VLAN实验 - 技术栈

一：实验拓扑

二：实验需求

1、PC1和PC3所在接口为access接口，属于VLAN 2

2、PC2/4/5/6处于同一网段

其中PC2可以访问PC4/5/6

PC4可以访问PC5不能访问PC6

PC5不能访问PC6

3、PC1/3和PC2/4/5/6不在一个网段，且可以正常通讯

4、所有PC通过DHCP获取IP地址，且PC1/3可以正常访问PC2/4/5/6

三：实验思路

1、创建vlan。

2、划分接口，配置接口类型（access/trunk/hybrid）

3、配置路由器子接口，实现vlan间路由

4、配置DHCP,下发IP地址

5、验证配置

四：实验步骤

配置SW1:

复制代码

[sw1]vlan batch 2 to 5

[sw1-GigabitEthernet0/0/1]port hybrid tagged vlan 2
[sw1-GigabitEthernet0/0/1]port hybrid untagged vlan 3 to 5

[sw1-GigabitEthernet0/0/2]port link-type access 
[sw1-GigabitEthernet0/0/2]port default vlan 2

[sw1-GigabitEthernet0/0/3]port hybrid pvid vlan 3
[sw1-GigabitEthernet0/0/3]port hybrid untagged vlan 2 to 5

[sw1-GigabitEthernet0/0/4]port hybrid tagged vlan 2 to 5

配置SW2：

复制代码

[sw2]vlan batch 2 to 5

[sw2-GigabitEthernet0/0/1]port hybrid tagged vlan 2 to 5

[sw2-GigabitEthernet0/0/4]port hybrid tagged vlan 2 to 5

[sw2-GigabitEthernet0/0/2]port link-type access 
[sw2-GigabitEthernet0/0/2]port default vlan 2

[sw2-GigabitEthernet0/0/3]port hybrid pvid vlan 4  
[sw2-GigabitEthernet0/0/3]port hybrid untagged vlan 2 to 4

配置SW3：

复制代码

[sw3]vlan batch 2 to 5

[sw3-GigabitEthernet0/0/1]port hybrid tagged vlan 2 to 5

[sw3-GigabitEthernet0/0/2]port hybrid pvid vlan 4
[sw3-GigabitEthernet0/0/2]port hybrid untagged vlan 2 to 4

[sw3-GigabitEthernet0/0/3]port hybrid pvid vlan 5
[sw3-GigabitEthernet0/0/3] port hybrid untagged vlan 2 to 3 5

配置路由器AR1：

复制代码

[R1]int g0/0/0
[R1-GigabitEthernet0/0/0]ip add 192.168.1.1 24
[R1]dhcp enable
[R1]ip pool aa
[R1-ip-pool-aa]net 192.168.1.0 mask 255.255.255.0
[R1-ip-pool-aa]gat 192.168.1.1
[R1-ip-pool-aa]dns 114.114.114.114 
[R1-GigabitEthernet0/0/0]dhcp select global
 
[R1-GigabitEthernet0/0/0]ip pool bb
[R1-ip-pool-bb]net 192.168.2.0 mask 255.255.255.0
[R1-ip-pool-bb]gat 192.168.2.1
[R1-ip-pool-bb]dns 114.114.114.114
[R1-ip-pool-bb]int g0/0/0.1 
[R1-GigabitEthernet0/0/0.1]dot1q termination vid 2
[R1-GigabitEthernet0/0/0.1]ip add 192.168.2.1 24
[R1-GigabitEthernet0/0/0.1]arp broadcast en
[R1-GigabitEthernet0/0/0.1]dhcp select global

五：测试

PC1: 192.168.2.254

PC2：192.168.1.254

PC3：192.168.2.253

PC4: 192.168.1.253

PC5: 192.168.1.252

PC6: 192.168.1.251

PC2(192.168.1.254)可以访问PC4/5/6

PC4(192.168.1.253)可以访问PC5不能访问PC6

PC5（192.168.1.252）不能够访问PC6