Let's set up a test scenario
The company network is a large LAN Layer 2 switch S1 is placed on the first floor, there is the IT department and the personnel department on the first floor office of the department; S2 switcher placed on the second floor, there are marketing departments and offices on the second floor R & D department. Because the switch consisting of a ^ a widely broadcast network, all hosts connected switches can communicate with each other, and the company strategy is: communication, the host can not host each other between the different departments within the same department can access each other. Therefore need to be divided on a different VLAN in the switch, and configure the connection to the host switch interface is divided into the respective Access Interface VLAN.
Topology:
Experimental preparation:
Basic configurations
The preparation of the basic configuration of the experiment, with the ping command to check the connectivity of
2. Create VLAN
In addition to the default VLAN 1, the other VLAN need to manually create the command. Create a VLAN There are two ways, one is to use the vlan command to create a single VLAN, another way is to use the vlan batch command again and again to create multiple VLAN.
Create VLAN 10 and VLAN 20, respectively S1
Create VLAN 30 and VLAN 42 on S2
You can view related information display VLAN on S1 and S2
3. Configure Access Interface
Use port link-type access to configure all Access Interface S1 and interface of a PC type switch S2 is on, and uses the port default vlan command to configure the default VLAN interface and simultaneously to the corresponding VLAN. By default, all interfaces VLANID default is 1. (Zoned red line is that I step wrong, hee hee. I also important to distinguish between filled with Tap section)
After configuration, we look
This time again when we ping vlan in a different host to ping nowhere
However, in the same VLAN can ping through PC2 ping or use of
