HCIA ——VLAN实验

一、实验需求

1.PC1和PC3所在接口为access接口；属于vlan 2
PC2-4-5-6处于同一网段；其中PC2可以访问PC4-5-6
PC4可以访问PC5不能访问PC6
PC5不能访问PC6
3.PC1-PC3与PC2-4-5-6不在同一个网段
4.所有PC均使用DHCP获取IP地址，且PC1可以正常访问PC2-4-5-6

二、实验拓扑图

三、实验步骤

1.划分网段

根据需求可把上述拓扑图分成两个网段，根据个人习惯网段分配即 192.168.1.0/24 和192.168.2.0/24 。

PC1 和 PC3 为 192.168.1.0 网段

PC2 、 PC4 、PC 5 、PC6 为 192.168.2.0 网段

2.PC端开启DHCP

3.SW1 、SW2和SW3的配置

SW1配置

对pc1：

nterface GigabitEthernet0/0/1
port link-type access
port default vlan 2

对pc2：
interface GigabitEthernet0/0/2
port hybrid pvid vlan 3
port hybrid untagged vlan 3 to 5
interface GigabitEthernet0/0/23
port hybrid tagged vlan 2 to 5
port link-type trunk
port trunk allow-pass vlan 2 to 5

对交换机和路由接口：

interface GigabitEthernet0/0/3
port hybrid tagged vlan 2
port hybrid untagged vlan 3 to 5

对 SW2

interface GigabitEthernet0/0/2

port hybrid tagged vlan 2 3 4 5 6

SW2配置

<Huawei>sys
[Huawei]sys sw2
[sw2]vlan b 2 t 6
[sw2]int g0/0/1
[sw2-GigabitEthernet0/0/1]port l hy
[sw2-GigabitEthernet0/0/1]port hy t v 2 to 6
[sw2-GigabitEthernet0/0/1]int g0/0/2
[sw2-GigabitEthernet0/0/2]po l hy
[sw2-GigabitEthernet0/0/2]po hy t v 2 to 6
[sw2-GigabitEthernet0/0/2]int g0/0/3
[sw2-GigabitEthernet0/0/3]po l ac
[sw2-GigabitEthernet0/0/3]p d v 2
[sw2-GigabitEthernet0/0/3]int g0/0/04
[sw2-GigabitEthernet0/0/4]p l hy
[sw2-GigabitEthernet0/0/4]p hy un v 2 3 4 5

SW3配置

<Huawei>sys
[Huawei]sys sw3
[sw3]vlan
b 2 to 6
[sw3]int g0/0/1
[sw3-GigabitEthernet0/0/1]p li hy
[sw3-GigabitEthernet0/0/1]p hy ta v 2 3 4 5 6
[sw3-GigabitEthernet0/0/1]int g0/0/2
[sw3-GigabitEthernet0/0/2]p l hy
[sw3-GigabitEthernet0/0/2]p hy un vlan 2 3 4 5
[sw3-GigabitEthernet0/0/2]int g0/0/03
[sw3-GigabitEthernet0/0/3]p h
[sw3-GigabitEthernet0/0/3]p li hy
[sw3-GigabitEthernet0/0/3]p hy un v 2 3 6

4.R1 配置

<Huawei>sys
[Huawei]sy r1
[r1]int g0/0/0
[r1-GigabitEthernet0/0/0]ip add 192.168.0.1 24
[r1-GigabitEthernet0/0/0]int g0/0/0.1
[r1-GigabitEthernet0/0/0.1]ip add 192.168.1.254 24
[r1-GigabitEthernet0/0/0.1]int g0/0/0.2
[r1-GigabitEthernet0/0/0.2]ip add 192.168.2.254 24
[r1]dhcp enable
[r1]ip pool aa
[r1-ip-pool-aa]network 192.168.1.0 mas 24
[r1-ip-pool-aa]gateway-list 192.168.1.254
[r1-ip-pool-aa]dns-list 8.8.8.8
[r1-ip-pool-aa]int g0/0/0.1
[r1-GigabitEthernet0/0/0.1]dhcp select global
[r1-GigabitEthernet0/0/0.1]dot1q termination vid 2
[r1-GigabitEthernet0/0/0.1]arp broadcast enable
[r1-GigabitEthernet0/0/0.1]ip pool bb
[r1-ip-pool-bb]network 192.168.2.0 mask 24
[r1-ip-pool-bb]gateway-list 192.168.2.254
[r1-ip-pool-bb]dn
[r1-ip-pool-bb]dns-list 8.8.8.8
[r1-ip-pool-bb]int g0/0/0
[r1-GigabitEthernet0/0/0]int g0/0/0.2
[r1-GigabitEthernet0/0/0.2]dhcp select global
[r1-GigabitEthernet0/0/0.2]dot1q termination vid 1
[r1-GigabitEthernet0/0/0.2]arp broadcast enable