基于MAC地址划分VLAN

实验环境：
1、当MAC地址为00-00-00-00-00-01的PC接入交换机时，将其划分为VLAN 10，且可以和VLAN 10的服务器通信
2、当MAC地址为00-00-00-00-00-02的PC接入交换机时，将其划分为VLAN 20，且可以和VLAN 20的服务器通信

SW1

system-view     //进入全局配置模式
[Huawei]undo info-center enable     //关闭信息告警提示
[Huawei]sysname SW1     //改名
[SW1]VLAN batch 10 20     //创建VLAN10和VLAN20
[SW1]interface g0/0/1     //进入接口
[SW1-GigabitEthernet0/0/1]port link-type trunk     //配置为trunk链路
[SW1-GigabitEthernet0/0/1]port trunk allow-pass vlan 10 20     //允许VLAN10和VLAN20通过
[SW1-GigabitEthernet0/0/1]quit     //退出
[SW1]

SW2

system-view     //进入全局配置模式 
[Huawei]undo info-center enable     //关闭信息告警提示 	
[Huawei]sysname SW2     //改名
[SW2]vlan batch 10 20     //创建VLAN10和VLAN20
[SW2]interface g0/0/2     //进入接口
[SW2-GigabitEthernet0/0/2]port link-type access     //配置为access链路 
[SW2-GigabitEthernet0/0/2]port default vlan 10     //允许VLAN10通过
[SW2-GigabitEthernet0/0/2]quit     //退出 
[SW2]interface g0/0/3     //进入接口
[SW2-GigabitEthernet0/0/3]port link-type access     //配置为access链路 
[SW2-GigabitEthernet0/0/3]port default vlan 20     //允许VLAN20通过
[SW2-GigabitEthernet0/0/3]quit     //退出
[SW2]interface g0/0/1     //进入接口	
[SW2-GigabitEthernet0/0/1]port link-type trunk     //配置为trunk链路 
[SW2-GigabitEthernet0/0/1]port trunk allow-pass vlan 10 20     //允许VLAN10和VLAN20通过
[SW2-GigabitEthernet0/0/1]quit     //退出
[SW2]

SW1

[SW1]vlan 10     //进入VLAN10                           
[SW1-vlan10]mac-vlan mac-address 0000-0000-0001     //绑定MAC地址
[SW1-vlan10]quit     /退出
[SW1]vlan 20     //进入VLAN20
[SW1-vlan20]mac-vlan mac-address 0000-0000-0002     //绑定MAC地址
[SW1-vlan20]quit     //退出
[SW1]interface g0/0/2     //进入接口
[SW1-GigabitEthernet0/0/2]port hybrid untagged vlan 10 20     //配置混合接口
[SW1-GigabitEthernet0/0/2]mac-vlan enable     //启动基于MAC地址学习VLAN
[SW1-GigabitEthernet0/0/2]quit     //退出
[SW1]

SW1

[SW1]dis mac-address     //查看MAC地址信息
MAC address table of slot 0:
-------------------------------------------------------------------------------
MAC Address    VLAN/       PEVLAN CEVLAN Port            Type      LSP/LSR-ID  
               VSI/SI                                              MAC-Tunnel  
-------------------------------------------------------------------------------
0000-0000-0001 10          -      -      GE0/0/2         dynamic   0/-         
5489-9854-3767 10          -      -      GE0/0/1         dynamic   0/-         
0000-0000-0002 20          -      -      GE0/0/2         dynamic   0/-         
5489-984e-2d5a 20          -      -      GE0/0/1         dynamic   0/-         
-------------------------------------------------------------------------------
Total matching items on slot 0 displayed = 4 

[SW1]

PC1

PC>ping 192.168.10.10     //pingVLAN10的服务器

Ping 192.168.10.10: 32 data bytes, Press Ctrl_C to break    
From 192.168.10.10: bytes=32 seq=1 ttl=128 time=78 ms
From 192.168.10.10: bytes=32 seq=2 ttl=128 time=62 ms
From 192.168.10.10: bytes=32 seq=3 ttl=128 time=63 ms
From 192.168.10.10: bytes=32 seq=4 ttl=128 time=78 ms
From 192.168.10.10: bytes=32 seq=5 ttl=128 time=94 ms     //可以ping通

--- 192.168.10.10 ping statistics ---
  5 packet(s) transmitted
  5 packet(s) received
  0.00% packet loss
  round-trip min/avg/max = 62/75/94 ms

PC2

PC>ping 192.168.10.20     //pingVLAN20的服务器

Ping 192.168.10.20: 32 data bytes, Press Ctrl_C to break
From 192.168.10.20: bytes=32 seq=1 ttl=128 time=109 ms
From 192.168.10.20: bytes=32 seq=2 ttl=128 time=78 ms
From 192.168.10.20: bytes=32 seq=3 ttl=128 time=94 ms
From 192.168.10.20: bytes=32 seq=4 ttl=128 time=78 ms
From 192.168.10.20: bytes=32 seq=5 ttl=128 time=94 ms     //可以ping通

--- 192.168.10.20 ping statistics ---
  5 packet(s) transmitted
  5 packet(s) received
  0.00% packet loss
  round-trip min/avg/max = 78/90/109 ms