一. 实验要求
1.PC1和PC3所在接口为ACCESS,pvlan,vlan2;
PC2,PC4,PC5,PC6处于同一网段,其中PC2可以访问PC4/5/6;但是PC4可以访问PC5,不能访问PC6
2.PC5不能访PC6
3.PC1/3与PC2/4/5/6不在同一个网段
4.所有PC通过DHCP自动获取IP,且PC1/3可以正常访问PC2/4/5/6
二.实验拓扑结构
三.实验过程
1.配置VLAN以及接口类型
SW1:
[sw1]vlan batch 2 to 6 [sw1]int g0/0/1 [sw1-GigabitEthernet0/0/1]port link-type access [sw1-GigabitEthernet0/0/1]port default vlan 2 [sw1-GigabitEthernet0/0/1]int g 0/0/2 [sw1-GigabitEthernet0/0/2]port hybrid pvid vlan 3 [sw1-GigabitEthernet0/0/2]port hybrid untagged vlan 3 4 5 6 [sw1-GigabitEthernet0/0/2]int g0/0/3 [sw1-GigabitEthernet0/0/3]port link-type trunk [sw1-GigabitEthernet0/0/3]port trunk allow-pass vlan all [sw1]int g 0/0/4 [sw1-GigabitEthernet0/0/4]port hybrid untagged vlan 3 4 5 6 [sw1-GigabitEthernet0/0/4]port hybrid tagged vlan 2
SW2:
[sw2]vlan batch 2 to 6 [sw2]int g 0/0/3 [sw2-GigabitEthernet0/0/3]port link-type trunk [sw2-GigabitEthernet0/0/3]port trunk allow-pass vlan all [sw2-GigabitEthernet0/0/3]int g0/0/1 [sw2-GigabitEthernet0/0/1]port link-type access [sw2-GigabitEthernet0/0/1]port default vlan 2 [sw2-GigabitEthernet0/0/1]int g0/0/2 [sw2-GigabitEthernet0/0/2]port hybrid pvid vlan 4 [sw2-GigabitEthernet0/0/2]port hybrid untagged vlan 3 4 5 [sw2-GigabitEthernet0/0/2]int g0/0/4 [sw2-GigabitEthernet0/0/4]port link-type trunk [sw2-GigabitEthernet0/0/4]port trunk allow-pass vlan all
SW3:
[sw3]vlan batch 2 to 6 [sw3]int g0/0/3 [sw3-GigabitEthernet0/0/3]port link-type trunk [sw3-GigabitEthernet0/0/3]port trunk allow-pass vlan all [sw3-GigabitEthernet0/0/3]int g 0/0/1 [sw3-GigabitEthernet0/0/1]port hybrid pvid vlan 5 [sw3-GigabitEthernet0/0/1]port hybrid untagged vlan 3 4 5 [sw3-GigabitEthernet0/0/1]int g 0/0/2 [sw3-GigabitEthernet0/0/2]port hybrid pvid vlan 6 [sw3-GigabitEthernet0/0/2]port hybrid untagged vlan 3 6
2.在R1上配置DHCP以及子接口
R1:
[r1]int g0/0/0.1 [r1-GigabitEthernet0/0/0.1]ip a 192.168.1.1 24 [r1-GigabitEthernet0/0/0.1]dot1q termination vid 2 [r1-GigabitEthernet0/0/0.1]arp broadcast enable [r1]int g0/0/0 [r1-GigabitEthernet0/0/0]ip a 192.168.2.1 24 [r1]dhcp enable [r1]ip pool aa [r1-ip-pool-aa]network 192.168.1.0 mask 24 [r1-ip-pool-aa]gateway-list 192.168.1.1 [r1-ip-pool-aa]dns-list 114.114.114.114 [r1]ip pool bb [r1-ip-pool-bb]network 192.168.2.0 mask 24 [r1-ip-pool-bb]gateway-list 192.168.2.1 [r1-ip-pool-bb]dns-list 114.114.114.114 [r1]int g 0/0/0.1 [r1-GigabitEthernet0/0/0.1]dhcp select global [r1]int g 0/0/0 [r1-GigabitEthernet0/0/0]dhcp select global
四.实验结果
PC3pingPC5
PC2pingP4
P2pingP5
P2pingP6
P5pingP6
P1pingP6