VLAN实验

一、实验拓扑

 

二、实验要求

1、PC1/3的接口均为access模式，且属于vlan2，在同一网段

2、PC2/4/5/6的IP地址在同一网段，与PC1/3不在同一网段

3、PC2可以访问4/5/6，PC4不能访问/，PC5不能访问PC6

4、所有PC通过DHCP获取IP地址，PC1/3可以访问PC2/4/5/6

三、实验步骤

1、配置SW1的PC1-5

[SW1]vlan batch 2 to 6
Info: This operation may take a few seconds. Please wait for a moment...done. 
[SW1]port-group group-member Ethernet 0/0/1 Ethernet 0/0/3 
[SW1-port-group]port link-type access 
[SW1-Ethernet0/0/1]port link-type access 
[SW1-Ethernet0/0/3]port link-type access 
[SW1-port-group]port default vlan 2
[SW1-Ethernet0/0/1]port default vlan 2
[SW1-Ethernet0/0/3]port default vlan 2

[SW1-port-group]q

检验：

 

[SW1]int e0/0/2
[SW1-Ethernet0/0/2]por    
[SW1-Ethernet0/0/2]port hy    
[SW1-Ethernet0/0/2]port hybrid  p    
[SW1-Ethernet0/0/2]port hybrid  pvid vl    
[SW1-Ethernet0/0/2]port hybrid  pvid vlan 3

检验：

 

[SW1]int e0/0/2
[SW1-Ethernet0/0/2]port hybrid untagged vlan 3 to 6

[SW1-Ethernet0/0/2]int e0/0/4
[SW1-Ethernet0/0/4]port hybrid pvid vlan 4
[SW1-Ethernet0/0/4]port hybrid untagged vlan 3 to 4

2、配置SW2的PC5/6

[SW2]int e0/0/1
[SW2-Ethernet0/0/1]port hybrid pvid vlan 5
[SW2-Ethernet0/0/1]port hybrid untagged vlan 3 5
[SW2-Ethernet0/0/1]q

[SW2]int e0/0/2
[SW2-Ethernet0/0/2]port hybrid pvid vlan 6  
[SW2-Ethernet0/0/2]port hybrid untagged vlan 3 6

3、配置trunk

[SW1]int e0/0/5 
[SW1-Ethernet0/0/5]port link-type trunk 
[SW1-Ethernet0/0/5]port trunk allow-pass vlan 2 to 6

检验：

 

[SW2]int e0/0/3
[SW2-Ethernet0/0/3]port hybrid tagged vlan 2 to 6

检验：

[SW1]int e0/0/6
[SW1-Ethernet0/0/6]port hybrid tagged vlan 2   
[SW1-Ethernet0/0/6]port hybrid untagged  vlan 3 to 6

 检验：

 4、配置路由器

 [router]int g0/0/0    
[router-GigabitEthernet0/0/0]ip address 192.168.1.1 24
[router-GigabitEthernet0/0/0]q

[router]int g0/0/0.1  
[router-GigabitEthernet0/0/0.1]dot1q termination vid 2
[router-GigabitEthernet0/0/0.1]ip add 192.168.2.1 24
[router-GigabitEthernet0/0/0.1]q
 
[router]dhcp enable 
Info: The operation may take a few seconds. Please wait for a moment.done.
[router]ip pool v2
Info: It's successful to create an IP address pool.
[router-ip-pool-v2]network 192.168.2.0 mask 24
[router-ip-pool-v2]gateway-list 192.168.2.1
[router-ip-pool-v2]q
   
[router]ip pool v3-v6
Info: It's successful to create an IP address pool. 
[router-ip-pool-v3-v6]network 192.168.1.0 mask 24
[router-ip-pool-v3-v6]gateway-list 192.168.1.1
[router-ip-pool-v3-v6]q

[router]int g0/0/0  
[router-GigabitEthernet0/0/0]dhcp select global 
[router-GigabitEthernet0/0/0]q

[router]int g0/0/0.1
[router-GigabitEthernet0/0/0.1]dhcp select global 
[router-GigabitEthernet0/0/0.1]arp broadcast enable

5、PC1-6自动获取IP

PC1设置如下，1-6相同操作。

 检验：

 

 

 

 

 四、测试

PC2可以访问4/5/6

 PC4不能访问5/6，PC5不能访问PC6

 

 PC1/3可以访问PC2/4/5/6