文章目录
题目
一.题目分析
1.pc1和pc2在同一网段且同在vlan1(vlan1是默认的)
2.交换机上都需要创建vlan和划分vlan
二.实验步骤
1.在sw1上创建vlan,基于接口划分vlan
[sw1]vlan batch 2 3 10
[sw1]int g0/0/2
[sw1-GigabitEthernet0/0/2]port link-type access(access接口类型只允许一个vlan通过)
[sw1-GigabitEthernet0/0/2]port default vlan 2
[sw1]int g0/0/3
[sw1-GigabitEthernet0/0/3]port link-ty access
[sw1-GigabitEthernet0/0/3]port default vlan 3
[sw1-GigabitEthernet0/0/3]int g0/0/4
[sw1-GigabitEthernet0/0/4]port link-type trunk (交换机之间接口换成trunk类型)
[sw1-GigabitEthernet0/0/4]port trunk allow-pass vlan 2 3 10
2.在sw2上创建vlan,基于接口划分vlan
[sw2]vlan batch 2 3 10
[sw2]int g0/0/2
[sw2-GigabitEthernet0/0/2]port link-type access
[sw2-GigabitEthernet0/0/2]port default vlan 3
[sw2]int g0/0/3
[sw2-GigabitEthernet0/0/3]port link-type access
[sw2-GigabitEthernet0/0/3]port default vlan 10
[sw2]int g0/0/1
[sw2-GigabitEthernet0/0/1]port link-type trunk
[sw2-GigabitEthernet0/0/1]port trunk allow-pass vlan 2 3 10
3.配置接口地址
[r1]int g0/0/0
[r1-GigabitEthernet0/0/0]ip ad 10.1.2.1 24
[r2]int g0/0/0
[r2-GigabitEthernet0/0/0]ip ad 10.1.10.1 24
[sw3]vlan 3
[sw3-vlan3]q
[sw3]int vlanif 3 (在交换机上创建逻辑接口,让交换机可以配置IP地址)
[sw3-Vlanif3]ip ad 10.1.3.1 24
[sw4]vlan 3
[sw4-vlan3]q
[sw4]int vlanif 3
[sw4-Vlanif3]ip ad 10.1.3.2 24
4.在sw3/4上创建vlan,基于接口划分vlan
[sw3]int g0/0/1
[sw3-GigabitEthernet0/0/1]port link-type access
[sw3-GigabitEthernet0/0/1]port default vlan 3
[sw4]int g0/0/1
[sw4-GigabitEthernet0/0/1]port link-type access
[sw4-GigabitEthernet0/0/1]port default vlan 3
测试发现vlan3内的交换机可以互通
5.完成第四条要求
[sw1]int g0/0/4
[sw1-GigabitEthernet0/0/4]undo port trunk allow-pass vlan 1
[sw2]int g0/0/1
[sw2-GigabitEthernet0/0/1]undo port trunk allow-pass vlan 1
没有敲这条命令之前是可以使pc1/2互通,敲完这条命令之后就不可以了,因为ensp是默认vlan1 的
6.基于mac地址划分vlan
首先查看ar2的mac地址(命令是dis interface g0/0/0)如下图:
[sw2]vlan 10
[sw2-vlan10]mac-vlan mac-address 00e0-fcf3-150e (将mac地址划分到vlan10)
[sw2-vlan10]q
[sw2]int g0/0/1
[sw2-GigabitEthernet0/0/1]int g0/0/3
[sw2-GigabitEthernet0/0/3]port link-type hybrid (基于mac地址划分的vlan推荐用hybrid,接收多个vlan不带标签通过)
[sw2-GigabitEthernet0/0/3]port hybrid untagged vlan 10
[sw2-GigabitEthernet0/0/3]mac-vlan enable
[sw1]int g0/0/5
[sw1-GigabitEthernet0/0/5]port link-type access
[sw1-GigabitEthernet0/0/5]port default vlan 10
测试一下pc3与ar2是否通了:
三.实验总结
1.如果把sw3换成CE6800交换机可以在接口使用命令(undo portswitch)把二层接口转换成三层接口,这样就可以配置IP地址,s5700和s3700版本比较低无法通过此命令来转换接口.