在sw1 sw2上先将对应接口设置为access
[sw1-Ethernet0/0/1]port link-type access
[sw1-Ethernet0/0/1]port default vlan 2
[sw2-Ethernet0/0/1]port link-type access
[sw2-Ethernet0/0/1]port default vlan 2
对于各个sw之间配置为truank
[sw1-Ethernet0/0/1]port link-type truank
[sw1-Ethernet0/0/1]port truank allow-pass 2 to 5
对于sw1的e0/0/4口
希望它将vlan3、vlan4、vlan5的标签脱掉
将vlan2打上标签
以区分他们的流量
[sw1-Ethernet0/0/4]port hybrid tagged vlan 2
[sw1-Ethernet0/0/4]port hybrid untagged vlan 3 to 5
对于pc2它可以正常访问到pc4/5/6 也能通过路由器访问到pc1/3
[sw1-Ethernet0/0/2]port hybrid pvid vlan 3
[sw1-Ethernet0/0/2]port hybrid untagged vlan 3 to 5
对于pc4、pc5不能访问pc6
[sw3-Ethernet0/0/1]port hybrid pvid vlan 4
[sw3-Ethernet0/0/1]port hybrid untagged vlan 3 to 4
[sw2-Ethernet0/0/1]port hybrid pvid vlan 4
[sw2-Ethernet0/0/1]port hybrid untagged vlan 3 to 4
对于pc6,不能被pc4、pc5访问
[sw3-Ethernet0/0/2]port hybrid pvid vlan 5
[sw3-Ethernet0/0/2]port hybrid untagged vlan 3 5
来到R1上配置dhcp,物理接口为vlan3、4、5分配ip,子接口为vlan2分配ip
[r1]dhcp enable
Info: The operation may take a few seconds. Please wait for a moment.done.
[r1]int g0/0/0
[r1-GigabitEthernet0/0/0]ip ad 192.168.2.1 24
Aug 7 2022 23:05:41-08:00 r1 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP on the interface GigabitEthernet0/0/0 has entered the UP state.
[r1-GigabitEthernet0/0/0]q
[r1]int g0/0/0.1
[r1-GigabitEthernet0/0/0.1]dot1q termination vid 2
[r1-GigabitEthernet0/0/0.1]ip ad 192.168.1.1 24
Aug 7 2022 23:06:06-08:00 r1 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP on the interface GigabitEthernet0/0/0.1 has entered the UP state.
[r1-GigabitEthernet0/0/0.1]arp broadcast enable
[r1-GigabitEthernet0/0/0.1]q
[r1]ip pool v2
Info: It's successful to create an IP address pool.
[r1-ip-pool-v2]network 192.168.1.0 ma 24
[r1-ip-pool-v2]gate 192.168.1.1
[r1-ip-pool-v2]dns 8.8.8.8
[r1-ip-pool-v2]q
[r1]ip pool v345
Info: It's successful to create an IP address pool.
[r1-ip-pool-v345]network 192.168.2.0 ma 24
[r1-ip-pool-v345]gate 192.168.2.1
[r1-ip-pool-v345]dns 8.8.8.8
[r1-ip-pool-v345]q
[r1]int g0/0/0
[r1-GigabitEthernet0/0/0]dhcp select global
[r1-GigabitEthernet0/0/0]int g0/0/0.1
[r1-GigabitEthernet0/0/0.1]dhcp se g
测试
pc1 访问 pc 2 4 5 6
pc4 pc5 无法访问 pc6