一、实验拓扑
二、实验需求
1.PC1和PC3所在接口为access，属于vlan2；
PC2/4/5/6处于同一网段，其中PC2可以访问PC4/5/6;
2.PC5不能访问PC6;
3.PC1/3与PC2/4/5/6不在同一网段；
4.所有PC通过DHCP获取IP地址，且PC1/3可以正常访问PC2/4/5/6
三、实验思路
1.在交换机上配置VLAN并修改为对应接口
2.在路由器上配置网关
3.开启接口识别vid的功能配置对应vlan，且开启ARP广播
4.开启DHCP服务，配置地址池，下发地址
四、实验步骤
1.配置VLAN
SW1\]int g0/0/1 \[SW1-GigabitEthernet0/0/1\]port link-type access \[SW1-GigabitEthernet0/0/1\]port default vlan 2 \[SW1-GigabitEthernet0/0/1\]int g0/0/2 \[SW1-GigabitEthernet0/0/2\]port link-type hybrid \[SW1-GigabitEthernet0/0/2\]port hybrid untagged vlan 2 3 4 5 6 \[SW1-GigabitEthernet0/0/2\]port hybrid pvid vlan 3 \[SW1-GigabitEthernet0/0/2\]int g0/0/3 \[SW1-GigabitEthernet0/0/3\]port link-type trunk \[SW1-GigabitEthernet0/0/3\]port trunk allow-pass vlan 2 3 4 5 6 \[SW1-GigabitEthernet0/0/3\]int g0/0/4 \[SW1-GigabitEthernet0/0/4\]port link-type trunk \[SW1-GigabitEthernet0/0/4\]port trunk allow-pass vlan 2 3 4 5 6 \[SW2\]vlan batch 2 to 6 \[SW2\]int g0/0/1 \[SW2-GigabitEthernet0/0/1\]port link-type access \[SW2-GigabitEthernet0/0/1\]port default vlan 2 \[SW2-GigabitEthernet0/0/1\]int g0/0/2 \[SW2-GigabitEthernet0/0/2\]port link-type hybrid \[SW2-GigabitEthernet0/0/2\]port hybrid untagged vlan 2 3 5 6 \[SW2-GigabitEthernet0/0/2\]port hybrid tagged vlan 4 \[SW2-GigabitEthernet0/0/2\]port hybrid pvid vlan 3 \[SW2-GigabitEthernet0/0/2\]int g0/0/3 \[SW2-GigabitEthernet0/0/3\]port link-type trunk \[SW2-GigabitEthernet0/0/3\]port trunk allow-pass vlan 2 3 4 5 6 \[SW2-GigabitEthernet0/0/3\]int g0/0/4 \[SW2-GigabitEthernet0/0/4\]port link-type trunk \[SW2-GigabitEthernet0/0/4\]port trunk allow-pass vlan 2 3 4 5 6 \[SW3\]vlan batch 2 to 6 \[SW3\]int g0/0/1 \[SW3-GigabitEthernet0/0/1\]port link-type hybrid \[SW3-GigabitEthernet0/0/1\]port hybrid untagged vlan 2 \[SW3-GigabitEthernet0/0/1\]port hybrid pvid vlan 3 \[SW3-GigabitEthernet0/0/1\]port hybrid tagged vlan 5 \[SW3-GigabitEthernet0/0/1\]int g0/0/2 \[SW3-GigabitEthernet0/0/2\]port link-type hybrid \[SW3-GigabitEthernet0/0/2\]port hybrid untagged vlan 2 \[SW3-GigabitEthernet0/0/2\]port hybrid tagged vlan 6 \[SW3-GigabitEthernet0/0/2\]port hybrid pvid vlan 3 \[SW3-GigabitEthernet0/0/2\]int g0/0/3 \[SW3-GigabitEthernet0/0/3\]port link-type trunk \[SW3-GigabitEthernet0/0/3\]port trunk allow-pass vlan 2 3 4 5 6 ### 2.使用路由器子接口完成不同VLAN之间的通信 \[R1\]int g0/0/0.1 \[R1-GigabitEthernet0/0/0.1\]ip add 192.168.1.254 24 \[R1-GigabitEthernet0/0/0.1\]dot1q termination vid 2 \[R1-GigabitEthernet0/0/0.1\]arp broadcast enable \[R1-GigabitEthernet0/0/0.1\]int g0/0/0.2 \[R1-GigabitEthernet0/0/0.2\]ip add 192.168.2.254 24 \[R1-GigabitEthernet0/0/0.2\]dot1q termination vid 3 \[R1-GigabitEthernet0/0/0.2\]arp broadcast enable ### 3.开启DHCP服务 \[R1\]dhcp enable ### 4.配置地址池 \[R1\]ip pool a \[R1-ip-pool-a\]network 192.168.1.0 mask 24 \[R1-ip-pool-a\]gateway-list 192.168.1.254 \[R1-ip-pool-a\]dns-list 114.114.114.114 8.8.8.8 \[R1-ip-pool-a\]q \[R1\]ip pool b \[R1-ip-pool-b\]network 192.168.2.0 mask 24 \[R1-ip-pool-b\]gateway-list 192.168.2.254 \[R1-ip-pool-b\]dns-list 114.114.114.114 8.8.8.8 ### 5.在接口中应用DHCP服务 \[R1\]int g0/0/0.1 \[R1-GigabitEthernet0/0/0.1\]dhcp select global \[R1-GigabitEthernet0/0/0.1\]int g0/0/0.2 \[R1-GigabitEthernet0/0/0.2\]dhcp select global 五、测试 所有PC通过DHCP获取IP地址且可以访问       PC5不能访问PC6 