目录
实验拓扑
实验要求
1、pc1和pc3所在接口为access;属于vlan 2; PC2/PC4/PC5/PC6处于同一网段;其中PC2可以访问PC4/PC5/PC6; PC4可以访问PC6;PC5不能访问PC6; 2.PC1/PC3与PC2/PC4/PC5/PC6不在同一网段; 3.所有pc通过DHCP获取Ip地址,且pc1/pc3可以正常访问pc2/pc4/pc5/pc6;
实验思路
1.给PC端配置IP (但由于题中说了PC端用DHCP自动获取,所以就直接应用DHCP就好;) 2.给交换机配置vlan技术 3.给路由器配置地址(其中有一个子接口),以及创建两个地址池 --- 一个给有标签的vlan,一个给没有标签的vlan
实验步骤
1.在交换机上配置vlan技术
SW1:
[SW1]vlan batch 2 to 6 --- 创建vlan
[SW1]int g0/0/2
[SW1-GigabitEthernet0/0/2]port link-type access
[SW1-GigabitEthernet0/0/2]port default vlan 2
[SW1-GigabitEthernet0/0/2]int g0/0/3
[SW1-GigabitEthernet0/0/3]port hybrid pvid vlan 3
[SW1-GigabitEthernet0/0/3]port hybrid untagged vlan 3 to 6
[SW1-GigabitEthernet0/0/3]dis this
#
interface GigabitEthernet0/0/3
port hybrid pvid vlan 3
port hybrid untagged vlan 3 to 6
#
return
[SW1]int g0/0/1
[SW1-GigabitEthernet0/0/1]port link-type trunk
[SW1-GigabitEthernet0/0/1]port trunk allow-pass vlan 2 to 6
[SW1-GigabitEthernet0/0/1]int g0/0/4
[SW1-GigabitEthernet0/0/4]port hybrid untagged vlan 3 to 6
[SW1-GigabitEthernet0/0/4]port hybrid tagged vlan 2
[SW1-GigabitEthernet0/0/4]dis this
#
interface GigabitEthernet0/0/4
port hybrid tagged vlan 2
port hybrid untagged vlan 3 to 6
#
return
SW2:
[SW2]vlan batch 2 to 6
[SW2]int g0/0/3
[SW2-GigabitEthernet0/0/3]port link-type access
[SW2-GigabitEthernet0/0/3]port default vlan 2
[SW2-GigabitEthernet0/0/3]int g0/0/1
[SW2-GigabitEthernet0/0/1]port link-type trunk
[SW2-GigabitEthernet0/0/1]port trunk allow-pass vlan 2 to 6
[SW2-GigabitEthernet0/0/1]dis this
#
interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 2 to 6
#
return
[SW2-GigabitEthernet0/0/3]int g0/0/4
[SW2-GigabitEthernet0/0/4]port hybrid pvid vlan 4
[SW2-GigabitEthernet0/0/4]port hybrid untagged vlan 3 to 6
[SW2-GigabitEthernet0/0/4]int g0/0/2
[SW2-GigabitEthernet0/0/2]port link-type trunk
[SW2-GigabitEthernet0/0/2]port trunk allow-pass vlan 2 to 6
SW3:
[SW3]vlan batch 2 to 6
[SW3]int g0/0/1
[SW3-GigabitEthernet0/0/1]port link-type trunk
[SW3-GigabitEthernet0/0/1]port trunk allow-pass vlan 2 to 6
[SW3-GigabitEthernet0/0/1]dis this
#
interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 2 to 6
#
return
[SW3-GigabitEthernet0/0/1]int g0/0/2
[SW3-GigabitEthernet0/0/2]port hybrid pvid vlan 5
[SW3-GigabitEthernet0/0/2]port hybrid untagged vlan 3 4 5
[SW3-GigabitEthernet0/0/2]dis this
#
interface GigabitEthernet0/0/2
port hybrid pvid vlan 5
port hybrid untagged vlan 3 to 5
#
return
[SW3-GigabitEthernet0/0/2]int g0/0/3
[SW3-GigabitEthernet0/0/3]port hybrid pvid vlan 6
[SW3-GigabitEthernet0/0/3]dis this
#
interface GigabitEthernet0/0/3
port hybrid pvid vlan 6
port hybrid untagged vlan 3 to 4 6
#
return
2.给路由器配置地址
[R1]int g0/0/0 [R1-GigabitEthernet0/0/0]ip add 192.168.1.1 24 [R1-GigabitEthernet0/0/0]int g0/0/0.1 --- 创建子接口 [R1-GigabitEthernet0/0/0.1]ip add 192.168.2.1 24 [R1-GigabitEthernet0/0/0.1]dot1q termination vid 2 [R1-GigabitEthernet0/0/0.1]arp broadcast enable --- 开启arp广播功能 [R1]dis ip int b
[R1]dhcp enable --- 开启DHCP服务功能 [R1]ip pool aa --- 创建地址池 Info: It's successful to create an IP address pool. [R1-ip-pool-aa]network 192.168.2.0 mask 24 --- 宣告网段 [R1-ip-pool-aa]gateway-list 192.168.2.1 --- 写网关 [R1-ip-pool-aa]dns-list 8.8.8.8 --- 配置dns域名服务器地址 [R1-ip-pool-aa]q [R1]int g0/0/0.1 --- 进入子接口,将dhcp服务下发 [R1-GigabitEthernet0/0/0.1]dhcp select global [R1-ip-pool-aa]dis this --- 查看配置 [V200R003C00] # ip pool aa gateway-list 192.168.2.1 network 192.168.2.0 mask 255.255.255.0 # return [R1]ip pool bb Info: It's successful to create an IP address pool. [R1-ip-pool-bb]network 192.168.1.0 mask 24 [R1-ip-pool-bb]gateway-list 192.168.1.1 [R1-ip-pool-bb]dns-list 8.8.8.8 [R1-ip-pool-bb]q [R1]int g0/0/0 [R1-GigabitEthernet0/0/0]dhcp select global [R1-GigabitEthernet0/0/0]dis this [V200R003C00] # interface GigabitEthernet0/0/0 ip address 192.168.1.1 255.255.255.0 dhcp select global # return
3.查看PC端是否获取到IP
PC1
PC2
PC3
PC4
PC5
PC6
4.简单做了测试,题中的要求满足
PC5不能访问PC6
实验完成!