vlan实验-优快云博客

本文链接：https://blog.youkuaiyun.com/qq_43784516/article/details/128936907

文章详细描述了如何在三个交换机上创建并配置VLAN，将PC分配到不同VLAN，以及设置路由器的DHCP服务，以实现网络间的访问控制。配置包括设置接入端口类型、指定PVID、允许通过的VLAN及端口的Tag状态。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

一、首先三个交换机上创建vlan2/3/4、5再将pc2和pc3换分到vlan2中

[s1]vlan batch 2 to 5
[s1]int e 0/0/1
[s1-Ethernet0/0/1]port link-type access
[s1-Ethernet0/0/1]port default vlan 2

[r2]vlan batch 2 to 5
[r2]int e 0/0/1
[r2-Ethernet0/0/1]port link-type access
[r2-Ethernet0/0/1]port default vlan 2

[r3]vlan batch 2 to 5

下面计划将pc2划分到vlan3并且允许vlan3/4/5进入

将pc4和pc5分到vlan4并且允许vlan3/4进入

将pc6分到vlan5并且允许vlan3/5进入

具体配置：

[s1]int e 0/0/2
[s1-Ethernet0/0/2]port hybrid pvid vlan 3
[s1-Ethernet0/0/2]port hybrid untagged vlan 3 to 5

[s1]int gi 0/0/2
[s1-GigabitEthernet0/0/2]port link-type trunk
[s1-GigabitEthernet0/0/2]port trunk allow-pass vlan all

[r2]int e 0/0/2
[r2-Ethernet0/0/2]port hybrid pvid vlan 4
[r2-Ethernet0/0/2]int gi 0/0/2
[r2-GigabitEthernet0/0/2]port link-type trunk
[r2-GigabitEthernet0/0/2]port trunk allow-pass vlan all
[r2-GigabitEthernet0/0/2]int gi 0/0/1
[r2-GigabitEthernet0/0/1]port link-type trunk
[r2-GigabitEthernet0/0/1]port trunk allow-pass vlan all

[r3]int e 0/0/1
[r3-Ethernet0/0/1]port hybrid pvid vlan 4
[r3-Ethernet0/0/1]port hybrid untagged vlan 3 4
[r3-Ethernet0/0/1]int e 0/0/2
[r3-Ethernet0/0/2]port hybrid pvid vlan 5
[r3-Ethernet0/0/2]port hybrid untagged vlan 3 5
[r3-Ethernet0/0/2]int gi 0/0/1
[r3-GigabitEthernet0/0/1]port link-type trunk
[r3-GigabitEthernet0/0/1]port trunk allow-pass vlan all

二、进行路由器DHCP的配置

[s1-GigabitEthernet0/0/1]port hybrid tagged vlan 2 当vlan2访问时带着标签
[s1-GigabitEthernet0/0/1]port hybrid untagged vlan 3 to 5 当vlan 3 4 5 访问时脱掉标签

[e1]int gi 0/0/0
[e1-GigabitEthernet0/0/0]ip add 192.168.2.1 24
[e1-GigabitEthernet0/0/0]int gi 0/0/0.1
[e1-GigabitEthernet0/0/0.1]dot1q termination vid 2
[e1-GigabitEthernet0/0/0.1]ip add 192.168.1.1 24
[e1-GigabitEthernet0/0/0.1]arp broadcast enable
[e1]ip pool a
[e1-ip-pool-a]network 192.168.1.0 ma 24
[e1-ip-pool-a]gateway-list 192.168.1.1
[e1]ip pool b
[e1-ip-pool-b]network 192.168.2.0 mask 24
[e1-ip-pool-b]gateway-list 192.168.2.1
[e1]int gi 0/0/0
[e1-GigabitEthernet0/0/0]dhcp select global
[e1-GigabitEthernet0/0/0]int gi 0/0/0.1
[e1-GigabitEthernet0/0/0.1]dhcp select global
三、测试