实验拓补图
实验分析
一、实验目的
- 掌握VLAN的创建和配置方法
- 理解VLAN在局域网中的作用
- 学习如何通过VLAN实现网络隔离和通信
二、实验环境
- 交换机（SW1、SW2、SW3）
- 个人电脑（PC1、PC2、PC3、PC4、PC5、PC6）
- 路由器（R1）
- 网络连接线
四、实验需求
- PC1和PC3所在接口为access接口，属于VLAN 2
- PC2/4/5/6处于同一网段，其中PC2可以访问PC4/5/6，PC4可以访问PC5不能访问PC6，PC5不能访问PC6
- PC1/3和PC2/4/5/6不在一个网段，且可以正常通讯
- 所有PC通过DHCP获取IP地址，且PC1/3可以正常访问PC2/4/5/6
五、实验步骤和配置
-
创建VLAN
- 在SW1、SW2、SW3上创建VLAN 2、3、4、5、6
-
配置接口
- SW1、SW2、SW3的接口配置如下：
- PC1和PC3的接口配置为access接口，属于VLAN 2
- PC2、PC4、PC5、PC6的接口配置为hybrid接口，分别属于VLAN 3、4、5、6
- SW1、SW2、SW3的接口配置如下：
-
配置DHCP服务
- 在R1上配置DHCP服务，创建两个地址池，分别为PC1/3和PC2/4/5/6分配IP地址
-
测试连通性
- 测试PC1、PC3可以正常访问PC2、PC4、PC5、PC6
- 测试PC2可以访问PC4、PC5、PC6
- 测试PC4可以访问PC5，不能访问PC6
- 测试PC5不能访问PC6
六、实验结果
- 所有PC均通过DHCP获取到IP地址
- PC1、PC3可以正常访问PC2、PC4、PC5、PC6
- PC2可以访问PC4、PC5、PC6
- PC4可以访问PC5，不能访问PC6
- PC5不能访问PC6
具体操作
1.建立拓补图
2.修改PC1-6获取IP方式
3.LS1配置
<Huawei>system-view
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname LS1
[LS1]vlan batch 2 to 6
Info: This operation may take a few seconds. Please wait for a moment...done.
[LS1]interface GigabitEthernet 0/0/1
[LS1-GigabitEthernet0/0/1]port link-type access
[LS1-GigabitEthernet0/0/1]port default vlan 2
[LS1]interface GigabitEthernet 0/0/2
[LS1-GigabitEthernet0/0/2]port hybrid pvid vlan 3
[LS1-GigabitEthernet0/0/2]port hybrid untagged vlan 3 to 6
[LS1]interface GigabitEthernet 0/0/3
[LS1-GigabitEthernet0/0/3]port link-type trunk
[LS1-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 to 6
[LS1]interface GigabitEthernet 0/0/4
[LS1-GigabitEthernet0/0/4]port hybrid pvid vlan 1
[LS1-GigabitEthernet0/0/4]port hybrid untagged vlan 3 to 6
[LS1-GigabitEthernet0/0/4]port hybrid tagged vlan 2检查配置
<LS1>display port vlan active
T=TAG U=UNTAG
-------------------------------------------------------------------------------
Port Link Type PVID VLAN List
-------------------------------------------------------------------------------
GE0/0/1 access 2 U: 2
GE0/0/2 hybrid 3 U: 1 3 to 6
GE0/0/3 trunk 1 U: 1T: 2 to 6
GE0/0/4 hybrid 1 U: 1 3 to 6T: 2
4.LSW2配置
<Huawei>system-view
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname LSW2
[LSW2]vlan batch 2 to 6
Info: This operation may take a few seconds. Please wait for a moment...done.
[LSW2]interface GigabitEthernet 0/0/1
[LSW2-GigabitEthernet0/0/1]port link-type access
[LSW2-GigabitEthernet0/0/1]port default vlan 2
[LSW2]interface GigabitEthernet 0/0/2
[LSW2-GigabitEthernet0/0/2]port hybrid pvid vlan 4
[LSW2-GigabitEthernet0/0/2]port hybrid untagged vlan 3 to 6
[LSW2]interface GigabitEthernet 0/0/3
[LSW2-GigabitEthernet0/0/3]port link-type trunk
[LSW2-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 to 6
[LSW2]interface GigabitEthernet 0/0/4
[LSW2-GigabitEthernet0/0/4]port link-type trunk
[LSW2-GigabitEthernet0/0/4]port trunk allow-pass vlan 2 to 6检查配置
<LSW2>display port vlan active
T=TAG U=UNTAG
-------------------------------------------------------------------------------
Port Link Type PVID VLAN List
-------------------------------------------------------------------------------
GE0/0/1 access 2 U: 2
GE0/0/2 hybrid 4 U: 1 3 to 6
GE0/0/3 trunk 1 U: 1T: 2 to 6
GE0/0/4 trunk 1 U: 1T: 2 to 6
5.LSW3配置
<Huawei>system-view
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname LSW3
[LSW3]vlan batch 2 to 6
Info: This operation may take a few seconds. Please wait for a moment...done.
[LSW3]interface GigabitEthernet 0/0/1
[LSW3-GigabitEthernet0/0/1]port hybrid pvid vlan 5
[LSW3-GigabitEthernet0/0/1]port hybrid untagged vlan 3 to 5
[LSW3]interface GigabitEthernet 0/0/2
[LSW3-GigabitEthernet0/0/2]port hybrid pvid vlan 6
[LSW3-GigabitEthernet0/0/2]port hybrid untagged vlan 3 4 6
[LSW3]interface GigabitEthernet 0/0/3
[LSW3-GigabitEthernet0/0/3]port link-type trunk
[LSW3-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 to 6检查配置
<LSW3>display port vlan active
T=TAG U=UNTAG
-------------------------------------------------------------------------------
Port Link Type PVID VLAN List
-------------------------------------------------------------------------------
GE0/0/1 hybrid 5 U: 1 3 to 5
GE0/0/2 hybrid 6 U: 1 3 to 4 6
GE0/0/3 trunk 1 U: 1T: 2 to 6
GE0/0/4 hybrid 1 U: 1
6.R1配置
<Huawei>system-view
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname R1
[R1]interface GigabitEthernet 0/0/0
[R1-GigabitEthernet0/0/0]ip address 192.168.1.1 24
[R1]interface GigabitEthernet 0/0/0.1
[R1-GigabitEthernet0/0/0.1]ip address 192.168.2.1 24
[R1-GigabitEthernet0/0/0.1]dot1q termination vid 2
[R1-GigabitEthernet0/0/0.1]arp broadcast enable
[R1]display ip interface brief
*down: administratively down
!down: FIB overload down
^down: standby
(l): loopback
(s): spoofing
(d): Dampening Suppressed
The number of interface that is UP in Physical is 3
The number of interface that is DOWN in Physical is 9
The number of interface that is UP in Protocol is 3
The number of interface that is DOWN in Protocol is 9Interface IP Address/Mask Physical Protocol
Ethernet0/0/0 unassigned down down
Ethernet0/0/1 unassigned down down
GigabitEthernet0/0/0 192.168.1.1/24 up up
GigabitEthernet0/0/0.1 192.168.2.1/24 up up
GigabitEthernet0/0/1 unassigned down down
GigabitEthernet0/0/2 unassigned down down
GigabitEthernet0/0/3 unassigned down down
NULL0 unassigned up up(s)
[R1]dhcp enable
Info: The operation may take a few seconds. Please wait for a moment.done.
[R1]ip pool a
Info:It's successful to create an IP address pool.
[R1-ip-pool-a]network 192.168.1.0 mask 24
[R1-ip-pool-a]gateway-list 192.168.1.1
[R1-ip-pool-a]dns-list 8.8.8.8
[R1]interface GigabitEthernet 0/0/0
[R1-GigabitEthernet0/0/0]dhcp select global
[R1]ip pool b
Info:It's successful to create an IP address pool.
[R1-ip-pool-b]network 192.168.2.0 mask 24
[R1-ip-pool-b]gateway-list 192.168.2.1
[R1-ip-pool-b]dns-list 8.8.8.8
[R1]interface GigabitEthernet 0/0/0.1
[R1-GigabitEthernet0/0/0.1]dhcp select global查询PC端IP
PC1
PC2
PC3
PC4
PC5
PC6
测试
PC2访问PC4，5，6
ping PC4
ping PC5
ping PC6
PC4 ping PC6
PC5 ping PC6
PC1 访问PC2，4，5，6
ping PC2
ping PC4
ping PC5
ping PC6
PC3访问PC2，4，5，6
ping PC2
ping PC4
ping PC5
ping PC6
