HCIP第十五天实验（VLAN）

一、三台交换机上创建vlan

LSW1

[LSW1]vlan batch 2 to 5

LSW2

[LSW2]vlan batch 2 to 5

LSW3

[LSW3]vlan batch 2 to 5

二、接口划分vlan（pc1/3使用avvess模式，pc2/4/5/6使用hybrid）

LSW1

[LSW1]int g0/0/1
[LSW1-GigabitEthernet0/0/1]port link-type access
[LSW1-GigabitEthernet0/0/1]port default vlan 2
[LSW1-GigabitEthernet0/0/1]int g0/0/2
[LSW1-GigabitEthernet0/0/2]port hybrid pvid vlan 3
[LSW1-GigabitEthernet0/0/2]port hybrid untagged vlan 2 to 5

LSW2

[LSW2]int g0/0/1
[LSW2-GigabitEthernet0/0/1]port link-type access
[LSW2-GigabitEthernet0/0/1]port default vlan 2
[LSW2-GigabitEthernet0/0/1]int g0/0/2
[LSW2-GigabitEthernet0/0/2]port hybrid pvid vlan 4
[LSW2-GigabitEthernet0/0/2]port hybrid untagged vlan 2 to 4

LSW3

[LSW3]int g0/0/1
[LSW3-GigabitEthernet0/0/1]port hybrid pvid vlan 4
[LSW3-GigabitEthernet0/0/1]port hybrid untagged vlan 2 to 4
[LSW3-GigabitEthernet0/0/1]int g0/0/2
[LSW3-GigabitEthernet0/0/2]port hybrid pvid vlan 5
[LSW3-GigabitEthernet0/0/2]port hybrid untagged vlan 2 3 5

三、trunk干道(三台交换机中间的干道链路全部trunk,允许所有vlan通过)

LSW1

[LSW1-GigabitEthernet0/0/2]int g0/0/3
[LSW1-GigabitEthernet0/0/3]port link-type trunk
[LSW1-GigabitEthernet0/0/3]port trunk allow-pass vlan all

LSW2

[LSW2-GigabitEthernet0/0/2]int g0/0/3
[LSW2-GigabitEthernet0/0/3]port link-type trunk
[LSW2-GigabitEthernet0/0/3]port trunk allow-pass vlan all
[LSW2-GigabitEthernet0/0/3]int g0/0/4
[LSW2-GigabitEthernet0/0/4]port link-type trunk
[LSW2-GigabitEthernet0/0/4]port trunk allow-pass vlan all

LSW3

[LSW3-GigabitEthernet0/0/2]int g0/0/3
[LSW3-GigabitEthernet0/0/3]port link-type trunk
[LSW3-GigabitEthernet0/0/3]port trunk allow-pass vlan all

四、vlan间路由器（单臂路由——子接口——交换机连接路由器的交换机LSW1接口0/0/4设置hybird模式，允许vlan2携带标签转发，vlan3/4/5剥离标签转发）

LSW1

[LSW1-GigabitEthernet0/0/3]int g0/0/4
[LSW1-GigabitEthernet0/0/4]port hybrid untagged vlan 3 to 5
[LSW1-GigabitEthernet0/0/4]port hybrid tagged vlan 2

R1

[r1]int g0/0/0
[r1-GigabitEthernet0/0/0]ip ad 192.168.1.1 24
[r1-GigabitEthernet0/0/0]
[r1-GigabitEthernet0/0/0]int g0/0/0.1
[r1-GigabitEthernet0/0/0.1]dot ter vid 2
[r1-GigabitEthernet0/0/0.1]ip ad 192.168.2.1 24
[r1-GigabitEthernet0/0/0.1]arp broadcast enable
[r1-GigabitEthernet0/0/0.1]dhcp enable
Info: The operation may take a few seconds. Please wait for a moment.done.
[r1]ip pool a
Info: It's successful to create an IP address pool.
[r1-ip-pool-a]network 192.168.1.0 mask 24
[r1-ip-pool-a]gateway-list 192.168.1.1
[r1-ip-pool-a]dns-list 114.114.114.114 8.8.8.8
[r1-ip-pool-a]q
[r1]ip pool b
Info: It's successful to create an IP address pool.
[r1-ip-pool-b]network 192.168.2.0 mask 24
[r1-ip-pool-b]gateway-list 192.168.2.1
[r1-ip-pool-b]dns-list 114.114.114.114 8.8.8.8
[r1-ip-pool-b]q
[r1]int g0/0/0
[r1-GigabitEthernet0/0/0]dncp select global

五、实验验证

1、通过dis port vlan active查看三台交换机的link type(默认为hybird)、pvid（默认为1）、vlan list允许列表（pc端发送和接收不带标签的流量，U=untagged不携带标签，T=tagged携带标签）

LSW1

LSW2

LSW3

2、pc1/2/3/4/5/6都通过dhcp服务获取到地址，并且在pc1/3在192.168.2.0/24网段，pc2/4/5/6在192.168.1.0/24网段，验证情况如下：

3、验证①pc1可以ping通全网，②pc2可以ping通pc6, ③pc4/5不能ping通pc6

①

②

③