port hybrid pvid vlan 6
 port hybrid untagged vlan 3 6
#
user-interface con 0
 idle-timeout 0 0
user-interface vty 0 4
#
return
[sw3]