VLAN技术

1. pc1和pc3所在接口为access;属于vlan2;
pc2/pc4/pc5/pc6处于同一网段；其中 pc2可以访问pc4/pc5/pc6;
pc4可以访问pc6;pc5不能访问pc6;

在三个交换机上创建2-6的vlan

[sw1]vlan batch 2 to 6

[sw2]vlan batch 2 to 6

[sw3]vlan batch 2 to 6

配置

sw1

[sw1]int g0/0/1
[sw1-GigabitEthernet0/0/1]port link-type access 
[sw1-GigabitEthernet0/0/1]port default vlan 2
[sw1-GigabitEthernet0/0/1]int g0/0/2
[sw1-GigabitEthernet0/0/2]port hybrid pvid vlan 3
[sw1-GigabitEthernet0/0/2]port hybrid untagged vlan 3 to 6
[sw1]int g0/0/3
[sw1-GigabitEthernet0/0/3]port link-type trunk 
[sw1-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 to 6
[sw1-GigabitEthernet0/0/3]q
 

sw2

[sw2]int g0/0/1
[sw2-GigabitEthernet0/0/1]port link-type access
[sw2-GigabitEthernet0/0/1]port default vlan 2
[sw2-GigabitEthernet0/0/1]int g0/0/2
[sw2-GigabitEthernet0/0/2]port hybrid pvid vlan 4
[sw2-GigabitEthernet0/0/2]port hybrid untagged vlan 3 to 6
[sw2-GigabitEthernet0/0/2]int g0/0/3
[sw2-GigabitEthernet0/0/3]port link-type trunk 
[sw2-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 to 6
[sw2-GigabitEthernet0/0/3]int g0/0/4
[sw2-GigabitEthernet0/0/4]port trunk allow-pass vlan 2 to 6
[sw2-GigabitEthernet0/0/4]q
 

sw3

[sw3]int g0/0/1
[sw3-GigabitEthernet0/0/1]port hybrid pvid vlan 5
[sw3-GigabitEthernet0/0/1]port hybrid untagged vlan 3 to 5
[sw3-GigabitEthernet0/0/1]int g0/0/2
[sw3-GigabitEthernet0/0/2]port hybrid pvid vlan 6
[sw3-GigabitEthernet0/0/2]port hybrid untagged vlan 3 4 6
[sw3-GigabitEthernet0/0/2]int g0/0/3
[sw3-GigabitEthernet0/0/3]port link-type trunk 
[sw3-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 to 6
[sw3-GigabitEthernet0/0/3]q

[sw1]int g0/0/4
[sw1-GigabitEthernet0/0/4]port hybrid untagged vlan 3 4 5 6
[sw1-GigabitEthernet0/0/4]port hybrid tagged vlan 2
[sw1-GigabitEthernet0/0/4]q
 

2. pc1/pc3与pc2/pc4/pc5/pc6不在同一网段；

因为pc1与pc3处于不同网段，所以pc1、pc3访问时需要通过建立子接口访问

[R1]int g0/0/0
[R1-GigabitEthernet0/0/0]ip add 192.168.1.1 24
[R1-GigabitEthernet0/0/0]int g0/0/0.1
[R1-GigabitEthernet0/0/0.1]ip add 192.168.2.1 24
[R1-GigabitEthernet0/0/0.1]dot1q termination vid 2
[R1-GigabitEthernet0/0/0.1]arp broadcast enable 
[R1-GigabitEthernet0/0/0.1]q
 

3.所有pC通过DHCP获取IP地址， 且pc1/pc3可以正常访问pc2/pc4/pc5/pc6;

R1

[R1]dhcp en

[R1]ip pool aa
Info: It's successful to create an IP address pool.
[R1-ip-pool-aa]netw 192.168.1.0 mask 24
[R1-ip-pool-aa]gateway-list 192.168.1.1
[R1-ip-pool-aa]dns-list 8.8.8.8
[R1-ip-pool-aa]q
[R1]int g0/0/0
[R1-GigabitEthernet0/0/0]dhcp select global 
[R1-GigabitEthernet0/0/0]q
[R1]ip pool bb
Info: It's successful to create an IP address pool.
[R1-ip-pool-bb]netw 192.168.2.0 mask 24
[R1-ip-pool-bb]gateway-list 192.168.2.1
[R1-ip-pool-bb]dns-list 8.8.8.8
[R1-ip-pool-bb]q
[R1]int g0/0/0.1
[R1-GigabitEthernet0/0/0.1]dhcp select global
[R1-GigabitEthernet0/0/0.1]q

 

测试：

其中 pc2可以访问pc4/pc5/pc6;

pc4可以访问pc6;

pc5不能访问pc6;

pc1/pc3可以正常访问pc2/pc4/pc5/pc6;