实验需求:
1.PC1/3的接口均为access模式,且属于van2,在同一网段。
2.PC2/4/5/6的IP地址在同一网段,与PC1/3不在同一网段。
3.PC2可以访问4/5/6,PC4不能访问5/6,PC5不能访问PC6。
4.所有PC通过DHCP获取ip地址,PC1/3可以访问PC2/4/5/6
实验步骤:
1.拓扑搭建
2.创建VLAN
[SW1]vlan batch 2 to 4
[SW2]vlan batch 2 to 4
3.接口划分
[SW1]int e0/0/1
[SW1-Ethernet0/0/1] port link-type access
[SW1-Ethernet0/0/1] port default vlan 2
[SW1]int e0/0/3
[SW1-Ethernet0/0/3] port link-type access
[SW1-Ethernet0/0/3] port default vlan 2
[SW1-Ethernet0/0/1] int e0/0/2
[SW1-Ethernet0/0/2] port hybrid pvid vlan 3
[SW1-Ethernet0/0/2] port hybrid untagged vlan 3 to 4
[SW1-Ethernet0/0/2]int e0/0/4
[SW1-Ethernet0/0/4] port hybrid pvid vlan 4
[SW1-Ethernet0/0/4] port hybrid tagged vlan 4
[SW1-Ethernet0/0/4] port hybrid untagged vlan 3
[SW1-Ethernet0/0/4]int g0/0/2
[SW1-GigabitEthernet0/0/2] port link-type trunk
[SW1-GigabitEthernet0/0/2] port trunk allow-pass vlan
[SW2]int g0/0/2
[SW2-GigabitEthernet0/0/2] port hybrid tagged vlan 2 to 4
[SW2-GigabitEthernet0/0/2]int e0/0/5
[SW2-Ethernet0/0/5] port hybrid pvid vlan 4
[SW2-Ethernet0/0/5] port hybrid tagged vlan 4
[SW2-Ethernet0/0/5] port hybrid untagged vlan 3
[SW2-Ethernet0/0/5]int e0/0/6
[SW2-Ethernet0/0/6] port hybrid pvid vlan 4
[SW2-Ethernet0/0/6] port hybrid tagged vlan 4
[SW2-Ethernet0/0/6] port hybrid untagged vlan 3
[SW1-GigabitEthernet0/0/2]int g0/0/1
[SW1-GigabitEthernet0/0/1] port hybrid tagged vlan 2
[SW1-GigabitEthernet0/0/1] port hybrid untagged vlan 3 to 4
4.创建,绑定DHCP地址池
[R1] int g0/0/1.1
[R1-GigabitEthernet0/0/1.1] dot1q termination vid 2
[R1-GigabitEthernet0/0/1.1] ip address 192.168.1.1 255.255.255.0
[R1-GigabitEthernet0/0/1.1] arp broadcast enable
[R1-GigabitEthernet0/0/1.1] dhcp select global
[R1-GigabitEthernet0/0/1.1] int g0/0/1
[R1-GigabitEthernet0/0/1] ip address 192.168.2.1 255.255.255.0
[R1-GigabitEthernet0/0/1] dhcp select global
5.实验验证