VLAN 综合实验

一、实验拓扑

 二、实验目的

1、pc1和pc3所在接口为access;属于vlan 2;
pc2/pc4/pc5/pc6处于同一网段;其中pc2可以访问pc4/pc5/pc6;但pc4可以访问pc6;pc5不能访问pc6；
2、pc1/pc3与pc2/pc4/pc5/pc6不在同一网段;
3、所有pc通过DHCP获取IP地址，且pc1/pc3可以正常访问pc2/pc4/pc5/pc6;

三、实验过程

设置各接口类型
PC1和PC3按照题中意思配置为access
PC2、4、5、6由于指定了可访问的PC所以配置为hybrid
交换机之间配置trunk允许多个vlan的数据帧通过

[SW1]vlan batch 2 to 6           #创建vlan
[SW1]int g0/0/2                  #进入接口
[SW1-GigabitEthernet0/0/2]port link-type access    #设置接口类型位access
[SW1-GigabitEthernet0/0/2]port default vlan 2      #定义此接口的vlan

[SW1-GigabitEthernet0/0/2]int g0/0/3	
[SW1-GigabitEthernet0/0/3]port hybrid pvid vlan 3   #默认接口类型为hybrid，故可以不用修改，修改默认vlan  
[SW1-GigabitEthernet0/0/3]port hybrid untagged vlan 3 4 5 6 #配置hybrid撕标签放行的vlan列表

[SW1]int g0/0/4
[SW1-GigabitEthernet0/0/4]port link-type trunk 	#定义此接口为trunk链路
[SW1-GigabitEthernet0/0/4]port trunk allow-pass vlan 2 to 6  #定义此接口可放通所有vlan帧型

[SW2]vlan batch 2 to 6
[SW2]int g0/0/3
[SW2-GigabitEthernet0/0/3]port link-type access 
[SW2-GigabitEthernet0/0/3]port default vlan 2


[SW2]port-group group-member g0/0/1 to g0/0/2  #创建组
[SW2-port-group]port link-type trunk 
[SW2-GigabitEthernet0/0/1]port link-type trunk 
[SW2-GigabitEthernet0/0/2]port link-type trunk  
[SW2-port-group]port trunk allow-pass vlan 2 to 6
[SW2-GigabitEthernet0/0/1]port trunk allow-pass vlan 2 to 6
[SW2-GigabitEthernet0/0/2]port trunk allow-pass vlan 2 to 6

[SW3]vlan batch 2 to 6

[SW3]int g0/0/2
[SW3-GigabitEthernet0/0/2]port hybrid pvid vlan 5	
[SW3-GigabitEthernet0/0/2]port hybrid untagged vlan 3 to 5
[SW3-GigabitEthernet0/0/2]int g0/0/3	
[SW3-GigabitEthernet0/0/3]port hybrid pvid vlan 6	
[SW3-GigabitEthernet0/0/3]port hybrid untagged vlan 3 4 6

[SW3-GigabitEthernet0/0/1]port link-type trunk 
[SW3-GigabitEthernet0/0/1]port trunk allow-pass vlan 2 to 6
[SW1-GigabitEthernet0/0/1]port hybrid untagged vlan 3 to 6
[SW1-GigabitEthernet0/0/1]port hybrid tagged vlan 2

在三层设备上配置接口和子接口的IP地址，并将数据封装成802.1Q的帧
使用DHCP获取IP地址

[R1]int g0/0/0
[R1-GigabitEthernet0/0/0]ip add 192.168.1.1 24 
[R1-GigabitEthernet0/0/0]int g0/0/0.2          #创建子接口
[R1-GigabitEthernet0/0/0.2]ip add 192.168.2.1 24   #配置子接口ip地址
[R1-GigabitEthernet0/0/0.2]dot1q termination vid 2  #将数据封装成802.1Q的帧
[R1-GigabitEthernet0/0/0.2]arp broadcast enable     

[R1]dhcp enable  #开启DHCP服务
[R1]ip pool aa	 #创建地址池
[R1-ip-pool-aa]network 192.168.1.0 mask 24   #给地址池里分配IP地址
[R1-ip-pool-aa]gateway-list 192.168.1.1      #配置网关地址
[R1-ip-pool-aa]dns-list 114.114.114.144      #配置DNS服务器地址
[R1]ip pool bb
[R1-ip-pool-bb]network 192.168.2.0 mask 24
[R1-ip-pool-bb]gateway-list 192.168.2.1
[R1-ip-pool-bb]dns-list 114.114.114.114
[R1-ip-pool-bb]q
#进入相应的接口下，下发DHCP服务
[R1]int g0/0/0	 
[R1-GigabitEthernet0/0/0]dhcp select global 
[R1-GigabitEthernet0/0/0.1]int g0/0/0.2	
[R1-GigabitEthernet0/0/0.2]dhcp select global 

测试：