实验要求
- PC1和PC3所在接口为access且pvlan为vlan2;
- PC2/4/5/6处于同一网段;
- 其中PC2可以访问PC4/5/6;
- PC4可以访问PC5,但不能访问PC6
- PC5不能访问PC6;
- 所有PC通过DHCP获取IP地址;
实验拓扑图
解决思路
- 根据实验要求,划分4个vlan区域;
- PC1和PC3划分到vlan2,PC2划分到vlan3,PC4和PC5划分到vlan4,PC6划分到vlan5;
- 根据要求,PC1和PC3的接口模式设置为access,其他PC的接口模式均不变,为默认模式hybrid,并对其允许列表进行限制,以此来实现各PC之间的访问要求;
- 交换机之间的接口模式全部设置为trunk,并允许所有vlan通过且不剥离标签;
- 路由器开启DHCP服务,配置两个DHCP池塘,分别下发给相同网段的PC;
实验过程
交换机s1的配置:
[s1]vlan batch 2 to 5 //创建vlan2到vlan5
Info: This operation may take a few seconds. Please wait for a moment...done.
[s1]int g0/0/1
[s1-GigabitEthernet0/0/1]port link-type access //设置接口模式为access
[s1-GigabitEthernet0/0/1]port default vlan 2 //将该端口加入到vlan2
[s1]int g0/0/2
[s1-GigabitEthernet0/0/2]port hybrid pvid vlan 3 //设置该端口的pvid为vlan3
[s1-GigabitEthernet0/0/2]port hybrid untagged vlan 3 to 5 //允许vlan3~vlan5不携带标签通过
[s1] int g0/0/24
[s1-GigabitEthernet0/0/24]port link-type trunk //设置连接到交换机s2的接口模式为trunk
[s1-GigabitEthernet0/0/24]port trunk allow-pass vlan 2 to 5 //允许所有vlan2~vlan5通过
[s1-GigabitEthernet0/0/24] int g0/0/23 配置连接路由器的接口
[s1-GigabitEthernet0/0/23]port hybrid tagged vlan 2 允许vlan2带标签通过
[s1-GigabitEthernet0/0/23]port hybrid untagged vlan 3 to 5 允许vlan3~vlan5不带标签通过
交换机s2的配置:
[s2]vlan batch 2 to 5
Info: This operation may take a few seconds. Please wait for a moment...done.
[s2]int g0/0/1
[s2-GigabitEthernet0/0/1]port link-type access
[s2-GigabitEthernet0/0/1]port default vlan 2
[s2-GigabitEthernet0/0/1]int g0/0/2
[s2-GigabitEthernet0/0/2]port hybrid pvid vlan 4
[s2-GigabitEthernet0/0/2]port hybrid untagged vlan 3 to 4
[s2-GigabitEthernet0/0/2]int g0/0/23
[s2-GigabitEthernet0/0/23]port link-type trunk
[s2-GigabitEthernet0/0/23]port trunk allow-pass vlan 2 to 5
[s2-GigabitEthernet0/0/23]int g0/0/24
[s2-GigabitEthernet0/0/24]port link-type trunk
[s2-GigabitEthernet0/0/24]port trunk allow-pass vlan 2 to 5
[s2-GigabitEthernet0/0/24]q
交换机s3的配置:
[s3]vlan batch 2 to 5
Info: This operation may take a few seconds. Please wait for a moment...done.
[s3]int g0/0/1
[s3-GigabitEthernet0/0/1]port hybrid pvid vlan 4
[s3-GigabitEthernet0/0/1]port hybrid untagged vlan 3 to 4
[s3-GigabitEthernet0/0/1]int g0/0/2
[s3-GigabitEthernet0/0/2]port hybrid pvid vlan 5
[s3-GigabitEthernet0/0/2]port hybrid untagged vlan 3
[s3-GigabitEthernet0/0/2]int g0/0/23
[s3-GigabitEthernet0/0/23]port link-type trunk
[s3-GigabitEthernet0/0/23]port trunk allow-pass vlan 2 to 5
[s3-GigabitEthernet0/0/23]q
路由器人r1的配置:
[r1]int g0/0/0
[r1-GigabitEthernet0/0/0]ip add 192.168.1.1 24 //设置该端口的IP地址,作为DHCP池塘vlan1的网关
[r1-GigabitEthernet0/0/0]int g0/0/0.1 //创建子接口,作为DHCP池塘vlan2的网关
[r1-GigabitEthernet0/0/0.1]dot1q termination vid 2
[r1-GigabitEthernet0/0/0.1]ip add 192.168.2.1 24
[r1-GigabitEthernet0/0/0.1]arp broadcast enable //开启ARP广播协议
[r1]dhcp enable //开启DHCP服务
Info: The operation may take a few seconds. Please wait for a moment.done.
[r1]ip pool vlan1 //创建DHCP池塘vlan1
Info: It's successful to create an IP address pool.
[r1-ip-pool-vlan1]gateway-list 192.168.1.1 //网关
[r1-ip-pool-vlan1]network 192.168.1.0 mask 255.255.255.0 //宣告下发IP地址的范围
[r1-ip-pool-vlan1]dns-list 223.5.5.5 //DNS服务器
[r1-ip-pool-vlan1]int g0/0/0
[r1-GigabitEthernet0/0/0]dhcp select global //调用DHCP池塘
[r1-GigabitEthernet0/0/0]q
[r1]ip pool vlan2
Info: It's successful to create an IP address pool.
[r1-ip-pool-vlan2]gateway-list 192.168.2.1
[r1-ip-pool-vlan2]network 192.168.2.0 mask 255.255.255.0
[r1-ip-pool-vlan2]dns-list 223.5.5.5
[r1-ip-pool-vlan2]int g0/0/0.1
[r1-GigabitEthernet0/0/0.1]dhcp select global
[r1-GigabitEthernet0/0/0.1]q
查看各交换机下的接口状态:
[s1]dis port vlan active
T=TAG U=UNTAG
-------------------------------------------------------------------------------
Port Link Type PVID VLAN List
-------------------------------------------------------------------------------
GE0/0/1 access 2 U: 2
GE0/0/2 hybrid 3 U: 1 3 to 5
GE0/0/23 hybrid 1 U: 1 3 to 5
T: 2
GE0/0/24 trunk 1 U: 1
T: 2 to 5
[s2]dis port vlan active
T=TAG U=UNTAG
-------------------------------------------------------------------------------
Port Link Type PVID VLAN List
-------------------------------------------------------------------------------
GE0/0/1 access 2 U: 2
GE0/0/2 hybrid 4 U: 1 3 to 4
GE0/0/23 trunk 1 U: 1
T: 2 to 5
GE0/0/24 trunk 1 U: 1
T: 2 to 5
[s3]dis port vlan active
T=TAG U=UNTAG
-------------------------------------------------------------------------------
Port Link Type PVID VLAN List
-------------------------------------------------------------------------------
GE0/0/1 hybrid 4 U: 1 3 to 4
GE0/0/2 hybrid 5 U: 1 3 5
GE0/0/23 trunk 1 U: 1
T: 2 to 5
实验结果
打开各PC机的DHCP服务:
PC1:
PC>ipconfig
Link local IPv6 address...........: fe80::5689:98ff:fe52:7187
IPv6 address......................: :: / 128
IPv6 gateway......................: ::
IPv4 address......................: 192.168.2.254
Subnet mask.......................: 255.255.255.0
Gateway...........................: 192.168.2.1
Physical address..................: 54-89-98-52-71-87
DNS server........................: 223.5.5.5
PC2:
PC>ipconfig
Link local IPv6 address...........: fe80::5689:98ff:fe4c:283d
IPv6 address......................: :: / 128
IPv6 gateway......................: ::
IPv4 address......................: 192.168.1.254
Subnet mask.......................: 255.255.255.0
Gateway...........................: 192.168.1.1
Physical address..................: 54-89-98-4C-28-3D
DNS server........................: 223.5.5.5
PC3:
PC>ipconfig
Link local IPv6 address...........: fe80::5689:98ff:fedd:69ea
IPv6 address......................: :: / 128
IPv6 gateway......................: ::
IPv4 address......................: 192.168.2.253
Subnet mask.......................: 255.255.255.0
Gateway...........................: 192.168.2.1
Physical address..................: 54-89-98-DD-69-EA
DNS server........................: 223.5.5.5
PC4:
PC>ipconfig
Link local IPv6 address...........: fe80::5689:98ff:fe76:296b
IPv6 address......................: :: / 128
IPv6 gateway......................: ::
IPv4 address......................: 192.168.1.253
Subnet mask.......................: 255.255.255.0
Gateway...........................: 192.168.1.1
Physical address..................: 54-89-98-76-29-6B
DNS server........................: 223.5.5.5
PC5:
PC>ipconfig
Link local IPv6 address...........: fe80::5689:98ff:fea1:55db
IPv6 address......................: :: / 128
IPv6 gateway......................: ::
IPv4 address......................: 192.168.1.252
Subnet mask.......................: 255.255.255.0
Gateway...........................: 192.168.1.1
Physical address..................: 54-89-98-A1-55-DB
DNS server........................: 223.5.5.5
PC6:
PC>ipconfig
Link local IPv6 address...........: fe80::5689:98ff:fe06:76d9
IPv6 address......................: :: / 128
IPv6 gateway......................: ::
IPv4 address......................: 192.168.1.251
Subnet mask.......................: 255.255.255.0
Gateway...........................: 192.168.1.1
Physical address..................: 54-89-98-06-76-D9
DNS server........................: 223.5.5.5
PC1 ping PC3:
PC>ping 192.168.2.253
Ping 192.168.2.253: 32 data bytes, Press Ctrl_C to break
From 192.168.2.253: bytes=32 seq=1 ttl=128 time=63 ms
From 192.168.2.253: bytes=32 seq=2 ttl=128 time=47 ms
From 192.168.2.253: bytes=32 seq=3 ttl=128 time=63 ms
From 192.168.2.253: bytes=32 seq=4 ttl=128 time=62 ms
From 192.168.2.253: bytes=32 seq=5 ttl=128 time=47 ms
--- 192.168.2.253 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 47/56/63 ms
PC2 ping PC3,PC4,PC5:
PC>ping 192.168.1.253
Ping 192.168.1.253: 32 data bytes, Press Ctrl_C to break
From 192.168.1.253: bytes=32 seq=1 ttl=128 time=63 ms
From 192.168.1.253: bytes=32 seq=2 ttl=128 time=62 ms
From 192.168.1.253: bytes=32 seq=3 ttl=128 time=63 ms
From 192.168.1.253: bytes=32 seq=4 ttl=128 time=62 ms
From 192.168.1.253: bytes=32 seq=5 ttl=128 time=63 ms
--- 192.168.1.253 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 62/62/63 ms
PC>ping 192.168.1.252
Ping 192.168.1.252: 32 data bytes, Press Ctrl_C to break
From 192.168.1.252: bytes=32 seq=1 ttl=128 time=94 ms
From 192.168.1.252: bytes=32 seq=2 ttl=128 time=47 ms
From 192.168.1.252: bytes=32 seq=3 ttl=128 time=78 ms
From 192.168.1.252: bytes=32 seq=4 ttl=128 time=78 ms
From 192.168.1.252: bytes=32 seq=5 ttl=128 time=78 ms
--- 192.168.1.252 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 47/75/94 ms
PC>ping 192.168.1.251
Ping 192.168.1.251: 32 data bytes, Press Ctrl_C to break
From 192.168.1.251: bytes=32 seq=1 ttl=128 time=93 ms
From 192.168.1.251: bytes=32 seq=2 ttl=128 time=79 ms
From 192.168.1.251: bytes=32 seq=3 ttl=128 time=78 ms
From 192.168.1.251: bytes=32 seq=4 ttl=128 time=78 ms
From 192.168.1.251: bytes=32 seq=5 ttl=128 time=63 ms
--- 192.168.1.251 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 63/78/93 ms
PC4 ping PC5,PC4 ping PC6:
PC>ping 192.168.1.252
Ping 192.168.1.252: 32 data bytes, Press Ctrl_C to break
From 192.168.1.252: bytes=32 seq=1 ttl=128 time=47 ms
From 192.168.1.252: bytes=32 seq=2 ttl=128 time=62 ms
From 192.168.1.252: bytes=32 seq=3 ttl=128 time=63 ms
From 192.168.1.252: bytes=32 seq=4 ttl=128 time=47 ms
From 192.168.1.252: bytes=32 seq=5 ttl=128 time=47 ms
--- 192.168.1.252 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 47/53/63 ms
PC>ping 192.168.1.251
Ping 192.168.1.251: 32 data bytes, Press Ctrl_C to break
From 192.168.1.253: Destination host unreachable
From 192.168.1.253: Destination host unreachable
From 192.168.1.253: Destination host unreachable
From 192.168.1.253: Destination host unreachable
From 192.168.1.253: Destination host unreachable
--- 192.168.1.251 ping statistics ---
5 packet(s) transmitted
0 packet(s) received
100.00% packet loss
PC5 ping PC6:
PC>ping 192.168.1.251
Ping 192.168.1.251: 32 data bytes, Press Ctrl_C to break
From 192.168.1.252: Destination host unreachable
From 192.168.1.252: Destination host unreachable
From 192.168.1.252: Destination host unreachable
From 192.168.1.252: Destination host unreachable
From 192.168.1.252: Destination host unreachable
--- 192.168.1.251 ping statistics ---
5 packet(s) transmitted
0 packet(s) received
100.00% packet loss