VLAN实验

实验要求
1、pc1和pc3所在接口为access；vlan2；pc2/4/5/6处于同一网段；其中pc2可以访问pc4/5/6；但pc4可以访问pc5，不能访问pc6
2、pc5不能访问pc6
3、pc1/3与pc2/4/5/6不在一个网段
4、所有pc通过DHCP获取ip地址，且pc1/3可以正常访问pc2/4/5/6
一、搭建拓扑

二、交换机及路由器的具体配置

1.在sw1上创建vlan

[sw1]vlan batch 2 to 5

 sw1在e0/0/1上的接口为access

[sw1]int e0/0/1
[sw1-Ethernet0/0/1]port link-flap
[sw1-Ethernet0/0/1]port link-type access
[sw1-Ethernet0/0/1]port discard 
[sw1-Ethernet0/0/1]port default vlan 2

sw1在e0/0/2上的接口为hybrid

[sw1-Ethernet0/0/1]int e 0/0/2
[sw1-Ethernet0/0/2]port hybrid pvid 3 
[sw1-Ethernet0/0/2]port hybrid untagged vlan 3 to 5

在sw1与路由器的接口之间配置trunk

[sw1-Ethernet0/0/2]int g 0/0/2
[sw1-GigabitEthernet0/0/2]port link-flap
[sw1-GigabitEthernet0/0/2]port link-type trunk

[sw1-GigabitEthernet0/0/2]port trunk allow-pass vlan 2 to 5

划分vlan

[sw1-GigabitEthernet0/0/2]int g 0/0/1
[sw1-GigabitEthernet0/0/1]port hybrid tagged vlan2
[sw1-GigabitEthernet0/0/1]port untagged vlan 3 to 5

 2.在sw2上创建vlan

[sw2]vlan batch 2 to 5

sw2在e0/0/1上的接口为access

[sw2]int e0/0/1
[sw2-Ethernet0/0/1]port link-flap
[sw2-Ethernet0/0/1]port link-type access
[sw2-Ethernet0/0/1]port discard 
[sw2-Ethernet0/0/1]port default vlan 2

sw2在e0/0/2上的接口为hybrid

[sw2-Ethernet0/0/1]int e 0/0/2
[sw2-Ethernet0/0/2]port hybrid pvid 4
[sw2-Ethernet0/0/2]port hybrid untagged vlan 3 to 4

在sw2与sw1的接口之间配置trunk

[sw2-Ethernet0/0/2]int g 0/0/2
[sw2-GigabitEthernet0/0/2]port link-flap
[sw2-GigabitEthernet0/0/2]port link-type trunk

[sw2-GigabitEthernet0/0/2]port trunk allow-pass vlan 2 to 5

划分vlan

[sw2-GigabitEthernet0/0/2]int g 0/0/1
[sw2-GigabitEthernet0/0/1]port untagged vlan 2 to 5

3.在sw3上创建vlan

[sw2]vlan batch 2 to 5

sw3在e0/0/1上的接口为hybrid

[sw3-Ethernet0/0/1]int e 0/0/2
[sw3-Ethernet0/0/1]port hybrid pvid 4
[sw3-Ethernet0/0/1]port hybrid untagged vlan 3 to 4

sw3在e0/0/2上的接口为hybrid

[sw2-Ethernet0/0/2]port hybrid pvid 5
[sw2-Ethernet0/0/2]port hybrid untagged vlan 3 5

在sw3与sw2的接口之间配置trunk

[sw3-Ethernet0/0/2]int g 0/0/1
[sw3-GigabitEthernet0/0/1]port link-flap
[sw3-GigabitEthernet0/0/1]port link-type trunk

[sw3-GigabitEthernet0/0/1]port trunk allow-pass vlan 2 to 5

4.配置路由器r1

为r1配置ip地址

[r1]int g0/0/0
[r1-GigabitEthernet0/0/0]ip a 192.168.1.1 24

[r1]int g0/0/0.1
[r1-GigabitEthernet0/0/0.1]ip a 192.168.2.1 24
[r1-GigabitEthernet0/0/0.1]dot1q termination vid 2
[r1-GigabitEthernet0/0/0.1]arp broadcast enable 

开启dhcp服务

[r1]dhcp enable

[r1]int g0/0/0
[r1-GigabitEthernet0/0/0]dhcp select global
[r1-GigabitEthernet0/0/0]int g 0/0/0.1
[r1-GigabitEthernet0/0/0.1]dhcp select global

vlan2ip池配置

[r1]ip pool v2
[r1-ip-pool-v2]network 192.168.2.0 ma 24
[r1-ip-pool-v2]gateway-list 192.168.2.1
[r1-ip-pool-v2]dns-list 144.144.144.144 0.0.8.8
[r1-ip-pool-v2]quit

vlan3ip池配置

[r1]ip pool v3
[r1-ip-pool-v3]network 192.168.1.0 ma 24
[r1-ip-pool-v3]gateway-list 192.168.1.1
[r1-ip-pool-v3]dns-list 144.144.144.144 8.8.8.8
[r1-ip-pool-v3]quit

三、实验目的验证

1.所有pc可以通过dhcp获取ip地址