VALN-hybrid模式

实验拓扑及要求

一、实验思路

1.R1-R3按要求配置，R2不划分vlan使其全部都可以访问

2.交换机和路由器的交换机直连接口设为hybrid模式且R4-R6不带vlan标签访问路由器

3.交换机和交换机的两个直连接口设为hybrid模式且只允许R4-R6所在vlan标签通过

4.R4-R6只允许其所在vlan标签和不带vlan标签通过

5.在路由器上划分子接口及配置地址池

二、实操

1.R1-R3按要求配置，R2不划分vlan使其全部都可以访问

[lsw1]vlan batch 2 4 5 6

[lsw1]vlan batch 2 4 5 6

[lsw1]vlan batch 2 4 5 6
[lsw1]int e0/0/1
[lsw1-Ethernet0/0/1]port link-type access
[lsw1-Ethernet0/0/1]port default vlan 2
[lsw1-Ethernet0/0/1]int e0/0/3
[lsw1-Ethernet0/0/3]port link-type access
[lsw1-Ethernet0/0/3]port default vlan 2

2.交换机和路由器的交换机直连接口设为hybrid模式且R4-R6不带vlan标签访问路由器

[lsw1]int e0/0/6  
[lsw1-Ethernet0/0/6]port hybrid untagged vlan 4 to 6

3.交换机和交换机的两个直连接口设为hybrid模式且只允许R4-R6所在vlan标签通过

[lsw1]int e0/0/5 
[lsw1-Ethernet0/0/5]port hybrid tagged vlan 4 to 6

4.R4-R6只允许其所在vlan标签和vlan1通过

[lsw1-Ethernet0/0/3]int e0/0/4
[lsw1-Ethernet0/0/4]port hybrid pvid vlan 4
[lsw1-Ethernet0/0/4]port hybrid tagged vlan 4

[lsw2]int e0/0/3   
[lsw2-Ethernet0/0/3]port hybrid tagged vlan 4 to 6

[lsw2-Ethernet0/0/3]int e0/0/1
[lsw2-Ethernet0/0/1]port hybrid pvid vlan 5
[lsw2-Ethernet0/0/1]port hybrid tagged vlan 5

[lsw2-Ethernet0/0/1]int e0/0/2
[lsw2-Ethernet0/0/2]port hybrid pvid vlan 6
[lsw2-Ethernet0/0/2]port hybrid tagged vlan 6

5.在路由器上划分子接口及配置地址池

[r1]vlan batch 2
[r1]int g0/0/0.1
[r1-GigabitEthernet0/0/0.1]dot1q termination vid 2
[r1-GigabitEthernet0/0/0.1]ip add 192.168.1.1 24
[r1-GigabitEthernet0/0/0.1]arp broadcast enable
[r1-GigabitEthernet0/0/0.1]int g0/0/0
[r1-GigabitEthernet0/0/0]ip add 192.168.2.1 24
[r1-GigabitEthernet0/0/0]q  
[r1]dhcp enable 
[r1]ip pool dhcp1    
[r1-ip-pool-dhcp1]network 192.168.2.0 mask 24 
[r1-ip-pool-dhcp1]gateway-list 192.168.2.1
[r1-ip-pool-dhcp1]q
[r1]ip pool vlan2
[r1-ip-pool-vlan2]network 192.168.1.0 mask 24
[r1-ip-pool-vlan2]gateway-list 192.168.1.1
[r1-ip-pool-vlan2]q
[r1]int g0/0/0
[r1-GigabitEthernet0/0/0]dhcp select global 
[r1-GigabitEthernet0/0/0]int g0/0/0.1
[r1-GigabitEthernet0/0/0.1]dhcp select global

三、检验

1.查看PCIP地址

2.ping

R1、R3可以访问所有

R1可以访问所有

R2可以访问所有

R2

R4 不能访问R5、R6 

R5不能访问R6