1.实验要求
1.pc1和pc3所在接口为access;且均为vlan2;
2.pc2/4/5/6 处于同一网段,其中pc2可以访问pc4/5/6;
pc4可以访问pc5,不能访问pc6;pc5不能访问pc6;
3.pc1/3与pc2/4/5/6不在一个网段;
4.所有PC通过DHCP获取ip地址,且PC1/3可以正常访问PC2/4/5/6
2.拓扑搭建
3.实验配置
sw1
[sw1]vlan batch 2 to 5
[sw1]interface g0/0/2
[sw1-GigabitEthernet0/0/2]port link-type access
[sw1-GigabitEthernet0/0/2]port default vlan 2
[sw1-GigabitEthernet0/0/2]int g0/0/3
[sw1-GigabitEthernet0/0/3]po
[sw1-GigabitEthernet0/0/3]port hybrid pvid vlan 3
[sw1-GigabitEthernet0/0/3]port hybrid untagged vlan 3 4 5
[sw1-GigabitEthernet0/0/3]int g0/0/4
[sw1-GigabitEthernet0/0/4]port link-type trunk
[sw1-GigabitEthernet0/0/4]port trunk allow-pass vlan 2 to 5
[sw1-GigabitEthernet0/0/4]int g0/0/1
[sw1-GigabitEthernet0/0/1]port hybrid tagged vlan 2
[sw1-GigabitEthernet0/0/1]port hybrid untagged vlan 3 to 5
sw2
[sw2]int g0/0/1
[sw2-GigabitEthernet0/0/1]port link-type trunk
[sw2-GigabitEthernet0/0/1]port trunk allow-pass vlan 2 to 5
[sw2-GigabitEthernet0/0/1]q
[sw2]vlan batch 2 to 5
Info: This operation may take a few seconds. Please wait for a moment...done.
[sw2]int g0/0/3
[sw2-GigabitEthernet0/0/3]port link-type access
[sw2-GigabitEthernet0/0/3]port default vlan 2
[sw2-GigabitEthernet0/0/3]int g0/0/4
[sw2-GigabitEthernet0/0/4]port hybrid pvid vlan 4
[sw2-GigabitEthernet0/0/4]po
[sw2-GigabitEthernet0/0/4]port hybrid untagged vlan 3 to 4
[sw2-GigabitEthernet0/0/4]int g0/0/2
[sw2-GigabitEthernet0/0/2]port hybrid tagged vlan 2 to 5
sw3
[sw3]int g0/0/1
[sw3-GigabitEthernet0/0/1]port hybrid tagged vlan 2 to 5
[sw3-GigabitEthernet0/0/1]q
[sw3]vlan batch 2 to 5
[sw3]int g0/0/2
[sw3-GigabitEthernet0/0/2]port hybrid pvid vlan 4
[sw3-GigabitEthernet0/0/2]port hybrid untagged vlan 3 to 4
[sw3-GigabitEthernet0/0/2]int g0/0/3
[sw3-GigabitEthernet0/0/3]port hybrid pvid vlan 5
[sw3-GigabitEthernet0/0/3]port hybrid untagged vlan 3 5
r1
[r1]int g0/0/0
[r1-GigabitEthernet0/0/0]ip add 192.168.1.1 24
[r1-GigabitEthernet0/0/0]q
[r1]int g0/0/0.1
[r1-GigabitEthernet0/0/0.1]dot1q termination vid 2
[r1-GigabitEthernet0/0/0.1]ip add 192.168.2.1 24
[r1-GigabitEthernet0/0/0.1]arp broadcast enable
[r1-GigabitEthernet0/0/0.1]q
[r1]dhcp enable
Info: The operation may take a few seconds. Please wait for a moment.done.
[r1]ip pool a
Info: It's successful to create an IP address pool.
[r1-ip-pool-a]network 192.168.1.0 mask 24
[r1-ip-pool-a]q
[r1]ip pool b
Info: It's successful to create an IP address pool.
[r1-ip-pool-b]network 192.168.2.0 mask 24
[r1-ip-pool-b]gateway-list 192.168.2.1
[r1-ip-pool-b]int g0/0/0
[r1-GigabitEthernet0/0/0]dhcp select global
[r1-GigabitEthernet0/0/0]int g0/0/0.1
[r1-GigabitEthernet0/0/0.1]dhcp select global
电脑自动获取ip地址
测试
pc1访问pc3
pc2可以访问pc4/5/6;
pc4可以访问pc5,不能访问pc6;pc5不能访问pc6;