VLAN综合实验

 1.PC1和Pc3所在接口为 access ;属于vlan2;PC2/4/5/6处于同一网段；其中PC2可以访问PC4/5/6;但PC4可以访问PC5，不能访问PC6
2.PC5不能访问PC6
3.PC1/3与PC2/4/5/6不在同一个网段
4.所有 PC 通过 DHCP 获取 IP 地址，且PC1/3可以正常访问PC2/4/5/6

1.有VLAN先做VLAN

首先创建VLAN

[lsw1]vlan batch 2 to 6
[lsw2]vlan batch 2 to 6
[lsw3]vlan batch 2 to 6

然后划分接口，再配置trunk干道

[lsw1]int g0/0/1
[lsw1-GigabitEthernet0/0/1]port link-type access 
[lsw1-GigabitEthernet0/0/1]port default vlan 2
[lsw1-GigabitEthernet0/0/1]int g0/0/2	
[lsw1-GigabitEthernet0/0/2]port link-type hybrid 
[lsw1-GigabitEthernet0/0/2]port hybrid pvid vlan 3
[lsw1-GigabitEthernet0/0/2]port hybrid  untagged vlan 3 4 5 6
[lsw1-GigabitEthernet0/0/2]int g0/0/3
[lsw1-GigabitEthernet0/0/3]port link-type trunk 	
[lsw1-GigabitEthernet0/0/3]port trunk allow-pass vlan all
[lsw1-GigabitEthernet0/0/3]int g0/0/4
[lsw1-GigabitEthernet0/0/4]port hybrid tagged vlan 2
[lsw1-GigabitEthernet0/0/4]port hybrid untagged vlan 3 4 5 6

[lsw2]int g0/0/1	
[lsw2-GigabitEthernet0/0/1]port link-type access 
[lsw2-GigabitEthernet0/0/1]port default vlan 2
[lsw2-GigabitEthernet0/0/1]int g0/0/2
[lsw2-GigabitEthernet0/0/2]port link-type hybrid 
[lsw2-GigabitEthernet0/0/2]port hybrid pvid vlan 4
[lsw2-GigabitEthernet0/0/2]port hybrid  untagged vlan 3 4 5
[lsw2-GigabitEthernet0/0/2]int g0/0/3
[lsw2-GigabitEthernet0/0/3]port link-type trunk 	
[lsw2-GigabitEthernet0/0/3]port trunk allow-pass vlan all
[lsw2-GigabitEthernet0/0/2]int g0/0/4
[lsw2-GigabitEthernet0/0/3]port link-type trunk 	
[lsw2-GigabitEthernet0/0/3]port trunk allow-pass vlan all

[lsw3]int g0/0/1
[lsw3-GigabitEthernet0/0/1]port link-type hybrid
[lsw3-GigabitEthernet0/0/1]port hybrid pvid vlan 5
[lsw3-GigabitEthernet0/0/1]port hybrid  untagged vlan 3 4 5
[lsw3-GigabitEthernet0/0/1]int g0/0/2
[lsw3-GigabitEthernet0/0/2]port link-type hybrid
[lsw3-GigabitEthernet0/0/2]port hybrid pvid vlan 6
[lsw3-GigabitEthernet0/0/2]int g0/0/3
[lsw3-GigabitEthernet0/0/3]port link-type trunk
[lsw3-GigabitEthernet0/0/3]port trunk allow-pass vlan all

最后实现VLAN间路由

[r1]int g0/0/0.1
[r1-GigabitEthernet0/0/0.1]ip add	
[r1-GigabitEthernet0/0/0.1]ip address 192.168.1.1 24 	
[r1-GigabitEthernet0/0/0.1]dot1q termination vid 2
[r1-GigabitEthernet0/0/0.1]arp broadcast enable 
[r1-GigabitEthernet0/0/0.1]q
[r1]int g0/0/0
[r1-GigabitEthernet0/0/0]ip address 192.168.2.1 24
[r1-GigabitEthernet0/0/0]q
[r1]dhcp enable 	
[r1]ip pool aa
[r1-ip-pool-aa]network 192.168.1.0 mask 24
[r1-ip-pool-aa]gateway-list 192.168.1.1
[r1-ip-pool-aa]dns-list 114.114.114.114
[r1-ip-pool-aa]q	
[r1]ip pool bb
[r1-ip-pool-bb]network 192.168.2.0 mask 24	
[r1-ip-pool-bb]dns-list 114.114.114.114
[r1]int g0/0/0.1	
[r1-GigabitEthernet0/0/0.1]dhcp select global 
[r1-GigabitEthernet0/0/0]dhcp select global