vlan实验

首先来说说vlan，它可以称为虚拟局域网 ，逻辑的将一个广播域切分为多个。需要在交换机上配置vlan，（使用的是华为的设备 “ensp”）
[Huawei]interface Ethernet0/0/1 //首先进入接口
[Huawei-Ethernet0/0/1]port link-type access //然后将该接口定义为接入模式
[Huawei-Ethernet0/0/1]port default vlan 2 // 再降该接口划分到对于的vlan中
vlan的划分又3种：
[sw1]interface Eth0/0/1
[sw1-Ethernet0/0/1]port link-type ? 选择不同的接口类型，管理员将具备不同的配置权限
access Access port
hybrid Hybrid port
trunk Trunk port
access：只能允许一个vlan进或出；修改该接口的默认vlan；及修改了允许列表和PVID；
配置命令：
**[Huawei]interface Ethernet0/0/1
[Huawei-Ethernet0/0/1]port link-type access //将该接口定义为接入模式access
[Huawei-Ethernet0/0/1]port default vlan 2 // **
trunk ：可以允许多个vlan进或出；也可以修改PVID；但不能修改字母，除PVID外的vlan，均字母为T；
配置命令：
[sw1]interface GigabitEthernet 0/0/1
[sw1-GigabitEthernet0/0/1]port link-type trunk //定义接口为trunk模式；
[sw1-GigabitEthernet0/0/1]port trunk allow-pass vlan 2 to 3

Hybrid：默认所有接口属于该类型 ，可以修改允许列表，可以修改PVID，可以修改字母。
配置命令：
[sw1]interface GigabitEthernet 0/0/1
[sw1-GigabitEthernet0/0/1]port link-type trunk //定义接口为trunk模式；
[sw1-Ethernet0/0/21]port hybrid tagged vlan 2 to 3
[sw1-Ethernet0/0/21]port hybrid untagged vlan 4 to 5
允许vlan2、3、4、5进或出；但2/3在出时携带vlan封装，4/5在出时不携带vlan封装；
[sw1-Ethernet0/0/21]port hybrid pvid vlan 2
修改PVID

题目要求是这样的，分析题目，pc1和pc3划到vlan2里面，pc2单独划到vlan3中，pc4和pc5划到vlan4里，pc5单独划到vlan5中。如图：

1.创建vlan

[sw1]vlan batch 2 3 4 5
[sw2]vlan batch 2 3 4 5
[sw3]vlan batch 2 3 4 5
Info: This operation may take a few seconds. Please wait for a moment...done.

2.交换机接口配置
首先pc1和pc3的接口为access

[sw1]interface GigabitEthernet 0/0/2
[sw1-GigabitEthernet0/0/2]port link-type access
[sw1-GigabitEthernet0/0/2]port default vlan 2

[sw2]interface GigabitEthernet 0/0/3
[sw2-GigabitEthernet0/0/3]port link-type access 
[sw2-GigabitEthernet0/0/3]port default vlan 2

pc2可以访问pc4 5 6 ，pc1 3 可以访问pc2 4 5 6则pc2可以访问全部，并且在出去时不带封装，则去vlan 2 3 4 5

[sw1]interface GigabitEthernet 0/0/3
[sw1-GigabitEthernet0/0/3]port link-type hybrid
[sw1-GigabitEthernet0/0/3]port hybrid pvid vlan 3
[sw1-GigabitEthernet0/0/3]port hybrid untagged vlan 2 3 4 5

pc4可以访问pc1 2 3 5 不能访问6，则不去vlan5，

[sw2]interface GigabitEthernet 0/0/4
[sw2-GigabitEthernet0/0/4]port link-type hybrid
[sw2-GigabitEthernet0/0/4]port hybrid pvid vlan 4 
[sw2-GigabitEthernet0/0/4]port hybrid untagged vlan 2 3 4 

pc1 2 3 4之间是互通的，所以sw1和sw2之间也之间可以写trunk，则

[sw1]interface GigabitEthernet 0/0/4
[sw1-GigabitEthernet0/0/4]port link-type trunk
[sw1-GigabitEthernet0/0/4]port trunk allow-pass vlan 2 3 4 5

[sw2]interface GigabitEthernet 0/0/1
[sw2-GigabitEthernet0/0/1]port link-type trunk
[sw2-GigabitEthernet0/0/1]port trunk allow-pass vlan 2 3 4 5

pc5不能访问pc6，则不去vlan5

[sw3]interface GigabitEthernet 0/0/2
[sw3-GigabitEthernet0/0/2]port link-type hybrid
[sw3-GigabitEthernet0/0/2]port hybrid pvid vlan 4
[sw3-GigabitEthernet0/0/2]port hybrid untagged vlan 2 3 4

pc6不访问pc4 和5，则不去vlan4，

[sw3]interface GigabitEthernet 0/0/3
[sw3-GigabitEthernet0/0/1]port link-type hybrid
[sw3-GigabitEthernet0/0/1]port hybrid pvid vlan 5
[sw3-GigabitEthernet0/0/1]port hybrid untagged vlan 2 3 5 

sw2和sw3之间只能用hybird，

[sw2]interface GigabitEthernet 0/0/2
[sw2-GigabitEthernet0/0/2]port link-type hybrid
[sw2-GigabitEthernet0/0/2]port hybrid tagged vlan 2 3 4 5

[sw3]interface GigabitEthernet 0/0/1
[sw3-GigabitEthernet0/0/2]port link-type hybrid
[sw3-GigabitEthernet0/0/2]port hybrid tagged vlan 2 3 4 5

sw1和r1之间，给vlan2打标签，vlan3 4 5不打标签，

[sw1]interface GigabitEthernet 0/0/1
[sw1-GigabitEthernet0/0/1]port link-type hybrid 
[sw1-GigabitEthernet0/0/1]port hybrid tagged vlan 2
[sw1-GigabitEthernet0/0/1]port hybrid untagged vlan 3 4 5

3.路由器的配置
因为pc2 4 5 6 是一个网段，pc1 3 是一个网段，所以创建子接口0/0/0.1和原接口0/0/0，2个网段，172.16.2.1/24和172.16.3.1/24分别给2个网段，并dhcp获取地址，则

[r1]interface GigabitEthernet 0/0/0.1
[r1-GigabitEthernet0/0/0.1]dot1q termination vid 2
[r1-GigabitEthernet0/0/0.1]ip address 172.16.2.1 24
[r1]interface GigabitEthernet 0/0/0
[r1-GigabitEthernet0/0/0]ip address 172.16.3.1 24
[r1]dhcp enable
Info: The operation may take a few seconds. Please wait for a moment.done.
[r1]ip pool 1
Info: It's successful to create an IP address pool.
[r1-ip-pool-1]network 172.16.2.0 mask 255.255.255.0
[r1-ip-pool-1]gateway-list 172.16.2.1
[r1-ip-pool-1]dns-list 114.114.114.114
[r1]ip pool 2
Info: It's successful to create an IP address pool.
[r1-ip-pool-2]network 172.16.3.0 mask 255.255.255.0
[r1-ip-pool-2]gateway-list 172.16.3.1
[r1-ip-pool-2]dns-list 114.114.114.114
[r1]interface GigabitEthernet 0/0/0.1
[r1-GigabitEthernet0/0/0.1]dhcp select global
[r1]interface GigabitEthernet 0/0/0
[r1-GigabitEthernet0/0/0]dhcp select global 

dhcp完成后给子接口一个arp服务，

[r1]interface GigabitEthernet 0/0/0.1
[r1-GigabitEthernet0/0/0.1]arp broadcast enable 

然后给pc开启DHCP服务，用ipconfig命令获取IPv4地址，测试就ok了。