一、实验拓扑
二、实验要求
1、pc1和pc3所在接口为access;属于vlan2;
pc可以号间pe.ce0不一网段:其中pc2可以访问pc4/pc5/pc6;
pc4可以访问pc6；pc5不能访问pc6;
2、pc1/pc3与pc2/pc4/pc5/pc6不在同一网段;
3、所有pc通过DHcP获职IP地址，且pc1/pc3可以正常访问pc2/pc4/pc5/pc6;
三、实验思路
1、PC端设置DHCP自动获取IP地址；
2、创建vlan；
3、进入到交换机的接口下加入VLAN；
4、给路由器的子接口（VLAN 2）和物理接口(VLAN 3/4/5/6 )分别配置IP地址;
5、在路由器上创建两个地址池，并开启DHCP服务；
四、实验步骤
1、PC端设置DHCP自动获取IP地址
2、创建vlan
LSW1\]VLAN batch 2 to 6 \[LSW2\]vlan batch 2 to 6 \[LSW3\]vlan batch 2 to 6 ### 3、进入到交换机的接口下加入VLAN > \[LSW1\]int g0/0/2 > > \[LSW1-GigabitEthernet0/0/2\]port link-type access > > \[LSW1-GigabitEthernet0/0/2\]port default vlan 2 > > \[LSW1-GigabitEthernet0/0/2\]int g0/0/3 > > > \[LSW1-GigabitEthernet0/0/3\]port hybrid pvid vlan 3 > > \[LSW1-GigabitEthernet0/0/3\]port hybrid untagged vlan 3 to 6 > > \[LSW1\]int g0/0/4 > > > \[LSW1-GigabitEthernet0/0/4\]port link-type trunk > > \[LSW1-GigabitEthernet0/0/4\]port trunk allow-pass vlan 2 to 6 > > \[LSW1-GigabitEthernet0/0/4\]int g0/0/1 > > > \[LSW1-GigabitEthernet0/0/1\]port hybrid untagged vlan 3 to 6 > > \[LSW1-GigabitEthernet0/0/1\]port hybrid tagged vlan 2 > \[LSW2-GigabitEthernet0/0/2\]port link-type access > > \[LSW2-GigabitEthernet0/0/2\]port default vlan 2 > > \[LSW2-GigabitEthernet0/0/2\]int g 0/0/3 > > > \[LSW2-GigabitEthernet0/0/3\]port hybrid pvid vlan 4 > > \[LSW2-GigabitEthernet0/0/3\]port hybrid untagged vlan 3 to 6 > > > \[LSW2-GigabitEthernet0/0/3\]int g 0/0/1 > > \[LSW2-GigabitEthernet0/0/1\]port link-type trunk > > \[LSW2-GigabitEthernet0/0/1\]port trunk allow-pass vlan 2 to 6 > > > \[LSW2-GigabitEthernet0/0/1\]int g 0/0/4 > > \[LSW2-GigabitEthernet0/0/4\]port link-type trunk > > \[LSW2-GigabitEthernet0/0/4\]port trunk allow-pass vlan 2 to 6 > \[LSW3\]int g 0/0/1 > > \[LSW3-GigabitEthernet0/0/1\]port link-type trunk > > \[LSW3-GigabitEthernet0/0/1\]port trunk allow-pass vlan 2 to 6 > > \[LSW3-GigabitEthernet0/0/1\]\]int g 0/0/2 > > \[LSW3-GigabitEthernet0/0/2\]port hybrid pvid vlan 5 > > \[LSW3-GigabitEthernet0/0/2\]port hybrid untagged vlan 3 4 5 > > > \[LSW3-GigabitEthernet0/0/2\]int g 0/0/3 > > \[LSW3-GigabitEthernet0/0/3\]port hybrid pvid vlan 6 > > \[LSW3-GigabitEthernet0/0/3\]port hybrid untagged vlan 3 4 6 查看接口下vlan的状态：  ###  ###  ### 4、给路由器的子接口（VLAN 2）和物理接口(VLAN 3/4/5/6 )分别配置IP地址 > \[R1\]int g 0/0/0 > > \[R1-GigabitEthernet0/0/0\]ip add > > \[R1-GigabitEthernet0/0/0\]ip address 192.168.1.1 24 > > > \[R1-GigabitEthernet0/0/0\]int g 0/0/0.1 > > \[R1-GigabitEthernet0/0/0.1\]ip address 192.168.2.1 24 > > \[R1-GigabitEthernet0/0/0.1\]dot1q termination vid 2 //接口开启802.1q帧识别 > > \[R1-GigabitEthernet0/0/0.1\]arp broadcast enable //开启arp广播协议 查看以下接口的IP地址：  ### 5、在路由器上创建两个地址池，并开启DHCP服务 > > \[R1\]dhcp enable > > \[R1\]ip pool aa > > \[R1-ip-pool-aa\]network 192.168.2.0 mask 24 > > \[R1-ip-pool-aa\]gateway-list 192.168.2.1 > > \[R1-ip-pool-aa\]dns-list 8.8.8.8 > > \[R1\]int g 0/0/0.1 > > \[R1-GigabitEthernet0/0/0.1\]dhcp select global > > > \[R1\]dhcp enable > > \[R1\]ip pool bb > > \[R1-ip-pool-bb\]network 192.168.1.0 mask 24 > > \[R1-ip-pool-bb\]gateway-list 192.168.1.1 > > \[R1-ip-pool-bb\]dns-list 8.8.8.8 > > \[R1\]int g 0/0/0.1 > > \[R1-GigabitEthernet0/0/0\]dhcp select global       pc2访问pc4/pc5/pc6：  pc4访问pc6：  pc5不能访问pc6： 