Task 1
Network requirements:
As shown, the cell user Host A, Host B, Host C , GigabitEthernet 1/0/2, GigabitEthernet 1-1 respectively connected to the Device port GigabitEthernet 1/0/1 1/0/3 , device devices are connected through the external network port GigabitEthernet 1/0/4. Now the user needs to implement a cell Host A, and Host B Layer between packets Host C can not communicate with each other, but can be external network. Test topology is as follows:
using the related items H3C simulator configured VLAN
configuration steps:
Create isolation group 2.
<Device> System-View
[Device] Port-the isolate Group 2
port GigabitEthernet 1/0/1, GigabitEthernet 1/0/2, GigabitEthernet 1/0/3 added compartments
from group 2.
[Device] interface GigabitEthernet 1/0/1
[Device-GigabitEthernet / 0 /. 1] Port-the isolate enable Group 2
[Device-GigabitEthernet / 0 /. 1] quit
[Device] interface GigabitEthernet 1/0/2
[Device-GigabitEthernet / 0/2] Port-the isolate enable Group 2
[Device-GigabitEthernet / 0/2] quit
[Device] interface GigabitEthernet 1/0/3
[Device-GigabitEthernet / 0 /. 3] Group 2 Port-the isolate enable
to verify the configuration shown in FIG:
Use simulator configured VLAN H3C related items
Task 2
Networking Requirements:
• the Host A and Host C belong to sector A, but different devices access the enterprise network; Host B and Host D belong portion
doors B, but also by the different devices access the enterprise network.
• To ensure communication security, but also to avoid broadcast storms, corporate network using VLAN technology to isolate the two departments
Layer 2 traffic. A sector wherein use VLAN 100, sector B using VLAN 200.
• now required to use the same device regardless of whether access to the corporate network, the host can communicate in the same VLAN, i.e., Host A and
Host C can communicate, Host B and Host D can communicate. Test topology is as follows:
using the related items H3C simulator configured VLAN
configuration steps:
(1) Configure Device A
creates VLAN 100, and GigabitEthernet1 / 0/1 added to VLAN 100.
<DeviceA> System-View
[DeviceA] VLAN 100
[DeviceA-VLANs 100] Port GigabitEthernet 1/0/1
[DeviceA-VLANs 100] quit
create VLAN 200, and GigabitEthernet1 / 0/2 added to VLAN 200.
[DeviceA] VLAN 200 is
[DeviceA-VLAN200] Port GigabitEthernet 1/0/2
[DeviceA-VLAN200] quit
# In order to VLAN 100 on Device A and VLAN packet 200 is transmitted to energy Device B, the
link type of GigabitEthernet1 / 0/3 is Trunk, the VLAN packets and allows VLAN 100 and 200 is through.
[DeviceA] interface GigabitEthernet 1/0/3
[DeviceA-GigabitEthernet / 0 /. 3] Trunk Port Link-type
[DeviceA-GigabitEthernet / 0 /. 3] Trunk Port 200 is the permit VLAN 100
(2) disposed on the same configuration on Device B to Device A, omitted.
(3) Host A and Host C will be arranged in a network, such as 192.168.100.0/24; to Host B and Host D arranged in
a network, such as 192.168.200.0/24.
3. Verify the configuration shown in FIG:
Use simulator configured VLAN related items H3C
Task 3
Networking Requirements:
As shown below, the host office belong to different network segments 192.168.5.0/24 receipt 192.168.50.0/24,Device C and
a packet from the host office, the source IP packets address, so that packets from a host of different network respectively designated VLAN
for transmission. Test topology is as follows:
using the VLAN configuration related items H3C simulator
2. Configuration procedure:
(1) Configuration Device C
Configuring VLAN 100 is associated with the subnet 192.168.5.0/24.
<DeviceC> System-View
[DeviceC] VLAN 100
[DeviceC-VLANs 100] IP-VLAN-IP Subnet 192.168.5.0 255.255.255.0
[DeviceC-VLANs 100] quit
Configure the subnet 192.168.50.0/24 VLAN 200 is associated with.
[DeviceC] VLAN 200 is
[DeviceC-VLAN200] IP Subnet-VLAN-IP 192.168.50.0 255.255.255.0
[DeviceC-VLAN200] quit
Configure port GigabitEthernet1 / 0/11 allow for VLAN 100 packets.
[DeviceC] interface Ten-GigabitEthernet 1/0/11
[DeviceC-Ten-GigabitEthernet / 0 /. 11] Port Link-type Hybrid
[DeviceC-Ten-GigabitEthernet / 0 /. 11] Hybrid Port VLAN Tagged 100
[DeviceC-Ten-GigabitEthernet / 0/11] quit
Configure port GigabitEthernet1 / 0/12 allows packets of VLAN 200.
[DeviceC] interface Ten-GigabitEthernet 1/0/12
[DeviceC-Ten-GigabitEthernet / 0/12 is] Port Link-type Hybrid
[DeviceC-Ten-GigabitEthernet / 0/12 is] Hybrid Port 200 is VLAN Tagged
[DeviceC-Ten-GigabitEthernet / 0/12] quit
配置端口GigabitEthernet1/0/1 和基于IP 子网的VLAN 100、VLAN 200 关联。
[DeviceC] interface ten-gigabitethernet 1/0/1
[DeviceC-Ten-GigabitEthernet1/0/1] port link-type hybrid
[DeviceC-Ten-GigabitEthernet1/0/1] port hybrid vlan 100 200 untagged
[DeviceC-Ten-GigabitEthernet1/0/1] port hybrid ip-subnet-vlan vlan 100
[DeviceC-Ten-GigabitEthernet1/0/1] port hybrid ip-subnet-vlan vlan 200
[DeviceC-Ten-GigabitEthernet1/0/1] quit
(2) Configuration Device A and Device B
Configure Device A and Device B by allowing the corresponding VLAN.
3. Verify the configuration shown in FIG:
Use simulator configured VLAN related items H3C
Task 4
Networking Requirements
• Device VLAN 5, and VLAN B 10 is on the Primary VLAN, its uplink port GigabitEthernet1 / 0/1
needs to allow VLAN 5, and VLAN 10 packets carried by the VLAN Tag.
• Device B downlink port GigabitEthernet1 / 0/2 by allowing Secondary VLAN 2,
GigabitEthernet / 0 /. 3 by allowing Secondary VLAN 3, VLAN 2 and VLAN 3 mapped to the Primary
the VLAN. 5.
• Device B downlink port GigabitEthernet1 / 0/6 By allowing Secondary VLAN 6,
GigabitEthernet / 0 / allowing Secondary VLAN 8. 8 through, VLAN 6 and mapped to VLAN 8 Primary
the VLAN 10.
• From the Device A, Device B only contact the VLAN 5, and VLAN 10. Test topology is as follows:
using the related items H3C simulator configured VLAN
configuration steps:
(1) Configure Device B
Configuring VLAN 5, and VLAN 10 as Primary VLAN.
<DeviceB> System-View
[DeviceB] VLAN. 5
[DeviceB-VLAN5] Private-VLAN Primary
[DeviceB-VLAN5] quit
[DeviceB] VLAN 10
[DeviceB-vlan10] private-vlan primary
[DeviceB-vlan10] quit
创建Secondary VLAN 2、3、6、8。
[DeviceB] vlan 2 to 3
[DeviceB] vlan 6
[DeviceB-vlan6] quit
[DeviceB] vlan 8
[DeviceB-vlan8] quit
Uplink port GigabitEthernet1 / 0/1 10 operate in VLAN 5, and VLAN trunk promiscuous mode in
formula.
[DeviceB] interface GigabitEthernet 1/0/1
[DeviceB- GigabitEthernet / 0 /. 1] Private-VLAN Port Trunk promiscuous. 5 10
[DeviceB- GigabitEthernet / 0 /. 1] quit
the downlink port GigabitEthernet1 / 0/2 added to VLAN 2, GigabitEthernet1 / 0/3 to join VLAN 3, and
configure them to work in host mode.
[DeviceB] interface GigabitEthernet 1/0/2
[DeviceB- GigabitEthernet / 0/2] Access Port VLAN 2
[DeviceB- GigabitEthernet1/0/2] port private-vlan host
[DeviceB- GigabitEthernet1/0/2] quit
[DeviceB] interface ten-gigabitethernet 1/0/3
[DeviceB- GigabitEthernet1/0/3] port access vlan 3
[DeviceB- GigabitEthernet1/0/3] port private-vlan host
[DeviceB- GigabitEthernet1/0/3] quit
The mapping between 5 and Secondary VLAN 2,3 Primary VLAN.
[DeviceB] VLAN. 5
[DeviceB-VLAN5] Private-VLAN. 3 to Secondary 2
[DeviceB-VLAN5] quit
The downlink port GigabitEthernet1 / 0/6 was added VLAN 6, GigabitEthernet1 / 0/8 was added VLAN 8, and
configure them to work in host mode.
[DeviceB] interface GigabitEthernet 1/0/6
[DeviceB- GigabitEthernet / 0 /. 6] Access Port VLAN. 6
[DeviceB- GigabitEthernet / 0 /. 6] Private-VLAN Host Port
[DeviceB- GigabitEthernet / 0 /. 6] quit
[DeviceB] GigabitEthernet 1/0/8 interface
[DeviceB- GigabitEthernet / 0 /. 8] Access Port VLAN. 8
[DeviceB- GigabitEthernet / 0 /. 8] Private-VLAN Host Port
[DeviceB- GigabitEthernet / 0 /. 8] quit
The mapping between the 6,8 Primary VLAN 10 and Secondary VLAN.
[DeviceB] VLAN 10
[DeviceB-VLAN10] Secondary Private-VLAN. 6. 8
[DeviceB-VLAN10] quit
(2) Configuration on Device A
creates VLAN 5, and VLAN 10.
[DeviceA] VLAN. 5
[DeviceA-VLAN5] quit
[DeviceA] VLAN 10
[DeviceA-VLAN10] quit
Configure port GigabitEthernet1 / 0/1 as a Hybrid port and VLAN 5, and VLAN 10 allows the Tag carried through.
[DeviceA] interface GigabitEthernet 1/0/1
[DeviceA- GigabitEthernet / 0 /. 1] Hybrid Port Link-type
[DeviceA- GigabitEthernet / 0 /. 1] Hybrid Port VLAN Tagged 10. 5
[DeviceA- GigabitEthernet / 0 /. 1] quit
. 3 verify the configuration shown in FIG:
use simulator configured VLAN related items H3C
Task 5
Networking Requirements (supervlan simulator for lack of support, can not display correctly)
• Create a 10, the VLAN interface IP address of the Super VLAN as 10.0.0.1/24.
• Create Sub VLAN: VLAN 2, VLAN 3 , VLAN 5.
• port GigabitEthernet1 / 0/1 and port GigabitEthernet1 / 0/2 belong to VLAN 2,
port GigabitEthernet1 / 0/3 and port GigabitEthernet1 / 0/4 belongs to VLAN 3,
port GigabitEthernet1 / 0/5 and port GigabitEthernet1 / 0/6 to VLAN 5.
• Sub VLAN between each user can meet and Layer 3 interoperability. Test topology is as follows:
using the related items H3C simulator configured VLAN
configuration steps:
Create VLAN 10, VLAN interface IP address 10.0.0.1/24.
<Sysname> System-View
[Sysname] VLAN 10
[Sysname-VLAN10] quit
[Sysname] interface VLAN-interface 10
[Sysname-of Vlan-interface10 For] 255.255.255.0 IP address 10.0.0.1
opening devices local proxy ARP.
[Sysname-Vlan-interface10] local -proxy-arp enable
[Sysname-Vlan-interface10] quit
Create VLAN 2, and add the port GigabitEthernet1 / 0/1 and port GigabitEthernet1 / 0/2.
[Sysname] VLAN 2
[Sysname-VLAN2] Port GigabitEthernet GigabitEthernet 1/0/1 1/0/2
[Sysname-VLAN2] quit
Create VLAN 3, and add the port GigabitEthernet1 / 0/3 and port GigabitEthernet1 / 0/4.
[Sysname] VLAN. 3
[Sysname-VLAN3] Port GigabitEthernet GigabitEthernet 1/0/3 1/0/4
[Sysname-VLAN3] quit
Create VLAN 5, and add the port GigabitEthernet1 / 0/5 and port GigabitEthernet1 / 0/6.
[Sysname] VLAN. 5
[Sysname-VLAN5] Port GigabitEthernet GigabitEthernet 1/0/5 1/0/6
[Sysname-VLAN5] quit
VLAN 10 as designated Super VLAN, VLAN 2, VLAN 3 and VLAN 5 to Sub VLAN.
[Sysname] VLAN 10
[Sysname-VLAN10] the supervlan
[Sysname-VLAN10] the subvlan 2. 3. 5
[Sysname-VLAN10] quit
[Sysname] quit
3. Verify the configuration shown in FIG:
Use simulator configured VLAN related items H3C
Task 6
Network where:
PC_A DeviceA connected to the g1 / 0/1; PC_B DeviceA connected to the g1 / 0/2; PC_C DeviceA connected to the g1 / 0 /. 3;
PC_D DeviceB connected to the g1 / 0 / 1; PC_E connected to DeviceB the g1 / 0/2; PC_F connected to DeviceB the G1 / 0 /. 3;
DeviceA the g1 / 0/1 belongs vlan10, g1 / 0/2 belongs vlan20, g1 / 0/3 belongs VLAN30; g1 / 0/24 as trunk
DeviceB the g1 / 0/1 belongs vlan10, g1 / 0/2 belongs vlan20, g1 / 0/3 belonging vlan30; g1 / 0/24 as trunk
DeviceC the g1 / 0/23 is connected DeviceA to the g1 / 0/24; g1 / 0/24 is connected to the DeviceB g1 / 0/24
DeviceC the g1 / 0/23 and g1 / 0/24 are as trunk. Test topology is as follows:
using the VLAN configuration related items H3C simulator
2. Experimental procedure:
1, the basic configuration of DeviceA
SYS
VLAN 10
Port G 1/0/1
VLAN 20 is
Port G 1/0/2
VLAN 30
Port G 1/0 /. 3
Inter G 1/0/24
Port Link-type Trunk
Port VLAN All the permit Trunk
2, the basic configuration DeviceB same DeviceA
3, DeviceC basic configuration
SYS
Inter G RG 1/0/23 to 1/0/24
Port Link-type Trunk
Port VLAN All the permit Trunk
4, PC_A access PC_D found unreasonable
use dis vlan in DeviceC above you can only see vlan 1
5, turn MVRP function
#DeviceA arranged MVRP
MVRP Global enable
Inter G 1/0/24
MVRP enable
MVRP the same configuration #DeviceB DeviceA
#DeviceC配置MVRP
mvrp global enable
inter r g 1/0/23 to g 1/0/24
mvrp enable
6, another visit PC_D with PC_A, successfully accessed
using dis vlan can see in the above DeviceC vlan 10 20 30