华为实验2
大家好
今天的实验是配置
primary VLAN
和
secondary VLAN
主附
vlan
一般用于一个网络段的情况，主
vlan
和子
vlan
间可以访问，
而子
vlan
之间是不能访问的。就比如说
总经理所在的
vlan
可以访问任何部门的
vlan
而部门之间却不能互相访问。
具体实验步骤如下：
SW1
：
<Quidway>sys
Enter system view, return to user view with Ctrl+Z.
[Quidway]sysname dongli
[dongli]super password dongli
[dongli]user int vty 0 4
[dongli-ui-vty0-4]authentication-mode password
[dongli-ui-vty0-4]set authentication-mode password sim 222
[dongli-ui-vty0-4]user privilege 3
[dongli-ui-vty0-4]quit
[dongli]vlan 2
[dongli-vlan2]port e0/3
[dongli-vlan2]vlan 3
[dongli-vlan3]port e0/6
[dongli-vlan3]vlan 4
[dongli-vlan4]port e0/8
[dongli-vlan4]quit
[dongli]vlan 4
[dongli-vlan4]vlan 2
[dongli-vlan2]isolate-user-vlan enable
―――――――设为主
vlan
[dongli-vlan2]
[dongli-vlan2]quit
[dongli]isolate-user-vlan 2 secondary 3,4
――――――――――设
vlan3
，
4
为辅
vlan
[dongli]int e0/1
[dongli-Ethernet0/1]port link-type trunk
[dongli-Ethernet0/1]port trunk permit vlan all
[dongli-Ethernet0/1]quit
[dongli]
SW2
：
<Quidway>sys
Enter system view, return to user view with Ctrl+Z.
[Quidway]vlan 2
[Quidway-vlan2]port e0/3
[Quidway-vlan2]vlan 3
[Quidway-vlan3]port e0/6
[Quidway-vlan3]vlan 4
[Quidway-vlan4]port e0/8
[Quidway-vlan4]quit
[Quidway]vlan 2
[Quidway-vlan2]isolate-user-vlan enable
[Quidway-vlan2]quit
[Quidway]isolate-user-vlan 2 secondary 3,4
[Quidway]quit
<Quidway>sys
Enter system view, return to user view with Ctrl+Z.
[Quidway]int e0/1
[Quidway-Ethernet0/1]port link-type trunk
[Quidway-Ethernet0/1]port trunk permit vlan all
[Quidway-Ethernet0/1]quit
[Quidway]
PC1 192.168.1.1 PC2 192.168.1.2 PC3 192.168.1.3 PC4 192.168.1.4 PC5 192.168.1.5 PC6 192.168.1.6
实验结果：
PC1
：
root@PCA root]# ifconfig eth0 192.168.1.1 netmask 255.255.255.0
[root@PCA root]# ping 192.168.1.2
64 bytes from 192.168.1.1: icmp_seq=1 ttl=128 time=0.207 ms
64 bytes from 192.168.1.1: icmp_seq=1 ttl=128 time=0.100 ms
64 bytes from 192.168.1.1: icmp_seq=1 ttl=128 time=0.96 ms
64 bytes from 192.168.1.1: icmp_seq=1 ttl=128 time=0.96 ms
4packets transmitted, 4 received, 0% loss, time 2000ms
PC2
：
root@PCB root]# ifconfig eth0 192.168.1.2 netmask 255.255.255.0
[root@PCB root]# ping 192.168.1.1
64 bytes from 192.168.1.2: icmp_seq=1 ttl=128 time=0.207 ms
64 bytes from 192.168.1.2: icmp_seq=1 ttl=128 time=0.100 ms
64 bytes from 192.168.1.2: icmp_seq=1 ttl=128 time=0.96 ms
64 bytes from 192.168.1.2: icmp_seq=1 ttl=128 time=0.96 ms
4packets transmitted, 4 received, 0% loss, time 2000ms
[root@PCB root]# ping 192.168.1.3
From 192.168.1.2 icmp_seq=1 Destination Host Unreachable
From 192.168.1.2 icmp_seq=1 Destination Host Unreachable
From 192.168.1.2 icmp_seq=1 Destination Host Unreachable
From 192.168.1.2 icmp_seq=1 Destination Host Unreachable
4packets transmitted, 0 received, 100% loss, time 2000ms
[root@PCB root]#
实验成功
今天就讲到着
有不明白的请加
768865545
飘云
支持华为
！！！！！！！！！！！！！！！！！！！！！！！
本文出自 “nfs_dongli的博客” 博客，请务必保留此出处http://hackerdl.blog.51cto.com/867412/236155