HCIP(VLAN综合实验)

实验拓补图

实验分析

一、实验目的

掌握VLAN的创建和配置方法
理解VLAN在局域网中的作用
学习如何通过VLAN实现网络隔离和通信

二、实验环境

交换机（SW1、SW2、SW3）
个人电脑（PC1、PC2、PC3、PC4、PC5、PC6）
路由器（R1）
网络连接线

四、实验需求

PC1和PC3所在接口为access接口，属于VLAN 2
PC2/4/5/6处于同一网段，其中PC2可以访问PC4/5/6，PC4可以访问PC5不能访问PC6，PC5不能访问PC6
PC1/3和PC2/4/5/6不在一个网段，且可以正常通讯
所有PC通过DHCP获取IP地址，且PC1/3可以正常访问PC2/4/5/6

五、实验步骤和配置

创建VLAN
- 在SW1、SW2、SW3上创建VLAN 2、3、4、5、6
配置接口
- SW1、SW2、SW3的接口配置如下：
  - PC1和PC3的接口配置为access接口，属于VLAN 2
  - PC2、PC4、PC5、PC6的接口配置为hybrid接口，分别属于VLAN 3、4、5、6
配置DHCP服务
- 在R1上配置DHCP服务，创建两个地址池，分别为PC1/3和PC2/4/5/6分配IP地址
测试连通性
- 测试PC1、PC3可以正常访问PC2、PC4、PC5、PC6
- 测试PC2可以访问PC4、PC5、PC6
- 测试PC4可以访问PC5，不能访问PC6
- 测试PC5不能访问PC6

六、实验结果

所有PC均通过DHCP获取到IP地址
PC1、PC3可以正常访问PC2、PC4、PC5、PC6
PC2可以访问PC4、PC5、PC6
PC4可以访问PC5，不能访问PC6
PC5不能访问PC6

具体操作

1.建立拓补图

2.修改PC1-6获取IP方式

3.LS1配置

<Huawei>system-view 
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname LS1
[LS1]vlan batch 2 to 6
Info: This operation may take a few seconds. Please wait for a moment...done.
[LS1]interface GigabitEthernet 0/0/1
[LS1-GigabitEthernet0/0/1]port link-type access
[LS1-GigabitEthernet0/0/1]port default vlan 2
[LS1]interface GigabitEthernet 0/0/2
[LS1-GigabitEthernet0/0/2]port hybrid pvid vlan 3
[LS1-GigabitEthernet0/0/2]port hybrid untagged vlan 3 to 6
[LS1]interface GigabitEthernet 0/0/3
[LS1-GigabitEthernet0/0/3]port link-type trunk 
[LS1-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 to 6
[LS1]interface GigabitEthernet 0/0/4
[LS1-GigabitEthernet0/0/4]port hybrid pvid vlan 1
[LS1-GigabitEthernet0/0/4]port hybrid untagged vlan 3 to 6
[LS1-GigabitEthernet0/0/4]port hybrid tagged vlan 2

检查配置

<LS1>display port vlan active 
T=TAG U=UNTAG
-------------------------------------------------------------------------------
Port                Link Type    PVID    VLAN List
-------------------------------------------------------------------------------
GE0/0/1             access       2       U: 2
GE0/0/2             hybrid       3       U: 1 3 to 6
GE0/0/3             trunk        1       U: 1T: 2 to 6
GE0/0/4             hybrid       1       U: 1 3 to 6T: 2

4.LSW2配置

<Huawei>system-view 
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname LSW2
[LSW2]vlan batch 2 to 6
Info: This operation may take a few seconds. Please wait for a moment...done.
[LSW2]interface GigabitEthernet 0/0/1
[LSW2-GigabitEthernet0/0/1]port link-type access
[LSW2-GigabitEthernet0/0/1]port default vlan 2
[LSW2]interface GigabitEthernet 0/0/2
[LSW2-GigabitEthernet0/0/2]port hybrid pvid vlan 4
[LSW2-GigabitEthernet0/0/2]port hybrid untagged vlan 3 to 6
[LSW2]interface GigabitEthernet 0/0/3
[LSW2-GigabitEthernet0/0/3]port link-type trunk
[LSW2-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 to 6
[LSW2]interface GigabitEthernet 0/0/4
[LSW2-GigabitEthernet0/0/4]port link-type trunk 
[LSW2-GigabitEthernet0/0/4]port trunk allow-pass vlan 2 to 6

检查配置

<LSW2>display port vlan active 
T=TAG U=UNTAG
-------------------------------------------------------------------------------
Port                Link Type    PVID    VLAN List
-------------------------------------------------------------------------------
GE0/0/1             access       2       U: 2
GE0/0/2             hybrid       4       U: 1 3 to 6
GE0/0/3             trunk        1       U: 1T: 2 to 6
GE0/0/4             trunk        1       U: 1T: 2 to 6

5.LSW3配置

<Huawei>system-view 
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname LSW3
[LSW3]vlan batch 2 to 6
Info: This operation may take a few seconds. Please wait for a moment...done.
[LSW3]interface GigabitEthernet 0/0/1
[LSW3-GigabitEthernet0/0/1]port hybrid pvid vlan 5
[LSW3-GigabitEthernet0/0/1]port hybrid untagged vlan 3 to 5
[LSW3]interface GigabitEthernet 0/0/2
[LSW3-GigabitEthernet0/0/2]port hybrid pvid vlan 6
[LSW3-GigabitEthernet0/0/2]port hybrid untagged vlan 3 4 6
[LSW3]interface GigabitEthernet 0/0/3
[LSW3-GigabitEthernet0/0/3]port link-type trunk
[LSW3-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 to 6

检查配置

<LSW3>display port vlan active 
T=TAG U=UNTAG
-------------------------------------------------------------------------------
Port                Link Type    PVID    VLAN List
-------------------------------------------------------------------------------
GE0/0/1             hybrid       5       U: 1 3 to 5
GE0/0/2             hybrid       6       U: 1 3 to 4 6
GE0/0/3             trunk        1       U: 1T: 2 to 6
GE0/0/4             hybrid       1       U: 1

6.R1配置

<Huawei>system-view 
Enter system view, return user view with Ctrl+Z.	
[Huawei]sysname R1
[R1]interface GigabitEthernet 0/0/0
[R1-GigabitEthernet0/0/0]ip address 192.168.1.1 24
[R1]interface GigabitEthernet 0/0/0.1
[R1-GigabitEthernet0/0/0.1]ip address 192.168.2.1 24
[R1-GigabitEthernet0/0/0.1]dot1q termination vid 2
[R1-GigabitEthernet0/0/0.1]arp broadcast enable 
[R1]display ip interface brief 
*down: administratively down
!down: FIB overload down
^down: standby
(l): loopback
(s): spoofing
(d): Dampening Suppressed
The number of interface that is UP in Physical is 3
The number of interface that is DOWN in Physical is 9
The number of interface that is UP in Protocol is 3
The number of interface that is DOWN in Protocol is 9Interface                         IP Address/Mask      Physical   Protocol  
Ethernet0/0/0                     unassigned           down       down      
Ethernet0/0/1                     unassigned           down       down      
GigabitEthernet0/0/0              192.168.1.1/24       up         up        
GigabitEthernet0/0/0.1            192.168.2.1/24       up         up        
GigabitEthernet0/0/1              unassigned           down       down      
GigabitEthernet0/0/2              unassigned           down       down      
GigabitEthernet0/0/3              unassigned           down       down      
NULL0                             unassigned           up         up(s)
[R1]dhcp enable 
Info: The operation may take a few seconds. Please wait for a moment.done.
[R1]ip pool a
Info:It's successful to create an IP address pool.
[R1-ip-pool-a]network 192.168.1.0 mask 24
[R1-ip-pool-a]gateway-list 192.168.1.1
[R1-ip-pool-a]dns-list 8.8.8.8
[R1]interface GigabitEthernet 0/0/0
[R1-GigabitEthernet0/0/0]dhcp select global
[R1]ip pool b
Info:It's successful to create an IP address pool.
[R1-ip-pool-b]network 192.168.2.0 mask 24
[R1-ip-pool-b]gateway-list 192.168.2.1
[R1-ip-pool-b]dns-list 8.8.8.8
[R1]interface GigabitEthernet 0/0/0.1
[R1-GigabitEthernet0/0/0.1]dhcp select global

查询PC端IP

PC1

PC2