一、实验要求
1、pc1和pc3 所有接口为access; pvlan vlan2
2、PC2/4/5/6 处于同一个网段;其中pc2可以访问pc4/5/6;但pc4可以访问pc5,不能访问PC6
3、pc5不能PC6
4、PC1/3不在同一个网段
5、所有PC通过DHCP获取IP地址且PC1/3 可以正常访问pc2/4/5/6
二、实验过程
1、在交换机上创建vlan 划分接口
[sw1]vlan batch 2 to 5 #创建vlan
[sw1]int e0/0/1 #把接口划分到vlan中
[sw1-Ethernet0/0/1]port link-type access
[sw1-Ethernet0/0/1]port default vlan 2
[sw1-Ethernet0/0/1]q
[sw1]int e0/0/3 #使用hybrid混杂模式并划分vlan
[sw1-Ethernet0/0/3]port hybrid pvid vlan 3
[sw1-Ethernet0/0/3]port hybrid untagged vlan 3 to 5
[sw1-Ethernet0/0/3]q
[sw1]int e0/0/2
[sw1-Ethernet0/0/2]port link-type trunk
[sw1-Ethernet0/0/2]port trunk allow-pass vlan 2 to 5
[sw1-Ethernet0/0/2]q
[sw1]int g0/0/1
[sw1-GigabitEthernet0/0/1]port hybrid tagged vlan 2
[sw1-GigabitEthernet0/0/1]port hybrid untagged vlan 3 to 5
[sw2]int e0/0/1
[sw2-Ethernet0/0/1]port link-type trunk
[sw2-Ethernet0/0/1]port trunk allow-pass vlan 2 to 5
[sw2-Ethernet0/0/3]port link-type access
[sw2-Ethernet0/0/3]port default vlan 2
[sw2]int e0/0/4
[sw2-Ethernet0/0/4]port hybrid pvid vlan 4
[sw2-Ethernet0/0/4]port hybrid untagged vlan 3 to 4
[sw2]int e0/0/2
[sw2-Ethernet0/0/2]port hybrid tagged vlan 2 to 5
[sw3]vlan batch 2 to 5
[sw3-Ethernet0/0/1]port link-type trunk
[sw3-Ethernet0/0/1]port trunk allow-pass vlan 2 to 5
[sw3-Ethernet0/0/1]q
[sw3]int e0/0/2
[sw3-Ethernet0/0/2]port hybrid pvid vlan 4
[sw3-port-group-hybrid]port hybrid untagged vlan 3 to 4
[sw3-port-group-hybrid]q
[sw3]int e0/0/3
[sw3-Ethernet0/0/3]port hybrid pvid vlan 5
[sw3-Ethernet0/0/3]port hybrid untagged vlan 3 5
2、在路由器上配置子接口,dhcp
[r1]interface g0/0/0
[r1-GigabitEthernet0/0/0]ip ad 192.168.1.1 24
[r1-GigabitEthernet0/0/0]q
[r1]int g0/0/0.1
[r1-GigabitEthernet0/0/0.1]dot1q termination v
[r1-GigabitEthernet0/0/0.1]dot1q termination vid 2
[r1-GigabitEthernet0/0/0.1]ip address 192.168.2.1 24
[r1-GigabitEthernet0/0/0.1]arp broadcast enable
[r1-GigabitEthernet0/0/0.1]q
[r1]dhcp enable
[r1]ip pool v2
[r1-ip-pool-v2]network 192.168.2.0 mask 24
[r1-ip-pool-v2]gateway-list 192.168.2.1
[r1-ip-pool-v2]dns-list 114.114.114.114 8.8.8.8
[r1-ip-pool-v3]network 192.168.1.0 m
[r1-ip-pool-v3]network 192.168.1.0 mask 24
[r1-ip-pool-v3]gateway-list 192.168.1.1
[r1-ip-pool-v3]dns-list 114.114.114.114 8.8.8.8
[r1]int g0/0/0
[r1-GigabitEthernet0/0/0]dhcp select global
[r1-GigabitEthernet0/0/0]q
[r1]int g0/0/0.1
[r1-GigabitEthernet0/0/0.1]dhcp select global