首先来说说vlan,它可以称为虚拟局域网 ,逻辑的将一个广播域切分为多个。需要在交换机上配置vlan,(使用的是华为的设备 “ensp”)
[Huawei]interface Ethernet0/0/1 //首先进入接口
[Huawei-Ethernet0/0/1]port link-type access //然后将该接口定义为接入模式
[Huawei-Ethernet0/0/1]port default vlan 2 // 再降该接口划分到对于的vlan中
vlan的划分又3种:
[sw1]interface Eth0/0/1
[sw1-Ethernet0/0/1]port link-type ? 选择不同的接口类型,管理员将具备不同的配置权限
access Access port
hybrid Hybrid port
trunk Trunk port
access:只能允许一个vlan进或出;修改该接口的默认vlan;及修改了允许列表和PVID;
配置命令:
**[Huawei]interface Ethernet0/0/1
[Huawei-Ethernet0/0/1]port link-type access //将该接口定义为接入模式access
[Huawei-Ethernet0/0/1]port default vlan 2 // **
trunk :可以允许多个vlan进或出;也可以修改PVID;但不能修改字母,除PVID外的vlan,均字母为T;
配置命令:
[sw1]interface GigabitEthernet 0/0/1
[sw1-GigabitEthernet0/0/1]port link-type trunk //定义接口为trunk模式;
[sw1-GigabitEthernet0/0/1]port trunk allow-pass vlan 2 to 3
Hybrid:默认所有接口属于该类型 ,可以修改允许列表,可以修改PVID,可以修改字母。
配置命令:
[sw1]interface GigabitEthernet 0/0/1
[sw1-GigabitEthernet0/0/1]port link-type trunk //定义接口为trunk模式;
[sw1-Ethernet0/0/21]port hybrid tagged vlan 2 to 3
[sw1-Ethernet0/0/21]port hybrid untagged vlan 4 to 5
允许vlan2、3、4、5进或出;但2/3在出时携带vlan封装,4/5在出时不携带vlan封装;
[sw1-Ethernet0/0/21]port hybrid pvid vlan 2
修改PVID
题目要求是这样的,分析题目,pc1和pc3划到vlan2里面,pc2单独划到vlan3中,pc4和pc5划到vlan4里,pc5单独划到vlan5中。如图:
1.创建vlan
[sw1]vlan batch 2 3 4 5
[sw2]vlan batch 2 3 4 5
[sw3]vlan batch 2 3 4 5
Info: This operation may take a few seconds. Please wait for a moment...done.
2.交换机接口配置
首先pc1和pc3的接口为access
[sw1]interface GigabitEthernet 0/0/2
[sw1-GigabitEthernet0/0/2]port link-type access
[sw1-GigabitEthernet0/0/2]port default vlan 2
[sw2]interface GigabitEthernet 0/0/3
[sw2-GigabitEthernet0/0/3]port link-type access
[sw2-GigabitEthernet0/0/3]port default vlan 2
pc2可以访问pc4 5 6 ,pc1 3 可以访问pc2 4 5 6则pc2可以访问全部,并且在出去时不带封装,则去vlan 2 3 4 5
[sw1]interface GigabitEthernet 0/0/3
[sw1-GigabitEthernet0/0/3]port link-type hybrid
[sw1-GigabitEthernet0/0/3]port hybrid pvid vlan 3
[sw1-GigabitEthernet0/0/3]port hybrid untagged vlan 2 3 4 5
pc4可以访问pc1 2 3 5 不能访问6,则不去vlan5,
[sw2]interface GigabitEthernet 0/0/4
[sw2-GigabitEthernet0/0/4]port link-type hybrid
[sw2-GigabitEthernet0/0/4]port hybrid pvid vlan 4
[sw2-GigabitEthernet0/0/4]port hybrid untagged vlan 2 3 4
pc1 2 3 4之间是互通的,所以sw1和sw2之间也之间可以写trunk,则
[sw1]interface GigabitEthernet 0/0/4
[sw1-GigabitEthernet0/0/4]port link-type trunk
[sw1-GigabitEthernet0/0/4]port trunk allow-pass vlan 2 3 4 5
[sw2]interface GigabitEthernet 0/0/1
[sw2-GigabitEthernet0/0/1]port link-type trunk
[sw2-GigabitEthernet0/0/1]port trunk allow-pass vlan 2 3 4 5
pc5不能访问pc6,则不去vlan5
[sw3]interface GigabitEthernet 0/0/2
[sw3-GigabitEthernet0/0/2]port link-type hybrid
[sw3-GigabitEthernet0/0/2]port hybrid pvid vlan 4
[sw3-GigabitEthernet0/0/2]port hybrid untagged vlan 2 3 4
pc6不访问pc4 和5,则不去vlan4,
[sw3]interface GigabitEthernet 0/0/3
[sw3-GigabitEthernet0/0/1]port link-type hybrid
[sw3-GigabitEthernet0/0/1]port hybrid pvid vlan 5
[sw3-GigabitEthernet0/0/1]port hybrid untagged vlan 2 3 5
sw2和sw3之间只能用hybird,
[sw2]interface GigabitEthernet 0/0/2
[sw2-GigabitEthernet0/0/2]port link-type hybrid
[sw2-GigabitEthernet0/0/2]port hybrid tagged vlan 2 3 4 5
[sw3]interface GigabitEthernet 0/0/1
[sw3-GigabitEthernet0/0/2]port link-type hybrid
[sw3-GigabitEthernet0/0/2]port hybrid tagged vlan 2 3 4 5
sw1和r1之间,给vlan2打标签,vlan3 4 5不打标签,
[sw1]interface GigabitEthernet 0/0/1
[sw1-GigabitEthernet0/0/1]port link-type hybrid
[sw1-GigabitEthernet0/0/1]port hybrid tagged vlan 2
[sw1-GigabitEthernet0/0/1]port hybrid untagged vlan 3 4 5
3.路由器的配置
因为pc2 4 5 6 是一个网段,pc1 3 是一个网段,所以创建子接口0/0/0.1和原接口0/0/0,2个网段,172.16.2.1/24和172.16.3.1/24分别给2个网段,并dhcp获取地址,则
[r1]interface GigabitEthernet 0/0/0.1
[r1-GigabitEthernet0/0/0.1]dot1q termination vid 2
[r1-GigabitEthernet0/0/0.1]ip address 172.16.2.1 24
[r1]interface GigabitEthernet 0/0/0
[r1-GigabitEthernet0/0/0]ip address 172.16.3.1 24
[r1]dhcp enable
Info: The operation may take a few seconds. Please wait for a moment.done.
[r1]ip pool 1
Info: It's successful to create an IP address pool.
[r1-ip-pool-1]network 172.16.2.0 mask 255.255.255.0
[r1-ip-pool-1]gateway-list 172.16.2.1
[r1-ip-pool-1]dns-list 114.114.114.114
[r1]ip pool 2
Info: It's successful to create an IP address pool.
[r1-ip-pool-2]network 172.16.3.0 mask 255.255.255.0
[r1-ip-pool-2]gateway-list 172.16.3.1
[r1-ip-pool-2]dns-list 114.114.114.114
[r1]interface GigabitEthernet 0/0/0.1
[r1-GigabitEthernet0/0/0.1]dhcp select global
[r1]interface GigabitEthernet 0/0/0
[r1-GigabitEthernet0/0/0]dhcp select global
dhcp完成后给子接口一个arp服务,
[r1]interface GigabitEthernet 0/0/0.1
[r1-GigabitEthernet0/0/0.1]arp broadcast enable
然后给pc开启DHCP服务,用ipconfig命令获取IPv4地址,测试就ok了。