vlan虚拟局域，单臂路由，ACL

实验1-vlan虚拟局域网实验

1.交换机上创建vlan信息：

[Huawei]vlan batch 2 3

2.将接口划入vlan中：

接口下逐一配置

LSW1

1）进入接口[Huawei]interface Ethernet0/0/1

2）更改接口类型[Huawei-Ethernet0/0/1]port
link-type access

3）划入vlan。[Huawei-Ethernet0/0/1]port default vlan 2

[Huawei-Ethernet0/0/1]q

[Huawei]interface Ethernet0/0/2

[Huawei-Ethernet0/0/2]port link-type access

[Huawei-Ethernet0/0/2]port default vlan 2

[Huawei-Ethernet0/0/2]q

[Huawei]interface Ethernet0/0/3

[Huawei-Ethernet0/0/3]port link-type access

[Huawei-Ethernet0/0/3]port default vlan 3

[Huawei-Ethernet0/0/3]q

同理LSW2

[Huawei]vlan batch 2 3

[Huawei-Ethernet0/0/1]port link-type access

[Huawei-Ethernet0/0/1]port default vlan 2

[Huawei-Ethernet0/0/1]q

[Huawei]interface Ethernet0/0/2

[Huawei-Ethernet0/0/2]port link-type access

[Huawei-Ethernet0/0/2]port default vlan 3

[Huawei-Ethernet0/0/2]q

Pc配置ip地址

Pc1 192.168.1.2 255.255.255.0

Pc2-5同理

上述操作可实现交换机内部下的同一个vlan 通信

3.配置trunk端vlan属性

LSW1

1）进入接口[Huawei]interface
Ethernet0/0/4

2）更改接口类型[Huawei-Ethernet0/0/4]port
link-type trunk

3）允许通过的vlan [Huawei-Ethernet0/0/4]port trunk
allow-pass vlan all

LSW2

[Huawei]interface Ethernet0/0/3

[Huawei-Ethernet0/0/3]port link-type trunk

[Huawei-Ethernet0/0/3]port trunk allow-pass
vlan all

[Huawei-Ethernet0/0/3]q

[Huawei]dis vlan查看接口所划入的vlan是否正确

添加上述操作可实现LSW1中的vlan2与LSW2的 vlan 2通信

实验2单臂路由实验——基于虚拟局域网实验（可实现全网通）