实验需求
实验拓扑
实验分析
1、pc1/3与pc2/4/5/6不在一个网段,可以配置两个池塘,pc1/3-->192.168.1.0/24,在R1接口上分配地址,pc2/4/5/6-->192.168.2.0/24,在R1子接口分配地址
2、pc1/3能ping通所有,为vlan2,pc2可以ping通PC4/5/6,为vlan3,Pc4可以ping通PC5,但不能ping通PC6,pc3/5为vlan4,pc6单独为vlan5
3、在sw1与路由器接口上,vlan2去子接口分配地址,其余的撕掉标签,到接口分配地址
配置内容
1、在路由器上配置单臂路由
[Huawei]sys r1
[r1]dhcp enable //先开启dhcp服务
[r1]int g0/0/0
[r1-GigabitEthernet0/0/0]ip add 192.168.2.1 24
[r1-GigabitEthernet0/0/0]dhcp select global //在接口上dhcp服务开启
[r1]int g0/0/0.1
[r1-GigabitEthernet0/0/0.1]dot1q termination vid 2
[r1-GigabitEthernet0/0/0.1]ip address 192.168.1.1 24
[r1-GigabitEthernet0/0/0.1]arp broadcast enable[r1-GigabitEthernet0/0/0.1]dhcp select global
2、配置dhcp池塘
[r1]ip pool v2 //池塘v2
[r1-ip-pool-v2]gateway-list 192.168.1.1 //网关
[r1-ip-pool-v2]network 192.168.1.0 mask 24 //池塘范围
[r1-ip-pool-v2]dns-list 8.8.8.8 114.114.114.114 //dns
[r1]ip pool v3 //池塘v3
[r1-ip-pool-v3]gateway-list 192.168.2.1
[r1-ip-pool-v3]network 192.168.2.0 mask 24
[r1-ip-pool-v3]dns-list 8.8.8.8 114.114.114.114还需在sw1的e0/0/4配置
[sw1-Ethernet0/0/4]port hybrid tagged vlan 2
[sw1-Ethernet0/0/4]port hybrid untagged vlan 3 to 5 //撕掉vlan3、4、5
3、配置vlan
sw1
在sw1创建vlan,并修改接口类型
[sw1]vlan batch 2 to 5
[sw1]int e0/0/1
[sw1-Ethernet0/0/1]port link-type access
[sw1-Ethernet0/0/1]port default vlan 2在sw1的e0/0/2接口配置
[sw1]int e0/0/2
[sw1-Ethernet0/0/2]port hybrid pvid vlan 3
[sw1-Ethernet0/0/2]port hybrid untagged vlan 3 to 5sw1和sw2之间做trunk干道
[sw1]int e0/0/3
[sw1-Ethernet0/0/3]port link-type trunk
[sw1-Ethernet0/0/3]port trunk allow-pass vlan 2 to 5[sw2]int e0/0/1
[sw2-Ethernet0/0/1]port link-type trunk
[sw2-Ethernet0/0/1]port trunk allow-pass vlan 2 to 5
sw2
sw2创建vlan并修改接口类型
[sw2]vlan batch 2 to 5
[sw2-Ethernet0/0/3]port link-type access
[sw2-Ethernet0/0/3]port default vlan 2
[sw2-Ethernet0/0/4]port hybrid pvid vlan 4
[sw2-Ethernet0/0/4]port hybrid untagged vlan 3 to 4 //允许vlan3和4sw2和sw3之间做trunk干道
[sw2]int e0/0/2
[sw2-Ethernet0/0/2]port link-type trunk
[sw2-Ethernet0/0/2]port trunk allow-pass vlan 2 to 5[sw3]int e0/0/1
[sw3-Ethernet0/0/1]port li t
[sw3-Ethernet0/0/1]port trunk allow-pass vlan 2 to 5
sw3
sw3创建vlan
[sw3]vlan batch 2 to 5
[sw3]int e0/0/2
[sw3-Ethernet0/0/2]port hybrid pvid vlan 4
[sw3-Ethernet0/0/2]port hybrid untagged vlan 3 to 4 //允许vlan3和4[sw3]int e0/0/3
[sw3-Ethernet0/0/3]port hybrid pvid vlan 5
[sw3-Ethernet0/0/3]port hybrid untagged vlan 3 5 //允许vlan3、4、5
测试
PC1pingPC2、3、4、5、6
其他都可通
RC3pingPC2、4、5、6
其他都可通
PC2pingPC4,、5、6
PC4pingPC5、6
PC5pingPC6