当前位置：首页 > news >正文

vlan综合实验

news 来源：原创 2024/9/28 11:11:32

1、实验拓扑

2、实验要求

1、pc1和pc3所在接口为access;属于vlan 2;
pc2/pc4/pc5/pc6处于同一网段；其中pc2可以访问pc4/pc5/pc6；
pc4可以访问pc6；pc5不能访问pc6；
2、pc1/pc3与pc2/pc4/pc5/pc6不在同一网段;
3、所有pc通过DHCP获取Ip地址，且pc1/pc3可以正常访问pc2/pc4/pc5/pc6;

3、实验分析

1、pc1和pc3为access接口，且都在vlan 2，需其余主机不在同一网段，通过子接口实现

2、pc2/pc4/pc5/pc6处于同一网段，接口类型用混杂模式实现

3、交换机之间所有流量都需经过，将其接口类型设置为trunk模式，允许所有VLAN通过

4、在SW1连接路由器的接口上，将vlan 2流量进行打标签，将流量转向子接口，剩余流量设置不打标签，去往物理接口

4、实验步骤

1、交换机配置vlan

[SW1]vlan batch 2 to 6
[SW1]int g 0/0/1
[SW1-GigabitEthernet0/0/1]port link-type access 
[SW1-GigabitEthernet0/0/1]port default vlan 2
[SW1-GigabitEthernet0/0/1]int  g 0/0/2
[SW1-GigabitEthernet0/0/2]port hybrid pvid vlan 3 
[SW1-GigabitEthernet0/0/2]port hybrid untagged vlan 3 4 5 6 
[SW1-GigabitEthernet0/0/2]int g 0/0/3
[SW1-GigabitEthernet0/0/3]port link-type trunk 
[SW1-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 to 6
[SW1-GigabitEthernet0/0/3]int g 0/0/4
[SW1-GigabitEthernet0/0/4]port hybrid untagged vlan 3 to 6
[SW1-GigabitEthernet0/0/4]port hybrid tagged vlan 2

[SW2]vlan batch 2 to 6
[SWW 2]int g 0/0/1
[SW2-GigabitEthernet0/0/1]port link-type access
[SW2-GigabitEthernet0/0/1]port default vlan 2
[SWW 2-GigabitEthernet0/0/1]int g 0/0/2
[SW2-GigabitEthernet0/0/2]port hybrid pvid vlan 4
[SW2-GigabitEthernet0/0/2]port hybrid untagged vlan 3 to 6
[SWW 2-GigabitEthernet0/0/2]int g 0/0/3
[SW2-GigabitEthernet0/0/3]port link-type trunk 
[SW2-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 to 6 
[SWW 2-GigabitEthernet0/0/3]int g 0/0/4
[SW2-GigabitEthernet0/0/4]port link-type trunk 
[SW2-GigabitEthernet0/0/4]port trunk allow-pass vlan 2 to 6

[SW3]vlan batch 2 to 6
[SW3]int g 0/0/1
[SW3-GigabitEthernet0/0/1]port hybrid pvid vlan 5
[SW3-GigabitEthernet0/0/1]port hybrid untagged vlan 3 4 5
[SW3-GigabitEthernet0/0/1]int g 0/0/2
[SW3-GigabitEthernet0/0/2]port hybrid pvid vlan 6
[SW3-GigabitEthernet0/0/2]port hybrid untagged vlan 3 4 6
[SW3-GigabitEthernet0/0/1]int g 0/0/3
[SW3-GigabitEthernet0/0/3]port link-type trunk 
[SW3-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 to 6

2、路由器配置子接口、DHCP

[R1]int g0/0/0.1
[R1-GigabitEthernet0/0/0.1]ip add 192.168.2.1 24
[R1-GigabitEthernet0/0/0.1]dot1q termination vid 2
[R1-GigabitEthernet0/0/0.1]arp broadcast enable [R1-GigabitEthernet0/0/0]ip add 192.168.1.1 24[R1]dhcp enable[R1]ip pool aa
[R1-ip-pool-aa]network 192.168.1.0 mask 24
[R1-ip-pool-aa]gateway-list 192.168.1.1 
[R1-ip-pool-aa]dns-list 8.8.8.8[R1]ip pool bb
[R1-ip-pool-bb]network 192.168.2.0 mask 24
[R1-ip-pool-bb]gateway 192.168.2.1 
[R1-ip-pool-bb]dns-list 8.8.8.8[R1]int g0/0/0.1
[R1-GigabitEthernet0/0/0.1]dhcp select global 
[R1]int g0/0/0
[R1-GigabitEthernet0/0/0]dhcp select global

PC1-6IP地址